last executing test programs: 12m44.063799889s ago: executing program 32 (id=725): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) keyctl$chown(0x4, r0, 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, 0x0) 10m29.124988929s ago: executing program 2 (id=2803): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_usb_connect$cdc_ecm(0x0, 0x79, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010002020000102505a1a440f1ffff00010902670001010000000904000012020600000b2406000002f332ac000005240000000d240f010000000087000600001524120600a317a88b045e4f01a607c0ffcb7e392a072414000001000324"], 0x0) r1 = inotify_init1(0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',bfdno=', @ANYRESHEX=r4, @ANYBLOB=',dfltgid=', @ANYRESHEX=r6, @ANYBLOB=',k']) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x60004ce) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0xfffd, 0x80000001, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0x0, 0x8a7c, @private0}}}, 0x108) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='!(+.\x00') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x85b83000) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000140)={0x3, 0x70ac7b1e, 0x3, 0x320, 0x16}) 10m28.60182523s ago: executing program 2 (id=2813): mount(&(0x7f0000000000)=@md0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='mqueue\x00', 0x2000, 0x0) (async, rerun: 64) r0 = socket$key(0xf, 0x3, 0x2) (async, rerun: 64) epoll_create1(0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0xc46, 0x4) (async, rerun: 64) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') (rerun: 64) read$eventfd(r2, &(0x7f0000000080), 0x8) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffea2}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) (async) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fadvise64(r3, 0x1, 0xb36, 0x3) (async, rerun: 32) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/42) (async, rerun: 32) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000180)={0x2020}, 0x2020) (async) gettid() 10m28.456070155s ago: executing program 2 (id=2819): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000280)={0x0, 0x0, "5a77bd318786ae8dd3000000000000fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000740)) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x2, 0x7, 0xae}) lseek(r2, 0xfffffffffffffffe, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10m28.417691619s ago: executing program 2 (id=2822): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x2, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r4, &(0x7f0000000280)='./file0\x00', 0x200) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}]}]}, 0x74}}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000003740), 0x8000, 0x0) vmsplice(r5, &(0x7f0000003900)=[{&(0x7f0000003780)="51918a16ee", 0x5}], 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8c80, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x20) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/cpu_byteorder', 0x200a00, 0x129) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r7, 0x4004e502, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000040)=0xb959) 10m28.356411435s ago: executing program 2 (id=2825): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000200)={0x2, 0x0, 0x0, 0xb7d375beb1f4ba0d}) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000200)={0x2, 0x0, 0x0, 0xb7d375beb1f4ba0d}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x8001) fremovexattr(r2, &(0x7f0000000000)=@random={'security.', '\x00'}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000380)={{0x2, 0x4e23, @remote}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, 0x6, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 'veth0_to_bridge\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) ioctl$BLKRRPART(r0, 0x125f, 0x0) 10m28.296525951s ago: executing program 2 (id=2827): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x1381, 0x20000001}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r2, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x1fd}) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000340)={{0x2, 0x4e22, @local}, {0x6, @remote}, 0x8, {0x2, 0x4e20, @local}, 'pimreg0\x00'}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f00000004c0)=[@request_death], 0x0, 0x0, 0x0}) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000180)={'nat\x00', 0x0, 0x0, 0x0, [0x6, 0x5, 0x6, 0x8000000000000000, 0x4, 0xf61]}, &(0x7f0000000300)=0x7a) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r5, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f00000002c0)={{r0}, {@void, @actul_num={@val=0x2b, 0x6, 0x70}}}) 10m12.527677154s ago: executing program 33 (id=2827): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x1381, 0x20000001}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r2, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x1fd}) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000340)={{0x2, 0x4e22, @local}, {0x6, @remote}, 0x8, {0x2, 0x4e20, @local}, 'pimreg0\x00'}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f00000004c0)=[@request_death], 0x0, 0x0, 0x0}) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000180)={'nat\x00', 0x0, 0x0, 0x0, [0x6, 0x5, 0x6, 0x8000000000000000, 0x4, 0xf61]}, &(0x7f0000000300)=0x7a) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r5, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f00000002c0)={{r0}, {@void, @actul_num={@val=0x2b, 0x6, 0x70}}}) 5m57.816778299s ago: executing program 4 (id=5307): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom1\x00', 0x801, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002a2b8d240bb2170200b87010203010902240001a00800040904c81e010103f70909050803ff030406090221072501"], 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r2}) sendmsg$inet6(r1, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b0050000000000002900000036"], 0x5b0}, 0x20008001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000001800010002000000000000000a00000000000001016200000c0014"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m56.533583085s ago: executing program 4 (id=5316): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b0050000000000002900000036"], 0x5b0}, 0x20008001) r2 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r2, &(0x7f0000000200)=[{&(0x7f0000000340)=""/184, 0xb8}], 0x1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000281000/0x3000)=nil, 0x3000}}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m56.37448772s ago: executing program 4 (id=5317): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000001c0)=[@request_death={0x400c630e, 0x1}, @enter_looper], 0x50, 0x0, &(0x7f0000000200)="285c66b51cc765d56264027b52bae26e57bdfaf019655afadb6a0da13acaf0b8aa19cb52d3c8ae04596da15ba9fab7f4e7e86736582dcd9425c9ba95f54ac71210eb0051399d30d109a8803bb0f66d0c"}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 5m56.233045884s ago: executing program 4 (id=5318): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000280)=0x80000007, 0x5a) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x4}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', 0x0}) sendto$packet(r2, &(0x7f00000005c0)="46b83076ca", 0x5, 0x0, &(0x7f0000000200)={0x11, 0x8100, r3, 0x1, 0xe0}, 0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r5) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000f80)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r4, 0x1) recvfrom(r4, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x4e21, @remote}}}, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0) mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='pstore\x00', 0x1800000, &(0x7f0000000200)='--^}*&+++,@\x00') sendfile(r0, r0, 0x0, 0x7ffff000) 5m55.346167442s ago: executing program 4 (id=5326): r0 = socket(0x10, 0x803, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x48b}, {{0x0, 0x0, 0x0}, 0xb22d}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000035c0)=""/4108, 0x1002}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000cc0)=""/240, 0xe7}, {&(0x7f00000034c0)=""/197, 0xc5}, {&(0x7f0000000080)=""/223, 0xdf}, {&(0x7f0000000180)=""/134, 0x86}, {&(0x7f0000000380)=""/155, 0x9b}, {&(0x7f0000000c00)=""/185, 0xb9}, {&(0x7f0000000b80)=""/120, 0x78}], 0x9}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x80000000}, {{0x0, 0xfffffffffffffe8e, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xfff}, {{0x0, 0x0, 0x0}, 0xc}], 0x7, 0x2100, 0x0) 5m55.170554499s ago: executing program 4 (id=5328): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'xfrm0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x0, 0x0, 0x2}, 0xc) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000800000, 0xfffffffffffffffc}, {0x0, 0xa00, 0x4, 0x800000000000002}, 0x0, 0x0, 0x1, 0x1, 0x2, 0x2}}, 0xb8}}, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext']) 5m55.117090565s ago: executing program 34 (id=5328): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'xfrm0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x0, 0x0, 0x2}, 0xc) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000800000, 0xfffffffffffffffc}, {0x0, 0xa00, 0x4, 0x800000000000002}, 0x0, 0x0, 0x1, 0x1, 0x2, 0x2}}, 0xb8}}, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext']) 4m46.691564845s ago: executing program 0 (id=6223): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') getdents64(r0, &(0x7f0000001fc0)=""/4079, 0xfef) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r1, 0x0, 0x3, 0x0, &(0x7f0000000000)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) r2 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x40084504, 0x0) (async) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) (async, rerun: 32) r3 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 32) pwritev2(r3, 0x0, 0x0, 0xfffffffb, 0x3, 0x4) syz_clone(0x0, &(0x7f0000000000)="789e912703cfaf90e9757b11c793c7f2fc61f4f041d8db1807666d0c14cac703be11dc13581fb53eb7572935e7fa7bf5b2d849fa9c2ae7476163418dd6d82ef024dc82fe6ccf897edec4445c57585e0721abd5e2c6e9c63f765d6093cabc5d134329721bbfa0317ed75c45170ec84297b3a80a696d57c3b398050d16f8ed4a2da03e5bd46ccaa8e1dde1df48f40c6c74f39bc3f7cab9737534bf6216fbba6542a8af9e673ff2ae7f065ee84e223b55bd30025cc4f8ba7b55542bd270bde28b8b8ad92d5a670b3fcbbf23c02c8747b2f128cf60371060dac5342d2e0cd4af29", 0xdf, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="49e5d8daa111a00fd052d89d41f4938374dd586fa19334ada163a59943660703055f3b00a971eb89c9262ac8c9162c29bad20aca7771e138a0ceb35db184ac2fa733bfc46b04d7b0") 4m46.605110154s ago: executing program 0 (id=6225): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5, 0x0, 0x4056, {0x0, 0x2710}, {}, {}, 0x2, @can={{}, 0x0, 0x1, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x8040) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 4m46.604027914s ago: executing program 0 (id=6227): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000f1000040"]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580"], 0x5c}}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x0, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x1}) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f0000000000)) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) 4m46.495860075s ago: executing program 0 (id=6228): prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="2800ff071e00210000000000000000000a00000005000000000000000a00e1ff76a9e20000000000"], 0x28}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) lchown(&(0x7f0000000100)='./file0/../file0/../file0\x00', r3, r4) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x2010004, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='.\x00') sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000480)={'ip_vti0\x00', 0x0, 0x1, 0x80, 0x101, 0x7fe35584, {{0x8, 0x4, 0x0, 0x1d, 0x20, 0x66, 0x0, 0xc, 0x4, 0x0, @remote, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0xc, 0x15, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0x200}]}]}}}}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000500)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @rand_addr=' \x01\x00', @remote, 0x401, 0xaa, 0xfff8, 0x200, 0x1a6, 0x4000028, r5}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x1, 0x80000001, 0x8003ff, 0x10004, 0x0, 0x1}}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 4m46.44275679s ago: executing program 0 (id=6229): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}], [], 0x6b}}) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r4, r3, 0x0, 0xffffffff) 4m46.281224016s ago: executing program 0 (id=6230): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x80500, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1d4}, 0x1, 0x0, 0x0, 0x84}, 0x40800) 4m46.280141296s ago: executing program 35 (id=6230): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x80500, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1d4}, 0x1, 0x0, 0x0, 0x84}, 0x40800) 4m35.766071542s ago: executing program 1 (id=6321): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="080088ca0303ff7fc30909000900aaaaaaaaaa33aaaaaaaaaa3488a8170081"], 0x27) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="02030e00d3fc02000000ab5d71b9edd7c9560385dcb188a8", 0xfc9c, 0x2004c8a1, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "25beb819521eb41d", "cae5e9937ba539347092d917d39ed975", "98999999", "50f641306280c4e9"}, 0x28) r4 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x7, 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="2be34ab5630ebe6854e392e1430bcf72646d612015706964"], 0x18) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) pread64(r5, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) fstat(r7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0xffffffffffffffff, r8, 0x0) 4m35.633258045s ago: executing program 1 (id=6323): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) clock_adjtime(0xffffffd3, &(0x7f0000000300)={0xfffc, 0x6, 0x2, 0x7, 0x7, 0xd, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x33, 0x0, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x94d6, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0xffffffffffff9d06, 0x3, 0x9}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b01090224"], 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r2, &(0x7f0000001300)={0x2020}, 0x2020) syz_usb_control_io(r1, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xa) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xffffffffffffff93, 0x2, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f0000000940)=""/4096, 0x0, 0x1, 0x20003f}, @flat=@weak_binder={0x77622a85, 0x1, 0xfffffffffffffffc}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) 4m32.621015961s ago: executing program 1 (id=6350): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8) (async, rerun: 32) r1 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) (async) r2 = epoll_create1(0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x2}) (async, rerun: 32) fcntl$setlease(r0, 0x400, 0x1) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) setsockopt$inet6_int(r3, 0x29, 0xcb, 0x0, 0x0) (async) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x40000000, &(0x7f0000000080)) fcntl$getflags(r0, 0x11) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2000000000) rename(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00') (async, rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1802, 0x0) (async, rerun: 32) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x24001804) (async, rerun: 64) r4 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x3}, 0x1c) (async, rerun: 64) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) poll(&(0x7f0000000000)=[{r4, 0x26a0}, {r4, 0x1068}, {r4, 0x20}], 0x3, 0x7) 4m32.566953417s ago: executing program 1 (id=6351): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3ed, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x4010054}, 0x24000048) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r2 = open(&(0x7f00000005c0)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x3, 0x80001, {0x0, 0x180, 0x20fe, 0x0, 0x87, 0xd615, 0x9, 0x9, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) sendfile(r2, r3, &(0x7f00000021c0)=0x2, 0x7f03) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000020c0)='./file1\x00', 0x80001, 0x42) r6 = syz_open_procfs$userns(0x0, &(0x7f0000002140)) mount_setattr(r5, &(0x7f0000002100)='./file1\x00', 0x400, &(0x7f0000002180)={0x8a, 0x80, 0x180000, {r6}}, 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x2020) ioprio_set$uid(0x3, 0x0, 0x4000) r7 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.mem_exclusive\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x41f) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="6d6178303030303030301144172e16176a6f3030303030303030303030312c7374617473"]) pipe2$watch_queue(&(0x7f0000002200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$FS_IOC_ENABLE_VERITY(r8, 0x40806685, &(0x7f0000002340)={0x1, 0x1, 0x1000, 0x29, &(0x7f0000002240)="77b380b209a8fe68b336d41ca3de776821ab0ed94a655e4795e17721c2a3f82af56ac229af3a612100", 0xb9, 0x0, &(0x7f0000002280)="bb27923da9ee86b3c9dd962ea7bcef3f511eee365142955f8c28b3a2d4f8f77ce9169a2cd62412abf06cd0d4a2402818a835dae8b66f96b054809fbffc89d0f57ce448fb11c79e0c976ad85a997ed470050cd2098a9fc6c71356768d930b2882fa44e056451cd1505120c1b02e777a8914755202308827e4642dc431bfd69d5e1f662b7b667fdc052963fe5eb4611fb56af99ad58ec8f92af73f9d5a7fa91f9ad7e5604cd482e7a7197873db364498395519812c611f138f86"}) 4m32.488354215s ago: executing program 1 (id=6352): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@rfm={0x25, 0xb, "aa5b09e8e96f1e736b73438b57f6415b"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3, 0x0, 0x0, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@aname={'aname', 0x3d, ':'}}], [], 0x6b}}) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r5 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r5, r4, 0x0, 0xffffffff) 4m32.380688436s ago: executing program 1 (id=6354): r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000010101014ac84ac4da64565c020000070c001980080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a40000005400010000000000000080000700"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x404c031}, 0x404a05c) readv(r3, &(0x7f0000001740)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x48b}, {{0x0, 0x0, 0x0}, 0xb22d}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000035c0)=""/4108, 0x1002}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000cc0)=""/240, 0xe7}, {&(0x7f00000034c0)=""/197, 0xc5}, {&(0x7f0000000080)=""/223, 0xdf}, {&(0x7f0000000180)=""/134, 0x86}, {&(0x7f0000000380)=""/155, 0x9b}, {&(0x7f0000000c00)=""/185, 0xb9}, {&(0x7f0000000b80)=""/120, 0x78}], 0x9}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x80000000}, {{0x0, 0xfffffffffffffe8e, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xfff}, {{0x0, 0x0, 0x0}, 0xc}], 0x7, 0x2100, 0x0) 4m32.346422399s ago: executing program 36 (id=6354): r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000010101014ac84ac4da64565c020000070c001980080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a40000005400010000000000000080000700"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x404c031}, 0x404a05c) readv(r3, &(0x7f0000001740)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x48b}, {{0x0, 0x0, 0x0}, 0xb22d}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000035c0)=""/4108, 0x1002}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000cc0)=""/240, 0xe7}, {&(0x7f00000034c0)=""/197, 0xc5}, {&(0x7f0000000080)=""/223, 0xdf}, {&(0x7f0000000180)=""/134, 0x86}, {&(0x7f0000000380)=""/155, 0x9b}, {&(0x7f0000000c00)=""/185, 0xb9}, {&(0x7f0000000b80)=""/120, 0x78}], 0x9}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x80000000}, {{0x0, 0xfffffffffffffe8e, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xfff}, {{0x0, 0x0, 0x0}, 0xc}], 0x7, 0x2100, 0x0) 2m44.763509108s ago: executing program 7 (id=7426): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x0, 0x8}, {0x2, 0x70000000}]}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) unshare(0x62040200) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x2, 0xe81, 0x40, @dev={0xfe, 0x80, '\x00', 0x2d}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x8, 0x9d, 0x3}}) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@updsa={0x19c, 0x1a, 0xa21, 0x0, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xa0, 0x0, 0x6c}, {@in, 0x0, 0x3c}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x4, 0x6, 0x0, 0x2000000000000, 0x0, 0x7, 0x40}, {0x0, 0x80, 0x3ff}, {0x50000}, 0x0, 0xffffffff, 0x2, 0x1, 0x0, 0x39}, [@policy={0xac, 0x7, {{@in6=@local, @in6=@mcast1, 0x4e20, 0x0, 0x4e22, 0x6, 0xa, 0x0, 0x180, 0x73, r6, r7}, {0x7ff, 0x2, 0x2, 0x7, 0x80, 0x8001, 0x40, 0x688}, {0x7eb, 0x5, 0x6, 0xd86e}, 0x2, 0x8001, 0x1, 0x13170e2d8cead070, 0x1, 0x1}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x10}, 0x810) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x295) lsm_set_self_attr(0x66, &(0x7f0000000440)={0x65, 0x5, 0x49, 0x29, "cfa7ae2db729e73a45d832a1d9adec16d8be08f229c4914a11753336b7d2c6dea27b07e040986dfd5b"}, 0x49, 0x0) syz_open_pts(0xffffffffffffffff, 0x900) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="410000000000000000000100000000000000014100000018001704000000000000005974683a76"], 0x34}}, 0x0) r11 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0xc008ae88, &(0x7f0000000000)={0x3a, 0x0, [{0xc0000101, 0x0, 0x4}]}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000844) close_range(r0, 0xffffffffffffffff, 0x0) 2m44.636044931s ago: executing program 7 (id=7427): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x3, 0x627, 0x1ff, 0x8}, 0x25, [0x7, 0xff, 0x3217, 0x81, 0x96, 0x976c, 0x7, 0xe, 0x5, 0x460, 0x5, 0x9, 0x80000001, 0x9, 0x100, 0x3, 0x80, 0x4a, 0x5, 0x9, 0x8, 0x3, 0x8000, 0x8, 0x8, 0x80000, 0xfa, 0x0, 0x2, 0x6cf, 0x10001, 0x165, 0xff, 0xb, 0x1100000, 0x2, 0x9, 0xd0d, 0x7fff, 0x7, 0x4, 0x7, 0x6, 0x2, 0x401, 0x0, 0x51a, 0x21ea441, 0x80, 0xfffffe01, 0x1, 0xffffffff, 0xd4, 0x6, 0x7, 0x17e77a0f, 0xfffffff9, 0x3, 0x4, 0xc36d, 0x4, 0x2, 0x68, 0x52601ebb], [0x8, 0x400, 0x6, 0xfffffc01, 0x3, 0x3, 0x4, 0x7d, 0x2, 0x4d9, 0x200, 0x10, 0x1, 0x7fff, 0x1a14a3d8, 0x2, 0x6, 0x8, 0xfc13, 0x3, 0x1000, 0x4, 0x2c6, 0xf, 0x2, 0x0, 0x6, 0x5, 0xc77, 0x80000001, 0x0, 0x2, 0x4, 0x1, 0x6, 0x9, 0x9, 0x81, 0x3, 0x800, 0x6, 0x3, 0x4, 0x3, 0x1, 0x9, 0x6, 0x7, 0x9, 0x6, 0x0, 0x8, 0x8, 0xc7f, 0x5, 0x7, 0xa, 0x4, 0x8, 0x36ffdcce, 0xd, 0x5, 0x4, 0xccd], [0x0, 0x9487, 0x3, 0x1, 0x1ff, 0x4fa, 0x4, 0x2, 0x5, 0x7fff, 0x101, 0x411f0cb7, 0x4, 0x3, 0xc, 0x10, 0x8, 0x2, 0x9, 0x6, 0xca7, 0x3, 0x4, 0x7fff, 0x8, 0x6, 0xf82, 0x8, 0x8, 0x1, 0x81, 0x9, 0xcae, 0x9aec, 0x6, 0x400, 0x1, 0x7ff, 0x0, 0x0, 0x9, 0x72, 0x0, 0x0, 0x6, 0x0, 0x9, 0x5, 0x0, 0x7, 0x7, 0xdc, 0x8, 0x10000, 0x5, 0x6e, 0x1, 0x2, 0xc, 0x261, 0x7, 0x3, 0x9, 0xffff0000], [0x833d, 0x7, 0x80000000, 0x2, 0x5, 0xb7, 0x8, 0x4, 0x66fcf751, 0xf, 0x1, 0xb, 0x3ff, 0x1, 0xfffffff8, 0xf, 0x4, 0x9, 0xec8d451, 0x77f0, 0x8, 0x1, 0x3, 0x5, 0x4, 0x7fff, 0x81, 0xd10, 0x9, 0x5, 0x3, 0xd9d, 0x8, 0xc, 0x2, 0x3ff, 0x3, 0x10001, 0x79, 0xe2a, 0x8, 0x4, 0xae, 0x10001, 0x9, 0x9, 0x6, 0x7427, 0x6, 0x661, 0x9, 0x52e3, 0x40, 0x1, 0xf3df, 0x9, 0x2, 0x3658, 0x1, 0x4, 0x9, 0x800, 0x9, 0x7]}, 0x45c) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000008340)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000r_id=\x00'/34, @ANYRESDEC=0x0, @ANYBLOB=',grokp_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x74800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r3, 0x0, 0x0) dup2(r3, r0) fallocate(r0, 0x0, 0x3, 0x7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x400, 0x0) dup(r5) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) clock_settime(0x0, &(0x7f0000000100)={0x0, 0x3938700}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m44.628615931s ago: executing program 7 (id=7428): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00') lseek(r1, 0xfffffffffffffffd, 0x1) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x0, 0x1, 0x9, 0x3}) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r1, 0x4008af75, &(0x7f0000000040)={0x2, 0x7f}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='decodes mem'], 0xc) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x2000) close_range(r0, r0, 0x0) 2m44.587219985s ago: executing program 7 (id=7429): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) (async) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @flat=@weak_binder={0x77622a85, 0x30a}, @flat=@binder={0x73622a85, 0x14, 0x3}}, &(0x7f0000000000)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) 2m44.513049732s ago: executing program 7 (id=7430): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x8fe69000) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="000502000000022284f7a1d0b6f052dd9ce0657b12c5f61856968ab825e76e4ef61d86041097413c5c99f1204800f5a32a4d48f37662f2440dabd8d48f55b233ac21b8f27d8930ff814e1dc1468ba6db4df35bd3abbfad853f47052c9d37889aebf7ec31d5718aef8698fd502849969ef0e69ddb1f0105a60dbc91c800000000000004629958382625af7999a1fb3a0571a0f3c355bec411f7d01fdad72bd19ac42aed745a1dfd901e5ee72028587947819e2aa6d87b071ad0a3ab620a9a0e3d2bc1c977a9208b875dd4c1ec11b4d25c0d8949700f6d321c7fae903b9a568a483f53ff0986413cbf3f0cac0b9da28f"], 0x0}, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x4000000000000002, 0x80, 0xbbc, 0x20000004, 0x1, 0x4234, 0xbe61, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) (async, rerun: 32) ioctl$KVM_RUN(r4, 0xae80, 0x0) (rerun: 32) ioctl$BLKRRPART(r1, 0x125f, 0x0) (async) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000000)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x12b8b000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m44.478528946s ago: executing program 7 (id=7431): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r1 = userfaultfd(0x80001) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$cgroup_pid(r2, &(0x7f0000000240), 0xfdef) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000040d90455a000000000000109022400010000100009040000c40300020009210010000122010009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="2000020d00000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 2m44.43402619s ago: executing program 37 (id=7431): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r1 = userfaultfd(0x80001) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$cgroup_pid(r2, &(0x7f0000000240), 0xfdef) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000040d90455a000000000000109022400010000100009040000c40300020009210010000122010009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="2000020d00000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 2m3.872384476s ago: executing program 9 (id=7928): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x450002, 0x1c0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x30}}}}], 0x20000}}], 0x1, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181201, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xffff) open$dir(&(0x7f0000000000)='./cgroup\x00', 0x2000, 0x80) mmap(&(0x7f00004cd000/0x1000)=nil, 0x1000, 0x558af6cc015a28aa, 0x12, r0, 0x5bc7000) 2m3.793136084s ago: executing program 9 (id=7929): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x8, @mcast2, 0x3}, 0x1c) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x16, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1f}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 2m3.791909694s ago: executing program 9 (id=7930): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xa, 0x0, 0x7fffffff}]}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f00000000c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) open(&(0x7f0000000040)='.\x00', 0x40, 0x9) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r4, 0x25, &(0x7f00000000c0)) r6 = dup2(r2, r1) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000880)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="8fdf2cbd7000030000000b0003000c0001800800030001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) read$FUSE(r0, &(0x7f00000042c0)={0x2020}, 0x2020) 2m3.626759171s ago: executing program 9 (id=7935): prctl$PR_SET_NAME(0xf, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000580)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) sendmmsg$sock(r2, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@timestamping={{0x14, 0x1, 0x41, 0xa42}}], 0x18}}], 0x1, 0x20000844) ioctl$UFFDIO_REGISTER(r1, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f00005ae000/0x4000)=nil, 0x4000}, 0x3, 0x2}) prctl$PR_SET_NAME(0xf, &(0x7f0000000080)='/dev/rnullb0\x00') 2m3.575208066s ago: executing program 9 (id=7937): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCNXCL(r1, 0x540d) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x1}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x70, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x59, 0x1, 0x0, 0x0, @str='/dev/rnlb0\x00\xe1\xb6y\xe7\xa3\xd3o\x8a\x84\xb7@~Z\xb4t\x87\x19\x87\xa6u\x80\xe4\x81\xad\xe7\xb4 \xc9\xcd\xd5o\xb6V\xc3\xebs\x8f\xba\xd5\xc4wm6\xb5\x85\xa2\x89<\fY\xc6K\xef[\xd0\x9a($R[C\x1d\x13/\x93\xea\x9f\xd1\xf8r\xca:\x88\x8d'}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000810}, 0x4000) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYRES32=r3], 0x2c}], 0x1}, 0x51) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="00000a65bbbbbbbbbbbb0aaeffffffff88a83000810000000806"], 0x36) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="200103"], 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0x802, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000500)={0xb, {{0x2, 0x4e23, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f000001e800)={0x5, {{0x2, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x0, @local}}}, 0x108) getsockopt$inet_buf(r7, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) ioctl$sock_bt_hci(r3, 0x800448d5, &(0x7f0000000100)) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8c83, 0x0) ioctl$BLKRRPART(r8, 0x125f, 0x0) 2m2.92104241s ago: executing program 9 (id=7952): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) unshare(0x22020600) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$FICLONE(r0, 0x40049409, r0) write$P9_RLERRORu(r0, &(0x7f0000000140)={0x12, 0x7, 0x2, {{0x5, 'rfdno'}, 0x19}}, 0x12) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001340)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8) pipe2$9p(&(0x7f00000012c0)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f0000001200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@directio}], [{@dont_hash}, {@euid_eq={'euid', 0x3d, r3}}, {@dont_appraise}, {@euid_lt}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r5, &(0x7f0000000200)=""/4087, 0xff7, 0x1) 1m46.768786052s ago: executing program 38 (id=7952): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) unshare(0x22020600) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$FICLONE(r0, 0x40049409, r0) write$P9_RLERRORu(r0, &(0x7f0000000140)={0x12, 0x7, 0x2, {{0x5, 'rfdno'}, 0x19}}, 0x12) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001340)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8) pipe2$9p(&(0x7f00000012c0)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f0000001200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@directio}], [{@dont_hash}, {@euid_eq={'euid', 0x3d, r3}}, {@dont_appraise}, {@euid_lt}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r5, &(0x7f0000000200)=""/4087, 0xff7, 0x1) 7.503468481s ago: executing program 6 (id=8956): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000000)={[0x5c, 0x9, 0x4, 0xffff, 0xfffffffe, 0x3, 0x4, 0x5, 0xfffff6e3, 0x2, 0x1, 0x5, 0x3a5, 0x8, 0x8, 0x8, 0x8, 0x0, 0x5, 0x2, 0xe12, 0x6, 0x5, 0x1ff, 0x0, 0xc5e, 0xfffffff6, 0x8001, 0x8, 0x6, 0xcf, 0x9, 0x4, 0x101, 0x2, 0x0, 0x10001, 0x8, 0xd183, 0x8, 0x9, 0x6, 0xff, 0xf6e, 0x6, 0x84, 0x8, 0x1, 0xc, 0x3, 0x0, 0xee8, 0x5, 0x6, 0x2, 0x400000, 0x1, 0x9, 0x1, 0xffffffb9, 0x7f, 0x1, 0x5, 0x10001, 0xdf6, 0x7, 0x401, 0x2, 0x5, 0x0, 0x3, 0x6, 0x78, 0x7174, 0x9, 0x6, 0x9, 0x1, 0x1, 0x80, 0x7, 0x200, 0x80, 0x5, 0xb14d, 0x9, 0xdb, 0x0, 0x7, 0x2, 0x4, 0x1, 0x5, 0xe, 0x5c09, 0xfffffffe, 0x8, 0x2, 0x10, 0x7, 0xd8aa, 0x5, 0x0, 0xe15, 0x1, 0x8, 0x0, 0x6, 0x5382, 0x8, 0xeca0, 0x9, 0xa, 0x0, 0x948, 0x5, 0x5, 0x0, 0x8, 0x1ff, 0x3, 0x3, 0xfffffffe, 0x21, 0xe38, 0xfffffff8, 0x1, 0x6, 0x40, 0x79, 0x6, 0x8000, 0x2, 0x6, 0x8, 0xd, 0x9, 0x9, 0x2, 0x500, 0xac, 0x8001, 0x30ff, 0x101, 0x3, 0x0, 0xbfa, 0x9, 0xfffffff0, 0x3, 0x1, 0x0, 0x4, 0x7fff, 0x476, 0x0, 0xc, 0x1000, 0xffff52d2, 0x9, 0x5856, 0x1, 0x1, 0x8000, 0x0, 0x4, 0x80, 0x3ff, 0x5, 0x7, 0x7e96, 0xb6, 0x2, 0xe7f, 0x101, 0x1, 0x1ff, 0x4, 0x5a0, 0xa1b6, 0x4, 0x7, 0x9, 0x7, 0x1, 0x0, 0x2, 0x5, 0x6, 0x10001, 0x1fd, 0x5, 0x0, 0x0, 0x2, 0x2, 0x7ff, 0x6f37, 0x1ff, 0x7, 0x4, 0x9, 0x7ff, 0x6, 0xc886, 0x2, 0xd, 0xb3c, 0x4, 0xfffffff9, 0x7, 0x0, 0x0, 0xff, 0x100, 0x2, 0xd2f, 0x7, 0xa, 0x8, 0x14, 0x9, 0x8, 0xfffffffd, 0x400, 0xb243, 0xddb, 0x2, 0xb, 0x0, 0x40, 0x10001, 0x4, 0x2, 0x8, 0x6, 0xff, 0x8000, 0x7, 0x5, 0x7a3308f0, 0x6, 0x2, 0x86c9, 0x3, 0x0, 0x2, 0x6, 0x10, 0x5, 0x5, 0x40, 0xe102, 0x1, 0x101, 0x8, 0x5, 0xfffffff9, 0x6, 0x5, 0x7, 0x200, 0x4, 0x0, 0xfffffff9, 0x7, 0xb376, 0x2ca, 0x4, 0x80000001, 0xff, 0x99, 0x9, 0x91f, 0x8, 0x7ff, 0x1101, 0x100, 0x5, 0x4, 0x1, 0x3ff, 0x1, 0x38, 0xfffff2e7, 0x4, 0xf06, 0x9, 0x7, 0x4, 0x2, 0x447, 0x6, 0x9, 0x6, 0x339a8, 0x80000001, 0x6, 0x994, 0x2, 0x200, 0x2, 0x0, 0x8, 0xfff, 0x1, 0x3ff, 0x4, 0x7, 0x7fff, 0x1b8a, 0x2c8, 0x1ff, 0x2, 0x3, 0x0, 0x10001, 0x6, 0x1, 0x2, 0x8, 0x5, 0x1000000, 0x3590, 0x400000, 0x5, 0x2, 0x6, 0x3, 0x4, 0x7fffffff, 0xfffffff8, 0x8, 0xffff, 0x8, 0x3, 0x12, 0x9, 0x2, 0xffffffff, 0x0, 0x6, 0x9, 0x6, 0x7, 0x1000, 0x7, 0x8, 0x8001, 0x0, 0x1, 0x2, 0xffff5593, 0xffffffff, 0x0, 0x8872, 0x8, 0x4, 0x376, 0x2, 0x200, 0x2, 0x2, 0x2, 0x2, 0x7fff, 0x4, 0x80000000, 0x10000, 0xfffeffff, 0x73e5, 0x9, 0x4, 0x3, 0x1, 0x2, 0x2, 0x1ff, 0x58c, 0x5, 0x0, 0xfff, 0x7, 0x3, 0xb, 0x10000, 0x1ff, 0x3, 0x4, 0x2, 0x4, 0x3, 0xfffffff3, 0x5, 0x53, 0x80000, 0x179, 0x0, 0x8, 0x6, 0x40000000, 0xfffffff9, 0xfffffffc, 0x7fff, 0x0, 0x7, 0x1, 0x400, 0x81, 0x7fff, 0x10000, 0x7, 0x5, 0x7, 0x80, 0x9, 0x9, 0x1, 0x7, 0x10000, 0x2, 0x1, 0x101, 0x7, 0x6814cc0a, 0x3, 0x16, 0x6, 0x1, 0x5, 0x5, 0x10001, 0x8, 0x5, 0x0, 0x7, 0x2, 0x80000000, 0x7, 0x83f, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7, 0x7f, 0x0, 0x8c0, 0x2, 0x8, 0x8000, 0x6, 0x63, 0x0, 0x8, 0x6, 0xfffffffb, 0xdc, 0x7, 0x1, 0x7, 0x0, 0x4, 0xffffd501, 0x400, 0xfff, 0x2, 0x4, 0x1, 0x7fff, 0xfffff17f, 0x289, 0xfffffff1, 0x0, 0x0, 0x6a54, 0x8000, 0x7fffffff, 0xfffffff9, 0x9, 0x1, 0xffffffff, 0x5, 0x1871, 0x7, 0x8, 0x200, 0x5, 0x3, 0xb4e, 0x9, 0x1, 0x1, 0x3ff, 0x7, 0x7, 0x386a, 0xffff048c, 0x2, 0x400, 0x7, 0xe45f, 0xfffffff6, 0xfffff000, 0x6, 0x0, 0x1, 0x2, 0xfff, 0x4, 0x0, 0x549, 0x4f80, 0x9, 0xfffffffc, 0xb42f, 0x71, 0xa, 0x46c, 0x0, 0x0, 0xc5d2, 0x2, 0x4, 0x7, 0x7ff, 0x4, 0xffff, 0x0, 0x6, 0x150c, 0x578, 0x8, 0xd8486899, 0x2, 0x0, 0x9, 0xfffffc01, 0x2, 0x81, 0x2, 0x3, 0x9, 0x2, 0x3ff, 0xff, 0x1, 0x9, 0x9, 0xff, 0xfd3f, 0xf, 0xff, 0xb, 0x50000, 0xfff, 0x7, 0x6, 0x8000, 0x6, 0xf7, 0x0, 0x8, 0x3, 0x8000, 0xfffeffff, 0x8, 0x3, 0x3, 0x5, 0x7fff, 0x0, 0x7, 0x8, 0xc, 0xffffffff, 0x7fffffff, 0x3, 0x400000, 0x2, 0x3, 0x101, 0x16, 0x1ff, 0x2, 0x5, 0x3f90, 0x7fff, 0xd, 0x2, 0x9, 0x1ff, 0x8, 0xfffffffc, 0x0, 0x5, 0x0, 0x4, 0x81, 0x0, 0x1, 0x9, 0x7, 0x7, 0x4, 0x1, 0x3, 0x1a3, 0xffff, 0xee5, 0x3, 0x3, 0x9, 0x0, 0xc2, 0x1, 0x0, 0x2, 0x80b9, 0x4, 0x0, 0xff, 0x1, 0x7, 0x8001, 0x3, 0x4, 0xff, 0x8, 0x280f, 0x6, 0xe, 0x7, 0x3, 0x10000, 0x49c, 0xfe2b, 0xc9cd, 0xd7, 0x80, 0x3, 0x3, 0x80000000, 0x2, 0xa674, 0x10, 0xdff, 0x2, 0x7be9, 0x3, 0x4e70, 0x0, 0x0, 0x0, 0x2, 0x81, 0x8, 0x8, 0x1, 0xfffffff7, 0x5, 0x3, 0x0, 0x4, 0x3, 0x8, 0xe8, 0x200, 0x9, 0x1, 0x6, 0x7f, 0x18000, 0x4, 0x3, 0x9, 0x101, 0x5, 0xd0, 0x6, 0xf621, 0x9, 0x10001, 0x80000000, 0x10000, 0x3, 0x0, 0x0, 0xd, 0xeb0, 0x7, 0x8, 0x5, 0x7f, 0x1, 0x3, 0x4, 0x81, 0x7496, 0x401, 0x2, 0x7, 0xf, 0x0, 0x0, 0x5, 0x6, 0x3, 0x7, 0x10, 0x7, 0x1, 0x0, 0x3, 0x3018, 0x2, 0x8001, 0x9, 0x0, 0x6, 0x5, 0x3, 0x3, 0x60000000, 0x5, 0x3ff, 0x8, 0x0, 0x8bc, 0x7, 0x2, 0xfffffff8, 0x70ec, 0x3, 0x0, 0x80000000, 0xf8d4, 0x8, 0xd95, 0x40000, 0x9, 0xfffffff9, 0x10000, 0x4061c973, 0x1, 0x7f, 0x6, 0x5, 0xc53190, 0xfffffff1, 0x2, 0x5, 0x9e8a9f7, 0x7, 0x0, 0x2b, 0x6, 0x8, 0xc, 0x4, 0x9, 0xbb, 0x1, 0x7f, 0x5, 0xfffffff7, 0x6, 0x3, 0x0, 0x5, 0x9, 0x237, 0xb94, 0x7, 0x5, 0x8, 0x9, 0x531, 0x4, 0x6, 0x2, 0x1, 0x9, 0x1, 0xffffffff, 0x30000, 0x3, 0x1, 0x6, 0x8ab, 0x95b7, 0x2d4129e5, 0x5, 0x13d20000, 0xfffffff7, 0x7, 0xfffffffa, 0x4, 0xd41d, 0xe, 0x3, 0x3, 0x1, 0x3e1, 0x2, 0x3, 0xe28, 0x7, 0x9, 0x7, 0x1, 0x8, 0x6, 0x401, 0xffff0001, 0x1, 0x401, 0x6, 0x0, 0xc, 0x6, 0x2, 0x40, 0xe1d, 0x101, 0x3, 0x4325, 0xee, 0x7ff, 0x401, 0x401, 0x95, 0xb4, 0x1, 0xfffffffc, 0x3, 0x5, 0x5, 0x1, 0x100, 0x4, 0x1, 0xf87, 0xfffffffe, 0x9, 0xffffffff, 0x0, 0x400, 0x8, 0x3, 0x7860, 0x6, 0xe09a, 0x5, 0xd1ee, 0x4, 0xca75, 0x4, 0x1ff, 0x3ff, 0x5, 0xe, 0x57fd, 0x5, 0x3c850f95, 0x1, 0x3, 0x5, 0x5, 0xffffff70, 0x74b96597, 0x0, 0x6, 0xf, 0x0, 0x0, 0x6, 0x10001, 0x8, 0x7a54, 0x7, 0x3, 0x5, 0xfffffffe, 0x9, 0x0, 0x4, 0x4, 0x4, 0x7, 0x1, 0x9, 0x7, 0x200, 0x8, 0x7f, 0x4, 0x10001, 0xfa3d, 0x101, 0x6, 0x2, 0x1000000, 0xe, 0x56, 0x7, 0x3, 0x9, 0x8000, 0x2, 0x80, 0xa37a, 0x7, 0x3, 0x1, 0xfffffffb, 0x8, 0x0, 0x5, 0x10001, 0x80000001, 0x9, 0x3, 0xe, 0x3, 0x608a437f, 0x5, 0x7f, 0x7, 0xc, 0x101, 0x5, 0x2, 0xad, 0x5, 0x5271c7f2, 0x1, 0x8, 0x8, 0xaa, 0x7, 0x7fffffff, 0x2, 0x6, 0x4, 0x3ff, 0x9, 0x9, 0x7f, 0x5, 0x1, 0x1, 0x55ac686d, 0x7, 0x0, 0x225f, 0x1, 0x595, 0x1, 0x4, 0x6, 0x2, 0x9, 0xb, 0xd, 0x4, 0x8, 0x3, 0xc, 0x6, 0xfffffff9, 0x4, 0xffffff00, 0xfffffff8, 0x7fff, 0xb47, 0x7b, 0x1, 0x6, 0x3, 0x6, 0x4, 0x1ff, 0x221, 0x8000, 0x401, 0x3, 0x8, 0x81, 0x3, 0x7, 0x2, 0xdd, 0x3, 0x7, 0x2, 0x9, 0x0, 0x7, 0x40, 0x5, 0x1, 0x800, 0x4, 0x1, 0x0, 0x5, 0x0, 0x10001, 0x1f, 0x2, 0x7fffffff, 0x5, 0x2b4, 0xff2, 0x1, 0x98, 0x8, 0x9a, 0x0, 0x6, 0x0, 0x4]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x12b8b000) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 7.435438597s ago: executing program 6 (id=8958): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r1) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r1) r5 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000340)=@ethtool_link_settings={0x2, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x6, 0x3dcf, 0xc, 0xfffffffb, 0x0, 0x0, 0x2]}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x218, r4, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfffff39e, 0x7a}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x400}, @NL80211_ATTR_IE={0x9, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x38, 0xfb}}]}, @NL80211_ATTR_IE={0xd7, 0x2a, [@ht={0x2d, 0x1a, {0x8, 0x0, 0x2, 0x0, {0x1, 0x6, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x5, 0x1}}, @perr={0x84, 0xb5, {0x5, 0xb, [{{0x0, 0x1}, @device_a, 0x2, @value=@broadcast, 0x30}, {{0x0, 0x1}, @broadcast, 0x8, @value=@device_b, 0xc}, {{}, @broadcast, 0x7, @void, 0xb}, {{0x0, 0x1}, @device_b, 0x0, @value, 0x2a}, {{0x0, 0x1}, @broadcast, 0x8, @value=@broadcast, 0x1b}, {{}, @broadcast, 0x3, @void, 0x40}, {{}, @broadcast, 0x10, @void, 0x3b}, {{}, @device_a, 0x4, @void, 0x41}, {{0x0, 0x1}, @device_a, 0x6, @value=@broadcast}, {{0x0, 0x1}, @broadcast, 0x80, @value=@broadcast, 0x24}, {{}, @device_b, 0x9, @void, 0x4}]}}]}, @NL80211_ATTR_IE={0x102, 0x2a, [@ibss={0x6, 0x2, 0x5}, @ibss={0x6, 0x2, 0x400}, @fast_bss_trans={0x37, 0xb9, {0x6, 0x5, "c88c90c982f310c1c94d08e443ce8cff", "91c9c319bdd6bfd1e4b7a84f74d52a8da0abbf126008232edaa2fa1f9dd2e846", "19237d03b46c4c41909a12f6a60d92478b69ccc858fdab7bd515094c5543bb08", [{0x2, 0x1, '\\'}, {0x4, 0x8, "335cab15fa46730f"}, {0x4, 0x23, "35fca06dce162a9cb6ec97e3df39d4408d6d03c145e41107d538179a3a93bd8c492e5a"}, {0x4, 0x26, "ef1ec43df41205b93304ff5415f0986d679786bd9dd43aab20b0e70356657c9a2825fc29a167"}, {0x4, 0xb, "29a70d32f6949797882e75"}]}}, @cf={0x4, 0x6, {0x1, 0x5, 0x1, 0x6}}, @dsss={0x3, 0x1, 0x78}, @mesh_id={0x72, 0x6}, @ssid={0x0, 0x1b, @random="7a999b6c09837f20683b965a1e6773e4168001d4b6b8eed66dfd20"}, @mesh_id={0x72, 0x6}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x40040}, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0xdc, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3f}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x34}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x80) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsmount(r1, 0x0, 0x4) (async) r8 = fsmount(r1, 0x0, 0x4) sendmsg$NL80211_CMD_SET_BSS(r8, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r4, 0x2, 0x7, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x1c}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xfa}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r9, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000180)={0x54, r10, 0x1, 0x4, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x2a}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x29, 0xe, [@random={0x7, 0x23, "d5b8bf7b2e2e4bcc258fe77cb3fc70490da57f352cdfdb51b2d837ee0e6b2e8020a155"}]}]}, 0x54}}, 0x10) ioctl$AUTOFS_IOC_FAIL(r7, 0x9361, 0x4) (async) ioctl$AUTOFS_IOC_FAIL(r7, 0x9361, 0x4) 6.516378348s ago: executing program 6 (id=8964): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(r0, r1, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x1000000, &(0x7f00000006c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}]}}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x7, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x23}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 6.460057054s ago: executing program 6 (id=8965): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000b20000/0x400000)=nil) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac5500000000030006000000000002000000ac14141a000000000000000002000100000000000000020d0000e8ff030005000000000002"], 0x78}, 0x1, 0x7}, 0x0) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583"], 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @fda={0x66646185, 0x4, 0x0, 0xe}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) (async) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0x108, 0x7, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0x61, 0x7, 0x1, 0x0, "f926fa48362dbfd2faea392c4e25827d39d61a87d4791e8c42a2e50f21dcfe11c1f001ebd44ddbd37d77b3876c933cfa6ca075d59a957a94a97902f4c73a475b3af60d50aba824c6bd6dd364674e6c33eee1bfc5943d1eee485cbce80a"}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", "", ""]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x9}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x11}, 0x40) 3.133096702s ago: executing program 6 (id=8983): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fbdbdf25190000000c00018008c1a9000100000064000180080003000300000008000100", @ANYRES32, @ANYBLOB="08000300000000001400020076657468315f746f5f627269646765000800030003"], 0x84}, 0x1, 0x0, 0x0, 0x8004}, 0x240008d4) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) sched_rr_get_interval(0x0, &(0x7f0000000380)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2c0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x82801, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x100401, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) write(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.782646456s ago: executing program 6 (id=8987): setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) statx(r4, 0x0, 0x4000, 0x7ff, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) creat(&(0x7f0000000300)='./file0\x00', 0x1fd) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x442, 0x9c) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x80000000003, 0x82}], 0x1, 0x0, &(0x7f0000000000), 0x1) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x40, 0x19, 0x2}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000040)={0x14, &(0x7f0000000140)={0x40, 0x58, 0x2, {0x2, 0xe}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x44, &(0x7f00000003c0)={0x20, 0x10, 0x28, "df0795e35d0d3812ac16db86b68176110f72261d66c5b21e8c7d678a0150aaaeda463e390f7c2d99"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x48) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@flat=@handle={0x73682a85, 0x100, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/126, 0x7e, 0x1, 0x27}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) socket(0x10, 0x80002, 0x0) 1.980298055s ago: executing program 3 (id=8994): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x12b8b000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r2 = dup(r1) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x9b) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.852487568s ago: executing program 3 (id=8995): unshare(0x62040200) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205fe0506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160006000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8040, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x10001) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, 0x11, r1, 0xcf82b000) read(r1, 0x0, 0x0) unshare(0x62040200) (async) socket(0x10, 0x3, 0x0) (async) sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205fe0506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160006000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8040, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x10001) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, 0x11, r1, 0xcf82b000) (async) read(r1, 0x0, 0x0) (async) 1.802710002s ago: executing program 3 (id=8996): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = epoll_create1(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x4, 0x0, 0x200000000000002}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xb}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x400}], 0x0, 0x0, 0x0}) 1.773570336s ago: executing program 3 (id=8997): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x1b, 0x15, "54c870a8634edc745dfa1ab0a34a10622e64ee4edb80cc9bd36b93b23733e6180aa539ec68114b5aba1c98911df5ba72296d56740d56ea4d0434aa3592a47913", "fc0177a6f3bb16d509568693e0e50bbf206c0500997c00040000000000005f8a654e14dc7c4cc6020000003b3acc9f02cd3eac8be657b534bfa1142100696b29", "c921095856cdf9fd8199034f3b875fe5090094e3c7a178fb1c16c99189819ef4", [0x9, 0x6]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0, 0xfff6}, {0x7, 0xd2d5}]}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) bind$inet(r5, &(0x7f0000000140)={0x2, 0x810, @broadcast}, 0x10) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, &(0x7f0000000680)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xd4, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x2, 0x2, 0x1c}, @flat=@weak_binder={0x77622a85, 0x10b}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}, 0x1000}, @request_death={0x400c630e, 0x1}, @decrefs={0x40046307, 0x3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@fda={0x66646185, 0x8, 0x2, 0x14}, @fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x9, 0x0, 0xae3c}}, &(0x7f0000000480)={0x0, 0x20, 0x38}}, 0x400}, @increfs_done, @request_death={0x400c630e, 0x1}], 0x6a, 0x0, &(0x7f00000005c0)="dba06491b108399a95ec03697660ffbfe840de49480b5e0d74357fc4d16749239c32c17d5a6fe7c2f63c21d21017dbe83dda0b806c74dd6c65abe18fd2da6512c597afb63a9930fb03e3b75917ed881027fe92465b448fbe7d8eb20aef1aceca65acca88b9afb6d21846"}) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f00000020c0)=0x9, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000080)={0x1d, r7}, 0x10) close(r6) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x3, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f0000000300)=""/209, 0xd1, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 1.548436908s ago: executing program 3 (id=8999): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000001c0)=[@request_death={0x400c630e, 0x1}, @enter_looper], 0x50, 0x0, &(0x7f0000000200)="285c66b51cc765d56264027b52bae26e57bdfaf019655afadb6a0da13acaf0b8aa19cb52d3c8ae04596da15ba9fab7f4e7e86736582dcd9425c9ba95f54ac71210eb0051399d30d109a8803bb0f66d0c"}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f00000002c0)={0xffffffffffffffff, 0x10, [0x3, 0x3fc000000000000, 0x1, 0x1], &(0x7f0000000180)=[0x0, 0x0]}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfffffe76, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0x8, 0x0, 0x28}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000000)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 873.180584ms ago: executing program 8 (id=9004): syz_open_procfs(0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='qnx6\x00', 0x40, &(0x7f00000000c0)='{.=].^(*\x00') r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6, 0x20010, r0, 0xbd75a000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 856.713206ms ago: executing program 8 (id=9005): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r2 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x40084504, 0x0) 821.515909ms ago: executing program 8 (id=9006): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x80002, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') open(&(0x7f00000005c0)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) ioprio_set$uid(0x3, 0x0, 0x4000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000004c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0xbb, 0x0, &(0x7f0000000680)="bdee7ccbf76f4d04edcb106d80eb434eb6039cbcd24e272156d3f98c8c55f1fe94c3b71e223f0c9074af765850a8339f503ee249104e0be9b9771cd3fc872ae0290dbef28c2f1b04ca6a05fe67bd76aee3269d69c703665d0b10506c5caaf125b1681ab6c8a892d9f52020a08c3e2877af5d6243b698fda9d1dff1febbf98d8c0c5f8885c8fab4431854c5dc85aa5e0f1fa36c690a7a0ab155ed51f8c220f1b4cc40d0fbfbb7cce79a463bc2585c7128ecc9c527d90be072861060"}) 764.967295ms ago: executing program 5 (id=9007): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth0_vlan\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') listen(r2, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x8000) ioctl$EVIOCGABS3F(r5, 0x8018457f, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r9, 0x1, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}}]}, 0x28}, 0x1, 0x0, 0x0, 0x850}, 0x800) sendmsg$SEG6_CMD_SET_TUNSRC(r7, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x220, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000dc}, 0x40000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@decrefs], 0x0, 0x0, 0x0}) 673.499644ms ago: executing program 8 (id=9008): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xe4e}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000dc0)=""/4101, 0x1005}, {&(0x7f00000000c0)=""/174, 0xae}, {&(0x7f0000000c80)=""/258, 0x102}, {&(0x7f00000033c0)=""/218, 0xda}, {&(0x7f0000000a80)=""/184, 0xb8}, {&(0x7f0000000180)=""/63, 0x3f}, {&(0x7f00000001c0)=""/243, 0xf3}, {&(0x7f00000002c0)=""/129, 0x81}, {&(0x7f0000000000)=""/92, 0x5c}, {&(0x7f00000005c0)=""/34, 0x22}], 0xa}, 0x5}], 0x3, 0x2100, 0x0) 646.419076ms ago: executing program 5 (id=9009): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x442680, 0x10) clock_gettime(0x0, &(0x7f0000002580)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f00000023c0)=[{{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000300)=""/224, 0xe0}, {&(0x7f0000000400)=""/255, 0xff}, {&(0x7f0000000500)=""/166, 0xa6}, {&(0x7f00000005c0)=""/83, 0x53}], 0x4, &(0x7f0000000640)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000000700)=@abs, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000780)=""/173, 0xad}, {&(0x7f0000000840)=""/243, 0xf3}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000980)=""/169, 0xa9}, {&(0x7f0000000a40)=""/243, 0xf3}, {&(0x7f0000000b40)=""/148, 0x94}], 0x6, &(0x7f0000000c80)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000cc0)=@abs, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000d40)=""/180, 0xb4}, {&(0x7f0000000e00)=""/238, 0xee}, {&(0x7f0000000f00)=""/206, 0xce}, {&(0x7f0000001000)=""/153, 0x99}, {&(0x7f00000010c0)=""/102, 0x66}], 0x5, &(0x7f00000011c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000001240)=@abs, 0x6e, &(0x7f0000001480)=[{&(0x7f00000012c0)=""/75, 0x4b}, {&(0x7f0000001340)=""/170, 0xaa}, {&(0x7f0000001400)=""/81, 0x51}], 0x3}}, {{&(0x7f00000014c0), 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001540)=""/144, 0x90}, {&(0x7f0000001600)=""/139, 0x8b}, {&(0x7f00000016c0)=""/58, 0x3a}, {&(0x7f0000001700)=""/66, 0x42}, {&(0x7f0000001780)=""/42, 0x2a}, {&(0x7f00000017c0)=""/10, 0xa}, {&(0x7f0000001800)=""/255, 0xff}, {&(0x7f0000001900)=""/5, 0x5}, {&(0x7f0000001940)=""/208, 0xd0}, {&(0x7f0000001a40)=""/182, 0xb6}], 0xa}}, {{&(0x7f0000001bc0)=@abs, 0x6e, &(0x7f0000001f40)=[{&(0x7f0000001c40)=""/131, 0x83}, {&(0x7f0000001d00)=""/192, 0xc0}, {&(0x7f0000001dc0)=""/16, 0x10}, {&(0x7f0000001e00)=""/107, 0x6b}, {&(0x7f0000001e80)=""/162, 0xa2}], 0x5}}, {{&(0x7f0000001fc0), 0x6e, &(0x7f0000002300)=[{&(0x7f0000002040)=""/252, 0xfc}, {&(0x7f0000002140)=""/141, 0x8d}, {&(0x7f0000002200)=""/219, 0xdb}], 0x3, &(0x7f0000002340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}], 0x7, 0x10120, &(0x7f00000025c0)={r1, r2+10000000}) (async, rerun: 32) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (rerun: 32) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r3}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 608.37689ms ago: executing program 8 (id=9010): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000002340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x4}}, {@blksize={'blksize', 0x3d, 0x1000}}]}}) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100)=0x1d1f, 0x4) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x2512, 0x4) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x24000045, &(0x7f0000000040)={0xa, 0x2, 0x398, @empty}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_buf(r4, 0x29, 0x3d, 0x0, &(0x7f0000000100)=0xfffffce0) recvmmsg(r3, &(0x7f0000008d80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10140, 0x0) pread64(r0, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 529.081658ms ago: executing program 3 (id=9011): mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000004e40)) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x28) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x200) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x402, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)='devices.allow\x00', 0x2, 0x0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201ed0da200000000004010080200000000000001090224d8010000c861b488ed5727edf4fae6583f2004000400030203000200"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000300)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) socket$inet6(0xa, 0x80000, 0x800100) mknodat(0xffffffffffffff9c, 0x0, 0x4, 0x5) syz_usb_connect(0x0, 0x4f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) write$binfmt_script(r0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) 527.964208ms ago: executing program 5 (id=9012): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2d39d003, 0x9}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000440)=0x3) ioctl$PPPIOCSDEBUG(r4, 0x40047440, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8c83, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x300, 0x0, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x10}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000440)) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SET_FPEXC(0xc, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, 0x0) sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYRES32=r5, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRESOCT=r7, @ANYRES64=0x0, @ANYRES16=r7], 0x48}, 0x1, 0x0, 0x0, 0x20048850}, 0x41) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) umount2(&(0x7f0000000080)='./file0\x00', 0x4) sendmsg$can_bcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='\a'], 0x48}, 0x1, 0x0, 0x0, 0xc4}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) ioctl$BLKRRPART(r5, 0x125f, 0x0) 395.649751ms ago: executing program 8 (id=9013): ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r0 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000002280)=ANY=[@ANYBLOB="12010003020000202505a1a440000102030109025c00020104000001020d0000052406000105240001000d240f65300400000900f7068306241a0400210905810300020900040904010000020d00000904010102020dfffff30582082000071600090503021000034612"], &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, 0x0, &(0x7f0000002640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x22e7c000) 289.192531ms ago: executing program 5 (id=9014): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) getpeername$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000240)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r4, 0x4188aec6, &(0x7f0000001a80)={0x0, [{0x3, 0x10, 0x3, &(0x7f0000000140)="680e"}, {0x0, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x5, 0x0, 0xfffffffb, 0x0}, {0x1, 0xffffffffffffffbc, 0x8000, 0x0}, {0x2, 0x0, 0x7fff, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x80, 0x0}]}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r5, 0x0, 0xd3, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0x0, "4844c81278d876f05bb11460819cffb6a67f00683782e7dbf367e2d9df35d25d", 0x3, 0x7, 0x2, 0x7b4e}, 0x3c) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001055}, 0x2004801) close_range(r0, 0xffffffffffffffff, 0x0) 136.901497ms ago: executing program 5 (id=9015): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000480)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) umount2(&(0x7f0000000000)='./file0\x00', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)="3083ab7c", 0x4) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f00000004c0)="170000000a0001000003be8c5ee17688a20032000203000a0292000098fc5ad90a00bb6a880000d6c8db0000dba67e06020000e28900000200df018002000000fc0607bdff59100ac45761547a681f009cee4a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000000000800b59bd2b8e50ce5af649a702202ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5a1b47b6806323deb3", 0xb8) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000103f7000000010000000a"], 0x14}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000002740)=""/243, 0xf3, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xffffffff7fffffff, 0xfffffffffffffffe, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/173, 0xad, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) writev(r7, &(0x7f0000000880)=[{&(0x7f0000000200)="9860c9e48027508eb8d6febdb50801e882a82982a01dedd4833854b6456db657128306dc6cc37b0aa38738ca8d2f1c0b8917dd04138ea25e301674d7b467a4296e7429603778802df6236a3b8ce725dc6a14d99dbabbe4434e088ec325b45ed56c53b4a04297ce6151dc", 0x6a}, {&(0x7f0000000380)="cabb8fde50e10a23db6198eb4e55efd319ae5d73d015dbfb9bb9e8dea2803b9900ee73c52727713b886f250ba7b465854df193c23be0151b6a700929c89d89645c748c1805ff46bb619aacb0ebb0d1", 0x4f}, {&(0x7f0000000180)="4e5a22ac93", 0x5}, {&(0x7f0000000640)="ea806a464fb137297202b526c25f52149edc149e23c7ff042cb519921e4f08cc514fab0eedbfb45d8978ae3c5e0341f67204e46ddbc831e000db926947c46f789a23a46f1a12edb3a299239589b133810a29b9c438da49738cad4dfca028c411f13926974aad599bd93765eaefccaa2222fe3fe1f78ce4f145b722378dbeea5551a9420deac27c858bfa53784264721a102c5af03dc60c76cfc3ab11d745a3d71fe6b730a1e8f848a0a7a4f13b242c2355203a7244fb67147e5d2d8335f580b17e6b1b78e650a4877ba158220a3a04038c845cbba6f056bef7da513e8d7804b29858dfa5eadfebfccd8038e62af6adb75c9c69", 0xf3}, {&(0x7f0000000440)="9e53b4609f1fd0619a8494da6a1247765a5bbe9b958f48e86aeb7127eb052ca90f6ea76dc7bda7108c6e27", 0x2b}, {&(0x7f0000000480)="b1bb6baf6232539ecc815c1d577b9518931d328f3dcf9a5141b13af43215568b5f558044fe55daf80f8da320e8043654725981fcc6a2ae64525b9f", 0x3b}, {&(0x7f0000000540)="da6b432d3a35b55b6135f6584b22801264f4dc3640abf6536546a2896a483cff9e56b04eba7eb9630336cdeb09", 0x2d}, {&(0x7f0000000740)="e8567e91e7e71decc438f869b501d3e72a17a646c7f5f877ec2db2f432775a583a6d760e9f4f5b24ae815efe9f36c7dd5904ff7418739d963b3197", 0x3b}, {&(0x7f0000000780)="e294e0f32d4df5cdf6f0cbb95983ba31fab0ef97488d1533290bb3eef8495c4801a1e6a2cb9f3ec1692134d929c2c40f0939c413ffd8e72d310442a942abc3336fe2305ae56124b7ce8fb1718ae3a152c913a8269f2c978333cf9438f8307fb17acebe29c0ffacff729e1369b937f1654720181f7cf091bea842cee10da34be6a51dc52723af5bcf9f21016d3b8c808ea1534b8606a983f4ff7bc870c3a56f3d1ed1ccfd32433267eacfed7f85ff249c722b2052b49094c923a490c349e480dd4d216d791ee12ebb594ccc4afa3c63a345f0aa02686b458a8041824eea2ceb", 0xdf}], 0x9) 0s ago: executing program 5 (id=9016): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48a, 0x0, 0xfff}]}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x40, 0x0}) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000002000fcffffff12000000180001801400020076657468305f746f5f6261746164550008000900f9bfffff0800060009000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48880}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) r9 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r9, 0x42, 0x1ff) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r10, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x4005, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r10, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0xc, 0x0, 0x0, {0x5, 0x0, 0x5, 0x80000001, 0x0, 0x1, 0x9e9, 0xfffffffe, 0xb877, 0x8000, 0x7893b06e, 0xffffffffffffffff, 0xee01, 0x3d, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) ioctl$TUNSETTXFILTER(r8, 0x400454d1, 0xffffffffffffffff) socket$inet6(0xa, 0x6, 0xffffcc87) kernel console output (not intermixed with test programs): urce: EFAULT } [ 742.079325][T25274] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 742.090128][T25274] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:54 [ 743.904639][T25321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=25321 comm=syz.5.8249 [ 744.394247][T21260] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 744.556256][T21260] usb 4-1: not running at top speed; connect to a high speed hub [ 744.567406][T21260] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 744.575115][T21260] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 744.584160][T21260] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 744.600246][T21260] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 744.609580][T21260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.617811][T21260] usb 4-1: Product: á° [ 744.622061][T21260] usb 4-1: Manufacturer: í†âŒ¿å¸å„…켄䈧您톅෶䪀Ǟ忡螨뮬膃퇹햤æ¯ã­’氘韂輚ꆭç“뿒埡慺묞땃彳᳂ä â §áºµé¥¶ê«¹é‡¾î•ªà¬  [ 744.637662][T21260] usb 4-1: SerialNumber: é«ì­ ä­€í˜¼é¹»ï­†å«é¬¸ïŸçœˆì••ìƒ›ïºï½•ç—±å¿Žâ·ƒå‚±î‡³ãš¤æŠ´âµ‚韭â½ç¼ê€“﮷祀ⶑ〰ë„讅竔ペ䒔㩗豺îšé¹¿î°íŠ¤é³¢å³‡ê‘•æ—¥ã±æ“™ï™œç‡©è®µâ˜îŸ©í‘®á€‹ä¡šâ´ë´’렦熃銵勱ꩅﲣë˜ä™ë›Žèƒ¤ï«­ì±­êŸ®å½¾êµ§é©‹ç¡—è®â‰Šá ­î»¡é­•ë’©å¥¸ê”ꋆ逜있ܴì’퓜벎 [ 744.984975][ T36] kauditd_printk_skb: 420 callbacks suppressed [ 744.985014][ T36] audit: type=1400 audit(2000000025.955:81328): avc: denied { ioctl } for pid=25335 comm="syz.3.8255" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 745.017018][T21260] cdc_ncm 4-1:1.0: skipping garbage [ 745.022409][T21260] cdc_ncm 4-1:1.0: skipping garbage [ 745.027901][T21260] cdc_ncm 4-1:1.0: skipping garbage [ 745.034676][T21260] cdc_ncm 4-1:1.0: skipping garbage [ 745.039942][T21260] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 745.046796][ T36] audit: type=1400 audit(2000000025.955:81329): avc: denied { ioctl } for pid=25335 comm="syz.3.8255" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 745.072156][T21260] cdc_ncm 4-1:1.0: bind() failure [ 745.076337][ T36] audit: type=1400 audit(2000000026.011:81330): avc: denied { create } for pid=25343 comm="syz.8.8257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 745.098547][ T36] audit: type=1400 audit(2000000026.011:81331): avc: denied { setopt } for pid=25343 comm="syz.8.8257" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 745.120086][ T36] audit: type=1400 audit(2000000026.011:81332): avc: denied { create } for pid=25343 comm="syz.8.8257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 745.207150][T21260] usb 4-1: USB disconnect, device number 5 [ 745.275542][ T36] audit: type=1400 audit(2000000026.218:81333): avc: denied { read write } for pid=16698 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 745.307528][ T36] audit: type=1400 audit(2000000026.218:81334): avc: denied { read write open } for pid=16698 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 745.332936][ T36] audit: type=1400 audit(2000000026.218:81335): avc: denied { ioctl } for pid=16698 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 745.358769][ T36] audit: type=1400 audit(2000000026.255:81336): avc: denied { read } for pid=25346 comm="syz.6.8258" name="binder1" dev="binder" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 745.381923][ T36] audit: type=1400 audit(2000000026.255:81337): avc: denied { read open } for pid=25346 comm="syz.6.8258" path="/dev/binderfs/binder1" dev="binder" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 745.687176][T25355] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8261'. [ 745.819757][T25365] 9pnet_fd: Insufficient options for proto=fd [ 745.964057][T25375] overlayfs: failed to clone upperpath [ 746.045264][T21260] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 746.078687][T25382] fuse: Unknown parameter 'groUp_id' [ 746.205056][T21260] usb 4-1: Using ep0 maxpacket: 16 [ 746.215703][T21260] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 746.225983][T21260] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 746.239630][T21260] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 746.249286][T21260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.257313][T21260] usb 4-1: Product: syz [ 746.262145][T21260] usb 4-1: Manufacturer: syz [ 746.266789][T21260] usb 4-1: SerialNumber: syz [ 746.349728][T25396] netlink: 'syz.5.8275': attribute type 27 has an invalid length. [ 746.359621][T25396] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 746.498119][T21260] usb 4-1: 0:2 : does not exist [ 746.516985][T21260] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 746.533594][T21260] usb 4-1: USB disconnect, device number 6 [ 746.613048][T23851] udevd[23851]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 747.091933][T25418] rust_binder: Error while translating object. [ 747.091972][T25418] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 747.098207][T25418] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:84 [ 747.141732][T25421] rust_binder: Error while translating object. [ 747.150876][T25421] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 747.157095][T25421] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:88 [ 747.239231][T25429] 9pnet_fd: Insufficient options for proto=fd [ 747.268118][T25430] rust_binder: Write failure EINVAL in pid:95 [ 747.323208][T25437] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 747.337368][T25437] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 747.347241][T25437] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 747.355974][T25437] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 747.530406][T25454] usb usb7: usbfs: process 25454 (syz.3.8294) did not claim interface 0 before use [ 747.588342][T25459] syz.3.8296 (25459) used obsolete PPPIOCDETACH ioctl [ 747.698807][T25470] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.706129][T25470] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.716235][T25470] bridge0: entered allmulticast mode [ 747.986298][T25482] 9pnet_fd: Insufficient options for proto=fd [ 748.015843][T21260] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 748.186260][T21260] usb 4-1: Using ep0 maxpacket: 8 [ 748.213875][T21260] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 748.238747][T21260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.248085][T21260] usb 4-1: Product: syz [ 748.253130][T21260] usb 4-1: Manufacturer: syz [ 748.257838][T21260] usb 4-1: SerialNumber: syz [ 748.483842][T21260] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 748.545793][T25504] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 748.545824][T25504] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1126 [ 748.697365][T21260] usb 4-1: USB disconnect, device number 7 [ 748.735074][T21260] usblp0: removed [ 749.219492][T21260] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 749.400568][T21260] usb 4-1: Using ep0 maxpacket: 8 [ 749.422626][T21260] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 749.430972][T21260] usb 4-1: config 179 has no interface number 0 [ 749.433194][T25550] rust_binder: Error while translating object. [ 749.437307][T25550] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 749.437888][T21260] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 749.443869][T25550] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1152 [ 749.465133][T21260] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 749.486008][T21260] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 749.502494][T21260] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 749.516049][T21260] usb 4-1: config 179 interface 65 has no altsetting 0 [ 749.523221][T21260] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 749.533980][T21260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.712904][T25562] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1160 [ 749.777147][ T10] usb 4-1: USB disconnect, device number 8 [ 750.341700][ T36] kauditd_printk_skb: 649 callbacks suppressed [ 750.341720][ T36] audit: type=1400 audit(2000000030.978:81987): avc: denied { create } for pid=25592 comm="syz.5.8342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 750.367464][T25594] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.374784][T25594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.376276][ T36] audit: type=1400 audit(2000000030.987:81988): avc: denied { read write } for pid=25051 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 750.399798][T25596] input: syz0 as /devices/virtual/input/input70 [ 750.448753][ T36] audit: type=1400 audit(2000000030.987:81989): avc: denied { read write open } for pid=25051 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 750.484004][ T36] audit: type=1400 audit(2000000030.987:81990): avc: denied { ioctl } for pid=25051 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 750.517916][ T36] audit: type=1400 audit(2000000031.025:81991): avc: denied { create } for pid=25592 comm="syz.5.8342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 750.541579][ T36] audit: type=1400 audit(2000000031.025:81992): avc: denied { setopt } for pid=25592 comm="syz.5.8342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 750.598667][ T36] audit: type=1400 audit(2000000031.025:81993): avc: denied { bind } for pid=25592 comm="syz.5.8342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 750.662078][ T36] audit: type=1400 audit(2000000031.025:81994): avc: denied { read } for pid=25595 comm="syz.3.8343" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 750.724715][ T36] audit: type=1400 audit(2000000031.025:81995): avc: denied { read open } for pid=25595 comm="syz.3.8343" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 750.798297][ T36] audit: type=1400 audit(2000000031.025:81996): avc: denied { ioctl } for pid=25595 comm="syz.3.8343" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 750.856133][T25618] kvm: Disabled LAPIC found during irq injection [ 750.889314][T25624] netlink: 308 bytes leftover after parsing attributes in process `syz.8.8353'. [ 751.277509][T25662] syzkaller0: entered promiscuous mode [ 751.283429][T25662] syzkaller0: entered allmulticast mode [ 751.349869][T21260] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 751.509613][T21260] usb 4-1: Using ep0 maxpacket: 16 [ 751.517698][T21260] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.529775][T21260] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.539606][T21260] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 751.549178][T21260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.558899][T21260] usb 4-1: config 0 descriptor?? [ 751.789349][T21260] usbhid 4-1:0.0: can't add hid device: -71 [ 751.795377][T21260] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 751.816717][T21260] usb 4-1: USB disconnect, device number 9 [ 751.925388][T25687] ./cgroup: Can't lookup blockdev [ 751.934906][T25687] fuse: Bad value for 'fd' [ 752.017153][T25693] overlayfs: missing 'lowerdir' [ 753.062883][T25721] rust_binder: 157: no such ref 0 [ 753.130735][T25721] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 753.138045][T25721] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 753.618679][ T31] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 753.780613][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.791626][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.801409][ T31] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 753.810524][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.820557][ T31] usb 4-1: config 0 descriptor?? [ 754.004230][T25751] netlink: 8568 bytes leftover after parsing attributes in process `syz.5.8393'. [ 754.318684][T25772] devtmpfs: Unknown parameter 'fuse' [ 754.503193][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 754.509258][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 754.544619][ T31] usb 4-1: USB disconnect, device number 10 [ 754.835195][T25789] netlink: 'syz.6.8406': attribute type 4 has an invalid length. [ 754.854267][T25789] netlink: 17 bytes leftover after parsing attributes in process `syz.6.8406'. [ 754.950947][T25796] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 754.950975][T25796] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 754.959810][T25796] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1191 [ 755.097235][T25810] tipc: Enabled bearer , priority 26 [ 755.122560][T25810] overlayfs: failed to clone upperpath [ 755.185078][T25812] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:164 [ 755.185117][T25812] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 755.196205][T25812] rust_binder: Read failure Err(EFAULT) in pid:164 [ 755.417752][T25826] rust_binder: Write failure EFAULT in pid:170 [ 755.451089][T25839] 9pnet_fd: Insufficient options for proto=fd [ 755.464560][T25837] netlink: 84 bytes leftover after parsing attributes in process `syz.5.8423'. [ 755.554003][T25848] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 755.554035][T25848] rust_binder: Error while translating object. [ 755.578759][T25848] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 755.590059][T25848] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:172 [ 755.708368][ T36] kauditd_printk_skb: 1016 callbacks suppressed [ 755.708390][ T36] audit: type=1400 audit(2000000036.019:83013): avc: denied { name_bind } for pid=25855 comm="syz.3.8427" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 755.757115][ T36] audit: type=1400 audit(2000000036.038:83014): avc: denied { execmem } for pid=25857 comm="syz.8.8430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 755.777421][ T36] audit: type=1400 audit(2000000036.066:83015): avc: denied { node_bind } for pid=25855 comm="syz.3.8427" saddr=::ffff:0.0.0.0 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 755.802149][ T36] audit: type=1400 audit(2000000036.066:83016): avc: denied { name_bind } for pid=25855 comm="syz.3.8427" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 755.808664][T25860] netlink: 'syz.5.8429': attribute type 5 has an invalid length. [ 755.825513][ T36] audit: type=1400 audit(2000000036.066:83017): avc: denied { node_bind } for pid=25855 comm="syz.3.8427" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 755.833295][T25860] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8429'. [ 755.854096][ T36] audit: type=1400 audit(2000000036.066:83018): avc: denied { name_bind } for pid=25855 comm="syz.3.8427" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 755.884747][ T36] audit: type=1400 audit(2000000036.066:83019): avc: denied { node_bind } for pid=25855 comm="syz.3.8427" saddr=::ffff:172.20.20.61 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 755.893045][T25860] incfs: Options parsing error. -22 [ 755.925743][ T36] audit: type=1400 audit(2000000036.066:83020): avc: denied { read } for pid=25855 comm="syz.3.8427" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 755.959740][ T36] audit: type=1400 audit(2000000036.066:83021): avc: denied { read open } for pid=25855 comm="syz.3.8427" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 755.984536][ T36] audit: type=1400 audit(2000000036.066:83022): avc: denied { ioctl } for pid=25855 comm="syz.3.8427" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 755.986959][T25860] incfs: mount failed -22 [ 756.561399][T21261] tipc: Node number set to 2130706433 [ 756.670973][T25883] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 758.550460][T21261] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 758.600864][T25944] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8461'. [ 758.720913][T21261] usb 4-1: Using ep0 maxpacket: 8 [ 758.730918][T21261] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 758.740098][T21261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.748237][T21261] usb 4-1: Product: syz [ 758.752470][T21261] usb 4-1: Manufacturer: syz [ 758.757126][T21261] usb 4-1: SerialNumber: syz [ 758.915803][T25954] No source specified [ 758.988189][T21261] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 760.723831][T25973] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 760.733034][T25973] overlayfs: missing 'lowerdir' [ 761.313540][ T36] kauditd_printk_skb: 261 callbacks suppressed [ 761.313559][ T36] audit: type=1400 audit(2000000041.276:83284): avc: denied { create } for pid=25974 comm="syz.5.8472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 761.339604][ T36] audit: type=1326 audit(2000000041.276:83285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25974 comm="syz.5.8472" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5a638eec9 code=0x0 [ 761.425082][ T36] audit: type=1400 audit(2000000041.380:83286): avc: denied { ioctl } for pid=25974 comm="syz.5.8472" path="socket:[112344]" dev="sockfs" ino=112344 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 761.450194][ T36] audit: type=1400 audit(2000000041.380:83287): avc: denied { connect } for pid=25974 comm="syz.5.8472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 761.469979][ T36] audit: type=1400 audit(2000000041.389:83288): avc: denied { write } for pid=25974 comm="syz.5.8472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 761.489619][ T36] audit: type=1400 audit(2000000041.389:83289): avc: denied { write } for pid=25974 comm="syz.5.8472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 761.509247][ T36] audit: type=1400 audit(2000000041.389:83290): avc: denied { create } for pid=25974 comm="syz.5.8472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 761.529952][ T36] audit: type=1400 audit(2000000041.389:83291): avc: denied { write } for pid=25974 comm="syz.5.8472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 761.550692][ T36] audit: type=1400 audit(2000000041.389:83292): avc: denied { read } for pid=25974 comm="syz.5.8472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 761.619816][ T36] audit: type=1400 audit(2000000041.558:83293): avc: denied { read write } for pid=16698 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 761.649252][T25978] rust_binder: Write failure EFAULT in pid:1200 [ 761.861243][T25988] usb usb7: usbfs: process 25988 (syz.6.8476) did not claim interface 0 before use [ 762.404003][T25997] netlink: 9 bytes leftover after parsing attributes in process `syz.5.8479'. [ 762.413305][T25997] 0ªî{X¹¦: entered promiscuous mode [ 762.418678][T25997] 0ªî{X¹¦: left allmulticast mode [ 763.024179][T26016] 9pnet_fd: Insufficient options for proto=fd [ 763.870005][T26056] overlayfs: failed to clone upperpath [ 764.660084][T26074] netlink: 104 bytes leftover after parsing attributes in process `syz.8.8509'. [ 766.291057][T21261] usb 4-1: USB disconnect, device number 11 [ 766.305060][T21261] usblp0: removed [ 766.788529][ T36] kauditd_printk_skb: 715 callbacks suppressed [ 766.788560][ T36] audit: type=1400 audit(2000000046.421:84009): avc: denied { read write } for pid=26136 comm="syz.3.8529" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 766.818569][ T36] audit: type=1400 audit(2000000046.421:84010): avc: denied { read write open } for pid=26136 comm="syz.3.8529" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 766.843247][ T36] audit: type=1400 audit(2000000046.421:84011): avc: denied { ioctl } for pid=26136 comm="syz.3.8529" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 767.172224][ T36] audit: type=1400 audit(2000000046.778:84012): avc: denied { execmem } for pid=26140 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 767.214511][T21259] usb 9-1: USB disconnect, device number 23 [ 767.311874][ T36] audit: type=1400 audit(2000000046.909:84013): avc: denied { read } for pid=26141 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 767.343876][ T36] audit: type=1400 audit(2000000046.937:84014): avc: denied { read open } for pid=26141 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 767.369452][ T36] audit: type=1400 audit(2000000046.937:84015): avc: denied { mounton } for pid=26141 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 767.403073][ T36] audit: type=1400 audit(2000000046.937:84016): avc: denied { sys_module } for pid=26141 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 767.426499][ T36] audit: type=1400 audit(2000000046.937:84017): avc: denied { sys_module } for pid=26141 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 767.436469][T26143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8532'. [ 767.449207][ T36] audit: type=1400 audit(2000000046.937:84018): avc: denied { sys_module } for pid=26141 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 767.499076][T26141] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.506161][T26141] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.513303][T26141] bridge_slave_0: entered allmulticast mode [ 767.519741][T26141] bridge_slave_0: entered promiscuous mode [ 767.527406][T26141] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.534516][T26141] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.541710][T26141] bridge_slave_1: entered allmulticast mode [ 767.548193][T26141] bridge_slave_1: entered promiscuous mode [ 767.637558][T26150] 9pnet_fd: Insufficient options for proto=fd [ 767.740159][T19670] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.747268][T19670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 767.761542][T12359] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.768671][T12359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 767.894046][T26141] veth0_vlan: entered promiscuous mode [ 767.932179][T26141] veth1_macvtap: entered promiscuous mode [ 768.201000][ T31] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 768.360748][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 768.368964][ T31] usb 4-1: config 0 has an invalid interface number: 8 but max is 2 [ 768.382036][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.392181][ T31] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 768.402027][ T31] usb 4-1: config 0 has no interface number 0 [ 768.408768][ T31] usb 4-1: config 0 interface 8 altsetting 2 endpoint 0x2 has an invalid bInterval 108, changing to 7 [ 768.419975][ T31] usb 4-1: config 0 interface 8 altsetting 2 endpoint 0x2 has invalid maxpacket 42565, setting to 1024 [ 768.431259][ T31] usb 4-1: config 0 interface 8 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 768.444307][ T31] usb 4-1: config 0 interface 8 has no altsetting 0 [ 768.454043][ T31] usb 4-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice=4d.ff [ 768.463812][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.472426][ T31] usb 4-1: Product: syz [ 768.476591][ T31] usb 4-1: Manufacturer: syz [ 768.481223][ T31] usb 4-1: SerialNumber: syz [ 768.487401][ T31] usb 4-1: config 0 descriptor?? [ 768.720137][ T31] usb 4-1: USB disconnect, device number 12 [ 769.300781][T26193] binder: Unknown parameter ')tªœ1Ý~?¶ÜS [ 769.300781][T26193] 5à5Ø—' [ 769.622479][T12359] bridge_slave_1: left allmulticast mode [ 769.628242][T12359] bridge_slave_1: left promiscuous mode [ 769.634059][T12359] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.641953][T12359] bridge_slave_0: left allmulticast mode [ 769.647900][T12359] bridge_slave_0: left promiscuous mode [ 769.653656][T12359] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.795313][T12359] veth1_macvtap: left promiscuous mode [ 769.803699][T12359] veth0_vlan: left promiscuous mode [ 770.014661][T26212] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.021792][T26212] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.045338][T26212] bridge_slave_0: entered allmulticast mode [ 770.051793][T26212] bridge_slave_0: entered promiscuous mode [ 770.074173][T26212] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.081429][T26212] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.089193][T26212] bridge_slave_1: entered allmulticast mode [ 770.095793][T26212] bridge_slave_1: entered promiscuous mode [ 770.263177][T26212] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.270300][T26212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 770.277622][T26212] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.284718][T26212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 770.337269][T12359] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.344714][T12359] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.352671][ T10] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 770.363283][T19670] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.370338][T19670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 770.382376][T12359] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.389467][T12359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 770.476174][T26212] veth0_vlan: entered promiscuous mode [ 770.524317][T26212] veth1_macvtap: entered promiscuous mode [ 770.531962][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 770.556548][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 770.586968][ T10] usb 9-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 770.596058][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.622902][ T10] usb 9-1: config 0 descriptor?? [ 770.629385][T26217] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 770.662071][ T10] usbhid 9-1:0.0: can't add hid device: -22 [ 770.670169][ T10] usbhid 9-1:0.0: probe with driver usbhid failed with error -22 [ 770.888730][T21260] usb 9-1: USB disconnect, device number 24 [ 770.981110][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 771.141695][ T10] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 771.170933][ T10] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 771.180127][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.188202][ T10] usb 4-1: Product: syz [ 771.192406][ T10] usb 4-1: Manufacturer: syz [ 771.197088][ T10] usb 4-1: SerialNumber: syz [ 771.203298][ T10] usb 4-1: config 0 descriptor?? [ 771.212502][ T10] usb 4-1: Waiting for MOTU Microbook II to boot up... [ 771.219424][ T10] usb 4-1: failed setting the sample rate for Motu MicroBook II: -22 [ 771.228111][ T10] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 771.927601][ T458] usb 4-1: USB disconnect, device number 13 [ 772.389915][ T36] kauditd_printk_skb: 530 callbacks suppressed [ 772.389934][ T36] audit: type=1400 audit(2000000051.678:84549): avc: denied { read write } for pid=26141 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 772.422065][ T36] audit: type=1400 audit(2000000051.678:84550): avc: denied { read write open } for pid=26141 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 772.468841][ T36] audit: type=1400 audit(2000000051.678:84551): avc: denied { ioctl } for pid=26141 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 772.511058][ T36] audit: type=1400 audit(2000000051.735:84552): avc: denied { write } for pid=26251 comm="syz.8.8563" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 772.535539][ T36] audit: type=1400 audit(2000000051.735:84553): avc: denied { write } for pid=26251 comm="syz.8.8563" path="/dev/bus/usb/009/001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 772.605442][ T36] audit: type=1400 audit(2000000051.744:84554): avc: denied { create } for pid=26251 comm="syz.8.8563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 772.667810][ T36] audit: type=1400 audit(2000000051.744:84555): avc: denied { create } for pid=26251 comm="syz.8.8563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 772.727973][ T36] audit: type=1400 audit(2000000051.744:84556): avc: denied { write } for pid=26251 comm="syz.8.8563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 772.781292][ T36] audit: type=1400 audit(2000000051.744:84557): avc: denied { read } for pid=26251 comm="syz.8.8563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 772.834480][ T36] audit: type=1400 audit(2000000051.744:84558): avc: denied { read } for pid=26251 comm="syz.8.8563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 772.873669][T26267] rust_binder: Error while translating object. [ 772.873709][T26267] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 772.880004][T26267] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:6 [ 773.140630][T26283] rust_binder: Error while translating object. [ 773.153694][T26278] virtiofs: Unknown parameter 'always' [ 773.164742][T26283] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 773.165433][T26283] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:28 [ 773.196967][T26283] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 773.291257][T26275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26275 comm=syz.5.8571 [ 773.521079][T26295] netlink: 9 bytes leftover after parsing attributes in process `syz.6.8576'. [ 773.537383][T26295] gretap0: entered promiscuous mode [ 773.552408][T26295] netlink: 5 bytes leftover after parsing attributes in process `syz.6.8576'. [ 773.561499][T26295] 0ªî{X¹¦: renamed from gretap0 [ 773.567426][T26295] 0ªî{X¹¦: left promiscuous mode [ 773.574215][T26295] 0ªî{X¹¦: entered allmulticast mode [ 773.581055][T26295] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 773.654670][ T10] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 773.803810][ T10] usb 9-1: device descriptor read/64, error -71 [ 774.059471][ T10] usb 9-1: device descriptor read/64, error -71 [ 774.261459][T26307] binder: Unknown parameter '' [ 774.325735][ T10] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 774.337722][T26310] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 774.337754][T26310] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25 [ 774.453990][T26314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 774.474867][ T10] usb 9-1: device descriptor read/64, error -71 [ 774.489832][T26314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 774.490170][T26314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 774.503094][T26316] rust_binder: inc_ref_done called when no active inc_refs [ 774.510772][T26314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 774.519702][T26314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 774.526607][T26314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 774.534762][T26314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 774.542493][T26314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 774.549362][T26314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 774.557671][T26314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 774.565359][T26314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 774.573086][T26314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 774.579942][T26314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 774.588500][T26314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 774.596186][T26314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 774.603090][T26314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 774.609935][T26314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 774.617820][T26314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 774.626079][T26314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 774.633161][T26314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 774.641376][T26314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 774.649274][T26314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 774.657077][T26314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 774.663997][T26314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 774.672118][T26314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 774.679852][T26314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 774.686759][T26314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 774.694933][T26314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 774.702596][T26314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 774.710319][T26314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 774.717183][T26314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 774.725788][T26314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 774.773141][ T10] usb 9-1: device descriptor read/64, error -71 [ 774.901563][ T10] usb usb9-port1: attempt power cycle [ 775.039467][T21262] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 775.199284][T21262] usb 4-1: Using ep0 maxpacket: 16 [ 775.208565][T21262] usb 4-1: config 0 interface 0 has no altsetting 0 [ 775.216717][T21262] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 775.226559][T21262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.242003][T21262] usb 4-1: config 0 descriptor?? [ 775.263232][ T10] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 775.303956][ T10] usb 9-1: device descriptor read/8, error -71 [ 775.447726][ T10] usb 9-1: device descriptor read/8, error -71 [ 775.685134][T21262] hid (null): report_id 54409 is invalid [ 775.691056][T21262] hid (null): report_id 1880715515 is invalid [ 775.697234][T21262] hid (null): unknown global tag 0xd [ 775.703831][T21262] hid (null): global environment stack overflow [ 775.710123][T21262] hid (null): unknown global tag 0x7f [ 775.716520][ T10] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 775.756270][ T10] usb 9-1: device descriptor read/8, error -71 [ 775.904326][ T458] usb 4-1: USB disconnect, device number 14 [ 775.925570][ T10] usb 9-1: device descriptor read/8, error -71 [ 776.041064][ T10] usb usb9-port1: unable to enumerate USB device [ 776.609038][T26329] __vm_enough_memory: pid: 26329, comm: syz.8.8586, bytes: 18014402804453376 not enough memory for the allocation [ 776.779013][T26338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 776.780276][T26337] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 776.789775][T26338] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:42 [ 777.170377][ T458] usb 9-1: new full-speed USB device number 29 using dummy_hcd [ 777.365939][ T458] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 777.377474][ T458] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 777.391767][ T458] usb 9-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 777.401858][ T458] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.412963][ T458] usb 9-1: config 0 descriptor?? [ 777.425103][T26341] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 777.437792][ T458] usbhid 9-1:0.0: can't add hid device: -22 [ 777.452076][ T458] usbhid 9-1:0.0: probe with driver usbhid failed with error -22 [ 777.665416][T26341] usb usb7: usbfs: process 26341 (syz.8.8591) did not claim interface 0 before use [ 777.677625][ T458] usb 9-1: USB disconnect, device number 29 [ 777.719412][T26356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8597'. [ 777.720840][T26354] rust_binder: Failed copying into alloc: EFAULT [ 777.730301][ T36] kauditd_printk_skb: 541 callbacks suppressed [ 777.730321][ T36] audit: type=1400 audit(2000000056.691:85100): avc: denied { ioctl } for pid=26355 comm="syz.3.8597" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 777.740400][T26356] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 777.768089][T26354] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 777.780962][T26356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:36 [ 777.782067][ T36] audit: type=1400 audit(2000000056.691:85101): avc: denied { set_context_mgr } for pid=26355 comm="syz.3.8597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 777.819602][T26354] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 777.819642][T26354] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1243 [ 777.829242][ T36] audit: type=1400 audit(2000000056.691:85102): avc: denied { map } for pid=26355 comm="syz.3.8597" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 777.917946][ T36] audit: type=1400 audit(2000000056.691:85103): avc: denied { read } for pid=26355 comm="syz.3.8597" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 777.974468][ T36] audit: type=1400 audit(2000000056.691:85104): avc: denied { read } for pid=26355 comm="syz.3.8597" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 778.007553][ T36] audit: type=1400 audit(2000000056.691:85105): avc: denied { read open } for pid=26355 comm="syz.3.8597" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 778.032422][ T36] audit: type=1400 audit(2000000056.691:85106): avc: denied { ioctl } for pid=26355 comm="syz.3.8597" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 778.058370][ T36] audit: type=1400 audit(2000000056.691:85107): avc: denied { call } for pid=26355 comm="syz.3.8597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 778.083325][ T36] audit: type=1400 audit(2000000056.700:85108): avc: denied { create } for pid=26355 comm="syz.3.8597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 778.105222][ T36] audit: type=1400 audit(2000000056.700:85109): avc: denied { ioctl } for pid=26355 comm="syz.3.8597" path="socket:[114182]" dev="sockfs" ino=114182 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 778.138804][T26369] 9pnet_fd: Insufficient options for proto=fd [ 778.179093][T26373] cgroup: Setting release_agent not allowed [ 778.215706][T26376] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 778.218314][T26376] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 778.608742][ T10] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 778.624455][T21262] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 778.789859][T21262] usb 4-1: Using ep0 maxpacket: 8 [ 778.797416][ T10] usb 9-1: config 1 has an invalid interface number: 253 but max is 1 [ 778.806200][T21262] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 778.814791][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 778.824914][T21262] usb 4-1: config 179 has no interface number 0 [ 778.831196][T21262] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 778.842483][ T10] usb 9-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 778.851472][ T10] usb 9-1: config 1 has no interface number 2 [ 778.857594][T21262] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 778.869062][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.879979][ T10] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 778.889767][T21262] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 778.899901][ T10] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 778.909684][T21262] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 778.923153][ T10] usb 9-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 778.936009][T21262] usb 4-1: config 179 interface 65 has no altsetting 0 [ 778.942905][T21262] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 778.951979][ T10] usb 9-1: config 1 interface 1 has no altsetting 0 [ 778.958650][T21262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.972245][ T10] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 778.985474][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.994292][ T10] usb 9-1: Product: syz [ 778.998491][ T10] usb 9-1: Manufacturer: syz [ 779.004140][ T10] usb 9-1: SerialNumber: syz [ 779.016387][ T10] cdc_ncm 9-1:1.253: CDC Union missing and no IAD found [ 779.034911][ T10] cdc_ncm 9-1:1.253: bind() failure [ 779.201244][T21260] usb 4-1: USB disconnect, device number 15 [ 779.480731][T26382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.489870][T26382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.725999][T26382] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 779.734039][T26382] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 779.742562][T26382] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 779.750572][T26382] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 779.910395][T21260] usb 9-1: USB disconnect, device number 30 [ 780.236701][T26422] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:54 [ 780.803597][T21260] usb 9-1: new full-speed USB device number 31 using dummy_hcd [ 780.952734][T21260] usb 9-1: device descriptor read/64, error -71 [ 781.023634][T26436] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8626'. [ 781.088439][T26439] netlink: 'syz.3.8627': attribute type 12 has an invalid length. [ 781.106029][T26439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26439 comm=syz.3.8627 [ 781.229767][T21260] usb 9-1: device descriptor read/64, error -71 [ 781.506789][T21260] usb 9-1: new full-speed USB device number 32 using dummy_hcd [ 781.645308][T21260] usb 9-1: device descriptor read/64, error -71 [ 781.900995][T21260] usb 9-1: device descriptor read/64, error -71 [ 782.018274][T21260] usb usb9-port1: attempt power cycle [ 782.348481][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 782.380457][T21260] usb 9-1: new full-speed USB device number 33 using dummy_hcd [ 782.404225][T21260] usb 9-1: device descriptor read/8, error -71 [ 782.510636][ T10] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 782.524488][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 782.533677][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.541721][ T10] usb 4-1: Product: syz [ 782.545947][ T10] usb 4-1: Manufacturer: syz [ 782.550557][ T10] usb 4-1: SerialNumber: syz [ 782.554209][T21260] usb 9-1: device descriptor read/8, error -71 [ 782.779491][T26454] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 782.817536][T21260] usb 9-1: new full-speed USB device number 34 using dummy_hcd [ 782.841471][T21260] usb 9-1: device descriptor read/8, error -71 [ 782.979785][T21260] usb 9-1: device descriptor read/8, error -71 [ 783.003210][ T10] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 783.009317][ T10] cdc_ncm 4-1:1.0: bind() failure [ 783.015340][ T10] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 783.022186][ T10] cdc_ncm 4-1:1.1: bind() failure [ 783.094381][T21260] usb usb9-port1: unable to enumerate USB device [ 783.095005][ T36] kauditd_printk_skb: 451 callbacks suppressed [ 783.095024][ T36] audit: type=1400 audit(2000000061.731:85561): avc: denied { ioctl } for pid=26431 comm="syz.8.8625" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 783.377039][ T36] audit: type=1400 audit(2000000061.994:85562): avc: denied { ioctl } for pid=26453 comm="syz.3.8632" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 783.742908][ T36] audit: type=1400 audit(2000000062.332:85563): avc: denied { read write } for pid=26141 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 783.787232][T21263] usb 4-1: USB disconnect, device number 16 [ 783.831617][ T36] audit: type=1400 audit(2000000062.332:85564): avc: denied { read write open } for pid=26141 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 783.926919][ T36] audit: type=1400 audit(2000000062.332:85565): avc: denied { ioctl } for pid=26141 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 784.005474][ T36] audit: type=1400 audit(2000000062.369:85566): avc: denied { read } for pid=26461 comm="syz.8.8634" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 784.006638][T26469] 9pnet_fd: p9_fd_create_tcp (26469): problem connecting socket to 127.0.0.1 [ 784.029566][ T36] audit: type=1400 audit(2000000062.369:85567): avc: denied { read open } for pid=26461 comm="syz.8.8634" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 784.093847][ T36] audit: type=1400 audit(2000000062.379:85568): avc: denied { block_suspend } for pid=26461 comm="syz.8.8634" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 784.118354][ T36] audit: type=1400 audit(2000000062.379:85569): avc: denied { ioctl } for pid=26461 comm="syz.8.8634" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 784.143948][ T36] audit: type=1400 audit(2000000062.397:85570): avc: denied { read write } for pid=26212 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 784.319596][T21263] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 784.341848][T26472] fuse: Unknown parameter '184467440737095516150x0000000000000003' [ 784.375543][T26472] overlayfs: failed to clone upperpath [ 784.511380][T21263] usb 9-1: Using ep0 maxpacket: 16 [ 784.535755][T21263] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 784.548811][T21263] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 784.572998][T21263] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 784.589046][T21263] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.649836][T21263] usb 9-1: Product: syz [ 784.654062][T21263] usb 9-1: Manufacturer: syz [ 784.658706][T21263] usb 9-1: SerialNumber: syz [ 784.740436][T26484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=26484 comm=syz.5.8641 [ 784.792843][T26484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=26484 comm=syz.5.8641 [ 784.820760][T26484] netlink: 'syz.5.8641': attribute type 27 has an invalid length. [ 784.820914][T26486] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 784.868638][T26489] netlink: 'syz.5.8641': attribute type 11 has an invalid length. [ 784.884567][T26489] netlink: 'syz.5.8641': attribute type 2 has an invalid length. [ 784.948938][T21263] usb 9-1: 0:2 : does not exist [ 784.995586][T21263] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 785.046584][T21263] usb 9-1: USB disconnect, device number 35 [ 785.496781][T23851] udevd[23851]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 785.586741][T26512] /dev/nbd3: Can't lookup blockdev [ 785.742487][T26518] ip6gretap0: mtu less than device minimum [ 785.995052][T26528] netlink: 9 bytes leftover after parsing attributes in process `syz.6.8656'. [ 786.011307][T26528] z00ªX¹¦: renamed from 30ªî{X¹¦ (while UP) [ 786.220485][T26544] rust_binder: Error while translating object. [ 786.220540][T26544] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 786.240384][T26544] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1274 [ 786.306617][T26553] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:95 [ 786.461138][T21262] usb 9-1: new full-speed USB device number 36 using dummy_hcd [ 786.546392][ T458] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 786.633178][T21262] usb 9-1: not running at top speed; connect to a high speed hub [ 786.643096][T21262] usb 9-1: config 1 has an invalid descriptor of length 225, skipping remainder of the config [ 786.653404][T21262] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 786.662287][T21262] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 786.678530][T21262] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 786.684882][ T458] usb 4-1: device descriptor read/64, error -71 [ 786.687617][T21262] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.703497][T21262] usb 9-1: Product: á° [ 786.709422][T21262] usb 9-1: Manufacturer: í†âŒ¿å¸å„…켄䈧您톅෶䪀Ǟ忡螨뮬膃퇹햤æ¯ã­’氘韂輚ꆭç“뿒埡慺묞땃彳᳂ä â §áºµé¥¶ê«¹é‡¾î•ªà¬  [ 786.726326][T21262] usb 9-1: SerialNumber: é«ì­ ä­€í˜¼é¹»ï­†å«é¬¸ïŸçœˆì••ìƒ›ïºï½•ç—±å¿Žâ·ƒå‚±î‡³ãš¤æŠ´âµ‚韭â½ç¼ê€“﮷祀ⶑ〰ë„讅竔ペ䒔㩗豺îšé¹¿î°íŠ¤é³¢å³‡ê‘•æ—¥ã±æ“™ï™œç‡©è®µâ˜îŸ©í‘®á€‹ä¡šâ´ë´’렦熃銵勱ꩅﲣë˜ä™ë›Žèƒ¤ï«­ì±­êŸ®å½¾êµ§é©‹ç¡—è®â‰Šá ­î»¡é­•ë’©å¥¸ê”ꋆ逜있ܴì’퓜벎 [ 786.741419][T26557] 9pnet_fd: Insufficient options for proto=fd [ 786.951247][ T458] usb 4-1: device descriptor read/64, error -71 [ 786.976256][T21262] cdc_ncm 9-1:1.0: invalid descriptor buffer length [ 786.982931][T21262] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 786.989786][T21262] cdc_ncm 9-1:1.0: bind() failure [ 787.191526][T21259] usb 9-1: USB disconnect, device number 36 [ 787.208032][ T458] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 787.356117][ T458] usb 4-1: device descriptor read/64, error -71 [ 787.611840][ T458] usb 4-1: device descriptor read/64, error -71 [ 787.729140][ T458] usb usb4-port1: attempt power cycle [ 787.745042][T26564] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 787.777916][T26566] input: syz1 as /devices/virtual/input/input72 [ 788.091270][ T458] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 788.101945][T21262] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 788.114683][ T458] usb 4-1: device descriptor read/8, error -71 [ 788.253123][ T458] usb 4-1: device descriptor read/8, error -71 [ 788.285205][T21262] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 788.296221][T21262] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.307992][T21262] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.317768][T21262] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 788.332117][T21262] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 788.341263][T21262] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 788.349406][T21262] usb 9-1: Manufacturer: syz [ 788.355681][T21262] usb 9-1: config 0 descriptor?? [ 788.443655][ T36] kauditd_printk_skb: 426 callbacks suppressed [ 788.443676][ T36] audit: type=1400 audit(2000000066.752:85997): avc: denied { ioctl } for pid=26549 comm="syz.3.8664" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 788.506801][ T458] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 788.528940][ T36] audit: type=1400 audit(2000000066.827:85998): avc: denied { ioctl } for pid=26549 comm="syz.3.8664" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 788.531173][ T458] usb 4-1: device descriptor read/8, error -71 [ 788.554326][ T36] audit: type=1400 audit(2000000066.827:85999): avc: denied { ioctl } for pid=26549 comm="syz.3.8664" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 788.585587][ T36] audit: type=1400 audit(2000000066.827:86000): avc: denied { ioctl } for pid=26549 comm="syz.3.8664" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 788.591913][T21262] appleir 0003:05AC:8243.0029: unknown main item tag 0x0 [ 788.611358][ T36] audit: type=1400 audit(2000000066.827:86001): avc: denied { ioctl } for pid=26549 comm="syz.3.8664" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 788.618233][T21262] appleir 0003:05AC:8243.0029: No inputs registered, leaving [ 788.644864][ T36] audit: type=1400 audit(2000000066.827:86002): avc: denied { ioctl } for pid=26549 comm="syz.3.8664" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 788.655448][T21262] appleir 0003:05AC:8243.0029: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 788.676151][ T36] audit: type=1400 audit(2000000066.865:86003): avc: denied { ioctl } for pid=26549 comm="syz.3.8664" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 788.713250][ T36] audit: type=1400 audit(2000000066.884:86004): avc: denied { ioctl } for pid=26570 comm="syz.8.8670" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 788.741675][ T36] audit: type=1400 audit(2000000066.884:86005): avc: denied { ioctl } for pid=26570 comm="syz.8.8670" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 788.741749][ T458] usb 4-1: device descriptor read/8, error -71 [ 788.794523][ T36] audit: type=1400 audit(2000000066.884:86006): avc: denied { ioctl } for pid=26570 comm="syz.8.8670" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 788.861295][T26579] 9pnet_fd: Insufficient options for proto=fd [ 788.907263][T26581] /dev/loop0: Can't lookup blockdev [ 788.943725][ T458] usb usb4-port1: unable to enumerate USB device [ 788.979977][T21262] usb 9-1: USB disconnect, device number 37 [ 789.348540][T21262] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 789.522409][T21262] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 789.548953][T21262] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 789.572812][T21262] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 789.593789][T21262] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 789.609601][T21262] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.620091][T21262] usb 9-1: config 0 descriptor?? [ 789.934518][ T31] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 790.062045][T21262] plantronics 0003:047F:FFFF.002A: invalid report_count -1222977125 [ 790.070485][T21262] plantronics 0003:047F:FFFF.002A: item 0 4 1 9 parsing failed [ 790.079150][T21262] plantronics 0003:047F:FFFF.002A: parse failed [ 790.090300][T21262] plantronics 0003:047F:FFFF.002A: probe with driver plantronics failed with error -22 [ 790.107574][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 790.123164][ T31] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 790.138575][T26608] overlayfs: failed to clone upperpath [ 790.147572][ T31] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 790.151729][T26608] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8682'. [ 790.166091][ T31] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 790.182315][ T31] usb 4-1: config 1 interface 0 has no altsetting 0 [ 790.193597][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 790.202791][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.211513][ T31] usb 4-1: Product: syz [ 790.217129][ T31] usb 4-1: Manufacturer: syz [ 790.221781][ T31] usb 4-1: SerialNumber: syz [ 790.461420][ T31] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 790.477956][ T31] usb 4-1: USB disconnect, device number 21 [ 790.490361][ T31] usblp0: removed [ 790.829474][T21260] usb 9-1: USB disconnect, device number 38 [ 790.847485][T26621] netlink: 'syz.5.8686': attribute type 6 has an invalid length. [ 790.925509][ T31] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 791.063906][ T31] usb 4-1: device descriptor read/64, error -71 [ 791.234371][T21260] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 791.319595][ T31] usb 4-1: device descriptor read/64, error -71 [ 791.372869][T21260] usb 9-1: device descriptor read/64, error -71 [ 791.575306][ T31] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 791.628571][T21260] usb 9-1: device descriptor read/64, error -71 [ 791.713891][ T31] usb 4-1: device descriptor read/64, error -71 [ 791.884297][T21260] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 791.969541][ T31] usb 4-1: device descriptor read/64, error -71 [ 792.022793][T21260] usb 9-1: device descriptor read/64, error -71 [ 792.086900][ T31] usb usb4-port1: attempt power cycle [ 792.278525][T21260] usb 9-1: device descriptor read/64, error -71 [ 792.395870][T21260] usb usb9-port1: attempt power cycle [ 792.450109][ T31] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 792.472715][ T31] usb 4-1: device descriptor read/8, error -71 [ 792.611745][ T31] usb 4-1: device descriptor read/8, error -71 [ 792.758060][T21260] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 792.806789][T21260] usb 9-1: device descriptor read/8, error -71 [ 792.952731][T21260] usb 9-1: device descriptor read/8, error -71 [ 793.085944][T26654] rust_binder: 1288: no such ref 0 [ 793.088276][ T31] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 793.091304][T26654] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 793.106367][T26654] rust_binder: 1288: no such ref 2 [ 793.113660][T26654] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 793.120868][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 793.141705][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 793.155229][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 793.176516][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 793.187823][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.196741][ T31] usb 4-1: Product: syz [ 793.201110][ T31] usb 4-1: Manufacturer: syz [ 793.205882][T21260] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 793.213710][ T31] usb 4-1: SerialNumber: syz [ 793.242140][T21260] usb 9-1: device descriptor read/8, error -71 [ 793.389778][T21260] usb 9-1: device descriptor read/8, error -71 [ 793.441037][ T31] usb 4-1: 0:2 : does not exist [ 793.455390][ T31] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 793.472069][ T31] usb 4-1: USB disconnect, device number 25 [ 793.503892][T21260] usb usb9-port1: unable to enumerate USB device [ 793.538531][T23851] udevd[23851]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 793.996594][ T36] kauditd_printk_skb: 351 callbacks suppressed [ 793.996613][ T36] audit: type=1400 audit(2000000071.961:86358): avc: denied { read write } for pid=26212 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 794.028286][ T36] audit: type=1400 audit(2000000071.961:86359): avc: denied { read write open } for pid=26212 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 794.030432][T26675] SELinux: policydb string length 1836477231 does not match expected length 8 [ 794.054694][ T36] audit: type=1400 audit(2000000071.961:86360): avc: denied { ioctl } for pid=26212 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 794.062733][T26675] SELinux: failed to load policy [ 794.089686][ T36] audit: type=1400 audit(2000000071.980:86361): avc: denied { create } for pid=26674 comm="syz.3.8706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 794.102735][T26676] rust_binder: Error while translating object. [ 794.113180][T26676] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 794.119430][T26676] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:105 [ 794.131330][ T36] audit: type=1400 audit(2000000071.980:86362): avc: denied { setopt } for pid=26674 comm="syz.3.8706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 794.191570][T26679] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8707'. [ 794.225923][ T36] audit: type=1400 audit(2000000071.990:86363): avc: denied { read append } for pid=26674 comm="syz.3.8706" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 794.271799][ T36] audit: type=1400 audit(2000000071.990:86364): avc: denied { read open } for pid=26674 comm="syz.3.8706" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 794.301347][ T36] audit: type=1400 audit(2000000071.990:86365): avc: denied { ioctl } for pid=26674 comm="syz.3.8706" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 794.327120][ T36] audit: type=1400 audit(2000000071.990:86366): avc: denied { load_policy } for pid=26674 comm="syz.3.8706" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 794.350093][ T36] audit: type=1400 audit(2000000072.055:86367): avc: denied { read } for pid=26674 comm="syz.3.8706" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 794.543332][T26704] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 794.770009][T26711] rust_binder: Error in use_page_slow: ESRCH [ 794.776604][T26711] rust_binder: use_range failure ESRCH [ 794.782656][T26711] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 794.788235][T26711] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 794.799813][T26711] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:115 [ 795.069268][T26728] netlink: 'syz.3.8722': attribute type 27 has an invalid length. [ 795.096640][T26728] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.103868][T26728] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.182842][T26731] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 795.255655][T26733] random: crng reseeded on system resumption [ 795.398949][ T31] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 795.603749][ T31] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 795.612084][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.633278][ T31] usb 4-1: config 0 has no interface number 0 [ 795.648506][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 795.658764][ T31] usb 4-1: New USB device strings: Mfr=1, Product=26, SerialNumber=3 [ 795.669155][ T31] usb 4-1: Product: syz [ 795.674054][ T31] usb 4-1: Manufacturer: syz [ 795.679956][ T31] usb 4-1: SerialNumber: syz [ 795.687703][ T31] usb 4-1: config 0 descriptor?? [ 795.693519][T26741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 795.793334][T26743] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 795.805829][T26743] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 795.812416][T26743] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 795.821324][T26743] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:122 [ 795.868998][T26745] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 795.879998][T26745] rust_binder: Error while translating object. [ 795.886481][T26745] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 795.893213][T26745] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:124 [ 795.918787][T26728] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 795.928118][T26728] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 795.936216][T26728] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:121 [ 795.948117][ T31] usb 4-1: USB disconnect, device number 26 [ 796.130984][T26760] overlayfs: failed to resolve '/000005': -2 [ 796.141418][T26760] overlayfs: failed to resolve '/00005': -2 [ 796.278413][T26772] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8738'. [ 796.287800][T26771] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8738'. [ 796.357089][T26776] overlayfs: failed to clone upperpath [ 796.428032][ T31] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 796.619065][ T31] usb 9-1: Using ep0 maxpacket: 16 [ 796.626845][ T31] usb 9-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 796.636797][ T31] usb 9-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 796.646772][ T31] usb 9-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 796.659762][ T31] usb 9-1: config 1 interface 0 has no altsetting 0 [ 796.669725][ T31] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 796.678845][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.686923][ T31] usb 9-1: Product: syz [ 796.691103][ T31] usb 9-1: Manufacturer: syz [ 796.695730][ T31] usb 9-1: SerialNumber: syz [ 796.922027][ T31] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 797.052300][T26787] netlink: 'syz.5.8745': attribute type 4 has an invalid length. [ 797.060083][T26787] netlink: 3549 bytes leftover after parsing attributes in process `syz.5.8745'. [ 797.614395][T26808] rust_binder: Error in use_page_slow: ESRCH [ 797.614413][T26808] rust_binder: use_range failure ESRCH [ 797.620461][T26808] rust_binder: Failed to allocate buffer. len:72, is_oneway:true [ 797.625934][T26808] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 797.633697][T26808] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:140 [ 797.646335][T26809] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 797.923982][T21260] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 798.093755][T21260] usb 4-1: Using ep0 maxpacket: 8 [ 798.101363][T21260] usb 4-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 798.111655][T21260] usb 4-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 798.124688][T21260] usb 4-1: config 0 interface 0 has no altsetting 0 [ 798.131415][T21260] usb 4-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 798.140506][T21260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.152279][T21260] usb 4-1: config 0 descriptor?? [ 798.168860][T21260] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 798.276276][T26817] incfs: Can't find or create .index dir in ./bus [ 798.282751][T26817] incfs: mount failed -1 [ 798.289217][T26817] incfs: Can't find or create .index dir in ./bus [ 798.295749][T26817] incfs: mount failed -1 [ 799.122401][ T10] usb 4-1: USB disconnect, device number 27 [ 799.366808][T21262] usb 9-1: USB disconnect, device number 43 [ 799.378628][T26764] usblp0: removed [ 799.396307][ T36] kauditd_printk_skb: 532 callbacks suppressed [ 799.396326][ T36] audit: type=1400 audit(2000000337.042:86900): avc: denied { read write } for pid=26141 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 799.439432][ T36] audit: type=1400 audit(2000000337.042:86901): avc: denied { read write open } for pid=26141 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 799.478992][ T36] audit: type=1400 audit(2000000337.042:86902): avc: denied { ioctl } for pid=26141 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 799.519106][ T36] audit: type=1400 audit(2000000337.070:86903): avc: denied { read } for pid=26842 comm="syz.8.8765" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 799.542593][ T36] audit: type=1400 audit(2000000337.070:86904): avc: denied { read open } for pid=26842 comm="syz.8.8765" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 799.567257][ T36] audit: type=1400 audit(2000000337.070:86905): avc: denied { ioctl } for pid=26842 comm="syz.8.8765" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 799.621579][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 799.636624][ T36] audit: type=1400 audit(2000000337.117:86906): avc: denied { ioctl } for pid=26840 comm="syz.3.8764" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 799.663301][ T36] audit: type=1400 audit(2000000337.202:86907): avc: denied { ioctl } for pid=26840 comm="syz.3.8764" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 799.739219][T26850] rust_binder: Failed copying into alloc: EFAULT [ 799.739247][T26850] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 799.745607][ T36] audit: type=1400 audit(2000000337.221:86908): avc: denied { read write } for pid=26141 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 799.745649][ T36] audit: type=1400 audit(2000000337.221:86909): avc: denied { read write open } for pid=26141 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 799.805103][T26850] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 799.805138][T26850] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1297 [ 799.859696][ T10] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 799.911039][ T10] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 799.928775][ T10] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 799.953013][ T10] usb 4-1: config 220 has no interface number 2 [ 799.959366][ T10] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 799.985811][ T10] usb 4-1: config 220 interface 0 has no altsetting 0 [ 799.992641][ T10] usb 4-1: config 220 interface 76 has no altsetting 0 [ 800.019435][ T10] usb 4-1: config 220 interface 1 has no altsetting 0 [ 800.034520][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 800.043736][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.051772][ T10] usb 4-1: Product: syz [ 800.056027][ T10] usb 4-1: Manufacturer: syz [ 800.060675][ T10] usb 4-1: SerialNumber: syz [ 800.215789][ T458] usb 9-1: new low-speed USB device number 44 using dummy_hcd [ 800.353705][ T458] usb 9-1: device descriptor read/64, error -71 [ 800.608867][ T458] usb 9-1: device descriptor read/64, error -71 [ 800.863059][ T458] usb 9-1: new low-speed USB device number 45 using dummy_hcd [ 800.972442][T26873] 9pnet_fd: Insufficient options for proto=fd [ 801.011543][ T458] usb 9-1: device descriptor read/64, error -71 [ 801.057516][T26875] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1304 [ 802.136405][ T458] usb 9-1: device descriptor read/64, error -71 [ 802.205121][T26909] binder: Unknown parameter 'ÿÿ' [ 802.284972][ T458] usb usb9-port1: attempt power cycle [ 802.419434][T26913] rust_binder: inc_ref_done called when no active inc_refs [ 802.474122][ T10] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 802.518072][ T10] usb 4-1: No valid video chain found. [ 802.524756][ T10] usb 4-1: selecting invalid altsetting 0 [ 802.560776][ T10] usb 4-1: USB disconnect, device number 28 [ 802.648312][ T458] usb 9-1: new low-speed USB device number 46 using dummy_hcd [ 802.680495][ T458] usb 9-1: device descriptor read/8, error -71 [ 802.798137][T26937] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=118 sclass=netlink_xfrm_socket pid=26937 comm=syz.3.8796 [ 802.818020][ T458] usb 9-1: device descriptor read/8, error -71 [ 803.112540][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 803.271723][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 803.281839][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.304289][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.324761][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 803.338419][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 803.348339][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.362980][ T10] usb 4-1: config 0 descriptor?? [ 803.808932][T26945] overlay: ./bus is not a directory [ 803.818175][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 803.828129][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 803.837842][ T10] usb 4-1: USB disconnect, device number 29 [ 804.040905][T26974] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 804.041836][T26974] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 804.049101][T26974] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 804.060462][T26974] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:149 [ 804.118995][T26978] binder: Unknown parameter 'contextÌðÔð[7’' [ 804.176817][T26980] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 804.177343][T26980] rust_binder: 153: no such ref 0 [ 804.188940][T26980] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 804.198687][T26980] rust_binder: 153: no such ref 2 [ 804.217550][T26980] rust_binder: Error while translating object. [ 804.217612][T26980] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 804.224925][T26980] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:153 [ 804.434266][T26999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 804.454067][T27002] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 804.461394][T26999] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 804.470165][T26999] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 804.489349][T26999] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:161 [ 804.592926][T27009] /dev/rnullb0: Can't open blockdev [ 804.627093][T27013] rust_binder: 1326: no such ref 0 [ 804.732018][ T36] kauditd_printk_skb: 565 callbacks suppressed [ 804.732038][ T36] audit: type=1400 audit(2000000342.075:87475): avc: denied { read write } for pid=26212 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 804.820997][ T36] audit: type=1400 audit(2000000342.103:87476): avc: denied { read write open } for pid=26212 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 804.868364][T27023] binder: Unknown parameter '' [ 804.916674][T27023] netlink: 'syz.3.8824': attribute type 12 has an invalid length. [ 804.939551][ T36] audit: type=1400 audit(2000000342.103:87477): avc: denied { ioctl } for pid=26212 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 805.016546][T27029] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 805.031743][ T36] audit: type=1400 audit(2000000342.112:87478): avc: denied { read write } for pid=26141 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 805.103357][ T36] audit: type=1400 audit(2000000342.112:87479): avc: denied { read write open } for pid=26141 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 805.145147][ T36] audit: type=1400 audit(2000000342.112:87480): avc: denied { ioctl } for pid=26141 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 805.197954][ T36] audit: type=1400 audit(2000000342.140:87481): avc: denied { create } for pid=27020 comm="syz.6.8823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 805.221476][ T36] audit: type=1400 audit(2000000342.140:87482): avc: denied { setopt } for pid=27020 comm="syz.6.8823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 805.253508][T27033] audit: audit_backlog=65 > audit_backlog_limit=64 [ 805.260178][T27033] audit: audit_lost=216 audit_rate_limit=0 audit_backlog_limit=64 [ 805.404991][T27037] binder: Unknown parameter 'fscontext?}' [ 805.532875][T27040] rust_binder: 1332: no such ref 0 [ 805.542636][T21262] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 805.732666][T21262] usb 9-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 805.745919][T21262] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.757789][T21262] usb 9-1: config 0 descriptor?? [ 805.818541][ T31] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 805.977754][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 805.988394][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.000597][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 806.014024][ T31] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 806.023795][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.034215][ T31] usb 4-1: config 0 descriptor?? [ 806.085986][T27058] fuse: Bad value for 'fd' [ 806.196730][T21262] ryos 0003:1E7D:3138.002B: item fetching failed at offset 1/5 [ 806.204702][T21262] ryos 0003:1E7D:3138.002B: parse failed [ 806.210408][T21262] ryos 0003:1E7D:3138.002B: probe with driver ryos failed with error -22 [ 806.487833][ T31] hid-rmi 0003:06CB:81A7.002C: unknown main item tag 0x3 [ 806.494939][ T31] hid-rmi 0003:06CB:81A7.002C: item fetching failed at offset 8/11 [ 806.504060][ T31] hid-rmi 0003:06CB:81A7.002C: parse failed [ 806.510074][ T31] hid-rmi 0003:06CB:81A7.002C: probe with driver hid-rmi failed with error -22 [ 806.718647][T21262] usb 4-1: USB disconnect, device number 30 [ 807.354433][T27075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8843'. [ 807.382242][T27075] netlink: 'syz.3.8843': attribute type 2 has an invalid length. [ 807.512511][T27079] 9pnet_fd: p9_fd_create_unix (27079): problem connecting socket: ./file0: -30 [ 807.699478][T27087] 9pnet: p9_errstr2errno: server reported unknown error [ 807.886307][T27094] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 807.886348][T27094] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:192 [ 808.036219][T27102] 9pnet_fd: p9_fd_create_unix (27102): problem connecting socket: ./file0: -30 [ 808.086585][T19670] bridge_slave_1: left allmulticast mode [ 808.095806][T19670] bridge_slave_1: left promiscuous mode [ 808.116175][T19670] +$<¶: port 2(bridge_slave_1) entered disabled state [ 808.143061][T19670] bridge_slave_0: left allmulticast mode [ 808.155402][T19670] bridge_slave_0: left promiscuous mode [ 808.165386][T19670] +$<¶: port 1(bridge_slave_0) entered disabled state [ 808.187175][T19670] tipc: Disabling bearer [ 808.265531][T21262] usb 9-1: USB disconnect, device number 48 [ 808.306801][T19670] tipc: Left network mode [ 808.768865][T21262] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 808.928969][T21262] usb 9-1: Using ep0 maxpacket: 32 [ 808.949289][T21262] usb 9-1: config 0 has an invalid interface number: 230 but max is 0 [ 808.957508][T21262] usb 9-1: config 0 has no interface number 0 [ 808.971532][T21262] usb 9-1: config 0 interface 230 has no altsetting 0 [ 808.992175][T21262] usb 9-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 809.009225][T21262] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.023545][T21262] usb 9-1: Product: syz [ 809.031323][T21262] usb 9-1: Manufacturer: syz [ 809.040637][T21262] usb 9-1: SerialNumber: syz [ 809.050426][T21262] usb 9-1: config 0 descriptor?? [ 809.072394][T21262] ums-usbat 9-1:0.230: USB Mass Storage device detected [ 809.087930][T21262] ums-usbat 9-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 809.320738][ T31] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 809.484975][T27159] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 809.490555][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 809.521982][ T31] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 809.530700][ T31] usb 4-1: config 0 has no interface number 0 [ 809.537095][ T31] usb 4-1: config 0 interface 230 has no altsetting 0 [ 809.550478][ T31] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 809.560281][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.568982][ T31] usb 4-1: Product: syz [ 809.573256][ T31] usb 4-1: Manufacturer: syz [ 809.578755][ T31] usb 4-1: SerialNumber: syz [ 809.585421][ T31] usb 4-1: config 0 descriptor?? [ 809.598693][ T31] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 809.608731][ T31] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 809.681955][T27164] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 809.686552][T27166] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 810.400482][ T36] kauditd_printk_skb: 579 callbacks suppressed [ 810.400498][ T36] audit: type=1400 audit(2000000347.408:88061): avc: denied { ioctl } for pid=27151 comm="syz.3.8874" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 810.489907][ T36] audit: type=1400 audit(2000000347.502:88062): avc: denied { create } for pid=27173 comm="syz.5.8879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 810.510198][ T36] audit: type=1400 audit(2000000347.502:88063): avc: denied { create } for pid=27173 comm="syz.5.8879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 810.530425][ T36] audit: type=1400 audit(2000000347.502:88064): avc: denied { write } for pid=27173 comm="syz.5.8879" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 810.550890][ T36] audit: type=1400 audit(2000000347.502:88065): avc: denied { create } for pid=27173 comm="syz.5.8879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 810.571622][ T36] audit: type=1400 audit(2000000347.511:88066): avc: denied { write } for pid=27173 comm="syz.5.8879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 810.592353][ T36] audit: type=1400 audit(2000000347.511:88067): avc: denied { read } for pid=27173 comm="syz.5.8879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 810.613608][ T36] audit: type=1400 audit(2000000347.511:88068): avc: denied { read } for pid=27173 comm="syz.5.8879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 810.634888][ T36] audit: type=1400 audit(2000000347.511:88069): avc: denied { ioctl } for pid=27173 comm="syz.5.8879" path="socket:[118149]" dev="sockfs" ino=118149 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 810.660718][ T36] audit: type=1400 audit(2000000347.577:88070): avc: denied { create } for pid=27178 comm="syz.5.8881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 810.908841][T27197] fuse: Unknown parameter '' [ 811.521013][T21262] ums-usbat 9-1:0.230: probe with driver ums-usbat failed with error -5 [ 811.536361][T21262] usb 9-1: USB disconnect, device number 49 [ 811.846808][T21262] usb 9-1: new full-speed USB device number 50 using dummy_hcd [ 812.008666][T21262] usb 9-1: unable to get BOS descriptor or descriptor too short [ 812.017140][T21262] usb 9-1: not running at top speed; connect to a high speed hub [ 812.025004][ T31] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 812.026851][T21262] usb 9-1: config 1 has an invalid interface number: 138 but max is 0 [ 812.041636][T21262] usb 9-1: config 1 has no interface number 0 [ 812.047774][T21262] usb 9-1: config 1 interface 138 has no altsetting 0 [ 812.062167][T27214] rust_binder: 27213 RLIMIT_NICE not set [ 812.062228][T27214] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:204 [ 812.071654][T21262] usb 9-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 812.090256][T21262] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.098336][T21262] usb 9-1: Product: syz [ 812.102575][T21262] usb 9-1: Manufacturer: syz [ 812.107222][T21262] usb 9-1: SerialNumber: syz [ 812.201185][ T10] usb 4-1: USB disconnect, device number 31 [ 812.345634][T21262] usb 9-1: USB disconnect, device number 50 [ 812.356962][T23851] udevd[23851]: setting mode of /dev/bus/usb/009/050 to 020664 failed: No such file or directory [ 812.367978][T23851] udevd[23851]: setting owner of /dev/bus/usb/009/050 to uid=0, gid=0 failed: No such file or directory [ 812.406993][T27167] udevd[27167]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.138/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 828.534348][ T36] kauditd_printk_skb: 101 callbacks suppressed [ 828.534370][ T36] audit: type=1400 audit(2000000364.495:88172): avc: denied { read write } for pid=27215 comm="syz.8.8894" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 828.575800][ T36] audit: type=1400 audit(2000000364.504:88173): avc: denied { read write open } for pid=27215 comm="syz.8.8894" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 828.616744][T27220] kvm: MWAIT instruction emulated as NOP! [ 828.624432][ T36] audit: type=1400 audit(2000000364.504:88174): avc: denied { ioctl } for pid=27215 comm="syz.8.8894" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 828.698088][ T36] audit: type=1400 audit(2000000364.523:88175): avc: denied { mounton } for pid=27217 comm="syz.3.8893" path="/70/file0" dev="tmpfs" ino=392 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 828.723309][ T36] audit: type=1400 audit(2000000364.533:88176): avc: denied { read write } for pid=27217 comm="syz.3.8893" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 828.762903][ T36] audit: type=1400 audit(2000000364.533:88177): avc: denied { read write open } for pid=27217 comm="syz.3.8893" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 828.788226][ T36] audit: type=1400 audit(2000000364.533:88178): avc: denied { ioctl } for pid=27217 comm="syz.3.8893" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 828.819216][ T36] audit: type=1400 audit(2000000364.561:88179): avc: denied { read write } for pid=27215 comm="syz.8.8894" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 828.843220][ T36] audit: type=1400 audit(2000000364.561:88180): avc: denied { read write open } for pid=27215 comm="syz.8.8894" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 828.868487][ T36] audit: type=1400 audit(2000000364.561:88181): avc: denied { ioctl } for pid=27215 comm="syz.8.8894" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 828.972679][T27235] rust_binder: Error while translating object. [ 828.972727][T27235] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 828.979037][T27235] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:217 [ 829.141924][ T458] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 829.197248][T27238] rust_binder: Error while translating object. [ 829.197279][T27238] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 829.203594][T27238] rust_binder: Failure BR_FAILED_REPLY { source: EPERM } during reply - delivering BR_FAILED_REPLY to sender. [ 829.213071][T27238] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:219 [ 829.702151][T27243] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 830.000949][ T458] usb 9-1: Using ep0 maxpacket: 8 [ 830.024903][ T458] usb 9-1: config 0 interface 0 has no altsetting 0 [ 830.031560][ T458] usb 9-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 830.042169][T27253] binder: Unknown parameter '-1Ä–©D4öcÜ–³|µ@® co°]$‚ñ5íQ+ƒà}·z«@~e7œG§¢x#Ð&¼sŒuã4 >Y›5«_ã%ÖRLÄ£oßæ' [ 830.054573][ T458] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.065663][T27253] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 830.068218][ T458] usb 9-1: config 0 descriptor?? [ 830.080012][T27253] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:223 [ 830.338986][T27220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.364535][T27220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.481656][T27276] overlayfs: missing 'lowerdir' [ 830.630807][ T458] sony 0003:1345:3008.002D: hiddev96,hidraw0: USB HID vff.ff Device [HID 1345:3008] on usb-dummy_hcd.8-1/input0 [ 830.631083][T27276] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1367 [ 830.678963][ T458] sony 0003:1345:3008.002D: failed to claim input [ 830.801669][T27283] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 830.805051][T27283] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 830.818972][T27283] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 830.870089][T27220] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 830.945022][T27283] rust_binder: Error while translating object. [ 830.956987][T27283] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 830.963282][T27283] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1371 [ 831.011996][T27281] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.029582][T27281] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.036761][T27281] bridge_slave_0: entered allmulticast mode [ 831.043222][T27281] bridge_slave_0: entered promiscuous mode [ 831.051131][T27281] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.060547][T27281] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.071711][T27281] bridge_slave_1: entered allmulticast mode [ 831.081721][T27281] bridge_slave_1: entered promiscuous mode [ 831.195023][T27293] tmpfs: Unknown parameter 'no' [ 831.212966][T27293] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 831.253164][T27281] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.260295][T27281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 831.267653][T27281] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.274711][T27281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.348358][T12359] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.356888][T12359] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.374418][T19670] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.381528][T19670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.395489][T12359] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.402587][T12359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 831.505014][T27281] veth0_vlan: entered promiscuous mode [ 831.519709][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 831.574567][T27281] veth1_macvtap: entered promiscuous mode [ 831.716493][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 831.763731][ T10] usb 4-1: config index 0 descriptor too short (expected 1060, got 36) [ 831.806258][ T10] usb 4-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 831.823789][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 831.862830][ T10] usb 4-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 831.872507][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.889982][ T10] usb 4-1: config 0 descriptor?? [ 831.901615][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 832.022528][T21262] usb 9-1: USB disconnect, device number 51 [ 832.231606][ T10] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 832.422574][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 832.430153][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 832.441682][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 832.452935][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 832.464353][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 832.473450][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.483469][ T10] usb 6-1: config 0 descriptor?? [ 832.491797][T27317] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 832.502165][ T10] hub 6-1:0.0: USB hub found [ 832.549556][T21263] usb 9-1: new low-speed USB device number 52 using dummy_hcd [ 832.715637][ T10] hub 6-1:0.0: 4 ports detected [ 832.721194][ T10] hub 6-1:0.0: insufficient power available to use all downstream ports [ 832.733281][T27318] fuse: Unknown parameter '^O+C^íh§pIÔ]r™Ja¾q²ºür¡yF‡…`#»ßë¬Ú˜2ûiîζTê4A v•P—¢Ô' [ 832.733684][T21263] usb 9-1: unable to get BOS descriptor or descriptor too short [ 832.753270][T21263] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 is Bulk; changing to Interrupt [ 832.763189][T21263] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 832.777974][T21263] usb 9-1: string descriptor 0 read error: -22 [ 832.784375][T21263] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 832.794674][T21263] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.806361][T27322] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 832.826999][T27322] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 832.933401][ T10] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 832.953093][ T10] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 832.966324][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 832.983096][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 833.017932][ T10] usb 6-1: USB disconnect, device number 77 [ 833.094475][T27322] SELinux: policydb magic number 0x65636172 does not match expected magic number 0xf97cff8c [ 833.105863][T27322] SELinux: failed to load policy [ 833.113953][T21263] usb 9-1: USB disconnect, device number 52 [ 833.202558][T27344] kvm: kvm [27343]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 833.211445][T27344] kvm: kvm [27343]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 833.225037][T27344] kvm: kvm [27343]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 833.239110][T27344] kvm: kvm [27343]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 833.251161][T27344] kvm: kvm [27343]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 833.262413][T27344] kvm_intel: kvm [27343]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 833.863834][ T36] kauditd_printk_skb: 720 callbacks suppressed [ 833.863855][ T36] audit: type=1400 audit(2000000369.514:88902): avc: denied { create } for pid=27358 comm="syz.8.8930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 833.918943][ T36] audit: type=1400 audit(2000000369.514:88903): avc: denied { bind } for pid=27358 comm="syz.8.8930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 833.940259][ T36] audit: type=1400 audit(2000000369.524:88904): avc: denied { listen } for pid=27358 comm="syz.8.8930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 833.960921][ T36] audit: type=1400 audit(2000000369.524:88905): avc: denied { connect } for pid=27358 comm="syz.8.8930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 833.981937][ T36] audit: type=1400 audit(2000000369.618:88906): avc: denied { read write } for pid=27281 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 834.007285][ T36] audit: type=1400 audit(2000000369.618:88907): avc: denied { read write open } for pid=27281 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 834.046170][ T36] audit: type=1400 audit(2000000369.618:88908): avc: denied { ioctl } for pid=27281 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 834.096580][ T36] audit: type=1400 audit(2000000369.731:88909): avc: denied { read } for pid=27363 comm="syz.5.8932" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 834.160876][ T36] audit: type=1400 audit(2000000369.731:88910): avc: denied { read open } for pid=27363 comm="syz.5.8932" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 834.219754][ T36] audit: type=1400 audit(2000000369.759:88911): avc: denied { ioctl } for pid=27363 comm="syz.5.8932" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 834.238607][T27364] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 834.258701][T27364] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19 [ 834.280671][T27366] rust_binder: 1414: no such ref 1 [ 834.305660][T27366] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1414 [ 834.424164][T27369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=27369 comm=syz.6.8934 [ 834.487134][T21263] usb 4-1: USB disconnect, device number 32 [ 834.904371][T27384] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 834.910582][T27384] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 835.073520][T27393] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 4294967293 [ 835.097609][T21263] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 835.155277][T27395] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 835.246075][T21263] usb 6-1: device descriptor read/64, error -71 [ 835.291160][T27401] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 835.353694][T27402] rust_binder: Error while translating object. [ 835.360176][T27402] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 835.367295][T27402] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1435 [ 835.376797][T21262] usb 9-1: new full-speed USB device number 53 using dummy_hcd [ 835.532654][T21263] usb 6-1: device descriptor read/64, error -71 [ 835.556160][T21262] usb 9-1: config 0 has an invalid interface number: 2 but max is 0 [ 835.564257][T21262] usb 9-1: config 0 has no interface number 0 [ 835.570496][T21262] usb 9-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 835.581248][T21262] usb 9-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 835.592257][T21262] usb 9-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 835.603234][T21262] usb 9-1: config 0 interface 2 has no altsetting 0 [ 835.613078][T21262] usb 9-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 835.622269][T21262] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.630401][T21262] usb 9-1: Product: syz [ 835.634571][T21262] usb 9-1: Manufacturer: syz [ 835.639197][T21262] usb 9-1: SerialNumber: syz [ 835.645488][T21262] usb 9-1: config 0 descriptor?? [ 835.652826][T27383] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 835.661096][T27383] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 835.797852][T21263] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 835.946278][T21263] usb 6-1: device descriptor read/64, error -71 [ 835.965545][T21262] usb 9-1: USB disconnect, device number 53 [ 836.045251][T27285] udevd[27285]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 836.048325][T27411] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 836.146640][T27413] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 836.146672][T27413] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:255 [ 836.213435][T21263] usb 6-1: device descriptor read/64, error -71 [ 836.331905][T27422] __vm_enough_memory: pid: 27422, comm: syz.6.8954, bytes: 18014402804453376 not enough memory for the allocation [ 836.344794][T21263] usb usb6-port1: attempt power cycle [ 836.560973][T27439] SELinux: security_context_str_to_sid () failed with errno=-22 [ 836.710161][T21263] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 836.733598][T21263] usb 6-1: device descriptor read/8, error -71 [ 836.871983][T21263] usb 6-1: device descriptor read/8, error -71 [ 836.890546][T14072] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 836.943571][T21260] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 837.028473][T14072] usb 9-1: device descriptor read/64, error -71 [ 837.081536][T21260] usb 4-1: device descriptor read/64, error -71 [ 837.124366][T21263] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 837.149453][T21263] usb 6-1: device descriptor read/8, error -71 [ 837.283078][T14072] usb 9-1: device descriptor read/64, error -71 [ 837.297569][T21263] usb 6-1: device descriptor read/8, error -71 [ 837.336144][T21260] usb 4-1: device descriptor read/64, error -71 [ 837.417286][T21263] usb usb6-port1: unable to enumerate USB device [ 837.425254][T27452] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 837.428703][T27452] fuse: blksize only supported for fuseblk [ 837.482910][T27455] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 837.537715][T14072] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 837.601364][T21260] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 837.686272][T14072] usb 9-1: device descriptor read/64, error -71 [ 837.739307][T21260] usb 4-1: device descriptor read/64, error -71 [ 837.940882][T14072] usb 9-1: device descriptor read/64, error -71 [ 837.993980][T21260] usb 4-1: device descriptor read/64, error -71 [ 838.057678][T14072] usb usb9-port1: attempt power cycle [ 838.089430][T21263] usb 6-1: new full-speed USB device number 82 using dummy_hcd [ 838.111128][T21260] usb usb4-port1: attempt power cycle [ 838.249904][T21263] usb 6-1: not running at top speed; connect to a high speed hub [ 838.259099][T21263] usb 6-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 838.269360][T21263] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 838.278272][T21263] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 838.294110][T21263] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 838.303228][T21263] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.311249][T21263] usb 6-1: Product: syz [ 838.315463][T21263] usb 6-1: Manufacturer: syz [ 838.320069][T21263] usb 6-1: SerialNumber: syz [ 838.418337][T14072] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 838.441877][T14072] usb 9-1: device descriptor read/8, error -71 [ 838.471372][T21260] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 838.494933][T21260] usb 4-1: device descriptor read/8, error -71 [ 838.569168][T21263] usb 6-1: 0:2 : does not exist [ 838.579937][T21263] usb 6-1: USB disconnect, device number 82 [ 838.594226][T14072] usb 9-1: device descriptor read/8, error -71 [ 838.633295][T27230] udevd[27230]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 838.649245][T21260] usb 4-1: device descriptor read/8, error -71 [ 838.853368][T14072] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 838.876880][T14072] usb 9-1: device descriptor read/8, error -71 [ 838.906444][T21260] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 838.929556][T21260] usb 4-1: device descriptor read/8, error -71 [ 839.014937][T14072] usb 9-1: device descriptor read/8, error -71 [ 839.067747][T21260] usb 4-1: device descriptor read/8, error -71 [ 839.129313][T14072] usb usb9-port1: unable to enumerate USB device [ 839.174076][ T36] kauditd_printk_skb: 772 callbacks suppressed [ 839.174096][ T36] audit: type=1400 audit(2000000374.526:89684): avc: denied { remount } for pid=27463 comm="syz.5.8967" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 839.204743][T21260] usb usb4-port1: unable to enumerate USB device [ 839.231875][ T36] audit: type=1400 audit(2000000374.555:89685): avc: denied { read write } for pid=27281 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 839.257775][ T36] audit: type=1400 audit(2000000374.564:89686): avc: denied { ioctl } for pid=27446 comm="syz.3.8963" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 839.282941][ T36] audit: type=1400 audit(2000000374.564:89687): avc: denied { read write open } for pid=27281 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 839.308305][ T36] audit: type=1400 audit(2000000374.564:89688): avc: denied { ioctl } for pid=27281 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 839.334121][ T36] audit: type=1400 audit(2000000374.602:89689): avc: denied { write } for pid=27465 comm="syz.5.8968" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 839.359673][ T36] audit: type=1400 audit(2000000374.602:89690): avc: denied { write open } for pid=27465 comm="syz.5.8968" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 839.385021][ T36] audit: type=1400 audit(2000000374.630:89691): avc: denied { read write } for pid=27465 comm="syz.5.8968" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 839.408604][ T36] audit: type=1400 audit(2000000374.630:89692): avc: denied { read write open } for pid=27465 comm="syz.5.8968" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 839.434208][ T36] audit: type=1400 audit(2000000374.630:89693): avc: denied { read write } for pid=27465 comm="syz.5.8968" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 839.989965][T27477] binder: Unknown parameter './file0' [ 840.109484][T27492] rust_binder: 227: no such ref 3 [ 840.114652][T27492] rust_binder: 227: no such ref 2 [ 840.120561][T27492] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 202) [ 840.120584][T27492] rust_binder: Error while translating object. [ 840.132321][T27492] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 840.138526][T27492] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:227 [ 840.359254][T27499] rust_binder: Failed copying into alloc: EFAULT [ 840.368797][T27499] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 840.376343][T27499] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 840.384735][T27499] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:36 [ 840.577715][T21263] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 840.675183][T27513] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 840.682804][T27513] rust_binder: Write failure EINVAL in pid:50 [ 840.707213][T12343] bridge_slave_0: left allmulticast mode [ 840.748185][T21263] usb 4-1: Using ep0 maxpacket: 8 [ 840.760233][T12343] bridge_slave_0: left promiscuous mode [ 840.778906][T21263] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 840.790848][T12343] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.798945][T21263] usb 4-1: config 0 has no interface number 0 [ 840.823895][T21263] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice= 4.16 [ 840.836312][T27520] netlink: 'syz.6.8983': attribute type 16 has an invalid length. [ 840.847990][T21263] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.856076][T27520] netlink: 'syz.6.8983': attribute type 2 has an invalid length. [ 840.866153][T27520] netlink: 64086 bytes leftover after parsing attributes in process `syz.6.8983'. [ 840.876050][T21263] usb 4-1: Product: syz [ 840.891082][T21263] usb 4-1: Manufacturer: syz [ 840.898609][T21263] usb 4-1: SerialNumber: syz [ 840.921349][T21263] usb 4-1: config 0 descriptor?? [ 841.050691][T12343] veth1_macvtap: left promiscuous mode [ 841.062747][T12343] veth0_vlan: left promiscuous mode [ 841.902897][T21263] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 841.920364][T21263] usb 4-1: No valid video chain found. [ 841.931066][T21263] usb 4-1: USB disconnect, device number 37 [ 842.005237][T14072] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 842.042399][T27559] netlink: 'syz.3.8995': attribute type 4 has an invalid length. [ 842.050196][T27559] netlink: 'syz.3.8995': attribute type 6 has an invalid length. [ 842.058088][T27559] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.8995'. [ 842.072463][T27559] netlink: 'syz.3.8995': attribute type 4 has an invalid length. [ 842.081934][T27559] netlink: 'syz.3.8995': attribute type 6 has an invalid length. [ 842.089736][T27559] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.8995'. [ 842.170471][T27566] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:293 [ 842.176109][T27566] rust_binder: Error while translating object. [ 842.178151][T14072] usb 6-1: Using ep0 maxpacket: 8 [ 842.185561][T27566] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 842.198030][T27566] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:293 [ 842.215642][T14072] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 842.233186][T14072] usb 6-1: config 179 has no interface number 0 [ 842.239908][T14072] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 842.251279][T14072] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 842.263088][T14072] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 842.273234][T14072] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 842.287287][T14072] usb 6-1: config 179 interface 65 has no altsetting 0 [ 842.299841][T14072] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 842.309580][T14072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.456142][T27571] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 842.521372][T27572] rust_binder: Failed to allocate buffer. len:4294966952, is_oneway:false [ 842.521405][T27572] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 842.530121][T27572] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:296 [ 842.547345][ T66] usb 6-1: USB disconnect, device number 83 [ 842.796601][T27580] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 842.890339][T27582] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 843.152914][T27593] bridge0: port 3(veth0_vlan) entered blocking state [ 843.159787][T27593] bridge0: port 3(veth0_vlan) entered disabled state [ 843.166932][T27593] veth0_vlan: entered allmulticast mode [ 843.173855][T27593] bridge0: port 3(veth0_vlan) entered blocking state [ 843.180633][T27593] bridge0: port 3(veth0_vlan) entered forwarding state [ 843.242619][T27593] rust_binder: 80: no such ref 0 [ 843.350326][T27597] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 843.350362][T27597] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:82 [ 843.658816][T27609] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 843.731056][T21263] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 843.746722][T14072] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 843.835979][T27611] overlayfs: statfs failed on './file0' [ 843.876353][T27611] rust_binder: Error while translating object. [ 843.876387][T27611] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 843.882634][T27611] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:90 [ 843.892127][T14072] usb 4-1: device descriptor read/64, error -71 [ 843.922768][T21263] usb 9-1: Using ep0 maxpacket: 32 [ 843.936045][T21263] usb 9-1: unable to get BOS descriptor or descriptor too short [ 843.952252][T21263] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 843.966791][T27614] ------------[ cut here ]------------ [ 843.972332][T27614] WARNING: CPU: 1 PID: 27614 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 843.974015][T21263] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 843.981919][T27614] Modules linked in: [ 843.994937][T27614] CPU: 1 UID: 0 PID: 27614 Comm: syz.5.9016 Not tainted syzkaller #0 2560a8339b7509d4724a30b62cb6e32ef3b21627 [ 844.006661][T27614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 844.016891][T27614] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 844.022881][T27614] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d a2 1f ee 05 00 0f 85 be 00 00 00 c6 05 95 1f ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 844.037803][T21263] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 844.042596][T27614] RSP: 0018:ffffc9000271f540 EFLAGS: 00010246 [ 844.057815][T27614] RAX: 0000000000000000 RBX: 0000000000000015 RCX: 0000000000000000 [ 844.064487][T21263] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.065852][T27614] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000271f5f8 [ 844.081603][T21263] usb 9-1: Product: syz [ 844.081849][T27614] RBP: ffffc9000271f680 R08: ffffc9000271f5f7 R09: 0000000000000000 [ 844.087607][T21263] usb 9-1: Manufacturer: syz [ 844.094040][T27614] R10: ffffc9000271f5e0 R11: fffff520004e3ebf R12: ffffc9000271f580 [ 844.100383][T21263] usb 9-1: SerialNumber: syz [ 844.106938][T27614] R13: dffffc0000000000 R14: 1ffff920004e3eac R15: 0000000000000000 [ 844.119557][T27614] FS: 00007f2fcab976c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 844.128566][T27614] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 844.135180][T27614] CR2: 000000110c344985 CR3: 0000000138ff6000 CR4: 00000000003526b0 [ 844.143248][T27614] Call Trace: [ 844.146570][T27614] [ 844.149527][T27614] ? vfs_write+0x3c0/0xf30 [ 844.153979][T27614] ? ksys_write+0x141/0x250 [ 844.158577][T27614] ? x64_sys_call+0x271c/0x2ee0 [ 844.163475][T27614] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 844.167796][T14072] usb 4-1: device descriptor read/64, error -71 [ 844.169299][T27614] ? hashtab_init+0xdb/0x1f0 [ 844.180128][T27614] ___kmalloc_large_node+0x81/0x220 [ 844.185382][T27614] ? hashtab_init+0xdb/0x1f0 [ 844.190071][T27614] __kmalloc_large_node_noprof+0x1e/0xe0 [ 844.195734][T27614] ? hashtab_init+0xdb/0x1f0 [ 844.200373][T27614] __kmalloc_noprof+0x336/0x530 [ 844.205254][T27614] ? kasan_save_alloc_info+0x40/0x50 [ 844.210605][T27614] hashtab_init+0xdb/0x1f0 [ 844.215057][T27614] ? class_read+0x162/0x8a0 [ 844.219595][T27614] symtab_init+0x44/0x70 [ 844.223888][T27614] class_read+0x1df/0x8a0 [ 844.228260][T27614] ? hashtab_init+0xdb/0x1f0 [ 844.232898][T27614] ? __cfi_class_read+0x10/0x10 [ 844.237786][T27614] ? hashtab_init+0x105/0x1f0 [ 844.242511][T27614] policydb_read+0xaa8/0x28c0 [ 844.247230][T27614] ? __kasan_kmalloc+0x96/0xb0 [ 844.252013][T27614] ? __cfi_policydb_read+0x10/0x10 [ 844.257198][T27614] ? security_load_policy+0x128/0x12f0 [ 844.262688][T27614] ? _raw_spin_lock+0x8c/0x120 [ 844.267509][T27614] security_load_policy+0x162/0x12f0 [ 844.272824][T27614] ? avc_has_perm_noaudit+0x21c/0x360 [ 844.278263][T27614] ? _raw_spin_unlock+0x45/0x60 [ 844.283147][T27614] ? __check_object_size+0x50a/0x810 [ 844.288502][T27614] ? __cfi_security_load_policy+0x10/0x10 [ 844.294248][T27614] ? __kasan_check_write+0x18/0x20 [ 844.299411][T27614] sel_write_load+0x298/0x5e0 [ 844.304131][T27614] ? futex_wait+0x29a/0x7a0 [ 844.308692][T27614] ? __cfi_sel_write_load+0x10/0x10 [ 844.313926][T27614] ? __cfi_futex_wait+0x10/0x10 [ 844.318846][T27614] ? bpf_lsm_file_permission+0xd/0x20 [ 844.324253][T27614] ? __cfi_sel_write_load+0x10/0x10 [ 844.329518][T27614] vfs_write+0x3c0/0xf30 [ 844.333789][T27614] ? __cfi_vfs_write+0x10/0x10 [ 844.338595][T27614] ? __kasan_check_write+0x18/0x20 [ 844.343747][T27614] ? mutex_lock+0x92/0x1c0 [ 844.348184][T27614] ? __cfi_mutex_lock+0x10/0x10 [ 844.353129][T27614] ? __fget_files+0x2c5/0x340 [ 844.357845][T27614] ksys_write+0x141/0x250 [ 844.362340][T27614] ? xfd_validate_state+0x68/0x150 [ 844.367504][T27614] ? __cfi_ksys_write+0x10/0x10 [ 844.372428][T27614] ? __kasan_check_write+0x18/0x20 [ 844.377595][T27614] ? fpregs_restore_userregs+0x11d/0x260 [ 844.383304][T27614] __x64_sys_write+0x7f/0x90 [ 844.387927][T27614] x64_sys_call+0x271c/0x2ee0 [ 844.392694][T27614] do_syscall_64+0x58/0xf0 [ 844.397153][T27614] ? clear_bhb_loop+0x50/0xa0 [ 844.401878][T27614] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 844.407859][T27614] RIP: 0033:0x7f2fc9d8eec9 [ 844.412300][T27614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 844.431992][T27614] RSP: 002b:00007f2fcab97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 844.438161][T14072] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 844.440486][T27614] RAX: ffffffffffffffda RBX: 00007f2fc9fe5fa0 RCX: 00007f2fc9d8eec9 [ 844.456095][T27614] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000009 [ 844.464100][T27614] RBP: 00007f2fc9e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 844.472145][T27614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.480188][T27614] R13: 00007f2fc9fe6038 R14: 00007f2fc9fe5fa0 R15: 00007ffcab74e308 [ 844.488257][T27614] [ 844.491303][T27614] ---[ end trace 0000000000000000 ]--- [ 844.496845][T27614] SELinux: failed to load policy [ 844.562305][ T36] kauditd_printk_skb: 764 callbacks suppressed [ 844.562320][ T36] audit: type=1400 audit(2000000379.577:90458): avc: denied { ioctl } for pid=27600 comm="syz.3.9011" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 844.598363][ T36] audit: type=1400 audit(2000000379.614:90459): avc: denied { ioctl } for pid=27604 comm="syz.8.9013" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 844.657893][T14072] usb 4-1: device descriptor read/64, error -71 [ 844.775717][ T36] audit: type=1400 audit(2000000379.783:90460): avc: denied { ioctl } for pid=27600 comm="syz.3.9011" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 844.801093][ T36] audit: type=1400 audit(2000000379.783:90461): avc: denied { ioctl } for pid=27600 comm="syz.3.9011" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 844.827227][ T36] audit: type=1400 audit(2000000379.783:90462): avc: denied { ioctl } for pid=27600 comm="syz.3.9011" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 844.852528][ T36] audit: type=1400 audit(2000000379.783:90463): avc: denied { ioctl } for pid=27600 comm="syz.3.9011" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 844.878370][ T36] audit: type=1400 audit(2000000379.783:90464): avc: denied { ioctl } for pid=27600 comm="syz.3.9011" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 844.903506][ T36] audit: type=1400 audit(2000000379.783:90465): avc: denied { ioctl } for pid=27600 comm="syz.3.9011" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 844.928612][ T36] audit: type=1400 audit(2000000379.783:90466): avc: denied { ioctl } for pid=27600 comm="syz.3.9011" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 844.934856][T14072] usb 4-1: device descriptor read/64, error -71 [ 844.953840][ T36] audit: type=1400 audit(2000000379.849:90467): avc: denied { ioctl } for pid=27600 comm="syz.3.9011" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 845.074140][T14072] usb usb4-port1: attempt power cycle [ 845.435544][T14072] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 845.459149][T14072] usb 4-1: device descriptor read/8, error -71 [ 845.597856][T14072] usb 4-1: device descriptor read/8, error -71 [ 845.851012][T14072] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 845.874765][T14072] usb 4-1: device descriptor read/8, error -71 [ 846.013033][T14072] usb 4-1: device descriptor read/8, error -71 [ 846.128041][T14072] usb usb4-port1: unable to enumerate USB device [ 846.682031][T14072] usb 9-1: USB disconnect, device number 58