last executing test programs: 2m39.108777209s ago: executing program 2 (id=266): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, &(0x7f0000000000)=0x5, 0x4) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x4000110, r1, 0x7e3e1000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f00000000c0)={[{0x9, 0xffc4, 0x2, 0x6, 0x5, 0x8, 0x81, 0x3, 0xeb, 0x3, 0x7, 0x4a, 0x979}, {0x9, 0x3, 0x0, 0x10, 0x6, 0xc, 0x9, 0x1, 0x4, 0x8, 0x1, 0x6f, 0x7}, {0xca, 0x8, 0xc, 0x90, 0x61, 0x83, 0x6, 0xff, 0x0, 0x3, 0xfe, 0x3, 0x9}], 0x5}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x2}) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x4000000, 0x2ffffffff}, 0xc) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') read$FUSE(r6, &(0x7f0000004200)={0x2020}, 0x2020) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="5ede"]) read$FUSE(r7, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x66017, 0x3, 0x0, 0x0, 0x9835}}, 0x50) r9 = socket(0x1a, 0x3, 0x0) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc, 0x2}, 0x10) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000240)=@req3={0x4, 0x0, 0x9, 0x7, 0x200, 0x1ff, 0x4}, 0x1c) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) syz_fuse_handle_req(r7, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r11, 0x11, 0xb, &(0x7f00000001c0)=0xc8, 0x4) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) 2m39.105917409s ago: executing program 2 (id=267): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) poll(&(0x7f0000000140)=[{r1, 0x108}], 0x1, 0x0) (async) close_range(r1, r0, 0x2) 2m39.06404156s ago: executing program 2 (id=268): mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x400408, &(0x7f0000000cc0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00]) r0 = socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 32) r1 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xfb8, 0x1109, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xfc, 0x80, 0x9, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x0, 0xfd, {0x9, 0x21, 0x7, 0x6, 0x1, {0x22, 0x925}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xa, 0x3, 0xff}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x2, 0x2, 0x7f}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x7, 0x6, 0x8, 0x10, 0x6}, 0x40, &(0x7f0000000180)={0x5, 0xf, 0x40, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0x6, 0x4, 0xe66, 0xf00, 0x4, [0xff3f60, 0xffc0, 0x7f80c0, 0xffc00f]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xa, 0x7, 0xec}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0x7, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0x0, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x1, 0x4, 0x9}]}, 0x2, [{0x67, &(0x7f00000001c0)=@string={0x67, 0x3, "67db9dae691ca894735f2664876d253de4ea001af3a0cdfde9a5d62a66c7d4c958d147e69fb4a5bee6463b72141156ae8dde44e3621e11e4247abb4b49539414908cd38efd495a0723cf8d2a3556496026069eaff99b5fb76821b93335a6515c1e58a9e9c7"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x403}}]}) (rerun: 32) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, &(0x7f00000002c0)={0x40, 0x15, 0x25, {0x25, 0x7, "363ad1cf0c45c8f80a6661849fead85efbe1c22e131dfd7a8425912a6a7303bd53ce24"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240a}}, &(0x7f0000000340)={0x0, 0x22, 0x19, {[@global=@item_012={0x0, 0x1, 0x4}, @local=@item_012={0x1, 0x2, 0x5, "84"}, @main=@item_012={0x1, 0x0, 0x8, '\\'}, @global=@item_4={0x3, 0x1, 0x7, "a37a0b03"}, @main=@item_012={0x0, 0x0, 0x9}, @local=@item_012={0x1, 0x2, 0xa, "a2"}, @local=@item_4={0x3, 0x2, 0x6, "d923ccb1"}, @local=@item_012={0x1, 0x2, 0x4, "e2"}, @main=@item_4={0x3, 0x0, 0xc, "1609d878"}]}}, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x37, 0x1, {0x22, 0x54b}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000400)={0x20, 0x15, 0xaf, "b967bc3f44522eae60a880e38360df26de5e9ef13d6c6314927f15ea57d5a1f2c1826a2876b9e2b90eb0fe7ca9413026411609b97c68f95a780a49a2fda4411a529f66f1fd5fde67e4fff23db585661d1f049f0fd11995425a85c446190abd042a842bb68e22a0333b060306e440b8256621c5f3e6b5f4e6d23b15b78168177e2aca0a0a1502f8ef51178ff81b8f5f22ffca4d97b71a174569e3d00a7718ab986c038e0539dc50a1f59f45ff63c68e"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000540)={0x20, 0x1, 0xb2, "bdb3fa3580dbe1443a944a13f90f7cb919d4def17851cb02d0f8221af59c217628d9aaaf631362565eabefe0b386361cd9e47fdc209c32187bb46e8fc0e142399f6982340b8fa5223dc0d1ea877b2eb82ec90953be331c1ae864b1011a5fa68dbafc4c5a5914f787f2a67972c5faded7ab82851b1786e0a3b38629e27115f97e125ef058310db740bf46bbb60efbf0a731e449541c70c38b5fba3e86091a7aadabd82d0c1a739d652a13ee7b6f531e2a3122"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x86}}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async, rerun: 32) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (rerun: 32) lseek(r2, 0x10001, 0x0) 2m37.69330928s ago: executing program 2 (id=278): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='devpts\x00', 0x4, 0x0) mount$bpf(0x0, &(0x7f0000001080)='./file0\x00', 0x0, 0x1964874, &(0x7f0000000300)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0]) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x2) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000031c0)=""/154, 0x9a}], 0x1, 0x3a, 0xfffffffc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000200)={'syz0\x00', {}, 0x8, [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0) r6 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r6, 0x0, 0x0) read(r6, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r7, 0x10001, 0x0) 2m37.584835302s ago: executing program 2 (id=279): socket$igmp(0x2, 0x3, 0x2) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x2af, 0x4, 0x40, 0x15, "0062ba2300a75e0000d338388775238a6ebf00"}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000900010025bd70007bdbdf251af98e0752b7bc9964814a5898d4"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r5, 0xc00c6211, 0x0) setpriority(0x2, 0xff, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) r7 = syz_open_pts(r6, 0x313781) syz_usb_connect$cdc_ncm(0x0, 0x171, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x15f, 0x2, 0x1, 0x40, 0xb0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x19c, 0xfff7, 0x2, 0x81}, {0x6, 0x24, 0x1a, 0x2837}, [@mdlm_detail={0x103, 0x24, 0x13, 0x8, "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"}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x1, 0xbc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x80, 0x8, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x9, 0xf6, 0xc}}}}}}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000240)=0xa) r8 = socket$can_bcm(0x1d, 0x2, 0x2) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x5c, r9, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x70}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x804) connect$can_bcm(r8, &(0x7f0000000300), 0x10) connect$can_bcm(r8, &(0x7f0000000340), 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) fallocate(r0, 0x12, 0x7fffffff, 0xf) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') r11 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_eeprom={0x4f, 0x0, 0x1}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) connect$packet(r10, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @random="3b858f90e431"}, 0x14) 2m37.299042916s ago: executing program 2 (id=280): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002de8) r1 = openat(0xffffffffffffff9c, 0x0, 0x101000, 0x0) getdents(r1, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x1fd) r2 = inotify_init1(0x80800) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0xc0000484) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x200008c4, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f0000000280)={0x8f, 0x0, 0x8}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0xc00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2m37.225930977s ago: executing program 32 (id=280): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002de8) r1 = openat(0xffffffffffffff9c, 0x0, 0x101000, 0x0) getdents(r1, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x1fd) r2 = inotify_init1(0x80800) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0xc0000484) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x200008c4, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f0000000280)={0x8f, 0x0, 0x8}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0xc00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) close_range(r0, 0xffffffffffffffff, 0x0) 3.832925662s ago: executing program 4 (id=2337): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r0, 0x5433, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000040), 0x7, 0x2400) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) ioctl$EVIOCGPROP(r3, 0x80404509, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x1020, 0x0, 0x31, {0x3baf, 0x0, 0x7fff, 0xffffffff}}, 0x0}) 2.497096462s ago: executing program 1 (id=2349): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x1}) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d3, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x88381) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0}) 2.496405482s ago: executing program 1 (id=2350): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, 0x0) r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a2401", @ANYRES64=r1, @ANYRESDEC=r1, @ANYRESDEC=r1, @ANYRES64], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f00000000c0)={0xc0, 0x0, 0x10000}) ioctl$KVM_CLEAR_DIRTY_LOG(r4, 0xc018aec0, &(0x7f0000000080)={0x1ff, 0x300, 0xc0, 0x0}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x18a8404823473eb9, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x4, 0x24, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0xc0085504, 0x0) socket(0x40000000015, 0x5, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r2], 0xb8}}, 0x40000) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x5d0d174b9f278b80, 0xfff, &(0x7f00000011c0)=""/4096, &(0x7f00000021c0)=""/4096, &(0x7f00000001c0)=""/143, 0x5000}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x600c010}, 0x4050) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = openat$random(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0) ioctl$RNDADDENTROPY(r8, 0x40085203, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000eb00"]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@getpolicy={0x1a4, 0x15, 0x10, 0x70bd2d, 0x25dfdbfc, {{@in=@remote, @in=@loopback, 0x4e22, 0x8, 0x4e23, 0x9, 0xa, 0x40, 0x20, 0x5e, r9}, 0x0, 0x2580305ec38ac736}, [@encap={0x1c, 0x4, {0x0, 0x4e21, 0x4e22, @in6=@empty}}, @algo_auth={0xf7, 0x1, {{'sha256-generic\x00'}, 0x578, "f06a8996e0698d26f59a26ba11fa88d7d3be436436d39aa1147086b42c38be44a0027363e424d360130e3b5695a5924f300bc15e3c7ba28070a6038740eaa2521260ad90c96cb057c9cfcac2317b62cc700e65a3f92f9048e71b06bbeb9de003883e164124a0b876b838f63512502c898eb814e62fc4fa97863563c468ec405c5dae10950420ed9ace2400ab3720983906d4a8760a4607c86d3bf2c1a51c3a30b4fc36ff64717f6e607b20697cef58"}}, @mark={0xc, 0x15, {0x35075c, 0x1}}, @proto={0x5, 0x19, 0x6c}, @sec_ctx={0x2b, 0x8, {0x27, 0x8, 0x0, 0x1, 0x1f, "a6117846da27d352536fbc1ff7f3ddb31d5666b63baec1ad43f2f14319b0b5"}}]}, 0x1a4}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000ec000000000000000000000000000000ac1e000100000000000000000000000000000000000000000aeac56f9ccab4ec26fbb71252a885a9eba6d628b9801340cbf5512df18be533bb7ef6fbb6f3fa000d1b3e710ca1e3734445fcb3530ef98bfdee2cbf3ad298a7f91b6d0e2a04039fbb74344ccddfdcaa", @ANYRES32=r6, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500"/112], 0xb8}}, 0x4000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 2.027031079s ago: executing program 0 (id=2352): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f0000000040)=0xfffffffe, 0x4) 1.97569778s ago: executing program 0 (id=2353): r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f0000000f00)=[@uexit={0x0, 0x18}, @code={0x1, 0x60, {"66baf80cb8902fcf8def66bafc0cedb9800000c00f3235000800000f3046d927450f001943f43e65450f787b0048b80f000000000000000f23d80f21f835800000500f23f80f060f01cbc462791831"}}, @code={0x1, 0x6b, {"3e2e450f07c74424000b000000c744240200000100c7442406000000000f011c24440f20c0350c000000440f22c066baf80cb826734a82ef66bafc0c66edc4227d180e3e64420f3040f8643ef02019430f01c9b90c0600000f32"}}, @cpuid={0x2, 0x18, {0x8, 0x3}}, @cpuid={0x2, 0x18, {0x9, 0x100}}, @cpuid={0x2, 0x18, {0x5, 0x4}}, @uexit={0x0, 0x18, 0xf5}, @uexit={0x0, 0x18, 0x30000000}, @cpuid={0x2, 0x18, {0x10001, 0x400}}, @cpuid={0x2, 0x18, {0x2, 0x100}}, @uexit={0x0, 0x0, 0x7}, @uexit={0x0, 0x18, 0x4}, @code={0x1, 0x64, {"66b856000f00d8c422dd3ce866ba420066b8946566ef36f04181ae0f000000ba4f0000f3f22e67430f07666666420fe0f9c4c23d8e9b374f0000400f01ca0fc76afcb9b9080000b806000000ba000000000f30"}}, @code={0x1, 0x4f, {"0f21e7f044317d5766baf80cb83c47808cef66bafc0cb800380000efc4a2299f8b67000000640feb2c280ffef6410f07410f322664650f00142e0f1c6500"}}, @code={0x1, 0x0, {"66baa100b800180000efc4a1d65815cb4a016df3c7e6df660f72d4d866460fbbc00fc76a7cc74424008fcf0000c74424020b000000c7442406000000000f011424410f300fc7990d00000067363ef00fbb412b"}}], 0xffffffffffffff92}) ioctl$KVM_RUN(r1, 0xae80, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x7ff, 0x4) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x15) r2 = socket$netlink(0x10, 0x3, 0xb) poll(&(0x7f00000000c0)=[{r2, 0x80}, {r0, 0x2100}], 0x2, 0xfffffffc) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000874500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) sendmmsg$inet(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000006c0)="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", 0x241}], 0x1}}], 0x40000000000014e, 0x80) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000040)={[], [{@permit_directio}]}) 1.97264111s ago: executing program 0 (id=2354): r0 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x102102, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x99b33000) r5 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="385343ced8a47af7d176ad55869eb42a80fc7c3c11d79f3329f6e2e8df340ea59bfffb03f823f327febcfd2ac99ca2562537557cda7802b8a8fa88847be2e18e8b705653cfa331538c87a9656910c4b63bd7fe0f5366704b4ed9f898c047df984984d9fee54d4a9baea8992eb14492f424e393da60d8740c1baadd36c8493fad626d9ac5a63cf624baa936386f9e3b22d51fd8f7b595bd39067b62e567091f2852c55d34fecffd87937267a11102f564e911a60330ce9ab2a87317198216dcc029db4b7d8b2aa4594f2d2204054d7095dd35a4a29f2d3406917a359db94cfaf3eca1", 0xe2}, {&(0x7f00000039c0)="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", 0x1000}, {&(0x7f0000000400)="e7e930bda7c47baa2d227dee41c0d6ebcd5fb24981fb32eb1457b8896e77294a6ea004ec60545d41542a0bd2c73b3ccef69da0771940ee14f8073dfd8bc679383e68dd5d149e667e0e9432937d2f6e303a697c9d8271d90172241967bf473585bac0ec12156bb3717931030cff17fdbadaf726b893e39ce587927e347fa90f25d457d53a968bc94b90ef022aecbfe759ad208e0bc86ee98097f4b6b7329a678b23c831d028b5d4c5497808bf640ee9cac3ed607a7982d656e36966da885e046a897431d579d453", 0xc7}, {&(0x7f0000000040)="6e317af83f09e4", 0x7}, {&(0x7f00000029c0)="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", 0xd6a}], 0x5}, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r6, &(0x7f0000000100)=[{&(0x7f0000000340)=""/154, 0x9a}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0xc0f85403, &(0x7f0000000040)) preadv2(r0, &(0x7f0000002f00), 0x0, 0x2, 0x9, 0x9) 1.899872801s ago: executing program 0 (id=2355): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000040)=ANY=[@ANYBLOB="62da00000b"]) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x6, 0x4) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000540)="a6", 0x1}], 0x1, 0x8, 0x8000, 0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x3, 0x5, 0x5, 0x4, 0x2, 0x9, 0x8000, 0x3, 0x8, 0x7, 0x6, 0x10, 0x5, 0xd6, 0xff, 0x7], 0xe6ffd003, 0x4}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0xa8002, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ff9000/0x4000)=nil) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x9}, 0x1c) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r4, 0x204) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x5, &(0x7f0000000180)=0x85f, 0x4) unshare(0x2c020400) unshare(0x22020600) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r8, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r9 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000001080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="140000e8ffffffffffffff00010000000000000019000000"], 0x18}}], 0x1, 0x4000000) preadv2(r3, &(0x7f0000000880)=[{0x0}, {&(0x7f00000000c0)=""/56, 0x38}], 0x2, 0xa67, 0x2, 0xf) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 1.882051661s ago: executing program 0 (id=2356): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async, rerun: 32) r3 = dup(r2) (rerun: 32) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) (async) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000000140)) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) r4 = memfd_secret(0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c77030500003d55275e243adc71fc0cd2afd25b90acf73a17a6d14f827a537f27d6f339718025997d1057f42ef5044bd9ad981ac1ecb1c6d7355e887467598b01ab51e2d5a293a3bc02a10e3d2b8c60ba6a1e420e844bb531676414fb49ab8f6e2591cfe5cd3d4d382dff305910ba573379f2d1dd425bdfb534290105000000000000a89bc809583a3fc84bd8247e32fd3188c84dba1f0ccf036e7461ea051acf5a34c3de48c21c", @ANYRESHEX=r4, @ANYBLOB=',nodevmap,version=9p2000.L,\x00']) (async) r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) (async) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x35, 0x0, 0x0) sendfile(r5, r0, 0x0, 0x80000000) 1.816340922s ago: executing program 0 (id=2358): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60e41, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4f2, 0x418, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "87cebe19"}]}}, 0x0}, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000440)="a79ecba8", 0x4}, {0x0, 0xff95}], 0x2) 1.763555613s ago: executing program 3 (id=2360): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)="604a772826dea736729103ad8de752c24b2367617ecb7b6e6831a11ecd0b3617817414bf3243338133aeb1ef59f7bb", 0x2f, 0x4}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4) close(r0) sendmsg(r1, &(0x7f0000002740)={0x0, 0x0, 0x0}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001140"], 0x7c}}, 0x40000) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) sendto$inet(r3, &(0x7f0000000040)="0e00", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000140)=ANY=[]) 1.701056924s ago: executing program 3 (id=2361): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, 0x0) r1 = memfd_secret(0x80000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r2, &(0x7f00000022c0)=[{{&(0x7f0000000040)=@llc={0x1a, 0x30f, 0xe, 0x5, 0xfb, 0x8, @broadcast}, 0x80, 0x0, 0x0, &(0x7f0000002340)=ANY=[], 0x20f0}}], 0x1, 0x24000080) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x0) ftruncate(r1, 0x3) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x30, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000080)) r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000080)=[{&(0x7f00000004c0)='|', 0x1}], 0x1, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet_opts(r4, 0x0, 0x0, &(0x7f0000000100)="aae4aa2a434bd7e89445937056a64bed08cac6b35946c31d049250d9f920e40d4ce2b20509620d836973073ef0114b294ea007607b6a847be647e359d6d7089e4b07d3c903550d989bb674985349932d46559f48c27a1b141d2cfdba5a430c1138b0ddabf8868ff839c9417c6bdf90fb0d4ab3f4834809a4068556557bcc533c130e1513442887c321eb4015990c9793eb555421255aceb296501e493fb363c45e7ad38a08a65c73940b97f2c5ab8891af22a1d34d1ad19684a2", 0xba) 1.672329284s ago: executing program 3 (id=2362): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000000)=0xf08d81cbec1d7d3d) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) 1.516745787s ago: executing program 3 (id=2363): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f00000000c0)=0xc, 0x4) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r2, 0x45809000) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 1.455405047s ago: executing program 3 (id=2364): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x141342, 0x0) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000100)={0x9d, 0xa, &(0x7f0000000180)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) sched_setscheduler(r4, 0x1, &(0x7f0000000040)=0x7) sendfile(r0, r0, 0x0, 0x7ffff000) 972.845025ms ago: executing program 1 (id=2365): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) (async, rerun: 32) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000680015"], 0x1c}], 0x1}, 0x4000080) (async, rerun: 32) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0xaece, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) r5 = dup3(r2, r4, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @private=0xa010101}, 0x10) 862.016007ms ago: executing program 1 (id=2366): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x101}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r1}], 0x5a, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) 708.646639ms ago: executing program 4 (id=2367): prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) (async) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040)) (async) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000080)) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000000c0)) (async) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000100)) (async) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000140)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000180)) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000200)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) (async) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000280)) (async) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000002c0)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000300)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000340)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000380)) (async) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000003c0)) (async) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000400)) (async) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000440)) (async) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000480)) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000004c0)) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x188, r1, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x6, 0x4, 0x8, 0x8, 0x5, 0x6, 0x5, 0xe, 0x3, 0x2, 0x1, 0x40, 0x5, 0x0, 0x7, 0x1]}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x2, {0xc0, 0x8, 0x9, 0x7fff}}}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_IE={0xdf, 0x2a, [@chsw_timing={0x68, 0x4, {0x92, 0x5}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x6, 0x1, @broadcast, 0x7, 0xb, 0xffffffff}}, @prep={0x83, 0x1f, {{}, 0x4, 0x2, @broadcast, 0xe, @void, 0x7f, 0x2, @device_a, 0x7fffffff}}, @tim={0x5, 0x77, {0x6, 0xff, 0x0, "40a404af13f4526455cf14fc14f1fff833f6252739d98e9af3bc529b5d28abe3da3f5c577915abe367fabbefede58210e4f531991b73f46cc8837248ff795293513e2e30e67584bf3150f85813a00870fc81956759fe8225c472d99e739ac0d13ae49b1007bc6390f2d51e1d7c3ae9abf5ad9c9f"}}, @ht={0x2d, 0x1a, {0x2, 0x1, 0x0, 0x0, {0x0, 0xd5, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x400, 0x101, 0x1}}, @random_vendor={0xdd, 0x6, "0f6ff9e4746e"}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xc, 0x2, 0x4, 0x0, {0xfffffffffffffff6, 0x1, 0x0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x8, 0xfc}}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x0, 0x3, 0x0, {0xc7, 0x4, 0x0, 0xf, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x9, 0x4}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x188}}, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000007c0)) (async) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000800)) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000e80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000880)={0x598, r1, 0x404, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x80}}}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x570, 0x111, 0x0, 0x1, {0x56c, 0x5, 0x0, 0x1, [{0x52c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x23f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1fc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5d7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x186}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x401}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x363}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x134, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x75}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xf4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x26}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5062}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x682d1ec4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xffffff66}]}, 0x598}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000ec0)) (async) clock_gettime(0x0, &(0x7f0000000f00)={0x0, 0x0}) clock_settime(0x4, &(0x7f0000000f40)={r2, r3+10000000}) (async) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000f80)) 707.749919ms ago: executing program 4 (id=2368): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000140)=0xfffffffe, 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000080)='f2fs\x00', 0x200000, 0x0) 702.39824ms ago: executing program 4 (id=2369): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) setuid(0xee01) (async, rerun: 32) write$UHID_INPUT(r0, &(0x7f0000000240)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b200fedea1c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e57060", 0x1000}}, 0xf47) (async, rerun: 32) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) (async) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4) (async) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 64) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='romfs\x00', 0x18050, 0x0) (rerun: 64) 583.392841ms ago: executing program 3 (id=2370): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) (async) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x4, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x3, 0x8000, 0x0, r2, r3, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) (async) dup2(r4, r0) fgetxattr(r0, &(0x7f00000000c0)=@known='user.incfs.size\x00', &(0x7f0000000140)=""/24, 0x18) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='task\x00') fchdir(r5) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000102505a8d500000102030109021b000101000000090400ff02070101000905010200"], 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r7, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000002a00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) (async) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) (async) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r9, 0x60b, 0x0) lseek(r6, 0x3, 0x0) (async) getdents64(r6, 0x0, 0x22) (async) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x12, r11, 0x99b33000) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x10000000000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 559.770282ms ago: executing program 4 (id=2371): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') fsetxattr$security_selinux(r2, &(0x7f0000000000), 0x0, 0x0, 0x1) fchmodat(r2, &(0x7f0000000140)='./cgroup/../file0\x00', 0x1) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/68, 0x44}], 0x1, 0x5d, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0xf0, 0x10, 0x1, 0x3, 0x25dfdbfd, {{@in=@local, @in=@multicast1=0xac1414bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, {@in=@broadcast, 0x4000000, 0x33}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000000000}, {0x7b, 0x0, 0x2000}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x6b}}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x8004e500, &(0x7f0000000080)=r5) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={0x2}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0xfffffffffffffffd, 0x1) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x6}, 0x4) close_range(0xffffffffffffffff, r6, 0x2) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r8}, 0x14) r9 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) close_range(r3, r9, 0x0) 484.074772ms ago: executing program 4 (id=2372): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x528, 0x6, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x50000) setresgid(0xffffffffffffffff, 0xee01, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x800, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff3b, 0x4000090, &(0x7f00000005c0)={0xa, 0x4e20, 0xa3, @private0, 0x9}, 0x1c) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4a0a, 0xfffffffd, 0xfffff7fd}, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a00010200000000000000000a"], 0x164}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r7 = socket$nl_audit(0x10, 0x3, 0x9) r8 = dup(r7) write$FUSE_BMAP(r8, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r9, &(0x7f0000010340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000010300)={&(0x7f0000010380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="04002ab57000fddbdf251c00000008000300", @ANYRES32=r11, @ANYBLOB="2af788b44281b1e35b91b88ba2527784ef89a65b63542c1799bbb5284c3837bc87b66b00b7b8708cccf7c8"], 0xfffffd35}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r12, &(0x7f0000011480)=[{&(0x7f00000000c0)=""/186, 0xba}, {0x0}], 0x2, 0x2, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 15.628919ms ago: executing program 1 (id=2373): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r2, 0x4010e501, &(0x7f0000000140)={r2}) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r1, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=2374): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$cgroup_pid(r2, &(0x7f0000000180), 0x12) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)={0x18, 0x5f, 0x101, 0x70bd2c, 0x0, "", [@typed={0x8, 0x41, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x6, 0x4, 0x10001}}, 0x30) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xce}]}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x200000, 0x0) 0s ago: executing program 1 (id=2375): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r2, 0x1) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000040)={0x2, 0x7f}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x100}, @ptr={0x70742a85, 0x1, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): dc/0x2ee0 [ 138.017157][ T4308] do_syscall_64+0x58/0xf0 [ 138.017172][ T4308] ? clear_bhb_loop+0x50/0xa0 [ 138.017192][ T4308] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 138.017210][ T4308] RIP: 0033:0x7fc8af98e929 [ 138.017226][ T4308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.017241][ T4308] RSP: 002b:00007fc8b07b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 138.017259][ T4308] RAX: ffffffffffffffda RBX: 00007fc8afbb5fa0 RCX: 00007fc8af98e929 [ 138.017273][ T4308] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 138.017284][ T4308] RBP: 00007fc8afa10b39 R08: 0000000000000004 R09: 0000000000000000 [ 138.017296][ T4308] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 138.017307][ T4308] R13: 0000000000000000 R14: 00007fc8afbb5fa0 R15: 00007fffe5994238 [ 138.017322][ T4308] [ 138.017329][ T4308] Mem-Info: [ 138.286018][ T4308] active_anon:10618 inactive_anon:10 isolated_anon:0 [ 138.286018][ T4308] active_file:19820 inactive_file:17942 isolated_file:0 [ 138.286018][ T4308] unevictable:1844 dirty:78 writeback:0 [ 138.286018][ T4308] slab_reclaimable:6626 slab_unreclaimable:71530 [ 138.286018][ T4308] mapped:31374 shmem:3086 pagetables:1215 [ 138.286018][ T4308] sec_pagetables:0 bounce:0 [ 138.286018][ T4308] kernel_misc_reclaimable:0 [ 138.286018][ T4308] free:1499452 free_pcp:4556 free_cma:0 [ 138.331431][ T4308] Node 0 active_anon:42472kB inactive_anon:40kB active_file:79276kB inactive_file:79868kB unevictable:92kB isolated(anon):0kB isolated(file):0kB mapped:118212kB dirty:312kB writeback:0kB shmem:12344kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5264kB pagetables:4768kB sec_pagetables:0kB all_unreclaimable? no [ 138.363757][ T4308] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966016kB mlocked:0kB bounce:0kB free_pcp:5804kB local_pcp:0kB free_cma:0kB [ 138.393598][ T4308] lowmem_reserve[]: 0 3921 3921 [ 138.398575][ T4308] Normal free:3033912kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42528kB inactive_anon:40kB active_file:79276kB inactive_file:79960kB unevictable:0kB writepending:312kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:12576kB local_pcp:9448kB free_cma:0kB [ 138.430124][ T4308] lowmem_reserve[]: 0 0 0 [ 138.434696][ T4308] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 138.450410][ T4308] Normal: 529*4kB (UME) 242*8kB (UME) 112*16kB (UME) 563*32kB (UME) 269*64kB (ME) 99*128kB (UM) 141*256kB (UME) 103*512kB (UME) 40*1024kB (UME) 25*2048kB (UM) 686*4096kB (ME) = 3044596kB [ 138.469567][ T4308] 42897 total pagecache pages [ 138.474364][ T4308] 6 pages in swap cache [ 138.478581][ T4308] Free swap = 124576kB [ 138.488809][ T4308] Total swap = 124996kB [ 138.500941][ T4308] 2097051 pages RAM [ 138.504793][ T4308] 0 pages HighMem/MovableOnly [ 138.511284][ T4308] 351517 pages reserved [ 138.515465][ T4308] 0 pages cma reserved [ 138.522295][ T4323] rust_binder: Error while translating object. [ 138.522350][ T4323] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 138.528549][ T4323] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:645 [ 138.532235][ T4308] Memory allocations: [ 138.551805][ T4308] 0 B 0 init/main.c:1370 func:do_initcalls [ 138.559106][ T4308] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 138.567533][ T4308] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 138.589360][ T4308] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 138.608304][ T4308] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 138.616622][ T4308] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 138.627916][ T4326] input: syz1 as /devices/virtual/input/input13 [ 138.635738][ T4308] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 138.649176][ T4308] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 138.657861][ T4308] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 138.665983][ T4308] 0 B 0 init/initramfs.c:101 func:find_link [ 138.711140][ T4336] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:647 [ 139.038661][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 139.038681][ T36] audit: type=1400 audit(2000000086.150:5882): avc: denied { mounton } for pid=4343 comm="syz.4.1308" path="/proc/631/task" dev="proc" ino=28893 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 139.076876][ T36] audit: type=1400 audit(2000000086.150:5883): avc: denied { mount } for pid=4343 comm="syz.4.1308" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 139.117513][ T4344] cgroup: fork rejected by pids controller in /syz4 [ 139.273518][ T4394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1313'. [ 139.530162][ T36] audit: type=1400 audit(2000000086.640:5884): avc: denied { write } for pid=4420 comm="syz.3.1316" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 139.812282][ T36] audit: type=1400 audit(2000000086.930:5885): avc: denied { bind } for pid=4436 comm="syz.1.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 140.388760][ T36] audit: type=1400 audit(2000000087.500:5886): avc: denied { mounton } for pid=4457 comm="syz.4.1326" path="/syzcgroup/unified/syz4" dev="pstore" ino=1523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 140.590148][ T343] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 140.670153][ T61] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 140.712416][ T36] audit: type=1326 audit(2000000087.830:5887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4479 comm="syz.1.1332" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0be318e929 code=0x0 [ 140.750170][ T343] usb 4-1: Invalid ep0 maxpacket: 16 [ 140.821406][ T61] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 140.832527][ T61] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 140.843199][ T61] usb 5-1: config 0 interface 0 has no altsetting 0 [ 140.849819][ T61] usb 5-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 140.858916][ T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.867622][ T61] usb 5-1: config 0 descriptor?? [ 140.872950][ T4461] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 140.880304][ T343] usb 4-1: new low-speed USB device number 50 using dummy_hcd [ 141.030964][ T343] usb 4-1: Invalid ep0 maxpacket: 16 [ 141.036426][ T343] usb usb4-port1: attempt power cycle [ 141.126924][ T61] usbhid 5-1:0.0: can't add hid device: -71 [ 141.135303][ T36] audit: type=1326 audit(2000000088.250:5888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.4.1333" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93c3b8e929 code=0x0 [ 141.139095][ T61] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 141.167717][ T61] usb 5-1: USB disconnect, device number 41 [ 141.273983][ T4491] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1335'. [ 141.283092][ T4491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1335'. [ 141.292164][ T4491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1335'. [ 141.390188][ T343] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 141.410532][ T343] usb 4-1: Invalid ep0 maxpacket: 16 [ 141.540202][ T343] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 141.553431][ T4496] overlayfs: failed to clone upperpath [ 141.565019][ T343] usb 4-1: Invalid ep0 maxpacket: 16 [ 141.570527][ T343] usb usb4-port1: unable to enumerate USB device [ 141.969986][ T36] audit: type=1326 audit(2000000000.640:5889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.4.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c3b8e929 code=0x7fc00000 [ 141.993597][ T36] audit: type=1326 audit(2000000000.640:5890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.4.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f93c3b8e929 code=0x7fc00000 [ 142.017124][ T36] audit: type=1326 audit(2000000000.640:5891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.4.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c3b8e929 code=0x7fc00000 [ 142.053602][ T4512] /dev/md0: Can't lookup blockdev [ 142.284594][ T4547] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 142.291856][ T4547] rust_binder: Write failure EINVAL in pid:734 [ 142.312409][ T4556] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1359'. [ 142.429298][ T4576] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 142.495176][ T4587] netlink: 57 bytes leftover after parsing attributes in process `syz.1.1368'. [ 143.192888][ T4622] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 143.391155][ T4651] binder: Bad value for 'stats' [ 143.413324][ T4653] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 143.413363][ T4653] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:669 [ 143.540641][ T343] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 143.551036][ T4667] overlayfs: failed to clone upperpath [ 143.599691][ T4672] /dev/loop0: Can't lookup blockdev [ 143.599701][ T4671] /dev/loop0: Can't lookup blockdev [ 143.700921][ T343] usb 5-1: not running at top speed; connect to a high speed hub [ 143.710252][ T343] usb 5-1: config 1 interface 0 has no altsetting 0 [ 143.718237][ T343] usb 5-1: New USB device found, idVendor=05ac, idProduct=0267, bcdDevice= 0.40 [ 143.727333][ T343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.735376][ T343] usb 5-1: Product: syz [ 143.740269][ T343] usb 5-1: Manufacturer: syz [ 143.744893][ T343] usb 5-1: SerialNumber: syz [ 143.761270][ T4679] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 143.839065][ T4688] rust_binder: Error while translating object. [ 143.839097][ T4688] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 143.845798][ T4688] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:685 [ 143.925944][ T4695] __vm_enough_memory: pid: 4695, comm: syz.3.1406, bytes: 70373039144960 not enough memory for the allocation [ 144.034527][ T4699] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 144.048924][ T4701] rust_binder: Write failure EFAULT in pid:697 [ 144.116855][ T36] kauditd_printk_skb: 96 callbacks suppressed [ 144.116904][ T36] audit: type=1400 audit(2000000000.450:5988): avc: denied { execute_no_trans } for pid=4702 comm="syz.3.1410" path="/235/file0" dev="tmpfs" ino=1338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 144.222410][ T4711] overlayfs: failed to clone upperpath [ 144.228489][ T36] audit: type=1400 audit(2000000000.560:5989): avc: denied { create } for pid=4710 comm="syz.0.1413" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 144.249700][ T36] audit: type=1400 audit(2000000000.560:5990): avc: denied { rename } for pid=4710 comm="syz.0.1413" name="file0" dev="tmpfs" ino=2046 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 144.361973][ T36] audit: type=1400 audit(2000000000.700:5991): avc: denied { getopt } for pid=4734 comm="syz.0.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 144.483942][ T343] usbhid 5-1:1.0: can't add hid device: -71 [ 144.490016][ T343] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 144.498898][ T343] usb 5-1: USB disconnect, device number 42 [ 145.282014][ T4762] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1427'. [ 145.341890][ T4772] tipc: Enabling of bearer rejected, failed to enable media [ 145.393599][ T4777] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 145.394244][ T4777] rust_binder: Error while translating object. [ 145.400976][ T4777] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 145.407296][ T4777] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:754 [ 145.438793][ T4787] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1435'. [ 145.484533][ T36] audit: type=1400 audit(2000000001.820:5992): avc: denied { remount } for pid=4790 comm="syz.4.1437" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 145.592860][ T36] audit: type=1400 audit(2000000001.930:5993): avc: denied { create } for pid=4795 comm="syz.3.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 145.880253][ T306] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 146.030128][ T306] usb 4-1: Using ep0 maxpacket: 32 [ 146.036349][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 131, changing to 11 [ 146.047731][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49607, setting to 1024 [ 146.058978][ T306] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 146.072120][ T306] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 146.081313][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.089874][ T306] usb 4-1: config 0 descriptor?? [ 146.698621][ T306] usbhid 4-1:0.0: can't add hid device: -71 [ 146.706159][ T306] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 146.715451][ T306] usb 4-1: USB disconnect, device number 53 [ 146.745050][ T36] audit: type=1400 audit(2000000003.080:5994): avc: denied { setattr } for pid=4839 comm="syz.0.1452" name="/" dev="configfs" ino=1314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 147.335265][ T4851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1456'. [ 147.411211][ T4856] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 147.411251][ T4856] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:720 [ 147.459942][ T36] audit: type=1326 audit(2000000003.790:5995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4860 comm="syz.3.1459" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e8eb8e929 code=0x0 [ 147.537496][ T36] audit: type=1400 audit(2000000003.870:5996): avc: denied { setopt } for pid=4863 comm="syz.0.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 147.537663][ T4864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1460'. [ 147.602197][ T36] audit: type=1400 audit(2000000003.940:5997): avc: denied { nlmsg_read } for pid=4865 comm="syz.0.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 147.750157][ T343] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 147.900193][ T343] usb 4-1: Using ep0 maxpacket: 32 [ 147.906608][ T343] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 147.915028][ T343] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 147.923693][ T343] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 147.932699][ T343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 147.942417][ T343] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 147.952103][ T343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 147.961900][ T343] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 147.971704][ T343] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 147.984715][ T343] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 147.993823][ T343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.002611][ T343] usb 4-1: config 0 descriptor?? [ 148.209664][ T343] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 54 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 149.037854][ T4901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1473'. [ 149.733339][ T4919] overlayfs: failed to clone upperpath [ 149.740813][ T4921] overlayfs: failed to clone upperpath [ 149.966641][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 149.966677][ T36] audit: type=1326 audit(2000000006.300:6002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4915 comm="syz.0.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8af98e929 code=0x7fc00000 [ 150.074443][ T36] audit: type=1400 audit(2000000006.410:6003): avc: denied { accept } for pid=4944 comm="syz.0.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.104522][ T4950] syz.0.1490 (4950): attempted to duplicate a private mapping with mremap. This is not supported. [ 150.321250][ T36] audit: type=1400 audit(2000000006.660:6004): avc: denied { connect } for pid=4973 comm="syz.0.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 150.355483][ T36] audit: type=1400 audit(2000000006.680:6005): avc: denied { read } for pid=4973 comm="syz.0.1497" laddr=172.20.20.10 lport=6 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 150.477875][ T306] usb 4-1: USB disconnect, device number 54 [ 150.492812][ T306] usblp0: removed [ 150.508403][ T4993] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 150.508428][ T4994] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 150.527031][ T4993] rust_binder: inc_ref_done called when no active inc_refs [ 150.555182][ T4993] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:729 [ 150.574993][ T4993] rust_binder: Error while translating object. [ 150.593705][ T4993] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 150.607941][ T4993] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:729 [ 150.621040][ T36] audit: type=1326 audit(2000000006.950:6006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4992 comm="syz.3.1504" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e8eb8e929 code=0x0 [ 150.672625][ T36] audit: type=1326 audit(2000000006.950:6007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4992 comm="syz.3.1504" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e8eb8e929 code=0x0 [ 150.700029][ T4989] netlink: 'syz.1.1502': attribute type 4 has an invalid length. [ 150.730437][ T5002] tmpfs: Unknown parameter 'usrquota' [ 150.889855][ T36] audit: type=1400 audit(2000000007.220:6008): avc: denied { ioctl } for pid=5018 comm="syz.1.1512" path="socket:[31265]" dev="sockfs" ino=31265 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 151.580200][ T342] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 151.635999][ T5032] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1517'. [ 151.672237][ T5035] netlink: 'syz.0.1518': attribute type 1 has an invalid length. [ 151.731530][ T342] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 151.746548][ T342] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 151.757389][ T342] usb 4-1: config 0 interface 0 has no altsetting 0 [ 151.764223][ T342] usb 4-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 151.773471][ T342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.790403][ T342] usb 4-1: config 0 descriptor?? [ 151.797646][ T5025] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 151.865422][ T36] audit: type=1400 audit(2000000008.200:6009): avc: denied { map } for pid=5053 comm="syz.0.1522" path="socket:[30694]" dev="sockfs" ino=30694 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 151.888752][ T36] audit: type=1400 audit(2000000008.200:6010): avc: denied { accept } for pid=5053 comm="syz.0.1522" path="socket:[30694]" dev="sockfs" ino=30694 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 151.951273][ T5060] bridge0: port 3(erspan0) entered blocking state [ 151.957825][ T5060] bridge0: port 3(erspan0) entered disabled state [ 151.964500][ T5060] erspan0: entered allmulticast mode [ 151.970678][ T5060] erspan0: entered promiscuous mode [ 151.976097][ T5060] bridge0: port 3(erspan0) entered blocking state [ 151.982594][ T5060] bridge0: port 3(erspan0) entered forwarding state [ 151.989877][ T5064] netlink: 792 bytes leftover after parsing attributes in process `syz.1.1527'. [ 152.019503][ T36] audit: type=1400 audit(2000000008.350:6011): avc: denied { create } for pid=5065 comm="syz.0.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 152.066392][ T5076] rust_binder: Write failure EFAULT in pid:785 [ 152.208873][ T342] logitech 0003:046D:C286.0010: unknown main item tag 0x6 [ 152.229864][ T342] logitech 0003:046D:C286.0010: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.3-1/input0 [ 152.241882][ T342] logitech 0003:046D:C286.0010: no inputs found [ 152.296345][ T5101] tipc: Started in network mode [ 152.301355][ T5101] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 152.304564][ T5103] fuse: Bad value for 'user_id' [ 152.308835][ T5101] tipc: Enabled bearer , priority 10 [ 152.313703][ T5103] fuse: Bad value for 'user_id' [ 152.323124][ T5101] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 152.333229][ T5101] tipc: Enabled bearer , priority 10 [ 152.411132][ T5025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.420407][ T5025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.428853][ T342] usb 4-1: USB disconnect, device number 55 [ 152.964677][ T5124] SELinux: failed to load policy [ 153.054356][ T5129] binder: Unknown parameter 'fscontext?}' [ 153.088065][ T5136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.208733][ T5162] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.216058][ T5162] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 153.222622][ T5162] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:829 [ 153.314068][ T5181] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=5181 comm=syz.4.1570 [ 153.360145][ T306] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 153.373485][ T5190] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1573'. [ 153.415564][ T5196] mmap: syz.1.1576 (5196) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 153.420183][ T45] tipc: Node number set to 10922666 [ 153.511367][ T306] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.521627][ T306] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.531475][ T306] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 153.540630][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 153.548622][ T306] usb 4-1: SerialNumber: syz [ 154.204056][ T306] usb 4-1: 0:2 : does not exist [ 154.209019][ T306] usb 4-1: unit 5: unexpected type 0x0e [ 154.216439][ T306] usb 4-1: USB disconnect, device number 56 [ 154.225863][ T1928] udevd[1928]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 154.990144][ T342] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 155.141300][ T342] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 155.150534][ T342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.159239][ T342] usb 4-1: config 0 descriptor?? [ 155.233359][ T5239] batadv_slave_0: entered promiscuous mode [ 155.245091][ T5242] batadv_slave_0: left promiscuous mode [ 155.385249][ T5217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.399978][ T5217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.462287][ T5271] netlink: 340 bytes leftover after parsing attributes in process `syz.1.1600'. [ 155.534783][ T5281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1602'. [ 155.764794][ T342] usb 4-1: Cannot read MAC address [ 155.770001][ T342] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 155.783749][ T342] usb 4-1: USB disconnect, device number 57 [ 155.789099][ T5295] netlink: 'syz.0.1606': attribute type 46 has an invalid length. [ 155.810221][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 155.810249][ T36] audit: type=1400 audit(2000000012.150:6019): avc: denied { watch_reads } for pid=5299 comm="syz.0.1607" path="/447/bus" dev="tmpfs" ino=2466 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 155.810600][ T5300] overlayfs: failed to clone upperpath [ 155.876605][ T5305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1609'. [ 155.897682][ T5307] netlink: 'syz.0.1610': attribute type 40 has an invalid length. [ 156.013298][ T36] audit: type=1400 audit(2000000012.350:6020): avc: denied { module_load } for pid=5317 comm="syz.0.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 156.013309][ T5318] Invalid ELF header type: 2 != 1 [ 156.233953][ T36] audit: type=1400 audit(2000000012.570:6021): avc: denied { listen } for pid=5355 comm="syz.3.1626" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 156.235201][ T5356] /dev/rnullb0: Can't open blockdev [ 156.370620][ T5368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.370656][ T5368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.377217][ T5368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.381846][ T5369] rust_binder: Write failure EINVAL in pid:839 [ 156.383866][ T5368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.390744][ T5370] binder: Unknown parameter '0x00002000000a0000' [ 156.396512][ T5368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.409152][ T5368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.415863][ T5368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.422411][ T5368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.428901][ T5368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.435480][ T5368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.441977][ T5368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.448537][ T5368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.455020][ T5368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.461520][ T5368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.467949][ T5368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.474421][ T5368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.480904][ T5368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.487346][ T5368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.493801][ T5368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.500291][ T5368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.506714][ T5368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.513179][ T5368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.519616][ T5368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.526077][ T5368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.532527][ T5368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.539034][ T5368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.545535][ T5368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.552037][ T5368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.558581][ T5368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.565077][ T5368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.571546][ T5368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.578067][ T5368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.584525][ T5368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.943597][ T36] audit: type=1400 audit(2000000013.280:6022): avc: denied { create } for pid=5393 comm="syz.1.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 157.122153][ T5412] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1645' sets config #236 [ 157.173247][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 157.230225][ T36] audit: type=1400 audit(2000000013.560:6023): avc: denied { mounton } for pid=5419 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 157.307762][ T36] audit: type=1400 audit(2000000013.640:6024): avc: denied { listen } for pid=5429 comm="syz.4.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 157.380015][ T5419] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.397503][ T5419] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.416796][ T305] Bluetooth: hci2: Frame reassembly failed (-84) [ 157.417496][ T5419] bridge_slave_0: entered allmulticast mode [ 157.430664][ T5439] /dev/rnullb0: Can't open blockdev [ 157.432884][ T5419] bridge_slave_0: entered promiscuous mode [ 157.445343][ T5419] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.452512][ T5419] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.459623][ T5419] bridge_slave_1: entered allmulticast mode [ 157.466112][ T5419] bridge_slave_1: entered promiscuous mode [ 157.482225][ T305] bridge_slave_1: left allmulticast mode [ 157.487914][ T305] bridge_slave_1: left promiscuous mode [ 157.500408][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.508251][ T305] bridge_slave_0: left allmulticast mode [ 157.514025][ T305] bridge_slave_0: left promiscuous mode [ 157.519672][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.645656][ T305] veth1_macvtap: left promiscuous mode [ 157.755972][ T5419] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.763088][ T5419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.770440][ T5419] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.777498][ T5419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.808888][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.816257][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.827964][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.835060][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.844456][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.851543][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.877746][ T5419] veth0_vlan: entered promiscuous mode [ 157.892356][ T5419] veth1_macvtap: entered promiscuous mode [ 157.904558][ T36] audit: type=1400 audit(2000000014.240:6025): avc: denied { read } for pid=5456 comm="syz.0.1658" name="/" dev="configfs" ino=1314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 157.927305][ T36] audit: type=1400 audit(2000000014.240:6026): avc: denied { open } for pid=5456 comm="syz.0.1658" path="/" dev="configfs" ino=1314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 157.954616][ T36] audit: type=1400 audit(2000000014.290:6027): avc: denied { mounton } for pid=5419 comm="syz-executor" path="/root/syzkaller.RSGvmT/syz-tmp" dev="sda1" ino=2045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 157.981056][ T36] audit: type=1400 audit(2000000014.320:6028): avc: denied { mounton } for pid=5419 comm="syz-executor" path="/root/syzkaller.RSGvmT/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=33211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 158.280264][ T432] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 158.430196][ T432] usb 2-1: Using ep0 maxpacket: 16 [ 158.436915][ T432] usb 2-1: config 0 has no interfaces? [ 158.444444][ T432] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 158.453919][ T432] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.462254][ T432] usb 2-1: Product: syz [ 158.466806][ T432] usb 2-1: Manufacturer: syz [ 158.471643][ T432] usb 2-1: SerialNumber: syz [ 158.477503][ T432] usb 2-1: config 0 descriptor?? [ 158.510670][ T5472] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1661'. [ 158.685283][ T306] usb 2-1: USB disconnect, device number 16 [ 159.180169][ T1096] Bluetooth: hci1: command 0x1003 tx timeout [ 159.180175][ T1097] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 159.180239][ T2942] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 159.212408][ T5478] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=5478 comm=syz.1.1663 [ 159.420328][ T2942] Bluetooth: hci2: command 0x1003 tx timeout [ 159.420393][ T53] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 159.461472][ T5483] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 159.536064][ T5489] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1667'. [ 159.536064][ T5488] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1667'. [ 159.652282][ T5503] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 159.652323][ T5503] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:864 [ 160.058333][ T5517] overlayfs: failed to resolve './bus/file0': -2 [ 160.107850][ T5521] binder: Unknown parameter ' [ 160.107850][ T5521] Ո-Vϳe@gߟDw^bփ-6βכOla^' [ 160.349983][ T5544] input: syz1 as /devices/virtual/input/input16 [ 160.397275][ T5548] /dev/rnullb0: Can't open blockdev [ 160.568603][ T5564] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.720559][ T432] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 160.724362][ T5571] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.740711][ T5571] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.748921][ T5571] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:888 [ 160.775858][ T5576] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1699'. [ 160.835607][ T5587] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 160.835638][ T5587] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 160.843849][ T5587] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:896 [ 160.881361][ T432] usb 2-1: Using ep0 maxpacket: 32 [ 160.902068][ T432] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 160.913988][ T432] usb 2-1: config 0 has no interface number 0 [ 160.920304][ T432] usb 2-1: config 0 interface 184 has no altsetting 0 [ 160.928634][ T432] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 160.938551][ T432] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.946811][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 160.946829][ T36] audit: type=1326 audit(2000000017.280:6037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5590 comm="syz.0.1705" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8af98e929 code=0x0 [ 160.975981][ T432] usb 2-1: Product: syz [ 160.987137][ T432] usb 2-1: Manufacturer: syz [ 160.998069][ T342] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 161.005712][ T432] usb 2-1: SerialNumber: syz [ 161.012557][ T432] usb 2-1: config 0 descriptor?? [ 161.018650][ T432] smsc75xx v1.0.0 [ 161.060064][ T5597] /dev/rnullb0: Can't open blockdev [ 161.160422][ T342] usb 4-1: Using ep0 maxpacket: 8 [ 161.170939][ T342] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 161.179698][ T342] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.196526][ T342] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 161.216426][ T342] usb 4-1: config 1 has no interface number 1 [ 161.223911][ T342] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 161.247939][ T342] usb 4-1: config 1 interface 2 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 161.259997][ T342] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 161.269157][ T342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.277443][ T342] usb 4-1: Product: syz [ 161.281880][ T342] usb 4-1: Manufacturer: syz [ 161.286541][ T342] usb 4-1: SerialNumber: syz [ 161.494648][ T5573] rust_binder: Error in use_page_slow: ESRCH [ 161.494678][ T5573] rust_binder: use_range failure ESRCH [ 161.501545][ T5573] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 161.507180][ T5573] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 161.515404][ T5573] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:773 [ 161.530770][ T342] usb 4-1: USB disconnect, device number 58 [ 162.046229][ T5617] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 162.228533][ T5558] binder: Unknown parameter '' [ 162.251056][ T432] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 162.261990][ T432] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 162.271443][ T432] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 162.282297][ T432] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 162.291999][ T432] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 162.302335][ T432] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 162.311928][ T432] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 162.321346][ T432] usb 2-1: USB disconnect, device number 17 [ 162.387999][ T36] audit: type=1326 audit(2000000018.720:6038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5637 comm="syz.0.1721" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc8af98e929 code=0x0 [ 162.430175][ T306] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 162.581280][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.592401][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.602187][ T306] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.615100][ T306] usb 4-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 162.624657][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.633512][ T306] usb 4-1: config 0 descriptor?? [ 162.768843][ T5642] fuse: Bad value for 'group_id' [ 162.773988][ T5642] fuse: Bad value for 'group_id' [ 163.239945][ T306] usb 4-1: language id specifier not provided by device, defaulting to English [ 163.841594][ T5620] tmpfs: Unknown parameter 'appraise_type' [ 163.849718][ T306] uclogic 0003:5543:0047.0011: failed retrieving string descriptor #100: -71 [ 163.858593][ T306] uclogic 0003:5543:0047.0011: failed retrieving pen parameters: -71 [ 163.866720][ T306] uclogic 0003:5543:0047.0011: failed probing pen v1 parameters: -71 [ 163.874881][ T306] uclogic 0003:5543:0047.0011: failed probing parameters: -71 [ 163.882435][ T306] uclogic 0003:5543:0047.0011: probe with driver uclogic failed with error -71 [ 163.893210][ T306] usb 4-1: USB disconnect, device number 59 [ 163.920151][ T342] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 164.071811][ T342] usb 2-1: unable to get BOS descriptor or descriptor too short [ 164.080176][ T342] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 164.088892][ T342] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 164.099047][ T342] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.109910][ T342] usb 2-1: string descriptor 0 read error: -22 [ 164.116195][ T342] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 164.125320][ T342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.135894][ T342] usb 2-1: 0:2 : does not exist [ 164.294785][ T5666] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:915 [ 164.328405][ T5673] 9pnet_fd: Insufficient options for proto=fd [ 164.392798][ T342] usb 2-1: USB disconnect, device number 18 [ 164.482887][ T36] audit: type=1400 audit(2000000020.820:6039): avc: denied { accept } for pid=5696 comm="syz.0.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 164.752017][ T5723] kvm: pic: non byte write [ 165.080912][ T5738] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1757'. [ 165.133240][ T5742] 9pnet_fd: p9_fd_create_unix (5742): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 165.174434][ T36] audit: type=1326 audit(2000000021.510:6040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5743 comm="syz.0.1760" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8af98e929 code=0x0 [ 165.360146][ T343] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 165.490154][ T306] usb 4-1: new low-speed USB device number 60 using dummy_hcd [ 165.510147][ T343] usb 2-1: Using ep0 maxpacket: 16 [ 165.516388][ T343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.527364][ T343] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 165.536516][ T343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.545292][ T343] usb 2-1: config 0 descriptor?? [ 165.620144][ T306] usb 4-1: device descriptor read/64, error -71 [ 165.710286][ T36] audit: type=1326 audit(2000000022.040:6041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5755 comm="syz.4.1763" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93c3b8e929 code=0x0 [ 165.860224][ T306] usb 4-1: device descriptor read/64, error -71 [ 165.952771][ T343] steelseries 0003:1038:1410.0012: not enough fields in HID_OUTPUT_REPORT 0 [ 166.100183][ T306] usb 4-1: new low-speed USB device number 61 using dummy_hcd [ 166.154163][ T5738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.162731][ T5738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.173113][ T343] usb 2-1: USB disconnect, device number 19 [ 166.230163][ T306] usb 4-1: device descriptor read/64, error -71 [ 166.470168][ T306] usb 4-1: device descriptor read/64, error -71 [ 166.562003][ T36] audit: type=1326 audit(2000000022.900:6042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.4.1765" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93c3b8e929 code=0x0 [ 166.590356][ T306] usb usb4-port1: attempt power cycle [ 166.930184][ T306] usb 4-1: new low-speed USB device number 62 using dummy_hcd [ 166.951144][ T306] usb 4-1: device descriptor read/8, error -71 [ 166.980138][ T343] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 167.081353][ T306] usb 4-1: device descriptor read/8, error -71 [ 167.130172][ T343] usb 2-1: Using ep0 maxpacket: 8 [ 167.136393][ T343] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.147325][ T343] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.157106][ T343] usb 2-1: config 0 interface 0 has no altsetting 0 [ 167.163745][ T343] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 167.172820][ T343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.184734][ T343] usb 2-1: config 0 descriptor?? [ 167.280958][ T5795] tipc: Enabling of bearer rejected, failed to enable media [ 167.320133][ T306] usb 4-1: new low-speed USB device number 63 using dummy_hcd [ 167.351200][ T306] usb 4-1: device descriptor read/8, error -71 [ 167.481148][ T306] usb 4-1: device descriptor read/8, error -71 [ 167.590226][ T306] usb usb4-port1: unable to enumerate USB device [ 167.597628][ T343] steelseries 0003:1038:1410.0013: unknown main item tag 0x0 [ 167.605118][ T343] steelseries 0003:1038:1410.0013: unknown main item tag 0x0 [ 167.612963][ T343] steelseries 0003:1038:1410.0013: unknown main item tag 0x0 [ 167.620412][ T343] steelseries 0003:1038:1410.0013: unknown main item tag 0x0 [ 167.627836][ T343] steelseries 0003:1038:1410.0013: unknown main item tag 0x0 [ 167.635453][ T343] steelseries 0003:1038:1410.0013: missing HID_OUTPUT_REPORT 0 [ 167.799244][ T36] audit: type=1400 audit(2000000024.130:6043): avc: denied { create } for pid=5783 comm="syz.1.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 167.799653][ T5784] __vm_enough_memory: pid: 5784, comm: syz.1.1773, bytes: 70373039144960 not enough memory for the allocation [ 167.832486][ T342] usb 2-1: USB disconnect, device number 20 [ 168.556433][ T5853] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1802'. [ 168.565684][ T5855] rust_binder: Error in use_page_slow: ESRCH [ 168.565713][ T5855] rust_binder: use_range failure ESRCH [ 168.571425][ T36] audit: type=1400 audit(2000000024.910:6044): avc: denied { read } for pid=5850 comm="syz.1.1801" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 168.580424][ T5855] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 168.606901][ T5855] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 168.627072][ T5855] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:815 [ 168.633397][ T36] audit: type=1400 audit(2000000024.910:6045): avc: denied { open } for pid=5850 comm="syz.1.1801" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 169.267937][ T36] audit: type=1400 audit(2000000025.600:6046): avc: denied { setopt } for pid=5870 comm="syz.1.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 169.407256][ T36] audit: type=1400 audit(2000000025.740:6047): avc: denied { listen } for pid=5902 comm="syz.1.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 169.428910][ T36] audit: type=1400 audit(2000000025.760:6048): avc: denied { write } for pid=5904 comm="syz.1.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 169.740184][ T432] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 169.760148][ T929] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 169.890266][ T432] usb 2-1: Using ep0 maxpacket: 16 [ 169.896544][ T432] usb 2-1: config 0 has no interfaces? [ 169.903476][ T432] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 169.911308][ T929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.912606][ T432] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.923561][ T929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.931822][ T432] usb 2-1: Product: syz [ 169.941298][ T929] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 169.945647][ T432] usb 2-1: Manufacturer: syz [ 169.958352][ T929] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 169.963193][ T432] usb 2-1: SerialNumber: syz [ 169.972095][ T929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.978171][ T432] usb 2-1: config 0 descriptor?? [ 169.992549][ T929] usb 4-1: config 0 descriptor?? [ 170.196302][ T306] usb 2-1: USB disconnect, device number 21 [ 170.215203][ T929] usbhid 4-1:0.0: can't add hid device: -71 [ 170.227729][ T929] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 170.236931][ T929] usb 4-1: USB disconnect, device number 64 [ 170.305373][ T5958] rust_binder: Error while translating object. [ 170.305405][ T5958] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 170.311751][ T5958] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:836 [ 170.435902][ T5975] af_packet: tpacket_rcv: packet too big, clamped from 64 to 4294967272. macoff=96 [ 170.718725][ T5987] rust_binder: Error while translating object. [ 170.718750][ T5987] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 170.725048][ T5987] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:94 [ 171.176739][ T6018] rust_binder: Write failure EINVAL in pid:854 [ 171.191194][ T36] audit: type=1326 audit(2000000027.530:6049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6020 comm="syz.0.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8af98e929 code=0x7ffc0000 [ 171.220859][ T36] audit: type=1326 audit(2000000027.530:6050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6020 comm="syz.0.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8af98e929 code=0x7ffc0000 [ 171.244458][ T36] audit: type=1326 audit(2000000027.530:6051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6020 comm="syz.0.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fc8af98e929 code=0x7ffc0000 [ 171.283957][ T6024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.374623][ T6038] SELinux: Context system_u:object_r:tzdata_exec_t:s0 is not valid (left unmapped). [ 171.437948][ T6043] rust_binder: Write failure EINVAL in pid:862 [ 171.501822][ T6048] rust_binder: Write failure EFAULT in pid:117 [ 171.542874][ T6053] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.554592][ T6053] rust_binder: Error in use_page_slow: ESRCH [ 171.561807][ T6053] rust_binder: use_range failure ESRCH [ 171.568494][ T6053] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 171.574397][ T6053] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 171.582965][ T6053] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:977 [ 171.679329][ T6070] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.707578][ T6075] usb usb8: usbfs: process 6075 (syz.1.1876) did not claim interface 0 before use [ 171.806333][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 171.806332][ T6083] debugfs: Bad value for 'gid' [ 171.806355][ T36] audit: type=1400 audit(2000000028.140:6082): avc: denied { remount } for pid=6082 comm="syz.1.1879" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 171.812718][ T6083] debugfs: Bad value for 'gid' [ 172.025497][ T6098] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.026058][ T6098] rust_binder: Write failure EINVAL in pid:161 [ 172.032854][ T6098] rust_binder: Read failure Err(EAGAIN) in pid:161 [ 172.492045][ T6118] netlink: 'syz.3.1889': attribute type 4 has an invalid length. [ 172.506370][ T6118] netlink: 'syz.3.1889': attribute type 27 has an invalid length. [ 172.514560][ T6118] netlink: 3609 bytes leftover after parsing attributes in process `syz.3.1889'. [ 172.525489][ T6118] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1889'. [ 172.588786][ T6124] binder: Bad value for 'stats' [ 172.673761][ T36] audit: type=1400 audit(2000000029.010:6083): avc: denied { getopt } for pid=6135 comm="syz.3.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 172.697144][ T6136] 9pnet_fd: Insufficient options for proto=fd [ 172.819976][ T36] audit: type=1400 audit(2000000029.150:6084): avc: denied { append } for pid=6142 comm="syz.3.1897" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 172.858064][ T36] audit: type=1400 audit(2000000029.190:6085): avc: denied { write } for pid=6144 comm="syz.3.1898" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 173.089632][ T6169] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1905'. [ 173.287032][ T6186] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1911'. [ 173.360119][ T342] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 173.524167][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 173.530700][ T342] usb 2-1: Using ep0 maxpacket: 16 [ 173.540983][ T36] audit: type=1400 audit(2000000029.880:6086): avc: denied { nlmsg_write } for pid=6190 comm="syz.0.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 173.546657][ T342] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 173.571843][ T342] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.582259][ T342] usb 2-1: config 0 has no interface number 0 [ 173.592100][ T342] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 173.601324][ T342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.609502][ T342] usb 2-1: Product: syz [ 173.613950][ T342] usb 2-1: Manufacturer: syz [ 173.618682][ T342] usb 2-1: SerialNumber: syz [ 173.631428][ T342] usb 2-1: config 0 descriptor?? [ 173.839645][ T342] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 173.843381][ T6167] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 173.846283][ T342] usb 2-1: No valid video chain found. [ 173.847959][ T6167] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:173 [ 173.854769][ T342] usb 2-1: USB disconnect, device number 22 [ 174.468201][ T6227] tipc: Started in network mode [ 174.473184][ T6227] tipc: Node identity , cluster identity 4711 [ 174.479288][ T6227] tipc: Failed to obtain node identity [ 174.484829][ T6227] tipc: Enabling of bearer rejected, failed to enable media [ 174.623756][ T6233] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.624459][ T6233] rust_binder: Error while translating object. [ 174.630962][ T6233] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 174.637198][ T6233] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:187 [ 174.960207][ T929] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 175.121326][ T929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.132274][ T929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.142042][ T929] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 175.154960][ T929] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 175.164016][ T929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.173021][ T929] usb 2-1: config 0 descriptor?? [ 175.579845][ T929] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 175.587391][ T2942] Bluetooth: hci0: command 0x1003 tx timeout [ 175.588284][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 175.599588][ T929] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 175.607051][ T929] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 175.614508][ T929] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 175.624685][ T929] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 175.632172][ T929] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 175.639597][ T929] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 175.648569][ T929] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 175.657225][ T929] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 175.657488][ T6247] 9pnet_fd: Insufficient options for proto=fd [ 175.665686][ T929] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 175.678188][ T929] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 175.685819][ T929] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 175.693261][ T929] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 175.707196][ T929] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 175.714679][ T929] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 175.722331][ T929] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 175.744104][ T929] plantronics 0003:047F:FFFF.0014: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 175.833293][ T342] usb 2-1: USB disconnect, device number 23 [ 176.092276][ T6284] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.099474][ T6284] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.109579][ T6284] bridge_slave_0: entered allmulticast mode [ 176.116391][ T6284] bridge_slave_0: entered promiscuous mode [ 176.124324][ T6284] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.131431][ T6284] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.138567][ T6284] bridge_slave_1: entered allmulticast mode [ 176.145202][ T6284] bridge_slave_1: entered promiscuous mode [ 176.155312][ T292] erspan0: left allmulticast mode [ 176.160441][ T292] erspan0: left promiscuous mode [ 176.165540][ T292] bridge0: port 3(erspan0) entered disabled state [ 176.172372][ T292] bridge_slave_1: left allmulticast mode [ 176.178005][ T292] bridge_slave_1: left promiscuous mode [ 176.183683][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.191822][ T292] bridge_slave_0: left allmulticast mode [ 176.197519][ T292] bridge_slave_0: left promiscuous mode [ 176.203381][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.211466][ T292] tipc: Resetting bearer [ 176.245216][ T292] tipc: Disabling bearer [ 176.332497][ T292] tipc: Disabling bearer [ 176.341866][ T292] tipc: Left network mode [ 176.352232][ T292] veth1_macvtap: left promiscuous mode [ 176.367219][ T292] veth0_vlan: left promiscuous mode [ 176.393481][ T6299] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 176.393760][ T6299] SELinux: failed to load policy [ 176.462446][ T6299] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 176.462483][ T6299] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:197 [ 176.492132][ T6284] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.508367][ T6284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.515718][ T6284] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.522794][ T6284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.589551][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.598568][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.609174][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.616273][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.627387][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.634470][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.674563][ T6284] veth0_vlan: entered promiscuous mode [ 176.701521][ T6284] veth1_macvtap: entered promiscuous mode [ 176.776997][ T6307] rust_binder: Error while translating object. [ 176.777032][ T6307] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 176.790161][ T6307] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:2 [ 176.952404][ T36] audit: type=1400 audit(2000000033.290:6087): avc: denied { append } for pid=6317 comm="syz.3.1950" name="vsock" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 177.023026][ T6328] binder: Unknown parameter 'Nsobal' [ 177.157841][ T6335] netlink: 'syz.0.1958': attribute type 4 has an invalid length. [ 177.168342][ T6335] netlink: 'syz.0.1958': attribute type 4 has an invalid length. [ 177.347918][ T6355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1964'. [ 177.359375][ T6355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=6355 comm=syz.0.1964 [ 177.397137][ T6356] binder: Binderfs stats mode cannot be changed during a remount [ 177.441985][ T6360] rust_binder: Write failure EFAULT in pid:30 [ 177.459746][ T6365] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 177.472263][ T6365] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 177.478980][ T6365] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:208 [ 177.644133][ T6372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6372 comm=syz.0.1970 [ 177.751890][ T6374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1971'. [ 177.782611][ T6374] rust_binder: inc_ref_done called when no active inc_refs [ 177.994573][ T6397] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1978'. [ 178.133111][ T6401] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 178.133145][ T6401] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 178.263801][ T6409] raw_sendmsg: syz.0.1981 forgot to set AF_INET. Fix it! [ 178.300322][ T343] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 178.304673][ T36] audit: type=1400 audit(2000000034.640:6088): avc: denied { write } for pid=6414 comm="syz.0.1983" name="dev_snmp6" dev="proc" ino=4026532419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 178.310932][ T6415] netlink: 'syz.0.1983': attribute type 4 has an invalid length. [ 178.331042][ T36] audit: type=1400 audit(2000000034.640:6089): avc: denied { add_name } for pid=6414 comm="syz.0.1983" name="blkio.bfq.time" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 178.360278][ T36] audit: type=1400 audit(2000000034.640:6090): avc: denied { create } for pid=6414 comm="syz.0.1983" name="blkio.bfq.time" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:proc_net_t tclass=file permissive=1 [ 178.381483][ T36] audit: type=1400 audit(2000000034.640:6091): avc: denied { associate } for pid=6414 comm="syz.0.1983" name="blkio.bfq.time" scontext=root:object_r:proc_net_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 178.461700][ T343] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 178.472794][ T343] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 178.483965][ T343] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 178.498409][ T343] usb 2-1: config 0 interface 0 has no altsetting 0 [ 178.505419][ T343] usb 2-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 178.514032][ T36] audit: type=1400 audit(2000000034.850:6092): avc: denied { create } for pid=6423 comm="syz.3.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 178.520152][ T343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.568037][ T343] usb 2-1: config 0 descriptor?? [ 178.579596][ T6397] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 179.195519][ T36] audit: type=1400 audit(2000000035.530:6093): avc: denied { read write } for pid=6396 comm="syz.1.1978" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 179.196094][ T6397] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 179.219228][ T6397] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:210 [ 179.244223][ T36] audit: type=1400 audit(2000000035.530:6094): avc: denied { open } for pid=6396 comm="syz.1.1978" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 179.246569][ T343] usbhid 2-1:0.0: can't add hid device: -71 [ 179.283204][ T343] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 179.295064][ T343] usb 2-1: USB disconnect, device number 24 [ 179.620184][ T6463] /dev/rnullb0: Can't open blockdev [ 179.639219][ T6465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 179.651678][ T36] audit: type=1400 audit(2000000000.030:6095): avc: denied { bind } for pid=6466 comm="syz.4.1997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 179.683008][ T36] audit: type=1400 audit(2000000000.050:6096): avc: denied { node_bind } for pid=6466 comm="syz.4.1997" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 179.710643][ T929] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 179.742998][ T6472] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 179.774896][ T6478] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 179.782563][ T6478] rust_binder: Write failure EINVAL in pid:1014 [ 179.840262][ T306] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 179.870128][ T929] usb 1-1: Using ep0 maxpacket: 16 [ 179.876788][ T929] usb 1-1: unable to get BOS descriptor or descriptor too short [ 179.885553][ T929] usb 1-1: config 130 has an invalid interface number: 110 but max is 0 [ 179.894178][ T929] usb 1-1: config 130 has an invalid descriptor of length 174, skipping remainder of the config [ 179.905076][ T929] usb 1-1: config 130 has no interface number 0 [ 179.911573][ T929] usb 1-1: config 130 interface 110 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.925267][ T929] usb 1-1: config 130 interface 110 has no altsetting 0 [ 179.933945][ T929] usb 1-1: New USB device found, idVendor=0b05, idProduct=9200, bcdDevice=48.04 [ 179.943276][ T929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.951509][ T929] usb 1-1: Product: syz [ 179.955767][ T929] usb 1-1: Manufacturer: syz [ 179.960664][ T929] usb 1-1: SerialNumber: syz [ 180.000093][ T306] usb 4-1: Using ep0 maxpacket: 16 [ 180.006594][ T306] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 180.015232][ T306] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.025576][ T306] usb 4-1: config 0 has no interface number 0 [ 180.033201][ T306] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 180.042352][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.050404][ T306] usb 4-1: Product: syz [ 180.054603][ T306] usb 4-1: Manufacturer: syz [ 180.059204][ T306] usb 4-1: SerialNumber: syz [ 180.065034][ T306] usb 4-1: config 0 descriptor?? [ 180.167483][ T6458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.176239][ T6458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.184538][ T6458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.193244][ T6458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.201519][ T6458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.210239][ T6458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.218377][ T6458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.227289][ T6458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.235523][ T6458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.244236][ T6458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.257563][ T929] usb 1-1: USB disconnect, device number 41 [ 180.273701][ T306] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 180.275300][ T6461] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:973 [ 180.281311][ T306] usb 4-1: No valid video chain found. [ 180.296984][ T306] usb 4-1: USB disconnect, device number 65 [ 180.620007][ T6489] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1016 [ 180.668366][ T6498] syz.4.2009 (6498): /proc/6497/oom_adj is deprecated, please use /proc/6497/oom_score_adj instead. [ 180.806101][ T6505] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:975 [ 180.806502][ T6505] rust_binder: Error while translating object. [ 180.815814][ T6505] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 180.822102][ T6505] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:975 [ 180.861188][ T6506] fuse: Bad value for 'user_id' [ 180.877801][ T6506] fuse: Bad value for 'user_id' [ 181.047262][ T6522] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.047418][ T6522] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.260100][ T306] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 181.420057][ T306] usb 1-1: Using ep0 maxpacket: 16 [ 181.426463][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.437418][ T306] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 181.450282][ T306] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 181.459316][ T306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.468424][ T306] usb 1-1: config 0 descriptor?? [ 181.792582][ T6535] input: syz1 as /devices/virtual/input/input18 [ 181.818183][ T6538] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.879844][ T306] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0015/input/input19 [ 181.903429][ T306] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 182.070005][ T929] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 182.079570][ T6520] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 182.079599][ T6520] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:92 [ 182.220278][ T929] usb 4-1: Using ep0 maxpacket: 8 [ 182.235548][ T929] usb 4-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 182.248507][ T929] usb 4-1: config 1 interface 0 has no altsetting 0 [ 182.256610][ T929] usb 4-1: New USB device found, idVendor=046d, idProduct=c71e, bcdDevice= 0.40 [ 182.265754][ T929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.273789][ T929] usb 4-1: Product: 討ꮈܘ愠儔롑砵梦㲿Ⓛ뫹儁ꒈ鱽菭鵖蝢㟛䳲指메렖룕㩭ꕁ᾿塡茾ដⷄ츞꛻뚌ꋅ澠穾汌鞉ꉇ꼉㛭齙皇즨䆊諢䩋﬜顯䏘曲霜綯ꪣ뎳㬢靇ɱⒸҽ [ 182.295463][ T929] usb 4-1: Manufacturer: 詖風顈飤Ж脿뫣壿양㇤Ҹ댊鍮쓸麳臎䯽掯뢶⹝姶鴯혃힞좐漠୩✹ꪝᡉؚ嶸俀ቓ侞὎甶㰅蚩飚撀퐜矰㢂眒莨৯ॼ쐃༽蚋,䍽㶂ウᣦຍ⦐ԉ㨿쵃朴ᡮ͒塄ꓧ访菶ίᇌ䈬돰䑃萓쿟됓킜黐쑧蔛뤀會浫 [ 182.324061][ T929] usb 4-1: SerialNumber: ࡠ [ 182.733155][ T929] usbhid 4-1:1.0: can't add hid device: -71 [ 182.739340][ T929] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 182.748343][ T929] usb 4-1: USB disconnect, device number 66 [ 183.024269][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 183.024289][ T36] audit: type=1400 audit(2000000003.400:6100): avc: denied { read } for pid=94 comm="acpid" name="event4" dev="devtmpfs" ino=772 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 183.052010][ T36] audit: type=1400 audit(2000000003.400:6101): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=772 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 183.074561][ T36] audit: type=1400 audit(2000000003.400:6102): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=772 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 183.369682][ T36] audit: type=1400 audit(2000000003.740:6103): avc: denied { bind } for pid=6549 comm="syz.3.2027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 183.369960][ T6552] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 183.519973][ T416] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 183.795636][ T6555] rust_binder: Write failure EINVAL in pid:999 [ 183.823764][ T6559] /dev/rnullb0: Can't open blockdev [ 183.836136][ T416] usb 2-1: unable to get BOS descriptor or descriptor too short [ 183.847219][ T416] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 183.861510][ T416] usb 2-1: can't read configurations, error -71 [ 183.967929][ T36] audit: type=1400 audit(2000000004.340:6104): avc: denied { append } for pid=6571 comm="syz.3.2034" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 183.987480][ T61] usb 1-1: USB disconnect, device number 42 [ 184.010158][ T36] audit: type=1400 audit(2000000004.390:6105): avc: denied { create } for pid=6573 comm="syz.0.2035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 184.145103][ T6595] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 184.145211][ T6595] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 184.151869][ T6595] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1052 [ 184.200977][ T342] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 184.220423][ T6603] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 184.220891][ T6603] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 184.227481][ T6603] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:228 [ 184.298857][ T6611] rust_binder: Failed copying remainder into alloc: EFAULT [ 184.299001][ T36] audit: type=1400 audit(2000000004.670:6106): avc: denied { setattr } for pid=6609 comm="syz.0.2047" name="binder0" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 184.308462][ T6611] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 184.339314][ T6611] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 184.347888][ T6611] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:111 [ 184.392498][ T6616] binder: Unknown parameter 'tats' [ 184.410898][ T342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.422113][ T342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.431898][ T342] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 184.444994][ T342] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.454085][ T342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.462925][ T342] usb 4-1: config 0 descriptor?? [ 184.689848][ T416] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 184.739854][ T929] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 184.839829][ T416] usb 2-1: Using ep0 maxpacket: 16 [ 184.846089][ T416] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 184.854942][ T416] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.865105][ T416] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 184.875109][ T416] usb 2-1: too many endpoints for config 1 interface 2 altsetting 1: 255, using maximum allowed: 30 [ 184.885978][ T416] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 184.900673][ T416] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.901054][ T929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.909865][ T416] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.923795][ T929] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 184.929572][ T416] usb 2-1: Product: syz [ 184.938205][ T929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.942126][ T416] usb 2-1: Manufacturer: syz [ 184.951587][ T929] usb 1-1: config 0 descriptor?? [ 184.959040][ T416] usb 2-1: SerialNumber: syz [ 185.025903][ T6622] binder: Bad value for 'stats' [ 185.033912][ T342] usbhid 4-1:0.0: can't add hid device: -71 [ 185.039967][ T342] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 185.049003][ T342] usb 4-1: USB disconnect, device number 67 [ 185.272514][ T36] audit: type=1400 audit(2000000005.650:6107): avc: denied { shutdown } for pid=6626 comm="syz.1.2052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 185.343305][ T416] usb 2-1: USB disconnect, device number 26 [ 185.358338][ T1928] udevd[1928]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 185.362068][ T6620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.385901][ T6620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.603027][ T929] usbhid 1-1:0.0: can't add hid device: -71 [ 185.609097][ T929] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 185.619855][ T929] usb 1-1: USB disconnect, device number 43 [ 186.085149][ T6634] binder: Unknown parameter 'hy' [ 186.104279][ T6636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2055'. [ 186.115178][ T6638] overlay: ./file0 is not a directory [ 186.120812][ T6636] rust_binder: Failed copying remainder into alloc: EFAULT [ 186.120838][ T6636] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 186.138425][ T6636] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 186.151040][ T6636] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1025 [ 186.399778][ T416] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 186.477792][ T36] audit: type=1326 audit(2000000006.850:6108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6657 comm="syz.1.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15058e929 code=0x7fc00000 [ 186.580746][ T416] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.590907][ T416] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 186.599832][ T416] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 186.614296][ T416] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.623415][ T416] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.631458][ T416] usb 1-1: Product: syz [ 186.635641][ T416] usb 1-1: Manufacturer: syz [ 186.640282][ T416] usb 1-1: SerialNumber: syz [ 186.646919][ T416] cdc_ncm 1-1:1.0: invalid descriptor buffer length [ 186.653635][ T416] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 186.660455][ T416] cdc_ncm 1-1:1.0: bind() failure [ 186.853793][ T416] usb 1-1: USB disconnect, device number 44 [ 186.894997][ T6671] SELinux: security_context_str_to_sid (syste_uGй :00000000000000000007) failed with errno=-22 [ 187.032055][ T6675] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1032 [ 187.046120][ T292] Bluetooth: hci0: Frame reassembly failed (-84) [ 187.057410][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 187.154291][ T36] audit: type=1326 audit(2000000007.520:6109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6657 comm="syz.1.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc15052ab19 code=0x7fc00000 [ 187.207762][ T6683] overlayfs: failed to resolve './file1/file0': -2 [ 187.229717][ T416] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 187.348385][ T292] Bluetooth: hci2: Frame reassembly failed (-84) [ 187.380129][ T416] usb 1-1: Using ep0 maxpacket: 16 [ 187.386364][ T416] usb 1-1: config 1 interface 0 has no altsetting 0 [ 187.394473][ T416] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 187.403574][ T416] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.411836][ T416] usb 1-1: Product: syz [ 187.416033][ T416] usb 1-1: Manufacturer: syz [ 187.420852][ T416] usb 1-1: SerialNumber: syz [ 187.763481][ T6673] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2066'. [ 187.875122][ T6698] cgroup2: Unknown parameter 'rdma' [ 189.099611][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 189.099626][ T2942] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 189.099688][ T2942] Bluetooth: hci0: command 0x1003 tx timeout [ 189.419599][ T53] Bluetooth: hci2: command 0x1003 tx timeout [ 189.419613][ T1096] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 189.429825][ T61] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 189.451657][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 189.451677][ T36] audit: type=1400 audit(2000000009.820:6111): avc: denied { accept } for pid=6704 comm="syz.1.2077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 189.502584][ T6706] netlink: 'syz.1.2077': attribute type 4 has an invalid length. [ 189.510533][ T6706] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2077'. [ 189.520099][ T6706] futex_wake_op: syz.1.2077 tries to shift op by -1; fix this program [ 189.529185][ T6706] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 189.569608][ T61] usb 4-1: device descriptor read/64, error -71 [ 189.809549][ T61] usb 4-1: device descriptor read/64, error -71 [ 190.000744][ T416] usbhid 1-1:1.0: can't add hid device: -71 [ 190.007137][ T416] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 190.016818][ T416] usb 1-1: USB disconnect, device number 45 [ 190.049554][ T61] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 190.179592][ T61] usb 4-1: device descriptor read/64, error -71 [ 190.295954][ T36] audit: type=1400 audit(2000000010.660:6112): avc: denied { lock } for pid=6709 comm="syz.1.2079" path="socket:[41510]" dev="sockfs" ino=41510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.391053][ T416] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 190.419529][ T61] usb 4-1: device descriptor read/64, error -71 [ 190.529662][ T61] usb usb4-port1: attempt power cycle [ 190.539646][ T416] usb 1-1: Using ep0 maxpacket: 16 [ 190.546085][ T416] usb 1-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 8 [ 190.555837][ T416] usb 1-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1023 [ 190.565983][ T416] usb 1-1: config 1 interface 0 has no altsetting 0 [ 190.574491][ T416] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 190.583595][ T416] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.591622][ T416] usb 1-1: Product: 㐁 [ 190.595802][ T416] usb 1-1: Manufacturer: ﳿ [ 190.600487][ T416] usb 1-1: SerialNumber: 㻼馜整틸☓뽨㼅嬸褮왔Ԡ幸䠖ꆼ⽄꠨띶棦꣺즫諎瓐ꕓ걽匽뭊닜돲ቍ翊ၞ瑆䒟艐缊痛 [ 190.616480][ T6708] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 190.623777][ T6708] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 190.879497][ T61] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 190.900500][ T61] usb 4-1: device descriptor read/8, error -71 [ 191.030545][ T61] usb 4-1: device descriptor read/8, error -71 [ 191.038178][ T416] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 5 proto 2 vid 0x0525 pid 0xA4A8 [ 191.050808][ T416] usb 1-1: USB disconnect, device number 46 [ 191.058213][ T416] usblp0: removed [ 191.183001][ T36] audit: type=1326 audit(2000000011.550:6113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.1.2085" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc15058e929 code=0x0 [ 191.279493][ T61] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 191.300613][ T61] usb 4-1: device descriptor read/8, error -71 [ 191.430511][ T61] usb 4-1: device descriptor read/8, error -71 [ 191.539561][ T61] usb usb4-port1: unable to enumerate USB device [ 191.799454][ T61] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 191.950965][ T61] usb 1-1: unable to get BOS descriptor or descriptor too short [ 191.959637][ T61] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 191.969785][ T61] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 191.980636][ T61] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 191.989750][ T61] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.997741][ T61] usb 1-1: Product: syz [ 192.001972][ T61] usb 1-1: Manufacturer: syz [ 192.006583][ T61] usb 1-1: SerialNumber: syz [ 192.033221][ T6740] SELinux: failed to load policy [ 192.110390][ T6744] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 192.110802][ T6744] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 192.117421][ T6744] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:296 [ 192.138933][ T36] audit: type=1400 audit(2000000012.500:6114): avc: denied { write } for pid=6746 comm="syz.1.2090" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 192.172502][ T36] audit: type=1400 audit(2000000012.500:6115): avc: denied { open } for pid=6746 comm="syz.1.2090" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 192.197626][ T36] audit: type=1400 audit(2000000012.500:6116): avc: denied { ioctl } for pid=6746 comm="syz.1.2090" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x1500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 192.229346][ T6750] rust_binder: Error while translating object. [ 192.233443][ T36] audit: type=1400 audit(2000000012.550:6117): avc: denied { listen } for pid=6746 comm="syz.1.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 192.240172][ T36] audit: type=1400 audit(2000000012.570:6118): avc: denied { getopt } for pid=6737 comm="syz.0.2087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 192.263134][ T6750] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 192.280374][ T6750] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1042 [ 192.280578][ T61] usb 1-1: 0:2 : does not exist [ 192.311893][ T61] usb 1-1: USB disconnect, device number 47 [ 192.412073][ T6759] cgroup: fork rejected by pids controller in /syz1 [ 192.468251][ T6890] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 192.475038][ T6890] rust_binder: Write failure EFAULT in pid:434 [ 192.762423][ T6897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2100'. [ 192.835699][ T6902] binder: Unknown parameter '0x0000000000000000' [ 192.923085][ T6914] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 192.959433][ T6914] SELinux: failed to load policy [ 193.386434][ T6925] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.386508][ T6925] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.393218][ T6925] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.399877][ T6925] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.409365][ T6925] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.426730][ T6925] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.433617][ T6925] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.440156][ T6928] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.450391][ T6931] rust_binder: Write failure EINVAL in pid:1075 [ 193.456934][ T6928] rust_binder: Write failure EINVAL in pid:1075 [ 193.463643][ T6928] rust_binder: Read failure Err(EAGAIN) in pid:1075 [ 193.490102][ T6935] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 193.545216][ T6940] rust_binder: Write failure EFAULT in pid:1083 [ 193.949335][ T45] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 194.089401][ T45] usb 4-1: device descriptor read/64, error -71 [ 194.110288][ T6968] netlink: 'syz.4.2125': attribute type 12 has an invalid length. [ 194.150722][ T6978] kvm: kvm [6976]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xffffffffffff3826 [ 194.197527][ T36] audit: type=1326 audit(2000000014.560:6119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6983 comm="syz.4.2131" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f93c3b8e929 code=0x0 [ 194.228451][ T6978] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 194.236366][ T6978] rust_binder: Write failure EINVAL in pid:174 [ 194.237219][ T6978] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 194.250612][ T6978] rust_binder: Write failure EINVAL in pid:174 [ 194.349380][ T45] usb 4-1: device descriptor read/64, error -71 [ 194.479332][ T416] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 194.536893][ T7001] overlay: ./file0 is not a directory [ 194.603940][ T45] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 194.643795][ T416] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 194.654978][ T416] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 194.660080][ T36] audit: type=1400 audit(2000000015.030:6120): avc: denied { map } for pid=7012 comm="syz.0.2140" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 194.665875][ T416] usb 2-1: config 0 interface 0 has no altsetting 0 [ 194.695365][ T416] usb 2-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 194.704800][ T416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.714583][ T416] usb 2-1: config 0 descriptor?? [ 194.720370][ T6980] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 194.739289][ T45] usb 4-1: device descriptor read/64, error -71 [ 194.761758][ T7021] loop9: detected capacity change from 0 to 7 [ 194.768222][ T7021] Buffer I/O error on dev loop9, logical block 0, async page read [ 194.776252][ T7021] Buffer I/O error on dev loop9, logical block 0, async page read [ 194.784320][ T7021] loop9: unable to read partition table [ 194.790220][ T7021] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 194.790220][ T7021] ) failed (rc=-5) [ 194.792842][ T1928] Buffer I/O error on dev loop9, logical block 0, async page read [ 194.811460][ T7021] Buffer I/O error on dev loop9, logical block 0, async page read [ 194.819514][ T1928] Buffer I/O error on dev loop9, logical block 0, async page read [ 194.827580][ T1928] Buffer I/O error on dev loop9, logical block 0, async page read [ 194.835582][ T1928] Buffer I/O error on dev loop9, logical block 0, async page read [ 194.843720][ T1928] Buffer I/O error on dev loop9, logical block 0, async page read [ 194.989297][ T45] usb 4-1: device descriptor read/64, error -71 [ 195.099453][ T45] usb usb4-port1: attempt power cycle [ 195.131331][ T416] logitech 0003:046D:C286.0016: unknown main item tag 0x0 [ 195.138567][ T416] logitech 0003:046D:C286.0016: unknown main item tag 0x0 [ 195.145767][ T416] logitech 0003:046D:C286.0016: collection stack underflow [ 195.153058][ T416] logitech 0003:046D:C286.0016: item 0 0 0 12 parsing failed [ 195.160695][ T416] logitech 0003:046D:C286.0016: parse failed [ 195.166733][ T416] logitech 0003:046D:C286.0016: probe with driver logitech failed with error -22 [ 195.333881][ T416] usb 2-1: USB disconnect, device number 27 [ 195.449329][ T45] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 195.470860][ T45] usb 4-1: device descriptor read/8, error -71 [ 195.601584][ T45] usb 4-1: device descriptor read/8, error -71 [ 195.669667][ T7037] overlayfs: overlapping lowerdir path [ 195.782862][ T7042] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:226 [ 195.784474][ T7042] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 195.818819][ T36] audit: type=1400 audit(2000000016.170:6121): avc: denied { create } for pid=7043 comm="syz.0.2151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 195.883365][ T45] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 195.924760][ T7054] binder: Bad value for 'defcontext' [ 195.940360][ T45] usb 4-1: device descriptor read/8, error -71 [ 196.024358][ T929] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 196.032407][ T929] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 196.053126][ T7064] fido_id[7064]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 196.059828][ T7069] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.068172][ T7069] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:474 [ 196.073169][ T45] usb 4-1: device descriptor read/8, error -71 [ 196.114829][ T7075] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.170080][ T7078] 9pnet_fd: Insufficient options for proto=fd [ 196.185840][ T7058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.195399][ T7058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.199437][ T45] usb usb4-port1: unable to enumerate USB device [ 196.229215][ T61] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 196.242514][ T7083] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.248212][ T7083] input: syz1 as /devices/virtual/input/input20 [ 196.262023][ T7083] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 196.262058][ T7083] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:485 [ 196.345371][ T7091] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.355862][ T7091] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.364350][ T7091] overlayfs: missing 'lowerdir' [ 196.396239][ T7094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.517005][ T36] audit: type=1400 audit(2000000016.880:6122): avc: denied { create } for pid=7102 comm="syz.1.2170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 196.549192][ T7105] binder: Unknown parameter '' [ 196.741559][ T7111] rust_binder: Error in use_page_slow: ESRCH [ 196.741582][ T7111] rust_binder: use_range failure ESRCH [ 196.747620][ T7111] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 196.753320][ T7111] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 196.761388][ T7111] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1061 [ 196.775534][ T7111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.794132][ T7111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.088896][ T7114] /dev/rnullb0: Can't open blockdev [ 197.095035][ T7115] SELinux: Context system_u:object_r:iptables_unit_file_t:s0 is not valid (left unmapped). [ 197.105614][ T36] audit: type=1400 audit(2000000017.470:6123): avc: denied { relabelto } for pid=7113 comm="syz.0.2174" name="cgroup" dev="tmpfs" ino=437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:iptables_unit_file_t:s0" [ 197.133574][ T416] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 197.135558][ T36] audit: type=1400 audit(2000000017.470:6124): avc: denied { associate } for pid=7113 comm="syz.0.2174" name="cgroup" dev="tmpfs" ino=437 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:iptables_unit_file_t:s0" [ 197.169528][ T36] audit: type=1400 audit(2000000017.480:6125): avc: denied { unlink } for pid=6284 comm="syz-executor" name="cgroup" dev="tmpfs" ino=437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:iptables_unit_file_t:s0" [ 197.197156][ T36] audit: type=1400 audit(2000000017.520:6126): avc: denied { create } for pid=7118 comm="syz.0.2175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 197.217035][ T36] audit: type=1400 audit(2000000017.520:6127): avc: denied { sys_admin } for pid=7118 comm="syz.0.2175" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 197.278261][ T7127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 197.320400][ T416] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.337079][ T416] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.346835][ T416] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 197.355968][ T416] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 197.364017][ T416] usb 4-1: SerialNumber: syz [ 197.446362][ T7138] rust_binder: Write failure EFAULT in pid:519 [ 197.571491][ T416] usb 4-1: 0:2 : does not exist [ 197.585049][ T416] usb 4-1: USB disconnect, device number 76 [ 197.595086][ T1928] udevd[1928]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 198.135284][ T7151] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 198.138993][ T36] audit: type=1400 audit(2000000018.506:6128): avc: denied { create } for pid=7150 comm="syz.0.2186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 198.223073][ T7156] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.319076][ T326] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 198.331758][ T36] audit: type=1326 audit(2000000018.706:6129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7162 comm="syz.4.2191" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93c3b8e929 code=0x0 [ 198.499079][ T326] usb 4-1: Using ep0 maxpacket: 16 [ 198.505382][ T326] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 198.513637][ T326] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.523769][ T326] usb 4-1: config 0 has no interface number 0 [ 198.531453][ T326] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 198.540572][ T326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.548598][ T326] usb 4-1: Product: syz [ 198.552796][ T326] usb 4-1: Manufacturer: syz [ 198.557409][ T326] usb 4-1: SerialNumber: syz [ 198.563442][ T326] usb 4-1: config 0 descriptor?? [ 198.739074][ T416] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 198.770983][ T326] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 198.777463][ T326] usb 4-1: No valid video chain found. [ 198.783843][ T326] usb 4-1: USB disconnect, device number 77 [ 198.889098][ T416] usb 1-1: Using ep0 maxpacket: 32 [ 198.895553][ T416] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.906539][ T416] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.916354][ T416] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 198.925429][ T416] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.934111][ T416] usb 1-1: config 0 descriptor?? [ 198.940440][ T416] hub 1-1:0.0: USB hub found [ 199.140138][ T416] hub 1-1:0.0: 1 port detected [ 199.223994][ T7189] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 199.231481][ T7189] rust_binder: Write failure EINVAL in pid:531 [ 199.381629][ T7218] overlayfs: missing 'workdir' [ 199.549493][ T7229] rust_binder: Error while translating object. [ 199.549528][ T7229] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 199.555720][ T7229] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:552 [ 199.616429][ T7230] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1084 [ 199.749457][ T416] hub 1-1:0.0: activate --> -90 [ 199.909008][ T326] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 200.059159][ T326] usb 2-1: Using ep0 maxpacket: 16 [ 200.065658][ T326] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 200.073908][ T326] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.084042][ T326] usb 2-1: config 0 has no interface number 0 [ 200.092823][ T326] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 200.101991][ T326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.110038][ T326] usb 2-1: Product: syz [ 200.114235][ T326] usb 2-1: Manufacturer: syz [ 200.118841][ T326] usb 2-1: SerialNumber: syz [ 200.124249][ T326] usb 2-1: config 0 descriptor?? [ 200.158259][ T929] usb 1-1: USB disconnect, device number 49 [ 200.331300][ T326] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 200.337734][ T326] usb 2-1: No valid video chain found. [ 200.344200][ T326] usb 2-1: USB disconnect, device number 28 [ 200.478998][ T416] usb 1-1-port1: config error [ 200.608956][ T45] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 200.758941][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 200.765238][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.778529][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.787782][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.797166][ T45] usb 4-1: Product: syz [ 200.801485][ T45] usb 4-1: Manufacturer: syz [ 200.806196][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 200.806217][ T36] audit: type=1400 audit(2000000021.176:6137): avc: denied { create } for pid=7245 comm="syz.0.2218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 200.833071][ T45] usb 4-1: SerialNumber: syz [ 200.842649][ T45] cdc_ncm 4-1:1.0: skipping garbage [ 200.848034][ T45] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 200.857547][ T45] cdc_ncm 4-1:1.0: bind() failure [ 200.980548][ T7257] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 200.998112][ T7257] rust_binder: Write failure EINVAL in pid:290 [ 201.000848][ T7257] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 201.014613][ T7257] rust_binder: Write failure EINVAL in pid:290 [ 201.035204][ T7260] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:293 [ 201.041555][ T7260] rust_binder: Read failure Err(EFAULT) in pid:293 [ 201.052123][ T45] usb 4-1: USB disconnect, device number 78 [ 201.358982][ T9] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 201.509698][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 201.518389][ T9] usb 2-1: config 1 interface 0 altsetting 171 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 201.529373][ T9] usb 2-1: config 1 interface 0 altsetting 171 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.542376][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 201.550569][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 201.559649][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.567823][ T9] usb 2-1: Product: 콐桛춣뤹鶐ەꄆऒƸ윜㒷⟑Ⴟ뢽魓⢢稴듔츈靽ꩉ蘁䕶ꣅ嚮甀謆玔橁挓풺뾥办鵈㵃哠։퀚츻ࡂ징㕗㱷৳槥⎯浌揘쿚謼❱૛﯉䶘溞㞯⬞ᢤ脆椖絇ᨰ뤙筑걾冈흄폝뙙뜣卸㉛ꗮⱇꍴ蹓刊瀈鴯牂鼒稲ꔐ蘦㞄ᇼ헯뾻ⴧ띗♯ࡈ볅鈈㬚ꐪΜ헔됁䝗鎨䑦唉ឨ绔캹g㋜줞贷 [ 201.602698][ T9] usb 2-1: Manufacturer: ࠌ [ 201.607341][ T9] usb 2-1: SerialNumber: syz [ 201.616556][ T7262] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 201.834228][ T9] usb 2-1: USB disconnect, device number 29 [ 202.142076][ T7280] fuseblk: Bad value for 'user_id' [ 202.147339][ T7280] fuseblk: Bad value for 'user_id' [ 202.258857][ T45] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 202.418829][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 202.429771][ T45] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 202.438007][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.468818][ T45] usb 1-1: config 0 has no interface number 0 [ 202.476475][ T45] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 202.485628][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.515011][ T45] usb 1-1: Product: syz [ 202.519282][ T45] usb 1-1: Manufacturer: syz [ 202.523897][ T45] usb 1-1: SerialNumber: syz [ 202.531455][ T45] usb 1-1: config 0 descriptor?? [ 202.557248][ T7293] binder: Unknown parameter 'stats' [ 202.578167][ T7295] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2234'. [ 202.664412][ T7291] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 202.738578][ T45] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 202.753321][ T45] usb 1-1: No valid video chain found. [ 202.761087][ T45] usb 1-1: USB disconnect, device number 50 [ 203.238656][ T7299] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:569 [ 203.238698][ T7299] rust_binder: Read failure Err(EFAULT) in pid:569 [ 203.263506][ T7302] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.273346][ T7302] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.281085][ T7302] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.287765][ T7302] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.294922][ T7302] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.301670][ T7302] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.308347][ T7302] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.315354][ T7302] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.322183][ T7302] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.322285][ T7305] binder: Unknown parameter '7أ0(&]nj-s^5 Z' [ 203.328707][ T7302] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.342736][ T7302] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.349379][ T7302] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.357022][ T7302] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.363889][ T7302] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.370922][ T7302] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.395766][ T36] audit: type=1400 audit(2000000023.766:6138): avc: denied { setattr } for pid=7307 comm="syz.0.2239" name="TIPC" dev="sockfs" ino=43985 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 203.493257][ T7322] binder: Binderfs stats mode cannot be changed during a remount [ 203.808808][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 203.870308][ T7346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2251'. [ 203.895406][ T36] audit: type=1326 audit(2000000024.266:6139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7347 comm="syz.3.2252" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e8eb8e929 code=0x0 [ 203.938758][ T9] usb 2-1: device descriptor read/64, error -71 [ 203.996213][ T7349] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 204.101145][ T7358] rust_binder: Error while translating object. [ 204.109301][ T7358] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 204.115523][ T7358] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:321 [ 204.178789][ T9] usb 2-1: device descriptor read/64, error -71 [ 204.429012][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 204.558725][ T416] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 204.566411][ T9] usb 2-1: device descriptor read/64, error -71 [ 204.719810][ T416] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.730869][ T416] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.741044][ T416] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 204.754693][ T416] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 204.763979][ T416] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.772603][ T416] usb 1-1: config 0 descriptor?? [ 204.818723][ T9] usb 2-1: device descriptor read/64, error -71 [ 204.879003][ T7382] input: syz1 as /devices/virtual/input/input22 [ 204.928936][ T9] usb usb2-port1: attempt power cycle [ 205.180950][ T7380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.189645][ T7380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.249805][ T7394] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 205.268681][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 205.299728][ T9] usb 2-1: device descriptor read/8, error -71 [ 205.359970][ T36] audit: type=1326 audit(2000000025.736:6140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7379 comm="syz.0.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788a38e929 code=0x7fc00000 [ 205.386022][ T7401] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.386585][ T7401] rust_binder: Write failure EINVAL in pid:1137 [ 205.429378][ T7406] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.430070][ T9] usb 2-1: device descriptor read/8, error -71 [ 205.688664][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 205.709644][ T9] usb 2-1: device descriptor read/8, error -71 [ 205.839740][ T9] usb 2-1: device descriptor read/8, error -71 [ 205.948734][ T9] usb usb2-port1: unable to enumerate USB device [ 206.118504][ T7417] netlink: 'syz.3.2273': attribute type 1 has an invalid length. [ 206.175129][ T7428] binder: Bad value for 'max' [ 206.213087][ T36] audit: type=1400 audit(2000000026.586:6141): avc: denied { lock } for pid=7433 comm="syz.3.2278" path="/dev/binderfs/binder1" dev="binder" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 206.237252][ T36] audit: type=1326 audit(2000000026.596:6142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7433 comm="syz.3.2278" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e8eb8e929 code=0x0 [ 206.294515][ T7441] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 206.295214][ T7441] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 206.296407][ T36] audit: type=1400 audit(2000000026.666:6143): avc: denied { append } for pid=7440 comm="syz.3.2281" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 206.302137][ T7441] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 206.336279][ T7441] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1148 [ 206.535619][ T7471] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 206.535670][ T7471] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:586 [ 206.563850][ T7475] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 206.675980][ T36] audit: type=1400 audit(2000000027.046:6144): avc: denied { remount } for pid=7481 comm="syz.4.2294" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 206.709621][ T7484] rust_binder: Write failure EINVAL in pid:592 [ 206.872452][ T7488] kvm: pic: non byte read [ 206.883335][ T7488] kvm: pic: non byte read [ 206.887927][ T7488] kvm: pic: non byte read [ 206.893027][ T7488] kvm: pic: non byte read [ 206.897775][ T7488] kvm: pic: non byte read [ 206.902440][ T7488] kvm: pic: non byte read [ 206.907016][ T7488] kvm: pic: non byte read [ 206.911851][ T7488] kvm: pic: non byte read [ 206.916611][ T7488] kvm: pic: non byte read [ 207.333891][ T36] audit: type=1326 audit(2000000027.706:6145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7379 comm="syz.0.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f788a32ab19 code=0x7fc00000 [ 207.367408][ T416] usbhid 1-1:0.0: can't add hid device: -71 [ 207.379461][ T36] audit: type=1326 audit(2000000027.756:6146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7502 comm="syz.0.2302" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f788a38e929 code=0x0 [ 207.402435][ T416] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 207.411793][ T416] usb 1-1: USB disconnect, device number 51 [ 207.417248][ T7507] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 207.420699][ T7507] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 207.574346][ T7525] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 207.609003][ T7522] cgroup: Unknown subsys name 'measure' [ 207.616335][ T36] audit: type=1400 audit(2000000283.981:6147): avc: denied { map } for pid=7521 comm="syz.3.2309" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 207.663522][ T7533] binder: Binderfs stats mode cannot be changed during a remount [ 207.696753][ T7535] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 207.696792][ T7535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:604 [ 207.767110][ T36] audit: type=1326 audit(2000000284.131:6148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7539 comm="syz.1.2314" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc15058e929 code=0x0 [ 207.974418][ T7543] tipc: MTU too low for tipc bearer [ 208.468444][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 208.618537][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 208.625913][ T9] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 208.626850][ T7565] SELinux: policydb magic number 0x3 does not match expected magic number 0xf97cff8c [ 208.634569][ T9] usb 1-1: config 0 has no interface number 0 [ 208.643929][ T7565] SELinux: failed to load policy [ 208.650568][ T9] usb 1-1: config 0 interface 184 has no altsetting 0 [ 208.664194][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 208.673800][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.682381][ T9] usb 1-1: Product: syz [ 208.686794][ T9] usb 1-1: Manufacturer: syz [ 208.691900][ T9] usb 1-1: SerialNumber: syz [ 208.697651][ T9] usb 1-1: config 0 descriptor?? [ 208.705519][ T9] smsc75xx v1.0.0 [ 208.714255][ T7571] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:620 [ 208.757423][ T7577] binder: Bad value for 'max' [ 209.306145][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 209.317049][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 209.388362][ T416] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 209.528534][ T416] usb 4-1: device descriptor read/64, error -71 [ 209.566638][ T36] audit: type=1400 audit(2000000285.931:6149): avc: denied { write } for pid=45 comm="kworker/1:1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=47516 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 209.778300][ T416] usb 4-1: device descriptor read/64, error -71 [ 210.018249][ T416] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 210.148238][ T416] usb 4-1: device descriptor read/64, error -71 [ 210.167691][ T7600] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 210.243989][ T36] audit: type=1400 audit(2000000286.611:6150): avc: denied { append } for pid=7601 comm="syz.4.2337" name="usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 210.388204][ T416] usb 4-1: device descriptor read/64, error -71 [ 210.498365][ T416] usb usb4-port1: attempt power cycle [ 210.646583][ T7615] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2342'. [ 210.729151][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71 [ 210.740187][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71 [ 210.750043][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 210.759655][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 210.769188][ T9] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 210.779581][ T9] usb 1-1: USB disconnect, device number 52 [ 210.838190][ T416] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 210.859362][ T416] usb 4-1: device descriptor read/8, error -71 [ 210.989160][ T416] usb 4-1: device descriptor read/8, error -71 [ 211.228139][ T416] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 211.249183][ T416] usb 4-1: device descriptor read/8, error -71 [ 211.379145][ T416] usb 4-1: device descriptor read/8, error -71 [ 211.488194][ T416] usb usb4-port1: unable to enumerate USB device [ 211.533140][ T7640] hub 5-0:1.0: USB hub found [ 211.537904][ T7640] hub 5-0:1.0: 1 port detected [ 211.544047][ T7640] rust_binder: Write failure EINVAL in pid:663 [ 211.858067][ T416] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 212.018099][ T416] usb 2-1: Using ep0 maxpacket: 16 [ 212.024394][ T416] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.040811][ T416] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.055443][ T7648] binder: Unknown parameter 'permit_directio' [ 212.058088][ T416] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 212.070679][ T416] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.084088][ T416] usb 2-1: Product: syz [ 212.088549][ T416] usb 2-1: Manufacturer: syz [ 212.093345][ T416] usb 2-1: SerialNumber: syz [ 212.191521][ T7655] 9pnet_fd: Insufficient options for proto=fd [ 212.214330][ T7658] rust_binder: Error in use_page_slow: ESRCH [ 212.214354][ T7658] rust_binder: use_range failure ESRCH [ 212.220454][ T7658] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 212.225945][ T7658] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 212.233922][ T7658] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1230 [ 212.243454][ T7659] rust_binder: Error in use_page_slow: ESRCH [ 212.252677][ T7659] rust_binder: use_range failure ESRCH [ 212.258971][ T7659] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 212.264688][ T7659] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 212.272404][ T7659] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1230 [ 212.447962][ T326] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 212.581913][ T416] usb 2-1: skipping empty audio interface (v1) [ 212.592616][ T416] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 212.602601][ T416] usb 2-1: USB disconnect, device number 34 [ 212.602792][ T1928] udevd[1928]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 213.333598][ T7689] tipc: Trying to set illegal importance in message [ 213.479929][ T326] usb 1-1: Using ep0 maxpacket: 16 [ 213.488238][ T326] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.499301][ T326] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.509138][ T326] usb 1-1: config 0 interface 0 has no altsetting 0 [ 213.515776][ T326] usb 1-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 213.524923][ T326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.533809][ T326] usb 1-1: config 0 descriptor?? [ 213.549474][ T9] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65380 sclass=netlink_audit_socket pid=9 comm=kworker/0:0 [ 213.562617][ T9] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=104 sclass=netlink_audit_socket pid=9 comm=kworker/0:0 [ 213.727812][ T61] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 213.877790][ T61] usb 4-1: Using ep0 maxpacket: 16 [ 213.884171][ T61] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 213.894065][ T61] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 213.903940][ T61] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 213.916960][ T61] usb 4-1: config 1 interface 0 has no altsetting 0 [ 213.925256][ T61] usb 4-1: New USB device found, idVendor=0525, idProduct=d5a8, bcdDevice= 0.00 [ 213.934373][ T61] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.942459][ T61] usb 4-1: Product: syz [ 213.946295][ T326] chicony 0003:04F2:0418.0018: item fetching failed at offset 0/4 [ 213.946643][ T61] usb 4-1: Manufacturer: syz [ 213.955528][ T326] chicony 0003:04F2:0418.0018: Chicony hid parse failed: -22 [ 213.959123][ T61] usb 4-1: SerialNumber: syz [ 213.967006][ T326] chicony 0003:04F2:0418.0018: probe with driver chicony failed with error -22 [ 214.148030][ T9] usb 1-1: USB disconnect, device number 53 [ 214.148797][ T7708] rust_kernel: panicked at rust/kernel/sync/poll.rs:54:18: [ 214.148797][ T7708] null pointer dereference occurred [ 214.166299][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 214.166327][ T36] audit: type=1400 audit(2000000290.531:6153): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 214.167675][ T7708] ------------[ cut here ]------------ [ 214.172378][ T36] audit: type=1400 audit(2000000290.531:6154): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.194320][ T7708] kernel BUG at rust/helpers/bug.c:7! [ 214.199800][ T36] audit: type=1400 audit(2000000290.531:6155): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.199843][ T36] audit: type=1400 audit(2000000290.531:6156): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.199874][ T36] audit: type=1400 audit(2000000290.531:6157): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 214.199903][ T36] audit: type=1400 audit(2000000290.531:6158): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 214.199930][ T36] audit: type=1400 audit(2000000290.531:6159): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 214.201793][ T7709] bridge0: port 3(veth0_to_bridge) entered blocking state [ 214.222677][ T61] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 83 if 0 alt 255 proto 1 vid 0x0525 pid 0xD5A8 [ 214.227923][ T7709] bridge0: port 3(veth0_to_bridge) entered disabled state [ 214.253123][ T7708] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 214.269749][ T7709] veth0_to_bridge: entered allmulticast mode [ 214.289376][ T7708] CPU: 0 UID: 0 PID: 7708 Comm: syz.1.2375 Not tainted 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad [ 214.289412][ T7708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 214.289428][ T7708] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 214.289463][ T7708] Code: 8e e1 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 f1 1c 19 14 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 bb d8 50 98 90 90 90 90 90 90 90 90 90 [ 214.313605][ T7709] veth0_to_bridge: entered promiscuous mode [ 214.335106][ T7708] RSP: 0018:ffffc90005bb71b0 EFLAGS: 00010246 [ 214.335142][ T7708] RAX: 000000000000005a RBX: 1ffff92000b76e38 RCX: 5a8e675e0a520c00 [ 214.335163][ T7708] RDX: ffffc900127e0000 RSI: 000000000001238c RDI: 000000000001238d [ 214.335183][ T7708] RBP: ffffc90005bb71b0 R08: ffffc90005bb6ea7 R09: 1ffff92000b76dd4 [ 214.335205][ T7708] R10: dffffc0000000000 R11: fffff52000b76dd5 R12: 0000000000000000 [ 214.343206][ T7709] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.353264][ T7708] R13: dffffc0000000000 R14: ffffc90005bb71e0 R15: ffffc90005bb7210 [ 214.353291][ T7708] FS: 00007fc15137c6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 214.353317][ T7708] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 214.353340][ T7708] CR2: 00007fc15135bd58 CR3: 000000013ebec000 CR4: 00000000003526b0 [ 214.361213][ T7709] bridge0: port 3(veth0_to_bridge) entered blocking state [ 214.367387][ T7708] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 214.367410][ T7708] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 214.367429][ T7708] Call Trace: [ 214.373469][ T7709] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 214.386855][ T7708] [ 214.386871][ T7708] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 214.410240][ T7711] rust_binder: Error while translating object. [ 214.421840][ T7708] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 214.421889][ T7708] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 214.428047][ T7711] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 214.433887][ T7708] ? p9pdu_vwritef+0x2720/0x2720 [ 214.442608][ T7711] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:678 [ 214.449934][ T7708] ? radix_tree_node_alloc+0x1af/0x400 [ 214.449981][ T7708] ? _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xa2/0xf0 [ 214.618116][ T7708] ? __asan_memcpy+0x5a/0x80 [ 214.622726][ T7708] _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xec/0xf0 [ 214.630814][ T7708] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0x10/0x10 [ 214.639594][ T7708] ? p9pdu_writef+0xdb/0x130 [ 214.644203][ T7708] ? p9pdu_vwritef+0x2720/0x2720 [ 214.649180][ T7708] _RNvNtCs9jEwPDbx20M_4core9panicking30panic_null_pointer_dereference+0x49/0x4c [ 214.658312][ T7708] _RNvMNtNtCs43vyB533jt3_6kernel4sync4pollNtB2_9PollTable8from_ptr+0x40/0x40 [ 214.667185][ T7708] ? _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xce/0x570 [ 214.675027][ T7708] _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xe2/0x570 [ 214.682690][ T7708] ? p9_client_prepare_req+0x732/0xa10 [ 214.688170][ T7708] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 214.696433][ T7708] ? __kasan_check_write+0x18/0x20 [ 214.701651][ T7708] ? _raw_spin_lock+0x8c/0x120 [ 214.706439][ T7708] ? __cfi__raw_spin_lock+0x10/0x10 [ 214.711658][ T7708] ? __kasan_check_write+0x18/0x20 [ 214.716795][ T7708] ? _raw_spin_lock+0x8c/0x120 [ 214.721579][ T7708] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 214.729838][ T7708] p9_fd_request+0x38d/0x500 [ 214.734439][ T7708] p9_client_rpc+0x2f9/0xb40 [ 214.739043][ T7708] ? bt_sock_poll+0x2e2/0x7b0 [ 214.743748][ T7708] ? p9_fid_create+0x3d0/0x3d0 [ 214.748542][ T7708] ? __cfi_sock_poll+0x10/0x10 [ 214.753322][ T7708] ? p9_conn_create+0x4c9/0x570 [ 214.758187][ T7708] ? p9_fd_create+0x2f3/0x4c0 [ 214.762965][ T7708] p9_client_create+0x96a/0x1190 [ 214.767924][ T7708] ? __cfi_p9_client_create+0x10/0x10 [ 214.773316][ T7708] ? kasan_save_alloc_info+0x40/0x50 [ 214.778612][ T7708] ? __kasan_kmalloc+0x96/0xb0 [ 214.783480][ T7708] ? kstrdup+0x7b/0x140 [ 214.787648][ T7708] ? __kasan_check_write+0x18/0x20 [ 214.792857][ T7708] v9fs_session_init+0x1e1/0x1820 [ 214.797896][ T7708] ? __cfi_v9fs_session_init+0x10/0x10 [ 214.803362][ T7708] ? kasan_save_alloc_info+0x40/0x50 [ 214.808654][ T7708] ? __kasan_kmalloc+0x96/0xb0 [ 214.813432][ T7708] ? v9fs_mount+0xbd/0xa00 [ 214.817861][ T7708] v9fs_mount+0xd7/0xa00 [ 214.822117][ T7708] ? __cfi_v9fs_mount+0x10/0x10 [ 214.826977][ T7708] ? selinux_capable+0x38/0x50 [ 214.831750][ T7708] legacy_get_tree+0x106/0x1b0 [ 214.836530][ T7708] ? __cfi_v9fs_mount+0x10/0x10 [ 214.841393][ T7708] vfs_get_tree+0x9e/0x290 [ 214.845819][ T7708] do_new_mount+0x251/0xb40 [ 214.850330][ T7708] ? security_capable+0xcf/0xf0 [ 214.855187][ T7708] path_mount+0x688/0x1050 [ 214.859610][ T7708] ? putname+0x113/0x150 [ 214.863897][ T7708] __se_sys_mount+0x2bd/0x480 [ 214.868588][ T7708] ? __x64_sys_mount+0xf0/0xf0 [ 214.873366][ T7708] ? __kasan_check_write+0x18/0x20 [ 214.878482][ T7708] ? fpregs_restore_userregs+0x11d/0x260 [ 214.884128][ T7708] __x64_sys_mount+0xc3/0xf0 [ 214.888726][ T7708] x64_sys_call+0x2021/0x2ee0 [ 214.893439][ T7708] do_syscall_64+0x58/0xf0 [ 214.897880][ T7708] ? clear_bhb_loop+0x50/0xa0 [ 214.902572][ T7708] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 214.908469][ T7708] RIP: 0033:0x7fc15058e929 [ 214.912901][ T7708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.932530][ T7708] RSP: 002b:00007fc15137c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 214.940955][ T7708] RAX: ffffffffffffffda RBX: 00007fc1507b5fa0 RCX: 00007fc15058e929 [ 214.948934][ T7708] RDX: 0000200000000080 RSI: 0000200000000300 RDI: 0000000000000000 [ 214.956914][ T7708] RBP: 00007fc150610b39 R08: 0000200000000440 R09: 0000000000000000 [ 214.964887][ T7708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.972861][ T7708] R13: 0000000000000000 R14: 00007fc1507b5fa0 R15: 00007ffe130555a8 [ 214.980836][ T7708] [ 214.983858][ T7708] Modules linked in: [ 214.988282][ T7708] ---[ end trace 0000000000000000 ]--- [ 214.996103][ T7708] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 214.996953][ T61] usb 4-1: USB disconnect, device number 83 [ 215.004308][ T7708] Code: 8e e1 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 f1 1c 19 14 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 bb d8 50 98 90 90 90 90 90 90 90 90 90 [ 215.011065][ T61] usblp0: removed [ 215.029931][ T7708] RSP: 0018:ffffc90005bb71b0 EFLAGS: 00010246 [ 215.038497][ T7708] RAX: 000000000000005a RBX: 1ffff92000b76e38 RCX: 5a8e675e0a520c00 [ 215.046583][ T7708] RDX: ffffc900127e0000 RSI: 000000000001238c RDI: 000000000001238d [ 215.054669][ T7708] RBP: ffffc90005bb71b0 R08: ffffc90005bb6ea7 R09: 1ffff92000b76dd4 [ 215.062768][ T7708] R10: dffffc0000000000 R11: fffff52000b76dd5 R12: 0000000000000000 [ 215.070838][ T7708] R13: dffffc0000000000 R14: ffffc90005bb71e0 R15: ffffc90005bb7210 [ 215.078930][ T7708] FS: 00007fc15137c6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 215.088119][ T7708] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 215.094760][ T7708] CR2: 00007fc15135bd58 CR3: 000000013ebec000 CR4: 00000000003526b0 [ 215.102872][ T7708] Kernel panic - not syncing: Fatal exception [ 215.109271][ T7708] Kernel Offset: disabled [ 215.113598][ T7708] Rebooting in 86400 seconds..