last executing test programs: 6m18.183767179s ago: executing program 32 (id=53): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f00000001c0)="e1", 0x1}], 0x1) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1b, &(0x7f0000000000)=0x1, 0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0xc2a80, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x5) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x800, 0x0, 0x2, 0x3, 0x0, 0x6}, 0x20) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, 0x0, 0x8844) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000440)={0x79, 0x0, 0xc32}) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r9, 0x6, 0x4, 0x0, &(0x7f0000000240)) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000140)={r8, 0x2, 0x6, 0x8}) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x2002, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',afid=0x0000000000000009,version=9p2000.u,privport,access=client,cache=loose,posixacl,cache=readahead,cache=loose,obj_user=rootmode,fowner>', @ANYRESDEC=r11, @ANYBLOB="2c95d063090062b869742cb7e4643e0000000000", @ANYRESDEC, @ANYBLOB=',smackfsdef=/dev/fuse\x00,pcr=00000000000000000034,obj_user=,\x00']) 4m1.206456784s ago: executing program 4 (id=2506): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000002030500000000000000000000000000080001000100000096ae"], 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x141a82, 0x33) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r4, 0x11a, 0x1, 0x0, &(0x7f0000000280)) write$cgroup_freezer_state(r3, &(0x7f00000001c0)='THAWED\x00', 0x7) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x14, 0x3, 0x3, 0x101}, 0x14}}, 0x0) madvise(&(0x7f0000b78000/0x2000)=nil, 0x2000, 0x64) socket$inet6_udp(0xa, 0x2, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x9000, &(0x7f0000000000)={0x100002, 0x1000f7, 0x40000}, 0x21) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_usb_connect(0x3, 0x24, &(0x7f0000000f80)=ANY=[], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000002d00)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="000355000000000000000000913c2d58cd2b0db108096ce1fb82a238434e07ea2e732bd56cb7bbc861027cf7641af15f586c9b0b72bac9913fc1dc71db700b1218bddfb4f2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_disconnect(r5) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x1, 0x6, 0x0, 0x500, 0x4, 0x540000}) ioctl$KVM_GET_TSC_KHZ_vm(0xffffffffffffffff, 0xaea3) close_range(r0, 0xffffffffffffffff, 0x0) 4m0.496809737s ago: executing program 4 (id=2513): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000085, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1c3a01, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x20, r1, 0x7fffffff, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x100a03) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = pidfd_getfd(r6, r6, 0x0) setns(r7, 0x66020000) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') 4m0.486391568s ago: executing program 4 (id=2514): read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getgroups(0x2, &(0x7f0000000140)=[0x0, r0]) setregid(0x0, r1) setresgid(r2, r1, r2) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x400001000001fe) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, 0x0) mmap(&(0x7f0000019000/0x2000)=nil, 0x2000, 0x3000001, 0x12, r3, 0xca639000) 4m0.420349929s ago: executing program 4 (id=2515): prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000865000/0x1000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/power/mem_sleep', 0x102, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, 0x0) sendfile(r1, r1, 0x0, 0x4) r3 = socket$pptp(0x18, 0x1, 0x2) accept(r3, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='stat\x00') lseek(r4, 0x10001, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) syz_usb_disconnect(0xffffffffffffffff) r5 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r6, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') syz_usb_control_io$printer(r5, &(0x7f0000000200)={0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="0021c6000000c62483590ee0625afca40aa2ef7182abc9142a54a2f743c174d189a010b502cde0c30de1d657a618fe028ff817bebef0efb61896d37b7135195e0dbc53065931cb49c2b5b706a22657820c047c560cdb426e3280d13dcd5e9a2e87f87b21e29723231d6a267b04e2e6c33bf259a6b58fbbcb11414a71f50b523333915d21842d80e51c7c81780c2c3684bc0143cddb6d3e77238fab17b4b3883cf4b9608307d19944474ed621e660a01cc73b8aea7d5a54720dccf56291c36ef1"], &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}}, &(0x7f0000000600)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="001476000000a21e06866c830c4edcd1bf3a4a232eefdbfd3545270b4009875699112d0db4a996d2f601177f3fc99b10bc21a560c4d04890457d4ad60203f8e1ba2e605b4015f8831b6115d7d7671234a6903c4f6a8d614f56b4fe6dc8b5e44065963d502c0911d9cfc4a746c4c5509094bc7fd35d0276709d46adaa108e68825020"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000640)=ANY=[@ANYBLOB="2000240000000022f0d087142eb4bb8617c4af9e088f3f20f82034be7159e3958dc1b5be9db28536cc3013ad548a7829c54aa93eb2306255"], &(0x7f0000000580)={0x20, 0x1, 0x1, 0x81}, &(0x7f00000005c0)={0x20, 0x0, 0x1, 0x1}}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) write$tcp_mem(r7, &(0x7f0000000300)={0xfffffffffffffffe, 0x20, 0x3, 0x20, 0x8}, 0x48) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) r9 = socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f00003ca000/0x1000)=nil, 0x1000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES8=r8, @ANYBLOB="0000080015"], 0x3e0}, 0x1, 0x0, 0x0, 0x2d1e8cf06f859b48}, 0x20010000) r10 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3bf, 0xc, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, 0x0) 3m59.740177342s ago: executing program 4 (id=2523): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) unshare(0x62040200) (async) unshare(0x62040200) syz_io_uring_setup(0x4e54, &(0x7f0000000000)={0x0, 0x226a, 0x2, 0x2, 0x2a2}, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x4) poll(&(0x7f0000000000)=[{r1, 0x202}], 0x1, 0x6) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x40, 0x22, 0x8}, 0x18) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000180)=@v1={0x0, @aes128, 0x0, @desc2}) (async) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000180)=@v1={0x0, @aes128, 0x0, @desc2}) bind$can_raw(r5, &(0x7f0000000040)={0x1d, r7}, 0x10) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, 0x0}}], 0x0, 0x0, 0x0}) 3m59.379622148s ago: executing program 4 (id=2527): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x14, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40046305, 0x5}], 0x0, 0x0, 0x0}) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@rdmsr={0x32, 0x18, {0x394}}, @cpuid={0x14, 0x18, {0x3, 0x96c}}, @cpuid={0x14, 0x18, {0x8, 0x3}}, @code={0xa, 0x59, {"652666450f73fc8eb90f0b0000b800000000ba000000000f30c421a173d803c46125616200f2450f070f4da86a790000b9e00800000f322e440f01c80fc7bab89655513e0f015ab4"}}, @cpuid={0x14, 0x18, {0x8, 0x3e}}, @rdmsr={0x32, 0x18, {0x225}}, @wr_crn={0x46, 0x20, {0x3, 0x6}}, @wrmsr={0x1e, 0x20, {0x1a2, 0x8}}, @wr_crn={0x46, 0x20, {0x4, 0xffffffffffffffff}}, @cpuid={0x14, 0x18, {0x8001, 0x4}}], 0x149}) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000040)={0x5, 0x3, 0x5}) 3m59.338784889s ago: executing program 33 (id=2527): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x14, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40046305, 0x5}], 0x0, 0x0, 0x0}) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@rdmsr={0x32, 0x18, {0x394}}, @cpuid={0x14, 0x18, {0x3, 0x96c}}, @cpuid={0x14, 0x18, {0x8, 0x3}}, @code={0xa, 0x59, {"652666450f73fc8eb90f0b0000b800000000ba000000000f30c421a173d803c46125616200f2450f070f4da86a790000b9e00800000f322e440f01c80fc7bab89655513e0f015ab4"}}, @cpuid={0x14, 0x18, {0x8, 0x3e}}, @rdmsr={0x32, 0x18, {0x225}}, @wr_crn={0x46, 0x20, {0x3, 0x6}}, @wrmsr={0x1e, 0x20, {0x1a2, 0x8}}, @wr_crn={0x46, 0x20, {0x4, 0xffffffffffffffff}}, @cpuid={0x14, 0x18, {0x8001, 0x4}}], 0x149}) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000040)={0x5, 0x3, 0x5}) 1m56.309050089s ago: executing program 0 (id=5068): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030076332564aa11f6bbf44d00000000008984", 0x39}], 0x1) 1m56.301265738s ago: executing program 0 (id=5071): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x40) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x5, 0x4, 0x3, 0x6, 0x4, 0x5, 0xfffffffffffffff6, 0x6, 0x8000000000000001, 0x2, 0xc, 0x1, 0x5bf259c8, 0xf315, 0x80000001, 0x1], 0x3000, 0x200000}) (async) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}}) (async) sendfile(r1, r0, 0x0, 0x100000000) 1m56.272812259s ago: executing program 0 (id=5073): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYRESHEX=r0], 0x20}}, 0x40100) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0xb, 0xfffffffc, 0x6, 0x5, 0xe, "5ba07f0100d9af2b000000034a7beda000"}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000000)=0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000f, 0x80, &(0x7f0000000240)={0x2, 0x18, 0xfffc, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYRESHEX=r0], 0x20}}, 0x40100) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0xb, 0xfffffffc, 0x6, 0x5, 0xe, "5ba07f0100d9af2b000000034a7beda000"}) (async) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x8001) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000000)=0x2) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) (async) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000f, 0x80, &(0x7f0000000240)={0x2, 0x18, 0xfffc, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 1m54.873374516s ago: executing program 0 (id=5076): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80000, 0x0) unshare(0x44000000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 1m54.851909736s ago: executing program 0 (id=5077): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000e80)={0x9c, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x2}, @release={0x40046306, 0x1}, @increfs={0x40046304, 0x3}, @increfs={0x40046304, 0x3}, @acquire, @free_buffer, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000c40)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @flat=@binder={0x73622a85, 0x101}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000cc0)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @free_buffer], 0x8b, 0x0, &(0x7f0000000dc0)="84c97fc9af327b7796974947ce0081bf4548d332bd04c8d0aa6eacec3edadbef824c1b4dc10a98cfe754b54645a64459281d05b6a0fc518e4d843cac449a684edc1002054efaa9b4bf96d4554793d6af1c3dd1d3acff7f9794bef57cae36851cc80f75065ad2980dd4f255e35377647bf613a94e6311ea129c9543dffd64d69592c35d1ef0856b2c24dd04"}) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x874, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000600)=0x6, 0x42) sendto$inet(r3, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) close_range(r2, 0xffffffffffffffff, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000b80)="18b0a48c6b9f423df0630fa01038845a1092d5d7477b3ca47676921e2f3e19324c9bc87c4261cac7d9132c3b69d93430bea14e8967ea8673ab55bf45cefff59b1da12c145d03", 0x46, 0x40814, &(0x7f0000000c00)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r5 = syz_usb_connect$uac1(0x0, 0xf5, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe3, 0x3, 0x1, 0x0, 0x10, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xd}, [@mixer_unit={0x6, 0x24, 0x4, 0x2, 0x2, '_'}, @processing_unit={0xb, 0x24, 0x7, 0x1, 0x5, 0x9, "0ec24be3"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x2fe, 0x5, 0x6, 0x7}, @processing_unit={0xc, 0x24, 0x7, 0x2, 0x1, 0x2, "d422965794"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x5f6, 0xe, 0x81, "d5d45368903aed9ce0"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x4, 0x6, 0x9, "", "db53"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0x8000, 0x2}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x6, 0x4, 0x3, 0x3, '?'}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x4, 0x4, 0x4, {0x7, 0x25, 0x1, 0x3, 0x8, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x1d, 0x7, 0xe, "e0"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x2, 0x7, "d5"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x2, 0x0, 0x9}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x4, 0x2a8, 0x20, "8e8f054d"}, @as_header={0x7, 0x24, 0x1, 0x8, 0xc0, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x5af, 0x5, 0x6, 0x9, {0x7, 0x25, 0x1, 0x82, 0x9, 0x4}}}}}}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x8, 0x7, 0xd, 0x8, 0x1}, 0x37, &(0x7f0000000040)={0x5, 0xf, 0x37, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x2, 0x7f, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "b03d7b32a99d778d6723e0819695946a"}, @ss_container_id={0x14, 0x10, 0x4, 0x96, "4103c01e2847cfa54c5dea8389b1ae21"}]}, 0x2, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x80a}}, {0xda, &(0x7f0000000440)=@string={0xda, 0x3, "d21ca34547651c64380585d023bee1e6ee7bbd904d2a6ea0ddfab3e200763c029233eb7b76a6bd7132a97fff49509b5cea93e26173e9f49698ea1fe2830248ca864cad29d3da61cc9a5683821ecd61d701e0161352f19136dcb9fe73b6616d4334a5060358d7a8d5db1645d8678b8f5f221ad43b592b18f624eb1640857964650335e012b06e013e275d4c25f75294bb4554bfecaad06f296a08b641965e9dda1a064f692ba3b252f9a2883a304438be741a54b15c898faa57598680cc028733495075e39a33c188c8d4033ade9b4f9bac88250a9d26f030"}}]}) syz_usb_control_io(r5, &(0x7f00000005c0)={0x2c, &(0x7f0000000240)={0x40, 0x24, 0x94, {0x94, 0xf, "126bc31b93079134771e62a02e2ce25b74ba59b40b89cf88204cfe21460921ce62e6c665589bace9753660927be731cd694342197bcec6fe11e3177d9fd79b9bd636cb98fa4b783d85141dd8eb6e6d12ba88b79610df44f29a8aefb96724359e3b2f585ef80fab3cb19ae0a5b9bc380867a68b31c573508c7479dbeafc8f53b2c0b738891b1f6ee7d2261c20f2d626641c2a"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x200a}}, &(0x7f00000001c0)={0x0, 0xf, 0xb, {0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}}, &(0x7f0000000540)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x1, 0x1, 0x8, "7dda256a", "ef679b7a"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x3, 0x80, 0x60, 0x5, 0x1, 0xffff}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000600)={0x0, 0x16, 0xc3, "85451aced240138ec5af9e5ed3e36ffc791128a838ee125831649f29b266bddebcbde67dc84571d1fd5cf230e20f98e696dd8ed40eb15110c01df13c14bab3dca172573f93ee7d85c475bedf1c709923bba0e10ae475ebb6f25c2e21f264ae1234425481b36bee09e9290eb1bcd55edcac8d965a892e03f4fa62cda349ab5a350e48fc90c0e26e2ccb2c4e82f9fffc09f1c1bdd88a646d18b4ee0d1cc2a3498ada890794c02e748bad52596248ccd9922580a664657a291a8ef9cf3bc43994255bcbbf"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x1}}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x87}, &(0x7f0000000880)={0x40, 0xb, 0x2, "ed1a"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0xc}, &(0x7f0000000900)={0x40, 0x13, 0x6, @local}, &(0x7f0000000940)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000980)={0x40, 0x19, 0x2, "2ed7"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0x9aae}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0x9}}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r6 = getpid() syz_pidfd_open(r6, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m54.728475469s ago: executing program 0 (id=5078): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f00000005c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x1, &(0x7f0000000980)=""/4096, 0x1000, 0x0, 0x1e}, @flat=@handle={0x73682a85, 0x1, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/194, 0xc2, 0x0, 0x1b}}, &(0x7f0000000040)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r3 = syz_pidfd_open(0x0, 0x0) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000001c80)) timer_create(0x0, 0x0, &(0x7f0000000140)) r4 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x8a, &(0x7f0000000140)=0x7, 0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) sendmsg$nl_xfrm(r4, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000001980)=@delpolicy={0x2f4, 0x14, 0x1, 0x70bd26, 0x25dfdbfc, {{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e24, 0x1, 0x4e22, 0xc, 0x2, 0x20, 0x20, 0x1d, 0x0, r5}, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd2d, 0x1c943a88}}, @algo_auth_trunc={0xea, 0x14, {{'sha256-ce\x00'}, 0x4f0, 0x100, "bba398caa3abf3c863c95984ed1021283a4a827dda4f161b65374385427df03765826e9858c07e4fa5f841350e65c81cd796c48235e3a0180706514b04eb1cb801a295cc53ffdc29a089e375bd5ec5fc7d5b83a8a1e90b86ead4492cf3a17f3322b5d905180e45fc04595ff4f33f65607d4cf7a1704f1139b85ea29edb0dc62bd39b5c43bdd7b0f15f4a286d538d4af6b6a038a5528d050bbda998371c55"}}, @sec_ctx={0xd1, 0x8, {0xcd, 0x8, 0x0, 0x2e, 0xc5, "7aee667f786170c88f17d87a9db56db8b8a439460b476bcf189702a7346409771631502ab048e6cf948ddc303f85b680ea8454e83e7ff1af4cc72ff66fc5b1ceeb937d55b56b35acaa9116f7a5c561fbdbb2de3958dde79e6e08725816a9dd0902c271d623417bd242598b5ca36093409ce198b971a986530f063d4be258b2ebd2c060d940ccd89915ceb4ec0251213a706bb5a2718fb4e6d5e0209c6c747d7a698be31f12f1e9e1d3a7e3a9130eab8c70354fcad34a49f81a7705f31dbfa9b2e1aa753675"}}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd28, 0x1000}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x1}, @algo_aead={0xa8, 0x12, {{'rfc7539(ecb(camellia),tgr160)\x00'}, 0x2e0, 0x100, "73e2f1e8f27cd3c1828df4808d1e25812aa98e92eb54a03a6b0a5c8a31e705e10adecd1c2790e8b6944b16ba3928a1e3e15932384b48cd1b5af28e61ff47611c1e04667f22d368208e4df1d4deae6d12722c9604ca16a4e92512fda6"}}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x1}, 0x810) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x3e, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180)) futex(&(0x7f0000000000), 0x0, 0x2, &(0x7f0000000300)={r1, r2+10000000}, &(0x7f00000004c0)=0x1, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8edc11615cb9fab16"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r6, r0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x54, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x23}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, 0x0}, 0x400}, @increfs={0x40046304, 0x80}], 0x50, 0x0, &(0x7f0000000500)="bcbc648bc9c07baf3789df6d877eac314ecc82d9c71ab1ecebefe99af20b4ab3cb820245a3692f3ac6a588df8de17d26b23105f63a0eeca6f09a8fe84b267ea7bd0e06c1f342a81542e35e27b0431c30"}) 1m54.728166359s ago: executing program 34 (id=5078): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f00000005c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x1, &(0x7f0000000980)=""/4096, 0x1000, 0x0, 0x1e}, @flat=@handle={0x73682a85, 0x1, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/194, 0xc2, 0x0, 0x1b}}, &(0x7f0000000040)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r3 = syz_pidfd_open(0x0, 0x0) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000001c80)) timer_create(0x0, 0x0, &(0x7f0000000140)) r4 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x8a, &(0x7f0000000140)=0x7, 0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) sendmsg$nl_xfrm(r4, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000001980)=@delpolicy={0x2f4, 0x14, 0x1, 0x70bd26, 0x25dfdbfc, {{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e24, 0x1, 0x4e22, 0xc, 0x2, 0x20, 0x20, 0x1d, 0x0, r5}, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd2d, 0x1c943a88}}, @algo_auth_trunc={0xea, 0x14, {{'sha256-ce\x00'}, 0x4f0, 0x100, "bba398caa3abf3c863c95984ed1021283a4a827dda4f161b65374385427df03765826e9858c07e4fa5f841350e65c81cd796c48235e3a0180706514b04eb1cb801a295cc53ffdc29a089e375bd5ec5fc7d5b83a8a1e90b86ead4492cf3a17f3322b5d905180e45fc04595ff4f33f65607d4cf7a1704f1139b85ea29edb0dc62bd39b5c43bdd7b0f15f4a286d538d4af6b6a038a5528d050bbda998371c55"}}, @sec_ctx={0xd1, 0x8, {0xcd, 0x8, 0x0, 0x2e, 0xc5, "7aee667f786170c88f17d87a9db56db8b8a439460b476bcf189702a7346409771631502ab048e6cf948ddc303f85b680ea8454e83e7ff1af4cc72ff66fc5b1ceeb937d55b56b35acaa9116f7a5c561fbdbb2de3958dde79e6e08725816a9dd0902c271d623417bd242598b5ca36093409ce198b971a986530f063d4be258b2ebd2c060d940ccd89915ceb4ec0251213a706bb5a2718fb4e6d5e0209c6c747d7a698be31f12f1e9e1d3a7e3a9130eab8c70354fcad34a49f81a7705f31dbfa9b2e1aa753675"}}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd28, 0x1000}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x1}, @algo_aead={0xa8, 0x12, {{'rfc7539(ecb(camellia),tgr160)\x00'}, 0x2e0, 0x100, "73e2f1e8f27cd3c1828df4808d1e25812aa98e92eb54a03a6b0a5c8a31e705e10adecd1c2790e8b6944b16ba3928a1e3e15932384b48cd1b5af28e61ff47611c1e04667f22d368208e4df1d4deae6d12722c9604ca16a4e92512fda6"}}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x1}, 0x810) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x3e, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180)) futex(&(0x7f0000000000), 0x0, 0x2, &(0x7f0000000300)={r1, r2+10000000}, &(0x7f00000004c0)=0x1, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8edc11615cb9fab16"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r6, r0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x54, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x23}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, 0x0}, 0x400}, @increfs={0x40046304, 0x80}], 0x50, 0x0, &(0x7f0000000500)="bcbc648bc9c07baf3789df6d877eac314ecc82d9c71ab1ecebefe99af20b4ab3cb820245a3692f3ac6a588df8de17d26b23105f63a0eeca6f09a8fe84b267ea7bd0e06c1f342a81542e35e27b0431c30"}) 1m48.36829309s ago: executing program 5 (id=5175): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0xaf9}}, {@default_permissions}, {@allow_other}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000001c0)) setreuid(0x0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x4c, 0x1, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x4064041) read$FUSE(r2, &(0x7f0000002480)={0x2020}, 0x2020) 1m48.3641169s ago: executing program 5 (id=5176): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000400), 0x12) r3 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000003c0)=0x1002, 0x12) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x1, 0xf, 0xfff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0xffff}]}, 0x10) write(r4, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r5, 0x0, 0xb, &(0x7f00000004c0), &(0x7f0000000500)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000002dc0)=[{}, {}], 0x2, 0x2, &(0x7f0000003540), 0x8) close_range(r0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000005f40)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000005d80)=[{{&(0x7f0000000540)=@ax25={{0x3, @default}, [@null, @rose, @null, @rose, @default, @rose, @null, @bcast]}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/230, 0xe6}, {&(0x7f00000016c0)=""/12, 0xc}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/29, 0x1d}], 0x5, &(0x7f0000001840)=""/131, 0x83}, 0x8}, {{&(0x7f0000001900)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000001980)=""/4, 0x4}, {&(0x7f00000019c0)=""/7, 0x7}, {&(0x7f0000001a00)=""/238, 0xee}, {&(0x7f0000001b00)=""/252, 0xfc}, {&(0x7f0000001c00)=""/142, 0x8e}, {&(0x7f0000001cc0)=""/4096, 0x1000}], 0x6}, 0x9}, {{&(0x7f0000002d40)=@x25={0x9, @remote}, 0x80, &(0x7f0000002dc0), 0x0, &(0x7f0000002e00)=""/243, 0xf3}}, {{&(0x7f0000002f00)=@ieee802154, 0x80, &(0x7f00000034c0)=[{&(0x7f0000002f80)=""/214, 0xd6}, {&(0x7f0000003080)=""/10, 0xa}, {&(0x7f00000030c0)=""/114, 0x72}, {&(0x7f0000003140)=""/61, 0x3d}, {&(0x7f0000003180)=""/198, 0xc6}, {&(0x7f0000003280)=""/196, 0xc4}, {&(0x7f0000003380)=""/205, 0xcd}, {&(0x7f0000003480)=""/27, 0x1b}], 0x8, &(0x7f0000003540)}}, {{&(0x7f0000003580)=@isdn, 0x80, &(0x7f0000004600)=[{&(0x7f0000003600)=""/4096, 0x1000}], 0x1, &(0x7f0000004640)=""/94, 0x5e}, 0x3}, {{0x0, 0x0, &(0x7f00000058c0)=[{&(0x7f00000046c0)=""/39, 0x27}, {&(0x7f0000004700)=""/6, 0x6}, {&(0x7f0000004740)=""/69, 0x45}, {&(0x7f00000047c0)=""/42, 0x2a}, {&(0x7f0000004800)=""/4096, 0x1000}, {&(0x7f0000005800)=""/36, 0x24}, {&(0x7f0000005840)=""/90, 0x5a}], 0x7, &(0x7f0000005940)=""/233, 0xe9}, 0x5}, {{&(0x7f0000005a40)=@generic, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000005ac0)=""/113, 0x71}, {&(0x7f0000005b40)=""/18, 0x12}, {&(0x7f0000005b80)=""/89, 0x59}, {&(0x7f0000005c00)=""/153, 0x99}], 0x4, &(0x7f0000005d00)=""/66, 0x42}, 0x2}], 0x7, 0x20, &(0x7f0000005f80)={r6, r7+10000000}) r8 = syz_usb_connect$uac1(0x6, 0xdb, &(0x7f0000000100)=ANY=[@ANYBLOB="12015002000000c06b1d01014000010203010902c90003014240040904000000010100000a240105000302010209240303ff010405810904010000010200000904010101010200001224020201cebe4b4f5164543b2d6bf61af10b240202ff07a1050742a60a240202900400001b60072401050801100d24020105020703e795081801090501090004030504072501000403000904020000010200000904020101010200000a2402018b020c0667660b2402029606a00603014b07240105ff03000a24020106048203221909058209400055060f07250183960400"], &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0xe, 0x2, 0xb8, 0x0, 0x6}, 0x12, &(0x7f0000000200)={0x5, 0xf, 0x12, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0xd, 0x7, 0x200}]}, 0x4, [{0x6a, &(0x7f0000000280)=@string={0x6a, 0x3, "a228f7d86b18386cee37137a9c6d31a3a8a8b9b5bf53f306c3153bd22cf13eca63228ee7fcea5b85f63a0f94ce13a301cf62c8f0ef04c8f0615cc58dd1019d6c61b2df622bee08cf2df932f67500730eb2d79f38ade8ce3a919a43c8ef3c13cc4b84e6e7509850f0"}}, {0x6, &(0x7f0000000300)=@string={0x6, 0x3, "12f2388b"}}, {0x21, &(0x7f0000000340)=@string={0x21, 0x3, "e00e622f087adc3c705c5454cb0ac62c503de15162aed0dcea9786022f66df"}}, {0xab, &(0x7f0000000380)=@string={0xab, 0x3, "adc46d79edb5819f3d9415c6e054a79852147432645b4ed601e3ed4a6cd45198e95957dad8e4b194f0fb36fdb35a47f1d6adc76e18de2d61939638d6ff3af9364b43190ebdbdb6a740aaae3b03cae76142d607b4b0ffc90b888fef7d0c100f11afd95cfd3926acf32b2ba466c74a5814e6e9e5c5e1910c39ca62c98023f8be96caf0d70566a8f6337ee54e9b6be8b3fa426465c90c08c078dd219be1c5e5a04b07a847fde8e35b48dc"}}]}) syz_usb_disconnect(r8) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000005fc0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x63d2ede1f6ca108d, 0x28bd, 0x933, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x60, 0x2, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0xa2d, 0x0, 0x1, {0x22, 0x8cc}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x15, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x9, 0x9, 0x5}}]}}}]}}]}}, &(0x7f00000063c0)={0xa, &(0x7f0000006000)={0xa, 0x6, 0x201, 0xff, 0x7f, 0x9, 0x8, 0x10}, 0x29, &(0x7f0000006040)={0x5, 0xf, 0x29, 0x4, [@ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x0, 0xf000, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x6, 0x0, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x6, 0x8, 0x81}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xd, 0x0, 0xb3a}]}, 0x5, [{0x5c, &(0x7f0000006080)=@string={0x5c, 0x3, "6963ee248ec66dfde237994b4dfe08b20a8feba5138276041d14bba3f4cc036150bb4594f34818027e80d07b4eb2c37cc7cb57c827dd39b8d0f470f0799c5011f70129991afd9b5c03582cb5688b6a3c063e8e41064c143bee38"}}, {0x6b, &(0x7f0000006100)=@string={0x6b, 0x3, "2bc9dfd53dca9f691a5e14e66bc45802cce4fd75ecbfe6219492ef581f0afa99f999011f9a2213cec7096eace6c06ad62f998609f09a6e01d8c93b31edfdadd49ec990ab0e2140a4893b05146cd8d5f8d6da1ac75d2a163b47ed27aab0633bc654303988d2ba336dcb"}}, {0xe0, &(0x7f0000006180)=@string={0xe0, 0x3, "16847a1bd482eb4bd9dea5f8797c613c88084e3dca6f122607da787e177f1e941cf8c1b7b8d1636ce9dfe964a367dbc21cad72046e841f3350f698693a464b4af203fa172d688aea956b5b77050b691623bd41cd9949b481e9893c16f7fa350777443a3fa2f72d352a005528db554121ec18182d9b49a7d4901a2523e0a222879d1dff05d82b8a3c0bd7127d718490dc54b059dca4aac8ba2287cdafb5d35dae3d3f935490c53a3bb86e0d1b5cbc0b45a884bbc2d7d091d77ad90afc94fe287f7b037785a56615ea50e7c5f3ba78fa5d472e2e799d80b11b75399f2a686d"}}, {0x4, &(0x7f0000006280)=@lang_id={0x4, 0x3, 0x100a}}, {0xc7, &(0x7f00000062c0)=@string={0xc7, 0x3, "3d7eac7fc6a4e19dcff25dd651b10a581b2a838360d519b9979d0e1473909a929f9d74e58fc4cacafd00a66d2c6a61c43d731f0f51252b171827a531aeee4eea5473c880f1876d22db2c011685c09b0fc6d09912901b8f32005ab87dca3a11d6f084d5abd056a84054d0a90032432e654d0f13fcb06f285f068c8afbd6ddd95af8b6ae1cfb0b53d1c105ca31da1cfa9c43499e87048d7b48ae772b7539b8cee760ff07c16e3522bb2d8763f4fdb951a908b94a16bdd18ee406bbe9c74abe4b3027a5e16a58"}}]}) 1m45.332600057s ago: executing program 5 (id=5203): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x86) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = open$dir(&(0x7f0000000200)='./file2\x00', 0x0, 0x91) getdents64(r4, &(0x7f0000000300)=""/71, 0x47) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x800) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x2c) renameat(r2, &(0x7f0000000280)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x54, 0x18, 0x0, &(0x7f0000000000)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r5, r5, 0x0) r6 = getegid() fchownat(r2, &(0x7f0000000040)='./file1\x00', r5, r6, 0x400) 1m45.232572559s ago: executing program 5 (id=5204): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) fdatasync(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r3, 0xfffffffffffffffb, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000040)) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 1m45.232447799s ago: executing program 5 (id=5205): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000340)=0x60) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000200)=[@acquire_done={0x40106309, 0x3}], 0xe, 0x0, 0x0}) 1m45.2142566s ago: executing program 5 (id=5206): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x12, r0, 0x7aa7000) timer_create(0x0, &(0x7f0000000040)={0x0, 0x3e, 0x0, @thr={&(0x7f00000000c0)="12157801954417de3cfb249cf0f3f9a1e1cfd4436dfadcb23431435d5e8a706aecaac163450bc738635deb811dcde59f593a2822adf8629409", &(0x7f0000000100)="41bfdb3c7b0d225264b8fc49704d20cb8309e2f38170fd3f727c82e1e9d83d58bb79b9fecbe74d4493d90572ff214e6ebd2795d155b392e10087020ca6fbbcf588e0917296d33bd320d0c3478ab51e385258998806980decfc0d90089b549fc31ee357efd9b80dfdd01dd687c22f73b3c9a8fecf4cfd94e3fe9bd63bb1a6cf8652035a40de170c38c9ad60c77080210d09b94050fdbca1cd0514895cbac9534daae85ebfccee1fac9e389535ac3891fb0c7a4227926a1f05d9bb0549be370c419c2faaf66899"}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 1m30.152896126s ago: executing program 35 (id=5206): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x12, r0, 0x7aa7000) timer_create(0x0, &(0x7f0000000040)={0x0, 0x3e, 0x0, @thr={&(0x7f00000000c0)="12157801954417de3cfb249cf0f3f9a1e1cfd4436dfadcb23431435d5e8a706aecaac163450bc738635deb811dcde59f593a2822adf8629409", &(0x7f0000000100)="41bfdb3c7b0d225264b8fc49704d20cb8309e2f38170fd3f727c82e1e9d83d58bb79b9fecbe74d4493d90572ff214e6ebd2795d155b392e10087020ca6fbbcf588e0917296d33bd320d0c3478ab51e385258998806980decfc0d90089b549fc31ee357efd9b80dfdd01dd687c22f73b3c9a8fecf4cfd94e3fe9bd63bb1a6cf8652035a40de170c38c9ad60c77080210d09b94050fdbca1cd0514895cbac9534daae85ebfccee1fac9e389535ac3891fb0c7a4227926a1f05d9bb0549be370c419c2faaf66899"}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 1m12.850626645s ago: executing program 7 (id=5944): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000012ea2a400a09001287240000000109021200010000000009040000000f01"], 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r2 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x800) bind$tipc(r2, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x2, {0x22, 0x3, 0x1}}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000100)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x6, 0x41, &(0x7f0000000240)="269bbb6cfe9afd35afb5e0134239359d1b9856e88a5259664af3497198c0d92af2953aa0f886651a3e0c9031f9c3e67743e36b8ef164a77f85c462ccaf7051c7ab8b1de4ffa81a2baed9b8a908637b70b22a2dc9744f0aa824b0a5a27accc02facd8fef32eb9e83d9aaef46167ea72527ff3b00a8263a2ddcc8b57cafe2b601bcce2cfa67612", 0x86, 0x2, 0x2056, 0x0, 0xffffffff, 0x9, &(0x7f0000000180)="87dcef13c0844375f495bdffaea44a9c58ede7e5cdeb394e6640631d57760908582282b76013da1ac705550534298e04cb7acab6cefb7bd9625ba27f8a369c8d6bc2712e4d12e32c527d09815f32d72ff462520df450"}) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e23, 0x4000f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, 0x80ab}, 0x1c) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$random(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$RNDADDENTROPY(r8, 0x40085203, &(0x7f0000000440)=ANY=[@ANYBLOB="060000003f0000005fd1c5c1f871e878018abcabd7304113b1366022bb82e9f9b977c24301b0909ef522451f9a9626ab0f7d917902b0a8dc2c2411ad6859c38f0f1fb61b1c98ce"]) r9 = syz_pidfd_open(r7, 0x0) setresuid(0x0, 0xee01, 0x0) setns(r9, 0x24020000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f00000004c0)) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) fchown(r11, 0x0, 0x0) getpeername(r11, &(0x7f0000000200)=@in, &(0x7f0000000100)=0x80) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @fda={0x66646185, 0x1, 0x0, 0x38}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x50, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df"}) 1m9.835026292s ago: executing program 7 (id=5975): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x4, 0x200, 0xc2, 0x4f, 0x19, 0x7, 0x6, 0x1, 0xff, 0x6, 0xc, 0x3, 0x9}, {0x8, 0xaef2, 0x6, 0x6, 0x5, 0xff, 0x8, 0x3, 0x4, 0x13, 0x1, 0x6, 0x10005}, {0x20000, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0x3, 0x4, 0x15, 0x1, 0x3, 0x40000000000000}], 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffefd, 0x0, 0x10000, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x0, 0xfff, 0x10, 0x0, 0x0, 0x0, 0x6], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m9.712726275s ago: executing program 7 (id=5982): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r1) sendmmsg$unix(r0, &(0x7f0000002d80)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e30}, 0x6e, 0x0}}], 0x1, 0x40008004) 1m9.699459325s ago: executing program 7 (id=5985): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f0000608000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) unshare(0x2040400) fcntl$lock(r1, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x1b9, 0x1fd}) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r4, &(0x7f0000000600)=ANY=[@ANYBLOB='+cpu'], 0x5) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="02032000120000000000000000000000040003ffffffffffffffe000000000009a050000000000001600000000000000030006000000000002004e207f0000010000000000000000040004007f000000feffffffffffffff0000000000000000000000000000000002000100000000000000000300000000030005000000000002"], 0x90}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000200)='./file0\x00', 0x400) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0) mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='pstore\x00', 0x1800000, &(0x7f0000000200)='--^}*&+++,@\x00') 1m9.473616019s ago: executing program 7 (id=5993): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 1m9.360389261s ago: executing program 7 (id=5996): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f16000000170a001700000000040037000f00030001332564aa11f6bbf44d00000000028984", 0x39}], 0x1) 1m9.283488813s ago: executing program 36 (id=5996): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f16000000170a001700000000040037000f00030001332564aa11f6bbf44d00000000028984", 0x39}], 0x1) 1m8.769499772s ago: executing program 3 (id=6010): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)=0x4000000) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x3) connect$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, @any, 0xb}, 0xa) close_range(r0, 0xffffffffffffffff, 0x0) 1m8.699485824s ago: executing program 3 (id=6013): openat$kvm(0xffffffffffffff9c, 0x0, 0x141800, 0x0) (async) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x3, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) (async) socket$inet6(0xa, 0x3, 0xff) (async) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xc) (async, rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0xb904, 0x0, 0x0, 0x0, 0x6, 0x3, 0xfc, 0x0, 0xa, 0x0, 0x0, 0xa7a, 0xff, 0x0, 0xffeffeff}}) (async, rerun: 32) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2000, 0x0) (async, rerun: 32) mkdir(0x0, 0x0) rmdir(0x0) r4 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB='-pids )'], 0x1f) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000080)="420f01df0f20e035002000000f22e0660f28bc4dfb9ebda93e420fc7ae343f0000c42272f5dcb805000000b978b144f00f01d92e0f01c2f32e450f005f0026231f3ef3450f08", 0x46}], 0x1, 0x0, 0x0, 0x0) (async) fsetxattr$trusted_overlay_upper(r6, &(0x7f0000000000), 0x0, 0x0, 0x3a19394675f2e5b9) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m8.577477656s ago: executing program 3 (id=6014): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'veth0_virt_wifi\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000012000900000012f17218c865c1ea"], 0x24}], 0x1}, 0x0) pwritev2(r4, &(0x7f00000035c0)=[{&(0x7f0000000180)="323c1fac9fcf57cbe40f228cb6cef25f5f2b4fa51439551758b4ad0c43b0cb0955af67be7c92d732d4f20d9511241b9f8c1c99", 0x33}, {0x0}], 0x2, 0x47, 0xf7ab, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'veth0_virt_wifi\x00'}) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6}, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$netlink(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000012000900000012f17218c865c1ea"], 0x24}], 0x1}, 0x0) (async) pwritev2(r4, &(0x7f00000035c0)=[{&(0x7f0000000180)="323c1fac9fcf57cbe40f228cb6cef25f5f2b4fa51439551758b4ad0c43b0cb0955af67be7c92d732d4f20d9511241b9f8c1c99", 0x33}, {0x0}], 0x2, 0x47, 0xf7ab, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 1m8.412103929s ago: executing program 3 (id=6016): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f0000608000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) unshare(0x2040400) fcntl$lock(r1, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x1b9, 0x1fd}) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r4, &(0x7f0000000600)=ANY=[@ANYBLOB='+cpu'], 0x5) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="02032000120000000000000000000000040003ffffffffffffffe000000000009a050000000000001600000000000000030006000000000002004e207f0000010000000000000000040004007f000000feffffffffffffff0000000000000000000000000000000002000100000000000000000300000000030005000000000002"], 0x90}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000200)='./file0\x00', 0x400) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0) mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='pstore\x00', 0x1800000, &(0x7f0000000200)='--^}*&+++,@\x00') 1m8.348904701s ago: executing program 3 (id=6017): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f16000000170a001700000000040037000f00030001332564aa11f6bbf44d00002000008984", 0x39}], 0x1) 1m8.260294232s ago: executing program 3 (id=6019): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "1ae2977c660233b4", "c528944f13d264d586bf65436479c184", "0baf923c", "076dba2bc92026e4"}, 0x28) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f00000000c0)) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001e00010026bd706e6e24139e074c2100"], 0x40}}, 0x90) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) userfaultfd(0x801) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400"], 0xb8}}, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) read$FUSE(r4, &(0x7f0000003800)={0x2020}, 0x2020) 1m8.212098153s ago: executing program 37 (id=6019): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "1ae2977c660233b4", "c528944f13d264d586bf65436479c184", "0baf923c", "076dba2bc92026e4"}, 0x28) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f00000000c0)) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001e00010026bd706e6e24139e074c2100"], 0x40}}, 0x90) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) userfaultfd(0x801) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400"], 0xb8}}, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) read$FUSE(r4, &(0x7f0000003800)={0x2020}, 0x2020) 18.817395212s ago: executing program 8 (id=6846): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000014d564b0000000001"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) 18.360260051s ago: executing program 8 (id=6849): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aa11f6bbf44d00009400008984", 0x39}], 0x1) 18.353202471s ago: executing program 8 (id=6852): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000040)={0xe, 0x20, '\x00', 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x5, &(0x7f00000000c0)=[{0x8, 0x2, 0xe6, 0x7}, {0x5, 0x0, 0x4, 0x2}, {0x2, 0x5, 0x8, 0xa06}, {0x1, 0x9c, 0x80, 0x8}, {0x8, 0x4, 0x0, 0x1}]}) 17.240683372s ago: executing program 8 (id=6858): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x800, 0x0) unshare(0x22020600) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) 17.189878804s ago: executing program 8 (id=6861): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000004c0)='H', 0x1}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x20000004, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r3, 0xe5441000) dup(r3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mlock(&(0x7f0000339000/0x3000)=nil, 0x3000) 16.920791828s ago: executing program 8 (id=6866): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 16.83482534s ago: executing program 38 (id=6866): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 16.056023845s ago: executing program 9 (id=6871): unshare(0x4000400) r0 = timerfd_create(0x1, 0x800) timerfd_gettime(r0, &(0x7f0000000540)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15.988669376s ago: executing program 9 (id=6872): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000014d564b00f7ffff00"]) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd000000200106"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.300974449s ago: executing program 9 (id=6873): r0 = socket(0x10, 0x803, 0x0) fsetxattr$security_selinux(r0, 0x0, &(0x7f00000001c0)='system_u:object_r:checkpolicy_exec_t:s0\x00', 0x28, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d3, &(0x7f0000000100)) 15.25838949s ago: executing program 9 (id=6874): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @private1, 0xe}, 0x18) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r2 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x48, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @flat=@handle={0x73682a85, 0x1100}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x4, 0x1c}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYRES64, @ANYRESDEC=r1, @ANYRES64=r3, @ANYRESOCT=r2], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_GET_CPUID2(r7, 0xc008ae91, &(0x7f0000000600)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8edc11615cb9fab16"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000740)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x55, 0x0, &(0x7f0000000500)="bcbc648bc9c07baf3789df6d877eac314ecc82d9c71ab1ecebefe99af20b4ab3cb820245a3692f3ac6a588df8de17d26b23105f63a0eeca6f09a8fe84b267ea7bd0e06c1f342a81542e35e27b0431c30a12ff4db2b"}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x210001, 0x0) 14.983142915s ago: executing program 9 (id=6877): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r3, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000040)=ANY=[@ANYBLOB="efb0880000000000"], 0x8) sendto$inet6(r1, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f00000000c0)=0x3e2, 0x4) recvmmsg(r1, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@local, @in=@dev={0xac, 0x14, 0x14, 0x2d}, 0x4e22, 0x2, 0x4e22, 0xfffe, 0x2, 0x0, 0x80, 0x2c, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0xeffffffffffffffe, 0xfffffffffffffffc, 0x0, 0x0, 0x100020000000}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0xfffffffe, 0xff}, 0x0, @in=@loopback, 0x3502, 0x0, 0x0, 0x7, 0xfffffffe, 0x0, 0xffffffff}}, 0xe8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xc4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1000, 0x7, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x10, 0x40}}}}}]}}]}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000001900)={{0x0, 0x0, 0xfffffffffffffd7c, {0xdddf1000, 0x0, 0x3}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x48, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8094) syz_usb_control_io$hid(r5, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_012={0x0, 0x0, 0x9}, @global=@item_012={0x0, 0x1, 0x9}, @main=@item_4={0x3, 0x0, 0x67fa2318d99054d8, "738206f8"}]}}, 0x0}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14.264683279s ago: executing program 9 (id=6888): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="0f23d50f07f283f9c7410f06769cc9759971716266baf80cb89c1bdd82ef66bafc0cb0f1ee9a110f01380f20e035200000000f01c48f7178d1812e4b80001740ab46be46bec7f08a", 0xffffffffffffff28}], 0x1, 0x6d, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000001c0)="2e4f0fc7a8050000003e460f3801b998000000c744240000000080c744240246270000c7442406000000000f011c24440f20c03501000000440f22c0656436440f01dfc744240039000000c7442402c7000000ff2c243e0f67730e66b812010f00d8660f3a0973ce03420f009cec05ff3f01", 0x72}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x30000000) 4.21240389s ago: executing program 2 (id=6983): r0 = userfaultfd(0x801) mmap(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x3000000, 0x30, r0, 0x8001000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, r2, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x80) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008004}, 0x4004040) r3 = fsmount(0xffffffffffffffff, 0x0, 0x70) sendto$inet6(r3, &(0x7f0000000280)="ae4522d9c4b02129a8dd50926a524e7325555e7defb5a144d5917b04007361b5dfb43dd5b64f90761962801faf0ad2f71633c07c4682dea101ecb26ea9d25c2ed7bcd9541746a3192352972950a12aaf0b0eaacb284ab2561fdad6b6421be5d48564e0a937829e8a1e425a110c45cfd8bbf984", 0x73, 0x84, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @empty, 0x1000}, 0x1c) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000340)={{r3}, {@void, @actul_num={@void, 0x6, 0x6d}}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20046004}, 0x4000) connect$802154_dgram(r3, &(0x7f00000004c0), 0x14) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000500), &(0x7f0000000540)) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000580), &(0x7f00000005c0)=0x40) r5 = gettid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000600)=r5) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x310, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x80, @bearer=@udp='udp:syz0\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20000009) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000007c0)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000740)="f8b55577d2f1a88568580590db0ad9eafd47c56a670786ead0a15f538926a27f986fd59c65d6120f7d59278db6e569e09ba3559168cb70951389013298011a02a09cb3d464b55d26f0ab0fe4cc67bb6bffcf8f515f0d8f", 0x57, r0}, 0x68) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000840), 0x4) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000880), &(0x7f00000008c0), 0x2, 0x3) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000900)={0x100, {{0x2, 0x4e24, @multicast1}}, 0x0, 0x2, [{{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e22, @empty}}]}, 0x190) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r3) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, r6, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x40, 0x69}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9c}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xba7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000804}, 0x2044864) getpeername(r3, &(0x7f0000000c40)=@in6={0xa, 0x0, 0x0, @local}, &(0x7f0000000cc0)=0x80) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d00), r7) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000d80)={0x4, 0x20, '\x00', 0x1, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000dc0)={0x7, 'batadv0\x00', {0x9}, 0x4}) 4.20774154s ago: executing program 2 (id=6984): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x80000002}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x92) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000280), 0x2000001, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030309554f39b34303030302c75731d6fca2d643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x408c0288, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42000, 0x0) syz_fuse_handle_req(r4, &(0x7f00000062c0), 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x40086602, &(0x7f0000000140)={0x10}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_fuse_handle_req(r4, &(0x7f00000088c0)="4580093898a1d16b31cb53b0531f71a24a5b16ae40538efd584367d8522393a724be4985a9234289e0a62e5d9f4b77e235d059981bb4467fdef6b1fe779ab734263d9b3bd46378b1c6399295e7c1e8e04c5b356add1915b7e45b9e381867914e2cc80cd84e62cba8a9388be6679add1c7f801288db0f703ba884b3e0b4e64b227dedf9e86cea33761b16d7bed53bb6c2ca9485022fbbe2854f0ab1cf379bf4e8b53631525338c05e8d8201150169057d7f91506fe413fd930062efbbc2f2e299f1ee56a0e2eb000aa18b21448bb4c74bedc875f3c1060b02dfaa6b09bfedc5f6a21e6af2c270d0874bf56695e4fa97f2a01a4454652ec26710ca2c0e085610c1ec535d2d2520e34f8e995655fc3813751bb05093bce378eb6e7c52daa5943013677e2de843a01cd6b8da3ede72cd58a6e3551e0a63c2d3c2a2a2e19476169d9fd5206973bb01a309b083b2a6e6599678c63f4c79ea43b05873ac8110c0c36600b1c542ec5dacd40f7afbb744556ff81b63e192bdccdcf29f87c250ebc4cc1c7ad9063e646c3b8cb8e2671f9cb03e559232339f29ee8faedc557de70d1f28ff4250c44bf0d5d848d22c0ecc6c2dddde581f59179a1f110712585313f0d79cd9e8d0af6c0995a1688d85bd9919347b0bd4ded8b35606780e070dd1921affe83f1bbe5288692ef99d5266e74e1a321ae4549693720348ac5ed7bed7f65a0a86c2537b19b62120f541c76e607bca0c27c9eeacf8e36190ce2d7ab194d8893306edd40a0893e1612c0a1b2ed8a3f02587967d031e58ada05b1663bd3f23c81effb5f36c661c2c2a8968a64a488d6a93472031519d1086b7256586009a0ecc7ca765dcf9cf77e51abcafe124c65cd5303265b15bc7748340eca92d53e2d40a67e9171cd9ac663ce10f66d345b620f0373caf524a329e5919b3bb6aae9366963668737ccfcd6e738d66407416e813cfcf07094c9e852f280aeb8f2d2dca47e5d3be2c0a212b3165fdeab9b04ae43a7b8bb4b85868e237481906dd1011399e4eff809e88c2d7c01f413aee2a1de58f6856b6ab09b04455b724107fed5d18b786b626039a8ac8e6c53b080bec59bfecf7c4100441e4cb899a351d89422a5e1b3dbcefc0badd0398c54d91d9cf06d3d8643efb51da9c7ffb55e76d2eeac599e162ddea7d399b6d101a1e70e2615824d508c2b5f1550eb1bb825bedf17870765796c0a4090c85aeca36a79a74f42056ef0a05901d808c496234c893a71d5e76a002696045cd2f88afb7235cc2620891c046d8c08ffb71f7b7cafeb4d10976264a9606d5db8472b4a55a5abcbc6bee60394defcde03abc1c4659b63dbfb32198f9d3923607ba11e1728cd5dffa0a29e50f9d55ccd98fecb3e9fe42f08a41739bd0fe48a72e925fa747a483a5bfbf7830d54e8c5513d1bc6201afafef1743a705f2af9055f8fbcefc352b8f6ce3abfc2984e464947e22f3a26305d6421a633f6db0c3949df8d4f051d51e3c9daa0e00c47750b9c8c49e93905a9f3d5b98e6a098eed84d7d16102d24e82a4e85bf95d114b4137dc23f14cc0d7159c67d47a0394e7edf8f84086d6ec5d3db779cb560d9eb4163bd8992b50468105b05d5152688f8df2310f2652889202bc460d3aed5f50167c689ffde48eb8836501239bf80a12c5ade458db4fc618e23e254675a1c510491ddde26062c22833a5d80bf43bc05fc2db6f554a9da0a33026115661fe37a7e6d2905f8e763828564b2787e0d4eecfdf077866de9b33c53efca0da9c4cff7948b083bf7fa79c4fe0060583e0f6e53dec70cb700d1e29f2ad58f16ef642e2bbad4c1b79aa19781fd243f161f9a1176430e58a3909e9f4e250860ef8ff3654879e83b784cf660b72899ee251aadbc479e1276d05850867653b09bd92b85b6cb3001448ef886c75482dc0c3bcd721cad899b6a3a805dcaddb2d3ac61d269a160264642ef93c6ed39f75f08f900dfdfbef529fd537e4470b99d2d5deddea41bf9615d1d1e62cc01a7847513318fbd746fd76445b1073979b6fca255c0f49b18a477341d9336e2c2ae1d107ecf46e0cb92a99a5282e7338cdbedbae2f8f5b36313f507324712d535236c68cbf4bc837d5a1b80d68a4ac517ec313c870f3be015e0ad43c83716685baaf31eee7edfb23af6422a91dd167c6c2e6a585a1d14aafecf8d2bb7d9973a8dffe5838cccd5a385c6258e66f8bf54b378f38afa1e112ac3f785e163257d1f8b5337234b5079d16700187831e3a7df5508fecc1d93e4d926ed1ded9ecce4290de878035f8af16f2dbcbedf929987f355c389ae6c791e796e46326efffeb8a2506d40b8a9ef7c35a90e10eadae0e767b63e0f169ca5a30fdfa43546e2c5171dd801133c6ab986c545b4e73aaa9b3572f92690afc498f1248f8923ebe207f11c0587275569d20895d4662256c3a29ba4518781f8871b84a6b9b6d40d58dc149c38f4eb48bfb70d1b3c5cf2191825ac3b5e554f31c99ea292787fc2e10ad66893b19f22814fc0cfbb82413a8b8856eb13c9e9ced57255d9fb043f882008b7e4439ef068c8d81a60d1affafc43210b827144c1014799f2ebb91d04344e945fdf22d638dca602782c5f17c0e8fc68d00e305bde420231f51449c9fb8b20b329dd21a353085e255ca3522d05b429a49f9ec6c837be07194fef1f9be89080972c3b1f7452e8c9c48c1430efb2558b128f9d58f17576a0a839e3e17e23f74c6227d6481edfd8fd3cb65360577db6ac173a169e932bb1af16963f3c9175b62bc9a221fdc77c029dea920a0ed119248d256264bbf9b85ad4b73b3caaf5faad6546566889dd49e789f188fb6464afdfd160d6208556d52149369d5c29159eb910377af1ade2e3cb6263585c170150e40793120fe24aae427742445ce75ffa76571ebf39aec1e7f94da5b936a58eadd9daa2efeb701e8caa4bc0cecec3e4a5012f8b33e1b895b12acd3b5575691438840bd8df25f60e087563b63d59413fc404b0337e3969db4ffc318110a74f400b261dfecaa54a4f0eac627b3906a121ba316c023bd92bc6aebb4bd4eff374e6c076f7785680ee9768dde2e8d5b7d7287493b9b090af28ab2899c2f0220a4be2979c282f0a062c501dacf69121907a4d746a5578fb6323870b2e113908056df94f5548c5509577c0512b6f16090b79540487238cde05b529397104c43471e6b806e487452dbe1fc7ec60842f9597da099af5c29777f3f9866a118c02bc62a1defdd863ab6dedebd3739290fb547ceca0253bc60f842f15697203ab4a4bd9314e825039f9ba648a3642df81692a5fef5b62ba32b6b78c23650ad56a02cee90a20d7be1a54376e3f0ee4e2f36bdde8eee8d61a8fe24172d695318ac42485f9dc837a4f8d071f910253aa256f875a0bab8ec82b2fd5e20e443bb8d6857ddb0bb69c1efe527785ad1eedc8f5543dbfa811781a0e0a5657795726730fdf5b1434ce981071fb8abfc10b07ee2acab7056bd3476eb850510c2caa80587bd1533574bd7f029d0ef416c22b5b451348612827a15589d0ec74006f0acaa91aeffb2b39fa2ba98f9ab32937f62b9fda193da816f009b05247af1c76ddfea0ea9c3a83f5ee58bf470cfcad1687243819282242f9f3169429a105cd6ab468d6107d2206624e05c4b26128744029cec346bbe787f5cf2bfbe79690624341d41dcbd10a648fc49f3b331b08d73ce2f887530b075ff8ffa8dae8f69446e45123d947454bc8f5e93fccddada1f223bd84d7a9cc08816d58d6fad16e4d40cd52ea4cf8ca28bdff995968a2ce1fc0532dd0e50397534b9fef5b9e4d8986593d43cf179530aab329bc4afd26e7ea7c4e875f9bd7c51db55674939cc1a57ac3299d5a0320acda5e54acdf6d8bb61af7577bb92dbbf70b59d69678b06ea04ace4288da1690e737549d0e61cc814843f4ee0773a78b02c4b203616fbf63402a6352e31fc561cb3b48f3f887a5d98252b649c7faaa967cbecafd4363c214c00760d19d925349523028aff2436cddeef29b452a05934527862e7fb6528de83e3f2d2969633fc70bef596daed510832dc44e810b2e34a2fb67a13f985f94fecb93fcd0c24c0a1356c76a00d6fc813e94638231b8c5b66a429ac7b4950e7a93ed32d0078c2f8883f318e2b2bbdb2733cb29b1ca0395cace62f488ad5bfb149a5985abe3b837a65006653d55c0c71ab8a1c0f4994b28b20a010e93a21193648c08285c52e3b8ea60fc4b1692daeee22ac8c40cc67c477f73a706e60ae3750a9c6099283c923490b238d3161073b47603e625f8ec3050cf6bcea7e066162970d7d7a0bc4c157a8386e716f9819b72e0baed00ec6e59d14a8f18d0a71c3a663ff52b8f7e61c920757ce9b132887d4500d109d6c98c2ce2a69baa7b58c9047c135851ef62a60fd420834152c028ab60e2279c68772455083d5805b3064a765e285833493b2c7fac19d1dc7e5c909757a6a1fb78a983f5fa66323698c05e166b25234362cd379a8fd5338c48fc15ba59c1dcbb6172f9d65076446b7a0db1deb7c3bec42d6cf39e21619bd8c7834c4c972f2fa330c18edb3f8ab157655d3cfe9aaf104de7a546bc256ff856c9037de1de70122efa4c1ad7bb62b7697db86f69d4c0517708925fb0c9404a9b64067f644b17d8bb20ec560d783827058473066c110200893f623bbc48e6001682d09cb0144f58c153ee43abb15249a49d6d6d1438338535b02989c95df2f66a772553fba8f1f61023e6f91af7db6d874388c8002eb4a11bd719526643738dd2ff19662bd1fd5c9c46dd691ab65f2247f45522976ac32352ffbb5a431a6a08934ea7fed11c37aaaae99202262a42958fa77ca0f35a6c67a85b4a46164843b8625e47b2a282481415dfa7f83c2ed4fcbabbc8b3684742001ce98bdb5c15188233c4e7bb87ee3af08313af7822d3c45c027a061bace195fac29f0083dbe553e078c266343880d84373cf195e0c728fb2921d7e988c5c715d44ff02d849603e55cf4b2f744a90088c7a28d396f47a98a23e2312627b78e6715e6703a58db3c83f8c42da33ce86c9a3c17ed9ae636e53e70ea924e22f15a157811ea6d2fc96114e94ba2f475cf762fb494176a6d149d099fd508208c80644518f395f792eaba914409e54fb7c77319bc713c449a335ae4234b365308f9ba8d5fc5892f3e49e3d47394175f0947725b1233e6d142c8daa82d93a6ae26511116339284b5c229ca72c47c130fae5f42b753e72e77629bce4ee34ba274c2eb5db9a037786b6cc5cb1164f7be373144a6fde69930ee0e39a6e1d353a0e5e19b0476e39be3f2e243ba4a0db5f0a9e73538291736c22f57d4117897939217da05ea31ca54106b4ede1a61cfa8f3338f24d382dbfb6f9d828c0a4aad0dcfd0d2b0d4eccbae71c72b855167069c2705efaaaa789a11ff5dee5186420a5ea7fd8ce7d96168b66c595d3d367a9b0122606c1a027cf52cd387e8e5e4d7acb4d29981b1c48da04dca0276f11936cfe03d0e654e0df00727c8f6df166d2af99b3a5c00d7e78bbda294e80928935c5c4054f1544def46929eb9c3ea436e7e1e4a6af8a29c7fc5a614dc737721e8315fafe8e668a5707228620226553fe092e70cf8a31299a95464d57c44eb99d49b7ee4e21531d2b1277e0e1e1a16c2c7ff90aa49d7bddd86dc2dd24ed51fb4ea3026cdd38e07a515af157ccc1655967d1344858fffef8dfba2becbdb2383ec1fa7ae7c0ebc3ffe973b8fc4c3a43e2c2de61d7c2429b80354e54174a9256ed4142d86eb89784fc65fdd2e0695f3e457cb118eb70de1c3f90a56a28a2a2d1c438f9dde30b1eb759a7c109e6a5c5d1086285fac72eabb26233fe6cce54a581dfcdb41cc5fac1732823a9c303d77294a108b4d29010664b5e3a513d6875221c20baa55ff273e77346d6223939b3d8b2efe570446fe9e77f2be5367587cfbe98d4b6847c9b13ed0b818cc3469bd8f3988043b880667c07566ccfa8975be5995011fd1349cdc5cb06a95a355c5a11a1688468df7e6a537eb0efc5010ecf72d4c53faa74b93a809532f3038991014b391adfa6d17c3cd6bf9df18cb4941aa228e402009418f67952e5f22455f89ed434dcf522b02f350f0d1a79db837630830306a094d82ddcba3657e6ef13b7e7252b76f05c5f78127d16b13443d337911f988479ea1d8d78f60f516fc22118d64b982013dcc272160488bf16fcc4674bed5ab2b3af7f8089fa679d009a60bd23c82cce41837784f8c208ec8177ef63aa1f492ae9b7791e94006f60f606c3f35c5e53073485da4a4a714cb6f0dcedaea0fe49ab85568e215695efa82053b58842bf4e4df721304fc9c5ac0828ca66c7223cff63aa13afb68436635b374ccf1b14ea528ab7e4acacfd7285d88521161086a99133f1ba2ea483ba69c38fe32e2afa6cb079fb268b585fe90bbefaef5eebdec882ab3863bccb7bcb3c49f4f9ae3bb43c087ce30b2f05e780aa7b80886ba2506322ee793fd99e7d56632a468b53635811247033208de3d17a36142f53b2f1dbd57727c4935ecb554b5e91038f342b035285f1eb4a1e65e577f407312aed0dd68983d6e20d56aa3302c888a889b5c1b485303c7591105642cc96e7d34eef7808b51e1a0f845ce63d904704527f4acfcc0a5d8fa69bd0648e721daff09b70ec95ff2f173f2d62bd566829a55eb2e6d45465cf520e0b505550014851db1fbf84dde8412d1aac3df64a8b39d42cd18d699e94d0a16b5ee63fc7ea82c19688893790360773445c439e1fe5e5ccafa85a4fc45e5b811861fe9d8d6a3994a8c658b6fab904852f80a3276c4df48d4bbd36fac4d16103eef0e422488221a9189d910a204d8d1a79f755fccab38754d6b5e5c5b4f1cba75658bd43f2fb0752ef479a23d62dd7631aa7d9c76467ac2917b9e4b33d14ef56cd950f9ba114e94f1db8234ece2b3787f2806314df385de62b86228ce20a6579f9933c8bb9401c41642b00e644b78cd1d04ebfec1178237cd7e706d79d332b0e766ffc6f6353417c4726b6dbef648ed779c329485a9dc48c7111b447372e2042f402a079c2de283fa2221932c1ae1882018d8bda50b79f49ec3cdce34c09b783b1923036b95378ba4c1c343889e8bfba59e47c7b40364a78c8597ce696e43d3cf81fa78e106c9bd6a99c56fa4e0e0ae1d7a78355337c135ae75e4f9b754807fca65fd06dec18561d57b2855836c4340c179ea76959abde59f5e8b8a5f573d844fe26a3536e4f8b0c75ecc66b6e4625bc6185fc41fd5bbe96351e71958f87a6d28aa50039b16f26a71975a4c37cc0c028ba8a608b66de5ede49ccf3d78bd7a81a9322854a9589b4dd6f962972ef05f8deb8d331b9e21c6a63cdb78f58f86927bff15e319166478c53d08ad8e2ad155aefa2d43a51bac1e4450b7c52b92d75567a2297290ec04ea5f5b65f1f8ad0bb0502504aacd37b8a67d0c957e3cdb7f2eb8d1412e3cea7e69f7398dbb4e4986a24c7070e786ec60157ca3996ec0142e677665629480bee5de63b13384512e6c5fc7d6a5bddfdf63911fa888f71ab601e6018ed28fcd3577cceef79a7e22c84b77621a8e3561af825ed82eee51c24ed0665a06afdde6e53db6c75e27f2049dbfce61da141c5c338541b3bb4d03c8acacac73e1e60228aac37f0675d8ed56b4e940cd5522dcd6c86a6fc71654f6f6994dec3af199eaca80e8888777cdbd6142518f12111e81e4ffe1cdd8b93545cdd64baac4f37751723b5e96f5aaa67da6685cfcc4267ca2696f81371a40cb43d16f69c6b2884b270dc66a41102fd2ecb20e565fc48fb85ac08471d35d17cd9eb01953534fe958cd6661397cccbfcc93e288543c3bcdbd3fef547cb62765a9eb25218c4799a36037ddcc1087d9ff1f071db65d1bef02a7f71a3a9b2ea574cc7807d400608f07f0ad49fdc1f78b31ca2c1325978a062a678034c8bf7c5ba2b568a2e363b3a28b4d919106d70e0399e231ea50cadc1be84e7781fa49e5334ce5e66b62d1939df3c48cfd52fd42ac5d80bca8a98d5ac9fe5a1b55606bf92d7c5ac294ab45691b235229ab984ddc35424eaa8a52dc9eada4ec0070553ede17e603580cc87fd5def48b53b8d9f8a28537859c0cb248a760dd434b6147f7380a4791cfd6aed2ca157e86703d7051ebb8a1ab077bad6b7c526b2e53dd6bbc5825bcff00657f78d808f6b80d04192fbfba468a54bdb068e14ecd1c746b9827efa99828b223691ad03b51a0d65653cd31e320032805f6773b31c6f7055389ea64d881b43a99f50bb4ce088548d32f14ea8a1b76b5251384609583a2bde4f2a43ef410b007079254405b5748a46aa322a6a5d95e03b23995a0242362d47e011c53b1ad08b24608c841317e8cdf3667c8ad9666d14704c7c2997a43b1a46c60e41ceb35449b72aa8f9ed99c7e1740dd2d4af0b7fa8d9ae022b7739968c3d93de715fb239400f96ac936a55d82c2e5be0c062c3fd807e5cc96e1afe310d7973e2bbc5dd23b4e48a96ebc8956df7be624c6fdbde324e884cfef902f485b5d38a7d019020da89190c989966dec55f8e4c5e433cfe36a6042b6fe9af91788ad0ce5d70878ef8c483b095b2dd4b62e8ebfba2f2d8a5005df1a7055eef6a7f40a35d79ad782ae73e4977fcd39b38cfdf4cbbdcb0a94ab6e7648f054d044766355dd54f2720247aa36ce7876d449ee41191f1e7f60feb0b4928f6bce900e089727f8d7595a1c4fc483353e713f53846b40a09e88e642d0a42678a324a743d965a709c1967e2262eee92b153841917ae0fb923e687f5eb56167c10a3495b9412cb2e0004978fdb6109d70fe93d532c13b09cab04bfabfed657e61b436d52ee3d504cd3fa34f530226437ab76024e574601e3a9480d809de9ee3f7c5f438aad36234dc522de47a18a5c993da28fac3717206e57674156b40b822f47d68374b49ecc64e13940c19c33b7728c28cdd8f747b3176f5886c4ffe7b890a73a0cc0b28019fd6a6f239652c2fec8dfd4a7b6d7d18318a87c343892db5ff81f2ec2f94e1e0cb607815e0c783abd3e5c1c85dd6fc83677efd14bcc88c9c67e73769b5916662aca1470e28f91772d80baa3bf9e1bedeed8bc6194c8a2f77ca89ac69b3065a89beda8b035168070b4e2b8467e2bfd91248c62ebc1089a91803fcaf75cdc54428d5ee466d5c901ebc690a155a8ffd01e5976612a6ff524bb9c2c706aec7f89595b91ad7040d97b89fbb8729f57853abc30b7c85ed39b624593b1b3d40da689718dc8f2ea16c0d5e6a019e7764ddd528fab311f9ad1eac649640b9b681ac943c454b34dc9c7f490f51a19dcda40d84ce1cd2845a29b03bf1db1143bfb43cb0a05c027fa2b1e63e7b4cb43269203a12eaa3e7c4ada4a01c9a04a4ac7d9d69b3b8da50d96aa0d55121cf56c91b894a1beaeac59144abd5d421f3fe8ae45cc1755f99805d46058d9c44d4d77142553e7bcff51266d06498790ef69d58518932a1d5b914c516adabeafe140f4a56d62d4ff45f557c959597fcd67d443e7054bc69132eef9dc8a0be5833dfe68c6373cfbc165d47e46da75c1d44b14bd4c8b568988439de7ebf6cc34f16deef013846024c53e6364793bd56de3bdf086ebbd14941b942dccd13041fac950d8440438ee2455982bb0ae79e00217ec62b1bc31d2e2ef1dbeab36b729ac4ccf2074f4d8bb46dcf36000b80c74c5cae8db365d492d2f169d2da0227a97cc2523545d8a3e499a120be96a6f07abbb4dd5f348a3691db1d851f7039e2921eb8c263a87ec56850eb35bfcfd75d700c161954b3c42142d493f8b138e92540c5a90fa91cb117b1ec45e0911085d5b2458c17dddf4b220e50667d5fdbc95919d9b498eb748a92cce6bfca17339c886a26c9a0ed960226767b1f20cfbfdd82865d2ba8aa6305f6ce3bb8ec8a9decb275693af4abc71de61915361ec30e9ee2869073801cbce600c297177761b5a487fbe6e2c6e1689b7afb4c5cd612b0c14ae5255dd979fa8cc69e91126402190b79238db8b4a90a23c60144267e2f70f178343e1edde7c04066430a20048941fd6a5ac4e68e8fc91dee05845a037840e70f8e6ef4fc6a04ed6b4cf67ec4655f5fff615fa12b8d4083197e5d30b9fd4db5586c880a2edeedbbef14670418383179e7013e735f131d5f00620c8d2080f4ac63ccc90b77cae271782ed792a0db358302d58cb77420ecdc7544628ca1f300c337cbf0c0c8dc10387b5c214b0a6514896e092663c94d87e217fc80af8a2af0ae4d5dbb4888f7a6b19b709265f9e6510489685a8f2fa7354752c8338b526cd7e3f23011be1fcc1d09732494d53b3129df037b0f9f7a1d650e7f33747cd08c36dc4233e6e506d62bbf71a83b40bc3b9f5656e2e1fbdb2da87ae18307b44153afd1ac378bc198ab256da795cd6a73c613ee98c44172c029bc98f5dedb8e59e2f7f16a3da9ebb57d910163f051e83039cfe4a4665c9ad404c8b0cea48eafc1913262640f0de4beafdd8401fbc3a6c365082553588df6c049fab0c91d3368eff2fb9cec71d5fb7556525aeab4cfdbc3308c7573b02967893b20c7144b2041757aed6d2c8f97eeecb9f980b10ee5834b389a013de370ce100d5656da4669a65a8aaf071b8cc1f8d761cc4d5a68d7b66f59f24e1e5973d4ad4ccbd80460048b1722df76554f016a283c585cf94f0e142c62f2bd9647cc298bef173f07d39b0235170a82e8ed3f988afe97f7db65f33e841418bf3668fd87d2acd84235ecb75c006c0921dcb41e9aa63e23af391d3be43eef4052570572706d5fc91b86ccdbdc2d725506653947d19f8d1fcd6b8ce652f00f878ffd512060cd1e090bfcb04d37faf10b1ad9c9b42604de918f5f5fc6f2b1ea9cab85e1c7c28db8c3a395462231d64466706981776bee909a60f3c33d47f221f065f7a158548b4e6440606f1ed35414179bf3d2b525c19e288c040ac9e4a6c4dadcce8c20b37c3d3d030f0e4faf8088fde26dc5fd9fad0db9457b414a71ee9bf4860859f0110be4c0ccbf66f5f84753f6661ad754fb9f9fce4406ec02a5665cb5d24bd206758b0518dd916bdba0172d362a79970884f5ac27828b291e95675990688c1f50f8e602e0aff46c157d5974b2661cf1b1868f895e63b2c842b1425160928a37333e31eb8586677ca88e5106c3329268b3824c7a593c301ba2071d5751688164d8b1eef49b9f00d009b6df26ebd9c3e4462736e8dd7aa427f0f9738a4761fdcbc59f53bd4983025704084651cc48e311a3507db3267b4952b095f7ea22ff44bb0447859b29903fdf51873afa136a93918d1dc21c4fc830c2474f1d1408bbf2506d892a9a5ee73092ba9b85d9373eebdc60ef5349b13f0ec2b5031488be413afbbccde997ce8252aeaa2a74da28d0f7ee4575675e4fbb818f32c928c3d96a16344eee26b056d29f272d781043b9e261e3b0e33f7495d9ec86ff16e8a13e640dea5528925bf301d8f4df79200650bbe54e08286aa2504b18cc1274c75bc2c0bf90d65ed34b5162d3c75369d411c7b5d19b916b7a9a388ec57590d4f143b4697a5e924f7163a9611fcb1dd72e17da4a45b10d53b086fc66f4f41e8dcaf7e", 0x2000, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="900000"], 0x0, 0x0, 0x0, 0x0}) getdents64(r6, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x40a02, 0x0) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) write$khugepaged_scan(r9, &(0x7f0000000000), 0x8) connect$unix(r3, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) close_range(r0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="2b70696473202d626c6b696f202b726c6d61202d637075202b31c97520"], 0x1d) write$FUSE_STATFS(r8, &(0x7f00000001c0)={0x60, 0x0, r5, {{0x4, 0xe, 0x3, 0x6, 0xf, 0x0, 0x400, 0x7}}}, 0x60) 4.106562932s ago: executing program 2 (id=6985): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aa11f6bbf44d00000081008984", 0x39}], 0x1) 4.004585424s ago: executing program 2 (id=6986): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x180) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSFLAGS(r2, 0x40047459, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000180)={0xd0002018}) r3 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) fchown(r3, 0x0, 0x0) r4 = timerfd_create(0x8, 0x80800) r5 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r6) timerfd_settime(r4, 0x0, &(0x7f00000013c0)={{}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x180) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$PPPIOCSFLAGS(r2, 0x40047459, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000180)={0xd0002018}) (async) openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) (async) fchown(r3, 0x0, 0x0) (async) timerfd_create(0x8, 0x80800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) fstat(r5, &(0x7f0000000180)) (async) setuid(r6) (async) timerfd_settime(r4, 0x0, &(0x7f00000013c0)={{}, {0x0, 0x989680}}, 0x0) (async) pipe(&(0x7f0000000000)) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 3.997833124s ago: executing program 2 (id=6987): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) r1 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000100)={{r3, r4+60000000}, {r5, r6+60000000}}, &(0x7f0000000140)) syz_usb_control_io$hid(r1, 0x0, 0x0) rt_sigaction(0x34, &(0x7f0000000200)={&(0x7f0000000180)="f30fd6ee660fd5acbd0f00000066430fe55600643666409c469ec4a2a5927ce500c4c27929e7660f38dcccc4c2f932476a66410f73dbac", 0x50000002, &(0x7f00000001c0)="c4827d1c7103470f4622c4a36d5f5f0200c4012fd0d4c423716e160ac443dd5c86322333331bc4237d785207f3c4a31d0dcf673e3e466ec4a2d59c5900", {[0x80000001]}}, &(0x7f0000000380)={&(0x7f0000000240)="c4a3fd0103e0c4814c54a3000000000f919904000000f3440f5ab2000001002282863a34f8f2400fab68968fc9e09b118fc810968000100002b6c463957aeec58fc98002b30a000000", 0x0, &(0x7f00000002c0)="c422f1aee567660fd656d96d4681ab000000003eba0000470f496d0e4670fff3460f1eff66400fbff565297f4c8f09a0014d7c"}, 0x8, &(0x7f0000000600)) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "9c21ae2a"}]}}, 0x0}, 0x0) r7 = getpid() syz_pidfd_open(r7, 0x0) timer_create(0x0, &(0x7f0000000640)={0x0, 0xc, 0x2, @tid=r7}, &(0x7f0000000700)) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000480)={0x40, 0x10, 0xbb, "3d8bf474acb95d0aa00072785caf0a627edb4ba9639eacad8fff0ba9f8a5a2fd3b30f1c57eae65bc4bed0b66033e9497278dcf6e3ec76fb02c20090e9d583f4ec088e3c14e64b1542ffe533f337638b09a4ba5920a847c3a28b76241b0b059caff92564cdd270a2622a0401ed263f3a312957569fec5b74513a46c3905f1dfff630521f0d5000a7535c85a62037ad673ce3b1b17c711222719798f94590cc096e98be9a339b275feee80a77c844f4e023ba8ca62a7bdcfbef1e34b"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x20, 0x16}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000440)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0xb, 0x2, "fafd"}, &(0x7f00000005c0)={0x40, 0xf, 0x2}, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x19, 0x2, "ab7c"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x401}, 0x0, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x98}}) timer_create(0x6, &(0x7f0000000880)={0x0, 0x27, 0x1}, &(0x7f00000008c0)=0x0) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000940)={0x0, 0x0}) timer_settime(r8, 0x1, &(0x7f0000000980)={{r9, r10+10000000}, {r11, r12+10000000}}, &(0x7f00000009c0)) 1.864500204s ago: executing program 2 (id=7010): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="50000000540b4550182195f57584b39e3ce07900007aa8e47cbc37b454f00b5803b98b376793cbc8692c40c5cb329f5c746bf39911a1f3ba9328ab12cf4e3213247761a4cc73cc50ac36b71474f24f8d498e6a0003d2046c0b8291753e9f796a807ff46834fe0a6bcc44f72b0938ba0c9ad85d24a6b45c44d8f363b93d7fac5ca32463075c7f2dd3c4f813cc42056a59e2bc4649f0a1f9a55c26957115f2a01365100b1e6928d1fb6ee04f0bd3f45ceeb5bf0d5326f937c47910878ba3a4e9a9c1372c13ffb66c25bab9c4f8880c3b33dede703e4cfe0000000800"/237], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0x4004480f, &(0x7f0000000580)={0x18, 0x3, {0xb1f, @struct={0x7ff, 0x100}, 0x0, 0x3, 0x8, 0x8, 0x8, 0x84, 0x452, @usage, 0x6, 0x3, [0x400, 0xfffffffffffffff6, 0x7, 0x2, 0x4, 0x9]}, {0x5, @usage=0xad0a, 0x0, 0x2, 0x1, 0x100000000, 0x2, 0x8f, 0x43, @usage=0x3e48da12, 0x5, 0xba33, [0x5, 0xf000000000000000, 0x9, 0x401, 0x8, 0xb34]}, {0x8, @struct={0xd9d2, 0x7ff}, 0x0, 0x9, 0x1, 0xe1f, 0x8000, 0x9, 0x404, @usage=0x9, 0x3, 0x33, [0x100000000, 0x114, 0x9, 0x174e, 0x6f9add4, 0x50f800000000000]}, {0x2ee, 0x5, 0x9}}) r3 = socket(0x2, 0x3, 0xff) syz_usb_connect(0x4, 0x2c7, &(0x7f00000009c0)={{0x12, 0x1, 0x200, 0xf2, 0x99, 0xf4, 0xe7, 0x13b1, 0x2f, 0x3ed4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b5, 0x1, 0xf4, 0x1, 0x50, 0x10, [{{0x9, 0x4, 0x38, 0x29, 0xf, 0x65, 0xd1, 0x8b, 0xf2, [], [{{0x9, 0x5, 0x100, 0x10, 0x8, 0xd2, 0x3, 0x4, [@generic={0xe, 0x11, "29f31a112f930cae7d6a827e"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x400, 0x5, 0x6, 0x0, [@generic={0x6d, 0x11, "ca8128d3b9c3f3dc5a20e9e9d97a475db493bc49b8ae5c92ffa693c1c4f74c199724832d9a988c1c892beb5569e880cc8979978a80ce6c4cfed46cd1ddc2f243d5ebc553211254e28b37e1713a19dc31adfd6e64fa16361bc1f3b5ff4e0a29e708de5cd9eb42f9326744b4"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xe, 0x15, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0xf}, @generic={0x13, 0x10, "e9fd2fe969faa908dd21de49838ccb3357"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x248, 0xbc, 0x6, 0x6}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x7, 0xee, 0x7}}, {{0x9, 0x5, 0xc, 0x6, 0x10, 0x7, 0x9, 0x7, [@generic={0x1b, 0xd, "9be62c4facd35789b502855c60cc3344c3eae9cf142180d396"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x3a, 0x20, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x3ff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0xe93}]}}, {{0x9, 0x5, 0x2, 0x4, 0x3ff, 0x4, 0xb0, 0x6}}, {{0x9, 0x5, 0x6, 0x2, 0x200, 0x7, 0x5, 0xd}}, {{0x9, 0x5, 0x1, 0x4, 0x0, 0x9, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3c, 0x2}]}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x7, 0xe, 0xa}}, {{0x9, 0x5, 0x4, 0xe, 0x20, 0x9, 0x7, 0x3}}, {{0x9, 0x5, 0x8, 0x3, 0x10, 0x6, 0x3, 0x8, [@generic={0x61, 0xc, "ecd20ba30674fafdcc72ddcb2ed08a540b39ab08155f40888518d3bd94d3770ce9833115e0f838a761272024bb2701218673201a2c5342a85d65b163832152e0590d2b9a391e551203977c8b7a59e84636edc156dc44d317d4721c665138e0"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x7f, 0x8, 0xe, [@generic={0xf6, 0x21, "0fc86b24889ff09efcc03a5e23ea560bc519251c699bef42465177995edd7ceeeb1247783ddf94a389abd52de5c3a6912b055f78a49b1e9fba734e25af6901641e6fef16a18069c3856cb5c2dd44ffd18597ddee20b47d53939860fd7e73027564547a3e9943b71a434e995166bfe632ca7ae7e7263265ce77192ffd2f6424021a6d123e6e508fef61295a6966a0ec25f402466756ece32889aa85cf648ecf023b19623f6a96ec6ea4c12323e0410ce61765559874946be30ea4f715420646b71dc1e0acec251e5625aec6c636695756dc898e35f128328a51d718085a197ff3fdcc3ecf61671b9b7475a1973e74131827cf09b2"}]}}, {{0x9, 0x5, 0x6, 0xb, 0x200, 0x3c, 0x8, 0x1}}]}}]}}]}}, &(0x7f0000000f80)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x201, 0x5, 0xe, 0x18, 0x10, 0x8}, 0x25, &(0x7f0000000d00)={0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x5, 0xf, 0x7, [0x30, 0x3fcf, 0xff0000, 0xffc0, 0x30]}]}, 0x5, [{0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x480a}}, {0x2e, &(0x7f0000000dc0)=@string={0x2e, 0x3, "4ad3dafe0fce3dcfc0c3f88343b7516d96ae0366385dcdaf59ddccd42e084221da1a60f28c0ec2e4c054b398"}}, {0x66, &(0x7f0000000e00)=@string={0x66, 0x3, "875aa8cef4605bdb2c2441062194523e54c3e83524af6eec828a1a708af3115f776bd935a2e17533e7aea6abcf51a6b9523bc04d80e83c27996235a35dd4df871e997e5babdfa3217e022dd8f24807c6b1c9d8eef18a0c99d6eef1d607b5b4416cfae9db"}}, {0xdd, &(0x7f0000000e80)=@string={0xdd, 0x3, "138d7edc0c56c68a946ad2c32637ecbbbb8a8b7b75271775c751598edeac38d5d11eee5844acb14af8ba24a8445f499ffe305c1352e4d7986f725bf759dedb351f7796abf513a9393752f10eac85a2d438050e1ef2c53fd6ed7542b09bd56db4a3f511bc048f39444d605db11c5856c3206c5e6cd87559886c1eb52a118b691229b86a7682cb557dd436cb07d5e7df560d30f93022b0341889b1827b70eb3e2aba5385670160113ddd468cf77d0ae0aa91b311095daeb47dbf5ad4a4c871910f62cb2756a15966f8eb004519b1866d4929b5ec63ed1386663f61df"}}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x54, 0x0, &(0x7f0000000440)=[@request_death={0x400c630e, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0xa, 0x2}, @flat=@handle={0x73682a85, 0x1, 0x2}, @flat=@weak_handle={0x77682a85, 0x310a, 0x1}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}}], 0x5e, 0x0, &(0x7f00000004c0)="8d8fc118d039483174d7198a4833393c32187d44e10be6c8ee7f4cd1a8bfd009b9aa29c8931f1007997616c96f164c0a852f5582c4017fbadc41c8a408e5a8fc8da0ac6cb60f0997d42833ba6d7f8e899967117ae86257c8dfe8bc499fcf"}) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x1, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_control_io$lan78xx(r4, &(0x7f00000010c0)={0x14, &(0x7f0000001000)={0x0, 0xe, 0x66, {0x66, 0xd, "7d0013582254fd487dccdf44d584b4294cd04be075fd8604dbcdf772e64371c4ecde5fb31ad5cfd80b9fcd5efd4c6de208ffb0530aa399976773ddcd71c2ea450db844f73f293085a1a4ba6474de9a72e04bf2c90d8b9046eaf12f9419b083f9a2109a1a"}}, &(0x7f0000001080)={0x0, 0x3, 0x39, @string={0x39, 0x3, "752e1746a8c7a036fda8a02ddc65f6e069f7dc0c9d770933a3561ca83431b384b00f3b4d8dfafa44aaa4e8611caf82a05d5b89612c9e17"}}}, &(0x7f0000001280)={0x34, &(0x7f0000001100)={0x0, 0x7, 0xb, "d00832602d14e98b2aef8b"}, &(0x7f0000001140)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001180)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000011c0)={0xc0, 0xa1, 0x4, 0x7f}, &(0x7f0000001200)={0x40, 0xa0, 0x4, 0x8}, &(0x7f0000001240)={0xc0, 0xa2, 0x2f, "d606235c6dd6b91c2dcc9f20c9c79179feafb72da3f3a82eb9ff2eb63ba669fc145b35e82c4c26d8b8ca50939bcb0c"}}) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000180)={'vcan0\x00', 0x1}) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x4020) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, 0x3, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004001}, 0x40000) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 549.00195ms ago: executing program 1 (id=7022): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aa11f6bbf44d0000fffe008984", 0x39}], 0x1) 436.387151ms ago: executing program 1 (id=7024): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0xbf}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x111000, 0x10f) 436.181982ms ago: executing program 6 (id=7025): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x9, 0xa, 0x7f, 0x4}, {0x0, 0x2, 0x4, 0x9}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0xeeee0000, 0x5000}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0xeeee0000, 0x5000}) close_range(r0, 0xffffffffffffffff, 0x0) 344.546284ms ago: executing program 1 (id=7026): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1341, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101142, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x1c4, 0x0, 0x1c4}]}) close(r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_pidfd_open(0xffffffffffffffff, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) pidfd_getfd(r4, r5, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000002d00)={'veth0_macvtap\x00', {0x2, 0x4e23, @empty}}) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="cf"]) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'vxcan1\x00', 0x84aebfbd6349b7f2}) socket$netlink(0x10, 0x3, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x200640, 0x108) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x20}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c0dc}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) splice(r9, &(0x7f0000000200), r11, 0x0, 0x808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) 283.220465ms ago: executing program 6 (id=7027): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/197, 0xc5}, {&(0x7f00000003c0)=""/4107, 0x100b}], 0x2}, 0xfffffffc}], 0x1, 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000100000000000000000000000000000044010500ac14143b000000000000000000000000000004d32b00"], 0x1fc}}, 0x0) 228.603086ms ago: executing program 6 (id=7028): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r0, 0x4) mount$bpf(0x0, 0x0, 0x0, 0x810088, &(0x7f0000000240)=ANY=[@ANYBLOB='u']) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) pipe(&(0x7f0000019480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) write(r1, &(0x7f0000000400)="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", 0x1f000) 228.448126ms ago: executing program 6 (id=7029): openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3ff, 0x0, 0xff, 0x5, 0xda73, 0x5}, 0x20) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x717d, 0x3, 0xbe14, 0x9c, 0x0, "e88e76d49ad96dc88b09cc45015aeeb796f418"}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40603d10, &(0x7f00000002c0)={0x1, 0x9}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x24, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000)="ca9a", 0x2, 0x12, 0x0, 0x0) recvfrom$inet(r4, 0x0, 0x0, 0x40000022, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x4000) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, 0x0) 212.685756ms ago: executing program 6 (id=7030): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) pipe(0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1819c0, 0xc) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) (async) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000002c0)={0x50, 0xfffffffffffffffe, r3, {0x7, 0x2b, 0xfffffff8, 0x0, 0x2, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x80}}, 0x50) (async) recvfrom$inet_nvme(r1, &(0x7f0000000040), 0x0, 0x40010061, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) (async) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x10001}) madvise(&(0x7f000012f000/0x1000)=nil, 0x1000, 0xc) 189.721746ms ago: executing program 1 (id=7031): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0xffffffffffffffff, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f0000000940)=""/4096, 0x1000, 0x1, 0x20003f}, @flat=@weak_binder={0x77622a85, 0x1, 0xfffffffffffffffc}}, &(0x7f0000000000)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 140.637827ms ago: executing program 6 (id=7032): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x3) (async) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000140)={r3, 0x1, 0x0, 0x8000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r4, 0x4000) (async) read(r0, &(0x7f0000000040)=""/141, 0x8d) sendfile(r0, r0, 0x0, 0x7ffff000) 119.155668ms ago: executing program 1 (id=7033): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aa11f6bbf44d000000ff008984", 0x39}], 0x1) 0s ago: executing program 1 (id=7034): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x1, 0x0, &(0x7f00000000c0)=""/243, &(0x7f00000001c0)=""/149, &(0x7f0000000280)=""/182, 0x100000}) write$binfmt_script(r1, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x4283cafe) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) close(0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000003c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY\t\x00\x00\x00\x00\x00\x00\x003\x1f\xc5!\xb2\x1bs\xfc\x00\x00\x00\x00\x00\x00\x0f\xff\xfc\t\x9c\xda\xf2\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8cfV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\x88\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12J\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda\xe8H\xc3\x9a\xfdNak\x99\x87\n\x1d\xb22m\xdd\xa9\xc1\x9a\xac\xd2\xda\xed\xab\xa2J\xf7e_\xe6\xd5\xcf\x8a\x13sF\xc3\x83\x0e=\x00\x00\x00\x00\x00\x00\xf1\xff\xff\xff\xff\xff\xff\xff\x00\x00\xb8Y\xd0\x13F4$6\xb0I\xc3\xfas\xdcnq\\\x19~\xcd\xc27D\v\xe6v\xe3\xd4\xb8\x15LW\xad\xb5S\t\x9d$D9Q_\xa7\xd0\xe8\xe7\xa4\xee\x19\x86/j\xb7A\xd7\xfb\x13\xbf\xcd\xb2m\x9f\x1e\xe4l\xa7x\x1d\xe3\xca/\x8d%\x90\t\x1d\x9bV\xeb{\xd8\x1d7\xa8v\xfch\xe65\xb4W\xa4PY\xac\xfbK`~N\xea\x87\x92\xd7\x11\xc4\xe9ME.\v\x97 t\x92}\xfd\xa1\xfaQX\x13\x9bMU,\x88\x8b\xcf\xb4\x92\xe4\xf5\x85/\xd9\x8b/\xcf\f\x1b\xf8\xf9\x12\xe0') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26001, 0x13, r0, 0xd3c59000) kernel console output (not intermixed with test programs): [T16368] A link change request failed with some changes committed already. Interface 32ªö»ôM may have been left with an inconsistent configuration, please check. [ 319.188263][T16376] rust_binder: 542: no such ref 0 [ 319.193514][T16376] rust_binder: 542: no such ref 0 [ 319.198585][T16376] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 319.205941][T16376] rust_binder: 542: no such ref 64 [ 319.211262][T16376] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:542 [ 319.255907][T16383] binder: Unknown parameter 'm¡û„Æbl\á9Ê7dax' [ 319.410208][T16415] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16415 comm=syz.6.5711 [ 319.463003][T16427] 9pnet_fd: Insufficient options for proto=fd [ 319.568671][T14303] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 319.698681][T14303] usb 4-1: device descriptor read/64, error -71 [ 319.938643][T14303] usb 4-1: device descriptor read/64, error -71 [ 320.178687][T14303] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 320.193003][T16448] rust_binder: 731: no such ref 3 [ 320.198072][T16448] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:731 [ 320.198561][T16448] rust_binder: Error while translating object. [ 320.207793][T16448] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 320.213995][T16448] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:731 [ 320.308674][T14303] usb 4-1: device descriptor read/64, error -71 [ 320.356637][T16454] rust_binder: Write failure EFAULT in pid:737 [ 320.375924][T16458] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5730'. [ 320.391075][T16458] 0ªö»ôM: renamed from 31ªö»ôM (while UP) [ 320.397590][T16458] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 320.422051][T16460] netlink: 'syz.2.5731': attribute type 4 has an invalid length. [ 320.429876][T16460] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.5731'. [ 320.462848][T16460] rust_binder: Error in use_page_slow: ESRCH [ 320.462873][T16460] rust_binder: use_range failure ESRCH [ 320.468974][T16460] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 320.474479][T16460] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 320.482451][T16460] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:743 [ 320.558828][T14303] usb 4-1: device descriptor read/64, error -71 [ 320.678815][T14303] usb usb4-port1: attempt power cycle [ 320.695894][T16484] netlink: 5 bytes leftover after parsing attributes in process `syz.6.5739'. [ 320.704941][T16484] 0ªö»ôM: renamed from bridge_slave_0 (while UP) [ 320.712447][T16484] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 320.745627][T16491] netlink: 5 bytes leftover after parsing attributes in process `syz.6.5741'. [ 320.754625][T16491] 2ªö»ôM: renamed from 31ªö»ôM (while UP) [ 320.761187][T16491] A link change request failed with some changes committed already. Interface 32ªö»ôM may have been left with an inconsistent configuration, please check. [ 320.797189][T16495] rust_binder: Error in use_page_slow: ESRCH [ 320.797210][T16495] rust_binder: use_range failure ESRCH [ 320.803791][T16495] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 320.809396][T16495] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 320.817377][T16495] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:162 [ 320.891675][T16504] netlink: 76 bytes leftover after parsing attributes in process `syz.7.5745'. [ 321.019247][T14303] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 321.041444][T14303] usb 4-1: device descriptor read/8, error -71 [ 321.169643][T14303] usb 4-1: device descriptor read/8, error -71 [ 321.178481][ T36] kauditd_printk_skb: 506 callbacks suppressed [ 321.178498][ T36] audit: type=1400 audit(2000000114.360:1347): avc: denied { mount } for pid=16526 comm="syz.7.5753" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 321.397030][T16555] rust_binder: Error while translating object. [ 321.397061][T16555] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 321.403289][T16555] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:755 [ 321.418677][T14303] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 321.421224][T16557] batadv_slave_0: entered promiscuous mode [ 321.450011][T14303] usb 4-1: device descriptor read/8, error -71 [ 321.528849][T16556] batadv_slave_0: left promiscuous mode [ 321.576991][T16560] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5766'. [ 321.585999][T16560] 0ªö»ôMÿ: renamed from 32ªö»ôM (while UP) [ 321.586965][T14303] usb 4-1: device descriptor read/8, error -71 [ 321.598829][T16560] A link change request failed with some changes committed already. Interface 30ªö»ôMÿ may have been left with an inconsistent configuration, please check. [ 321.652076][T16570] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 321.680505][T16573] overlayfs: failed to clone upperpath [ 321.699585][T14303] usb usb4-port1: unable to enumerate USB device [ 321.852514][ T36] audit: type=1400 audit(2000000115.040:1348): avc: denied { unmount } for pid=15901 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 321.928375][T16581] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 321.961281][T16583] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5777'. [ 321.979009][T16583] 1ªö»ôM: renamed from 30ªö»ôMÿ (while UP) [ 321.985987][T16583] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 322.022126][T16594] tipc: Started in network mode [ 322.027045][T16594] tipc: Node identity 12dc1aa73978, cluster identity 4711 [ 322.034677][T16594] tipc: Enabled bearer , priority 0 [ 322.043091][T16594] netlink: 'syz.2.5780': attribute type 63 has an invalid length. [ 322.050989][T16594] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5780'. [ 322.059890][T16594] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 322.077721][T16594] tipc: Disabling bearer [ 322.084554][T16596] pim6reg1: entered promiscuous mode [ 322.089873][T16596] pim6reg1: entered allmulticast mode [ 322.309682][T16615] netlink: 5 bytes leftover after parsing attributes in process `syz.7.5788'. [ 322.318920][T16615] 0ªö»ôM: renamed from gretap0 (while UP) [ 322.321613][T16618] random: crng reseeded on system resumption [ 322.331322][T16615] 0ªö»ôM: entered allmulticast mode [ 322.341237][T16615] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 322.388637][T16622] netlink: 'syz.2.5791': attribute type 29 has an invalid length. [ 322.406398][T16625] can0: slcan on ttyS3. [ 322.451034][T16636] syzkaller0: entered allmulticast mode [ 322.467751][T16636] syzkaller0: entered promiscuous mode [ 322.478975][T16636] syzkaller0 (unregistering): left promiscuous mode [ 322.487947][T16636] syzkaller0 (unregistering): left allmulticast mode [ 322.986948][T16669] 0ªö»ôMÿ: renamed from 31ªö»ôM (while UP) [ 322.993610][T16669] A link change request failed with some changes committed already. Interface 30ªö»ôMÿ may have been left with an inconsistent configuration, please check. [ 323.189256][T16680] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:571 [ 323.221239][T16684] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 323.239265][T16684] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 323.248228][T16684] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 323.256921][T16684] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 323.265658][T16684] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 323.274358][T16684] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 323.334475][T16693] new mount options do not match the existing superblock, will be ignored [ 323.343439][T16693] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 323.343523][T16693] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 323.350000][T16693] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:584 [ 323.363827][ T36] audit: type=1400 audit(2000000116.550:1349): avc: denied { unmount } for pid=13855 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 323.370558][T16695] 0ªö»ôM: renamed from 31ªö»ôM (while UP) [ 323.399986][T16695] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 323.546594][T16716] rust_binder: 16716 RLIMIT_NICE not set [ 323.546685][T16715] rust_binder: 603: no such ref 128 [ 323.557598][T16715] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:603 [ 323.589913][T16719] tmpfs: Unknown parameter 'no' [ 323.702353][T16725] 0ªö»ôM: renamed from 32ªö»ôM (while UP) [ 323.951072][T16733] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 323.951110][T16733] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:794 [ 324.382473][ T63] rust_binder: 16714: removing orphan mapping 0:1048 [ 324.392912][T16740] input: syz1 as /devices/virtual/input/input29 [ 324.435322][ T36] audit: type=1400 audit(2000000117.620:1350): avc: denied { accept } for pid=16741 comm="syz.7.5828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 324.506797][T16747] __nla_validate_parse: 3 callbacks suppressed [ 324.506812][T16747] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5830'. [ 324.521915][T16747] 0ªö»ôMþ: renamed from 30ªö»ôM (while UP) [ 324.528574][T16747] net_ratelimit: 1 callbacks suppressed [ 324.534181][T16747] A link change request failed with some changes committed already. Interface 30ªö»ôMþ may have been left with an inconsistent configuration, please check. [ 324.633041][ T36] audit: type=1400 audit(2000000117.820:1351): avc: denied { mount } for pid=16762 comm="syz.6.5835" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 324.682533][ T45] rust_binder: 16760: removing orphan mapping 0:24 [ 325.337862][T16776] netlink: 5 bytes leftover after parsing attributes in process `syz.7.5839'. [ 325.355621][T16776] 0ªö»ôMÿ: renamed from 30ªö»ôM (while UP) [ 325.369269][T16776] A link change request failed with some changes committed already. Interface 30ªö»ôMÿ may have been left with an inconsistent configuration, please check. [ 325.431066][T16778] netlink: 84 bytes leftover after parsing attributes in process `syz.7.5840'. [ 325.659803][T16798] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16798 comm=syz.6.5847 [ 325.674454][T16798] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=16798 comm=syz.6.5847 [ 325.687338][T16798] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16798 comm=syz.6.5847 [ 325.702324][T16798] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=16798 comm=syz.6.5847 [ 325.749090][T16802] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5849'. [ 325.889429][T16814] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.889458][T16814] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.896034][T16814] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.903241][T16814] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.910643][T16814] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.917424][T16814] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.009661][T16828] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5855'. [ 326.081165][ T36] audit: type=1400 audit(2000000119.270:1352): avc: denied { shutdown } for pid=16829 comm="syz.2.5856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 326.121424][ T36] audit: type=1326 audit(2000000119.290:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16827 comm="syz.3.5855" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f3092385b67 code=0x0 [ 326.251332][T16837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5858'. [ 326.283228][T16837] rust_binder: 825: no such ref 0 [ 326.298001][T16837] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 326.324857][T16837] rust_binder: 825: no such ref 64 [ 326.342074][T16837] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:825 [ 326.627221][T16877] netlink: 'syz.2.5869': attribute type 1 has an invalid length. [ 326.695442][T16877] usb usb9: check_ctrlrecip: process 16877 (syz.2.5869) requesting ep 01 but needs 81 [ 326.708495][T16877] usb usb9: usbfs: process 16877 (syz.2.5869) did not claim interface 0 before use [ 326.718219][T16877] tipc: Enabled bearer , priority 0 [ 326.770900][T16877] tipc: Disabling bearer [ 326.997623][ T36] audit: type=1400 audit(2000000120.180:1354): avc: denied { setattr } for pid=16895 comm="syz.6.5878" name="secretmem" dev="secretmem" ino=87461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 327.058816][ T63] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 327.118675][ T10] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 327.219878][ T63] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 327.228137][ T63] usb 3-1: config 1 has no interface number 0 [ 327.235418][ T63] usb 3-1: config 1 interface 105 has no altsetting 0 [ 327.243949][ T63] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 327.253313][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.261546][ T63] usb 3-1: Product: syz [ 327.265869][ T63] usb 3-1: Manufacturer: syz [ 327.270665][ T63] usb 3-1: SerialNumber: syz [ 327.289755][ T10] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 327.299950][ T10] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 327.309916][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 327.317870][ T10] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 327.327006][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.335046][ T10] usb 4-1: Product: syz [ 327.339269][ T10] usb 4-1: Manufacturer: syz [ 327.343859][ T10] usb 4-1: SerialNumber: syz [ 327.349331][T16887] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 327.356577][T16887] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 327.621813][ T483] tipc: Subscription rejected, illegal request [ 327.883931][ T63] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 327.894835][ T63] aqc111 3-1:1.105: probe with driver aqc111 failed with error -71 [ 327.905042][ T63] usb 3-1: USB disconnect, device number 44 [ 328.367707][ T10] (unnamed net_device) (uninitialized): Assigned a random MAC address: 06:1b:2d:b3:8c:52 [ 328.379437][ T10] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 328.388719][ T10] usb 4-1: USB disconnect, device number 66 [ 328.406562][T16931] overlayfs: failed to clone upperpath [ 328.498521][T16950] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5897'. [ 328.518965][T16950] 1ªö»ôM: renamed from 30ªö»ôM (while UP) [ 328.536048][T16950] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 328.576112][T16887] rust_binder: Error while translating object. [ 328.576159][T16887] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 328.592618][T16887] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:648 [ 328.665563][T16946] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 328.878653][ T31] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 329.012343][T16988] netlink: 5 bytes leftover after parsing attributes in process `syz.6.5911'. [ 329.023821][T16988] 1ªö»ôM: renamed from 30ªö»ôM (while UP) [ 329.030838][T16988] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 329.049929][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 329.067507][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 329.076926][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.088330][ T31] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 329.097863][ T31] usb 3-1: config 1 has no interface number 1 [ 329.104972][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 329.118147][ T31] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 329.131009][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 329.140300][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.155901][ T31] usb 3-1: Product: syz [ 329.160743][ T31] usb 3-1: Manufacturer: syz [ 329.161807][T17000] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5917'. [ 329.165345][ T31] usb 3-1: SerialNumber: syz [ 329.179101][T17000] 0ªö»ôM: renamed from 30ªö»ôMþ (while UP) [ 329.185907][T17000] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 329.237079][T17006] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 329.261296][T17013] usb usb7: usbfs: process 17013 (syz.7.5921) did not claim interface 0 before use [ 329.279910][T17013] rust_binder: Error while translating object. [ 329.279954][T17013] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 329.286157][T17013] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:253 [ 329.311072][T17015] netlink: 5 bytes leftover after parsing attributes in process `syz.7.5922'. [ 329.329515][T17015] 0ªö»ôM: renamed from bridge_slave_0 (while UP) [ 329.336673][T17015] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 329.371860][ T31] hub 3-1:1.0: Invalid hub with more than one config or interface [ 329.388237][ T31] hub 3-1:1.0: probe with driver hub failed with error -22 [ 329.397329][ T31] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 329.424432][ T31] usb 3-1: USB disconnect, device number 45 [ 329.586198][T17030] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 329.586231][T17030] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:665 [ 329.739219][T17044] rust_binder: Write failure EFAULT in pid:263 [ 329.880644][ T36] audit: type=1400 audit(2000000123.070:1355): avc: denied { getattr } for pid=17062 comm="syz.7.5937" name="/" dev="incremental-fs" ino=582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 329.881856][T17063] overlayfs: upper fs does not support tmpfile. [ 329.939138][T17063] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 329.969912][T17078] overlayfs: failed to clone upperpath [ 329.972063][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 329.975412][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 329.975698][T17079] overlayfs: failed to clone upperpath [ 329.989666][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 329.993721][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 329.994808][T17084] incfs: Backing dir is not set, filesystem can't be mounted. [ 330.001046][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.020533][T17084] incfs: mount failed -2 [ 330.021954][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.024830][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.031276][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.031618][T17084] 9pnet_fd: Insufficient options for proto=fd [ 330.037744][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.049090][T17083] rust_binder: Error in use_page_slow: ESRCH [ 330.050296][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.062880][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.069191][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.074781][T17083] rust_binder: use_range failure ESRCH [ 330.078010][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.088009][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.094028][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.094257][T17083] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 330.100597][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.115071][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.121390][T17083] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 330.121572][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.127842][T17083] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:872 [ 330.137427][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.152846][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.159541][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.165925][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.173056][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.179096][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.185692][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.192340][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.198819][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.205301][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.211925][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.218821][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.225855][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.231876][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.238407][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.245151][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.252918][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.259598][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.266080][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.273793][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.280430][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.286705][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.296289][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.311929][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.311953][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.318444][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.330230][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.332333][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.341236][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.357423][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.357438][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.365697][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.370543][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.377733][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.383712][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.391089][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.396630][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.403334][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.409954][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.416461][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.423168][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.429544][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.436064][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.442713][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.449386][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.455625][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.579446][T17111] __nla_validate_parse: 1 callbacks suppressed [ 330.579461][T17111] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5952'. [ 330.594597][T17111] 0ªö»ôM: renamed from 31ªö»ôM (while UP) [ 330.601274][T17111] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 330.678627][T17118] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5962'. [ 330.687689][T17118] 1ªö»ôM: renamed from 30ªö»ôMÿ (while UP) [ 330.694414][T17118] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 330.733538][T17124] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 330.743239][T17124] SELinux: failed to load policy [ 330.776172][T17135] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5961'. [ 330.785202][T17135] 1ªö»ôM: renamed from 30ªö»ôM (while UP) [ 330.792144][T17135] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 330.835313][T17140] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5964'. [ 330.858749][T17140] 2ªö»ôM: renamed from 30ªö»ôM (while UP) [ 330.875226][T17140] A link change request failed with some changes committed already. Interface 32ªö»ôM may have been left with an inconsistent configuration, please check. [ 331.032537][T17153] rust_binder: Error in use_page_slow: ESRCH [ 331.032564][T17153] rust_binder: use_range failure ESRCH [ 331.048690][T17153] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 331.058682][T17153] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 331.076946][T17153] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:694 [ 331.337473][T17162] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5971'. [ 331.372557][T17162] 0ªö»ôM: renamed from 31ªö»ôM (while UP) [ 331.389484][T17162] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 331.561765][T17170] veth0_virt_wifi: entered allmulticast mode [ 331.568345][T17170] veth0_virt_wifi: left allmulticast mode [ 331.608641][T17165] input input31: cannot allocate more than FF_MAX_EFFECTS effects [ 333.367220][T17176] rust_binder: Write failure EFAULT in pid:709 [ 333.367977][T17175] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5976'. [ 333.392416][T17175] 2ªö»ôM: renamed from 31ªö»ôM (while UP) [ 333.399543][T17182] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 333.400691][T17175] A link change request failed with some changes committed already. Interface 32ªö»ôM may have been left with an inconsistent configuration, please check. [ 333.408884][ T36] audit: type=1400 audit(2000000126.590:1356): avc: denied { remount } for pid=17181 comm="syz.3.5978" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 333.449987][ T36] audit: type=1107 audit(2000000126.640:1357): pid=17185 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='!m™•WÊxC#­„"ûÏ»BjcIžþ‰»Ew3, rßW0ÛFæÿ¿|ÿ>yÌÚ8ò'g_2¬k×î?¨ÞPÈÚ [ 333.449987][ T36] ¯§ÝÊVƬÌ+­zÐœµFAÐ+íAZüš[A'5IC' [ 333.480704][T17193] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5981'. [ 333.498366][T17193] 1ªö»ôM: renamed from 30ªö»ôM (while UP) [ 333.508554][T17193] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 333.593882][ T36] audit: type=1400 audit(2000000126.780:1358): avc: denied { mount } for pid=17194 comm="syz.7.5985" name="/" dev="pstore" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 333.675029][T17226] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5991'. [ 333.695531][ T36] audit: type=1400 audit(2000000126.880:1359): avc: denied { unmount } for pid=15901 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 333.704397][T17226] 1ªö»ôM: renamed from 32ªö»ôM (while UP) [ 333.740028][T17226] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 333.978967][ T329] bridge_slave_1: left allmulticast mode [ 333.984668][ T329] bridge_slave_1: left promiscuous mode [ 333.990331][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.997769][ T329] 0ªö»ôM: left promiscuous mode [ 334.002861][ T329] bridge0: port 1(30ªö»ôM) entered disabled state [ 334.051216][T17232] netlink: 'syz.6.5990': attribute type 4 has an invalid length. [ 334.136255][ T329] veth1_macvtap: left promiscuous mode [ 334.152096][ T329] veth0_vlan: left promiscuous mode [ 334.305157][T17242] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.318652][T17242] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.327318][T17242] bridge_slave_0: entered allmulticast mode [ 334.333970][T17242] bridge_slave_0: entered promiscuous mode [ 334.341041][T17264] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6005'. [ 334.350034][T17264] 0ªö»ôM: renamed from 31ªö»ôM (while UP) [ 334.356772][T17264] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 334.375563][T17242] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.382723][T17242] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.395552][T17242] bridge_slave_1: entered allmulticast mode [ 334.406290][T17242] bridge_slave_1: entered promiscuous mode [ 334.515136][T17242] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.522222][T17242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.529515][T17242] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.536531][T17242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.557429][ T8818] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.564906][ T8818] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.574175][ T483] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.581244][ T483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.591090][ T483] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.598123][ T483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.617728][T17298] veth0_virt_wifi: entered allmulticast mode [ 334.634974][T17242] veth0_vlan: entered promiscuous mode [ 334.645636][T17242] veth1_macvtap: entered promiscuous mode [ 334.689294][T17301] veth0_virt_wifi: left allmulticast mode [ 334.718804][ T63] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 334.879791][ T63] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.889983][ T63] usb 3-1: config 0 has no interfaces? [ 334.896220][ T63] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 334.905949][ T63] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 334.914076][ T63] usb 3-1: Manufacturer: syz [ 334.919739][ T63] usb 3-1: config 0 descriptor?? [ 335.050977][T17319] x_tables: duplicate entry at hook 2 [ 335.056782][T17319] tmpfs: Bad value for 'huge' [ 335.130093][T17285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.138555][T17285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.229393][ T329] bridge_slave_1: left allmulticast mode [ 335.235131][ T329] bridge_slave_1: left promiscuous mode [ 335.240786][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.248209][ T329] 0ªö»ôM: left promiscuous mode [ 335.253303][ T329] bridge0: port 1(30ªö»ôM) entered disabled state [ 335.281986][T17279] rust_binder: Read failure Err(EFAULT) in pid:931 [ 335.311598][ T31] usb 3-1: USB disconnect, device number 46 [ 335.326117][T17334] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6028'. [ 335.335087][T17334] 0ªö»ôM: renamed from 31ªö»ôM (while UP) [ 335.341709][T17334] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 335.399107][T17323] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.406160][T17323] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.413253][T17323] bridge_slave_0: entered allmulticast mode [ 335.419898][T17323] bridge_slave_0: entered promiscuous mode [ 335.427041][ T329] veth1_macvtap: left promiscuous mode [ 335.432783][ T329] veth0_vlan: left promiscuous mode [ 335.438953][ T45] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 335.495534][T17323] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.504384][T17323] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.511674][T17323] bridge_slave_1: entered allmulticast mode [ 335.518030][T17323] bridge_slave_1: entered promiscuous mode [ 335.605637][T17323] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.612724][T17323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.620034][T17323] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.627066][T17323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.635595][ T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.648867][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.656067][ T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.658903][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.666207][ T45] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 335.685851][ T45] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 335.695022][ T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.699375][ T8836] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.703740][ T45] usb 9-1: config 0 descriptor?? [ 335.710059][ T8836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.710822][ T8836] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.729212][ T8836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.754084][T17323] veth0_vlan: entered promiscuous mode [ 335.765249][T17323] veth1_macvtap: entered promiscuous mode [ 335.844358][T17375] rust_binder: 17370 RLIMIT_NICE not set [ 335.844576][T17370] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 335.850472][T17370] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 335.859975][T17370] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:936 [ 335.882895][T17377] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6037'. [ 335.900116][T17377] 1ªö»ôM: renamed from 30ªö»ôM (while UP) [ 335.906707][T17377] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 335.961729][T17380] rust_binder: Error in use_page_slow: ESRCH [ 335.961774][T17380] rust_binder: use_range failure ESRCH [ 335.967846][T17380] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 335.973828][T17380] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 335.981884][T17380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:941 [ 336.037285][T17382] rust_binder: Write failure EFAULT in pid:943 [ 336.046991][T17382] bpf: Bad value for 'gid' [ 336.124878][T17322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.133470][T17322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.239671][ T45] usbhid 9-1:0.0: can't add hid device: -71 [ 336.245701][ T45] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 336.255126][ T45] usb 9-1: USB disconnect, device number 2 [ 336.747051][T17396] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6042'. [ 336.769688][T17396] 1ªö»ôM: renamed from 30ªö»ôM (while UP) [ 336.777406][T17396] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 336.794259][T17398] netlink: 104 bytes leftover after parsing attributes in process `syz.8.6043'. [ 336.806756][T17398] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551614) [ 336.806783][T17398] rust_binder: Error while translating object. [ 336.820485][T17398] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 336.826665][T17398] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19 [ 336.899400][T17408] netlink: 188 bytes leftover after parsing attributes in process `syz.8.6046'. [ 336.899875][T17410] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 336.917920][T17410] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:26 [ 336.923067][T17413] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6048'. [ 336.945676][T17413] 2ªö»ôM: renamed from 30ªö»ôM (while UP) [ 336.959799][T17413] A link change request failed with some changes committed already. Interface 32ªö»ôM may have been left with an inconsistent configuration, please check. [ 337.008669][ T45] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 337.052068][ T36] audit: type=1326 audit(2000000130.240:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17418 comm="syz.9.6050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c318eba9 code=0x7fc00000 [ 337.086597][T17426] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6054'. [ 337.097672][T17426] 0ªö»ôM: renamed from 31ªö»ôM (while UP) [ 337.104295][T17426] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 337.138648][ T45] usb 3-1: device descriptor read/64, error -71 [ 337.203038][T17442] netlink: 140 bytes leftover after parsing attributes in process `syz.6.6058'. [ 337.338667][ T330] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 337.388676][ T45] usb 3-1: device descriptor read/64, error -71 [ 337.468650][ T330] usb 9-1: device descriptor read/64, error -71 [ 337.608369][T17452] netlink: 5 bytes leftover after parsing attributes in process `syz.9.6063'. [ 337.617382][T17452] 0ªö»ôM: renamed from gretap0 (while UP) [ 337.623933][T17452] 0ªö»ôM: entered allmulticast mode [ 337.629499][ T45] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 337.629565][T17452] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 337.708669][ T330] usb 9-1: device descriptor read/64, error -71 [ 337.758890][ T45] usb 3-1: device descriptor read/64, error -71 [ 337.924233][T17479] fuse: Bad value for 'group_id' [ 337.929304][T17479] fuse: Bad value for 'group_id' [ 337.934381][T17479] fuse: Bad value for 'group_id' [ 337.939401][T17479] fuse: Bad value for 'group_id' [ 337.944464][T17479] fuse: Bad value for 'group_id' [ 337.948674][ T330] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 337.949459][T17479] fuse: Bad value for 'group_id' [ 337.961851][T17479] fuse: Bad value for 'group_id' [ 337.966771][T17479] fuse: Bad value for 'group_id' [ 337.971835][T17479] fuse: Bad value for 'group_id' [ 337.976769][T17479] fuse: Bad value for 'group_id' [ 337.981924][T17479] fuse: Bad value for 'group_id' [ 337.986892][T17479] fuse: Bad value for 'group_id' [ 337.992075][T17479] fuse: Bad value for 'group_id' [ 337.997047][T17479] fuse: Bad value for 'group_id' [ 338.002235][T17479] fuse: Bad value for 'group_id' [ 338.007173][T17479] fuse: Bad value for 'group_id' [ 338.008643][ T45] usb 3-1: device descriptor read/64, error -71 [ 338.012588][T17479] fuse: Bad value for 'group_id' [ 338.023284][T17479] fuse: Bad value for 'group_id' [ 338.028299][T17479] fuse: Bad value for 'group_id' [ 338.033234][T17479] fuse: Bad value for 'group_id' [ 338.038232][T17479] fuse: Bad value for 'group_id' [ 338.043194][T17479] fuse: Bad value for 'group_id' [ 338.048196][T17479] fuse: Bad value for 'group_id' [ 338.053137][T17479] fuse: Bad value for 'group_id' [ 338.058166][T17479] fuse: Bad value for 'group_id' [ 338.063181][T17479] fuse: Bad value for 'group_id' [ 338.068180][T17479] fuse: Bad value for 'group_id' [ 338.073136][T17479] fuse: Bad value for 'group_id' [ 338.078130][T17479] fuse: Bad value for 'group_id' [ 338.083311][T17479] fuse: Bad value for 'group_id' [ 338.088418][T17479] fuse: Bad value for 'group_id' [ 338.088764][ T330] usb 9-1: device descriptor read/64, error -71 [ 338.093392][T17479] fuse: Bad value for 'group_id' [ 338.104599][T17479] fuse: Bad value for 'group_id' [ 338.109541][T17479] fuse: Bad value for 'group_id' [ 338.114535][T17479] fuse: Bad value for 'group_id' [ 338.119494][T17479] fuse: Bad value for 'group_id' [ 338.124489][T17479] fuse: Bad value for 'group_id' [ 338.129447][T17479] fuse: Bad value for 'group_id' [ 338.134479][T17479] fuse: Bad value for 'group_id' [ 338.138762][ T45] usb usb3-port1: attempt power cycle [ 338.139426][T17479] fuse: Bad value for 'group_id' [ 338.149903][T17479] fuse: Bad value for 'group_id' [ 338.154889][T17479] fuse: Bad value for 'group_id' [ 338.160098][T17479] fuse: Bad value for 'group_id' [ 338.165068][T17479] fuse: Bad value for 'group_id' [ 338.170218][T17479] fuse: Bad value for 'group_id' [ 338.175136][T17479] fuse: Bad value for 'group_id' [ 338.180193][T17479] fuse: Bad value for 'group_id' [ 338.185126][T17479] fuse: Bad value for 'group_id' [ 338.190192][T17479] fuse: Bad value for 'group_id' [ 338.195117][T17479] fuse: Bad value for 'group_id' [ 338.200188][T17479] fuse: Bad value for 'group_id' [ 338.205156][T17479] fuse: Bad value for 'group_id' [ 338.210302][T17479] fuse: Bad value for 'group_id' [ 338.215280][T17479] fuse: Bad value for 'group_id' [ 338.220348][T17479] fuse: Bad value for 'group_id' [ 338.225268][T17479] fuse: Bad value for 'group_id' [ 338.230330][T17479] fuse: Bad value for 'group_id' [ 338.235259][T17479] fuse: Bad value for 'group_id' [ 338.240417][T17479] fuse: Bad value for 'group_id' [ 338.245444][T17479] fuse: Bad value for 'group_id' [ 338.250826][T17479] fuse: Bad value for 'group_id' [ 338.255774][T17479] fuse: Bad value for 'group_id' [ 338.260801][T17479] fuse: Bad value for 'group_id' [ 338.265725][T17479] fuse: Bad value for 'group_id' [ 338.270777][T17479] fuse: Bad value for 'group_id' [ 338.275714][T17479] fuse: Bad value for 'group_id' [ 338.280783][T17479] fuse: Bad value for 'group_id' [ 338.285713][T17479] fuse: Bad value for 'group_id' [ 338.290765][T17479] fuse: Bad value for 'group_id' [ 338.295688][T17479] fuse: Bad value for 'group_id' [ 338.300718][T17479] fuse: Bad value for 'group_id' [ 338.305644][T17479] fuse: Bad value for 'group_id' [ 338.310721][T17479] fuse: Bad value for 'group_id' [ 338.315643][T17479] fuse: Bad value for 'group_id' [ 338.320953][T17479] fuse: Bad value for 'group_id' [ 338.325906][T17479] fuse: Bad value for 'group_id' [ 338.331027][T17479] fuse: Bad value for 'group_id' [ 338.335951][T17479] fuse: Bad value for 'group_id' [ 338.341044][T17479] fuse: Bad value for 'group_id' [ 338.345972][T17479] fuse: Bad value for 'group_id' [ 338.348653][ T330] usb 9-1: device descriptor read/64, error -71 [ 338.351066][T17479] fuse: Bad value for 'group_id' [ 338.362139][T17479] fuse: Bad value for 'group_id' [ 338.367150][T17479] fuse: Bad value for 'group_id' [ 338.372093][T17479] fuse: Bad value for 'group_id' [ 338.377115][T17479] fuse: Bad value for 'group_id' [ 338.382052][T17479] fuse: Bad value for 'group_id' [ 338.387052][T17479] fuse: Bad value for 'group_id' [ 338.392012][T17479] fuse: Bad value for 'group_id' [ 338.397009][T17479] fuse: Bad value for 'group_id' [ 338.401987][T17479] fuse: Bad value for 'group_id' [ 338.407003][T17479] fuse: Bad value for 'group_id' [ 338.412144][T17479] fuse: Bad value for 'group_id' [ 338.417231][T17479] fuse: Bad value for 'group_id' [ 338.422390][T17479] fuse: Bad value for 'group_id' [ 338.427467][T17479] fuse: Bad value for 'group_id' [ 338.432514][T17479] fuse: Bad value for 'group_id' [ 338.437531][T17479] fuse: Bad value for 'group_id' [ 338.442490][T17479] fuse: Bad value for 'group_id' [ 338.447540][T17479] fuse: Bad value for 'group_id' [ 338.452534][T17479] fuse: Bad value for 'group_id' [ 338.457546][T17479] fuse: Bad value for 'group_id' [ 338.462500][T17479] fuse: Bad value for 'group_id' [ 338.467505][T17479] fuse: Bad value for 'group_id' [ 338.468746][ T330] usb usb9-port1: attempt power cycle [ 338.472461][T17479] fuse: Bad value for 'group_id' [ 338.482984][T17479] fuse: Bad value for 'group_id' [ 338.487977][T17479] fuse: Bad value for 'group_id' [ 338.493152][T17479] fuse: Bad value for 'group_id' [ 338.493259][ T45] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 338.498214][T17479] fuse: Bad value for 'group_id' [ 338.510832][T17479] fuse: Bad value for 'group_id' [ 338.515800][T17479] fuse: Bad value for 'group_id' [ 338.520929][T17479] fuse: Bad value for 'group_id' [ 338.525898][T17479] fuse: Bad value for 'group_id' [ 338.529686][ T45] usb 3-1: device descriptor read/8, error -71 [ 338.531025][T17479] fuse: Bad value for 'group_id' [ 338.541929][T17479] fuse: Bad value for 'group_id' [ 338.546993][T17479] fuse: Bad value for 'group_id' [ 338.551943][T17479] fuse: Bad value for 'group_id' [ 338.556946][T17479] fuse: Bad value for 'group_id' [ 338.562081][T17479] fuse: Bad value for 'group_id' [ 338.567082][T17479] fuse: Bad value for 'group_id' [ 338.572025][T17479] fuse: Bad value for 'group_id' [ 338.577062][T17479] fuse: Bad value for 'group_id' [ 338.582043][T17479] fuse: Bad value for 'group_id' [ 338.587059][T17479] fuse: Bad value for 'group_id' [ 338.592003][T17479] fuse: Bad value for 'group_id' [ 338.597448][T17479] fuse: Bad value for 'group_id' [ 338.602451][T17479] fuse: Bad value for 'group_id' [ 338.607502][T17479] fuse: Bad value for 'group_id' [ 338.612694][T17479] fuse: Bad value for 'group_id' [ 338.617774][T17479] fuse: Bad value for 'group_id' [ 338.622776][T17479] fuse: Bad value for 'group_id' [ 338.659798][ T45] usb 3-1: device descriptor read/8, error -71 [ 338.683491][T17491] overlayfs: missing 'workdir' [ 338.791327][T17495] fuse: Bad value for 'fd' [ 338.809445][ T330] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 338.829795][ T330] usb 9-1: device descriptor read/8, error -71 [ 338.898671][ T45] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 338.919658][ T45] usb 3-1: device descriptor read/8, error -71 [ 338.959855][ T330] usb 9-1: device descriptor read/8, error -71 [ 339.049642][ T45] usb 3-1: device descriptor read/8, error -71 [ 339.158776][ T45] usb usb3-port1: unable to enumerate USB device [ 339.198650][ T330] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 339.219707][ T330] usb 9-1: device descriptor read/8, error -71 [ 339.349706][ T330] usb 9-1: device descriptor read/8, error -71 [ 339.458736][ T330] usb usb9-port1: unable to enumerate USB device [ 339.634237][T17521] overlayfs: lower data-only dirs require metacopy support. [ 339.765470][T17524] netlink: 5 bytes leftover after parsing attributes in process `syz.9.6086'. [ 339.774596][T17524] 0ªö»ôMÿ: renamed from 30ªö»ôM (while UP) [ 339.781488][T17524] A link change request failed with some changes committed already. Interface 30ªö»ôMÿ may have been left with an inconsistent configuration, please check. [ 339.817788][T17530] veth0_virt_wifi: entered allmulticast mode [ 339.819599][T17533] netlink: 'syz.9.6088': attribute type 3 has an invalid length. [ 339.824141][T17529] veth0_virt_wifi: left allmulticast mode [ 339.897930][T17551] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 339.914232][T17554] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 339.974522][T17558] rust_binder: Error in use_page_slow: ESRCH [ 339.974547][T17558] rust_binder: use_range failure ESRCH [ 339.984986][T17558] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 339.985004][T17560] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6097'. [ 340.000504][T17558] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 340.007200][T17558] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:56 [ 340.017054][T17560] 1ªö»ôM: renamed from 30ªö»ôM (while UP) [ 340.021166][T17554] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:56 [ 340.033358][T17560] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 340.089955][T17564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65533 sclass=netlink_route_socket pid=17564 comm=syz.6.6099 [ 340.159539][T17571] rust_binder: 17571 RLIMIT_NICE not set [ 340.212502][T17572] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.288829][ T625] rust_binder: 17570: removing orphan mapping 0:1168 [ 340.315364][T17578] rust_binder: 47: no such ref 0 [ 340.339706][T17584] 0ªö»ôM: renamed from bridge_slave_0 (while UP) [ 340.346864][T17584] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 340.447222][T17592] 1ªö»ôM: renamed from gretap0 (while UP) [ 340.453557][T17592] 1ªö»ôM: entered allmulticast mode [ 340.459178][T17592] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 340.494843][T17597] rust_binder: Write failure EFAULT in pid:66 [ 340.659384][T17608] 0ªö»ôM: renamed from 32ªö»ôM (while UP) [ 340.672349][T17608] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 340.702647][T17613] 0ªö»ôMÿ: renamed from 32ªö»ôM (while UP) [ 340.723634][T17620] binder: Binderfs stats mode cannot be changed during a remount [ 340.790381][T17624] SELinux: security_context_str_to_sid () failed with errno=-22 [ 340.853525][T17631] 0ªö»ôM: renamed from bridge_slave_0 (while UP) [ 340.889667][T17633] 9pnet_fd: Insufficient options for proto=fd [ 340.928674][ T530] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 340.970967][ T625] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 341.098622][ T530] usb 9-1: Using ep0 maxpacket: 32 [ 341.108882][ T530] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.128664][ T530] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 341.139690][ T625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 341.151870][ T530] usb 9-1: config 0 interface 0 has no altsetting 0 [ 341.158627][ T625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.168678][ T530] usb 9-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 341.185303][ T530] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.188658][ T625] usb 3-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 341.207996][ T530] usb 9-1: config 0 descriptor?? [ 341.221684][ T625] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.241574][ T625] usb 3-1: config 0 descriptor?? [ 341.277471][T17639] __nla_validate_parse: 5 callbacks suppressed [ 341.277493][T17639] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6127'. [ 341.293098][T17639] 2ªö»ôM: renamed from 31ªö»ôM (while UP) [ 341.301874][T17639] net_ratelimit: 2 callbacks suppressed [ 341.301891][T17639] A link change request failed with some changes committed already. Interface 32ªö»ôM may have been left with an inconsistent configuration, please check. [ 341.439375][T17652] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6132'. [ 341.448391][T17652] 1ªö»ôM: renamed from 30ªö»ôM (while UP) [ 341.455405][T17652] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 341.504477][T17658] fuse: Bad value for 'fd' [ 341.589914][T17662] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6137'. [ 341.599061][T17662] 0ªö»ôM: renamed from 32ªö»ôM (while UP) [ 341.605731][T17662] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 341.621546][T16900] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 341.654418][ T625] logitech-djreceiver 0003:046D:C52F.0015: ignoring exceeding usage max [ 341.668705][ T625] logitech-djreceiver 0003:046D:C52F.0015: hidraw0: USB HID v0.00 Device [HID 046d:c52f] on usb-dummy_hcd.2-1/input0 [ 341.685924][T17672] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6141'. [ 341.695055][T17672] 2ªö»ôM: renamed from 31ªö»ôM (while UP) [ 341.701813][T17672] A link change request failed with some changes committed already. Interface 32ªö»ôM may have been left with an inconsistent configuration, please check. [ 341.779727][T16900] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.780581][T17688] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6147'. [ 341.789688][T16900] usb 10-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 341.798661][T17688] 0ªö»ôM: renamed from 30ªö»ôM (while UP) [ 341.807878][T16900] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.822332][T17688] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 341.822626][T16900] usb 10-1: config 0 descriptor?? [ 342.009520][T17696] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6151'. [ 342.018527][T17696] 0ªö»ôM: renamed from 32ªö»ôM (while UP) [ 342.025417][T17696] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 342.050225][T16900] wacom 0003:056A:00C6.0016: hidraw1: USB HID v0.00 Device [HID 056a:00c6] on usb-dummy_hcd.9-1/input0 [ 342.247692][ T330] usb 10-1: USB disconnect, device number 2 [ 342.863493][T17715] fuse: Invalid rootmode [ 342.868014][T17715] SELinux: security_context_str_to_sid () failed with errno=-22 [ 342.887436][T17717] netlink: 5 bytes leftover after parsing attributes in process `syz.9.6157'. [ 342.896502][T17717] 0ªö»ôMþ: renamed from 30ªö»ôMÿ (while UP) [ 342.903351][T17717] A link change request failed with some changes committed already. Interface 30ªö»ôMþ may have been left with an inconsistent configuration, please check. [ 343.135286][T17738] overlayfs: failed to clone upperpath [ 343.168689][ T625] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 343.319696][ T625] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 343.330810][ T625] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.340684][ T625] usb 10-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 343.349852][ T625] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.361816][ T625] usb 10-1: config 0 descriptor?? [ 343.450570][T17744] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6166'. [ 343.459628][T17744] 0ªö»ôM: renamed from 30ªö»ôMÿ (while UP) [ 343.466613][T17744] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 343.494970][T17746] cgroup: Unknown subsys name 'fowner' [ 343.586561][ T530] usbhid 9-1:0.0: can't add hid device: -71 [ 343.593453][ T530] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 343.600340][T17751] rust_binder: validate_parent_fixup: new_min_offset=32804, sg_entry.length=233 [ 343.601432][T17751] rust_binder: Error while translating object. [ 343.602814][ T530] usb 9-1: USB disconnect, device number 7 [ 343.613235][T17751] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 343.622578][T17751] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:76 [ 343.649458][ T63] usb 3-1: USB disconnect, device number 51 [ 343.770849][ T625] logitech-djreceiver 0003:046D:C52F.0017: ignoring exceeding usage max [ 343.780973][ T625] logitech-djreceiver 0003:046D:C52F.0017: hidraw0: USB HID v0.00 Device [HID 046d:c52f] on usb-dummy_hcd.9-1/input0 [ 343.938685][ T530] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 344.012543][ T625] usb 10-1: USB disconnect, device number 3 [ 344.090811][ T530] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.105516][ T530] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.115591][ T530] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 344.124812][ T530] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.133974][ T530] usb 9-1: config 0 descriptor?? [ 344.498983][T17775] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 344.527332][T17775] rust_binder: Write failure EINVAL in pid:975 [ 345.123399][ T530] hid-led 0003:27B8:01ED.0018: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.8-1/input0 [ 345.153405][T17787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 345.155601][T17787] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 345.158752][ T530] hid-led 0003:27B8:01ED.0018: ThingM blink(1) initialized [ 345.451557][T17793] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 345.451594][T17793] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:980 [ 345.597252][T17797] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6184'. [ 345.616640][T17797] 2ªö»ôM: renamed from 31ªö»ôM (while UP) [ 345.624886][T17797] A link change request failed with some changes committed already. Interface 32ªö»ôM may have been left with an inconsistent configuration, please check. [ 345.685825][T17800] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6185'. [ 345.705969][T17800] 1ªö»ôM: renamed from 30ªö»ôM (while UP) [ 345.722640][T17800] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 345.785337][T17802] rust_binder: 17802 RLIMIT_NICE not set [ 345.820374][ T625] rust_binder: 0: removing orphan mapping 0:1048 [ 346.639165][T17831] netlink: 5 bytes leftover after parsing attributes in process `syz.9.6196'. [ 346.658401][T17831] 1ªö»ôM: renamed from 30ªö»ôMþ (while UP) [ 346.667433][T17831] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 346.709257][T16900] usb 9-1: USB disconnect, device number 8 [ 346.753927][T17839] binder: Unknown parameter 'defcontext01777777777777777777777' [ 347.098236][T17849] 9pnet_fd: Insufficient options for proto=fd [ 347.117804][T17853] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6206'. [ 347.126751][T17853] 1ªö»ôM: renamed from 30ªö»ôM (while UP) [ 347.133642][T17853] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 347.269929][T17877] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6216'. [ 347.281930][T17877] 2ªö»ôM: renamed from 31ªö»ôM (while UP) [ 347.288358][T17877] A link change request failed with some changes committed already. Interface 32ªö»ôM may have been left with an inconsistent configuration, please check. [ 347.335914][T17888] netlink: 5 bytes leftover after parsing attributes in process `syz.8.6220'. [ 347.336725][T17889] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17889 comm=syz.6.6221 [ 347.344896][T17888] 2ªö»ôM: renamed from 30ªö»ôM (while UP) [ 347.364214][T17888] A link change request failed with some changes committed already. Interface 32ªö»ôM may have been left with an inconsistent configuration, please check. [ 347.459479][T17897] netlink: 'syz.6.6224': attribute type 4 has an invalid length. [ 347.468045][T17897] netlink: 'syz.6.6224': attribute type 4 has an invalid length. [ 347.478555][T17897] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6224'. [ 347.601039][T17891] rust_binder: Read failure Err(EFAULT) in pid:94 [ 347.624912][T17902] netlink: 5 bytes leftover after parsing attributes in process `syz.9.6226'. [ 347.640353][T17902] 2ªö»ôM: renamed from 31ªö»ôM (while UP) [ 347.646768][T17902] A link change request failed with some changes committed already. Interface 32ªö»ôM may have been left with an inconsistent configuration, please check. [ 347.717548][T17919] incfs: Options parsing error. -22 [ 347.723058][T17919] incfs: mount failed -22 [ 347.735264][T17922] netlink: 5 bytes leftover after parsing attributes in process `syz.8.6233'. [ 347.744888][T17922] 0ªö»ôM: renamed from 32ªö»ôM (while UP) [ 347.751996][T17922] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 347.791150][T17931] futex_wake_op: syz.8.6236 tries to shift op by 32; fix this program [ 347.816215][T17934] netlink: 5 bytes leftover after parsing attributes in process `syz.8.6237'. [ 347.826393][T17934] 2ªö»ôM: renamed from 31ªö»ôM (while UP) [ 347.830266][T17936] Invalid ELF header magic: != ELF [ 347.838489][T17934] A link change request failed with some changes committed already. Interface 32ªö»ôM may have been left with an inconsistent configuration, please check. [ 347.958361][ T36] audit: type=1326 audit(2000000141.140:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17949 comm="syz.9.6242" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4c318eba9 code=0x0 [ 348.010116][T17955] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:146 [ 348.048780][T17958] netlink: 5 bytes leftover after parsing attributes in process `syz.8.6244'. [ 348.066860][T17958] 1ªö»ôM: renamed from 30ªö»ôM (while UP) [ 348.073629][T17958] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 348.248665][ T530] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 348.381534][T17967] netlink: 5 bytes leftover after parsing attributes in process `syz.8.6247'. [ 348.390674][T17967] 0ªö»ôM: renamed from 32ªö»ôM (while UP) [ 348.397181][T17967] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 348.409721][ T530] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 348.430786][ T530] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 348.440116][ T530] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 348.448218][ T530] usb 10-1: SerialNumber: syz [ 348.449507][T17973] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 348.470279][T17976] 9pnet_fd: Insufficient options for proto=fd [ 348.549777][T17984] 2ªö»ôM: renamed from 31ªö»ôM (while UP) [ 348.556612][T17984] A link change request failed with some changes committed already. Interface 32ªö»ôM may have been left with an inconsistent configuration, please check. [ 348.581726][T17988] 1ªö»ôM: renamed from 30ªö»ôM (while UP) [ 348.640791][T18002] overlayfs: failed to clone upperpath [ 348.647286][T18002] 9pnet_fd: p9_fd_create_tcp (18002): problem connecting socket to 127.0.0.1 [ 349.059449][ T530] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 349.202968][T18011] 1ªö»ôM: renamed from 30ªö»ôM (while UP) [ 349.216009][T18013] 0ªö»ôM: renamed from 32ªö»ôM (while UP) [ 349.300445][T18024] rust_binder: Write failure EFAULT in pid:1005 [ 349.499640][ T36] audit: type=1326 audit(349.488:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17994 comm="syz.8.6258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ab78eba9 code=0x7fc00000 [ 349.533729][T18034] rust_binder: Write failure EINVAL in pid:167 [ 349.552077][T18040] 0ªö»ôM: renamed from 32ªö»ôM (while UP) [ 349.572469][T18042] rust_binder: Write failure EFAULT in pid:175 [ 349.998697][ T530] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 350.085573][T18066] fuse: Bad value for 'fd' [ 350.098446][T18072] 0ªö»ôM: renamed from 32ªö»ôM (while UP) [ 350.159607][ T530] usb 9-1: config 16 has an invalid interface number: 19 but max is 0 [ 350.167807][ T530] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 350.177978][ T530] usb 9-1: config 16 has no interface number 0 [ 350.184450][ T530] usb 9-1: config 16 interface 19 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 350.199594][ T530] usb 9-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 350.209057][ T530] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.217345][ T530] usb 9-1: Product: syz [ 350.221670][ T530] usb 9-1: Manufacturer: syz [ 350.226269][ T530] usb 9-1: SerialNumber: syz [ 350.306301][T18102] 2ªö»ôM: renamed from 30ªö»ôM (while UP) [ 350.325952][ T36] audit: type=1400 audit(350.308:1363): avc: denied { nlmsg_write } for pid=18105 comm="syz.2.6296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 350.435162][T18059] binder: Bad value for 'defcontext' [ 350.444618][ T530] usb 9-1: USB disconnect, device number 9 [ 350.446674][T13181] udevd[13181]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:16.19/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 350.558808][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 350.688637][ T10] usb 3-1: device descriptor read/64, error -71 [ 350.928646][ T10] usb 3-1: device descriptor read/64, error -71 [ 350.960894][ T31] usb 10-1: USB disconnect, device number 4 [ 351.168652][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 351.179572][ T36] audit: type=1400 audit(351.168:1364): avc: denied { lock } for pid=18121 comm="syz.6.6303" path="socket:[96858]" dev="sockfs" ino=96858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 351.207274][T18108] rust_binder: Write failure EFAULT in pid:194 [ 351.298635][ T31] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 351.318627][ T10] usb 3-1: device descriptor read/64, error -71 [ 351.458620][ T31] usb 10-1: Using ep0 maxpacket: 16 [ 351.464869][ T31] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 351.475115][ T31] usb 10-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.486076][ T31] usb 10-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.496012][ T31] usb 10-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 351.508891][ T31] usb 10-1: config 7 interface 0 has no altsetting 0 [ 351.515557][ T31] usb 10-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 351.524861][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.568641][ T10] usb 3-1: device descriptor read/64, error -71 [ 351.678758][ T10] usb usb3-port1: attempt power cycle [ 351.902051][T18128] __nla_validate_parse: 7 callbacks suppressed [ 351.902071][T18128] netlink: 196 bytes leftover after parsing attributes in process `syz.8.6305'. [ 351.943955][ T31] input: HID 0458:5010 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:7.0/0003:0458:5010.0019/input/input36 [ 351.960223][ T31] kye 0003:0458:5010.0019: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.9-1/input0 [ 351.984470][T18132] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6306'. [ 351.993451][T18132] 2ªö»ôM: renamed from 30ªö»ôM (while UP) [ 352.000267][T18132] net_ratelimit: 6 callbacks suppressed [ 352.000283][T18132] A link change request failed with some changes committed already. Interface 32ªö»ôM may have been left with an inconsistent configuration, please check. [ 352.021837][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 352.043456][T18136] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6308'. [ 352.052459][T18136] 0ªö»ôM: renamed from 31ªö»ôM (while UP) [ 352.053430][ T10] usb 3-1: device descriptor read/8, error -71 [ 352.065193][T18136] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 352.134165][ T36] audit: type=1400 audit(352.118:1365): avc: denied { mounton } for pid=18149 comm="syz.6.6313" path="/482/file0" dev="tmpfs" ino=2573 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 352.134769][T18150] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=18150 comm=syz.6.6313 [ 352.182727][T18152] overlayfs: failed to clone upperpath [ 352.190137][T18152] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6314'. [ 352.199133][T18152] bridge_slave_1: left allmulticast mode [ 352.204833][T18152] bridge_slave_1: left promiscuous mode [ 352.210599][T18152] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.218256][T18152] 0ªö»ôM: left promiscuous mode [ 352.218501][ T10] usb 3-1: device descriptor read/8, error -71 [ 352.223436][T18152] bridge0: port 1(30ªö»ôM) entered disabled state [ 352.375762][T18113] rust_binder: Error in use_page_slow: ESRCH [ 352.375788][T18113] rust_binder: use_range failure ESRCH [ 352.381065][T18157] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6315'. [ 352.381840][T18113] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 352.387601][T18157] 1ªö»ôM: renamed from 32ªö»ôM (while UP) [ 352.396402][T18113] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 352.410416][T18113] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:153 [ 352.410933][T18157] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 352.468640][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 352.489617][ T10] usb 3-1: device descriptor read/8, error -71 [ 352.619690][ T10] usb 3-1: device descriptor read/8, error -71 [ 352.728724][ T10] usb usb3-port1: unable to enumerate USB device [ 352.837064][T18163] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6317'. [ 352.846068][T18163] 2ªö»ôM: renamed from 30ªö»ôM (while UP) [ 352.852671][T18163] A link change request failed with some changes committed already. Interface 32ªö»ôM may have been left with an inconsistent configuration, please check. [ 352.905741][T18171] rust_binder: 18171 RLIMIT_NICE not set [ 352.954435][ T10] rust_binder: 18170: removing orphan mapping 0:1024 [ 352.968995][T18173] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 352.972912][ T36] audit: type=1400 audit(352.958:1366): avc: denied { ioctl } for pid=18181 comm="syz.8.6326" path="socket:[97283]" dev="sockfs" ino=97283 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 353.059248][T18189] netlink: 5 bytes leftover after parsing attributes in process `syz.9.6329'. [ 353.068235][T18189] 1ªö»ôM: renamed from 30ªö»ôM (while UP) [ 353.075213][T18189] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 353.120848][T18195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.129355][T18195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.374274][T18202] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 353.471589][ T625] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 353.489120][T18212] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6339'. [ 353.498116][T18212] 0ªö»ôM: renamed from 32ªö»ôM (while UP) [ 353.504649][T18212] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 353.628628][ T625] usb 9-1: Using ep0 maxpacket: 8 [ 353.634946][ T625] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 353.643342][ T625] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 353.651791][ T625] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 353.660857][ T625] usb 9-1: config 250 has no interface number 0 [ 353.667106][ T625] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 353.678680][ T625] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 353.689332][ T625] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 353.696434][T18220] random: crng reseeded on system resumption [ 353.699743][ T625] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 353.716045][ T625] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 353.732643][ T625] usb 9-1: config 250 interface 228 has no altsetting 0 [ 353.740954][ T625] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 353.751878][ T625] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 353.753098][T18228] input: syz0 as /devices/virtual/input/input37 [ 353.760350][ T625] usb 9-1: Product: syz [ 353.770734][ T625] usb 9-1: SerialNumber: syz [ 353.781631][ T625] hub 9-1:250.228: bad descriptor, ignoring hub [ 353.787909][ T625] hub 9-1:250.228: probe with driver hub failed with error -5 [ 353.833175][T18232] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 353.842802][T18232] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 353.849501][T18232] rust_binder: Error in use_page_slow: ESRCH [ 353.855966][T18232] rust_binder: use_range failure ESRCH [ 353.862324][T18232] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 353.867845][T18232] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 353.877233][T18232] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:173 [ 353.910240][T18240] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6349'. [ 353.929397][T18240] rust_binder: 179: no such ref 0 [ 353.934492][T18240] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 353.941167][T18242] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 353.943113][T18240] rust_binder: 179: no such ref 64 [ 353.956568][T18240] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:179 [ 353.957698][T18246] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6349'. [ 353.992152][ T625] usblp 9-1:250.228: usblp0: USB Bidirectional printer dev 11 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 354.134409][T18277] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.167055][T18293] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.177332][T18293] rust_binder: Write failure EINVAL in pid:195 [ 354.249437][T18297] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 354.263229][T18297] SELinux: failed to load policy [ 354.269142][T18297] rust_binder: Error while translating object. [ 354.269182][T18297] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 354.275366][T18297] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:217 [ 354.288747][ T330] usb 9-1: USB disconnect, device number 11 [ 354.304544][ T330] usblp0: removed [ 354.358674][ T625] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 354.477000][T18299] 2ªö»ôM: renamed from 30ªö»ôM (while UP) [ 354.483516][T18299] A link change request failed with some changes committed already. Interface 32ªö»ôM may have been left with an inconsistent configuration, please check. [ 354.499337][ T625] usb 3-1: device descriptor read/64, error -71 [ 354.738642][ T625] usb 3-1: device descriptor read/64, error -71 [ 354.978635][ T625] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 355.028643][ T330] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 355.045864][T18323] 0ªö»ôM: renamed from 31ªö»ôM (while UP) [ 355.052671][T18323] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 355.078300][T18325] 1ªö»ôM: renamed from 32ªö»ôM (while UP) [ 355.084868][T18325] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 355.108630][ T625] usb 3-1: device descriptor read/64, error -71 [ 355.127540][T18331] rust_binder: Write failure EFAULT in pid:205 [ 355.188691][ T330] usb 9-1: Using ep0 maxpacket: 16 [ 355.201440][ T330] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.215462][ T330] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.225567][ T330] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 355.230338][T18333] incfs: Options parsing error. -22 [ 355.235091][ T330] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.240061][T18333] incfs: mount failed -22 [ 355.252190][ T330] usb 9-1: config 0 descriptor?? [ 355.340475][T18335] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 355.341298][T18335] rust_binder: Error in use_page_slow: ESRCH [ 355.347762][T18335] rust_binder: use_range failure ESRCH [ 355.353844][T18335] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 355.359359][T18335] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 355.367168][T18335] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:209 [ 355.378634][ T625] usb 3-1: device descriptor read/64, error -71 [ 355.498885][ T625] usb usb3-port1: attempt power cycle [ 355.524742][T18344] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 355.533003][T18344] rust_binder: Write failure EINVAL in pid:217 [ 355.547577][T18346] 0ªö»ôM: renamed from 32ªö»ôM (while UP) [ 355.560375][T18346] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 355.585563][T18348] 2ªö»ôM: renamed from 31ªö»ôM (while UP) [ 355.838644][ T625] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 355.859541][ T625] usb 3-1: device descriptor read/8, error -71 [ 355.899908][ T330] usbhid 9-1:0.0: can't add hid device: -71 [ 355.905920][ T330] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 355.914953][ T330] usb 9-1: USB disconnect, device number 12 [ 355.989701][ T625] usb 3-1: device descriptor read/8, error -71 [ 356.228645][ T625] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 356.249701][ T625] usb 3-1: device descriptor read/8, error -71 [ 356.379680][ T625] usb 3-1: device descriptor read/8, error -71 [ 356.410998][T18357] overlayfs: missing 'lowerdir' [ 356.488731][ T625] usb usb3-port1: unable to enumerate USB device [ 356.540454][T18385] 1ªö»ôM: renamed from 30ªö»ôM (while UP) [ 356.878707][ T625] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 357.029730][ T625] usb 9-1: config 160 has an invalid interface number: 200 but max is 0 [ 357.038163][ T625] usb 9-1: config 160 has no interface number 0 [ 357.044481][ T625] usb 9-1: config 160 interface 200 has no altsetting 0 [ 357.052822][ T625] usb 9-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 357.061904][ T625] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.069910][ T625] usb 9-1: Product: syz [ 357.074051][ T625] usb 9-1: Manufacturer: syz [ 357.078658][ T625] usb 9-1: SerialNumber: syz [ 357.120756][T18389] rust_binder: Error in use_page_slow: ESRCH [ 357.120777][T18389] rust_binder: use_range failure ESRCH [ 357.126796][T18389] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 357.132364][T18389] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 357.140256][T18389] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1078 [ 357.150514][T18390] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1078 [ 357.169622][T18392] batadv_slave_1: entered promiscuous mode [ 357.185371][T18392] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551614) [ 357.185392][T18392] rust_binder: Error while translating object. [ 357.197533][T18392] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 357.203729][T18392] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1081 [ 357.268993][T18391] batadv_slave_1: left promiscuous mode [ 357.285429][T18362] rust_binder: Error while translating object. [ 357.285469][T18362] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 357.291688][T18362] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:227 [ 357.303804][ T625] usb 9-1: MIDIStreaming interface descriptor not found [ 357.321716][ T625] usb 9-1: USB disconnect, device number 13 [ 357.335767][T13021] udevd[13021]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:160.200/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 357.350743][T18400] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 357.588650][ T530] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 357.748637][ T530] usb 3-1: Using ep0 maxpacket: 32 [ 357.755031][ T530] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 357.763748][ T530] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 357.773842][ T530] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 357.784367][ T530] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 357.793459][ T530] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.801499][ T530] usb 3-1: Product: à°„ [ 357.808612][ T530] usb 3-1: Manufacturer: äˆ [ 357.816619][ T530] usb 3-1: SerialNumber: 〠[ 357.847113][T18413] tipc: Started in network mode [ 357.852043][T18413] tipc: Node identity 100, cluster identity 4711 [ 357.858452][T18413] tipc: Node number set to 256 [ 357.865816][T18413] overlay: ./bus is not a directory [ 358.030370][ T530] usb 3-1: 0:2 : does not exist [ 358.036733][ T530] usb 3-1: USB disconnect, device number 60 [ 358.045268][T13181] udevd[13181]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 358.083871][T18421] rust_binder: 229: no such ref 3 [ 358.088997][T18421] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:229 [ 358.089498][T18421] rust_binder: Error while translating object. [ 358.098865][T18421] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 358.105060][T18421] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:229 [ 358.134243][T18425] rust_binder: Error while translating object. [ 358.143439][T18425] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 358.149667][T18425] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:233 [ 358.160105][T18425] SELinux: policydb version -1962249627 does not match my version range 15-33 [ 358.178166][T18425] SELinux: failed to load policy [ 358.193121][T18427] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 358.207078][T18429] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 358.215783][T18429] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 2048 [ 358.229887][T18429] rust_binder: Write failure EINVAL in pid:237 [ 358.311800][T18431] rust_binder: Error while translating object. [ 358.318053][T18431] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 358.324289][T18431] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:239 [ 358.431260][T18435] 9pnet_fd: Insufficient options for proto=fd [ 358.485363][T18443] __nla_validate_parse: 42 callbacks suppressed [ 358.485381][T18443] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6419'. [ 358.555668][T18461] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6426'. [ 358.564662][T18461] 0ªö»ôM: renamed from 31ªö»ôM (while UP) [ 358.571466][T18461] net_ratelimit: 2 callbacks suppressed [ 358.571481][T18461] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 358.658310][T18470] serio: Serial port ptm0 [ 358.678858][T18473] netlink: 'syz.6.6431': attribute type 1 has an invalid length. [ 358.686687][T18473] netlink: 'syz.6.6431': attribute type 2 has an invalid length. [ 358.717921][T18470] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 358.739509][T18483] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 358.850347][T18489] netlink: 5 bytes leftover after parsing attributes in process `syz.8.6437'. [ 358.893458][T18489] 2ªö»ôM: renamed from 30ªö»ôM (while UP) [ 358.907736][T18489] A link change request failed with some changes committed already. Interface 32ªö»ôM may have been left with an inconsistent configuration, please check. [ 359.368277][T18514] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 359.470613][T18522] veth1_macvtap: left promiscuous mode [ 359.470837][T18523] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 359.479303][T18522] macsec0: entered allmulticast mode [ 359.509219][T18521] veth1_macvtap: entered promiscuous mode [ 359.514955][T18521] veth1_macvtap: entered allmulticast mode [ 359.521562][T18526] rust_binder: Error while translating object. [ 359.521600][T18526] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 359.527853][T18526] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:263 [ 359.535382][T18521] macsec0: left allmulticast mode [ 359.555166][T18521] veth1_macvtap: left allmulticast mode [ 359.608634][ T31] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 359.692315][T18549] rust_binder: Write failure EFAULT in pid:267 [ 359.758687][ T31] usb 9-1: Using ep0 maxpacket: 16 [ 359.771019][ T31] usb 9-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 359.781325][ T31] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 359.791592][ T31] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 359.800691][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.808758][ T31] usb 9-1: Product: syz [ 359.812911][ T31] usb 9-1: Manufacturer: syz [ 359.817503][ T31] usb 9-1: SerialNumber: syz [ 359.820805][T18560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.830638][T18560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.839025][T18560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.847509][T18560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.855846][T18560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.864397][T18560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.873295][T18560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.881710][T18561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.882255][T18560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.890232][T18561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.968629][ T330] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 360.040165][ T31] usb 9-1: 0:2 : does not exist [ 360.047032][ T31] usb 9-1: 5:0: cannot get min/max values for control 4 (id 5) [ 360.056694][ T31] usb 9-1: 5:0: cannot get min/max values for control 5 (id 5) [ 360.066290][ T31] usb 9-1: 5:0: cannot get min/max values for control 5 (id 5) [ 360.075885][ T31] usb 9-1: 5:0: failed to get current value for ch 1 (-22) [ 360.086217][ T31] usb 9-1: USB disconnect, device number 14 [ 360.118652][ T330] usb 3-1: Using ep0 maxpacket: 8 [ 360.125242][ T330] usb 3-1: config 1 interface 0 has no altsetting 0 [ 360.133266][ T330] usb 3-1: New USB device found, idVendor=056a, idProduct=0304, bcdDevice= 0.40 [ 360.142327][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.150328][ T330] usb 3-1: Product: ͙㕹è‹å›»ã·Šç½žà½„ﯖ丅唤怨어肾煙䛽佂鵑í€æ‡™å¹«ë„꜡ߑ몆ê®ì—¨á¹¥é—¯ì‹²ëŸ¹ä–¨î ‘〼熜惖耟혤ૼ嶧눃ꓫ榡꣔㭔閛ᡦæ“è‚磻常若딺ం匫ê°á¥€å§ºä‹„ꉚｪ襾̻çŠï¾ï„¤ã¡¦ì¯·é±…Ꮉ㘧曮柱㋎뵃궀᙮㜹 [ 360.175415][ T330] usb 3-1: Manufacturer: 뫛ժ鈦旃ꤎ俟鯒哯ᔔ醞î™à§¥è»Šæ‹—Œ얹뇋怒洵ì‚í¾á´†ä‡¹ [ 360.417162][T18570] rust_binder: Write failure EFAULT in pid:274 [ 360.598884][T18558] rust_binder: Error in use_page_slow: ESRCH [ 360.611620][T18558] rust_binder: use_range failure ESRCH [ 360.617678][T18558] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 360.623273][T18558] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 360.631612][T18558] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1108 [ 360.745885][T18577] netlink: 5 bytes leftover after parsing attributes in process `syz.8.6468'. [ 360.764533][T18577] 0ªö»ôM: renamed from 31ªö»ôM (while UP) [ 360.771370][T18577] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 360.805917][ T36] audit: type=1400 audit(360.788:1367): avc: denied { module_load } for pid=18578 comm="syz.8.6469" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=99612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 361.056258][T18590] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 361.056309][T18590] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:284 [ 361.219561][T18603] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6477'. [ 361.238371][T18603] 1ªö»ôM: renamed from 32ªö»ôM (while UP) [ 361.246811][T18603] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 361.265275][T18605] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6478'. [ 361.277242][T18606] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6478'. [ 361.511580][T18628] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6488'. [ 361.520684][T18628] 2ªö»ôM: renamed from 31ªö»ôM (while UP) [ 361.527999][T18628] A link change request failed with some changes committed already. Interface 32ªö»ôM may have been left with an inconsistent configuration, please check. [ 361.568640][ T625] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 361.729661][ T625] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.740618][ T625] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.750605][ T625] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 361.760128][ T625] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.769149][ T625] usb 9-1: config 0 descriptor?? [ 361.828391][T18645] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6493'. [ 361.845949][T18645] 1ªö»ôM: renamed from 30ªö»ôM (while UP) [ 361.860400][T18645] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 361.876455][T18648] rust_binder: Error in use_page_slow: ESRCH [ 361.876475][T18648] rust_binder: use_range failure ESRCH [ 361.882703][T18648] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 361.888299][T18648] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 361.906201][T18648] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:283 [ 362.000515][T18654] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 362.023087][T18659] netlink: 5 bytes leftover after parsing attributes in process `syz.9.6497'. [ 362.038816][T18659] 2ªö»ôM: renamed from 31ªö»ôM (while UP) [ 362.045996][T18659] A link change request failed with some changes committed already. Interface 32ªö»ôM may have been left with an inconsistent configuration, please check. [ 362.243636][T18667] rust_binder: Failed copying remainder into alloc: EFAULT [ 362.243664][T18667] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 362.251105][T18667] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 362.259521][T18667] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:297 [ 362.577903][ T625] hid-led 0003:27B8:01ED.001A: hidraw1: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.8-1/input0 [ 362.610661][ T625] hid-led 0003:27B8:01ED.001A: ThingM blink(1) initialized [ 362.745811][ T330] usbhid 3-1:1.0: can't add hid device: -71 [ 362.749774][T18678] 0ªö»ôM: renamed from 32ªö»ôM (while UP) [ 362.751856][ T330] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 362.766058][T18678] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 362.768714][ T330] usb 3-1: USB disconnect, device number 61 [ 362.792444][ T625] usb 9-1: USB disconnect, device number 15 [ 362.798129][T18680] 2ªö»ôM: renamed from 31ªö»ôM (while UP) [ 362.806606][T18680] A link change request failed with some changes committed already. Interface 32ªö»ôM may have been left with an inconsistent configuration, please check. [ 362.832073][T18682] 1ªö»ôM: renamed from 32ªö»ôM (while UP) [ 362.838554][T18682] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 362.918300][T18704] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 363.279875][T18718] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1139 [ 363.279966][T18718] rust_binder: 1139: no such ref 2 [ 363.330983][T18726] rust_binder: 1139: no such ref 4294967292 [ 363.357868][T18730] 0ªö»ôM: renamed from 32ªö»ôM (while UP) [ 363.377476][T18734] 1ªö»ôM: renamed from 32ªö»ôM (while UP) [ 363.428113][T18744] rust_binder: 318: no such ref 0 [ 363.441969][T18747] fuseblk: Bad value for 'blksize' [ 363.463175][T18752] 2ªö»ôM: renamed from 30ªö»ôM (while UP) [ 363.532528][T18764] overlayfs: missing 'lowerdir' [ 363.583084][T18772] __vm_enough_memory: pid: 18772, comm: syz.8.6526, bytes: 18014402804453376 not enough memory for the allocation [ 363.634720][T18780] __nla_validate_parse: 7 callbacks suppressed [ 363.634737][T18780] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6541'. [ 363.650168][T18780] 0ªö»ôM: renamed from 32ªö»ôM (while UP) [ 363.658041][T18780] net_ratelimit: 3 callbacks suppressed [ 363.658057][T18780] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 364.125982][T18795] fuse: Bad value for 'user_id' [ 364.131138][T18795] fuse: Bad value for 'user_id' [ 364.368629][ T530] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 364.479187][ T36] audit: type=1400 audit(364.468:1368): avc: denied { transition } for pid=18796 comm="syz.9.6548" path="/112/file0" dev="tmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 364.502215][ T36] audit: type=1400 audit(364.468:1369): avc: denied { entrypoint } for pid=18796 comm="syz.9.6548" path="/112/file0" dev="tmpfs" ino=618 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 364.525265][ T36] audit: type=1400 audit(364.468:1370): avc: denied { noatsecure } for pid=18796 comm="syz.9.6548" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 364.550081][ T530] usb 3-1: not running at top speed; connect to a high speed hub [ 364.558771][ T530] usb 3-1: config 1 interface 0 has no altsetting 0 [ 364.566999][ T530] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 364.576485][ T530] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.585216][ T530] usb 3-1: Product: syz [ 364.589632][ T530] usb 3-1: Manufacturer: syz [ 364.594287][ T530] usb 3-1: SerialNumber: syz [ 364.622620][T18799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.631136][T18799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.005092][ T530] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 62 if 0 alt 1 proto 1 vid 0x0525 pid 0xA4A8 [ 365.206729][ T45] usb 3-1: USB disconnect, device number 62 [ 365.213152][ T45] usblp0: removed [ 365.475793][T18817] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 365.706068][T18822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=18822 comm=syz.6.6557 [ 365.826092][T18834] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6562'. [ 365.835592][T18834] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 365.835628][T18834] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1152 [ 366.128638][ T10] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 366.288638][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 366.294892][ T10] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 366.303201][ T10] usb 3-1: config 0 has no interface number 0 [ 366.309327][ T10] usb 3-1: config 0 interface 184 has no altsetting 0 [ 366.318079][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 366.328697][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.336695][ T10] usb 3-1: Product: syz [ 366.340861][ T10] usb 3-1: Manufacturer: syz [ 366.345442][ T10] usb 3-1: SerialNumber: syz [ 366.350707][ T10] usb 3-1: config 0 descriptor?? [ 366.356276][ T10] smsc75xx v1.0.0 [ 366.370346][T18849] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 366.377639][T18849] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:347 [ 366.379849][ T36] audit: type=1400 audit(366.368:1371): avc: denied { setattr } for pid=18848 comm="syz.9.6569" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 366.457960][T18851] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 366.509298][T18852] rust_binder: Error in use_page_slow: ESRCH [ 366.515766][T18852] rust_binder: use_range failure ESRCH [ 366.521769][T18852] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 366.527247][T18852] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 366.535094][T18852] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:349 [ 366.544837][T18853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 366.898681][ T530] usb 9-1: new low-speed USB device number 16 using dummy_hcd [ 367.048631][ T530] usb 9-1: device descriptor read/64, error -71 [ 367.288646][ T530] usb 9-1: device descriptor read/64, error -71 [ 367.518726][ C1] syz_tun: tun_net_xmit 42 [ 367.529548][ T530] usb 9-1: new low-speed USB device number 17 using dummy_hcd [ 367.531132][T18868] rust_binder: Write failure EINVAL in pid:364 [ 367.553617][T18870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 367.560795][T18842] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 367.567884][T18870] rust_binder: pid 18870 performed invalid decrement on ref [ 367.585564][T18842] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1156 [ 367.587087][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 367.607483][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 367.617615][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 367.628548][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 367.638293][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 367.648554][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 367.658173][ T10] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 367.666662][ T530] usb 9-1: device descriptor read/64, error -71 [ 367.675157][ T10] usb 3-1: USB disconnect, device number 63 [ 367.684567][T18879] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 367.684841][T18877] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:373 [ 367.729953][T18884] rust_binder: Write failure EFAULT in pid:380 [ 367.842446][T18886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.857742][T18886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.908675][ T530] usb 9-1: device descriptor read/64, error -71 [ 368.018732][ T530] usb usb9-port1: attempt power cycle [ 368.108711][T18893] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6583'. [ 368.117681][T18893] 2ªö»ôM: renamed from 31ªö»ôM (while UP) [ 368.124278][T18893] A link change request failed with some changes committed already. Interface 32ªö»ôM may have been left with an inconsistent configuration, please check. [ 368.358849][ T530] usb 9-1: new low-speed USB device number 18 using dummy_hcd [ 368.379687][ T530] usb 9-1: device descriptor read/8, error -71 [ 368.398814][T18903] rust_binder: Error in use_page_slow: ESRCH [ 368.398831][T18903] rust_binder: use_range failure ESRCH [ 368.404850][T18903] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 368.410432][T18903] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 368.418470][T18903] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:385 [ 368.488653][ T10] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 368.519724][ T530] usb 9-1: device descriptor read/8, error -71 [ 368.539713][T18907] input: syz1 as /devices/virtual/input/input38 [ 368.558654][ C1] syz_tun: tun_net_xmit 42 [ 368.643453][T18912] overlayfs: conflicting options: verity=require,redirect_dir=follow [ 368.648628][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 368.657021][T18912] netlink: 2 bytes leftover after parsing attributes in process `syz.9.6592'. [ 368.657740][ T10] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 368.667068][T18912] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=18912 comm=syz.9.6592 [ 368.674253][ T10] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 368.686778][T18912] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 368.695234][T18913] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 368.695382][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 368.704724][T18912] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:394 [ 368.714327][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 368.723024][T18913] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:394 [ 368.732217][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 368.742127][T18912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.751062][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 368.762266][T18912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.768818][ T530] usb 9-1: new low-speed USB device number 19 using dummy_hcd [ 368.796877][ T10] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 368.806021][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.814692][ T10] usb 3-1: config 0 descriptor?? [ 368.820716][ T530] usb 9-1: device descriptor read/8, error -71 [ 368.949578][ T530] usb 9-1: device descriptor read/8, error -71 [ 369.020874][ T10] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 64 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 369.034803][ T10] usb 3-1: USB disconnect, device number 64 [ 369.041498][ T10] usblp0: removed [ 369.058758][ T530] usb usb9-port1: unable to enumerate USB device [ 369.432421][T18920] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6594'. [ 369.441610][T18920] 2ªö»ôM: renamed from 30ªö»ôM (while UP) [ 369.448062][T18920] A link change request failed with some changes committed already. Interface 32ªö»ôM may have been left with an inconsistent configuration, please check. [ 369.463851][ T45] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 369.598639][ C1] syz_tun: tun_net_xmit 42 [ 369.618630][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 369.624873][ T45] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 369.633297][ T45] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 369.641987][ T45] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 369.650975][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 369.660637][ T45] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 369.670396][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 369.686518][ T10] rust_binder: 18930: removing orphan mapping 0:4208 [ 369.689207][ T45] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 369.702886][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.713846][T18938] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6600'. [ 369.723584][ T45] usb 3-1: config 0 descriptor?? [ 369.727305][T18938] rust_binder: Error while translating object. [ 369.728548][T18938] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 369.735799][T18938] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:307 [ 369.770563][T18942] netlink: 5 bytes leftover after parsing attributes in process `syz.8.6603'. [ 369.788662][T18942] 1ªö»ôM: renamed from 30ªö»ôM (while UP) [ 369.795414][T18942] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 369.950523][ T45] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 65 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 370.011831][T18961] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.019080][T18961] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.026123][T18961] bridge_slave_0: entered allmulticast mode [ 370.032387][T18961] bridge_slave_0: entered promiscuous mode [ 370.038680][T18961] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.045700][T18961] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.052829][T18961] bridge_slave_1: entered allmulticast mode [ 370.058766][ T10] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 370.059507][T18961] bridge_slave_1: entered promiscuous mode [ 370.105947][T18961] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.113017][T18961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.120337][T18961] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.127351][T18961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.146274][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.153526][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.162987][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.170033][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.178794][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.185851][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.208114][T18961] veth0_vlan: entered promiscuous mode [ 370.218125][T18961] veth1_macvtap: entered promiscuous mode [ 370.232208][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.245792][ T10] usb 9-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 370.255241][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.264070][ T10] usb 9-1: config 0 descriptor?? [ 370.286866][T18972] netlink: 'syz.6.6611': attribute type 1 has an invalid length. [ 370.294652][T18972] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6611'. [ 370.304604][T18972] fuse: Bad value for 'fd' [ 370.350151][T18972] can0 (unregistered): slcan off ttyS3. [ 370.416578][T18989] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6613'. [ 370.425925][T18989] 0ªö»ôM: renamed from gretap0 (while UP) [ 370.432854][T18989] 0ªö»ôM: entered allmulticast mode [ 370.438328][T18989] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 370.664424][T19040] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6622'. [ 370.674932][ T10] wacom 0003:056A:0015.001B: Unknown device_type for 'HID 056a:0015'. Assuming pen. [ 370.688468][T19040] 1ªö»ôM: renamed from 30ªö»ôM (while UP) [ 370.696798][ T10] wacom 0003:056A:0015.001B: hidraw1: USB HID v9.14 Device [HID 056a:0015] on usb-dummy_hcd.8-1/input0 [ 370.699133][T19040] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 370.721278][ T10] input: Wacom Graphire4 4x5 Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:056A:0015.001B/input/input39 [ 370.766998][T19050] rust_binder: pid 19050 performed invalid decrement on ref [ 370.879555][T18947] netlink: 17 bytes leftover after parsing attributes in process `syz.8.6605'. [ 370.896166][ T625] usb 9-1: USB disconnect, device number 20 [ 370.906856][T19077] rust_binder: 425: no such ref 0 [ 370.980877][T19085] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6632'. [ 370.990000][T19085] 0ªö»ôM: renamed from 31ªö»ôM (while UP) [ 370.996496][T19085] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 371.024698][T19087] binder: Bad value for 'stats' [ 371.030854][T19087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=19087 comm=syz.6.6633 [ 371.054690][T19091] rust_binder: Write failure EINVAL in pid:429 [ 371.069327][T19095] binder: Bad value for 'max' [ 371.206672][T19102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.215593][T19102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.251625][T19106] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6642'. [ 371.260588][T19106] 1ªö»ôM: renamed from 30ªö»ôM (while UP) [ 371.267010][T19106] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 371.293824][T19108] rust_binder: Error while translating object. [ 371.293851][T19108] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 371.300085][T19108] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:52 [ 371.331103][ T36] audit: type=1400 audit(371.307:1372): avc: denied { lock } for pid=19111 comm="syz.6.6645" path="socket:[103461]" dev="sockfs" ino=103461 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 371.516063][ T625] usb 3-1: USB disconnect, device number 65 [ 371.523038][ T625] usblp0: removed [ 371.595559][T19123] devpts: called with bogus options [ 371.601469][T19123] rust_binder: Write failure EINVAL in pid:1174 [ 371.602708][T19125] rust_binder: Write failure EFAULT in pid:319 [ 371.632929][T19130] 0ªö»ôM: renamed from 31ªö»ôM (while UP) [ 371.645813][T19130] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 371.838103][T19139] rust_binder: 441: no such ref 0 [ 371.843282][T19139] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 371.852019][T19139] rust_binder: 441: no such ref 64 [ 371.857338][T19139] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:441 [ 372.039204][T19152] 2ªö»ôM: renamed from 31ªö»ôM (while UP) [ 372.049362][T19154] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 372.062815][T19154] rust_binder: Write failure EINVAL in pid:331 [ 372.063206][T19152] A link change request failed with some changes committed already. Interface 32ªö»ôM may have been left with an inconsistent configuration, please check. [ 372.103273][T19156] rust_binder: Error while translating object. [ 372.103296][T19156] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 372.109463][T19156] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:456 [ 372.157295][T19168] overlayfs: statfs failed on './file0' [ 372.288113][T19174] netlink: 'syz.9.6669': attribute type 27 has an invalid length. [ 372.299611][T19174] 2ªö»ôM: left allmulticast mode [ 372.312500][T19174] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.319704][T19174] bridge0: port 1(30ªö»ôM) entered disabled state [ 372.626736][T19180] 1ªö»ôM: renamed from 32ªö»ôM (while UP) [ 372.633424][T19180] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 372.918471][T19193] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 373.112691][T19204] 1ªö»ôM: renamed from 32ªö»ôM [ 373.125057][T19204] 1ªö»ôM: entered allmulticast mode [ 373.130885][T19204] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 373.202577][ T45] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 373.364130][ T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.375153][ T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.385136][ T45] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 373.394290][ T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.403182][ T45] usb 9-1: config 0 descriptor?? [ 373.715604][T19225] rust_binder: 19225 RLIMIT_NICE not set [ 373.715947][T19225] rust_binder: Write failure EINVAL in pid:1195 [ 373.801710][T14303] rust_binder: 0: removing orphan mapping 0:1048 [ 374.198749][T19230] rust_binder: Error while translating object. [ 374.198777][T19230] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 374.204966][T19230] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:504 [ 374.214752][T19231] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 374.230554][T19232] rust_binder: Error while translating object. [ 374.230589][T19232] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 374.236766][T19232] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:504 [ 374.255518][T19234] __nla_validate_parse: 5 callbacks suppressed [ 374.255535][T19234] netlink: 5 bytes leftover after parsing attributes in process `syz.9.6692'. [ 374.279935][T19234] 2ªö»ôM: renamed from 31ªö»ôM (while UP) [ 374.289240][ T45] hid-led 0003:27B8:01ED.001C: hidraw1: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.8-1/input0 [ 374.310348][ T45] hid-led 0003:27B8:01ED.001C: ThingM blink(1) initialized [ 374.343592][T19243] rust_binder: Write failure EFAULT in pid:516 [ 374.418966][T19252] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 374.425173][T19252] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1200 [ 374.441974][T19256] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6701'. [ 374.460265][T19256] 2ªö»ôM: renamed from 31ªö»ôM (while UP) [ 374.494751][T19264] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 374.498682][T19267] overlay: filesystem on ./file0 not supported as upperdir [ 374.512477][T16900] usb 9-1: USB disconnect, device number 21 [ 374.516400][T19269] netlink: 'syz.2.6706': attribute type 27 has an invalid length. [ 374.527323][T19269] 2ªö»ôM: left allmulticast mode [ 374.781020][T19283] rust_binder: Error while translating object. [ 374.781051][T19283] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 374.787990][T19283] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:536 [ 374.804163][T19285] netlink: 5 bytes leftover after parsing attributes in process `syz.9.6712'. [ 374.817391][T14303] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 374.822490][T19285] 1ªö»ôM: renamed from 32ªö»ôM (while UP) [ 374.836178][T19285] net_ratelimit: 2 callbacks suppressed [ 374.836189][T19285] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 374.899721][T19297] rust_binder: Error in use_page_slow: ESRCH [ 374.899739][T19297] rust_binder: use_range failure ESRCH [ 374.905956][T19297] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 374.919660][T19297] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 374.919691][T19297] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:549 [ 374.950674][T19302] fuse: Bad value for 'user_id' [ 374.955538][T19302] fuse: Bad value for 'user_id' [ 374.989657][T14303] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.000867][T14303] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.026733][T14303] usb 3-1: config 1 interface 1 has no altsetting 0 [ 375.039610][T14303] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 375.055594][T14303] usb 3-1: New USB device strings: Mfr=199, Product=2, SerialNumber=3 [ 375.064114][T14303] usb 3-1: Product: syz [ 375.068308][T14303] usb 3-1: Manufacturer: syz [ 375.072897][T14303] usb 3-1: SerialNumber: syz [ 375.084015][T14303] cdc_ncm 3-1:1.0: skipping garbage [ 375.090847][T14303] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 375.100395][T14303] cdc_ncm 3-1:1.0: bind() failure [ 375.100419][T19307] netlink: 84 bytes leftover after parsing attributes in process `syz.8.6719'. [ 375.157186][T19312] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 375.169477][ T36] audit: type=1400 audit(374.897:1373): avc: denied { relabelto } for pid=19311 comm="syz.6.6721" name="NETLINK" dev="sockfs" ino=104255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:checkpolicy_exec_t:s0" [ 375.392864][T16900] usb 3-1: USB disconnect, device number 66 [ 375.487229][T19326] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6725'. [ 375.496443][T19326] 0ªö»ôM: renamed from 31ªö»ôM (while UP) [ 375.505350][T19326] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 375.641534][T19337] erofs: dax options not supported [ 375.790455][ T530] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 375.855941][T19348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.864398][T19348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.883444][T19350] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 375.909883][T19350] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 2048 [ 375.928278][T14303] rust_binder: 19268: removing orphan mapping 0:1024 [ 375.930663][T19350] rust_binder: Write failure EINVAL in pid:106 [ 375.951952][ T530] usb 9-1: config 0 has an invalid interface number: 199 but max is 1 [ 375.978655][ T530] usb 9-1: config 0 has no interface number 1 [ 375.985136][ T530] usb 9-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 375.996299][ T530] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 376.008648][ T530] usb 9-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 376.017850][ T530] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 376.025840][ T530] usb 9-1: SerialNumber: syz [ 376.030938][ T530] usb 9-1: config 0 descriptor?? [ 376.037133][ T530] usb 9-1: Found UVC 0.00 device (0002:0000) [ 376.044033][ T530] usb 9-1: No valid video chain found. [ 376.106227][T19374] rust_binder: 19374 RLIMIT_NICE not set [ 376.106311][T19374] rust_binder: 1227: no such ref 35 [ 376.117319][T19374] rust_binder: Write failure EINVAL in pid:1227 [ 376.186309][ T530] rust_binder: 0: removing orphan mapping 0:1152 [ 376.251528][ T530] usb 9-1: USB disconnect, device number 22 [ 376.272479][T19378] netlink: 1351 bytes leftover after parsing attributes in process `syz.2.6745'. [ 376.505040][T19384] rust_binder: Write failure EFAULT in pid:561 [ 376.512024][T19386] netlink: 5 bytes leftover after parsing attributes in process `syz.9.6748'. [ 376.527189][T19386] 2ªö»ôM: renamed from 31ªö»ôM (while UP) [ 376.533741][T19386] A link change request failed with some changes committed already. Interface 32ªö»ôM may have been left with an inconsistent configuration, please check. [ 376.559328][T19388] binder: Unknown parameter 'fscontext?}' [ 376.870615][T19396] netlink: 'syz.8.6752': attribute type 4 has an invalid length. [ 377.017920][T19403] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 377.017948][T19403] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:121 [ 377.114807][T19412] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 377.188512][T19417] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6758'. [ 377.205799][T19417] 1ªö»ôM: renamed from 30ªö»ôM (while UP) [ 377.213124][T19417] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 377.408543][T19420] veth0_vlan: entered allmulticast mode [ 377.597707][T14303] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 377.780542][T14303] usb 7-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config [ 377.790759][T14303] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 377.799682][T14303] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 377.803443][T19447] netlink: 5 bytes leftover after parsing attributes in process `syz.9.6769'. [ 377.814239][T14303] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 377.821491][T19447] 1ªö»ôM: renamed from 32ªö»ôM (while UP) [ 377.830579][T14303] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.845048][T19447] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 377.854355][T14303] usb 7-1: Product: syz [ 377.869256][T14303] usb 7-1: Manufacturer: syz [ 377.878361][T14303] usb 7-1: SerialNumber: syz [ 377.995340][T19457] __vm_enough_memory: pid: 19457, comm: syz.8.6773, bytes: 18014402804453376 not enough memory for the allocation [ 378.008409][T19463] rust_binder: Error while translating object. [ 378.008438][T19463] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 378.014621][T19463] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1238 [ 378.059666][T19473] netlink: 5 bytes leftover after parsing attributes in process `syz.8.6780'. [ 378.071787][T19475] rust_binder: 594: no such ref 0 [ 378.077819][T19473] 1ªö»ôM: renamed from 30ªö»ôM (while UP) [ 378.082919][T19475] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 378.091211][T19465] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1240 [ 378.096325][T19475] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:594 [ 378.096555][T19473] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 378.140852][T19429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19429 comm=syz.6.6762 [ 378.212359][ T36] audit: type=1326 audit(377.750:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19428 comm="syz.6.6762" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8afbb8eba9 code=0x0 [ 380.254974][T19497] rust_binder: Write failure EFAULT in pid:1243 [ 380.621770][T19511] Invalid ELF header magic: != ELF [ 380.622185][ T36] audit: type=1400 audit(379.994:1375): avc: denied { module_load } for pid=19510 comm="syz.8.6789" path="/sys/kernel/notes" dev="sysfs" ino=1457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 380.680746][T14303] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 380.690493][T14303] cdc_ncm 7-1:1.0: bind() failure [ 380.697652][T14303] usb 7-1: USB disconnect, device number 3 [ 380.730995][ T45] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 380.892429][ T45] usb 3-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config [ 380.902680][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 380.911539][ T45] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 380.925803][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 380.934876][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.942855][ T45] usb 3-1: Product: syz [ 380.947066][ T45] usb 3-1: Manufacturer: syz [ 380.951650][ T45] usb 3-1: SerialNumber: syz [ 381.172175][T19520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 381.172371][T19520] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 381.175880][ T45] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 381.178831][T19520] rust_binder: Read failure Err(EFAULT) in pid:609 [ 381.188416][ T45] cdc_ncm 3-1:1.0: bind() failure [ 381.196267][T19520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 381.207734][ T45] usb 3-1: USB disconnect, device number 67 [ 381.210665][T19520] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:609 [ 381.318285][T19524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.335905][T19524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.541668][T19550] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 381.549924][T19550] rust_binder: Write failure EINVAL in pid:637 [ 381.557975][T19552] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 381.566291][T19552] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 381.583193][T19552] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 381.602963][T19552] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 381.907318][ T625] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 382.079502][ T625] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.090518][ T625] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.100435][ T625] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 382.109463][ T625] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.117955][ T625] usb 9-1: config 0 descriptor?? [ 382.163999][ T45] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 382.325396][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.336336][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.346210][ T45] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 382.355307][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.365731][ T45] usb 3-1: config 0 descriptor?? [ 382.467141][T19572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.475803][T19572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.484953][T19572] binder: Unknown parameter 'defcontext01777777777777777777777' [ 382.997902][T19563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.006598][T19563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.016170][ T45] hid-led 0003:27B8:01ED.001E: hidraw1: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0 [ 383.033816][ T45] hid-led 0003:27B8:01ED.001E: ThingM blink(1) initialized [ 383.074239][ T625] hid-led 0003:27B8:01ED.001D: hidraw2: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.8-1/input0 [ 383.091379][ T625] hid-led 0003:27B8:01ED.001D: ThingM blink(1) initialized [ 383.113365][T19581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.121872][T19581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.229850][T16900] usb 3-1: USB disconnect, device number 68 [ 383.288975][ T530] usb 9-1: USB disconnect, device number 23 [ 383.838106][T19597] rust_binder: 393: no such ref 3 [ 383.843251][T19597] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:393 [ 383.843752][T19597] rust_binder: Error while translating object. [ 383.845913][T19599] rust_binder: Write failure EINVAL in pid:667 [ 383.852934][T19597] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 383.866123][T19597] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:393 [ 383.946038][T19609] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 384.126773][T19640] rust_binder: Write failure EFAULT in pid:416 [ 384.201566][T19655] rust_binder: Failed to allocate buffer. len:8815263377109862632, is_oneway:false [ 384.207863][T19655] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 384.217420][T19655] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:424 [ 384.357226][T19666] tipc: Enabling of bearer rejected, failed to enable media [ 384.376716][T19669] FAULT_INJECTION: forcing a failure. [ 384.376716][T19669] name failslab, interval 1, probability 0, space 0, times 1 [ 384.390276][T19669] CPU: 1 UID: 0 PID: 19669 Comm: syz.8.6846 Not tainted syzkaller #0 8557b6f4d128b4a4d63f70857eed3e16fdb6808e [ 384.390313][T19669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 384.390329][T19669] Call Trace: [ 384.390336][T19669] [ 384.390347][T19669] __dump_stack+0x21/0x30 [ 384.390387][T19669] dump_stack_lvl+0x10c/0x190 [ 384.390410][T19669] ? __cfi_dump_stack_lvl+0x10/0x10 [ 384.390435][T19669] ? avc_has_perm+0x144/0x220 [ 384.390461][T19669] ? __cfi_avc_has_perm+0x10/0x10 [ 384.390485][T19669] dump_stack+0x19/0x20 [ 384.390508][T19669] should_fail_ex+0x3d9/0x530 [ 384.390527][T19669] should_failslab+0xac/0x100 [ 384.390548][T19669] __kmalloc_cache_noprof+0x41/0x3c0 [ 384.390576][T19669] ? vhost_task_create+0x101/0x350 [ 384.390595][T19669] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 384.390617][T19669] vhost_task_create+0x101/0x350 [ 384.390635][T19669] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 384.390657][T19669] ? __cfi_vhost_task_create+0x10/0x10 [ 384.390677][T19669] ? __cfi_vhost_task_fn+0x10/0x10 [ 384.390695][T19669] ? __kasan_check_write+0x18/0x20 [ 384.390721][T19669] ? mutex_lock+0x92/0x1c0 [ 384.390743][T19669] ? __cfi_mutex_lock+0x10/0x10 [ 384.390765][T19669] ? kernel_text_address+0xa9/0xe0 [ 384.390788][T19669] kvm_mmu_post_init_vm+0x1a6/0x310 [ 384.390814][T19669] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 384.390839][T19669] ? _parse_integer_limit+0x195/0x1e0 [ 384.390869][T19669] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 384.390892][T19669] ? kstrtoull+0x13b/0x1e0 [ 384.390919][T19669] ? kstrtouint+0x78/0xf0 [ 384.390945][T19669] ? ioctl_has_perm+0x1aa/0x4d0 [ 384.390967][T19669] ? __asan_memcpy+0x5a/0x80 [ 384.390992][T19669] ? ioctl_has_perm+0x3e0/0x4d0 [ 384.391012][T19669] ? has_cap_mac_admin+0xd0/0xd0 [ 384.391035][T19669] ? __kasan_check_write+0x18/0x20 [ 384.391058][T19669] ? mutex_lock_killable+0x92/0x1c0 [ 384.391077][T19669] ? __cfi_mutex_lock_killable+0x10/0x10 [ 384.391097][T19669] ? proc_fail_nth_write+0x17e/0x210 [ 384.391121][T19669] kvm_vcpu_ioctl+0x96f/0xee0 [ 384.391148][T19669] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 384.391173][T19669] ? __cfi_vfs_write+0x10/0x10 [ 384.391196][T19669] ? __kasan_check_write+0x18/0x20 [ 384.391220][T19669] ? mutex_unlock+0x8b/0x240 [ 384.391242][T19669] ? __cfi_mutex_unlock+0x10/0x10 [ 384.391263][T19669] ? __fget_files+0x2c5/0x340 [ 384.391289][T19669] ? __fget_files+0x2c5/0x340 [ 384.391315][T19669] ? bpf_lsm_file_ioctl+0xd/0x20 [ 384.391340][T19669] ? security_file_ioctl+0x34/0xd0 [ 384.391362][T19669] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 384.391388][T19669] __se_sys_ioctl+0x132/0x1b0 [ 384.391409][T19669] __x64_sys_ioctl+0x7f/0xa0 [ 384.391430][T19669] x64_sys_call+0x1878/0x2ee0 [ 384.391456][T19669] do_syscall_64+0x58/0xf0 [ 384.391473][T19669] ? clear_bhb_loop+0x50/0xa0 [ 384.391497][T19669] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 384.391520][T19669] RIP: 0033:0x7fc8ab78eba9 [ 384.391542][T19669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.391558][T19669] RSP: 002b:00007fc8ac5c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 384.391585][T19669] RAX: ffffffffffffffda RBX: 00007fc8ab9d5fa0 RCX: 00007fc8ab78eba9 [ 384.391600][T19669] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 384.391613][T19669] RBP: 00007fc8ac5c8090 R08: 0000000000000000 R09: 0000000000000000 [ 384.391626][T19669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.391639][T19669] R13: 00007fc8ab9d6038 R14: 00007fc8ab9d5fa0 R15: 00007fffd217f728 [ 384.391655][T19669] [ 384.752496][T19662] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 384.752527][T19662] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:683 [ 384.785503][T19676] netlink: 5 bytes leftover after parsing attributes in process `syz.8.6849'. [ 384.803582][T19676] 0ªö»ôM: renamed from 31ªö»ôM (while UP) [ 384.810200][T19676] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 385.008742][ T530] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 385.147534][T16900] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 385.169999][ T530] usb 7-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config [ 385.189473][ T530] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 385.209370][ T530] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 385.241828][ T530] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 385.262842][ T530] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.281630][ T530] usb 7-1: Product: syz [ 385.285924][ T530] usb 7-1: Manufacturer: syz [ 385.290743][ T530] usb 7-1: SerialNumber: syz [ 385.319817][T16900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 385.332730][T16900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 385.344125][T16900] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 385.353343][T16900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.363990][T16900] usb 3-1: config 0 descriptor?? [ 385.490338][T19693] FAULT_INJECTION: forcing a failure. [ 385.490338][T19693] name failslab, interval 1, probability 0, space 0, times 0 [ 385.503102][T19693] CPU: 0 UID: 0 PID: 19693 Comm: syz.9.6857 Not tainted syzkaller #0 8557b6f4d128b4a4d63f70857eed3e16fdb6808e [ 385.503136][T19693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 385.503149][T19693] Call Trace: [ 385.503157][T19693] [ 385.503166][T19693] __dump_stack+0x21/0x30 [ 385.503197][T19693] dump_stack_lvl+0x10c/0x190 [ 385.503222][T19693] ? __cfi_dump_stack_lvl+0x10/0x10 [ 385.503249][T19693] dump_stack+0x19/0x20 [ 385.503279][T19693] should_fail_ex+0x3d9/0x530 [ 385.503300][T19693] should_failslab+0xac/0x100 [ 385.503322][T19693] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 385.503349][T19693] ? dup_task_struct+0xbc/0xc50 [ 385.503371][T19693] ? kasan_save_track+0x4f/0x80 [ 385.503391][T19693] dup_task_struct+0xbc/0xc50 [ 385.503413][T19693] ? copy_process+0x3220/0x3220 [ 385.503435][T19693] ? __kasan_check_write+0x18/0x20 [ 385.503463][T19693] copy_process+0x538/0x3220 [ 385.503487][T19693] ? __cfi_copy_process+0x10/0x10 [ 385.503508][T19693] ? __kasan_check_write+0x18/0x20 [ 385.503533][T19693] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 385.503555][T19693] vhost_task_create+0x1d6/0x350 [ 385.503573][T19693] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 385.503595][T19693] ? __cfi_vhost_task_create+0x10/0x10 [ 385.503614][T19693] ? __cfi_vhost_task_fn+0x10/0x10 [ 385.503633][T19693] ? __kasan_check_write+0x18/0x20 [ 385.503658][T19693] ? mutex_lock+0x92/0x1c0 [ 385.503681][T19693] ? __cfi_mutex_lock+0x10/0x10 [ 385.503703][T19693] ? kernel_text_address+0xa9/0xe0 [ 385.503728][T19693] kvm_mmu_post_init_vm+0x1a6/0x310 [ 385.503754][T19693] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 385.503780][T19693] ? _parse_integer_limit+0x195/0x1e0 [ 385.503808][T19693] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 385.503833][T19693] ? kstrtoull+0x13b/0x1e0 [ 385.503860][T19693] ? kstrtouint+0x78/0xf0 [ 385.503887][T19693] ? ioctl_has_perm+0x1aa/0x4d0 [ 385.503909][T19693] ? __asan_memcpy+0x5a/0x80 [ 385.503936][T19693] ? ioctl_has_perm+0x3e0/0x4d0 [ 385.503958][T19693] ? has_cap_mac_admin+0xd0/0xd0 [ 385.503980][T19693] ? __kasan_check_write+0x18/0x20 [ 385.504006][T19693] ? mutex_lock_killable+0x92/0x1c0 [ 385.504029][T19693] ? __cfi_mutex_lock_killable+0x10/0x10 [ 385.504052][T19693] ? proc_fail_nth_write+0x17e/0x210 [ 385.504079][T19693] kvm_vcpu_ioctl+0x96f/0xee0 [ 385.504106][T19693] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 385.504132][T19693] ? __cfi_vfs_write+0x10/0x10 [ 385.504149][T19693] ? __kasan_check_write+0x18/0x20 [ 385.504174][T19693] ? mutex_unlock+0x8b/0x240 [ 385.504194][T19693] ? __cfi_mutex_unlock+0x10/0x10 [ 385.504216][T19693] ? __fget_files+0x2c5/0x340 [ 385.504237][T19693] ? __fget_files+0x2c5/0x340 [ 385.504258][T19693] ? bpf_lsm_file_ioctl+0xd/0x20 [ 385.504315][T19693] ? security_file_ioctl+0x34/0xd0 [ 385.504337][T19693] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 385.504364][T19693] __se_sys_ioctl+0x132/0x1b0 [ 385.504386][T19693] __x64_sys_ioctl+0x7f/0xa0 [ 385.504407][T19693] x64_sys_call+0x1878/0x2ee0 [ 385.504434][T19693] do_syscall_64+0x58/0xf0 [ 385.504452][T19693] ? clear_bhb_loop+0x50/0xa0 [ 385.504478][T19693] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 385.504502][T19693] RIP: 0033:0x7fb4c318eba9 [ 385.504519][T19693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.504535][T19693] RSP: 002b:00007fb4c3f7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 385.504557][T19693] RAX: ffffffffffffffda RBX: 00007fb4c33d5fa0 RCX: 00007fb4c318eba9 [ 385.504573][T19693] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 385.504586][T19693] RBP: 00007fb4c3f7e090 R08: 0000000000000000 R09: 0000000000000000 [ 385.504600][T19693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.504613][T19693] R13: 00007fb4c33d6038 R14: 00007fb4c33d5fa0 R15: 00007ffeddf54628 [ 385.504630][T19693] [ 385.897177][T19673] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 385.897201][T19673] rust_binder: Read failure Err(EFAULT) in pid:165 [ 385.906185][T19694] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 385.913129][T19694] rust_binder: Read failure Err(EFAULT) in pid:165 [ 385.945925][T19699] can0: slcan on ttyS3. [ 385.999668][ T530] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 386.006509][ T530] cdc_ncm 7-1:1.0: bind() failure [ 386.012715][ T530] usb 7-1: USB disconnect, device number 4 [ 386.057466][T19714] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6864'. [ 386.077986][T19714] 0ªö»ôM: renamed from 31ªö»ôM (while UP) [ 386.100042][T19714] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 386.294088][ T329] bridge_slave_1: left allmulticast mode [ 386.299870][ T329] bridge_slave_1: left promiscuous mode [ 386.314158][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.330306][ T329] 2ªö»ôM: left promiscuous mode [ 386.340088][ T329] bridge0: port 1(32ªö»ôM) entered disabled state [ 386.424933][T19726] pim6reg1: entered promiscuous mode [ 386.434827][T19726] pim6reg1: entered allmulticast mode [ 386.495318][ T329] tipc: Left network mode [ 386.502889][ T329] veth1_macvtap: left promiscuous mode [ 386.592563][T19729] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.599668][T19729] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.607453][T19729] bridge_slave_0: entered allmulticast mode [ 386.614551][T19729] bridge_slave_0: entered promiscuous mode [ 386.620927][T19729] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.628055][T19729] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.635182][T19729] bridge_slave_1: entered allmulticast mode [ 386.641735][T19729] bridge_slave_1: entered promiscuous mode [ 386.689800][T19729] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.696867][T19729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.704163][T19729] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.711202][T19729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.719760][T19742] FAULT_INJECTION: forcing a failure. [ 386.719760][T19742] name failslab, interval 1, probability 0, space 0, times 0 [ 386.733972][ T8836] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.733999][T19742] CPU: 1 UID: 0 PID: 19742 Comm: syz.6.6869 Not tainted syzkaller #0 8557b6f4d128b4a4d63f70857eed3e16fdb6808e [ 386.734022][T19742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 386.734033][T19742] Call Trace: [ 386.734040][T19742] [ 386.734047][T19742] __dump_stack+0x21/0x30 [ 386.734077][T19742] dump_stack_lvl+0x10c/0x190 [ 386.734099][T19742] ? __cfi_dump_stack_lvl+0x10/0x10 [ 386.734123][T19742] ? _raw_spin_unlock+0x45/0x60 [ 386.734140][T19742] dump_stack+0x19/0x20 [ 386.734161][T19742] should_fail_ex+0x3d9/0x530 [ 386.734180][T19742] should_failslab+0xac/0x100 [ 386.734200][T19742] __kmalloc_cache_node_noprof+0x46/0x3d0 [ 386.734226][T19742] ? __get_vm_area_node+0x154/0x3a0 [ 386.734249][T19742] __get_vm_area_node+0x154/0x3a0 [ 386.734272][T19742] __vmalloc_node_range_noprof+0x33c/0x1420 [ 386.734296][T19742] ? copy_process+0x538/0x3220 [ 386.734320][T19742] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 386.734347][T19742] ? irqentry_exit+0x4a/0x60 [ 386.734369][T19742] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 386.734392][T19742] ? arch_dup_task_struct+0x5b/0xe0 [ 386.734416][T19742] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 386.734440][T19742] ? arch_dup_task_struct+0x5b/0xe0 [ 386.734463][T19742] ? memcpy_orig+0x40/0x150 [ 386.734486][T19742] ? __asan_memcpy+0x5a/0x80 [ 386.734511][T19742] dup_task_struct+0x5bd/0xc50 [ 386.734530][T19742] ? copy_process+0x538/0x3220 [ 386.734551][T19742] ? copy_process+0x3220/0x3220 [ 386.734570][T19742] ? __kasan_check_write+0x18/0x20 [ 386.734595][T19742] copy_process+0x538/0x3220 [ 386.734617][T19742] ? __cfi_copy_process+0x10/0x10 [ 386.734637][T19742] ? __kasan_check_write+0x18/0x20 [ 386.734661][T19742] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 386.734681][T19742] vhost_task_create+0x1d6/0x350 [ 386.734699][T19742] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 386.734719][T19742] ? __cfi_vhost_task_create+0x10/0x10 [ 386.734737][T19742] ? __cfi_vhost_task_fn+0x10/0x10 [ 386.734755][T19742] ? __kasan_check_write+0x18/0x20 [ 386.734778][T19742] ? mutex_lock+0x92/0x1c0 [ 386.734798][T19742] ? __cfi_mutex_lock+0x10/0x10 [ 386.734817][T19742] ? kernel_text_address+0xa9/0xe0 [ 386.734839][T19742] kvm_mmu_post_init_vm+0x1a6/0x310 [ 386.734863][T19742] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 386.734893][T19742] ? _parse_integer_limit+0x195/0x1e0 [ 386.734919][T19742] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 386.734941][T19742] ? kstrtoull+0x13b/0x1e0 [ 386.734965][T19742] ? kstrtouint+0x78/0xf0 [ 386.734990][T19742] ? ioctl_has_perm+0x1aa/0x4d0 [ 386.735011][T19742] ? __asan_memcpy+0x5a/0x80 [ 386.735035][T19742] ? ioctl_has_perm+0x3e0/0x4d0 [ 386.735055][T19742] ? has_cap_mac_admin+0xd0/0xd0 [ 386.735075][T19742] ? __kasan_check_write+0x18/0x20 [ 386.735098][T19742] ? mutex_lock_killable+0x92/0x1c0 [ 386.735119][T19742] ? __cfi_mutex_lock_killable+0x10/0x10 [ 386.735140][T19742] ? proc_fail_nth_write+0x17e/0x210 [ 386.735164][T19742] kvm_vcpu_ioctl+0x96f/0xee0 [ 386.735189][T19742] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 386.735214][T19742] ? __cfi_vfs_write+0x10/0x10 [ 386.735230][T19742] ? __kasan_check_write+0x18/0x20 [ 386.735254][T19742] ? mutex_unlock+0x8b/0x240 [ 386.735273][T19742] ? __cfi_mutex_unlock+0x10/0x10 [ 386.735293][T19742] ? __fget_files+0x2c5/0x340 [ 386.735313][T19742] ? __fget_files+0x2c5/0x340 [ 386.735331][T19742] ? bpf_lsm_file_ioctl+0xd/0x20 [ 386.735355][T19742] ? security_file_ioctl+0x34/0xd0 [ 386.735374][T19742] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 386.735398][T19742] __se_sys_ioctl+0x132/0x1b0 [ 386.735418][T19742] __x64_sys_ioctl+0x7f/0xa0 [ 386.735436][T19742] x64_sys_call+0x1878/0x2ee0 [ 386.735465][T19742] do_syscall_64+0x58/0xf0 [ 386.735486][T19742] ? clear_bhb_loop+0x50/0xa0 [ 386.735509][T19742] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 386.735531][T19742] RIP: 0033:0x7f8afbb8eba9 [ 386.735546][T19742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.735562][T19742] RSP: 002b:00007f8afca93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 386.735582][T19742] RAX: ffffffffffffffda RBX: 00007f8afbdd5fa0 RCX: 00007f8afbb8eba9 [ 386.735596][T19742] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 386.735607][T19742] RBP: 00007f8afca93090 R08: 0000000000000000 R09: 0000000000000000 [ 386.735619][T19742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.735631][T19742] R13: 00007f8afbdd6038 R14: 00007f8afbdd5fa0 R15: 00007fffc145ba18 [ 386.735647][T19742] [ 386.735655][T19742] syz.6.6869: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 387.137082][T19748] rust_binder: Write failure EFAULT in pid:704 [ 387.139565][T19742] ,cpuset=syz6,mems_allowed=0 [ 387.202207][ T8836] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.206028][T19742] CPU: 0 UID: 0 PID: 19742 Comm: syz.6.6869 Not tainted syzkaller #0 8557b6f4d128b4a4d63f70857eed3e16fdb6808e [ 387.206054][T19742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 387.206064][T19742] Call Trace: [ 387.206071][T19742] [ 387.206079][T19742] __dump_stack+0x21/0x30 [ 387.206111][T19742] dump_stack_lvl+0x10c/0x190 [ 387.206140][T19742] ? __cfi_dump_stack_lvl+0x10/0x10 [ 387.206165][T19742] dump_stack+0x19/0x20 [ 387.206187][T19742] warn_alloc+0x1bc/0x2a0 [ 387.206209][T19742] ? __cfi_warn_alloc+0x10/0x10 [ 387.206232][T19742] ? __get_vm_area_node+0x392/0x3a0 [ 387.206255][T19742] __vmalloc_node_range_noprof+0x361/0x1420 [ 387.206279][T19742] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 387.206300][T19742] ? irqentry_exit+0x4a/0x60 [ 387.206323][T19742] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 387.206346][T19742] ? arch_dup_task_struct+0x5b/0xe0 [ 387.206371][T19742] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 387.206394][T19742] ? arch_dup_task_struct+0x5b/0xe0 [ 387.206418][T19742] ? memcpy_orig+0x40/0x150 [ 387.206441][T19742] ? __asan_memcpy+0x5a/0x80 [ 387.206467][T19742] dup_task_struct+0x5bd/0xc50 [ 387.206487][T19742] ? copy_process+0x538/0x3220 [ 387.206507][T19742] ? copy_process+0x3220/0x3220 [ 387.206527][T19742] ? __kasan_check_write+0x18/0x20 [ 387.206552][T19742] copy_process+0x538/0x3220 [ 387.206575][T19742] ? __cfi_copy_process+0x10/0x10 [ 387.206595][T19742] ? __kasan_check_write+0x18/0x20 [ 387.206619][T19742] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 387.206639][T19742] vhost_task_create+0x1d6/0x350 [ 387.206657][T19742] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 387.206677][T19742] ? __cfi_vhost_task_create+0x10/0x10 [ 387.206695][T19742] ? __cfi_vhost_task_fn+0x10/0x10 [ 387.206712][T19742] ? __kasan_check_write+0x18/0x20 [ 387.206735][T19742] ? mutex_lock+0x92/0x1c0 [ 387.206755][T19742] ? __cfi_mutex_lock+0x10/0x10 [ 387.206775][T19742] ? kernel_text_address+0xa9/0xe0 [ 387.206797][T19742] kvm_mmu_post_init_vm+0x1a6/0x310 [ 387.206821][T19742] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 387.206844][T19742] ? _parse_integer_limit+0x195/0x1e0 [ 387.206870][T19742] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 387.206893][T19742] ? kstrtoull+0x13b/0x1e0 [ 387.206921][T19742] ? kstrtouint+0x78/0xf0 [ 387.206945][T19742] ? ioctl_has_perm+0x1aa/0x4d0 [ 387.206966][T19742] ? __asan_memcpy+0x5a/0x80 [ 387.206990][T19742] ? ioctl_has_perm+0x3e0/0x4d0 [ 387.207010][T19742] ? has_cap_mac_admin+0xd0/0xd0 [ 387.207030][T19742] ? __kasan_check_write+0x18/0x20 [ 387.207054][T19742] ? mutex_lock_killable+0x92/0x1c0 [ 387.207076][T19742] ? __cfi_mutex_lock_killable+0x10/0x10 [ 387.207097][T19742] ? proc_fail_nth_write+0x17e/0x210 [ 387.207126][T19742] kvm_vcpu_ioctl+0x96f/0xee0 [ 387.207154][T19742] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 387.207179][T19742] ? __cfi_vfs_write+0x10/0x10 [ 387.207195][T19742] ? __kasan_check_write+0x18/0x20 [ 387.207219][T19742] ? mutex_unlock+0x8b/0x240 [ 387.207240][T19742] ? __cfi_mutex_unlock+0x10/0x10 [ 387.207259][T19742] ? __fget_files+0x2c5/0x340 [ 387.207280][T19742] ? __fget_files+0x2c5/0x340 [ 387.207299][T19742] ? bpf_lsm_file_ioctl+0xd/0x20 [ 387.207323][T19742] ? security_file_ioctl+0x34/0xd0 [ 387.207343][T19742] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 387.207368][T19742] __se_sys_ioctl+0x132/0x1b0 [ 387.207389][T19742] __x64_sys_ioctl+0x7f/0xa0 [ 387.207408][T19742] x64_sys_call+0x1878/0x2ee0 [ 387.207433][T19742] do_syscall_64+0x58/0xf0 [ 387.207450][T19742] ? clear_bhb_loop+0x50/0xa0 [ 387.207473][T19742] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 387.207496][T19742] RIP: 0033:0x7f8afbb8eba9 [ 387.207511][T19742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.207526][T19742] RSP: 002b:00007f8afca93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.207545][T19742] RAX: ffffffffffffffda RBX: 00007f8afbdd5fa0 RCX: 00007f8afbb8eba9 [ 387.207560][T19742] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 387.207572][T19742] RBP: 00007f8afca93090 R08: 0000000000000000 R09: 0000000000000000 [ 387.207584][T19742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.207596][T19742] R13: 00007f8afbdd6038 R14: 00007f8afbdd5fa0 R15: 00007fffc145ba18 [ 387.207612][T19742] [ 387.207668][T19742] Mem-Info: [ 387.637623][T19742] active_anon:15770 inactive_anon:640 isolated_anon:0 [ 387.637623][T19742] active_file:14081 inactive_file:12799 isolated_file:0 [ 387.637623][T19742] unevictable:16376 dirty:63 writeback:0 [ 387.637623][T19742] slab_reclaimable:8730 slab_unreclaimable:72384 [ 387.637623][T19742] mapped:25065 shmem:186 pagetables:1055 [ 387.637623][T19742] sec_pagetables:3 bounce:0 [ 387.637623][T19742] kernel_misc_reclaimable:0 [ 387.637623][T19742] free:1398824 free_pcp:2017 free_cma:0 [ 387.683099][T19742] Node 0 active_anon:63080kB inactive_anon:2560kB active_file:56324kB inactive_file:51196kB unevictable:65504kB isolated(anon):0kB isolated(file):0kB mapped:100260kB dirty:252kB writeback:0kB shmem:744kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6784kB pagetables:4220kB sec_pagetables:12kB all_unreclaimable? no [ 387.715647][T19742] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965956kB mlocked:0kB bounce:0kB free_pcp:5744kB local_pcp:4584kB free_cma:0kB [ 387.745790][T19742] lowmem_reserve[]: 0 3921 3921 [ 387.753401][T19742] Normal free:2636056kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:63080kB inactive_anon:2560kB active_file:56324kB inactive_file:51196kB unevictable:65504kB writepending:252kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:1848kB local_pcp:1784kB free_cma:0kB [ 387.785810][T19742] lowmem_reserve[]: 0 0 0 [ 387.790360][T19742] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 387.805918][T19742] Normal: 3682*4kB (UME) 7368*8kB (UME) 3749*16kB (UME) 1236*32kB (UME) 431*64kB (UM) 242*128kB (UME) 128*256kB (UME) 100*512kB (UME) 62*1024kB (UME) 46*2048kB (UME) 528*4096kB (UM) = 2636120kB [ 387.806398][ T8836] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.825175][T19742] 44140 total pagecache pages [ 387.832109][ T8836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.832811][ T8836] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.837118][T19742] 702 pages in swap cache [ 387.843988][ T8836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.867667][T19729] veth0_vlan: entered promiscuous mode [ 387.874478][T19742] Free swap = 121676kB [ 387.880648][T19742] Total swap = 124996kB [ 387.886688][T19742] 2097051 pages RAM [ 387.889982][T19729] veth1_macvtap: entered promiscuous mode [ 387.890514][T19742] 0 pages HighMem/MovableOnly [ 387.901826][T19742] 351532 pages reserved [ 387.906014][T19742] 0 pages cma reserved [ 387.916011][T19742] Memory allocations: [ 387.920151][T19742] 0 B 0 init/main.c:1370 func:do_initcalls [ 387.922534][ T36] audit: type=1400 audit(386.820:1376): avc: denied { mounton } for pid=19729 comm="syz-executor" path="/root/syzkaller.KIvDNc/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=110883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 387.927606][T19742] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 387.963512][T19742] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 387.972521][T19742] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 387.980480][T19742] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 387.988519][T19742] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 388.002778][T19742] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 388.010904][T19742] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 388.011590][T19759] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 388.019376][T19760] rust_binder: 19760 RLIMIT_NICE not set [ 388.028193][T19742] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 388.045405][T19742] 0 B 0 init/initramfs.c:101 func:find_link [ 388.045444][T19757] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:712 [ 388.217598][T19768] tipc: Started in network mode [ 388.217621][T19766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.226831][T19768] tipc: Node identity 8ef99081ea4b, cluster identity 4711 [ 388.233464][T19766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.240508][T19768] tipc: Enabled bearer , priority 0 [ 388.267198][T19768] tipc: Disabling bearer [ 388.281427][ T625] rust_binder: 0: removing orphan mapping 0:1152 [ 388.311206][T19775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 388.365872][T19783] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 388.422445][T19787] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:190 [ 388.636997][T19792] netlink: 'syz.1.6886': attribute type 7 has an invalid length. [ 388.654087][T19792] netlink: 'syz.1.6886': attribute type 5 has an invalid length. [ 388.662191][T19792] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6886'. [ 388.847359][T16900] usbhid 3-1:0.0: can't add hid device: -71 [ 388.851681][T19795] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6887'. [ 388.853446][T16900] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 388.866843][T19795] 1ªö»ôM: renamed from 32ªö»ôM (while UP) [ 388.879203][T19795] 1ªö»ôM: entered allmulticast mode [ 388.884560][T16900] usb 3-1: USB disconnect, device number 69 [ 388.886653][T19795] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 388.933223][T19797] __vm_enough_memory: pid: 19797, comm: syz.1.6889, bytes: 18014402804453376 not enough memory for the allocation [ 388.945990][T19797] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 388.946011][T19797] rust_binder: Error while translating object. [ 388.955128][T19797] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 388.961753][T19797] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:24 [ 389.031619][T19806] rust_binder: Write failure EINVAL in pid:1275 [ 389.235456][T19826] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6899'. [ 389.264133][T19826] 0ªö»ôM: renamed from gretap0 (while UP) [ 389.276619][T19826] 0ªö»ôM: entered allmulticast mode [ 389.297739][T19826] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 389.331281][ T36] audit: type=1326 audit(388.148:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19842 comm="syz.6.6905" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8afbb8eba9 code=0x0 [ 389.360422][T19846] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 389.360444][T19846] rust_binder: Read failure Err(EFAULT) in pid:1292 [ 389.403435][T19855] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 389.420160][T19855] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:210 [ 389.447903][T19852] can0 (unregistered): slcan off ttyS3. [ 389.745866][ T45] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 389.907781][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.930915][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 389.941352][ T45] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 389.955950][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 389.964145][ T45] usb 3-1: SerialNumber: syz [ 390.185148][T19864] rust_binder: Error while translating object. [ 390.185182][T19864] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 390.191375][T19864] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1297 [ 390.202923][ T45] usb 3-1: 0:2 : does not exist [ 390.221802][ T45] usb 3-1: unit 5: unexpected type 0x0b [ 390.232255][ T45] usb 3-1: USB disconnect, device number 70 [ 390.533853][T19896] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6914'. [ 390.543320][T19896] __vm_enough_memory: pid: 19896, comm: syz.6.6914, bytes: 18014402804453376 not enough memory for the allocation [ 390.558599][ T63] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 390.730848][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.741889][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.762189][ T63] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 390.775515][ T63] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 390.785648][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.804643][T19900] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6916'. [ 390.813562][T19900] 2ªö»ôM: renamed from 31ªö»ôM (while UP) [ 390.828607][ T63] usb 2-1: config 0 descriptor?? [ 390.837364][T19900] A link change request failed with some changes committed already. Interface 32ªö»ôM may have been left with an inconsistent configuration, please check. [ 390.944270][T19906] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 390.944446][T19906] netlink: 'syz.2.6919': attribute type 16 has an invalid length. [ 390.959546][T19906] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 72) [ 390.959569][T19906] rust_binder: Error while translating object. [ 390.970112][T19906] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 390.976323][T19906] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1307 [ 391.053222][T19909] @0Ù: renamed from bond_slave_1 (while UP) [ 391.082350][T19909] rust_binder: 1310: no such ref 3 [ 391.091840][T19909] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 391.100684][T19909] rust_binder: Read failure Err(EAGAIN) in pid:1310 [ 391.100806][T19909] rust_binder: Write failure EINVAL in pid:1310 [ 391.255192][T19911] rust_binder: Error in use_page_slow: ESRCH [ 391.261560][T19911] rust_binder: use_range failure ESRCH [ 391.267815][T19911] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 391.271748][ T63] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving [ 391.273369][T19911] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 391.289374][T19911] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1312 [ 391.301564][ T63] plantronics 0003:047F:FFFF.001F: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 391.401578][T19923] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6925'. [ 391.410569][T19923] 1ªö»ôM: renamed from 30ªö»ôM (while UP) [ 391.419500][T19923] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 391.469804][T19929] rust_binder: Fixups oob 165 172 361 173 [ 391.469836][T19929] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 391.475721][T19929] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 391.484135][T19929] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:226 [ 391.747028][T19942] rust_binder: Write failure EFAULT in pid:48 [ 391.781873][T19944] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6932'. [ 391.836611][T19945] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 391.872569][T19944] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6932'. [ 391.884657][ T45] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 391.894996][ T530] usb 2-1: USB disconnect, device number 3 [ 391.896663][T19944] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 392.078190][ T45] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.088363][ T45] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 392.098006][ T45] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 392.107326][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 392.115496][ T45] usb 7-1: SerialNumber: syz [ 392.123235][ T45] usb 7-1: 0:2 : does not exist [ 392.312368][ T530] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 392.368993][T19951] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 392.380187][T19953] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6936'. [ 392.398174][T19953] 1ªö»ôM: renamed from 32ªö»ôM (while UP) [ 392.404938][T19953] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 392.433439][ T36] audit: type=1400 audit(391.047:1378): avc: denied { lock } for pid=19954 comm="syz.2.6937" path="socket:[112321]" dev="sockfs" ino=112321 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 392.462008][T19957] rust_binder: Error while translating object. [ 392.462203][T19957] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 392.468382][T19957] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1331 [ 392.505289][ T530] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 392.554362][ T530] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 392.563692][ T530] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.575460][ T530] usb 2-1: Product: syz [ 392.579638][ T530] usb 2-1: Manufacturer: syz [ 392.585724][ T530] usb 2-1: SerialNumber: syz [ 392.601326][ T530] usb 2-1: config 0 descriptor?? [ 392.607223][ T530] usb 2-1: Waiting for MOTU Microbook II to boot up... [ 392.614272][ T530] usb 2-1: failed setting the sample rate for Motu MicroBook II: -22 [ 392.631647][ T625] usb 7-1: USB disconnect, device number 5 [ 392.633177][ T530] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 serialport: Connection terminated to allow system upgrade. Please reconnect at your convenience.