last executing test programs: 6m46.542447034s ago: executing program 2 (id=108): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'xfrm0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000680)={0x3}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x2}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000380)={@fda={0x66646185, 0x2, 0x1, 0x3d}, @ptr={0x70742a85, 0x1, &(0x7f0000000300)=""/96, 0x60, 0x2, 0x3f}, @ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/255, 0xff, 0x0, 0x2b}}, &(0x7f0000000200)={0x0, 0x20, 0x48}}}, @increfs_done={0x40106308, 0x3}], 0x5a, 0x0, &(0x7f0000000400)="cb2a499fc52c7a386ad917877700d052ef62983aca8ff936fca49e7bc7ec2ca216262dae1f7f32ff497c006ba3cd35c832d7b0320be1eecb3c8ab2ac50bae16cdedcd164b2862c43a8745bafdd94c96182643b70efd41186dc9d"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) ioctl$IOC_PR_RELEASE(r4, 0x401070ca, &(0x7f0000000080)={0x0, 0x3ff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 6m46.509950434s ago: executing program 2 (id=110): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000001300)=0x7fff, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='autogroup\x00') r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000000)) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000001c0)={0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) close(r1) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r5, 0xc008aec1, &(0x7f0000000400)={0xb, 0x0, [{0xd, 0x78, 0x1, 0x73, 0x68d2, 0x400}, {0x40000000, 0x273, 0x1, 0xc, 0x6, 0x7c, 0x5}, {0xd, 0x90, 0x0, 0x7ff, 0x2, 0x1}, {0x80000007, 0x4, 0x1, 0x7, 0x4, 0x4, 0x6}, {0x6, 0x1, 0x4, 0x4, 0xd4f, 0xeb, 0x3}, {0xd, 0x7, 0x5, 0xfff, 0x8, 0xfffffe00, 0x60000000}, {0x80000001, 0x3, 0x0, 0x6, 0x9, 0x221, 0x7}, {0x7, 0x7fffffff, 0x0, 0x7, 0x7fffffff, 0x1, 0x2}, {0xd, 0x81, 0x2, 0x30, 0x4, 0xffffffff, 0x5}, {0x80000000, 0x40, 0x4, 0xbe, 0xc8, 0xf, 0x8}, {0x6, 0x2, 0x4, 0x2, 0x4, 0x2, 0x8}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r4, 0x1, r0, 0xb}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x1000003, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3a) close_range(r0, 0xffffffffffffffff, 0x0) 6m46.447104765s ago: executing program 2 (id=112): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x4e23, @empty}}) r5 = fsopen(&(0x7f0000000040)='fusectl\x00', 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000080)=',^\x00', &(0x7f00000000c0)='./file0\x00', r6) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0xc0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_none}, {@nodevmap}]}}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r7, &(0x7f00000029c0)={0x2020}, 0x2020) 6m46.434924086s ago: executing program 2 (id=113): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8c0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f0000000280)=[0x5, 0x8026, 0x2, 0x8, 0x6, 0x8, 0xa4, 0x2]) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7ff) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087707, &(0x7f0000000000)='\x00\x000\x10\x00\x00\a\x00\x00\x00\x00\x00\x00\x00^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcbgQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xe3\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x00\xfe\xff\xffo \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x8e\x04\x00\x00\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94@\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00y\xd2\x88s\xd1~}\x10\xffR\xbbt\xf0:>\xe7\xfd(\xad\xacS\x0f\xa5\xa4\xcfN\xdd\xc0\xf3\xc5\n3\xa6*\x97\xf7\xdb\xccT\x02\x9f\x96D\x85_\xfc\xf8?\xbc\x00\x00\x00\x00\x00\x00') mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mount$cgroup2(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x40000, 0x0) read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) 6m46.334394088s ago: executing program 2 (id=114): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)="390000001300034700ab65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) r3 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) fcntl$addseals(r3, 0x409, 0x8) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006300)={0x2020}, 0x2020) dup2(0xffffffffffffffff, r5) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000080)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) socket$packet(0x11, 0x2, 0x300) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x2) close_range(r0, 0xffffffffffffffff, 0x0) 6m46.23898995s ago: executing program 2 (id=115): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, 0x0) (async) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r3 = dup(r2) (async) timer_create(0x0, 0x0, &(0x7f0000004540)=0x0) timer_settime(r4, 0x0, &(0x7f0000004580)={{}, {0x77359400}}, 0x0) (async) timer_settime(r4, 0x0, &(0x7f0000004b00)={{0x77359400}}, &(0x7f0000004b40)) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) pwritev2(r5, &(0x7f0000001840)=[{&(0x7f0000000280)="a5e3835a966dd219f848e88a2cc8b70c6a479c88ec0e45015dbd1c788d16219f7c1c37340419e316328fd12dac9657619e2245be5512aa5c06491178b30d86b66069ad2e70b9d39b149271b8612370fead2240e1fc3dfe669a0be99889ae76daa0dc16316944594719734f35a9365bfacc4147fe33c3e0a83bade934855c2ce9f19ac236bf6eb64ee4f4b6933aae5293c6776738e5a6e00c2eb519deab3bf4b60de3351052913a856f9803f5f644815b0801f5e38f6517a7ca258a2c565cf925b8b8ebeef599d48554a8b027c407367ac230646641400cb00f163191e114c418b93216debf200824b00cfba058c8", 0xee}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000180)="a06ae0b4879ff868de6b92fe1a48594acfbd87502fb2821f0d0d196f28a42d52c27c5a77cdbe2a3bc91f616ba1ef01b529000b", 0x33}, {&(0x7f0000000400)="6c38ed7deb4d3c8594a2d18ff7be0ee3cec8d016c92f5550052ec4197b7e8089cba4f4be758c4e3c948cb185219af961ef39c066478a337534de1756a4fb4e3494211572dc3ded19179bf660fb28f15a2a73d87c7c59c1ab7a96ba9704f3", 0x5e}, {&(0x7f0000000480)="ede4f0063f584c696f1a18a9aec07fea840ca4864ab297de6910ef763a2f8ba6667122cc94510b41d517bd139196e2e7ac86b4dfb9799462b4825ce214442a39891c729783aa92a8d4e9d308f7686ac9b226e914580b6608fa0021a0d3112dfa0980", 0x62}, {&(0x7f0000001600)="777bdc05cd84737bafcea992940d8285ca5a36588d3f69a7f1cedac7da6f8526abd2bc099c61270cbefdadd3e08f39afd5b0f5b2dd53725fea7817ea1db383afb1ec43a9b6cc118529018a9d19fb532a9006f7a756582f8a10f55077165795bb576b25", 0x63}, {&(0x7f0000000380)="3b575c11a63ebd011dc8a5cc7b0a57f85fdcfc904d89a32c45f40e0c8301010f556b18666fef2c93d3f5f58d59d9ca6647b0", 0x32}, {&(0x7f0000001680)="ef352dd9e8869370c3711dcbaa7538397e8e8ff6cb649f57b10ec4c20a215ee4564b1c6c0f40cb6e8088359559620fcb3024089abe375e2570492caa4a0a61ac9c5af72cf353086a852bbce0237d9f6d229568edbb1bdca0ae9cfd8e103eaf70022f9b2daa286429b9ebbda6c29a425d1b334f045ef200a91a9eb691871075", 0x7f}, {&(0x7f0000001700)}, {&(0x7f0000001740)="565a4049cee4934381eff35039d52ca67664623a467c5f46335d0669198c499bcf557a92f74c6091cc5863211ec12f3f15bdf38a71a01dd23693c5de2fd54b9142d43a9811370cb62a085e2fe2a955b003b1b6f583b7836b0ade30b44bd671456dd31f3e86b26f2c9b27cc17a80498e6e30fc1ad010cae43c9849f5c6c17e10f7a892f2a69c2255694c9c74f06ff5c2e388bc134dded9c4b3440dc2d3d041b4408f82c09372f5ebb6b1198a5bc92a79f8475aa85d62c31e38df730e1a2014688d84ef91cd044549ca535d58518d750ed9ece9f241c2fb08aa4e08c5113", 0xdd}], 0xa, 0x9, 0xfffffc00, 0x8) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'ipvlan0\x00', 0x2001}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x18, 0x209, 0x100, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x24008004}, 0x8054) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d3362e6d1c9627998d18ecdf05e70c8dfa674f6275f7b4bdbfb96db1f000000000000", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',noxattr,cache=fscache,\x00']) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r7 = gettid() ptrace$setopts(0x4206, r7, 0x80, 0x100021) (async) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r8, &(0x7f00000029c0)={0x2020}, 0x2020) 6m46.231713689s ago: executing program 32 (id=115): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, 0x0) (async) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r3 = dup(r2) (async) timer_create(0x0, 0x0, &(0x7f0000004540)=0x0) timer_settime(r4, 0x0, &(0x7f0000004580)={{}, {0x77359400}}, 0x0) (async) timer_settime(r4, 0x0, &(0x7f0000004b00)={{0x77359400}}, &(0x7f0000004b40)) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) pwritev2(r5, &(0x7f0000001840)=[{&(0x7f0000000280)="a5e3835a966dd219f848e88a2cc8b70c6a479c88ec0e45015dbd1c788d16219f7c1c37340419e316328fd12dac9657619e2245be5512aa5c06491178b30d86b66069ad2e70b9d39b149271b8612370fead2240e1fc3dfe669a0be99889ae76daa0dc16316944594719734f35a9365bfacc4147fe33c3e0a83bade934855c2ce9f19ac236bf6eb64ee4f4b6933aae5293c6776738e5a6e00c2eb519deab3bf4b60de3351052913a856f9803f5f644815b0801f5e38f6517a7ca258a2c565cf925b8b8ebeef599d48554a8b027c407367ac230646641400cb00f163191e114c418b93216debf200824b00cfba058c8", 0xee}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000180)="a06ae0b4879ff868de6b92fe1a48594acfbd87502fb2821f0d0d196f28a42d52c27c5a77cdbe2a3bc91f616ba1ef01b529000b", 0x33}, {&(0x7f0000000400)="6c38ed7deb4d3c8594a2d18ff7be0ee3cec8d016c92f5550052ec4197b7e8089cba4f4be758c4e3c948cb185219af961ef39c066478a337534de1756a4fb4e3494211572dc3ded19179bf660fb28f15a2a73d87c7c59c1ab7a96ba9704f3", 0x5e}, {&(0x7f0000000480)="ede4f0063f584c696f1a18a9aec07fea840ca4864ab297de6910ef763a2f8ba6667122cc94510b41d517bd139196e2e7ac86b4dfb9799462b4825ce214442a39891c729783aa92a8d4e9d308f7686ac9b226e914580b6608fa0021a0d3112dfa0980", 0x62}, {&(0x7f0000001600)="777bdc05cd84737bafcea992940d8285ca5a36588d3f69a7f1cedac7da6f8526abd2bc099c61270cbefdadd3e08f39afd5b0f5b2dd53725fea7817ea1db383afb1ec43a9b6cc118529018a9d19fb532a9006f7a756582f8a10f55077165795bb576b25", 0x63}, {&(0x7f0000000380)="3b575c11a63ebd011dc8a5cc7b0a57f85fdcfc904d89a32c45f40e0c8301010f556b18666fef2c93d3f5f58d59d9ca6647b0", 0x32}, {&(0x7f0000001680)="ef352dd9e8869370c3711dcbaa7538397e8e8ff6cb649f57b10ec4c20a215ee4564b1c6c0f40cb6e8088359559620fcb3024089abe375e2570492caa4a0a61ac9c5af72cf353086a852bbce0237d9f6d229568edbb1bdca0ae9cfd8e103eaf70022f9b2daa286429b9ebbda6c29a425d1b334f045ef200a91a9eb691871075", 0x7f}, {&(0x7f0000001700)}, {&(0x7f0000001740)="565a4049cee4934381eff35039d52ca67664623a467c5f46335d0669198c499bcf557a92f74c6091cc5863211ec12f3f15bdf38a71a01dd23693c5de2fd54b9142d43a9811370cb62a085e2fe2a955b003b1b6f583b7836b0ade30b44bd671456dd31f3e86b26f2c9b27cc17a80498e6e30fc1ad010cae43c9849f5c6c17e10f7a892f2a69c2255694c9c74f06ff5c2e388bc134dded9c4b3440dc2d3d041b4408f82c09372f5ebb6b1198a5bc92a79f8475aa85d62c31e38df730e1a2014688d84ef91cd044549ca535d58518d750ed9ece9f241c2fb08aa4e08c5113", 0xdd}], 0xa, 0x9, 0xfffffc00, 0x8) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'ipvlan0\x00', 0x2001}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x18, 0x209, 0x100, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x24008004}, 0x8054) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d3362e6d1c9627998d18ecdf05e70c8dfa674f6275f7b4bdbfb96db1f000000000000", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',noxattr,cache=fscache,\x00']) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r7 = gettid() ptrace$setopts(0x4206, r7, 0x80, 0x100021) (async) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r8, &(0x7f00000029c0)={0x2020}, 0x2020) 6m32.872290874s ago: executing program 0 (id=245): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000040)={0xff, 0x10, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f0000000100)={0xd5, 0x0, 0x60}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000040)={0xff, 0x10, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0]}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80140, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f0000000100)={0xd5, 0x0, 0x60}) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 6m32.753790796s ago: executing program 0 (id=246): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)='[=', 0x2}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r2, r3}}}], 0x20, 0x40044}}], 0x1, 0x4) r4 = getegid() r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r5) ptrace(0x8, r5) ptrace(0x4207, r5) statx(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', 0x400, 0x20, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = dup(r8) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r13}}], [], 0x6b}}) r14 = syz_clone(0x10091, 0x0, 0xfffffffffffffc5b, 0x0, 0x0, 0x0) ptrace(0x10, r14) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)=0x0) getresgid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f00000008c0)) socket$nl_sock_diag(0x10, 0x3, 0x4) r16 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbff, 0x800000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000004b80)=ANY=[@ANYBLOB="a02000001c00200027bd7000fedbdf259010de80040049801400c500fe8000000000000000000000000000aa0400378004002c800400ac80539ae71fcbf132571a60835ec67c9d2aeb5956c26a2dca384da361b57d7b3bf05f1bb7892916235878d8b33727a3c0e097a7bc3ce4578669a0a7f1b5dbe92a322f892a9746389b616d946a7458f1268c222ee3134387209b20bfb5b00039ac1dd64f690a12771967820fa12bcfea868fb7163c719515e54d9635882ec0e7bea5f09ab67a30a9aab5ee310251d562b8e337c29ffc7bb17c7fa789762951485de1f417306f8028d27be719f2ff5582344ea95a7dddce6baa7b85780c141c169c3dc40e903238e83e249556a9be2f0a2219d7b66ae6ceaaebc7fa6be7ff87c9ce941292a95e5469f461947debd837df4c6770f51d49d620cbc9da88db5d92d4f741978e259859fa71e46f9909de759ad27cf0d7fc43f6725c329d1038435931036a3ed554f824f1cb2bea513748acc3937a5b13cd45ee9a523244aff8abda2bcf2f0a24bf310cf502badc62cbb1f9f740439d27cc750259d009cd260ac68f8020a2ba474355c6bc9900de298942b8b1d5218934aaf828879575f8ceed74a36572fae13ddb6d1ab873fb23de72b3193911875bd4e0aafd134f85f2042b0e49f4671a7d002aa6a3931f5eda441ceb5ee89b3d67b36f89f270b044876c294743e5c0e047e43824c70d7b80336b3b17bffcc5619ed8f935b337bde92393667db0110022dc8de4ce8634eb68ccd81b7009425da94e0de5b78c1b5bfe15fbfa18a78a165c6f6b9a293817f524372c7c88ee8ee56e9e25a2c585173c2459bedb8a1c0193f35c9f42e3671be02a37bedca947c3de9cfda5ca2e3d423f554c6b01de68589788f02c1cc081f6dfe7515d18103e77d97bdbc1a139e89f3c589c5bca340493df5f0f8f59239063dc2ecf4ac435b2e8d6e20ce7117ca2691e4f7d596579a2d4695f4a9f580370003bcd9d9b8ecd0b4b22aedf39c3450dc1aa29d60c08a4e3a363a9cd94704117927dc3dde42bb83178d87b5e0420c5c66349cf5e13f03ac1ad51a550decdd79aff1833542897f832ca7477f78356cd3aac5a12b6bc99fbfe7ea2b5fc545229de5dedab1a25e43cdf68f437e57b8a607f03b393f243026db9672452c17f7c66df5e97431707fb4f9adcd9c0b7ed486894e3927a9c4441989f8acca97d2f58dbadc43bd17a027c0b953e1b6aaac686118e52e3da961fbe63731657f02ea6031e9731a3d4d3384439beb4bf087d0d75f3e04cc0ba702cbbaae536b870090159fa345a84abf1a6393fced610cf370cd34f96ec957a3f088d1d66b65215b861df366e6e9508a0b5a2113c354fc47218e5479dc333807c954669f8db7b2cd39f6bcf3a0f7c878ba2be029c23e701d0990a729be79b4beae8aaba38511a92c2a159e682606327f9e756a9eb97cfdadafad7f55e2f741001419d3b5da5c555b4d3f17086ada77ef0286fb3341005fd8adcff4f3c2de3dfb045342e30478272380f212ef49e618dd70e2e605554a58b0530096fd78fa31eaf414f3f345abd20a5ef1210761063c6e5d75b019464ec6a8176640b126aad5e65e1802c1d9561f7f88e940c457abbb0b3b28fc7a6d0c0a6fe145e8f3af230b9d0cd50ebc3d4112e731837ae0ad570f7e7ecb4aa39caa55695abc6de1b707edd6acc31564161ca6c6f7af03a6b7717cd391cb1d5e0455250ba828f1d79adc4e274a2940b69d3bd40f18fd8663d7daa84dd95a585e0d25756ed74d8536f776719e255d6c2967b82f7912abd9bd578166b95af1e5da30f342779d41efc50a0afe1815f61f87d54f6197a32fd47f69afd11ac900fa8867f54a58f7718fe3131d77e8bf9cd525798bad392fa1e16e1baf1c1c4dbfd65a708c2e17759d4e8913d6ec0a1c848f00ea6faf56ad207a36eefc3f74747398209a8d2b4a4fbbd4cbcd12219827fd25a7f361ae8bfd3a042690016c884491d5f9512cd467382ee1310f90dadf4b61f482fcb2281267b7a3deed13548c1cb1debc89d95c81bbc81cb919d500d3c2884543405732286ee8773a34d42f9e0e6d8c7945dcc7433f58b7e8c4e52adecf7800700000000000000264e1d82971ab8db53bf29dc3b4d6782b9b3fe371bb1993f8abc98426057476f0caef32359c01c94a599a74bba04647a53886bf3567323cc8413f524ec88590b8c6ae6a94f9624719e2dcd1969325f799b0b291a79a7f2f9078401ac2744fa47530eadb8622149fc69753f9a8b6d9c6cbafd7c05dcaa6e9535b7c19a8582d1405748f46568a7f7713487dd81d4f041c866d3e300c439e4829728cffe8788956b43fa644f1242f232076b8534a4c5be23dd704ce0c60db8784da61784055694b0e2b27187e5bc2316749dd45728b22fea52cc92efe589110a514685bd3ab82dccf7dbf56336e4982919b82170f599eaf999de50aca7da6013f55cf654c402c701d0f948ff065f7cbf27f5abdf3595554edb197fd652656aa49f28d1574f5385158d8f24f61e076643795461efd80c1d26817d2cd08d26f172d6076413ba34f49ee5cb9f382c7225f8adca6646de6f1876843a2ec81ef22b2fdb72eb0d0af90ac6b719b6aef80f4c78d9dadb589a9c1d4eb6ca76c79bb7f80c92e5f8362bb62a38423214e89b8bc8cc3845ebe8145aa1cd90f7f7d5e6c709efee897df7fb06ee89be00d0f5ac55488d09177c748dffa0949d74d1e3db0c0f458aa02659c69ee3d40497610ea4a10b1d1f5669f8fc5e2b7d421f213128ad0413251b97c9c1fbbad359429089362cc29414fa183a6235757a89c8fe0fe6b5b6f2a84fd3092fc8392c6399f41930f1f7bfa8072a3dc847f1db12c906f5f3bc7fc5eef2182d05b00f923cac4fc7981d82556d3cbd9a730bd450a72adf3132468cba787ec88375c79391c9cfbf26b074feb90733d3d846afbf732b341d4d2523f349e4e600e73d9c113fc5a1bcc5e2d6ce7eee044e265b717cc47ab550d15f914fd634711d3cafe10b29fcaaeecf87b74c9da63931b23a90307ec0ad256a5bbf574ce02e69d8716d652e3776a1476c0a39a71dbca2e7295b808a94e71a4a9c9f4e50110ac3a3b88846f4a34b2d3305240879bac93ab1c6630b9dd2819c3db8133741d4e1f1ee7bcd9f82c5368589d91f1e399b039c6bba03c320a63c4254c21baf5abce3f9a0c2f8a1b974ee181151d8e8bd5d2e8477ceeeeb169daf7abb27e9694566c08c2f935df8d38d8350ebb116d3f363c24940df349a625fce9c3450a927d49bf2faf752a1d8cc2c9d8d1616ca6fa57399efbd1d5fc02d6f1a7c67001187f316fe8897db0eb18f6c733423aca2e31b3f8fc5357c93ebec5844780e2a4d7b6da7c05b9d7ae08709539eab6fd9c5d4c82b9561f649cd078da6297a7cf5792a22a40b4debe72f2f15495fe651dd80b70517467547488ae4ea68653ebf3a9839141908c9ade0342137a34a961359e817272aed635d3fd5d6fdbf1a12c8ebfd319b5eb3ff6667f09c4ed0e66938c980df7086c0c905481d9a2f7abd0c6b51e30f0dc218fa9872a98c81217731eea90aa8b8713857879f638d3f2e46d1f31d601e725d84874b16b2c2f0aefebe1e5c3206899bcfb9888ebeda3af3aeb57899b62af80ffa8c0b3b9a08f3a4ef58d361133e3bcfb42d5c2dc81b61942aac74cbccbd18f546a21e86578c23c76433ac58f8d030fb403b50decce9c359736927e02c68d10d57bdcae58c252799a70b112cada2e8aa645acfa94f302f3333d0deb5657f4d47f319d6bddc5ed05c664f2bf0f432325678e3949ba6a25a4a66ac0c75d0ca9ceb182eb3e459c9a98c252b219608172818682f241f5cf89bedf31bf5a4a8bf4c994729123f4affd2a7adea9980379ad8d48f663af6986e5cfbf550c5f721cdc09fef983b73ae4bd1a61b0479768a8a2cc965ff24f4f33321693cc1ce8df85bb9c335db100fe658308a5b79d61825d9d83c98354dae225095724b3c76319474db6a8cbe35552d409f7178388f98b7efc5fcac66470efebbae30e6441bee106dfa1fc854f055cf81904fad3bfd4db48a1b4779be710c726e29d3411f5a96c23d37f0876fcfadd7a07747a95e1a3eb31fcb9457989cff80ee85f636dc5cbb53813edba45cac70811b5dcdc149e6a9250bf3e636b037357d0acdebd8cd4f3c78e84830de10bfa34d360ece7e8a59ae59eb0a2cb14dab46d04621ed0434556e1176bee87405a905a7654c3a9962f5ba7971eae1fa3d72df46d8a6fb222adf12ab5a3fe3227b4d6925aeb7bce1472d46af26e4071437e0c55798b437e5db3f11b09ea4349313df58152bd76bff4f1bb6a52085a626931ae6e6e3174b9d2464d449c0388c3cfe9d3e4a70207cdb8305f71104fa9b34920752f05dbb5d7ee48a72a7c4b2ddf644d9f09b80dc2661d5ee2696c8df327650f454e20fafd621a0595e6b27e89fcfc4d423cf621c2891607c8d9c4bd907aa10fe8e87119326fd22f7d068ac2fc62163d337087493754f0a3e6ff98f50f309018a748ce3b088793515b3663e00398954368ec2a1d1311e8526480da8e3886c2fef8c8c118f8138a66a85162bf961e97c33376bf8e0c9f915600211fa21224343aff836d799800a77185a3ac6b8defbd1fa4f3e17340c4a4d1ad345ddb0b8c7b717f40b80f81e68eebdfe104b12fc35c71c3a8f0124da6206714728d8b70c63b8323b51b118cb87f5f3c476f1bacdd039d265e5b88bc53537a59c6f2195c8f376f535ad261816cca17b26c4d1a3ea346f05b59ec104d662f75a14fcd38e18dd1a38cd24bdea18e83063e781508c140e8760daac139a0b4ff8b97f38446380d51d73f77465d467650891100178b666c5df652ccf27830b5f8cbaafc02da8db2d6872d2f2b7a47ab96af94eddf3af1948f9565af61c335dc47783c93d828679f8fa61a9c805210686689a330e4d7efceb751351791be98545996bf83cddc62c045939e052e41ea5e2bf51f9867cb426f1ee16a655d0b48450d5c67fefb4311393a45acaf1203e662dacee8f3207785a0b030dda9a8a92bc8d0e8fc8865a652b1a4f77a9c29c16ea1b77c34ae00dec80b1ee290eb87583bee6c12b120dbddaa19eecb22e7caf6d3561d3b50b4319193d8bb4adef154a50f6ae04b844c61d1be364634e5efae72a4da9d9b82215355d4d53f9e9b2a1080bb3a108212bbd734ef8fb28ea6804e7080706f7b2a7286d46bec35e3730b4cc023f70d19f7f725bbe6794e1b0eb6affa314fc14eaf8cc32558a8a8401f0e9fe6174730b9f2006590d53cedd064fa8908f17bc26256a3c4e3969a5f254fe1dd6eef02621553dcc1e300b19130673cd06b8355f4c437bf7ca65d7bf2b565bd8234ccbd5a8e0b4cdbd8429b9663e21e4c5c944d543dfc709644014c41b1e90dfa4877d66673543c6c1c91a2b3d229301e3973b9f167bbeb713e777bb9c871d1348b341e37c613f7e1879e5607be83e6ebb867edf09046fc205f3b13a1ef62946d7ea33ee40ce86069357317298fffb09e98f2ea666cb6f5c35eb9bdc83cc3c1cf9f8765fa60e7f3f4fc55f722d5bf023e830e46aae6cd95ef9c40011c7b0df5cc85dfac1d4c8ec798e53ff4989936fd5503b24d538c41675a80865d3abae516691c374b8e6495afe81d0178e61e6f84bfdfb34028be8ba58d47dca3de7c536b38f11e0a3d034adca16fa4c03b1424db79c0e3354a7f672b1c49296e081780e05dd0831ebc51223e123998d5acb8ae21588e47974b0d54926a0af3bcd3420a81a33a2bdf3ee8bd81e635a5c4721df9613a9e20903df5f30a46fbeb58f3f8f9bafea68dcd50b0fb89c7d3febd0f47cda0132ee95013576e7bc333e6bd477213d0f233fd654a588f423f319875694e8e84a853d18e0dccf018d7fed63347f739a859ca51d3d352f52c9c16106eb532c8ed832e313ee23f1ef8d2bd0764d9b3b1366a79b17a695c17997389a62ecc3f52d8fc9febfcd76df0b0593ccdfb3f678a8b92547ea298d7c04f6908c6dc82109a83990df5ccf24107813880156b19c3c24b6a62da7cc79f32850c91dbc9718d856785c1a10d4beab3ae1f61abadc7e04f32769ce6f2b2777916ce30ea8f20445d5bdde5537ae24115cbb73e176fc578413d0dca234f37e18d483c839aa4a5fe31858c72757cc004f9c1ffd6c0299082a581d2c4ed57bd7c896b35ca2671fc829188607830155ff16264f55fe4efdc33de2ea43a4405cf8d112980602d967141a336d91596408dda27425c78dd102a47f162096c2579919a15713747d1dd84434b8f4e665b0381ca2737140d78b74c78f4f636f08071031f136daaaceec258620aa04837e8aead480e3ec3c0579fdedff9bfde59e5cc53e77b2f282914854ed51f5fcd83ae12c68f1955e25a231063f145cf047ae55bb41516c693771323a1b4ba9fe149ff1a7dd40a407ac927bb658eda042f2eb6d101d473ea9b64755deb2b7c8099c11d7d4ffd225e3d275d11daaea8f2fbc60264f3c85f8540671dcabffe26dcd29b020ff3165de0b37584b8aee3017c523de21a4d0b191ead79a7a36edaf21cbcff0e16b5c5941a5b83aaa990a8d3b3b682b1c8eb0cba00964dde2c77273122b10e4537b2a2cf2bbb239a5975a03a60c8cf5b3c150ff820b39716fdb0584df47c405810c285830f2c25ee6faad4f43719163a59b08101f4d7272c52176fc06361fa34672e5a81373e9cd0ec3792ca89f28779811406969cb37c14291decace9d8b648bc0f9beea4c781e376691238047c69a9be717bb1d2436588544f562054c7e737fcb09dc8d80cfde1849e0b10c22954d3a5493a136d19675913a83cfccab4885b74cc314c0e763dc8e40084034cdff2c9d459d21dcce1c62553f6a1af3edbf18304a5fb59880555d2279e7239913fbd07d99f359b6a829f3ef646245a874e034b2e04f0b9388049176f93ae1d68b9a3e1c08e2edc525b3602cafdfdf4b1a919fd940a00c8714eadbd9394c8643efce45d8d194feb0bbf45d84047a735b6d33e4c2b310ed1e7f773c0a78065ea10b969a8158d5bf0b8c952a7eae23c6d64af492b8a4b22f5f744bc170885e58e64ada5fff3f44f7411976c33422dead993af88c7f75b4b58f315809c3e611f5ea645fe3fea46150d15fca96f77b9a4a1866ad76d3b88a8b2c5efbc2cd4cd344c575548584b0bd3fb6374fbc049f698bb68fa11f370fd5768e72d710737f391fcdb24aa44af5c476074279ac307c92fd3c0d08e1590636337f01704d699453c70b3b9c14d3719bcc1ecff287973ec49021aeb3ec785bda9761623ba5a9485102879a5f4d44d0288eb54ad05a7029b103eb739c71131cdb08d1979b857ed69a6e0f087ab7ee15c699608e85c786d81cba546d9fee450937730ae81340e7723492397e4b55889265a1d7f61af272f828272970fc7705ddb11764c4c740c3883c5f013e751121696f5338c4522e89e3fc7184f72e2edb296c36b2f4521b5a8f2584b9262fac4dd07436c0c8a2c8e4c96af03cae6ae0ef27fd914394bdb090a4cbdebba9ca5212dcc8a9d89fd0c0e34349da7ae5189bf86958d0b2a0055d807ecb122bdf06393178793e42c53319a1514908bc5917d56444b4afc27f61b012c1a0124503a7a4c971c15457b65af6915ff6581389af1bdfdd4e294ceeae0ad077efd1b3b6fbed410bfc1069f8d8cddf2c181eaed020169a07e4e87618265f9a7869e5d1eba03ab7b13eb7d7edfaf0c4e8f18d5cce20aa024ecb5e1ab5eba7406dfcb5ce4f3d1c883863ed1c33db02a44ab7dd0619b3fe35d89df82adc8790ecaddaffb2c4af1880e8cb773d1825f3efa268877993de4f52c275f767239f2c68d5694060523d06ff70281df2a751d620d40281f2ed0af2605ebd93b63805ad40ea270cfbd249eb39c5e6091ed9be3c5eb46aa128af3c83f7c40b281e24604149429c3024554517db3d619ae928633a805e2b654d236c86afe52d086f9bcef700b246336d1c3c157ac595850e8c15582cac0cb879f3797b5c53fceeb25279274265a3bcce680f34cb9d1c05619babb3a93a03a66054d633fd16828a8340084b4c194ce5d1f8746b0c5e7deb2aefc457db2d76a6f2d9ccf940ede4beb9473b648418b0fcc9f8e2f41c9e1be92e0c3d82e605fe1d63813cb57763d0c54f57d9844bf64d3f786567f7ce5e665243fa36f8ba9db1c5724f36c2355cf19c0ed89da3c989107890f44bcc64185bd585edea25058490bdad0040821037e4320505e7394955663b003e429384c5ff958ad02b77a56812517df74a4fc9ebdc4bcee51982c59a146ce09ec05dec671844ed7053e92446b42027528320404774138e3c44bec9a6e3e58b7dd0b956241ceed11263b3c16ba283e2d8fc2b3c7857d91acc3da6fcf78ac76244458b5725fdd48e83135d6b8c401ea1e603079d246dcfa666f92b31744d2e85678e07ab7655c550b65aaa9d9522083ee8ced9b0c00d406b8ba0d6197c3fbba99a7d966a02413b74133dcdc37b71c4867814c2d16bc767d7dc160efad6d6b2d45f6f7dc174733abd2824b8b16315fc0f987c01feb346dc6b6959d170238282b0128aed737314c88a09c9628cbb176c46b09f4d1b2f76768b70952b93013a5e0ceb1dc9bb74250066e0088c8301326d55b33c786b22be2a71116117258067c5152d10ca3794621963f3d808242d228dffbeed131f615e80678c9cbbbf8e86147364598391686466bbe0136493cc28d5d2956f301813b8d326d6bfa39de8789e552bc436f1238176b2d8089b5a6799b3779ec73d50634d1bf9efc45ca007bc6473e6fdde45febe57f80aa1798a5dda9a52f1ee3decd97ec4601fae5b5de4c890247afe499f45461bcd80e4cc832535b9ae2215d9ea66f1f48eee3a803366383f2c95acdf60ed702803828fc049fe7c3707aa926c9444fff67bc57470d2fd49e6f4840488607c9f71cc2fc035fee7c9755b7d0ccbda5831cd10c56d4e7a3db8e06529a5bceb3619a482c9f37b30921f9edf48a0952c8b3975573f655383d141aad2bcab0bd6d2750124a70a1cb5d645d9144bef4527293071f20097a29235a5b2824b8b522b7b37e36d52b2a1404f4b3315b3e76aba759b6a6ba2195cbafa0729141428f4f518a842a3514d650baf3af6969f7a8d22cd6e4f5ccb5acd366ed37a5238fcb3a569a73b8c4cd8e9a35428e3b7f6073e26b9124d933cc86b206d43651722ab446208c74fd7c3d26fc70067aa6821a63bc1f71f60e70a26e0c40eed97fdf4ae6dfee73b8077a14ca60d7384da25309d4a04cdbd178efcaec135962c029f95b13ee2e9094fadd66f1106f50588cec35eb4496ebc0afd6c06dab13ea37210d81376ce1c93a6e04e9331c9eb013e5979ec7627b29df18199d7ed510744f3fd4fc6620a9fc6f69d7cf816b798cd51434fbea9bf1dafe06b7e787b3f3858f6ec9f3963b93bf1bb7abb63235ea9a2ec632198a682a1f1c254037d46a27aad581e337da2dedf75014a742f9d5dec675ddc518d9416b4421a54056973e573745023a76ab22185e7d14335d47ffb59fcd338404b1c1503e90fc72808987729699b48107998a78b1fcd2da6a15b37484315fb8752c4581adbee2596666f58409ebdd52d58985e436dd139f0a681475dc26436c532fed04c03356f3bfeecaec9d7f8c0230fe249c324b5213076381f0f317ef48dd39e1761ad696e5c31ccf5ce852a03cd0dfdfa90898a8be1398affe6f8519526b2fdddc01021941bcec698022b2ed306594c6498daa174115a20ebce3f4c9d90bb5aa6099641bc11edca14007ec2d548d81f265e8f7b0f2cb3776209adb373f86a13bbea080181e80add611689071508dd83dc9c46748c477eaed8c1198da1bfc9a92e1854cd40b0c7b26e9e973a1a875c63668bb666c15e211e492a4c899c13ec92db52f6dad2dad766b5a00c7e1ec39376974ce757627aca48e8c35d7e4f307a340e43f58b7046025b553f71572a237b48dc015c7f4073fb721f9236355d50ba7a66cd92c99d94bddcf01bd7159d3278d76778878f824825a140d6ad8eeec862359b5c11b7f1e99b96a6627449a1a0d135a6dfb0842c41ccf9cc5d79ee4ba908cef41af07195b1c2fd98ec7ef5464393b1e5184087c3e0c2dc3a1ddc505e71505d1921af699e22d28fb718d0dee14fce9e43af5844172c22f3c01a884d8533fd218de2698ce8160665b6057bbe8c876e39304f90e94f1419d4c96254e381027f04367a8dc80e6334cfb51db517dc6721d348f50ff14a38c67e4b3befdb89d8311c81156c21e43ad96156a1203929d577a6cdcd0d719635fe360f578d6f9fb66a1518880f3b5adfc06dc2961b7cb2ccd25913844440ffa0e46048bc9c4ea8b7b892fd1e1bb185a9e6e0e594e35adcc802dcff4d9fd6ff7113b836edee1055e84e8edb51884fb88ae09dcaa972f69f68610ac1bb293e5e9345d2dfea776fd0f3642a5082cdd61b92b024396b1a4f1ca442671162eb2a613b330a5a5b51b4ba794264fee94eafc3c1cd70a512159d746e539a203ed6d099145bf19ee896c56bb5ede6fff118c7a049f818c246448b1b9231f7b1166df46e21a0064cae5711e43e854cf9417125051edbb1d6f49128e9da4ee49d111c01d96883209ef56952a798c1c8dcdf36cb033803db7fcafdc52461f7577a10917c4d98b23b6a0455943194e83390d6ce8e5aa0135f4c995fa3787d3a47b25ffd9b82d88d982fdc23bc3b7b760171685285f0c75352ffe0f7b6d6051b1f1eb385dc0fa7c72f0b321e7f6ec95ade2ef62871b0d6d8c859426b0dd3e95fe6dac2a8eac983d2c9602828c226199c6f4db6479a8561ef9a125042a2934c3c412bad020e4a1605d0b770a0779fd61ea834a42c89be1e1823263270eee73350a9dd8578d0f7e9630d4753a10465d6a3eff631f6c8ba35ab0253133237663deb94c6b07645086c42c5753b35903523612612a28802a6311e39f2caa39d5478f06a6439c83406c7fa16ceb245ef99393868064c7bba24abf73b386fd34ba17636057735234ef7262bc4f5081883f92183853ae49d799254fd6840e6c2e11ba0cd198221bf1ea37474dcc2a07ce1a5f88271c13f270bfeb7a843b6e4f300235d4fbef6805a9dbeb7469e8defbc808f08219d348ad46a17e9091dd12c6b4754e56f27ab3c68bea7ae0de820e6b10bc43eff786feafe03ca8af0955f7ca4da8ff972b0f491f6463a69c13757ae9feb5a4bdf395f465e88b730f7ea659acb7c3fa2b21ef6d37a2bfbd2d74e111443c6d636c12bfb65d5315ad8862eb6ba49406cc6e064aa2070545bff088aedcb82032bcb683b16938791d8b9917c30908a5134778a7388fdccea3dda3c7994437f5e1696dcee54b3e88cf6d338a028e44fb95dedd459a6dd1d15ce809d9623cf343f008f5d36f690fcc497f03eee0a3a9333162a19359ca8d90c9a335a4a1698f7a620a0ecc75af447c53d7f264ad153c966bbf4dd1f83de41017382d846381f379a98e5252b9e2d4b5dd5c292c5698bb4e0e2875f9cadc6072202c924732126c09cdb3d1900fd79cbc25fba0e5982808a2a89fe85b1d76c8681db572220718239df5605fae4184717e70e8dbcc0184e6575f1756afeece5236e2f7f60021c831a39459a80e1141e452b02d39a30907c2117af361c9ceea3509fb42ca1e756df7c6f5a09362d1bf1baf6b54a9a1adb2f6d164f670c93e919a1d1a8dd8a49edd0072a28531fbf18b5868a0956fd62ac053267916740ba74cc83e0765ae07ff3c9e8b58f01dcca8b9da5d84a7983f1a955079b7deb2323e76dd50531180b3b71bdeead44dd69846da56e6179a318817a129c4e49d9ae42b8f9fd71f9826556f9c9eff00f21"], 0x20a0}, {&(0x7f0000001940)=ANY=[@ANYBLOB="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"], 0x5f8}, {&(0x7f0000000300)=ANY=[@ANYBLOB="340400003100200029bd7000ffdbdf251d03b680040014800800df2a", @ANYRES32=0x0, @ANYBLOB="80504d732a89faf5a2172c0c228b29ba9148363d162c5e537baea0786dfd77206da9ac6d3c0e1af360f4233b609578a339018960dcc6ebcb9501e5a0f9c3c8b9c766da53593ae48e1ae9c08df3d365e03ec9886bb06f58e263ce7eb1e09f878006c3e809cbf215b954d584097d9b75e0337bec96aa4025eb996fb12c7d22ee87e67a26625887a3258bd83f70a5c856f2fa997693aabf6f27b29d28574ab5e432f218bd2d58017472f5cacffb6b47990aadbec0fe8be45773649b9f0ff289412406afc45fd8f59b35588fc2a964c94116b76f3bdb719685986e8559469d032d4e3bf30a44bbfc28eaf3a3bbf59b558f1400d600fc01000000000000000000000000000096eb77751f0ae22b544ee701db10290e197e77d0b206430026081e062dd64cc97fde461b3d084a6274bed9a4fbf26d70a41dda08a1e7437594d6511a739aea8bb3950572b3a4860dd8da8a02d5203b63a3515aeb7e37f3d82e959a79b47d8299098a0f33e6bd2823c18e2fd093f95bc4004a40046a89742fec7508d6ff2bbc69b84f601fe33ba7fc6ccadd3ff89dd1b4e58c78ac388894d095aa7a9396a461bfaafe4732fc88ec403e1714e62ee767f45b9e77c7cb4322eef91553fb2f680c6ae6515154ea3768db39c582a6c9630400a780aa63d62670730123e460932283325ca2e31210c6885720bde01cfe674aa8e1880e844c0553723789f08f5110f1d389ede339ae7770b139978229a9f5f9fcd80b8b5356f7e615912081bcd9a8ba22454f8ae4e857d1812e3c94bab15ebc588c5d0ac28c40c335462b18d4753e4451739dfe91579df834f4d381026384f77737686fc6dc84a50f80291645c2f9cc2f2c2211768887535466d490fd9c49c4f4ed7e0061e0b9a7a48afd8fc93cf3a1942da20ab21229d9aaa2824fc604c1cd13879241d860de8c77511c3c461ad275fa73df718b9ecfb3024cd54a09092a9f82bcebfed939eda8ffbf0e84a35679e6c8d7bd96637440dcd1b18e3e924c6e9233062b15bd697ce0cb67071af411cbd0fa1a8a89c498cb4cd8c992863a405fb5a45885069057538c047926ac260ba76d6d66f8b1a1f2820400eb800000000c003c007f0200000000000008002700", @ANYRES32=0x0, @ANYBLOB="e800eb808516de5ff2cfac7861986209d930990e1e4e56adf3266e5279b4c5426e6ecbe01189ef442502fdacd9214de6e53379239ebc2dd09fe307f50ca3623caf72d0b939dac86db4c3d94b5e42c0b4fd7207764946da9da5c5d87942fc0b5d61df80ac2510024fc27c10f4ba3d121fb49ee4647f9592c8533de59a5f1dbf4949823477f75e9cadf43fcab2270038282f879a56d9a87f675b536cd04d5e990c0b33e609a9ecf1478926da23b8264c03961161201d7fa5b3430943b8ce3d1abcb72b419e79e8a534d6100cfe02a71cd5909fc28108191987aabd6bcb04003d8004001a800400358008006c00", @ANYRES32=r0, @ANYBLOB], 0x434}, {&(0x7f0000000e80)=ANY=[@ANYBLOB="c00000003b00000325bd7000fbdbdf259f5a41e225c5ec926e0dae5e74736c33eb0aa707a73645cd9f5eef30d337a2b8f147983555963ab437358b85d187b68f65d3604ef29b8a434241b4d202e1e44b18310d6c166c837205d799cd73746a8b29d921d2fbdadac158bb783cd095ea7db71467d0aa97876ba232a9776ac1e71d343963b4eddcb819c51b295aeb40b34710b8ce2d26294e5350292442065ff5281fa614001400fe8000000000000000000000000000bb08005000018000000000"], 0xc0}, {&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x2bc}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=0x0, @ANYRESOCT=r6, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r13, @ANYBLOB="0000000036000000000000000100000002000000f18543f74ef89eea2f3bd73be65f589355a193a922a3128ecad78ca896d9e93817f775aa2cdbd53057463b0488", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=r4, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r16, @ANYRES32, @ANYRES32=r16, @ANYRES32=r8, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r12, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000010000000000000000100000001000000"], 0x128, 0x817}, 0x810) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f80)=0x1, 0x4) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) gettid() 6m32.687112138s ago: executing program 0 (id=247): r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') copy_file_range(r0, &(0x7f0000000080)=0xfffffffffffffff9, r0, 0x0, 0xfffffffffffffffc, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 6m32.686737628s ago: executing program 0 (id=248): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2140, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) close(0x3) io_submit(r6, 0x1, &(0x7f0000000300)=[&(0x7f0000002240)={0x0, 0x0, 0x8, 0x0, 0x0, r5, 0x0, 0x0, 0x3d95}]) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) setsockopt$CAN_RAW_JOIN_FILTERS(r8, 0x65, 0x6, &(0x7f0000000000), 0x4) ioctl$KVM_RUN(r7, 0xae80, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f80)=0x1, 0x4) 6m32.551891151s ago: executing program 0 (id=249): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) r2 = fcntl$getown(0xffffffffffffffff, 0x9) (async) getresuid(&(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) (async) fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000800)={'\x00', 0x1, 0xffff, 0x4, 0x8, 0x9, 0x0}) (async) r6 = geteuid() stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getresuid(&(0x7f0000000940), &(0x7f0000000980)=0x0, &(0x7f00000009c0)) read$FUSE(0xffffffffffffffff, &(0x7f0000000a00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r10 = syz_clone(0x0, &(0x7f0000002a40)="60caec69f7a228f7fd9a5ffb4cc25b2335877db972a47659dcd4880eaf7af4e1b8f9b2bfc9e0f414e1566ad56f963da78b359e63e4d6e3aebb93b242649304548a9f325b3e1cc64bc97bb51ad173b8cbd1c13022e0fddc26d123f164ab0aa09467cfab3065f0", 0x66, &(0x7f0000002ac0), &(0x7f0000002b00), &(0x7f0000002b40)="26edeced982c9820fa31949a9fd92eb1fe25cc519418d6594641a4d635708202829ef3aa8db4326b2cf30d76a385f94d2fc59e75b37d337ef599800b5fe89a1e08d800cf0af024dbd220d63c7dda95bb772e1737b83ceefd95a8879d5f5e9abc885a786d9b5ce46b7dda34b45727558178a10091b8e52a6225520cc67006d16bdb") (async) statx(0xffffffffffffff9c, &(0x7f0000002c00)='./file0\x00', 0x6000, 0x40, &(0x7f0000002c40)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000002d40)='./file0\x00', &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) (async) r13 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000002e00), 0x2481, 0x0) (async, rerun: 64) r14 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (rerun: 64) r15 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002e40), 0x680100, 0x0) (async) r16 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000002e80), 0x1, 0x0) (async, rerun: 32) r17 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async, rerun: 32) r18 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000002f00), 0x80040, 0x0) (async) r19 = eventfd2(0x4, 0x800) r20 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002f40)=0x0) r22 = geteuid() (async) r23 = getegid() r24 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000002f80), 0x1, 0x0) r25 = openat$tun(0xffffffffffffff9c, &(0x7f0000002fc0), 0x2b4280, 0x0) (async) r26 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async, rerun: 64) r27 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000003040), 0x200080, 0x0) (async, rerun: 64) r28 = timerfd_create(0x2, 0x800) sendmsg$netlink(r0, &(0x7f0000005300)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x10000}, 0xc, &(0x7f00000007c0)=[{&(0x7f0000000080)={0xc8, 0x2f, 0x8, 0x70bd2c, 0x25dfdbfc, "", [@typed={0x8, 0x37, 0x0, 0x0, @pid=r1}, @generic, @generic="3043e0594b84cc9bc3b296ea7cc29ffbf162157d284e6321dbc6b59dce089dc1db8e10bfe7be13cdac5a08eae401540532d61ada18aafbe37e4845102f1c6ee8786e8a1b635a8bbc22ec9da067ad01739209710bee1c45c82f675c89fb916599634fe7b2c7398621b5a70f245b2858fd6f0c9665af022ca475e21c5a3e88bef78205a66ba2d3bb4b4c340e4c40eb1af0413bd94a61f3d1bf47530682560eea41c4ef511299a65de283bab9ea2f69"]}, 0xc8}, {&(0x7f0000000180)={0x12c, 0x2d, 0x10, 0x70bd2a, 0x25dfdbff, "", [@generic="08d1b3d21b02acbf2c594f9b64bc963696294960c0dc9a987b7cc7363e25c07b37f3c745bf295f7bfc1e4e6c89712b0244d7c0c14b67765a9288cbe74be7cfcca42346472d38d565002a8bffdc50a91a3b1756351e8a2ae876a83c7f2018a52ebb6eb2a1a14bdf80890672e65901a657f41483bc535782595d15fc15aca0b781400f813acfe3c3ae6ec187ddd58438ddc341c5f201fc9033301d5c0c4883cc18ee7cca75519606f8ad0ee44816b12314f7a180154f9f6c7bec8f7fb9d2663bdb1535fa95e68d98705c482da699a167d29bbc9b446c669bfab00b04b9330b3c4171a2c77bd64c9e244c68e3c54a01fa", @typed={0x8, 0xff, 0x0, 0x0, @u32=0x10000}, @generic="10512f1186e534a48913cec01b745af03c", @typed={0xc, 0xa3, 0x0, 0x0, @u64=0x1000}, @typed={0x8, 0x113, 0x0, 0x0, @pid=r2}]}, 0x12c}, {&(0x7f0000000400)={0x150, 0x33, 0x300, 0x70bd2c, 0x25dfdbfc, "", [@generic="53a89583a87aa2031901d3c6af899f47521e038ca5ba6d9149f40eef9bc03e7c3a7cc8660d85881f4293bfc18e65b284f0da8554b05f712157715a972333ce2557421b4f5fb10ff6d3f9db50208ef47c8c8a5d10aad4a40817cf2c17052847cebc5b2df99a50f934d590e9", @typed={0x8, 0x3c, 0x0, 0x0, @uid=r3}, @typed={0x8, 0x96, 0x0, 0x0, @uid=r4}, @nested={0xc3, 0x112, 0x0, 0x1, [@generic="f7d7a9a9a899b79575931e7bbd79b35439cbbd77147beddf5c5d863e5ec6d14e95cb4ea80a7c682baf844597ee93e5708ff65e00cd9745cc200893dc4095589350374efa674f4a8bcf3eb44a3df1a8d35304367f3c32b8b2c2c8", @nested={0x4, 0x7f}, @nested={0x4, 0x140}, @nested={0x4, 0x124}, @nested={0x4, 0x90}, @nested={0x4, 0x13c}, @typed={0x4, 0x62}, @typed={0xf, 0x1, 0x0, 0x0, @str='/,}{(%&-)}\x00'}, @generic="ca8a10b2af53f865f64a8231a0701633d4be90f9bdee87161a26ba514623651c2a972fa2c3bcdc818624b01182de5e516f37db1048087fcebd3c8db944"]}]}, 0x150}, {&(0x7f0000000580)={0x240, 0x17, 0x4, 0x70bd29, 0x25dfdbfd, "", [@generic="15711762dcbb88ffcaf9d027e231bdd9d71a36691989eb5927418fc030637a38afd02068c72ea1ef75d333f08b24ac0f9a6043c903f1dad4a310d63f32392167d61ca89543fcac8bcf8f21740adbe8c46a83c3b4f4464dd02897f281cd44e273f1c7ea78d9412a93fd65b1fe35308ec5ef792e4a9b27ca7e5abedd1f26c12fae78b15242b80e2f13cd9a580730ca9ecdf0f9", @nested={0x10d, 0xa1, 0x0, 0x1, [@nested={0x4, 0x110}, @generic="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", @nested={0x4, 0x7b}, @nested={0x4, 0x81}]}, @nested={0x8, 0x0, 0x0, 0x1, [@nested={0x4, 0x5f}]}, @generic="05d4c516e6ea39f9b7d8cf1749499380800e0c79fa0ccfd17deff7c576575e3d13b9aa9aaa65669c46dabc22005cd461ac100bb6acbfd60a8d437f0cab45aa804008263225afaf895af9fc1418d427366ec8f73bdb964765f06cc4004a8eacbf23ed20f099066bd899e89b0fbcf6841cb792dc829bfb639fe67c44b1b60638c91848bd70"]}, 0x240}], 0x4, &(0x7f00000051c0)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @rights={{0x20, 0x1, 0x1, [r13, r14, r15, r16]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r17, r18]}}, @rights={{0x18, 0x1, 0x1, [r19, r20]}}, @cred={{0x1c, 0x1, 0x2, {r21, r22, r23}}}, @rights={{0x2c, 0x1, 0x1, [r24, 0xffffffffffffffff, r25, r26, r27, r28, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128, 0x20000050}, 0x72e881e8dc61e2d4) 6m32.512772351s ago: executing program 0 (id=250): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000001018610f4205ae07d6c01020301090212000142cec8000904690200ff5aa30027a7c485"], 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9f, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 6m32.461784792s ago: executing program 33 (id=250): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000001018610f4205ae07d6c01020301090212000142cec8000904690200ff5aa30027a7c485"], 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9f, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 5m26.344809051s ago: executing program 5 (id=1126): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c031}, 0x404a05c) r1 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0x7005, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x12, r0, 0x7aa7000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000100)) timer_settime(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0xb6, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)) 5m25.735009383s ago: executing program 5 (id=1127): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2d4003, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001980)=ANY=[@ANYBLOB="1c000000140001000000000000000000020000000400ff00040001"], 0x1c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mmap(&(0x7f0000018000/0x1000)=nil, 0x1000, 0x4, 0x13, r0, 0x92d8e000) 5m25.668457804s ago: executing program 5 (id=1128): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000480)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) 5m24.822124191s ago: executing program 5 (id=1139): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000100)='mountinfo\x00') mount$cgroup2(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x40000, 0x0) read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) 5m24.806416401s ago: executing program 5 (id=1140): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf2501ab4adb920000000b"], 0x30}}, 0xc840) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x800000a1e) r4 = fsmount(r2, 0x0, 0x0) fchdir(r4) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r5, &(0x7f00000000c0)=""/55, 0x37) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r6, 0x3, 0x1) getdents64(r6, 0x0, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x447) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) 5m24.716249183s ago: executing program 5 (id=1142): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x31, 0x0, &(0x7f0000000040)) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 32) getsockopt(r0, 0x13b, 0x4, &(0x7f0000000180)=""/230, &(0x7f0000000280)=0xe6) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="141100", @ANYRES16=r3, @ANYBLOB="010029bd7000fddbdf2515000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) (async, rerun: 64) r7 = socket$inet6(0xa, 0x3, 0x84) (rerun: 64) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)={'b', ' *:* ', 'r\x00'}, 0x8) (async, rerun: 64) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x7, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x3ffffffffffffc}, {0xffffffffffffffff, 0x1000000000, 0x53e5, 0x20}, 0xfffffff7, 0x1, 0x1, 0x0, 0x3, 0x2}, {{@in=@broadcast, 0x1, 0x32}, 0xa, @in=@private=0xa010100, 0x1502, 0x4, 0x0, 0x0, 0x1ff, 0xfffffffd}}, 0xe8) (async, rerun: 64) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), r5) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000013c0), r5) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r5) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000016c0)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="010026bd7000fddbdf25090000001800068014000400ff010000000000000000000000000001"], 0x2c}, 0x1, 0x0, 0x0, 0xc001}, 0xded4a1e4217ab166) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x200, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000080c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r11, &(0x7f0000005280)=[{{&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f00000007c0)="76a5c5ef2d866f986ed4e5048036ce2977e9719f39938fdb90e004eef89256bf82e3eb29200c594c088f6e36eff54033e4094313f180f7580ca10235f259eab7dde93fa6b2ed434ce067799a2d981dd0f24a4a5c99cba8e6ef14c998ffd88e66878262e234cb509b1f2489215b57453128fbcdb4bf32540b71695603b298d8b60962722de9a6b0c053acb5ac7eb081d3612d95a0ca36c658c42a1c0ece399b6ad8bca4367c18a68358d13a3d62ac89250768d152c6ee47ae07e1fb763486929e414eae9a781d3b5c2de5051c4f62e8e51a136fed489c5f2a088a561c9c77deede474797ded1d8eefcb206a379f", 0xed}, {&(0x7f0000000540)="a8a541bb3d4d25e5c5f778d565855086f0abbf0a027f27e524087d77590e98a49fc80e231d5831e5c986436743cda917b56b070592c5992de6c4cbab9366325fd265b95d518e593ce007467b1e28d917b2c961e52aeda82fb5c55a325c57d46570127730b1a32df05756c61411f487a17e1bcbb17aaa414b673c30eadc38288b6ee5dc263f60ec6713a36705a0986b4ca0291f0dfc61992dc0e127cdeb0c35cb72b1eebc7097b0ea9a2bb8a41126de337387a74892ffd872", 0xb8}, {&(0x7f00000008c0)="ab1a560126136399ebe2de0d06f5919c0da3ed3f215307f243206dcbb7ba73a3b4e71386b7babca65b74d2b8f118d86450ce3f93857a83113140ad1b45c75b78dadea2b43b689b62ca0029a5c51bba021cb461830c1ccc9bd2cd79922f8150d30f2dd53ff13b8fd95013919bd8917f571f3b06434ac01fb94a5920cf71e1809594b75302eb82806b10bfe7ad757e8bda35f7c480ba1be5e6dae40cfff85ec8115a96b73b87cffcdfe24c11a74989", 0xae}, {&(0x7f00000004c0)="077d444a0b3501a4b6213b9cc53d5a474bdf1eff8befbb05450a86d12b6b2b287c32f7aa6e5a0ffc3398adf5f681da56fbe1cc50", 0x34}, {&(0x7f0000000980)="108df4baa6cfc3171927d6c413b5b157a0a9b3e4905214c5e53d2ff6d07ebee440133be5c786d8e0ad84a8bd88a87645cdb633792c2a7eb2f865e81e", 0x3c}, {&(0x7f00000009c0)="bcb17574783d211076554dbfc98f1a2de9900225930b9ecd85e2005012f4b310", 0x20}, {&(0x7f0000000a00)="0706e070e4694713790d8cf70cd1dee2a7adfd9655f864c93e868b74ed1e61c115289a117cc60896bf73813fe92a526d4eedc8bd979ca68124eb5d5e300c02e6b84ad7fc379c310b9641e660fcfd582e4dd77995e8c379c8e47c29605ca124280af1c4f0d69e77", 0x67}, {&(0x7f0000000a80)="2b328f06e26174f7cb5107f7a942a021e41219591ffde807042208a59e14f4f7d36a92f54dcade386c96f717be8fae91ca1028b7618a8cd58dfd3dfcf87f", 0x3e}], 0x8, &(0x7f0000000e00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r11, r5, r11, 0xffffffffffffffff, r5, r10, r7]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @rights={{0x30, 0x1, 0x1, [r7, r1, r2, 0xffffffffffffffff, r11, r2, r4, r10]}}, @rights={{0x2c, 0x1, 0x1, [r10, 0xffffffffffffffff, r1, r6, 0xffffffffffffffff, r7, r11]}}, @cred={{0x1c}}], 0xe0, 0xc010}}, {{&(0x7f0000000f00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000f80)="ff9ccff0533c1e7866fba41dc5f092d177931941d21ff752aa4155027e2443e4e7", 0x21}, {&(0x7f0000000fc0)="8ffc631af9de030572e2a4c17b6cf0e65cb8e5f9367f75c35439240f2b89522021aad0b85a", 0x25}], 0x2, &(0x7f0000000b40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000004eaa2bf0ff001c0000000000000001000000020000009ac30000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r11, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000010000000000000000100000001000000"], 0xf0, 0x24000080}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001580)="1cd28cc3cae5660a97f863e161e237300f6b019bed6e18043f6954e291b1b82b6f3bd70fdf60e209f9caf0e5abe9e9c963c61fc076c7b0f9da79d3be20fc959ecca99760b0e224dd10c6a0fe3bc94023ae6e804d8478ff57a4697c3e05821cfb2308b1349a208126e5e379cf61b9e35591d5b896d450d34738e3e3618f535aa294597d1d5b92beb439247ab6bebe1b6d6444cfd72817552822dd390535698f7f6077437987c5ced6676765", 0xab}, {&(0x7f0000001680)="ba534f3d5a84f0b2b80a5d51cd95b4cef0418b5e539094a00ad4fd84780e771868", 0x21}, {&(0x7f00000017c0)="714d7986fb9e46e3dc01ef6a542d33a0796300faf36376ad2c00b62dc2e12521968fb7948321dde341567dd5ef3fffd1b69cb4be85429aa66625c861c3b25e68220b08c76c16531bdf9b5ee71c9c072a1ee8987233dbd5caa24bc9f6a74ebe0a43afb525306002bc47964f6afb36ec21572c0b0d0d2968cd5d907af47538555b8f376e08f2628d5da0782c97be9ba36c1e82a005df26c1c8934dfad7b4f1ed042c1182ca170aa2dd9a570b9062287b148dec88b00f46d2e12206d6b09543ca327c49f4a063dd2cac88bc", 0xca}, {&(0x7f00000018c0)="f2698e0a049b8edc7ddfcdbc96ce97390b8ebb774650d099f892d4ec47481b6cde01afe8dcb5499670cedc726c4b271bede0c5d94ee6a99b070d9785bbcdd2eaac2425fe69400bd3cdfc6788c2a4d716496b8c06fa15d1eeb3d1b89038e2b80498fe5ac1e2c8b07f93f732a281b43243eee5ddf5a98db4d68607974da64e924ffd4cf67f189cbf6a9ae82d6f73fb1fed8580f23d2304aaea851068eb984a5b5ec24827201208ffc1e8c28c034b3a", 0xae}], 0x4, &(0x7f0000001980)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000019c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000005200)=[{&(0x7f0000004200)="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", 0x1000}, {&(0x7f0000001a40)="d4b3ddb49ae1211373badea8c320fc3dbf675435b86e3079a50bb28011f55d9da4211e69cb1cebacf70bdc6d87ea46a4295af6504021b3d7", 0x38}, {&(0x7f0000001a80)="57dd6cb65ffa2a7f402f7d5a2523634f38294ec494f509b9cd2fac63a31d381c5dd44b6b7f2aa5783eb5abae80d707ce873c9492abc24a987e53d06e422778602756281ea8a5b47323e9c24fea8bc31858aec3ae9294edb8b567d26c80a058647b7e7462c41bed702496f2c49ead243bb84b56f243f1340203aaae9377cb78691a050a9026c1a88f07aca432f13e7c32f531615bbd58a1180aa7", 0x9a}, {&(0x7f0000001b40)="70a1b09975fd4533f6cd3000e261a657f0b06d2b51045629c28b9ec250ef011223cdd1683fd5bb160b878579bab71f4eb45ba63707810a8078c39d67884f1a2b9e092c6350510fadfc0c0500e985186ed8fd4c3b3716cf51d93b7770b31db6546360924ca518408bb4b8f7c27ef452d6560693ba1ec7ee5c6b253fb4e3b86240182005c7c093ea354324392885fce9a57515e74e", 0x94}], 0x4, &(0x7f0000005240), 0x0, 0x20004080}}], 0x4, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x4082172, 0xffffffffffffffff, 0x418a6000) (async, rerun: 64) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) (async) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 5m24.656582234s ago: executing program 34 (id=1142): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x31, 0x0, &(0x7f0000000040)) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 32) getsockopt(r0, 0x13b, 0x4, &(0x7f0000000180)=""/230, &(0x7f0000000280)=0xe6) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="141100", @ANYRES16=r3, @ANYBLOB="010029bd7000fddbdf2515000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) (async, rerun: 64) r7 = socket$inet6(0xa, 0x3, 0x84) (rerun: 64) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)={'b', ' *:* ', 'r\x00'}, 0x8) (async, rerun: 64) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x7, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x3ffffffffffffc}, {0xffffffffffffffff, 0x1000000000, 0x53e5, 0x20}, 0xfffffff7, 0x1, 0x1, 0x0, 0x3, 0x2}, {{@in=@broadcast, 0x1, 0x32}, 0xa, @in=@private=0xa010100, 0x1502, 0x4, 0x0, 0x0, 0x1ff, 0xfffffffd}}, 0xe8) (async, rerun: 64) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000fddbdf25010000000000000007410000004c0018000000dd62726f6164636173742d6c696e6b0000000000000000000000000000000000000000000000000000000000c70d8fdb0000000000000000000000000000000000fb28375cb9b82f26647a7bb8348df10bf03fad0b755e9a77c6ee83ad2981671d1175a2814d1c20433950fc085e5ac45d2c21176f01243f48a267d9b56fbd77e85a9cf3bba78b4943ae0939d9d80bef65a72eb2a02579b2f235a1abb684838f0b88c78ba98bdc46ac61f45f7138cbd3658a92982e008a71cea6dc700b6bc2b971deff241b7a58adda599ab6bcab7e4ab1f0319c9568fdc152647fe69d52ee83c1063d5c7bb6ed50833b87372cefe1b27dc1ef206323f591113c45099c8bdb96586fb9a0b49e2e90088e1bb0ac5b4fa2c4ad35b11c7ff13b35027640fcb60e504f1035426bcb0009b955e7db50a516694c301988bc12812087"], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), r5) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000013c0), r5) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r5) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000016c0)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="010026bd7000fddbdf25090000001800068014000400ff010000000000000000000000000001"], 0x2c}, 0x1, 0x0, 0x0, 0xc001}, 0xded4a1e4217ab166) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x200, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000080c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r11, &(0x7f0000005280)=[{{&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f00000007c0)="76a5c5ef2d866f986ed4e5048036ce2977e9719f39938fdb90e004eef89256bf82e3eb29200c594c088f6e36eff54033e4094313f180f7580ca10235f259eab7dde93fa6b2ed434ce067799a2d981dd0f24a4a5c99cba8e6ef14c998ffd88e66878262e234cb509b1f2489215b57453128fbcdb4bf32540b71695603b298d8b60962722de9a6b0c053acb5ac7eb081d3612d95a0ca36c658c42a1c0ece399b6ad8bca4367c18a68358d13a3d62ac89250768d152c6ee47ae07e1fb763486929e414eae9a781d3b5c2de5051c4f62e8e51a136fed489c5f2a088a561c9c77deede474797ded1d8eefcb206a379f", 0xed}, {&(0x7f0000000540)="a8a541bb3d4d25e5c5f778d565855086f0abbf0a027f27e524087d77590e98a49fc80e231d5831e5c986436743cda917b56b070592c5992de6c4cbab9366325fd265b95d518e593ce007467b1e28d917b2c961e52aeda82fb5c55a325c57d46570127730b1a32df05756c61411f487a17e1bcbb17aaa414b673c30eadc38288b6ee5dc263f60ec6713a36705a0986b4ca0291f0dfc61992dc0e127cdeb0c35cb72b1eebc7097b0ea9a2bb8a41126de337387a74892ffd872", 0xb8}, {&(0x7f00000008c0)="ab1a560126136399ebe2de0d06f5919c0da3ed3f215307f243206dcbb7ba73a3b4e71386b7babca65b74d2b8f118d86450ce3f93857a83113140ad1b45c75b78dadea2b43b689b62ca0029a5c51bba021cb461830c1ccc9bd2cd79922f8150d30f2dd53ff13b8fd95013919bd8917f571f3b06434ac01fb94a5920cf71e1809594b75302eb82806b10bfe7ad757e8bda35f7c480ba1be5e6dae40cfff85ec8115a96b73b87cffcdfe24c11a74989", 0xae}, {&(0x7f00000004c0)="077d444a0b3501a4b6213b9cc53d5a474bdf1eff8befbb05450a86d12b6b2b287c32f7aa6e5a0ffc3398adf5f681da56fbe1cc50", 0x34}, {&(0x7f0000000980)="108df4baa6cfc3171927d6c413b5b157a0a9b3e4905214c5e53d2ff6d07ebee440133be5c786d8e0ad84a8bd88a87645cdb633792c2a7eb2f865e81e", 0x3c}, {&(0x7f00000009c0)="bcb17574783d211076554dbfc98f1a2de9900225930b9ecd85e2005012f4b310", 0x20}, {&(0x7f0000000a00)="0706e070e4694713790d8cf70cd1dee2a7adfd9655f864c93e868b74ed1e61c115289a117cc60896bf73813fe92a526d4eedc8bd979ca68124eb5d5e300c02e6b84ad7fc379c310b9641e660fcfd582e4dd77995e8c379c8e47c29605ca124280af1c4f0d69e77", 0x67}, {&(0x7f0000000a80)="2b328f06e26174f7cb5107f7a942a021e41219591ffde807042208a59e14f4f7d36a92f54dcade386c96f717be8fae91ca1028b7618a8cd58dfd3dfcf87f", 0x3e}], 0x8, &(0x7f0000000e00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r11, r5, r11, 0xffffffffffffffff, r5, r10, r7]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @rights={{0x30, 0x1, 0x1, [r7, r1, r2, 0xffffffffffffffff, r11, r2, r4, r10]}}, @rights={{0x2c, 0x1, 0x1, [r10, 0xffffffffffffffff, r1, r6, 0xffffffffffffffff, r7, r11]}}, @cred={{0x1c}}], 0xe0, 0xc010}}, {{&(0x7f0000000f00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000f80)="ff9ccff0533c1e7866fba41dc5f092d177931941d21ff752aa4155027e2443e4e7", 0x21}, {&(0x7f0000000fc0)="8ffc631af9de030572e2a4c17b6cf0e65cb8e5f9367f75c35439240f2b89522021aad0b85a", 0x25}], 0x2, &(0x7f0000000b40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000004eaa2bf0ff001c0000000000000001000000020000009ac30000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r11, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000010000000000000000100000001000000"], 0xf0, 0x24000080}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001580)="1cd28cc3cae5660a97f863e161e237300f6b019bed6e18043f6954e291b1b82b6f3bd70fdf60e209f9caf0e5abe9e9c963c61fc076c7b0f9da79d3be20fc959ecca99760b0e224dd10c6a0fe3bc94023ae6e804d8478ff57a4697c3e05821cfb2308b1349a208126e5e379cf61b9e35591d5b896d450d34738e3e3618f535aa294597d1d5b92beb439247ab6bebe1b6d6444cfd72817552822dd390535698f7f6077437987c5ced6676765", 0xab}, {&(0x7f0000001680)="ba534f3d5a84f0b2b80a5d51cd95b4cef0418b5e539094a00ad4fd84780e771868", 0x21}, {&(0x7f00000017c0)="714d7986fb9e46e3dc01ef6a542d33a0796300faf36376ad2c00b62dc2e12521968fb7948321dde341567dd5ef3fffd1b69cb4be85429aa66625c861c3b25e68220b08c76c16531bdf9b5ee71c9c072a1ee8987233dbd5caa24bc9f6a74ebe0a43afb525306002bc47964f6afb36ec21572c0b0d0d2968cd5d907af47538555b8f376e08f2628d5da0782c97be9ba36c1e82a005df26c1c8934dfad7b4f1ed042c1182ca170aa2dd9a570b9062287b148dec88b00f46d2e12206d6b09543ca327c49f4a063dd2cac88bc", 0xca}, {&(0x7f00000018c0)="f2698e0a049b8edc7ddfcdbc96ce97390b8ebb774650d099f892d4ec47481b6cde01afe8dcb5499670cedc726c4b271bede0c5d94ee6a99b070d9785bbcdd2eaac2425fe69400bd3cdfc6788c2a4d716496b8c06fa15d1eeb3d1b89038e2b80498fe5ac1e2c8b07f93f732a281b43243eee5ddf5a98db4d68607974da64e924ffd4cf67f189cbf6a9ae82d6f73fb1fed8580f23d2304aaea851068eb984a5b5ec24827201208ffc1e8c28c034b3a", 0xae}], 0x4, &(0x7f0000001980)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000019c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000005200)=[{&(0x7f0000004200)="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", 0x1000}, {&(0x7f0000001a40)="d4b3ddb49ae1211373badea8c320fc3dbf675435b86e3079a50bb28011f55d9da4211e69cb1cebacf70bdc6d87ea46a4295af6504021b3d7", 0x38}, {&(0x7f0000001a80)="57dd6cb65ffa2a7f402f7d5a2523634f38294ec494f509b9cd2fac63a31d381c5dd44b6b7f2aa5783eb5abae80d707ce873c9492abc24a987e53d06e422778602756281ea8a5b47323e9c24fea8bc31858aec3ae9294edb8b567d26c80a058647b7e7462c41bed702496f2c49ead243bb84b56f243f1340203aaae9377cb78691a050a9026c1a88f07aca432f13e7c32f531615bbd58a1180aa7", 0x9a}, {&(0x7f0000001b40)="70a1b09975fd4533f6cd3000e261a657f0b06d2b51045629c28b9ec250ef011223cdd1683fd5bb160b878579bab71f4eb45ba63707810a8078c39d67884f1a2b9e092c6350510fadfc0c0500e985186ed8fd4c3b3716cf51d93b7770b31db6546360924ca518408bb4b8f7c27ef452d6560693ba1ec7ee5c6b253fb4e3b86240182005c7c093ea354324392885fce9a57515e74e", 0x94}], 0x4, &(0x7f0000005240), 0x0, 0x20004080}}], 0x4, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x4082172, 0xffffffffffffffff, 0x418a6000) (async, rerun: 64) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) (async) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 4m15.403752055s ago: executing program 3 (id=2434): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000001a00)=@l2tp6={0xa, 0x0, 0x0, @remote}, &(0x7f0000001a80)=0x80) sendto$packet(r2, &(0x7f0000001ac0)="a639a95decf58a5a5b76f9f35a89401a4e8743214ad99a93257cab5f4ba51181a3f3c848400473b2abd6bfd54d6cbd5539dc8059ea9c9c2b451ab33da2beea4da48a5bc0bc38359b9cb20f3fca1e0825bda3749eb8817f1df0fe1441eaf1eedf969f1f0a452ff3b7064b8d744b040e590dea8e4a3918249da156226dc1a64a6f02c6b4163600b09f4efc3b33fe21a617cc6bfa2aa83c943047327beedb077d5ae00f08b48499163630d29af664186ca708ded458b03b34aba50647a5d4c38801883a6f9e377d6e3004cf1ffdb20bf874b8fbcefb25f092ac390b8d90401a2da5c362deca88bf1702bd4e037b0a168a117bbfa92cc91d", 0xf6, 0x40000, &(0x7f0000001bc0)={0x11, 0x10, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x11) syz_usb_connect$hid(0x1, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1e71, 0x2006, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfa, 0x30, 0x8, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x0, 0x6, {0x9, 0x21, 0x0, 0x1f, 0x1, {0x22, 0xd5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x1, 0x5}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0x0, 0x2, 0x3, 0x40, 0x9}, 0x32, &(0x7f0000000340)={0x5, 0xf, 0x32, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0xb0, 0xff, 0x6, 0x1, 0x5}, @ssp_cap={0x18, 0x10, 0xa, 0xc9, 0x3, 0x66, 0xf00f, 0x1, [0x0, 0xffc000, 0x3f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x4, 0x0, 0x4}]}, 0x3, [{0xb9, &(0x7f0000000640)=@string={0xb9, 0x3, "a199e388b7dcede062e03d7869b9ae30b4c55ec5ba0300fd0b56467b9766500ec379b1f8d46fd11cc3e30549e1d4e37c203cce55c02e559e95fe890a713ba76ea8163544d2a0fdd94055e64452930168b702de99bdadfa5bc6a083578f5a2178d2b85d0524faf08ead0e516ec3a799e1dd06fd2b65ff9e565cef6b20c3cf3af54ef3660c12df2bce82b57cd809eaa8b236755caa01d936fe86a23d81d88df76e2029c1dbd8b6cb9e45bad91aff7ce34ec57d8801d38f4b"}}, {0x50, &(0x7f0000001800)=@string={0x50, 0x3, "172f42e3a6dfb220ad1ca1abf9fcbf348fa983f70644efd002bcc03b41da25e732e1ca823b5e98f901308e5d6985ff28e09ef8c493617e0eee2453e89558f4544a405bd0a699471461e50b50cc9f"}}, {0xc4, &(0x7f0000001880)=@string={0xc4, 0x3, "f13a05328ad920166940753c476b8595d56f7c7fc9b7fea4988f98597cf537bd87efd4eef92e5f0001a83f658b31bec623e819e243a25d70f4f9da1c8105cf02b5caaf5914122cd3ae616977efc27348c053bf686115d43194bdbb360fead3bb9ed342d74d40fa326e06c30344d918bb462dd6d5b583a746cecc9d6e1a8de903ce1e80a95c0eda605243ef4431a037cd40cb3ea8ab99e93122e1cd127f6a8a020ef3e98d8132a3b37fc2cbc953ae2e5f4380d7073b582cd3c8558c423d756d1baa25"}}]}) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000001980), 0x10400, 0x0) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f00000019c0)) read(r3, &(0x7f0000000040)=""/99, 0x63) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r5) recvmmsg(r5, &(0x7f0000006a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000007c0)=""/4112, 0x1010}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000200)=""/241, 0xf1}, {&(0x7f0000000500)=""/132, 0x84}, {&(0x7f00000003c0)=""/147, 0x93}], 0x5}, 0x2}], 0x1, 0x40010080, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x6, 0x0, [{0x80000019, 0x0, 0x12, 0xa8d, 0x5}, {0x80000000, 0x3ff, 0x5, 0x6604, 0x1bfd}, {0xa, 0xfffffffe, 0x7, 0xd}, {0x9e6d3a841df9b3c0, 0x0, 0x20, 0x6, 0x7}, {0xc0000001, 0xdd, 0x1, 0x4, 0x1}, {0x80000019, 0x1, 0x4, 0x2, 0x5}]}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r8, &(0x7f0000000000)=@other={'unlock', ' ', 'io+mem'}, 0xe) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a0015"], 0x1c}], 0x1}, 0x4000080) shutdown(r7, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m12.314996566s ago: executing program 3 (id=2488): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0xc3) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = gettid() r5 = getpid() getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000241000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/204, 0xcc, 0x0, &(0x7f0000000380)=""/65, 0x41}, &(0x7f0000000400)=0x40) rt_tgsigqueueinfo(r5, r4, 0x16, &(0x7f0000000280)={0x37, 0xa4, 0x106}) r6 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r6, &(0x7f0000000740)=""/384, 0x200008c0) write$tcp_mem(r3, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000038c0)={0x20, 0x1e, 0xa01, 0x0, 0x0, {0x7}, [@generic="f4837e629eda4a7ea9"]}, 0x20}}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0, 0xfffffe28}], 0x2) socket(0x2, 0x6, 0x3) 4m11.455376453s ago: executing program 3 (id=2505): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) creat(0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) write$UHID_CREATE(r0, &(0x7f0000000100)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/90, 0x5a, 0x3, 0x8, 0xf, 0x0, 0x7}}, 0x120) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff00"/70], 0x119) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000900)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4m10.643114249s ago: executing program 3 (id=2520): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x40000, 0x0) chroot(&(0x7f0000000100)='./file0\x00') pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) utime(&(0x7f0000000200)='./file0/file0\x00', 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000140)={'veth1_virt_wifi\x00', {0x2, 0x0, @multicast2}}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) fchown(r5, 0x0, 0xee01) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000180)=0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket$inet6(0xa, 0x2, 0x0) 4m10.642690569s ago: executing program 3 (id=2521): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800010023bd700000000000050000000c000000000000f7ffffffff"], 0x24}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000008fcff", 0x58}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mknodat$loop(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', 0x400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(0x0, &(0x7f0000000300)='./bus\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r2 = open_tree(0xffffffffffffffff, 0x0, 0x10000) socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2d) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400017e) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x100, 0x0) mkdirat(r3, &(0x7f0000000080)='./file1\x00', 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00%'], 0x30}], 0x1}, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, &(0x7f00000001c0)) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4142, 0x0) ioctl$BLKBSZSET(r4, 0x40081271, &(0x7f0000000000)=0x400) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000200)={0x2}) 4m10.484384932s ago: executing program 3 (id=2522): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f00000001c0)=[{0x30, 0x3, 0x51, 0xfffff034}, {0x6, 0x4, 0x6, 0x6}]}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_open_procfs(0x0, &(0x7f0000000800)='net/wireless\x00') read$FUSE(r2, &(0x7f0000002f00)={0x2020}, 0x2020) connect$inet6(r1, &(0x7f0000003e00)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_expedited', 0x169a82, 0x109) prctl$PR_SET_IO_FLUSHER(0x41, 0x1) prctl$PR_SET_IO_FLUSHER(0x41, 0x0) read$FUSE(r4, &(0x7f0000000180)={0x2020}, 0x2020) r5 = eventfd2(0x7f66cc5f, 0x80001) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000000)={0x3, r5}) 4m10.386624115s ago: executing program 35 (id=2522): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f00000001c0)=[{0x30, 0x3, 0x51, 0xfffff034}, {0x6, 0x4, 0x6, 0x6}]}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_open_procfs(0x0, &(0x7f0000000800)='net/wireless\x00') read$FUSE(r2, &(0x7f0000002f00)={0x2020}, 0x2020) connect$inet6(r1, &(0x7f0000003e00)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_expedited', 0x169a82, 0x109) prctl$PR_SET_IO_FLUSHER(0x41, 0x1) prctl$PR_SET_IO_FLUSHER(0x41, 0x0) read$FUSE(r4, &(0x7f0000000180)={0x2020}, 0x2020) r5 = eventfd2(0x7f66cc5f, 0x80001) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000000)={0x3, r5}) 1m5.119065821s ago: executing program 6 (id=4910): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d7379737465225f75dd47d0b90b893a03ffdf"]) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x3, 0x2, 0x1, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m5.118563271s ago: executing program 6 (id=4911): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) (async) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x1, 0x1, 0x8, 0x6}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) r2 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000034000)={0xf, {{0xa, 0x4e26, 0x100, @mcast1, 0x10400005}}}, 0x88) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) getsockopt$inet6_buf(r2, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000200)={0x6000000000000000, 0xc000, 0xa00000000, 0x2, 0xd}) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x61, 0x0, 0x0}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000001400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1f}, @fd={0x66642a85, 0x0, r4}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) (rerun: 32) 1m5.118307681s ago: executing program 6 (id=4912): r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r1, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7fffffff}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x82482, 0x0) write$binfmt_aout(r4, &(0x7f0000000280)=ANY=[], 0xff2f) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x5) write$P9_RLERRORu(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r3], 0x52) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xfffc, 0x6, 0x2, 0x0, 0x7, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x94d6, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0xffffffffffff9d06, 0x3, 0x9}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040090}, 0x8800) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = getpgrp(0x0) syz_pidfd_open(r6, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="280000005e000d0025bd7000000000000800000001"], 0x28}], 0x1}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 1m4.729931579s ago: executing program 6 (id=4916): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000400)=[@request_death], 0x42, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x18, 0x0, &(0x7f0000000600)=[@enter_looper, @increfs_done={0x40106308, 0x2}], 0x50, 0x0, &(0x7f0000000240)="d81e15c3b9703b627c6f69f27e8fda212411223bed3eb544eea0bb85b9db7e9aa8f4f153246efaf2a8d8f8cf1ae69729c805005f7cf44d476fa4d69887ad7b73ec4b8475b312ee27f07411c59fbffc81"}) 1m4.67503781s ago: executing program 6 (id=4918): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/custom0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) (async) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89b1, &(0x7f0000000900)={'wg1\x00', @remote}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x14, r4, 0x1, 0x0, 0x25dfdbfd, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0xf}}]}, 0x1c}}, 0x814) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x35}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1m4.595832811s ago: executing program 6 (id=4919): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x3d29) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r3, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r3, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x401}) faccessat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x44, 0x100) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000000ec0)='\x00\x00\x00\x00\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 1m4.559576782s ago: executing program 36 (id=4919): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x3d29) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r3, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r3, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x401}) faccessat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x44, 0x100) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000000ec0)='\x00\x00\x00\x00\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 54.714603279s ago: executing program 8 (id=5103): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) syz_open_procfs(r2, &(0x7f0000000000)='net/hci\x00') syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1, @ANYRES64=r1], 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 53.488575833s ago: executing program 8 (id=5145): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x4) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x44000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x10) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40800, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xfdc48000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x5, 0x2, 0x3000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, 0x0}], 0x1, 0x54, &(0x7f0000000000)=[@efer={0x2, 0x800}], 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) 52.668575319s ago: executing program 8 (id=5158): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x3}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf0, 0x3e, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0xeeee0000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x83, 0x0, 0x1}, {0x100000, 0x3000, 0x9, 0x1, 0x3, 0x9, 0x9, 0x5, 0x40, 0x44, 0xe, 0x4b}, {0x2, 0xd000, 0xf, 0x7, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0x5}, {0x10000, 0x1000, 0x8, 0x98, 0x9, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0x100000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x2, 0x12}, 0x40010000, 0x0, 0x3000, 0x50100, 0x5, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0x401, 0x8005, 0xc5]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000440)={"031a17d2d0670fca785314f694075d692571adf60d073d8b8ccfb7f83decb6282196f79c72b418a3ca0eb903a8a9391ae978cfda4c3e4b0e652141ccc53e2bf006406d6781d3af81fc089e3473c01ccf0c7e58aa8d1b40cfc9a62a9a7e1ab1441d387d3f2982568339dbcde4bf4bb23637481ec6b3b34158fa306e8108ecfc9be966cfecef0f3dde1fe21264346c7585491d7799fdc5b071085e18c139408357ba344643e8c6fb287572b27b4acb66e16a1415eee768082f12e6589716785664c402bd4384ee49ee62a7f07722a81611209e9c756d893c1800136267edff0d363b3c50929eb6fecadc7a989b9bd0a53226cc5790bfe37d88327fa74c557a503df278ff2fbb370d4864ff204e9281bdb85e0e2d810539e562adb620bd69a2349466527ebde11f6ba8aef2107a6695d4acab3b82ec4bf1f0cb03da62ceb1a0226b05cdbd72a44ec406c5db40da500abe55f59c9d9aab0e75544f8a1ba16fec8a6bbe51f3e80f4f8ecadf72b5c9e094d816a5dc6a1d8c99bbbcf1c6c4b15f4b6ddd18543ff0a8901c0812c050e3d65e1b4a3f30ff39e0179b2fc58eae8ea731db83971bd34ce799f0de002bfba4ba439374a506ca3a3b8fc5122639d40c03165d48e5cbf8fb020239b05f079da6373ef1e709a6ae7e0fc925f071fefcc2b9f7b6e1971c21093854b90dd0cb0e53cd010b1bc37c300371128449219cc599356ae3cf634132bf4373766a8a8d8ff5585a9fc523b0b868bb0ce737528cc72799d40f68a6fa5b866067a93f7c4d82d5033104d403ef292e429a53558bde77b539c822b2513bc6aedca423c53d04661756c84ed1a05bc270cd56af9c6c4800f04cda1a99976bf2b596bdfaac9d78dcd1a53c86caab326c5b98665656e72e8c2ff39e8129538d1621024e218bad98800c8f99983863c3214ec301e701f0c560682868b9852bc57abe6b87b0ad2245f4bc9212feeef31d9458b54d95900492abaf435833e1ce89a59234d9da4ed9939e8d4ca744d28363302f2e7cffff0eb61ecfe9c5c26be98d47935159c64f0abf18ca6c3bf9bbd41810649c4b4ee3782f1a284ba38951e224a56daebf63c7e1f43c5605fb49de5d03ead0afe53007436fc80f9d80aa52dfb56fd410673f115381c8e4416430cf24791285dffa497ea9cc8533737c25431c5c8b08000000000000005ad386686537a45ad08e58b9d09d8e75a7e61e86a4c721ea51dc61bc011a29291f5cf4890da911d1888a4368362f89c3cdc27040602d7ae40d7e046c24135ad2daf4fa635d692dde21e05844be2847448e82e4e8225405330ed92fbf38f4d9d4b0f6f2472c3af4a60e97812d8d173fd28d784e04c4b29381a72c9265e9cff53a3bcb4b6af332b16004ad7f190b4e1373b5297c6cd381120b610ab21400"}) r4 = socket(0x10, 0x802, 0x0) write(r4, &(0x7f0000000140)="1c00000018000711ab092500090007000a0700030000000600003693", 0x1c) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000200)={'macsec0\x00', &(0x7f0000000100)=@ethtool_rxnfc={0x2f, 0x12, 0x1, {0x2, @ah_ip6_spec={@private2, @ipv4={'\x00', '\xff\xff', @remote}, 0x8, 0x5}, {0x0, @local, 0x2, 0x1ff, [0x7, 0x6]}, @tcp_ip4_spec={@empty, @loopback, 0x4e23, 0x4e24, 0x7f}, {0x0, @local, 0xb289, 0x3, [0x401]}, 0xfffffffffffff200, 0xe}}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), 0x50, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df"}) 52.547082982s ago: executing program 8 (id=5159): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000480)={&(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000240)=""/145, 0x91}, {&(0x7f0000000300)=""/123, 0x7b}, {&(0x7f0000000080)=""/64, 0x40}, {&(0x7f00000001c0)=""/61, 0x3d}], 0x4, &(0x7f0000000400)=""/127, 0x7f}, 0x2021) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) 52.544135462s ago: executing program 8 (id=5160): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000080)=ANY=[@ANYBLOB="7365636c6162656c2c00f8703fb484f94180e8fc0b7941d7fbbefefc856be2a1fc9c36f65ddeed44dd474dc3249626fa5a0007f6c866826226b07bbe98ebeb0c6cdb25bf5d0a54f57251457cf90a84befb83c12cfcf450a7740c0d42f320e8e9f55d653e2cad1db0620404ebc140f3a6f15cd0932c63e0ca87853e2ac162168af6e6c466c47f9886084f0bbc266b3b36e4d5fd4ca821c5510ccad39ed3e6b67287bf95"]) 52.516281952s ago: executing program 8 (id=5161): openat$rnullb(0xffffffffffffff9c, 0x0, 0x60a00, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000008c0)={0x80, 0x0, 0x6, 0x0, 0x36, 0x5, &(0x7f0000000840)="3dc48954970a822e13a7f6dea1ff33428d4d0eb132d54ef1ea0acf08aa710353ece69d6f690cd319fd28d37146075670d7b13b18cd1d"}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="51ce3d", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r3], 0x10) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r9, r10, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000900, r9, &(0x7f0000000140)) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r1, 0x80, 0x8, 0x7}) r12 = memfd_create(&(0x7f0000000080)=')\x00', 0x2) ioctl$UDMABUF_CREATE(r11, 0x40187542, &(0x7f0000000100)={r12, 0x0, 0x0, 0x4000}) 52.475478734s ago: executing program 37 (id=5161): openat$rnullb(0xffffffffffffff9c, 0x0, 0x60a00, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffffffffffffe, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000008c0)={0x80, 0x0, 0x6, 0x0, 0x36, 0x5, &(0x7f0000000840)="3dc48954970a822e13a7f6dea1ff33428d4d0eb132d54ef1ea0acf08aa710353ece69d6f690cd319fd28d37146075670d7b13b18cd1d"}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="51ce3d", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r3], 0x10) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r9, r10, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000900, r9, &(0x7f0000000140)) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r1, 0x80, 0x8, 0x7}) r12 = memfd_create(&(0x7f0000000080)=')\x00', 0x2) ioctl$UDMABUF_CREATE(r11, 0x40187542, &(0x7f0000000100)={r12, 0x0, 0x0, 0x4000}) 2.556352569s ago: executing program 7 (id=6146): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x1003}) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) timer_create(0x0, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x24, &(0x7f0000000300)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0xc0085504, &(0x7f0000000080)=0x1d000200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xa8, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff67, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x8}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@handle={0x73682a85, 0x0, 0x3}, @fd, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x3}, @request_death], 0x0, 0x0, 0x0}) 1.827289714s ago: executing program 7 (id=6168): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x240}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000003c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY\t\x00\x00\x00\x00\x00\x00\x003\x1f\xc5!\xb2\x1bs\xfc\x00\x00\x00\x00\x00\x00\x0f\xff\xfc\t\x9c\xda\xf2\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8cfV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\x88\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12J\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda\xe8H\xc3\x9a\xfdNak\x99\x87\n\x1d\xb22m\xdd\xa9\xc1\x9a\xac\xd2\xda\xed\xab\xa2J\xf7e_\xe6\xd5\xcf\x8a\x13sF\xc3\x83\x0e=\x00\x00\x00\x00\x00\x00\xf1\xff\xff\xff\xff\xff\xff\xff\x00\x00\xb8Y\xd0\x13F4$6\xb0I\xc3\xfas\xdcnq\\\x19~\xcd\xc27D\v\xe6v\xe3\xd4\xb8\x15LW\xad\xb5S\t\x9d$D9Q_\xa7\xd0\xe8\xe7\xa4\xee\x19\x86/j\xb7A\xd7\xfb\x13\xbf\xcd\xb2m\x9f\x1e\xe4l\xa7x\x1d\xe3\xca/\x8d%\x90\t\x1d\x9bV\xeb{\xd8\x1d7\xa8v\xfch\xe65\xb4W\xa4PY\xac\xfbK`~N\xea\x87\x92\xd7\x11\xc4\xe9ME.\v\x97 t\x92}\xfd\xa1\xfaQX\x13\x9bMU,\x88\x8b\xcf\xb4\x92\xe4\xf5\x85/\xd9\x8b/\xcf\f\x1b\xf8\xf9\x12\xe0') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26001, 0x13, r0, 0xd3c59000) 1.732558445s ago: executing program 7 (id=6169): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x1802, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x11) socket$inet_udp(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000380)={@multicast2, @empty, 0x1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x10, 0x0, &(0x7f0000001b40)=[@clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_require}]}) r5 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) fchown(r5, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') lseek(r7, 0x0, 0x1) write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) socket$can_bcm(0x1d, 0x2, 0x2) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0258ff000000000002000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050810000000000000040000", 0x58}], 0x1) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001940)=@newsa={0x17c, 0x10, 0x1, 0x0, 0x25dfdbfc, {{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x0, 0x81e, 0x4, 0x0, 0x20, 0x80, 0x21}, {@in=@multicast1, 0x0, 0x33}, @in=@loopback, {0x401, 0x0, 0x8, 0x0, 0xffffffff, 0x3, 0x0, 0x8000000}, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x80000001}, {0x0, 0x1, 0xfffffffc}, 0x2, 0x0, 0xa, 0x4, 0x1, 0x40}, [@algo_auth={0x89, 0x1, {{'rmd160\x00'}, 0x208, "d5deb33e8d02d5b4c6cdd277a6d0adde7a89a2677f61d0a96eb8706a52adfbdc312b5aeab8894c493c358ef75d4775e5384de91cac1e473fc9d56ec179b21865e3"}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x24040021}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.655614507s ago: executing program 7 (id=6171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x48040) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@register_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000003c0)=[{}, {}, {r1, 0x9008}], 0x3, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000900)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.219075616s ago: executing program 4 (id=6183): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0xffffffffffffffff, 0x0, 0x9}, @fda={0x66646185, 0x3, 0x0, 0x10}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}}, &(0x7f0000000080)={0x0, 0x20, 0x40}}}], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0xffffffffffffffff, 0x0, 0x9}, @fda={0x66646185, 0x3, 0x0, 0x10}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}}, &(0x7f0000000080)={0x0, 0x20, 0x40}}}], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000480)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) 1.217315356s ago: executing program 4 (id=6184): keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) socket$inet6(0xa, 0x3, 0x8000000003c) (async) socket$inet6(0xa, 0x3, 0x8000000003c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) pipe(&(0x7f0000000300)={0xffffffffffffffff}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = syz_clone(0xc4000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r3) tkill(r3, 0x12) (async) tkill(r3, 0x12) ptrace(0x4207, r3) madvise(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x12) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0xf132, 0xffffffffffffffff, 0xd4dac000) read$FUSE(r2, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@dead_binder_done], 0x6, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@dead_binder_done], 0x6, 0x0, 0x0}) 1.176356096s ago: executing program 4 (id=6188): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x141800, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000003a40)={0x0, 0x0, 0x0}, 0x4001) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, 0xee01, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40881) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0xffa8) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x141800, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002640)) (async) sendmsg$inet(r2, &(0x7f0000003a40)={0x0, 0x0, 0x0}, 0x4001) (async) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0) (async) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) (async) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, 0xee01, &(0x7f0000000000)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40881) (async) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0xffa8) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 1.130818717s ago: executing program 1 (id=6189): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x20642, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000dc0)={0x2020}, 0x2020) writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000240)}, {&(0x7f0000000380)="e00b436ce5eb8f68ea84c4431c12260575b34aa7d083ea199adc5781c3ca6f2fe2f0277f20c98bce1bb1964a89f53a0f49a9829bf80342d6f97220398f538b440e47f2c2ce0c5608277b2bc773f542a89cd699", 0x53}], 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_clone3(&(0x7f0000003440)={0x88000000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[0xffffffffffffffff], 0x1}, 0x58) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x16) read$usbfs(0xffffffffffffffff, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000000000002000040"]) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x800000) syz_open_dev$loop(&(0x7f0000000140), 0x4, 0x880) r7 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="002227000000a179c3e44275500cd7f27787d86d4c8213d30efc0801dea105004cb9e1c10b206b6cc3bd5bede26f543e47f2fb6dd62d43452bb2e6880e4756000000000000000000000000000000635a5d379ffbc53e566d57b04088cab86219cd3f08287d7030c83fc6c81c7e565ea8ce01dddca65983d743b872dad43751a5ff7349550f8848f233f9bfdecf15a4a3"], 0x0}, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000480)={0x40, 0x10, 0x6f, "3d8bf474acb95d0aa00072785caf0a627edb4ba9639eacad8fff0ba9f8a5a2fd3b30f1c57eae65bc4bed0b66033e9497278dcf6e3ec76fb02c20090e9d583f4ec088e3c14e64b1542ffe533f337638b09a4ba5920a847c3a28b76241b0b059caff92564cdd270a2622a0401ed263f3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000880)={0x40, 0x17}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x4}, 0x0, 0x0, &(0x7f0000000a40)={0x40, 0x7, 0x2, 0xa3c9}, &(0x7f0000000a80)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000ac0)={0x40, 0xb, 0x2, "bdda"}, &(0x7f0000000b00)={0x40, 0xf, 0x2}, &(0x7f0000000b40)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, &(0x7f0000000b80)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000bc0)={0x40, 0x19, 0x2, "51ba"}, 0x0, 0x0, &(0x7f0000000c80)={0x40, 0x1e, 0x1, 0x9}, 0x0}) r8 = accept4$unix(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000100)=0x6e, 0x80000) sync_file_range(r8, 0x7fffffff, 0xf32, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/180, 0xb4, 0x2, 0x11}, @flat=@weak_handle={0x77682a85, 0x800, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000040)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x4, 0x3}, 0x10) 1.130515857s ago: executing program 4 (id=6190): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x10, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f0000000040)) keyctl$join(0x1, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, &(0x7f0000000140)={0x2, 0x6, 0x7, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0xa8, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff67, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x8}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@handle={0x73682a85, 0x0, 0x3}, @fd, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x3}, @request_death], 0x0, 0x0, 0x0}) 807.303044ms ago: executing program 7 (id=6191): r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) socketpair(0xb, 0xa, 0xfffffffe, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x416, 0x4) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f00000000c0)={0x2, 0x2}) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) sendmsg(r3, &(0x7f00000002c0)={&(0x7f0000000100)=@nfc={0x27, 0x0, 0x0, 0x5}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="c08cfab1ada45a2bbb21e2349ca26d226b16545aa4d7f56cda6abb0f21f34ffe6e2c5a00af1b575ee687309ec846a564ccd4a3697f1adacab70ba746fe5adfe887c780f4f3b5fcff4853b24241cca561", 0x50}, {&(0x7f0000000200)="b9ba82ba4cdab297b789d7a2114e8b1b9e660a322f88e58b9441593ad736b8d84b95cb170d255fe7c07f15160ec78749a6ddd0eb492116e9c1f39cd78a25ef2e20788dd192d922e31c09ed65db59c3c99911c1dc984025b55b67327eeb175f70b120c93dd423aa", 0x67}], 0x2}, 0x48840) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x204000, 0x0) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000000340)={0x4, 0x2, 0x878d, 0x7, 0x3, 0x5}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000380)={'filter\x00', 0x4}, 0x68) setsockopt$packet_int(r3, 0x107, 0x11, &(0x7f0000000400)=0x2, 0x4) r5 = openat$cgroup_devices(r3, &(0x7f0000000440)='devices.deny\x00', 0x2, 0x0) r6 = signalfd4(r5, &(0x7f0000000480)={[0xfffffffffffffff9]}, 0x8, 0x80000) r7 = syz_clone(0x4000, &(0x7f00000004c0)="145ee33470b2de87ab4927fb147be83df2cda61362a8632f4a912ea09e59dc9a101390cd6f1bee81c3640cfb003c75202595d32eec9b726b1a4d42a142a06d334eb804e0624fbc7fcfbf56f0e2e9973d31a15558e212c8ce0ff7823bcfbb04121c019dc144c833f87bc2a345f24b41062fe5ec56dc909d13f942c78afc5db87fd40719b7108fb113a51d444b1106aefe173556a355524f54fbd79fc0df9da87f08f31a16c1ba531f15f749d3d5c54ee9e2d1f57e4bcf1d2fdfbbdd9f62aa1b9b6d786bdb2d511cfc42aeebc5bc4397cfe5da2208071a21db0a1c1fb0fd7f", 0xde, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="e091ccbaa719b32d2988468edb31f4fbb9714943ae166037f8ebe034581decbc8f4421512a00b06524b607cb05cdbfb1b2330ff100d86cd522acc2204368adef8847fe4bd151b6") mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000006c0)=0x9, 0x4) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000700)={0x0, 0x6, 0x2, 0x1}) getpeername(r1, &(0x7f0000000b00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000b80)=0x80) kcmp(r7, r7, 0x0, r0, r3) ioctl$KDFONTOP_COPY(r6, 0x4b72, &(0x7f0000000fc0)={0x3, 0x0, 0x16, 0x1e, 0x1ba, &(0x7f0000000bc0)}) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000001000)={0x3, {{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x9}}}, 0x88) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000010c0)) syz_clone(0x20000000, &(0x7f0000001100)="3fb0b244301c9b063ee6bfd9e9451bb2db0ebb4803e991a67184269d065fcf17a7738f775a6be7be4410d470d2b204e6047589a7314a500d8d48cc9b3758b83db12d1fb589ba3ee5074051e1b0bf58a67c45abbd79d6fc4543a06ad19108f8a16f14b13a3e373224b051a0cfa6e139345e05e855e58f519c53cd139161e38c57b1fe5228ff5f57", 0x87, &(0x7f00000011c0), &(0x7f0000001200), &(0x7f0000001240)="d2efc32350674f633916c54efb59797b0808e6b7135d8903252dd13e4043c5768791dac950340e7487795d8777892c083c9e912d522e18ff1e615c978ae569477cafa35ac666c3237b9eb4ad5ead") ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001380)={'ip6_vti0\x00', &(0x7f0000001300)={'syztnl2\x00', 0x0, 0x29, 0xf9, 0x0, 0x6, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x8, 0x20, 0x8, 0x40}}) sendmsg$nl_route_sched_retired(r1, &(0x7f0000001dc0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001d80)={&(0x7f00000013c0)=@newtclass={0x994, 0x28, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x1, 0xc}, {0xa, 0x15}, {0x5, 0xc}}, [@c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x3ccd, 0x6, 0x260, 0x20000, 0x9, 0x7, 0x7, 0x12, 0x5, 0x6, 0x9, 0x0, 0x8, 0x2, 0xb, 0xe1, 0x0, 0x83, 0xda, 0x4ba3, 0x9, 0x9, 0x80, 0x0, 0xfe6c, 0x72b4, 0x6, 0xf, 0xfffffffd, 0x8001, 0x0, 0x3, 0xf, 0x2, 0x75, 0x4, 0x359, 0x4, 0xffff, 0x10000, 0x1, 0xb5, 0x800, 0xf8, 0x2, 0xb, 0x3, 0x0, 0xffff8001, 0x4, 0xfffffff7, 0x443d, 0x400, 0x7fffffff, 0x1, 0x40, 0x1, 0x2, 0x10, 0xffffffc0, 0xb, 0x4, 0x8906, 0x81, 0xe, 0xfffffffa, 0x7, 0x9, 0x8b, 0x200, 0x2, 0x1, 0x0, 0x6, 0x6, 0x0, 0x81, 0x7, 0x3, 0x3, 0xc, 0x18b89dd0, 0x7, 0x1000, 0x9, 0xff0d, 0x8, 0xfffffffa, 0x7fff, 0x1400, 0x6, 0x1ff, 0xffffff00, 0xcc, 0x9, 0x82, 0xaf1, 0x1000, 0xb98b, 0xffff, 0x81, 0x6, 0xb, 0x7e25, 0x1, 0x8, 0x8, 0x7ff, 0x2, 0x3, 0xc1, 0xffff, 0x480000, 0xfffffff8, 0x1000, 0x5, 0x1000, 0x8, 0x469, 0x1, 0x9, 0x7, 0xb2, 0x80, 0x9, 0x5, 0x8df, 0x40004, 0x8, 0x100, 0x7fffffff, 0x2d5d, 0x3, 0x87, 0x401, 0x0, 0x1, 0x9, 0x7, 0x0, 0x1, 0x0, 0x10000, 0x200, 0x4, 0x2, 0x7, 0x0, 0x243, 0x8, 0x9, 0xffffffbc, 0x4, 0x6, 0x800, 0x9, 0x4, 0xb, 0x0, 0xffffffff, 0x5, 0x2, 0xe, 0x200, 0xffffa812, 0x8, 0x7, 0x7, 0xa60, 0x9a5, 0x3, 0x9d, 0x5, 0x3, 0x4, 0x7f, 0xf3a, 0x3, 0x2, 0x8, 0x5717, 0xd, 0x0, 0x400, 0xfffffffb, 0x9, 0x1, 0x9d, 0x4, 0x2, 0x1d4, 0x5, 0x10, 0x6, 0x8, 0x3, 0x4, 0xd, 0x7a6, 0x0, 0x6, 0xfff, 0x5, 0x1000, 0x7, 0x5, 0x5, 0x8000, 0x508faf2, 0x3, 0xed, 0x101, 0x3, 0x7, 0xa000, 0x4, 0x4, 0x8, 0xfffffffe, 0x6, 0x7, 0x9cc8, 0x81, 0x7, 0xd, 0x7, 0x656, 0xfffffffa, 0x2, 0x4, 0x4, 0xc, 0x8001, 0x2, 0x8000, 0x96, 0x80, 0x2, 0x4, 0x0, 0xfff, 0xfff, 0x400, 0x5, 0x1, 0x7b3, 0x163f, 0xa, 0x1, 0x8, 0x6, 0x5, 0x3c, 0xc, 0x4, 0xfffffffe]}]}}, @c_atm={{0x8}, {0xe8, 0x2, [@TCA_ATM_FD={0x8, 0x1, r3}, @TCA_ATM_HDR={0x13, 0x3, "dadefe08edc44e5da478ff575c4d9c"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x5}}, @TCA_ATM_HDR={0x2e, 0x3, "3e125207a6874c2740ee687e647ed923fbdf38561d38f8d2aae0a180c878825a24fcdaaa346e15d07fe0"}, @TCA_ATM_HDR={0x1f, 0x3, "7d8f7938e296111b81d2b460f28891f1eff140a36220c1ba79ac53"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x3, 0xfff2}}, @TCA_ATM_HDR={0x25, 0x3, "b9678cc86853f457b7a5e9cadb1a7a9e21e001e9d22efe956f0289e4ab99c03ee3"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff1, 0x3}}, @TCA_ATM_HDR={0x38, 0x3, "c735a352bf091021123a16cccb7658e29041318229abf2ad06f60f934214acebcd5bebeb8fad87069c449555947817af700ff544"}]}}, @c_cbq={{0x8}, {0x468, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x0, 0x4, 0x9, 0x0, 0x1}}, @TCA_CBQ_RTAB={0x404, 0x6, [0xfffffca0, 0x1, 0x7, 0x5, 0x8, 0xfffffffa, 0x4, 0x8, 0x0, 0xf8a, 0x6, 0x8, 0x400, 0x7, 0xc6e, 0x8, 0x3, 0x3, 0x6, 0x10, 0x3ff, 0x4, 0x6, 0x9, 0xfffffffa, 0x6, 0x7, 0x921a, 0x200, 0x101, 0x9, 0x5cc, 0x7f, 0x3c, 0xe404, 0x0, 0x6, 0x7, 0xffff2a99, 0x7, 0x10, 0x800, 0x2, 0x7, 0x0, 0xa, 0x6, 0x9, 0x200, 0xfffffff8, 0x80000000, 0x1, 0x8000, 0x6e, 0x5, 0x7fffffff, 0x2, 0x6, 0x3, 0x633, 0x7, 0x2fd, 0x40, 0x7, 0x26c5, 0x100, 0xe649, 0x6b2734fc, 0xde2, 0x5, 0x6, 0x1, 0x7, 0x400, 0x6, 0x6, 0xa, 0x8, 0x3, 0x6, 0x5, 0x3, 0x7fffffff, 0xfe83, 0x0, 0x3, 0xfff, 0x3be, 0x54, 0x8, 0x9, 0xf, 0x2, 0x5, 0x13, 0x0, 0x0, 0x8, 0x0, 0x80000000, 0x7, 0x1ff, 0x3, 0x200, 0x8001, 0x7fff, 0x8000, 0x2, 0x3, 0x7, 0xfffffc00, 0x9, 0x800, 0xfffffff9, 0x4, 0x1, 0xe, 0x7c7, 0x3, 0x2c, 0x0, 0x41, 0x2, 0x81, 0xfffffff9, 0x6, 0x8, 0xd8, 0x6, 0xa5f, 0x4, 0xfffffff9, 0x7fff, 0x6, 0x4, 0xff, 0x9, 0x8, 0x9, 0x5, 0x9, 0xc79, 0x8001, 0x3, 0x2ba3, 0x2, 0x4, 0x9, 0x9, 0x8, 0xca, 0xffff81cb, 0x35, 0x1, 0x5, 0xcaaa, 0x8, 0x3, 0x10, 0x7, 0x0, 0x9, 0x30, 0xa8cc, 0xa8c, 0x4, 0xb, 0x9, 0x7, 0xfffffffc, 0x6, 0x1ff, 0x25d, 0x1, 0x9, 0x8, 0x7fffffff, 0x0, 0x7, 0x8, 0x0, 0x6, 0x9, 0x664, 0x3, 0x7, 0x104, 0x6, 0xfd1, 0x8e, 0x4, 0x2, 0x6, 0xe, 0x10001, 0xb, 0x1, 0x0, 0x8, 0x8, 0xffff3d71, 0x8, 0xfff, 0x5, 0x7fff, 0xd, 0xa21, 0x5, 0x8, 0x400, 0xc1, 0x90a, 0x6, 0x8, 0x6, 0x9, 0x4a, 0x6, 0x4, 0x3, 0x9, 0x7, 0x73ed, 0x7, 0x1000, 0x9, 0x7fffffff, 0x7, 0xfffff001, 0x6, 0x8000, 0x0, 0x2, 0x5, 0x4, 0x1, 0x1, 0x1000, 0xfff, 0x9, 0x80, 0x54, 0x3, 0x7, 0x100, 0x3, 0x4f3, 0x1, 0xcf4b, 0x100, 0x2, 0xf, 0x60680000, 0x1, 0x8, 0x7]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x25, 0x3, 0x7, 0xc9, 0x4, 0x4, 0x0, 0x1}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x2, 0xd}, 0x0, 0x9}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xfff2, 0xf}, 0x1}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x24, 0x0, 0x11, 0x65, 0xb, 0x1, 0x8, 0x8}}]}}]}, 0x994}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000090) setsockopt$MRT6_PIM(r8, 0x29, 0xcf, &(0x7f0000001e00), 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001e80), r2) sendmsg$TIPC_NL_SOCK_GET(r10, &(0x7f00000020c0)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002080)={&(0x7f0000001ec0)={0x190, r11, 0x1, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xef}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x177e8a7e}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "f49dd26cadf7ed17decf1b01b188eb1e28ea54430edfe9"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "ba3c316368521287c8cca22f1cc7bf4ead26bd126249e2092655ecdbf7abed0c"}}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbae}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x0) inotify_init1(0x800) 606.991398ms ago: executing program 1 (id=6193): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r3) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="40010000", @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf250f0000000c0009800800010005000000040003803c00078008000100400000000c00040081000000000000000800020001feffff0c00030081000000000000000800020000800a0008000200f10000002c00028008000100030000000800020032000000040004000800020002000000080002000300000004000400580007800c00030002"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) (async) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) (async, rerun: 32) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) (async, rerun: 32) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xfffffffc, @empty}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r5, &(0x7f0000000380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0xf5}], 0x1, 0x22, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000080)={0xd, 0xae}, 0x2) (async, rerun: 32) setsockopt$inet6_int(r5, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) (async, rerun: 32) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) (async, rerun: 64) umount2(&(0x7f0000000040)='.\x00', 0x2) (rerun: 64) 606.636368ms ago: executing program 1 (id=6194): mount(&(0x7f0000000000)=@sr0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='ext3\x00', 0x208000, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x449) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x80000006) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x82, 0x1, 0x2, 0x3, 0xfffffffffffffffc, 0x3, 0x3e, 0x5, 0x100, 0x40, 0x2001df, 0x0, 0x3e, 0x38, 0x0, 0x7, 0x2, 0x1}}, 0x40) close(r4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000008340)={0x1c, 0x1c, 0x1, 0x70bd2a, 0x2, {0x7}, [@nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0xf6}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x24000) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0x1a, r6, 0x800000be, 0x0) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100)={0x10001, 0x11, 0x2}, 0x18) openat(r7, &(0x7f0000000140)='./cgroup\x00', 0x40, 0x188) 606.257488ms ago: executing program 4 (id=6195): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb10000", 0x13, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000001400)=[@increfs={0x40046304, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x9286f9ce86a82d0b}], 0x0, 0x0, 0x0}) 595.208068ms ago: executing program 4 (id=6196): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x48080) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000100)={0x6, 'bond_slave_0\x00', {0x401}, 0xd5f}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xdaf, 0x3, 0x2, 0x7, 0x3a8, 0x6, 0x30004, 0x6166, 0x0, 0x80000000, 0x7, 0xfffffffd, 0x3b, 0xd3, 0x3ff, 0xc], 0x5000, 0x280204}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xdaf, 0x3, 0x2, 0x7, 0x3a8, 0x6, 0x30004, 0x6166, 0x0, 0x80000000, 0x7, 0xfffffffd, 0x3b, 0xd3, 0x3ff, 0xc], 0x5000, 0x280204}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x2) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@private2, @private=0xa010101, 0x18, 0x7}}) (async) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@private2, @private=0xa010101, 0x18, 0x7}}) 559.214319ms ago: executing program 1 (id=6197): write$binfmt_register(0xffffffffffffffff, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0xd, 0x3a, 'debugfs\x00\x9c\xf52X\x8b\xf2\xee^\x9e\a\xd7\xad+\xad~\xc4Q\x8d\xf1GWh\xa4\'\x0e:\b+\xb9U/\xc5<8o\x8d\x0f\xa6\x8094\xb2\xe2\x17I0\v\x8a\xbb\xbei\xf4\x1d\xf6q\xa5\xb3W\x96]\x9e\x82\xfaA\x0e\xe4\xbd\xffxg\xb6_\xeav\xcf\xa0', 0x3a, 'D,>\xfb\xf1\xa3cn\t\xb2\xf8\x80\xd0=\xae\x00C\x82zb\xf0\xebs\x80\xf0\x1ep:\xed\xdb\x1db\x0f\xe6Ow\x85s\xf0`N\xe1s\x1cm\x0e\xea\xfb\xeaUy\xaaz`\'\xf4\xed\x90T\a\xeb\xb7\x8em\xd0\x92b\x0e\xce\x8e\x96f\x1e\x89\xa2\xa2\xba\x8a\xa1\xce\xc5\xec5((u\x12\x1d\x119B\ftG\xfa\xe3!\x01c\x9a\xd68\x86\xeay\x89\xaeX\x90IO\x8c;\x0e&\xa7\xf9K\xf5\v3M\x91\xdfy;3\xb8<\xe7\xa0F\xe9\xf4\xb4\x80\x15\xacu1\x1f[\xb8\x12\xad\x06{\xf5OA\xda\x83\xa1\x01\x80\x19\xd3\xc5\xb2cI\xba\x12\xae1\xb6\x043\x8f\xfb=\xc2\xb1\xa0\\\xabg\xcf\xa6\x95\x9cV+z\"\x89\x06\xa9\x8f)\x14\xf4\x1d,%\xca|\xcf\x18<\x8a\xce\xbbL\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8bL\xad\x13}\xf4\xc2y\x06\xb4\xaf\xac\b\xc9\x14\x1b\x89IRJ\xa1\x80h\x10\x1f\x1c\xc1\a\x98\xcc\x01\xf8 \xbcQ\x89\x139\x0e\x87\x87l\x03W\x15\xb0Q\xc5\xe5\xdb\x89\x1d\x1b:\x9d\xd7\x0e#\xfd\x0e\x12\x90MvE\xa2x\xb4\x1b\x9a\xb1\xf9\b\x00\x00\x00\x00\x00\x00\x00V\x84\x81\xf7\xbf\xe9\xdc\xab\xba\xea\x87\xff', 0x3a, './file0'}, 0x1bc) syz_io_uring_setup(0x149d, &(0x7f0000000280)={0x0, 0x0, 0x1000, 0x3, 0x36b}, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @empty, 0x65}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x11) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r5 = socket$pptp(0x18, 0x1, 0x2) read(r5, &(0x7f0000000000)=""/114, 0x72) socket$can_bcm(0x1d, 0x2, 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 451.080471ms ago: executing program 1 (id=6198): syz_io_uring_setup(0xbab, &(0x7f0000000140)={0x0, 0xb206, 0x200, 0x3, 0x229}, 0x0, 0x0) setpriority(0x1, 0xffffffffffffffff, 0xd1f4) clock_settime(0xa, 0x0) (async) clock_settime(0xa, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) 426.757831ms ago: executing program 1 (id=6199): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x34) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x88000) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000540b4550182105f5758483a33ce0"], 0x0}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x0) socket$unix(0x1, 0x5, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000300)) inotify_init() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x0) socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r6, @ANYRES16=r3], 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000040), 0x4aa1, &(0x7f0000000000)={[{@stats}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'max'}}, {@dont_measure}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}) 391.346402ms ago: executing program 7 (id=6200): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f0000b17000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000026c0)={0xa, 0x4e22, 0x8, @local, 0x5}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r2, 0xc004ae0a, 0x0) getsockopt$inet6_int(r1, 0x29, 0x10, 0x0, &(0x7f0000002740)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) rt_sigqueueinfo(r3, 0x3a, &(0x7f0000000000)={0x20, 0x6c, 0xfffffffe}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000980)={0x16b8, 0x33, 0x100, 0x70bd26, 0x25dfdbfb, "", [@nested={0x16a6, 0x149, 0x0, 0x1, [@generic="a6351f7a2da1202628c49a8918fd37745b3b1470a5100e936f821ada5d0eeb8aa6ea44004e699e817483c3fd1542", @nested={0x1674, 0x6f, 0x0, 0x1, [@nested={0x125, 0x5, 0x0, 0x1, [@generic="110e26015a2716d43b23398422c3fa9449edbb4b35fac8c844df4c621bf6e2b853946a3d45eed024dfcab3779a62fa5c41a3b882860a56783915200ddedf9d22b7f305d2c93d2d8a5160872b39469ed0924d8fc13b1ef909c16c15a8f9fa853c4afea1ffaccd966c3073d0d75ee44b171a9650a556bc8dd800f7b4267a87edb8a4b213290ac33a82b9eaeef1141ab0c08f3ed6641fcf6261444cd9f5c810a16bb85fc207889686b0222977", @nested={0x4, 0xd9}, @typed={0x8, 0x46, 0x0, 0x0, @fd}, @generic="4b1fabe3723b4373f678b51e885d7c950bf0fbb19d3c6853e5a79166c9c1fd70b0d727955f6570093f0bb5d91daef0864acb9539d09b9dc068d2d312cce05f2892b5d8f90d71961c4e813b7f7a2782167a9079b42147f8541bc7138c1be15f06c1169e583dcaf0cb8156"]}, @typed={0x8, 0x2c, 0x0, 0x0, @fd=r0}, @generic="448174991420c032de2e53285d294642d7135182fb79a8f4f892c20038b78ba03ae7d8418d5f04f6a544aef4fcd8a355b869a80cf3ee5c7819f7dfbcc7c07b426a515dbdee35f10916627f5033c116f0d7709bcc0f5e393cfc7d3cd83645bab33f30897dd84d2ed0e1fdc1134274599ee11d89d7c1f6aa26b6fbf1ce310edd92db18e0f77188969c", @nested={0xc, 0x4d, 0x0, 0x1, [@nested={0x4, 0x139}, @nested={0x4, 0x135}]}, @nested={0x1ee, 0x21, 0x0, 0x1, [@generic="5c6db250699a7b3f3bccb496d08c01c486eacf9c1d5117b1b8b53de7f7b3c8ffcf18ee4dde4ac8d0e31ea09bc90c75ce387281c3017bf2ca9610f5cc5444f2b6d0e5853a600023f4a93ca4dfeb06b107c20bf541dc5c04374cd54dc3a4d54d612ad945c032ce59df897b3f31656a7b5b36157c90c396af43c7bdc900fb6aed9c02cf2446b29860e2899cc521b76d082f030b07503000319b7eea133ff9916377303c5a10ede40ee82cbc7ebd13767802a9e26be0f187ccbdb95ad13f0627c9e72a830215972c71e1aa8eaaafa5cc6fb97c6e22d81041765b52ad5c090ed447019268", @generic="48b0eb8650afec7942d6e5107e7638b4b1376d13bc0b7d79b3f70b21cdbabf724e2d88fb513408463dcd918921", @typed={0x8, 0x8e, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x36}}, @generic="4691f5d79b5243d274e3415332c0d4c27eef6b7c1d31d5fc707fd6afea16e72284315fd2f33c041c194b2f4af5449f0cd9cdc7eb946636d2464193a79301442fd74919b5adeb378a255b374bdbdc8050945f03a3c147e0faf510585d75e5de5ec2d0e39e2807bd818bf44099141133efe738461294f27a13b1ddce6364a34a2be69635fca6c83e12d710455d1a43cc13611189e6c500eb8ac984a55c14d4e9198ebdf1115de0400ea129b7e2060b3c7020d6a7674d045d3617c66f5d7f5129385618196ed74c7826a4be819dd63244", @nested={0x4, 0x92}]}, @generic="2f74454a01c531b8e48088fa1ae88f544cee9c3ec68da6285b57684a175725dfbfeb11147837b13384fe0cb50ea8cab8715dbbfbb62f83453f36395a67c793c9c8af270b9fe33a472fb989d2909e55985add318983e649b1e77887fe80b38fbfdf47a6815dbb2067fa5930102fc4e518f6e88c8700ad61b3365a3d4a852a26a55033b2ff9f6dcebdae3267921c5ff0d7a9f4d2c5aff36cfa7351717a7bf91535279923dc26fe9ba381d5bdd20f3fc1a8", @generic="e4f8a17c15a03cb156058fe99dac9cdd51ba4c2f7b46c1df01351faa832ce14c86f20cc8cddd11704dfd949f6c1ff9bc9cc91eba0d8d3a23cebf8d7f82c5b6412b586868afef56e119928bbb412dd7ecb978253d55545b551d00cd37406de8ce178a08edfaa00e048a0fb1140135f67d46ed6b5a15e1d7c58b2228989c3b11996d1d860cf8351766f1df3cf17aa3f8ae6be82f725a2b4fb5b0921c78cb36db6c3289189731525187449202ed8220562e6691ca241643719933fda977", @nested={0x114d, 0x14e, 0x0, 0x1, [@typed={0x17, 0x12a, 0x0, 0x0, @str='./binderfs/binder1\x00'}, @generic="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", @nested={0x4, 0xad}, @nested={0x4, 0x135}, @typed={0x8, 0x87, 0x0, 0x0, @pid=r3}, @generic="df4f3bc64c20e5ab3f80b7e77f94501ce0cc0a3ff5cb18acc917f085ebe7d125bb78343ae4ff6cfcae63f28d217782a4f47f4e08e5fc3cd443dbffd25e47ceb1f08c50bd3a7e52be1514a9a74091c0991e13c48beafbb134f9416a33aa7897809388ec4dd0612f95e3098b19ae0c30a9322e3820d7e6b9d6fe78f1f3cd01d775df93407caf4acec6d74d77898ffa7e0aa30e03e1c97cb278d9542cc1", @generic="7b1e014cbe50398fc2f36717cc9de820028fb0078a11ec6b44470382d154086ec06e5937fcf36ed3516d3388340e4979f3134c9d5fb12f42aff56d8b82929d75cd5c8c164519e94fcf28c012dd7831e23d6e997caea826b248bf820806641966139796bbc5d930d956857c4e908abbe1e46841659d84d3a51ccfd31516b75f637bfd8dfb1e"]}]}]}]}, 0x16b8}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)='G', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r4, 0x0, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080)) 127.078238ms ago: executing program 9 (id=6201): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, 0xffffffffffffffff, 0xe5441000) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000700)="b053294d7b9978000f03139bd5e6b0b5f1", 0x11}, {0x0}], 0x2) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x6, &(0x7f0000000040)={[0x3ff]}, 0x7) close_range(r0, 0xffffffffffffffff, 0x0) 121.597278ms ago: executing program 9 (id=6202): r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000003b00), 0x0, 0x4004010) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) finit_module(r2, 0x0, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x5) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, 0xffffffffffffffff, 0x22e7c000) 96.212598ms ago: executing program 9 (id=6203): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x2}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, 0x0}) 18.35899ms ago: executing program 9 (id=6204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1, 0x9, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x80}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r2, 0x100, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4880}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x3, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x184}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0xfffffffc}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x6}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x5}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) pread64(r3, &(0x7f00000003c0)=""/39, 0x27, 0x5) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'gre0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x7800, 0x1, 0x101, 0xfffff001, {{0x6, 0x4, 0x2, 0x9, 0x18, 0x66, 0x0, 0x68, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1d}, {[@ra={0x94, 0x4}]}}}}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000540)={@ipv4={""/10, ""/2, @private}, 0x0}, &(0x7f0000000580)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000640)={'wg2\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000680)={@local, @initdev, 0x0}, &(0x7f00000006c0)=0xc) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000900)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x1a0, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r12 = socket$inet6(0xa, 0x80000, 0x2) setsockopt$inet6_mreq(r12, 0x29, 0x1b, &(0x7f0000000940)={@local, r10}, 0x14) sendfile(r12, r3, &(0x7f0000000980)=0x19, 0x10000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3b) getsockopt$IP_VS_SO_GET_VERSION(r12, 0x0, 0x480, &(0x7f00000009c0), &(0x7f0000000a00)=0x40) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7fff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008814}, 0x240000d4) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000b40)={0x0}, &(0x7f0000000b80)=0xc) ioctl$sock_SIOCSPGRP(r12, 0x8902, &(0x7f0000000bc0)=r13) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1400000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000fc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d40)={0x238, 0x1, 0x3, 0x5, 0x0, 0x0, {0x6, 0x0, 0x4}, [@NFQA_PAYLOAD={0xa3, 0xa, "eeb9e599eccc36cb9afb91c9d7ae86f25bd8c63d1e9f07ceb39298dda84ee989bc1d787538de217858bf257b440c7bdbe0eab92a0bc3e5c1e8d3fddb7b489c6f99d1878c53ea7e3341c42cc0585f6dc2f8a831cca160375370b93f761ee502989029e37fb51cce2789b711a32fcb7e3d60fe3ad149e28e1a9417b2923cac46a538a0ddc7322158f15507c134b36d24ad65091cb5413eb0a029baef7eec3d15"}, @NFQA_PAYLOAD={0x48, 0xa, "90e06238af0a912281932fd751aed4573dbbaf73f59d60cf8800efa166450296a27460436664545dc0542163e7b9bdc3242429fdd2228a711f46d92336c975ebfe78207b"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x7ffffffffffffffd, 0x1}}, @NFQA_PAYLOAD={0x3d, 0xa, "cc9a28f2dc66ddf48761477ec11d5465b174e56cd67401a217b9570b2a18190f2dda31e118e25e5064f7fe8d709db178f68a08d1b19b2a6c95"}, @NFQA_CT={0xa4, 0xb, 0x0, 0x1, [@CTA_TUPLE_MASTER={0x70, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x10}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8}]}]}, @NFQA_PAYLOAD={0x46, 0xa, "a127dac7b780c8553eb78c9162f58286f14b5fc205d4e455c738650f2b3b43c5e6ac60b49f3d9e524dd14ea0d954bb1d4c5c1ae89d088df807a36a407d3a2a74c329"}]}, 0x238}, 0x1, 0x0, 0x0, 0xc0}, 0x24000800) r14 = openat$full(0xffffffffffffff9c, &(0x7f0000001000), 0x4100, 0x0) sendmsg$OSF_MSG_REMOVE(r14, &(0x7f0000001f00)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001080)={0xe0c, 0x1, 0x5, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [{{0x254, 0x1, {{0x2, 0x5}, 0x6, 0x7, 0x2, 0xffff, 0x21, 'syz1\x00', "fff627aa40dca890043da200ba699f3451cb391703205bc4b79e71cc48a05810", "8586a60461f051e03375a41de0ef075229a284e066353f5b08e26b09f775ba59", [{0x4, 0x8, {0x0, 0x4}}, {0x7, 0x7, {0x3, 0x3}}, {0x0, 0x9, {0x0, 0xfffffffe}}, {0x1, 0x7f, {0x0, 0x10000}}, {0x100, 0x2, {0x1, 0x1ff}}, {0xffff, 0x7, {0x3, 0xd06a}}, {0x4, 0x7fff, {0x2, 0x7ef}}, {0x3, 0x1, {0x0, 0x2}}, {0x4, 0x40, {0x2, 0x42}}, {0x9e85, 0x347, {0x0, 0x5}}, {0x4, 0x2, {0x1, 0xb617}}, {0x7fff, 0xfffd, {0x0, 0x79c3}}, {0x5, 0x2, {0x1, 0x1}}, {0x1, 0x1, {0x0, 0x10001}}, {0x8, 0x621, {0x3, 0x8}}, {0x100, 0x6, {0x0, 0xce6d}}, {0x9, 0x5, {0x0, 0x1}}, {0x7ce0, 0x1, {0x5ebf0fc40a3867a9, 0x7}}, {0x4f9f, 0xfffe, {0x3, 0x2}}, {0x4, 0x8, {0x2, 0x3}}, {0x5, 0x10a, {0x3, 0x8}}, {0x1fa8, 0xa, {0x0, 0x1}}, {0x400, 0x6f, {0x2, 0x8}}, {0x447, 0x7, {0x3, 0x8}}, {0x9c4a, 0x3, {0x0, 0x800}}, {0x0, 0x6, {0x3, 0x4}}, {0x9, 0x6, {0x1, 0x4}}, {0x8, 0x0, {0x3, 0x8b}}, {0x5, 0xff, {0x2, 0x1}}, {0x1, 0x0, {0x0, 0x6}}, {0x7, 0x0, {0x3, 0x9}}, {0x8, 0x7f, {0x2, 0x580aad5c}}, {0x0, 0xc10, {0x1, 0x5}}, {0x6, 0x3, {0x1, 0x4}}, {0x6, 0x9, {0x2, 0x2}}, {0x9, 0x1, {0x0, 0x3}}, {0x6, 0xf7, {0x3, 0xe9e}}, {0x5, 0x400, {0x2, 0x2}}, {0xfffb, 0x29, {0x3}}, {0x9}]}}}, {{0x254, 0x1, {{0x2, 0x2}, 0xea, 0xb3, 0x95, 0x6, 0x1e, 'syz1\x00', "905b3fffc6f6369c2aff462532323362ce09ecb137a0d0889d9e2516ac187f83", "ccb3198a912ecdd1dbc636b7aea8dee703075cf047eaeee29d50966d1a3ada66", [{0x9, 0xbf, {0x1, 0x1}}, {0x89a2, 0xe}, {0x40, 0xd5d, {0x2, 0x1}}, {0x0, 0xffff, {0x0, 0x7}}, {0x200, 0x3471, {0x1, 0x5}}, {0x0, 0x5, {0x7e256fe93452473f, 0xdc7c}}, {0xf408, 0xc, {0x2, 0x329}}, {0xc, 0x8, {0x0, 0xe}}, {0x6, 0x7}, {0xb, 0x6, {0x5, 0x5297d92f}}, {0x2, 0x8745, {0x1, 0x5}}, {0x8, 0xf, {0x3, 0x3}}, {0x4, 0x3, {0x2, 0x3}}, {0x9, 0x7, {0x3, 0xc}}, {0x0, 0x7, {0x1, 0xf}}, {0x0, 0x9, {0x7, 0xfc}}, {0x7ff, 0x5, {0x0, 0x8}}, {0x8, 0xbd1a, {0x78b453a3494876bd, 0x7fff}}, {0x1000, 0x3, {0x0, 0x4}}, {0x80, 0xf, {0x0, 0x87d}}, {0x6, 0x401, {0x3, 0x80000000}}, {0x6, 0x8000, {0x2, 0x8}}, {0x9, 0x1, {0x2, 0xa48}}, {0x1, 0x234, {0x0, 0x7}}, {0x9, 0x7, {0x1, 0xffffffff}}, {0x5f, 0x0, {0x1, 0x6}}, {0x6, 0xe8, {0x1, 0x1}}, {0x40, 0x7, {0x2, 0xc}}, {0x8, 0xb1, {0x0, 0x3}}, {0x1, 0x4, {0x3, 0x7}}, {0xf588, 0x1, {0x1, 0xff}}, {0x3a50, 0x400, {0x3, 0x5}}, {0x8, 0x0, {0x1, 0xaaa6}}, {0x4, 0x7, {0x1, 0x7fffffff}}, {0xfff, 0x2, {0x2, 0x80000000}}, {0xfff8, 0x9, {0x3, 0x1}}, {0x7, 0x2}, {0x6, 0x3, {0xf4cce83daee18365, 0xb}}, {0x7b, 0x9}, {0x8, 0x5, {0x1, 0x4}}]}}}, {{0x254, 0x1, {{0x3, 0x2de}, 0x5, 0x9, 0x6, 0x200, 0x1, 'syz1\x00', "8fd1e2dae10cdd0fd07b67fc9f1f727c69a9c6cc1fb13f84650acef8465387a5", "32ca39b2bc19ab6ad2bff7e8390152f0fc029b1676c08cb3148554bf72519885", [{0xfffb, 0x1, {0x3, 0x7}}, {0x317, 0x7c2, {0x0, 0x3ff}}, {0x7ff, 0xab7, {0x0, 0x9}}, {0x2, 0x3800, {0x0, 0xfffff5d7}}, {0xfffa, 0x4, {0x0, 0x8}}, {0x7b, 0x7, {0x3, 0x7}}, {0x0, 0xfc00, {0x3, 0x2}}, {0x1, 0x6, {0x2, 0x9ba}}, {0x101, 0xf7cb, {0x2, 0xb51}}, {0x1000, 0x0, {0x2, 0x50}}, {0xc, 0xff, {0x1, 0x3}}, {0x455, 0x9, {0x1}}, {0x200, 0x2, {0x1, 0x9}}, {0x5, 0x1, {0x3, 0x1}}, {0x6, 0x80, {0x1, 0x2}}, {0x1, 0x9, {0x0, 0x6}}, {0x8, 0x3}, {0x102, 0x5, {0x3, 0x5}}, {0x3, 0x7, {0x0, 0x100}}, {0x6, 0x1, {0x2, 0x2}}, {0x4, 0x9, {0x0, 0x1}}, {0x8, 0x41, {0x3, 0x5}}, {0x800, 0x4, {0x1}}, {0xfffa, 0x1, {0x0, 0xbc94}}, {0x8, 0x6, {0x3, 0x3}}, {0x2, 0x7, {0x3, 0x8}}, {0x3, 0x2afd, {0x2, 0x8}}, {0x8, 0x1, {0x3, 0x6}}, {0x4, 0x800, {0x1, 0x6}}, {0xc880, 0x3, {0x1, 0x7fffffff}}, {0x9, 0x0, {0x2, 0x4}}, {0xffff, 0x2, {0x2, 0x2}}, {0xa336, 0x2, {0x3, 0x1000}}, {0x3, 0x315, {0x3, 0x6}}, {0x0, 0xa97, {0x0, 0xfffffff7}}, {0x7fff, 0x1, {0x2, 0x7}}, {0x5, 0x5}, {0x7296, 0x533, {0x0, 0x1}}, {0x9, 0x9, {0x1, 0x7}}, {0xffff, 0xff00, {0x1, 0x8}}]}}}, {{0x254, 0x1, {{0x1, 0x9ad}, 0x7, 0xb, 0x12c, 0x4, 0x8, 'syz0\x00', "b8330f498fd9e2b56610cc0ec57a92325a706ae25649f6b2dedbd7989e023cef", "276695f2fe2a6d288cf893eb7e41044dfd97894c348daf8906ac4aece1dc1fa8", [{0x3, 0x6, {0x2}}, {0x7, 0x6, {0x0, 0xd}}, {0x100, 0xa, {0x1}}, {0x9248, 0x0, {0x2, 0x400}}, {0x1, 0x3, {0x0, 0x1}}, {0x0, 0x8, {0x3, 0x8}}, {0x5, 0x5, {0x2, 0x3}}, {0x158, 0x1, {0x1, 0xca8}}, {0x70c, 0x8, {0x1, 0x10000}}, {0x7, 0x7, {0x0, 0x1}}, {0x5, 0x3ff, {0x1}}, {0x4, 0xe, {0x0, 0x4}}, {0x7, 0x0, {0x1, 0xffffffff}}, {0x6, 0x5, {0x0, 0x8}}, {0x800, 0x200, {0x2, 0x1}}, {0x5, 0xd, {0x3, 0xfffffffe}}, {0x4, 0x10, {0x0, 0x4}}, {0x5, 0x0, {0x3, 0x8}}, {0x9, 0x1e, {0x3}}, {0xc6, 0x71, {0x1, 0x401}}, {0x9, 0x9, {0x2, 0x4}}, {0x9, 0x4, {0x0, 0x4}}, {0x9, 0x6, {0x3, 0xfffffff7}}, {0x6, 0x66, {0x0, 0x20}}, {0x7f, 0x8, {0x3, 0x5}}, {0x4, 0x4000, {0x1, 0x5ecb}}, {0xa1a, 0x4, {0x2, 0x8}}, {0xffff, 0xf0b, {0x1, 0x4}}, {0x9d5a, 0x8000, {0x1, 0x2}}, {0x6fc1, 0xb3f, {0x2, 0x10001}}, {0x3, 0x6, {0x0, 0x9}}, {0x5, 0xd, {0x3, 0x6}}, {0x9, 0x1, {0x2, 0xfffeffff}}, {0x5, 0x9, {0x1, 0x800}}, {0x8a, 0x1, {0x0, 0xedbf}}, {0x40, 0x5f9, {0x1, 0x6}}, {0x7fff, 0x85c0, {0x0, 0x7fff}}, {0x1, 0x1, {0x1, 0x6}}, {0x9, 0x10, {0x0, 0xb2}}, {0x1, 0x0, {0x3, 0xe}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0xd, 0x80, 0x3, 0x10, 0x7, 'syz1\x00', "4b283f9c77693cef1fa4b94bdeb7f2a176ba1187324876ede3cfdc36fda9922d", "6a57a907108c222d0c67a57cc6a5e09b74c6126a38a5f501228739295adf6564", [{0x0, 0x400, {0x3, 0x9}}, {0x1172, 0x9, {0x1, 0xc294}}, {0x3, 0x1, {0x3, 0x9}}, {0xf, 0x1, {0x1}}, {0x5, 0x8, {0x3, 0x80000000}}, {0x7, 0x8000, {0x2, 0x8}}, {0x0, 0x64c, {0x2, 0x5f}}, {0x2, 0x800, {0x2, 0xaf}}, {0x5, 0x8000, {0x0, 0x7f}}, {0x14, 0x0, {0x1, 0x1}}, {0xe, 0x9, {0x0, 0x1}}, {0x200, 0x99, {0x3, 0xf4}}, {0x2, 0x9, {0x2, 0x40}}, {0x2, 0x8, {0x1, 0x3}}, {0x3, 0x8, {0x0, 0x5}}, {0x2, 0x8000, {0x2, 0x3d2}}, {0x3a75, 0x4, {0x0, 0x1}}, {0xe67, 0x4, {0x4, 0x1}}, {0x5, 0x0, {0x1, 0x2}}, {0xfffe, 0x1, {0x2, 0xffff}}, {0x7, 0x0, {0x1, 0xe5d}}, {0x2de, 0x8, {0x3}}, {0x81, 0x8, {0x0, 0x6}}, {0xc83, 0x400, {0x0, 0x9}}, {0x7ff, 0x0, {0x1, 0x2}}, {0x7ff, 0x7fff, {0x3}}, {0xb151, 0xb, {0x1, 0x4}}, {0x8423, 0x6, {0x2, 0x2}}, {0x401, 0x2, {0x2, 0x3ff}}, {0x5, 0x8000, {0x6, 0x1}}, {0x6, 0x6, {0x2, 0x5}}, {0xd26, 0x800, {0x3, 0x2}}, {0x5, 0x3ff, {0x2, 0xffffffff}}, {0x47, 0x0, {0x1, 0x80000001}}, {0x8, 0x6, {0x1, 0xf}}, {0x16, 0x0, {0x2, 0xb}}, {0x400, 0x5, {0x0, 0xb0b7}}, {0x7, 0x81, {0x0, 0x7}}, {0xfff8, 0x8, {0x2, 0x1}}, {0xe, 0x0, {0x2, 0x10001}}]}}}, {{0x254, 0x1, {{0x1, 0x86}, 0x7f, 0x8, 0x0, 0x8000, 0x28, 'syz1\x00', "f7ad9634fff85c2556d9f8225fea8ddba1cde57e36db75c6595fe98cb1ca6f4d", "0bd00696fb6b8dd9371decb1044b616f0b7b716d392d4600660599f4553b0625", [{0x7, 0x1, {0x0, 0xfffffffc}}, {0x5, 0xf1, {0x2, 0xffffffff}}, {0x78, 0x7f, {0x3, 0x9673}}, {0xfffa, 0xe4a, {0x3, 0xffffffff}}, {0x6, 0x6, {0x2, 0x2}}, {0x14, 0x7b5, {0x1, 0x1}}, {0x4, 0x6, {0x0, 0x26}}, {0x81, 0x81, {0x2, 0xfffffff8}}, {0x8, 0x855, {0x3, 0x9}}, {0x2, 0x8000, {0x0, 0x5}}, {0x8, 0x4, {0x2}}, {0x6d1, 0x3, {0x1, 0x7}}, {0x4, 0x7, {0x3, 0x80000000}}, {0x3, 0x40, {0x0, 0x6}}, {0x4952, 0x3, {0x0, 0xfff}}, {0x2, 0xfffb, {0x1, 0x58c}}, {0x1, 0xf37, {0x2, 0xf}}, {0x8, 0x6, {0x3, 0x80000000}}, {0x200, 0x1, {0x2, 0x8000}}, {0xf, 0x1, {0x3, 0x1}}, {0x0, 0x5, {0x5, 0xffffffe7}}, {0x3, 0x6, {0x0, 0x1}}, {0x5, 0x6, {0x0, 0xfff}}, {0x4, 0x3, {0x3, 0x9}}, {0x9, 0x101, {0x1, 0x9}}, {0x30, 0x400, {0x2, 0x40}}, {0xc, 0x1, {0x0, 0x3}}, {0x7, 0xfffd, {0x3, 0x7}}, {0x7, 0x7, {0x1, 0x9}}, {0x401, 0x3, {0x1, 0x9}}, {0x9, 0x3, {0x0, 0x9}}, {0x21, 0x1, {0x2, 0x40}}, {0x7fff, 0x9, {0x0, 0x9}}, {0x7, 0x0, {0x3, 0x9}}, {0xc, 0x400, {0x0, 0x7fffffff}}, {0x40, 0x100, {0x2, 0xd1d1}}, {0x7ff, 0x4, {0x2, 0x6}}, {0x4, 0xdf9, {0x1, 0x3}}, {0x6, 0x800, {0x3, 0x27}}, {0x0, 0x3, {0x1, 0x4}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 17.84225ms ago: executing program 9 (id=6205): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16, @ANYBLOB="11060000"], 0x174}, 0x1, 0x0, 0x0, 0x80}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x10, 0x0, &(0x7f0000001b40)=[@clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) 0s ago: executing program 9 (id=6206): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mremap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0xfffffffff000, 0x3, &(0x7f0000ffc000/0x4000)=nil) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc3, 0x66, 0x62, 0x20, 0x67b, 0x307, 0xddc8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x94, 0x2, 0x2, 0xf3, 0x9e, 0xea, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0xc6225a99193a0f6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_PRE_FAULT_MEMORY(r1, 0xc040aed5, &(0x7f0000000000)={0x100000}) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x3, 0x442, [0x0, 0x200000000200, 0x200000000444, 0x2000000005e2], 0x0, &(0x7f0000000040), &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x9, 0xa, 0x800, 'vlan1\x00', 'veth0_to_hsr\x00', 'ip6_vti0\x00', 'vxcan1\x00', @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @random="97d2b88c59a9", [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0xb6, 0xfe, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0x101, 0xe7b3, 0x6, 0x8, 0xfffffffe, 0x19f}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0xc, 0x8, {0x1}}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0xa6, 0x1, {0x8}}}}}, {0x5, 0x1a, 0xc, 'batadv_slave_1\x00', 'syzkaller0\x00', 'bond_slave_0\x00', 'veth0_to_bond\x00', @empty, [0x0, 0x0, 0x0, 0xff], @broadcast, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0x9e, 0x9e, 0xce, [@cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x4, 0x1}}}], [], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffd}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x9, 0x1, 0x88fb, 'veth1_vlan\x00', 'gretap0\x00', 'wg1\x00', 'veth1_to_batadv\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0xff, 0xff, 0xff, 0xff], @local, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0x126, 0x126, 0x16e, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x0, 0x0, 0x2a5, 0x3, 0x38, {0x8}}}}, @ip6={{'ip6\x00', 0x0, 0x50}, {{@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xff000000], 0x9, 0x2c, 0x0, 0x13, 0x4e22, 0x4e21, 0x4e22, 0x4e23}}}], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x5, 0x1, {0x7}}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x4ba) kernel console output (not intermixed with test programs): -1: new high-speed USB device number 78 using dummy_hcd [ 284.446844][T12497] fuse: Unknown parameter '.f$;X?_-O [ 284.446844][T12497] ' [ 284.454594][ T9] usb 5-1: device descriptor read/8, error -71 [ 284.533689][T12504] /dev/rnullb0: Can't open blockdev [ 284.594500][ T9] usb 5-1: device descriptor read/8, error -71 [ 284.727224][ T36] audit: type=1400 audit(1758053527.067:2866): avc: denied { mount } for pid=12510 comm="syz.7.3709" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 284.833421][ T9] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 284.854516][ T9] usb 5-1: device descriptor read/8, error -71 [ 284.984455][ T9] usb 5-1: device descriptor read/8, error -71 [ 285.093591][ T9] usb usb5-port1: unable to enumerate USB device [ 285.458911][ T36] audit: type=1400 audit(1758053527.796:2867): avc: denied { ioctl } for pid=12540 comm="syz.7.3721" path="socket:[65502]" dev="sockfs" ino=65502 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 285.492839][ T36] audit: type=1400 audit(1758053527.826:2868): avc: denied { create } for pid=12542 comm="syz.7.3722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 285.738494][T12547] incfs: Error accessing: ./file0. [ 285.742532][T12548] fuse: Bad value for 'user_id' [ 285.743957][T12547] incfs: mount failed -20 [ 285.748850][T12548] fuse: Bad value for 'user_id' [ 285.952304][T12569] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 286.090168][ T36] audit: type=1400 audit(1758053528.426:2869): avc: denied { append } for pid=12570 comm="syz.4.3732" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 286.090860][T12571] __vm_enough_memory: pid: 12571, comm: syz.4.3732, bytes: 18014402804453376 not enough memory for the allocation [ 286.244809][ T36] audit: type=1400 audit(1758053528.576:2870): avc: denied { shutdown } for pid=12577 comm="syz.4.3734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 286.293880][T12583] 9pnet_fd: Insufficient options for proto=fd [ 286.310936][T12586] overlayfs: failed to clone upperpath [ 286.332872][T12588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.341423][T12588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.776197][T12597] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:544 [ 286.943623][T12629] IPv6: : Disabled Multicast RS [ 286.973028][T12629] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 286.988245][T12629] overlayfs: missing 'lowerdir' [ 287.016448][T12637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.025099][T12637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.038969][T12637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.047970][T12637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.572612][T12648] overlay: filesystem on ./bus not supported as upperdir [ 287.592703][T12653] rust_binder: 563: no such ref 3 [ 287.598058][T12655] rust_binder: Write failure EINVAL in pid:563 [ 287.635143][T12662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.650631][T12662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.710643][T12669] /dev/rnullb0: Can't open blockdev [ 287.993827][ T986] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 288.144927][ T986] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 288.156018][ T986] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 288.165084][ T986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.173799][ T986] usb 5-1: config 0 descriptor?? [ 288.179083][T12674] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 288.217713][T12676] netlink: 'syz.1.3765': attribute type 2 has an invalid length. [ 288.520810][T12684] overlayfs: failed to clone lowerpath [ 288.586721][T12692] SELinux: security_context_str_to_sid () failed with errno=-22 [ 288.594657][ T986] hid-generic 0003:04F3:0755.0010: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 288.644042][ T208] Bluetooth: hci0: Frame reassembly failed (-84) [ 288.698583][T12700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.707156][T12700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.396639][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 289.396657][ T36] audit: type=1326 audit(1758053531.736:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12689 comm="syz.7.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f118eba9 code=0x7fc00000 [ 290.202254][T12729] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 290.202369][T12729] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 290.216124][ T36] audit: type=1400 audit(1758053532.556:2878): avc: denied { setopt } for pid=12728 comm="syz.4.3779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 290.226397][T12729] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 290.242291][T12729] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 290.250283][T12729] rust_binder: Read failure Err(EFAULT) in pid:561 [ 290.441770][ T36] audit: type=1400 audit(1758053532.776:2879): avc: denied { read } for pid=12743 comm="syz.4.3786" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 290.471535][ T36] audit: type=1400 audit(1758053532.776:2880): avc: denied { open } for pid=12743 comm="syz.4.3786" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 290.495681][ T986] usb 5-1: USB disconnect, device number 80 [ 290.674136][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 290.674142][ T2119] Bluetooth: hci0: command 0x1003 tx timeout [ 290.821860][T12748] overlayfs: failed to clone upperpath [ 291.173920][ T36] audit: type=1326 audit(1758053533.506:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12743 comm="syz.4.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faac9d8eba9 code=0x7fc00000 [ 291.222552][ T36] audit: type=1400 audit(1758053533.556:2882): avc: denied { ioctl } for pid=12751 comm="syz.6.3789" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 291.260420][T12756] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 291.269166][T12756] overlay: Unknown parameter 'smackfstransmute' [ 291.314788][T12763] fuse: Unknown parameter '0x00000000000000040x0000000000000004' [ 291.379937][T12764] binder: Unknown parameter '00000000000000000000' [ 291.381395][T12774] binder: Unknown parameter '00000000000000000000' [ 291.403544][T12776] rust_binder: Failed to allocate buffer. len:216, is_oneway:true [ 291.417420][T12779] fuse: Bad value for 'fd' [ 291.482536][ T36] audit: type=1400 audit(1758053533.816:2883): avc: denied { map } for pid=12783 comm="syz.6.3798" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 291.630068][T12813] bridge0: port 3(macsec0) entered blocking state [ 291.636677][T12813] bridge0: port 3(macsec0) entered disabled state [ 291.643239][T12813] macsec0: entered allmulticast mode [ 291.648798][T12813] veth1_macvtap: entered allmulticast mode [ 291.655096][T12813] macsec0: entered promiscuous mode [ 291.660493][T12813] bridge0: port 3(macsec0) entered blocking state [ 291.666977][T12813] bridge0: port 3(macsec0) entered forwarding state [ 291.674204][T12814] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3807'. [ 291.774244][ T9] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 291.925320][ T9] usb 5-1: config 201 has an invalid interface number: 249 but max is 0 [ 291.933736][ T9] usb 5-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config [ 291.944081][ T9] usb 5-1: config 201 has no interface number 0 [ 291.950658][ T9] usb 5-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 291.962519][ T9] usb 5-1: config 201 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 291.975702][ T9] usb 5-1: config 201 interface 249 has no altsetting 0 [ 291.984080][ T9] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 291.993174][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.001207][ T9] usb 5-1: Product: syz [ 292.005419][ T9] usb 5-1: Manufacturer: syz [ 292.010034][ T9] usb 5-1: SerialNumber: syz [ 292.216898][T12795] rust_binder: 12795 RLIMIT_NICE not set [ 292.485016][T12821] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 292.531909][T12836] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 292.539499][ T36] audit: type=1400 audit(2000000001.020:2884): avc: denied { shutdown } for pid=12838 comm="syz.1.3816" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 292.621558][T12848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.630154][T12848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.639019][T12848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.647594][T12848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.669655][T12853] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 292.677109][T12853] rust_binder: 621: no such ref 2 [ 292.726435][ T9] usb 5-1: USB disconnect, device number 81 [ 292.736585][ T10] rust_binder: 12793: removing orphan mapping 1024:1024 [ 292.751745][T12857] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 292.762922][T12857] rust_binder: Write failure EFAULT in pid:584 [ 292.776301][T12859] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3824'. [ 292.809866][T12861] rust_binder: Error in use_page_slow: ESRCH [ 292.809884][T12861] rust_binder: use_range failure ESRCH [ 292.818599][T12861] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 292.824245][T12861] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 292.832244][T12861] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:588 [ 292.841684][T12861] rust_binder: Error in use_page_slow: ESRCH [ 292.850754][T12861] rust_binder: use_range failure ESRCH [ 292.856792][T12861] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 292.862261][T12861] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 292.870090][T12861] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:588 [ 292.879434][T12861] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 292.888498][T12861] rust_binder: Read failure Err(EFAULT) in pid:588 [ 292.935441][ T36] audit: type=1400 audit(2000000001.420:2885): avc: granted { setsecparam } for pid=12867 comm="syz.4.3827" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 293.461349][ T36] audit: type=1400 audit(2000000001.940:2886): avc: denied { relabelfrom } for pid=12877 comm="syz.4.3832" name="NETLINK" dev="sockfs" ino=67950 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 293.797485][T12901] 9pnet_fd: p9_fd_create_unix (12901): problem connecting socket: ./file0: -111 [ 294.032272][T12906] /dev/loop0: Can't lookup blockdev [ 294.230763][T12923] overlayfs: upper fs does not support tmpfile. [ 294.251991][T12925] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 294.253335][T12925] rust_binder: Failed to allocate buffer. len:224, is_oneway:true [ 294.424736][ T36] kauditd_printk_skb: 667 callbacks suppressed [ 294.424756][ T36] audit: type=1326 audit(2000000002.910:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12889 comm="syz.4.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7faac9d8eba9 code=0x7ffc0000 [ 294.499449][T12931] rust_binder: 607: no such ref 5 [ 294.504600][T12931] rust_binder: Write failure EINVAL in pid:607 [ 294.602715][T12933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 294.624069][T12933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 294.630694][T12902] 9pnet_fd: p9_fd_create_tcp (12902): problem connecting socket to 127.0.0.1 [ 294.740124][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 294.747837][T12942] rust_binder: Write failure EINVAL in pid:640 [ 294.747977][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 294.763373][T12942] rust_binder: Write failure EINVAL in pid:640 [ 294.763486][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 294.781962][T12942] rust_binder: Write failure EINVAL in pid:640 [ 294.782094][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 294.796279][T12942] rust_binder: Write failure EINVAL in pid:640 [ 294.796338][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 294.810154][T12942] rust_binder: Write failure EINVAL in pid:640 [ 294.810201][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 294.823975][T12942] rust_binder: Write failure EINVAL in pid:640 [ 294.824024][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 294.837842][T12942] rust_binder: Write failure EINVAL in pid:640 [ 294.837890][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 294.851686][T12942] rust_binder: Write failure EINVAL in pid:640 [ 294.851744][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 294.865529][T12942] rust_binder: Write failure EINVAL in pid:640 [ 294.865578][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 294.879355][T12942] rust_binder: Write failure EINVAL in pid:640 [ 294.879400][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 294.893170][T12942] rust_binder: Write failure EINVAL in pid:640 [ 294.893219][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 294.912621][T12942] rust_binder: Write failure EINVAL in pid:640 [ 294.912673][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 294.926682][T12942] rust_binder: Write failure EINVAL in pid:640 [ 294.926733][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 294.940574][T12944] netlink: 'syz.7.3856': attribute type 20 has an invalid length. [ 294.948841][T12942] rust_binder: Write failure EINVAL in pid:640 [ 294.948887][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 294.963368][T12942] rust_binder: Write failure EINVAL in pid:640 [ 294.963417][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 294.977256][T12942] rust_binder: Write failure EINVAL in pid:640 [ 294.977309][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 294.991121][T12942] rust_binder: Write failure EINVAL in pid:640 [ 294.991170][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.011673][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.011741][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.026520][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.026615][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.040563][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.040611][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.054395][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.054437][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.068230][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.068272][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.082078][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.082125][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.096005][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.096051][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.110455][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.110500][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.124378][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.124422][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.138225][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.138270][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.152030][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.152077][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.165942][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.165985][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.179731][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.179776][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.193545][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.193591][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.207356][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.207401][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.221186][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.221233][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.234983][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.235025][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.248815][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.248874][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.262582][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.262623][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.276354][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.276395][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.290083][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.290122][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.304027][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.304072][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.318254][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.318310][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.332075][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.332121][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.346346][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.346390][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.360113][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.360158][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.376041][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.376085][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.389717][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.389759][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.403322][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.403364][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.416922][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.416967][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.430509][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.430554][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.444237][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.444288][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.457842][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.457881][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.471515][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.471561][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.485121][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.485163][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.505770][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.505813][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.519577][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.519619][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.533456][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.533499][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.547186][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.547301][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.560953][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.560997][T12942] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 295.575460][T12942] rust_binder: Write failure EINVAL in pid:640 [ 295.594137][T12957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 295.606136][T12957] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 295.879323][ T36] audit: type=1400 audit(2000000004.360:3555): avc: denied { checkpoint_restore } for pid=12975 comm="syz.7.3865" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 295.977107][T12981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12981 comm=syz.7.3868 [ 296.035814][T12985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.049105][T12985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.171565][T12994] netlink: 'syz.1.3873': attribute type 4 has an invalid length. [ 296.189659][T12994] netlink: 'syz.1.3873': attribute type 4 has an invalid length. [ 296.265572][T12998] tipc: Enabling of bearer rejected, failed to enable media [ 296.558960][T13005] overlayfs: overlapping lowerdir path [ 296.559448][T13004] overlayfs: overlapping lowerdir path [ 296.593444][T13009] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 296.628663][ T36] audit: type=1400 audit(2000000005.110:3556): avc: denied { name_bind } for pid=13013 comm="syz.7.3881" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 296.663919][T13018] binder: Unknown parameter 'fscontext?}' [ 296.713763][T13020] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 296.729921][T13022] __vm_enough_memory: pid: 13022, comm: syz.6.3884, bytes: 18014402804453376 not enough memory for the allocation [ 296.755359][T13024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.763957][T13024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.774384][ T36] audit: type=1400 audit(2000000005.260:3557): avc: denied { getopt } for pid=13023 comm="syz.6.3885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 296.833789][ T36] audit: type=1400 audit(2000000005.310:3558): avc: denied { map } for pid=13023 comm="syz.6.3885" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 296.858438][ T36] audit: type=1400 audit(2000000005.310:3559): avc: denied { execute } for pid=13023 comm="syz.6.3885" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 297.144243][ T9] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 297.178404][T13038] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3890'. [ 297.295382][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.306417][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.316285][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 297.329254][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 297.338319][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.346892][ T9] usb 5-1: config 0 descriptor?? [ 297.636916][T13051] netlink: 'syz.1.3895': attribute type 27 has an invalid length. [ 297.745926][T13058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3898'. [ 297.756231][ T9] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x5 [ 297.763788][ T9] plantronics 0003:047F:FFFF.0011: collection stack underflow [ 297.764865][T13058] incfs: Error accessing: ./file0. [ 297.771494][ T9] plantronics 0003:047F:FFFF.0011: item 0 0 0 12 parsing failed [ 297.776606][T13058] incfs: mount failed -20 [ 297.784821][ T9] plantronics 0003:047F:FFFF.0011: parse failed [ 297.795488][ T9] plantronics 0003:047F:FFFF.0011: probe with driver plantronics failed with error -22 [ 297.967684][ T31] usb 5-1: USB disconnect, device number 82 [ 298.724228][ T31] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 298.830443][T13092] overlayfs: failed to clone upperpath [ 298.875384][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.886373][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.892239][ T36] audit: type=1400 audit(2000000007.370:3560): avc: denied { create } for pid=13091 comm="syz.7.3911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 298.896338][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 298.930045][ T31] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 298.946463][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.960779][ T31] usb 5-1: config 0 descriptor?? [ 298.970662][ T36] audit: type=1400 audit(2000000007.450:3561): avc: denied { listen } for pid=13098 comm="syz.1.3914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 298.991154][ T36] audit: type=1400 audit(2000000007.470:3562): avc: denied { accept } for pid=13098 comm="syz.1.3914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 299.042531][ T36] audit: type=1400 audit(2000000007.520:3563): avc: denied { ioctl } for pid=13098 comm="syz.1.3914" path="socket:[68502]" dev="sockfs" ino=68502 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 299.372739][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 299.380473][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 299.388115][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 299.395829][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 299.403244][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 299.410701][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 299.418145][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 299.425572][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 299.433002][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 299.440435][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 299.447849][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 299.455258][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 299.462652][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 299.470070][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 299.477613][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 299.485385][ T31] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 299.494409][ T31] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 299.636623][ T31] usb 5-1: USB disconnect, device number 83 [ 299.767705][T13129] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3924'. [ 299.976941][T13134] 9pnet_fd: Insufficient options for proto=fd [ 300.326347][T13158] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 300.326872][T13158] usb 7-1: USB disconnect, device number 14 [ 300.396895][T13159] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 300.749621][T13170] fuse: Unknown parameter 'grou' [ 301.020284][ T36] audit: type=1400 audit(2000000009.500:3564): avc: denied { create } for pid=13179 comm="syz.1.3942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 301.112929][T13182] /dev/rnullb0: Can't open blockdev [ 301.186823][ T36] audit: type=1400 audit(2000000009.670:3565): avc: denied { connect } for pid=13187 comm="syz.6.3947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 301.292216][T13191] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 301.295196][T13191] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 301.736991][T13194] 9pnet: Could not find request transport: fOrfdno=0xffffffffffffffff [ 301.807407][T13209] netlink: 'syz.1.3954': attribute type 4 has an invalid length. [ 301.815253][T13209] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3954'. [ 301.835965][ T36] audit: type=1400 audit(2000000010.320:3566): avc: denied { map } for pid=13210 comm="syz.1.3955" path="socket:[69258]" dev="sockfs" ino=69258 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 302.485838][T13252] overlayfs: failed to clone upperpath [ 302.492153][T13252] overlayfs: failed to resolve './file1': -2 [ 302.509342][T13254] fuse: Unknown parameter 'u^0x0000000000000006' [ 302.535378][T13258] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3973'. [ 302.544615][T13259] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3973'. [ 302.618542][T13261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3974'. [ 302.647517][ T36] audit: type=1400 audit(2000000011.130:3567): avc: denied { write } for pid=13265 comm="syz.1.3976" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 303.126041][ T36] audit: type=1400 audit(2000000011.610:3568): avc: denied { connect } for pid=13269 comm="syz.6.3977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 303.148135][T13273] netlink: 1 bytes leftover after parsing attributes in process `syz.7.3978'. [ 303.154379][ T2119] Bluetooth: hci0: command 0x1003 tx timeout [ 303.163054][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 303.252192][T13288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.260931][T13288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.307418][T13290] rust_binder: Write failure EFAULT in pid:653 [ 303.369635][ T36] audit: type=1400 audit(2000000011.850:3569): avc: denied { bind } for pid=13294 comm="syz.4.3984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 303.495246][T13299] overlayfs: failed to resolve '/r1֣aY7ÎtjBBԗ*': -2 [ 303.664225][ T9] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 303.816125][ T9] usb 5-1: config index 0 descriptor too short (expected 1051, got 27) [ 303.826863][ T36] audit: type=1400 audit(2000000012.310:3570): avc: denied { listen } for pid=13321 comm="syz.6.3994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 303.829000][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 303.873338][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 303.899385][ T9] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 303.908635][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.917125][ T9] usb 5-1: Product: syz [ 303.921363][ T9] usb 5-1: Manufacturer: syz [ 303.926055][ T9] usb 5-1: SerialNumber: syz [ 303.933718][ T9] usb 5-1: config 0 descriptor?? [ 303.965501][ T36] audit: type=1326 audit(2000000012.450:3571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13338 comm="syz.7.4000" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34f118eba9 code=0x0 [ 304.101260][ T36] audit: type=1400 audit(2000000012.580:3572): avc: denied { write } for pid=13341 comm="syz.6.4001" path="socket:[69606]" dev="sockfs" ino=69606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 304.103063][T13342] overlayfs: conflicting lowerdir path [ 304.141881][T13295] rust_binder: Error in use_page_slow: ESRCH [ 304.141905][T13295] rust_binder: use_range failure ESRCH [ 304.148062][T13295] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 304.153569][T13295] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 304.161663][T13295] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:658 [ 304.174216][ T9] usb 5-1: USB disconnect, device number 84 [ 304.408030][T13349] binder: Unknown parameter '' [ 304.812913][ T36] audit: type=1400 audit(2000000013.290:3573): avc: denied { map } for pid=13356 comm="syz.7.4007" path="socket:[70036]" dev="sockfs" ino=70036 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 304.889871][T13364] rust_binder: Write failure EINVAL in pid:662 [ 305.358898][T13405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4021'. [ 305.374884][T13405] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 305.386971][T13407] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:681 [ 305.739110][T13425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.757107][T13426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.757626][T13425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.767424][T13426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.904214][ T31] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 305.986033][T13429] bpf: Bad value for 'gid' [ 306.057070][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.067272][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 306.077181][ T31] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 306.086467][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 306.088504][T13450] overlayfs: failed to clone upperpath [ 306.095047][ T31] usb 5-1: SerialNumber: syz [ 306.130047][T13454] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4039'. [ 306.140370][T13454] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4039'. [ 306.312377][ T31] usb 5-1: 0:2 : does not exist [ 306.319489][ T31] usb 5-1: USB disconnect, device number 85 [ 306.368216][T13472] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 306.421106][T13473] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 306.495174][T13476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 306.503877][T13476] rust_binder: Failed to allocate buffer. len:224, is_oneway:true [ 306.823733][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 306.823754][ T36] audit: type=1400 audit(2000000015.300:3588): avc: denied { relabelfrom } for pid=13514 comm="syz.6.4059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 306.836249][T13519] netlink: 8568 bytes leftover after parsing attributes in process `syz.4.4060'. [ 306.854233][ T36] audit: type=1400 audit(2000000015.300:3589): avc: denied { relabelto } for pid=13514 comm="syz.6.4059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 306.921349][T13517] kvm: MWAIT instruction emulated as NOP! [ 306.932270][T13518] pim6reg1: entered promiscuous mode [ 306.955024][T13518] pim6reg1: entered allmulticast mode [ 306.961412][T13518] rust_binder: Write failure EFAULT in pid:694 [ 306.994734][T13526] netlink: 'syz.7.4062': attribute type 29 has an invalid length. [ 307.074531][T13533] fuse: Unknown parameter 'f"q0x0000000000000004' [ 307.087910][ T36] audit: type=1326 audit(2000000015.570:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13535 comm="syz.7.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f118eba9 code=0x7ffc0000 [ 307.111637][ T36] audit: type=1326 audit(2000000015.570:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13535 comm="syz.7.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f118eba9 code=0x7ffc0000 [ 307.135416][ T36] audit: type=1400 audit(2000000015.600:3592): avc: denied { shutdown } for pid=13540 comm="syz.7.4066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 307.597483][T13552] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 307.621886][T13555] fuse: Bad value for 'fd' [ 307.795314][T13570] can0: slcan on ttyS3. [ 307.836976][T13570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4075'. [ 307.926326][T13570] can0 (unregistered): slcan off ttyS3. [ 308.417429][T13625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.425949][T13625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.531091][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 308.709228][T13636] /dev/loop0: Can't lookup blockdev [ 308.735441][T13642] veth1: entered allmulticast mode [ 308.741034][T13641] veth1: left allmulticast mode [ 308.986489][ T36] audit: type=1400 audit(2000000017.470:3593): avc: denied { watch watch_reads } for pid=13649 comm="syz.6.4096" path="/251" dev="tmpfs" ino=1397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 308.987955][T13650] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 309.018512][T13650] overlayfs: missing 'lowerdir' [ 309.027001][T13650] 9pnet_fd: Insufficient options for proto=fd [ 309.056294][ T36] audit: type=1400 audit(2000000017.540:3594): avc: denied { lock } for pid=13656 comm="syz.6.4098" path="socket:[71883]" dev="sockfs" ino=71883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 309.056857][T13657] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:762 [ 309.186235][T13661] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 309.212539][ T36] audit: type=1326 audit(2000000017.690:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13665 comm="syz.1.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa392f8eba9 code=0x7ff00000 [ 309.242609][ T36] audit: type=1326 audit(2000000017.690:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13665 comm="syz.1.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa392f8eba9 code=0x7ff00000 [ 309.266770][ T36] audit: type=1326 audit(2000000017.690:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13665 comm="syz.1.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa392f8eba9 code=0x7ff00000 [ 309.338040][T13671] batadv_slave_0: entered promiscuous mode [ 309.354882][T13670] batadv_slave_0: left promiscuous mode [ 310.304460][T13693] fuse: Unknown parameter 'permit_directio' [ 310.594226][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 310.600304][ T2119] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 310.704689][T13711] rust_binder: 743: no such ref 5 [ 310.709872][T13712] rust_binder: 743: no such ref 5 [ 310.715189][T13711] rust_binder: Write failure EINVAL in pid:743 [ 310.715267][T13712] rust_binder: Write failure EINVAL in pid:743 [ 310.984210][ T4701] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 311.028469][T13718] batadv_slave_0: mtu less than device minimum [ 311.107810][T13727] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 311.108118][T13729] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 311.148725][T13729] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 311.148753][T13729] rust_binder: Read failure Err(EFAULT) in pid:787 [ 311.161851][ T4701] usb 5-1: not running at top speed; connect to a high speed hub [ 311.164481][T13733] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 311.176687][ T4701] usb 5-1: config 9 has an invalid interface number: 185 but max is 0 [ 311.188061][T13733] rust_binder: Read failure Err(EFAULT) in pid:787 [ 311.207648][ T4701] usb 5-1: config 9 has no interface number 0 [ 311.235031][ T4701] usb 5-1: config 9 interface 185 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 311.259988][ T4701] usb 5-1: New USB device found, idVendor=0af0, idProduct=7706, bcdDevice= 0.00 [ 311.269165][ T4701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.277990][ T4701] usb 5-1: Product: 矐밬쨬嫈솯풪匯솲ᚱ鳭줒躌劆弳뷰㫆컘鷝䋢ᙟ蛥ኅ꤆ỡ跽巜沎 [ 311.303695][ T4701] usb 5-1: Manufacturer: 蘆춈왞趓쌢黦疗፿⤪恗勫샻ḋ홖绵꟪佷쳬螌燐‼㗸ㅵ殔ی镜㏾썅뙃銍鯣ᮠ洞⥔ᑿ榪迍䧳䁗轀婠⍸ߤﵪ壏閦 [ 311.338091][ T4701] usb 5-1: SerialNumber: Е [ 311.483836][T13744] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 311.545239][T13745] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 311.556309][ T4701] usb-storage 5-1:9.185: USB Mass Storage device detected [ 311.636035][ T4701] usb 5-1: USB disconnect, device number 86 [ 311.824199][ T36] kauditd_printk_skb: 29930 callbacks suppressed [ 311.824220][ T36] audit: type=1326 audit(2000000020.300:33528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13665 comm="syz.1.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa392f8eba9 code=0x7ff00000 [ 311.858703][ T36] audit: type=1326 audit(2000000020.340:33529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13665 comm="syz.1.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa392f8eba9 code=0x7ff00000 [ 311.882529][ T36] audit: type=1326 audit(2000000020.340:33530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13665 comm="syz.1.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa392f8eba9 code=0x7ff00000 [ 311.906132][ T36] audit: type=1326 audit(2000000020.340:33531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13665 comm="syz.1.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa392f8eba9 code=0x7ff00000 [ 311.929713][ T36] audit: type=1326 audit(2000000020.340:33532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13665 comm="syz.1.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa392f8eba9 code=0x7ff00000 [ 311.953302][ T36] audit: type=1326 audit(2000000020.340:33533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13665 comm="syz.1.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa392f8eba9 code=0x7ff00000 [ 311.977161][ T36] audit: type=1326 audit(2000000020.340:33534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13665 comm="syz.1.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa392f8eba9 code=0x7ff00000 [ 312.000838][ T36] audit: type=1326 audit(2000000020.340:33535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13665 comm="syz.1.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa392f8eba9 code=0x7ff00000 [ 312.024484][ T36] audit: type=1326 audit(2000000020.340:33536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13665 comm="syz.1.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa392f8eba9 code=0x7ff00000 [ 312.048084][ T36] audit: type=1326 audit(2000000020.340:33537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13665 comm="syz.1.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa392f8eba9 code=0x7ff00000 [ 312.199690][T13754] rust_binder: Fixups oob 165 172 361 173 [ 312.199718][T13754] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 312.205822][T13754] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 312.214152][T13754] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:751 [ 312.252083][T13758] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 312.259921][T13762] cgroup: noprefix used incorrectly [ 312.303668][T13770] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 312.303699][T13770] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:758 [ 312.351101][T13783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.370077][T13783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.438868][T13802] netlink: 'syz.7.4150': attribute type 64 has an invalid length. [ 312.573634][T13823] rust_binder: Error while translating object. [ 312.573682][T13823] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 312.579978][T13823] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:770 [ 312.612343][T13826] rust_binder: 772: no such ref 0 [ 312.638896][T13830] rust_binder: 772: no such ref 0 [ 312.894821][T13839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=13839 comm=syz.6.4162 [ 312.907523][T13839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=13839 comm=syz.6.4162 [ 312.934660][T13841] tmpfs: Unknown parameter 'huge' [ 312.941107][T13841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.949781][T13841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.961689][T13841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.970316][T13841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.499981][T13853] rust_binder: Write failure EFAULT in pid:785 [ 313.612135][T13873] x_tables: duplicate entry at hook 2 [ 313.626247][T13873] overlayfs: failed to clone upperpath [ 313.716621][T13887] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 313.720438][T13887] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 313.731989][T13887] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:813 [ 313.827126][T13893] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 4096) [ 313.836330][T13893] rust_binder: Error while translating object. [ 313.847038][T13893] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 313.853222][T13893] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:793 [ 313.932725][T13896] netlink: 'syz.4.4182': attribute type 4 has an invalid length. [ 314.237261][T13913] can0: slcan on ttyS3. [ 314.495390][ T4701] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 314.544938][T13931] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 314.553132][T13931] rust_binder: Write failure EINVAL in pid:816 [ 314.612692][T13938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.627643][T13938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.644247][ T4701] usb 5-1: Using ep0 maxpacket: 16 [ 314.650557][ T4701] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.661043][ T4701] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 314.671715][ T4701] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 314.681196][ T4701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.689417][ T4701] usb 5-1: Product: syz [ 314.693619][ T4701] usb 5-1: Manufacturer: syz [ 314.698460][ T4701] usb 5-1: SerialNumber: syz [ 314.704313][ T4701] usb 5-1: config 0 descriptor?? [ 314.837401][T13938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.847851][T13938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.874543][T13953] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4196'. [ 314.911394][ T332] usb 5-1: USB disconnect, device number 87 [ 314.955906][T13913] can0 (unregistered): slcan off ttyS3. [ 315.598681][T13993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.608069][T13993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.706390][T14005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4204'. [ 315.716860][T14005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4204'. [ 316.195680][ T31] rust_binder: 14029: removing orphan mapping 0:24 [ 316.248354][T14041] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4215'. [ 317.040724][T14083] 9pnet_fd: Insufficient options for proto=fd [ 317.075443][ T36] kauditd_printk_skb: 2043 callbacks suppressed [ 317.075470][ T36] audit: type=1400 audit(2000000025.560:35581): avc: denied { execute } for pid=14089 comm="syz.7.4233" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=72672 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 317.203377][T14118] syz.4.4241: attempt to access beyond end of device [ 317.203377][T14118] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 317.229438][T14118] FAT-fs (loop4): unable to read boot sector [ 317.253542][T14117] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14117 comm=syz.7.4242 [ 317.254419][T14116] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14116 comm=syz.7.4242 [ 317.382238][T14118] /dev/rnullb0: Can't open blockdev [ 317.767273][ T36] audit: type=1400 audit(2000000026.250:35582): avc: denied { write } for pid=14144 comm="syz.6.4250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 318.066344][T14164] netlink: 37 bytes leftover after parsing attributes in process `syz.1.4257'. [ 318.312813][ T36] audit: type=1400 audit(2000000026.790:35583): avc: denied { lock } for pid=14197 comm="syz.4.4267" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 318.711841][T14214] veth0_virt_wifi: entered allmulticast mode [ 318.718567][T14213] veth0_virt_wifi: left allmulticast mode [ 319.254974][T14223] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4277'. [ 319.339816][T14228] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4279'. [ 319.444221][ T31] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 319.594202][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 319.600497][ T31] usb 5-1: config 1 interface 0 altsetting 76 bulk endpoint 0x1 has invalid maxpacket 8 [ 319.610319][ T31] usb 5-1: config 1 interface 0 altsetting 76 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 319.623523][ T31] usb 5-1: config 1 interface 0 has no altsetting 0 [ 319.632158][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 319.641049][ T36] audit: type=1326 audit(2000000028.110:35584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14239 comm="syz.7.4285" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34f118eba9 code=0x0 [ 319.642091][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.672321][ T31] usb 5-1: Product: 䓻昈䜞騥뙜ꆘ慻襷ᶭҚ偟艞齔龩껇ぅ檮᫦봦⿨汾ퟶ㙭榘⥥㣎㗗䗁霘ǰ僴Ⱏ浰깢䤇酝㮼▔몘곛ನ滐㑐믦獴芁п₦퍶뿱Ἆ䟒㇓櫄趰㥹ො䕕⧨恩⑇魐ቷ뺁餁Ƈ紵ছ濌쐅寡苅鸆㼄艠㻂멧뒹跦ຟ㪈֖뺐ﶿ㡉ᦀ⨺௭ᨷ༶髽돊鮀垣㚗菖횑聃씊須 [ 319.706689][ T31] usb 5-1: Manufacturer: 宠뛡遑ꚾꠈ䉯댒ꦒ刹千﫪ꜗ₩㤌耴課籙鈓憦儍⣈੬࡝撹覭璘㞍헆訰뽙〡ʱ愆⽒㜨ﳝ고솼땸⪳貆잴뵰ꜳ豖⠼ⳕ覚鼹╀뀫첟ૻ啵䴱稣ퟎᅪᕚ㎩헹ढ़↵嚳㩒ﳊ㨚ŝ꥛닜媚놧尷㊇瑗蔪ꭈ㥁洕縣摒㔊싀㼛輑喓䁪ﲵ婘祃횴蔮繖杔㿍ᕰⴸ惜㶖ꊋ瑠︮幧런즘똍 [ 319.741430][ T31] usb 5-1: SerialNumber: syz [ 319.747094][T14221] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 319.754503][T14221] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 319.986214][ T31] usb 5-1: USB disconnect, device number 88 [ 320.057115][T14244] overlayfs: failed to clone upperpath [ 320.095976][T14250] overlayfs: failed to clone upperpath [ 320.144122][T14264] No source specified [ 320.170940][T14270] overlayfs: failed to clone upperpath [ 320.524399][T14300] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 320.532442][T14301] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 320.540695][T14301] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551614) [ 320.540700][T14300] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551614) [ 320.540716][T14301] rust_binder: Error while translating object. [ 320.553321][T14300] rust_binder: Error while translating object. [ 320.565094][T14301] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 320.571494][T14300] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 320.577401][T14301] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:854 [ 320.587029][T14300] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:854 [ 320.621545][T14303] netlink: 'syz.4.4308': attribute type 16 has an invalid length. [ 320.638553][T14303] netlink: 'syz.4.4308': attribute type 3 has an invalid length. [ 320.646308][T14303] netlink: 64054 bytes leftover after parsing attributes in process `syz.4.4308'. [ 320.660105][T14303] overlayfs: missing 'lowerdir' [ 320.666309][T14303] fuse: Bad value for 'user_id' [ 320.671248][T14303] fuse: Bad value for 'user_id' [ 320.810934][ T36] audit: type=1400 audit(2000000029.290:35585): avc: denied { mounton } for pid=14318 comm="syz.4.4313" path="/282/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 320.863348][ T36] audit: type=1400 audit(2000000029.340:35586): avc: denied { unmount } for pid=8914 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 320.886035][T14328] rust_binder: Write failure EINVAL in pid:863 [ 320.960980][ T36] audit: type=1400 audit(2000000029.440:35587): avc: denied { unmount } for pid=8914 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 321.307625][T14347] 9pnet_fd: Insufficient options for proto=fd [ 328.883538][ T36] audit: type=1400 audit(2000000037.360:35588): avc: denied { ioctl } for pid=14357 comm="syz.6.4328" path="socket:[75084]" dev="sockfs" ino=75084 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 328.924617][T14367] binder: Bad value for 'stats' [ 329.060033][ T36] audit: type=1400 audit(2000000037.540:35589): avc: denied { execute } for pid=14380 comm="syz.4.4336" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 329.060126][T14381] __vm_enough_memory: pid: 14381, comm: syz.4.4336, bytes: 18014402804453376 not enough memory for the allocation [ 329.118425][T14389] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 329.191708][T14411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4345'. [ 329.215305][ T36] audit: type=1326 audit(2000000037.700:35590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14414 comm="syz.1.4346" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa392f8eba9 code=0x0 [ 329.397089][T14428] rust_binder: Failed copying into alloc: EFAULT [ 329.397109][T14428] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 329.403544][T14428] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 329.411847][T14428] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:905 [ 329.422810][T14423] sock: sock_timestamping_bind_phc: sock not bind to device [ 329.444821][T14431] rust_binder: Write failure EFAULT in pid:907 [ 329.694218][ T4701] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 329.865269][ T4701] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 223, changing to 11 [ 329.881502][ T4701] usb 5-1: config 0 interface 0 has no altsetting 0 [ 329.890249][ T4701] usb 5-1: New USB device found, idVendor=056a, idProduct=030e, bcdDevice= 0.00 [ 329.899461][ T4701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.908325][ T4701] usb 5-1: config 0 descriptor?? [ 330.257420][T14476] 9pnet_fd: Insufficient options for proto=fd [ 330.313730][T14490] 9pnet_fd: Insufficient options for proto=fd [ 330.325956][ T4701] usbhid 5-1:0.0: can't add hid device: -71 [ 330.332030][ T4701] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 330.342699][ T4701] usb 5-1: USB disconnect, device number 89 [ 330.402093][T14504] cgroup: noprefix used incorrectly [ 330.408422][ T36] audit: type=1400 audit(2000000038.890:35591): avc: denied { create } for pid=14502 comm="syz.6.4377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 330.455478][T14510] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4379'. [ 330.455567][T14511] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4379'. [ 330.473611][T14510] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4379'. [ 339.444332][T14527] fuse: Bad value for 'group_id' [ 339.450152][T14527] fuse: Bad value for 'group_id' [ 339.547559][T14561] netlink: 'syz.1.4397': attribute type 30 has an invalid length. [ 339.568961][T14569] overlayfs: failed to clone upperpath [ 339.588799][T14579] rust_binder: 14557 RLIMIT_NICE not set [ 339.588950][T14579] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 339.602580][T14579] rust_binder: Write failure EINVAL in pid:917 [ 339.615655][T14586] overlayfs: failed to clone upperpath [ 340.081360][T14595] sit0: entered promiscuous mode [ 340.087373][T14595] netlink: 'syz.1.4406': attribute type 1 has an invalid length. [ 340.095187][T14595] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4406'. [ 340.377670][T14623] /dev/rnullb0: Can't open blockdev [ 340.384347][T14624] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 340.401822][T14628] cgroup: Need name or subsystem set [ 340.408205][T14628] netlink: 'syz.7.4419': attribute type 4 has an invalid length. [ 340.459162][T14630] serio: Serial port ptm0 [ 340.516701][T14644] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.516990][T14644] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 340.664366][T14656] overlayfs: missing 'workdir' [ 340.681602][T14656] rust_binder: validate_parent_fixup: new_min_offset=21, sg_entry.length=0 [ 340.681622][T14656] rust_binder: Error while translating object. [ 340.690296][T14656] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 340.696515][T14656] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:929 [ 340.963995][T14671] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.980476][T14671] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.987604][T14671] bridge_slave_0: entered allmulticast mode [ 340.993888][T14671] bridge_slave_0: entered promiscuous mode [ 341.000807][T14671] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.004234][ T332] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 341.007890][T14671] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.022682][T14671] bridge_slave_1: entered allmulticast mode [ 341.029071][T14671] bridge_slave_1: entered promiscuous mode [ 341.079067][T14671] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.086135][T14671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.093417][T14671] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.100528][T14671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.122651][ T208] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.129932][ T208] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.139671][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.146764][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.156390][ T208] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.163482][ T208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.187051][ T332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.194335][T14671] veth0_vlan: entered promiscuous mode [ 341.198440][ T332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.213591][T14671] veth1_macvtap: entered promiscuous mode [ 341.213691][ T332] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 341.228510][ T332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.239420][ T332] usb 5-1: config 0 descriptor?? [ 341.248566][ T36] audit: type=1400 audit(2000000305.721:35592): avc: denied { mounton } for pid=14671 comm="syz-executor" path="/root/syzkaller.eRkWCq/syz-tmp" dev="sda1" ino=2059 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 341.273348][ T36] audit: type=1400 audit(2000000305.721:35593): avc: denied { mounton } for pid=14671 comm="syz-executor" path="/root/syzkaller.eRkWCq/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 341.301694][ T36] audit: type=1400 audit(2000000305.721:35594): avc: denied { mounton } for pid=14671 comm="syz-executor" path="/root/syzkaller.eRkWCq/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=75786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 341.329767][ T36] audit: type=1400 audit(2000000305.741:35595): avc: denied { mounton } for pid=14671 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 341.398515][T14691] overlayfs: failed to clone upperpath [ 341.405465][ T36] audit: type=1400 audit(2000000305.881:35596): avc: denied { create } for pid=14690 comm="syz.6.4439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 341.452304][T14695] overlayfs: failed to clone upperpath [ 341.487419][T14699] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 144, limit: 232, size: 226) [ 341.487441][T14699] rust_binder: Error while translating object. [ 341.498278][T14699] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 341.504592][T14699] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:7 [ 341.539198][T14704] netlink: 37 bytes leftover after parsing attributes in process `syz.6.4445'. [ 341.608809][ T36] audit: type=1400 audit(2000000306.081:35597): avc: denied { create } for pid=14709 comm="syz.6.4448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 341.700393][T14723] veth0_virt_wifi: entered allmulticast mode [ 341.707297][T14722] veth0_virt_wifi: left allmulticast mode [ 341.778407][ T36] audit: type=1400 audit(2000000306.251:35598): avc: denied { remount } for pid=14731 comm="syz.6.4456" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 341.859944][T14746] overlayfs: failed to clone upperpath [ 341.899073][ T36] audit: type=1400 audit(2000000306.371:35599): avc: denied { remove_name } for pid=14753 comm="syz.1.4465" name="binder0" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 341.922345][ T36] audit: type=1400 audit(2000000306.371:35600): avc: denied { unlink } for pid=14753 comm="syz.1.4465" name="binder0" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 341.990413][T14762] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=60 sclass=netlink_tcpdiag_socket pid=14762 comm=syz.7.4468 [ 342.060298][T14774] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 342.151592][T14782] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 342.165305][T14782] overlayfs: failed to set xattr on upper [ 342.171375][T14782] overlayfs: ...falling back to redirect_dir=nofollow. [ 342.178180][ T36] audit: type=1326 audit(2000000306.641:35601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14783 comm="syz.1.4477" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba7b58eba9 code=0x0 [ 342.178999][T14782] overlayfs: ...falling back to uuid=null. [ 342.455657][T14658] rust_binder: Write failure EFAULT in pid:931 [ 342.456527][ T332] uclogic 0003:256C:006D.0013: v1 frame probing failed: -71 [ 342.470133][ T332] uclogic 0003:256C:006D.0013: failed probing parameters: -71 [ 342.477710][ T332] uclogic 0003:256C:006D.0013: probe with driver uclogic failed with error -71 [ 342.488827][ T332] usb 5-1: USB disconnect, device number 90 [ 342.539571][T14804] tipc: Enabling of bearer rejected, failed to enable media [ 342.562097][T14806] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4484'. [ 342.976634][T14828] pim6reg1: entered promiscuous mode [ 342.981962][T14828] pim6reg1: entered allmulticast mode [ 343.019378][T14830] rust_binder: Write failure EFAULT in pid:33 [ 343.067242][T14837] rust_binder: Error while translating object. [ 343.073621][T14837] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 343.079948][T14837] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:935 [ 343.165785][T14844] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 343.334259][ T31] usb 2-1: new low-speed USB device number 56 using dummy_hcd [ 343.395211][T14849] binder: Unknown parameter 'ma0000000000' [ 343.415098][T14852] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4499'. [ 343.429883][T14854] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4500'. [ 343.494269][ T31] usb 2-1: Invalid ep0 maxpacket: 64 [ 343.624465][ T31] usb 2-1: new low-speed USB device number 57 using dummy_hcd [ 343.754232][ T332] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 343.784373][ T31] usb 2-1: Invalid ep0 maxpacket: 64 [ 343.790979][ T31] usb usb2-port1: attempt power cycle [ 343.894222][ T332] usb 5-1: device descriptor read/64, error -71 [ 344.134238][ T332] usb 5-1: device descriptor read/64, error -71 [ 344.144328][ T31] usb 2-1: new low-speed USB device number 58 using dummy_hcd [ 344.164599][ T31] usb 2-1: Invalid ep0 maxpacket: 64 [ 344.294259][ T31] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 344.314567][ T31] usb 2-1: Invalid ep0 maxpacket: 64 [ 344.320149][ T31] usb usb2-port1: unable to enumerate USB device [ 344.374253][ T332] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 344.504205][ T332] usb 5-1: device descriptor read/64, error -71 [ 344.744223][ T332] usb 5-1: device descriptor read/64, error -71 [ 344.755743][T14929] overlayfs: failed to clone upperpath [ 344.865241][ T332] usb usb5-port1: attempt power cycle [ 344.892334][T14948] futex_wake_op: syz.6.4529 tries to shift op by 144; fix this program [ 345.214211][ T332] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 345.235303][ T332] usb 5-1: device descriptor read/8, error -71 [ 345.368269][ T332] usb 5-1: device descriptor read/8, error -71 [ 345.486250][T14980] overlayfs: failed to clone upperpath [ 345.516717][T14984] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4542'. [ 345.525814][T14985] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4542'. [ 345.614235][ T332] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 345.635265][ T332] usb 5-1: device descriptor read/8, error -71 [ 345.765603][ T332] usb 5-1: device descriptor read/8, error -71 [ 345.876162][ T332] usb usb5-port1: unable to enumerate USB device [ 346.504243][ T9] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 346.654241][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 346.660602][ T9] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 346.669840][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.678851][ T9] usb 2-1: config 0 descriptor?? [ 346.685468][ T9] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 346.885621][ T9] usb 2-1: Detected FT232A [ 346.890613][ T9] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 346.934203][ T332] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 347.064221][ T332] usb 5-1: device descriptor read/64, error -71 [ 347.086931][T15012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.095523][T15012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.200967][T15034] tipc: Enabling of bearer rejected, failed to enable media [ 347.219266][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 347.219284][ T36] audit: type=1326 audit(2000000311.691:35605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15038 comm="syz.6.4559" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f6878eba9 code=0x0 [ 347.304200][ T332] usb 5-1: device descriptor read/64, error -71 [ 347.544217][ T332] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 347.650365][ T36] audit: type=1400 audit(2000000312.121:35606): avc: denied { accept } for pid=15053 comm="syz.7.4564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 347.674342][ T332] usb 5-1: device descriptor read/64, error -71 [ 347.678257][T15057] overlayfs: failed to clone upperpath [ 347.914215][ T332] usb 5-1: device descriptor read/64, error -71 [ 348.024321][ T332] usb usb5-port1: attempt power cycle [ 348.364217][ T332] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 348.385282][ T332] usb 5-1: device descriptor read/8, error -71 [ 348.515593][ T332] usb 5-1: device descriptor read/8, error -71 [ 348.754243][ T332] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 348.775284][ T332] usb 5-1: device descriptor read/8, error -71 [ 348.905519][ T332] usb 5-1: device descriptor read/8, error -71 [ 349.014361][ T332] usb usb5-port1: unable to enumerate USB device [ 349.193151][ T332] usb 2-1: USB disconnect, device number 60 [ 349.199950][ T332] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 349.209970][ T332] ftdi_sio 2-1:0.0: device disconnected [ 356.406094][T15082] /dev/rnullb0: Can't open blockdev [ 356.419388][T15091] /dev/rnullb0: Can't open blockdev [ 356.601391][T15102] fuse: Unknown parameter 'smackfsdef' [ 356.700306][ T36] audit: type=1400 audit(2000000321.171:35607): avc: denied { ioctl } for pid=15103 comm="syz.1.4581" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 356.795724][T15110] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 356.804193][ T10] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 357.064192][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 357.072404][ T10] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 357.083591][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 357.095681][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice= 0.40 [ 357.111530][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.119936][ T10] usb 5-1: Product: 㲠럿隶ゝ㨛⛫쾼鍋蒞석⥂鲽 [ 357.127890][ T10] usb 5-1: Manufacturer: 鸬㸬쏅㎰ᛅ천樕 [ 357.134278][ T10] usb 5-1: SerialNumber: 벽ھ蠞훘⁉鿲잒齨뛕욿㛬筠悥ꊓ㯑틁᣿壜ﯨ꼙⼷뷉ď糵 [ 357.176039][T15127] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 357.351091][T15093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.359796][T15093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.373160][T15135] netlink: 4 bytes leftover after parsing attributes in process `+%'. [ 357.374288][ T10] usb 5-1: USB disconnect, device number 99 [ 357.646460][T15154] cgroup: fork rejected by pids controller in /syz1 [ 357.958024][T15227] binder: Binderfs stats mode cannot be changed during a remount [ 357.967228][ T36] audit: type=1400 audit(2000000322.451:35608): avc: denied { load_policy } for pid=15226 comm="syz.4.4602" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 357.987790][T15227] SELinux: failed to load policy [ 358.349773][T15255] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 358.350188][T15254] rust_binder: Error while translating object. [ 358.356758][T15254] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 358.363113][T15254] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:169 [ 358.382269][T15257] Invalid ELF header type: 2 != 1 [ 358.382349][ T36] audit: type=1400 audit(2000000322.851:35609): avc: denied { module_load } for pid=15256 comm="syz.1.4610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 358.439658][T15263] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 358.442105][T15263] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 358.464965][T15267] rust_binder: Error while translating object. [ 358.472986][T15267] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 358.479288][T15267] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:972 [ 358.515967][T15271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4615'. [ 358.788044][ T10] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 358.917194][T15292] overlayfs: failed to clone upperpath [ 358.955627][ T10] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 358.964000][ T10] usb 2-1: config 1 has no interface number 0 [ 358.970305][ T10] usb 2-1: config 1 interface 105 has no altsetting 0 [ 358.978779][ T10] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 358.988121][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.996326][ T10] usb 2-1: Product: syz [ 359.000578][ T10] usb 2-1: Manufacturer: syz [ 359.005511][ T10] usb 2-1: SerialNumber: syz [ 359.094214][ T332] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 359.118213][T15302] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4625'. [ 359.139239][T15304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=15304 comm=syz.7.4626 [ 359.167180][T15308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27422 sclass=netlink_route_socket pid=15308 comm=syz.7.4628 [ 359.196249][T15310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15310 comm=syz.7.4629 [ 359.220790][ T36] audit: type=1326 audit(2000000324.698:35610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15272 comm="syz.1.4616" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba7b58eba9 code=0x0 [ 359.225680][ T332] usb 5-1: device descriptor read/64, error -71 [ 359.432700][T15325] overlayfs: failed to clone upperpath [ 359.484226][ T332] usb 5-1: device descriptor read/64, error -71 [ 359.493101][T15333] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4637'. [ 359.724262][ T332] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 359.854229][ T332] usb 5-1: device descriptor read/64, error -71 [ 360.031462][ T36] audit: type=1400 audit(2000000325.508:35611): avc: denied { create } for pid=15336 comm="syz.6.4639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 360.051372][ T36] audit: type=1400 audit(2000000325.508:35612): avc: denied { setopt } for pid=15336 comm="syz.6.4639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 360.099717][T15346] netlink: 'syz.6.4641': attribute type 1 has an invalid length. [ 360.107571][T15346] netlink: 'syz.6.4641': attribute type 2 has an invalid length. [ 360.124203][ T332] usb 5-1: device descriptor read/64, error -71 [ 360.161226][T15357] /dev/loop0: Can't lookup blockdev [ 360.167128][T15357] /dev/loop0: Can't lookup blockdev [ 360.167912][T15359] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4647'. [ 360.181598][T15359] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 360.235748][ T332] usb usb5-port1: attempt power cycle [ 360.321882][T15369] SELinux: Context KNDd5Q3Bkٔybӭs,~;c3poͺfPҸ62Ai] is not valid (left unmapped). [ 360.574252][ T332] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 360.595234][ T332] usb 5-1: device descriptor read/8, error -71 [ 360.725294][ T332] usb 5-1: device descriptor read/8, error -71 [ 360.800135][T15394] netlink: 'syz.7.4658': attribute type 4 has an invalid length. [ 360.940950][T15413] netlink: 'syz.6.4664': attribute type 15 has an invalid length. [ 360.948912][T15413] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4664'. [ 360.964212][ T332] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 360.985233][ T332] usb 5-1: device descriptor read/8, error -71 [ 361.115263][ T332] usb 5-1: device descriptor read/8, error -71 [ 361.224916][ T332] usb usb5-port1: unable to enumerate USB device [ 361.595034][ T10] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 361.605997][ T10] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 361.614957][ T10] usb 2-1: USB disconnect, device number 61 [ 361.784057][T15445] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4674'. [ 361.823819][T15449] overlayfs: failed to clone upperpath [ 361.989921][T15458] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 361.990228][T15458] rust_binder: Write failure EINVAL in pid:986 [ 362.024226][ T332] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 362.047686][T15460] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 362.098868][T15461] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 362.106753][T15461] rust_binder: Error while translating object. [ 362.115453][T15461] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 362.121657][T15461] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:986 [ 362.238686][ T332] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 362.255699][ T332] usb 2-1: can't read configurations, error -71 [ 362.274873][T15465] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 362.307112][T15467] __vm_enough_memory: pid: 15467, comm: syz.1.4680, bytes: 18014402804453376 not enough memory for the allocation [ 362.839489][T15491] kvm: user requested TSC rate below hardware speed [ 362.847633][ T36] audit: type=1400 audit(2000000328.328:35613): avc: denied { append } for pid=15489 comm="syz.4.4688" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 363.154824][T15509] kvm: user requested TSC rate below hardware speed [ 363.194273][ T9] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 363.344206][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 363.350551][ T9] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 363.358864][ T9] usb 5-1: config 0 has no interface number 0 [ 363.365139][ T9] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 363.375081][ T9] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 363.386498][ T9] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 363.395892][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.403915][ T9] usb 5-1: Product: syz [ 363.408163][ T9] usb 5-1: Manufacturer: syz [ 363.412810][ T9] usb 5-1: SerialNumber: syz [ 363.418086][ T9] usb 5-1: config 0 descriptor?? [ 363.423391][T15496] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 363.430800][T15496] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 363.484225][ T332] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 363.635745][ T332] usb 2-1: unable to get BOS descriptor or descriptor too short [ 363.643644][T15494] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 363.651647][ T332] usb 2-1: config 2 has an invalid interface number: 34 but max is 2 [ 363.664305][T15494] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 363.666705][ T332] usb 2-1: config 2 has an invalid interface number: 6 but max is 2 [ 363.685210][ T332] usb 2-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 363.695785][ T332] usb 2-1: config 2 has no interface number 0 [ 363.701993][ T332] usb 2-1: config 2 has no interface number 2 [ 363.708553][ T332] usb 2-1: config 2 interface 1 altsetting 190 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 363.720473][ T332] usb 2-1: config 2 interface 34 altsetting 8 has an invalid endpoint descriptor of length 5, skipping [ 363.732309][ T332] usb 2-1: config 2 interface 34 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 363.746577][ T332] usb 2-1: too many endpoints for config 2 interface 6 altsetting 7: 37, using maximum allowed: 30 [ 363.747810][T15527] netlink: 'syz.7.4702': attribute type 10 has an invalid length. [ 363.766579][ T332] usb 2-1: config 2 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 363.769130][T15527] netlink: 17 bytes leftover after parsing attributes in process `syz.7.4702'. [ 363.779710][ T332] usb 2-1: config 2 interface 1 has no altsetting 0 [ 363.796634][ T332] usb 2-1: config 2 interface 34 has no altsetting 0 [ 363.803381][ T332] usb 2-1: config 2 interface 6 has no altsetting 0 [ 363.811497][ T332] usb 2-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice=37.c4 [ 363.824193][ T332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.832284][ T332] usb 2-1: Product: syz [ 363.836538][ T332] usb 2-1: Manufacturer: syz [ 363.841199][ T332] usb 2-1: SerialNumber: syz [ 363.884201][ T9] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 363.894705][ T9] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61 [ 363.905220][ T9] asix 5-1:0.251: probe with driver asix failed with error -5 [ 363.914912][ T36] audit: type=1400 audit(2000000329.388:35614): avc: denied { bpf } for pid=15546 comm="syz.6.4709" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 363.980538][T15562] overlayfs: failed to clone upperpath [ 364.052529][ T332] usb 2-1: selecting invalid altsetting 0 [ 364.062695][ T332] usb 2-1: USB disconnect, device number 64 [ 364.075232][T15136] udevd[15136]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 364.240164][ T332] usb 5-1: USB disconnect, device number 104 [ 364.433978][ T36] audit: type=1400 audit(2000000329.908:35615): avc: denied { read } for pid=15587 comm="syz.4.4723" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 364.435484][T15588] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 364.458493][ T36] audit: type=1400 audit(2000000329.908:35616): avc: denied { open } for pid=15587 comm="syz.4.4723" path="/332/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 364.458732][T15588] rust_binder: Error while translating object. [ 364.471224][ T36] audit: type=1400 audit(2000000329.908:35617): avc: denied { ioctl } for pid=15587 comm="syz.4.4723" path="/332/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 364.495626][T15588] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 364.527877][T15588] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1005 [ 364.574935][T15595] rust_binder: Write failure EINVAL in pid:1012 [ 364.602301][T15602] 9pnet_fd: Insufficient options for proto=fd [ 364.894236][ T10] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 364.930196][ T36] audit: type=1326 audit(2000000330.408:35618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15578 comm="syz.6.4720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6878eba9 code=0x7fc00000 [ 365.024203][ T10] usb 2-1: device descriptor read/64, error -71 [ 365.188810][T15631] overlayfs: failed to clone upperpath [ 365.264235][ T10] usb 2-1: device descriptor read/64, error -71 [ 365.489074][T15637] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 365.489102][T15637] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1024 [ 365.504239][ T10] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 365.549820][ T36] audit: type=1400 audit(2000000331.028:35619): avc: denied { setattr } for pid=15636 comm="syz.4.4740" name="binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 365.644224][ T10] usb 2-1: device descriptor read/64, error -71 [ 365.806827][ T36] audit: type=1400 audit(2000000331.288:35620): avc: denied { ioctl } for pid=15644 comm="syz.7.4743" path="socket:[79993]" dev="sockfs" ino=79993 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 365.847183][T15651] netlink: 'syz.6.4745': attribute type 4 has an invalid length. [ 365.857226][T15651] netlink: 'syz.6.4745': attribute type 4 has an invalid length. [ 365.894211][ T10] usb 2-1: device descriptor read/64, error -71 [ 365.915360][T15657] cgroup: fork rejected by pids controller in /syz7 [ 366.014204][ T10] usb usb2-port1: attempt power cycle [ 366.364205][ T10] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 366.388395][ T10] usb 2-1: device descriptor read/8, error -71 [ 366.462326][T15753] overlayfs: missing 'lowerdir' [ 366.526113][ T10] usb 2-1: device descriptor read/8, error -71 [ 366.699692][ T36] audit: type=1326 audit(2000000332.178:35621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15779 comm="syz.6.4764" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7f6878eba9 code=0x0 [ 366.764226][ T10] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 366.785215][ T10] usb 2-1: device descriptor read/8, error -71 [ 366.915312][ T10] usb 2-1: device descriptor read/8, error -71 [ 367.024563][ T10] usb usb2-port1: unable to enumerate USB device [ 367.181444][ T36] audit: type=1400 audit(2000000332.658:35622): avc: denied { ioctl } for pid=15784 comm="syz.4.4766" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 367.624200][ T10] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 367.784196][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 367.790470][ T10] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 367.799039][ T10] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 367.807760][ T10] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 367.813791][T15853] rust_binder: Error while translating object. [ 367.816936][T15853] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 367.818285][ T10] usb 5-1: config 250 has no interface number 0 [ 367.823315][T15853] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:227 [ 367.838489][ T10] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 367.859722][ T10] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 367.870937][T15818] 9pnet_fd: Insufficient options for proto=fd [ 367.873924][T15858] overlayfs: missing 'lowerdir' [ 367.878272][ T10] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 367.892519][ T10] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 367.903166][ T10] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 367.916914][ T10] usb 5-1: config 250 interface 228 has no altsetting 0 [ 367.926879][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 367.931771][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 367.931790][ T36] audit: type=1400 audit(2000000334.403:35624): avc: denied { setattr } for pid=15867 comm="syz.1.4791" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 367.936278][ T10] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 367.973489][ T10] usb 5-1: Product: syz [ 367.977233][ T36] audit: type=1400 audit(2000000334.443:35625): avc: denied { write } for pid=15872 comm="syz.1.4793" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 367.977911][ T10] usb 5-1: SerialNumber: syz [ 368.001548][T15873] __vm_enough_memory: pid: 15873, comm: syz.1.4793, bytes: 18014402804453376 not enough memory for the allocation [ 368.011638][ T10] hub 5-1:250.228: bad descriptor, ignoring hub [ 368.025547][ T10] hub 5-1:250.228: probe with driver hub failed with error -5 [ 368.035495][T15875] rust_binder: Error while translating object. [ 368.035525][T15875] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 368.041725][T15875] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:243 [ 368.212459][ T10] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 105 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 368.212520][T15793] binder: Unknown parameter 'fscontext?}' [ 368.255635][ T10] usb 5-1: USB disconnect, device number 105 [ 368.262949][ T10] usblp0: removed [ 368.456824][T15883] netlink: 'syz.7.4797': attribute type 27 has an invalid length. [ 368.466275][T15883] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 368.496783][T15885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15885 comm=syz.7.4798 [ 368.572131][T15901] overlayfs: failed to resolve './file1': -2 [ 368.578787][T15901] overlayfs: missing 'lowerdir' [ 368.579795][T15903] overlayfs: missing 'lowerdir' [ 368.979204][ T36] audit: type=1400 audit(2000000335.453:35626): avc: denied { read write } for pid=15915 comm="syz.1.4806" name="file0" dev="tmpfs" ino=360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 369.002415][ T36] audit: type=1400 audit(2000000335.453:35627): avc: denied { open } for pid=15915 comm="syz.1.4806" path="/63/file0" dev="tmpfs" ino=360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 369.143896][ T36] audit: type=1400 audit(2000000335.613:35628): avc: denied { unmount } for pid=14671 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 369.183416][ T36] audit: type=1400 audit(2000000335.653:35629): avc: denied { setattr } for pid=15929 comm="syz.1.4811" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 369.213538][T15932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4812'. [ 369.279007][T15934] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 369.279033][T15934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:267 [ 369.299871][T15936] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 369.309657][T15937] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 369.330042][ T36] audit: type=1400 audit(2000000335.803:35630): avc: denied { create } for pid=15938 comm="syz.1.4815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 369.691437][T15947] rust_binder: Error while translating object. [ 369.691485][T15947] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 369.697886][T15947] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1047 [ 369.720505][T15951] netlink: 680 bytes leftover after parsing attributes in process `syz.4.4818'. [ 369.794077][T15953] rust_binder: 1051: no such ref 1 [ 369.921247][T15968] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4823'. [ 370.043592][ T36] audit: type=1400 audit(2000000336.513:35631): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=791 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 370.065415][ T36] audit: type=1400 audit(2000000336.513:35632): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=791 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 370.088496][ T36] audit: type=1400 audit(2000000336.513:35633): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=791 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 370.334210][ T332] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 370.485303][ T332] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.495657][ T332] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 370.505766][ T332] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 370.514924][ T332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 370.522958][ T332] usb 5-1: SerialNumber: syz [ 370.888000][T16000] overlayfs: statfs failed on './file0' [ 370.892377][ T332] usb 5-1: 0:2 : does not exist [ 370.900979][ T332] usb 5-1: USB disconnect, device number 106 [ 370.909947][T15136] udevd[15136]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 371.487233][T16030] veth0_virt_wifi: entered allmulticast mode [ 371.493759][T16028] veth0_virt_wifi: left allmulticast mode [ 371.620331][ T10] rust_binder: 16033: removing orphan mapping 0:4208 [ 371.864216][ T332] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 372.014179][ T332] usb 5-1: Using ep0 maxpacket: 16 [ 372.021593][ T332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.032784][ T332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.041356][T16049] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4852'. [ 372.042920][ T332] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 372.064889][ T332] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 372.074694][ T332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.084470][ T332] usb 5-1: config 0 descriptor?? [ 372.165398][T16054] overlayfs: failed to clone upperpath [ 372.296477][ T332] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 372.303793][ T332] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 372.311114][ T332] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 372.318398][ T332] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 372.325658][ T332] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 372.332923][ T332] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 372.340181][ T332] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 372.347436][ T332] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 372.354739][ T332] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 372.362067][ T332] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 372.369741][ T332] HID 045e:07da: Invalid code 65791 type 1 [ 372.375989][ T332] HID 045e:07da: Invalid code 768 type 1 [ 372.381712][ T332] HID 045e:07da: Invalid code 769 type 1 [ 372.387397][ T332] HID 045e:07da: Invalid code 770 type 1 [ 372.393043][ T332] HID 045e:07da: Invalid code 771 type 1 [ 372.398740][ T332] HID 045e:07da: Invalid code 772 type 1 [ 372.404406][ T332] HID 045e:07da: Invalid code 773 type 1 [ 372.410039][ T332] HID 045e:07da: Invalid code 774 type 1 [ 372.415762][ T332] HID 045e:07da: Invalid code 775 type 1 [ 372.421457][ T332] HID 045e:07da: Invalid code 776 type 1 [ 372.430997][ T332] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0014/input/input23 [ 372.444017][ T332] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 372.497203][T16065] pim6reg1: entered promiscuous mode [ 372.502613][T16065] pim6reg1: entered allmulticast mode [ 372.833863][T16085] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.841088][T16085] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.848679][T16085] bridge_slave_0: entered allmulticast mode [ 372.859256][T16085] bridge_slave_0: entered promiscuous mode [ 372.866141][T16085] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.873271][T16085] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.880416][T16085] bridge_slave_1: entered allmulticast mode [ 372.886959][T16085] bridge_slave_1: entered promiscuous mode [ 372.897128][ T208] macsec0: left allmulticast mode [ 372.902294][ T208] veth1_macvtap: left allmulticast mode [ 372.908100][ T208] macsec0: left promiscuous mode [ 372.913152][ T208] bridge0: port 3(macsec0) entered disabled state [ 372.920079][ T208] bridge_slave_1: left allmulticast mode [ 372.925839][ T208] bridge_slave_1: left promiscuous mode [ 372.931511][ T208] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.939128][ T208] bridge_slave_0: left allmulticast mode [ 372.945331][ T208] bridge_slave_0: left promiscuous mode [ 372.951080][ T208] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.078902][ T208] veth1_macvtap: left promiscuous mode [ 373.084531][ T208] veth0_vlan: left promiscuous mode [ 373.143513][T16085] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.150604][T16085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.157931][T16085] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.165005][T16085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.186297][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.193673][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.204959][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.212095][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.221873][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.229001][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.255835][T16085] veth0_vlan: entered promiscuous mode [ 373.270010][T16085] veth1_macvtap: entered promiscuous mode [ 373.607692][T16128] rust_binder: Error while translating object. [ 373.607744][T16128] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 373.613986][T16128] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:5 [ 374.193933][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 374.193954][ T36] audit: type=1400 audit(2000000347.667:35635): avc: denied { map } for pid=16154 comm="syz.1.4881" path="pipe:[74588]" dev="pipefs" ino=74588 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 374.315873][T16166] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 374.316053][T16166] rust_binder: Write failure EINVAL in pid:9 [ 374.438749][ T36] audit: type=1326 audit(2000000347.917:35636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16168 comm="syz.7.4885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9dc18eba9 code=0x7fc00000 [ 374.503035][T16177] fuse: Unknown parameter '184467440737095516150x0000000000000003' [ 374.503839][T16176] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 374.547841][T16183] rust_binder: got new transaction with bad transaction stack [ 374.547866][T16183] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:26 [ 374.555888][T16184] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 374.632751][ T332] usb 5-1: USB disconnect, device number 107 [ 374.661687][ T36] audit: type=1400 audit(2000000348.137:35637): avc: denied { map } for pid=16194 comm="syz.4.4893" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 374.692327][ T36] audit: type=1400 audit(2000000348.137:35638): avc: denied { execute } for pid=16194 comm="syz.4.4893" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 374.716625][T16200] /dev/rnullb0: Can't open blockdev [ 374.806734][T16207] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 374.860065][T16209] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:42 [ 374.966839][ T36] audit: type=1400 audit(2000000348.447:35639): avc: denied { write } for pid=16214 comm="syz.4.4900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 375.114379][T16231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4907'. [ 375.133079][T16231] netlink: 'syz.1.4907': attribute type 4 has an invalid length. [ 375.143531][T16231] netlink: 'syz.1.4907': attribute type 4 has an invalid length. [ 375.153182][ T36] audit: type=1400 audit(2000000348.627:35640): avc: denied { create } for pid=16230 comm="syz.1.4907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 375.274204][ T65] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 375.404222][ T65] usb 5-1: device descriptor read/64, error -71 [ 375.542065][ T36] audit: type=1400 audit(2000000349.017:35641): avc: denied { create } for pid=16232 comm="syz.6.4908" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 375.644198][ T65] usb 5-1: device descriptor read/64, error -71 [ 375.898599][ T65] usb 5-1: new full-speed USB device number 109 using dummy_hcd [ 376.010706][T16253] overlayfs: failed to clone upperpath [ 376.034215][ T65] usb 5-1: device descriptor read/64, error -71 [ 376.274237][ T65] usb 5-1: device descriptor read/64, error -71 [ 376.289339][ T208] tipc: Left network mode [ 376.296656][ T208] veth1_macvtap: left promiscuous mode [ 376.302227][ T208] veth0_vlan: left promiscuous mode [ 376.360466][T16259] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.367594][T16259] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.374709][T16259] bridge_slave_0: entered allmulticast mode [ 376.380985][T16259] bridge_slave_0: entered promiscuous mode [ 376.387416][T16259] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.394388][ T65] usb usb5-port1: attempt power cycle [ 376.394542][T16259] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.406927][T16259] bridge_slave_1: entered allmulticast mode [ 376.413166][T16259] bridge_slave_1: entered promiscuous mode [ 376.467288][T16259] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.474374][T16259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.481645][T16259] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.488721][T16259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.509749][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.517130][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.526626][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.533694][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.543511][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.550598][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.566021][ T36] audit: type=1400 audit(2000000350.047:35642): avc: denied { watch } for pid=16269 comm="syz.1.4921" path="/96/file0" dev="tmpfs" ino=537 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 376.605448][T16259] veth0_vlan: entered promiscuous mode [ 376.618956][T16259] veth1_macvtap: entered promiscuous mode [ 376.666024][T16279] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4924'. [ 376.678315][T16275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4923'. [ 376.687854][T16275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4923'. [ 376.734252][ T65] usb 5-1: new full-speed USB device number 110 using dummy_hcd [ 376.755299][ T65] usb 5-1: device descriptor read/8, error -71 [ 376.819115][T16287] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 376.819140][T16287] rust_binder: Error in use_page_slow: EFAULT [ 376.829777][T16287] rust_binder: use_range failure EFAULT [ 376.835996][T16287] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 376.841618][T16287] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 376.849783][T16287] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:6 [ 376.873979][T16289] rust_binder: Write failure EINVAL in pid:8 [ 376.885105][T16289] netlink: 88 bytes leftover after parsing attributes in process `syz.8.4927'. [ 376.895406][ T65] usb 5-1: device descriptor read/8, error -71 [ 376.904531][T16289] can0: slcan on ttyS3. [ 376.962775][T16298] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4927'. [ 376.971940][T16298] bridge_slave_1: left allmulticast mode [ 376.977827][T16298] bridge_slave_1: left promiscuous mode [ 376.983775][T16298] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.992240][T16298] bridge_slave_0: left allmulticast mode [ 376.998280][T16298] bridge_slave_0: left promiscuous mode [ 377.003938][T16298] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.125968][T16289] can0 (unregistered): slcan off ttyS3. [ 377.144219][ T65] usb 5-1: new full-speed USB device number 111 using dummy_hcd [ 377.175321][ T65] usb 5-1: device descriptor read/8, error -71 [ 377.240091][T16321] rust_binder: Failed to allocate buffer. len:8815263377109862632, is_oneway:false [ 377.240124][T16321] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 377.249665][T16321] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:13 [ 377.272948][ T36] audit: type=1400 audit(2000000350.747:35643): avc: denied { map } for pid=16322 comm="syz.8.4930" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 377.325419][ T65] usb 5-1: device descriptor read/8, error -71 [ 377.444292][ T65] usb usb5-port1: unable to enumerate USB device [ 378.103789][T16345] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4939'. [ 378.158994][T16349] netlink: 'syz.1.4941': attribute type 4 has an invalid length. [ 378.168195][T16349] netlink: 'syz.1.4941': attribute type 4 has an invalid length. [ 378.196865][T16354] binder: Bad value for 'max' [ 378.228854][T16364] fuse: Bad value for 'rootmode' [ 378.234816][T16366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 378.234896][T16366] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 378.241992][T16364] veth0_to_team: entered promiscuous mode [ 378.256824][T16364] veth0_to_team: entered allmulticast mode [ 378.504193][ T65] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 378.654226][ T65] usb 5-1: Using ep0 maxpacket: 16 [ 378.660518][ T65] usb 5-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config [ 378.671161][ T65] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 3 [ 378.684630][ T65] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 378.693813][ T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.703900][ T65] usb 5-1: Product: syz [ 378.708153][ T65] usb 5-1: Manufacturer: syz [ 378.712764][ T65] usb 5-1: SerialNumber: syz [ 378.718197][ T65] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 378.727119][ T65] usb 5-1: no configuration chosen from 1 choice [ 378.748706][T16403] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 378.748737][T16403] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:47 [ 378.932961][T16435] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4971'. [ 378.951225][T16435] erspan0: default FDB implementation only supports local addresses [ 379.090931][T16453] bridge0: port 3(macsec0) entered blocking state [ 379.097532][T16453] bridge0: port 3(macsec0) entered disabled state [ 379.104068][T16453] macsec0: entered allmulticast mode [ 379.109442][T16453] veth1_macvtap: entered allmulticast mode [ 379.115910][T16453] macsec0: entered promiscuous mode [ 379.121310][T16453] bridge0: port 3(macsec0) entered blocking state [ 379.127763][T16453] bridge0: port 3(macsec0) entered forwarding state [ 379.166231][T16460] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4980'. [ 379.318254][T16464] rust_binder: Write failure EINVAL in pid:29 [ 379.318530][T16464] rust_binder: Read failure Err(EAGAIN) in pid:29 [ 379.501900][T16467] fuse: Bad value for 'user_id' [ 379.513318][T16467] fuse: Bad value for 'user_id' [ 379.587432][T16471] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:35 [ 379.587495][T16471] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:35 [ 379.608238][T16476] input input24: cannot allocate more than FF_MAX_EFFECTS effects [ 379.626380][T16476] exFAT-fs (rnullb0): invalid boot record signature [ 379.633114][T16476] exFAT-fs (rnullb0): failed to read boot sector [ 379.639532][T16476] exFAT-fs (rnullb0): failed to recognize exfat type [ 379.934215][ T65] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 380.095350][ T65] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.106318][ T65] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.116126][ T65] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 380.125241][ T65] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.133799][ T65] usb 9-1: config 0 descriptor?? [ 380.369711][T16522] 9pnet_fd: Insufficient options for proto=fd [ 380.422791][T16534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5005'. [ 380.941528][ T65] hid-led 0003:27B8:01ED.0015: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.8-1/input0 [ 380.970661][ T65] hid-led 0003:27B8:01ED.0015: ThingM blink(1) initialized [ 381.142437][ T332] usb 9-1: USB disconnect, device number 2 [ 381.268338][ T9] usb 5-1: USB disconnect, device number 112 [ 381.403064][T16551] can0: slcan on ttyS3. [ 381.408935][T16551] fuse: Unknown parameter 'group_d' [ 381.435733][T16551] can0 (unregistered): slcan off ttyS3. [ 381.461797][ T36] audit: type=1400 audit(2000000354.937:35644): avc: denied { mounton } for pid=16557 comm="syz.4.5013" path="/368/file0" dev="tmpfs" ino=2039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 381.513253][ T36] audit: type=1400 audit(2000000354.987:35645): avc: denied { map } for pid=16566 comm="syz.1.5015" path="socket:[83537]" dev="sockfs" ino=83537 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 381.548239][ T36] audit: type=1400 audit(2000000355.017:35646): avc: denied { read } for pid=16566 comm="syz.1.5015" path="socket:[83537]" dev="sockfs" ino=83537 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 381.554689][T16573] veth1: entered allmulticast mode [ 381.586487][T16573] veth1: left allmulticast mode [ 381.600789][T16578] netlink: 'syz.1.5017': attribute type 4 has an invalid length. [ 381.608732][T16578] netlink: 'syz.1.5017': attribute type 2 has an invalid length. [ 381.742880][T16601] rust_binder: pid 16601 performed invalid decrement on ref [ 381.750978][T16601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 381.763473][T16606] rust_binder: 57: no such ref 5 [ 381.775033][T16606] rust_binder: Write failure EINVAL in pid:57 [ 381.786828][T16608] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 381.800872][T16608] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 381.809280][T16608] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 381.817218][T16608] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 381.826347][T16608] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 381.834444][T16608] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 381.842826][T16608] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 381.850977][T16608] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 381.851252][T16588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=16588 comm=syz.4.5013 [ 381.882286][T16611] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 238) [ 381.882309][T16611] rust_binder: Error while translating object. [ 381.892883][T16611] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 381.899178][T16611] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62 [ 382.134808][ T36] audit: type=1400 audit(2000000355.617:35647): avc: granted { setsecparam } for pid=16618 comm="syz.8.5026" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 382.295681][T16651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=16651 comm=syz.8.5037 [ 382.317249][T16651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=16651 comm=syz.8.5037 [ 382.334249][T16651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=16651 comm=syz.8.5037 [ 382.345622][T16650] binder: Unknown parameter '00000000000000000000003' [ 382.379560][T16655] netlink: 'syz.1.5039': attribute type 3 has an invalid length. [ 382.481631][T16679] rust_binder: Write failure EFAULT in pid:82 [ 382.606232][T16691] support for cryptoloop has been removed. Use dm-crypt instead. [ 382.608811][T16693] fuse: Bad value for 'fd' [ 383.098909][ T36] audit: type=1400 audit(2000000356.577:35648): avc: denied { accept } for pid=16719 comm="syz.1.5059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 383.119768][ T36] audit: type=1400 audit(2000000356.577:35649): avc: denied { create } for pid=16719 comm="syz.1.5059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 383.336678][T16740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5066'. [ 383.345667][T16740] macsec0: left allmulticast mode [ 383.350727][T16740] veth1_macvtap: left allmulticast mode [ 383.356591][T16740] macsec0: left promiscuous mode [ 383.361787][T16740] bridge0: port 3(macsec0) entered disabled state [ 383.368723][T16740] bridge_slave_1: left allmulticast mode [ 383.374405][T16740] bridge_slave_1: left promiscuous mode [ 383.380057][T16740] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.387849][T16740] bridge_slave_0: left allmulticast mode [ 383.393514][T16740] bridge_slave_0: left promiscuous mode [ 383.399272][T16740] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.728673][T16749] netlink: 'syz.7.5069': attribute type 4 has an invalid length. [ 383.736501][T16749] netlink: 17 bytes leftover after parsing attributes in process `syz.7.5069'. [ 383.750862][ T36] audit: type=1400 audit(2000000357.227:35650): avc: denied { execstack } for pid=16748 comm="syz.7.5069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 383.861282][ T36] audit: type=1400 audit(2000000357.337:35651): avc: denied { ioctl } for pid=16753 comm="syz.7.5071" path="socket:[83787]" dev="sockfs" ino=83787 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 384.412117][ T36] audit: type=1326 audit(2000000357.887:35652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16753 comm="syz.7.5071" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fc9dc185b67 code=0x0 [ 384.443092][T16766] overlayfs: failed to clone upperpath [ 384.594195][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 384.600430][ T2119] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 385.023023][ T36] audit: type=1400 audit(2000000358.497:35653): avc: denied { relabelfrom } for pid=16802 comm="syz.7.5086" name="TCP" dev="sockfs" ino=84511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 385.046128][T16803] SELinux: Context system_u:object_r:auditd_unit_file_t:s0 is not valid (left unmapped). [ 385.183223][T16812] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5089'. [ 385.474216][ T10] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 385.624190][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 385.646501][ T10] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 385.655623][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.663725][ T10] usb 5-1: Product: syz [ 385.679070][ T10] usb 5-1: Manufacturer: syz [ 385.683731][ T10] usb 5-1: SerialNumber: syz [ 385.689070][ T10] usb 5-1: config 0 descriptor?? [ 385.695118][ T10] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 385.702864][ T10] usb 5-1: Detected FT4233HP [ 386.166071][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 386.173983][ T10] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 386.184231][ T10] usb 5-1: USB disconnect, device number 113 [ 386.202523][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 386.220168][ T10] ftdi_sio 5-1:0.0: device disconnected [ 386.274267][ T65] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 386.362457][T16863] loop4: detected capacity change from 0 to 8388608 [ 386.445547][ T65] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.456091][ T65] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 386.466047][ T65] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 386.475424][ T65] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 386.483529][ T65] usb 9-1: SerialNumber: syz [ 386.565973][T16876] binder: Unknown parameter 'smackfsfloor' [ 386.586264][T16878] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5113'. [ 386.595348][T16878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5113'. [ 386.604383][T16878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5113'. [ 386.630170][T16880] 9pnet_fd: Insufficient options for proto=fd [ 386.693427][ T65] usb 9-1: 0:2 : does not exist [ 386.700285][ T65] usb 9-1: USB disconnect, device number 3 [ 386.708803][T15136] udevd[15136]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 386.913421][T16911] netlink: 'syz.7.5127': attribute type 4 has an invalid length. [ 386.924131][T16911] netlink: 'syz.7.5127': attribute type 4 has an invalid length. [ 386.928516][T16910] KVM: debugfs: duplicate directory 16910-8 [ 387.130303][T16943] fuse: Bad value for 'fd' [ 387.185561][T16955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5144'. [ 387.211528][T16957] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 387.221207][T16957] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 387.230788][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 387.230805][ T36] audit: type=1400 audit(2000000360.707:35656): avc: denied { read } for pid=16956 comm="syz.8.5145" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 387.261253][ T65] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 387.272507][ T36] audit: type=1400 audit(2000000360.707:35657): avc: denied { open } for pid=16956 comm="syz.8.5145" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 387.297760][ T36] audit: type=1400 audit(2000000360.707:35658): avc: denied { ioctl } for pid=16956 comm="syz.8.5145" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 387.357140][T16965] 9pnet_fd: Insufficient options for proto=fd [ 387.386976][T16967] overlayfs: failed to clone upperpath [ 387.414183][ T65] usb 5-1: Using ep0 maxpacket: 32 [ 387.420823][ T65] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.431121][ T65] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.442434][ T65] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.452479][ T65] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 387.465727][ T65] usb 5-1: config 0 interface 0 has no altsetting 0 [ 387.472616][ T65] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 387.483588][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.502186][ T65] usb 5-1: config 0 descriptor?? [ 387.757018][T16986] netlink: 108 bytes leftover after parsing attributes in process `syz.7.5156'. [ 387.766867][T16986] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5156'. [ 387.913582][ T65] hid-thrustmaster 0003:044F:B65D.0016: unknown main item tag 0xd [ 387.928929][ T65] hid-thrustmaster 0003:044F:B65D.0016: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 387.941848][ T65] hid-thrustmaster 0003:044F:B65D.0016: Wrong number of endpoints? [ 388.125973][ C0] hid-thrustmaster 0003:044F:B65D.0016: URB to get model id failed with error -71 [ 388.135450][ T65] usb 5-1: USB disconnect, device number 114 [ 388.304242][ T208] veth1_macvtap: left promiscuous mode [ 388.313207][ T208] veth0_vlan: left promiscuous mode [ 388.433374][T17004] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.440590][T17004] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.447752][T17004] bridge_slave_0: entered allmulticast mode [ 388.454772][T17004] bridge_slave_0: entered promiscuous mode [ 388.461688][T17004] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.468835][T17004] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.475971][T17004] bridge_slave_1: entered allmulticast mode [ 388.482244][T17004] bridge_slave_1: entered promiscuous mode [ 388.531675][T17004] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.538761][T17004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.546096][T17004] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.553140][T17004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.574226][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.581546][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.591143][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.598249][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.608635][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.615708][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.643022][T17004] veth0_vlan: entered promiscuous mode [ 388.656551][T17004] veth1_macvtap: entered promiscuous mode [ 388.709437][T17024] __vm_enough_memory: pid: 17024, comm: syz.4.5169, bytes: 18014402804453376 not enough memory for the allocation [ 388.773754][ T36] audit: type=1400 audit(2000000362.247:35659): avc: denied { mounton } for pid=17027 comm="syz.4.5170" path="/386/file0/file0" dev="ramfs" ino=85555 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 388.774322][T17028] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 388.804264][T17028] overlayfs: failed to set xattr on upper [ 388.810022][T17028] overlayfs: ...falling back to redirect_dir=nofollow. [ 388.836169][ T36] audit: type=1400 audit(2000000362.317:35660): avc: denied { unmount } for pid=8914 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 388.890941][T17034] rust_binder: Error while translating object. [ 388.890987][T17034] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 388.897299][T17034] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 388.959836][T17038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5174'. [ 389.034182][T17051] netlink: 'syz.9.5178': attribute type 4 has an invalid length. [ 389.114576][ T9] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 389.275245][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.286266][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.296368][ T9] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 389.305496][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.314375][ T9] usb 5-1: config 0 descriptor?? [ 389.781487][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 389.789342][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 389.798136][ T9] usb 5-1: USB disconnect, device number 115 [ 390.299177][T17095] netlink: 'syz.4.5195': attribute type 15 has an invalid length. [ 390.316416][T17095] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5195'. [ 390.327069][T17095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5195'. [ 390.574295][ T9] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 390.724215][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 390.730502][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8224, setting to 64 [ 390.741451][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 390.754461][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 390.763524][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.772394][ T9] usb 5-1: config 0 descriptor?? [ 390.778292][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 390.975311][T17120] netlink: 'syz.7.5203': attribute type 4 has an invalid length. [ 390.984634][T17120] netlink: 'syz.7.5203': attribute type 4 has an invalid length. [ 391.194281][T17124] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:28 [ 391.209245][T17126] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5206'. [ 391.227566][T17126] netlink: 'syz.9.5206': attribute type 6 has an invalid length. [ 391.235355][T17126] netlink: 'syz.9.5206': attribute type 5 has an invalid length. [ 391.243806][T17126] random: crng reseeded on system resumption [ 391.824194][ T65] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 391.975321][ T65] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.986383][ T65] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.996345][ T65] usb 10-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 392.005561][ T65] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.014345][ T65] usb 10-1: config 0 descriptor?? [ 392.192595][T17155] __nla_validate_parse: 6 callbacks suppressed [ 392.192616][T17155] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5217'. [ 392.219840][T17159] veth0_virt_wifi: entered allmulticast mode [ 392.226511][T17158] veth0_virt_wifi: left allmulticast mode [ 392.431443][ T65] hid-led 0003:27B8:01ED.0017: ignoring exceeding usage max [ 392.703189][ T65] hid-led 0003:27B8:01ED.0017: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.9-1/input0 [ 392.746898][ T65] hid-led 0003:27B8:01ED.0017: ThingM blink(1) initialized [ 392.768388][ T65] usb 10-1: USB disconnect, device number 3 [ 393.269647][T17211] rust_binder: 44: no such ref 3 [ 393.275127][T17211] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 393.284037][T17211] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 393.291789][T17211] rust_binder: Write failure EFAULT in pid:44 [ 393.328298][ T9] usb 5-1: USB disconnect, device number 116 [ 393.594175][ T65] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 393.644209][ T9] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 393.755363][ T65] usb 10-1: config 0 has an invalid interface number: 199 but max is 1 [ 393.763775][ T65] usb 10-1: config 0 has no interface number 1 [ 393.770146][ T65] usb 10-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 393.780399][ T65] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 393.792231][ T65] usb 10-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 393.801756][ T65] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 393.810281][ T65] usb 10-1: SerialNumber: syz [ 393.815212][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 393.827781][ T65] usb 10-1: config 0 descriptor?? [ 393.835203][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 24929, setting to 64 [ 393.847046][ T65] usb 10-1: Found UVC 0.00 device (0002:0000) [ 393.854024][ T65] usb 10-1: No valid video chain found. [ 393.860763][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 393.870137][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 393.882376][ T9] usb 5-1: SerialNumber: syz [ 393.894764][T17223] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 394.060941][T17218] netlink: 'syz.9.5236': attribute type 1 has an invalid length. [ 394.102786][T17223] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 394.154964][T15979] usb 10-1: USB disconnect, device number 4 [ 394.366774][T17223] usb usb7: usbfs: process 17223 (syz.4.5237) did not claim interface 0 before use [ 394.377969][T17223] can0: slcan on ttyS3. [ 394.418303][T17223] can0 (unregistered): slcan off ttyS3. [ 394.445253][ T9] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 394.474342][ T9] usb-storage 5-1:1.0: USB Mass Storage device detected [ 394.494656][ T9] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 394.523168][ T9] scsi host1: usb-storage 5-1:1.0 [ 394.539132][ T9] usb 5-1: USB disconnect, device number 117 [ 394.685342][T17259] binder: Bad value for 'stats' [ 395.082154][T17296] veth0_virt_wifi: entered allmulticast mode [ 395.100604][T17297] veth0_virt_wifi: left allmulticast mode [ 395.114948][T17299] overlayfs: failed to resolve './file1': -2 [ 395.156664][T17305] netlink: 328 bytes leftover after parsing attributes in process `syz.9.5253'. [ 395.227192][T17311] fuse: Bad value for 'group_id' [ 395.232194][T17311] fuse: Bad value for 'group_id' [ 395.384209][ T9] usb 5-1: new low-speed USB device number 118 using dummy_hcd [ 395.422519][T17321] can0: slcan on ttyS3. [ 395.488791][T17321] can0 (unregistered): slcan off ttyS3. [ 395.524378][T17330] rust_binder: Write failure EFAULT in pid:68 [ 395.550797][ T9] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x82 is Bulk; changing to Interrupt [ 395.582155][ T9] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x3 is Bulk; changing to Interrupt [ 395.614953][ T9] usb 5-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 395.662093][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 395.687727][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 395.697180][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.713630][ T9] usb 5-1: Product: 虊晕⧈嵵ꖲ┅㈸Ѷ줥鲎▭薜㙘ꂑ衟쥚莡걛찾థ䀁ꢮ퍍꟯ [ 395.730585][ T9] usb 5-1: Manufacturer: 籀虎冕㬂᲎⧅첧T෩扠場徯쌳䣨墯镭䅆粽싶뎡⁍ᰮ榀ᕛ엔添뿤鲒⿠拴넏ᙛ팗侗ᵉꚲ蘜育墟뒽抡퉕蚵뤣♑ᇆ恋巣⨠谹쓹ꅏ뙺垤黺訍詴楑甕㝳脶熀䪯滶薦崇硬⠂༏槓뮌ⲿ䯭篂 [ 395.755754][ T9] usb 5-1: SerialNumber: 埓↻笟鵆㾱҃燤ỿꑣ뗑剃Ꭻ䆗ヹ䘤ំ㔠᪉┿ᐵኙ뺦ꓖꯞ윷㤰꾊࠳ᙪʰ离ﾩ⓻㳫姫쐕瞨쨒㽓峖ୱꐑ뎈 [ 395.776565][ T36] audit: type=1326 audit(2000000369.257:35661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17347 comm="syz.1.5264" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba7b58eba9 code=0x0 [ 395.816038][T17303] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 395.823343][T17303] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 395.954792][T17372] binder: Bad value for 'max' [ 396.036159][ T9] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 396.052652][ T9] usb 5-1: USB disconnect, device number 118 [ 396.162014][T17382] rust_binder: Failed to allocate buffer. len:1120, is_oneway:true [ 396.612976][T17394] overlayfs: failed to clone upperpath [ 396.652114][T17398] netlink: 'syz.1.5278': attribute type 32 has an invalid length. [ 396.670252][T17400] tmpfs: Unknown parameter '' [ 396.800958][T17422] veth0: entered promiscuous mode [ 396.806584][T17421] veth0: left promiscuous mode [ 396.823471][T17424] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5290'. [ 396.971492][T17430] rust_binder: 17430 RLIMIT_NICE not set [ 396.976668][ T332] rust_binder: 17429: removing orphan mapping 0:1024 [ 396.989525][T17432] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 397.081972][T17444] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 397.082492][T17444] rust_binder: Read failure Err(EAGAIN) in pid:110 [ 397.349017][T17457] fuse: Bad value for 'group_id' [ 397.360716][T17457] fuse: Bad value for 'group_id' [ 397.508974][T17473] netlink: 'syz.4.5306': attribute type 4 has an invalid length. [ 397.509574][T17476] 9pnet_fd: Insufficient options for proto=fd [ 397.516984][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 397.524536][T17476] 9pnet_fd: Insufficient options for proto=fd [ 397.553510][ T36] audit: type=1400 audit(2000000371.027:35662): avc: denied { ioctl } for pid=17480 comm="syz.4.5308" path="socket:[87623]" dev="sockfs" ino=87623 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 397.694178][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 397.700930][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 397.708734][ T9] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 397.718115][ T9] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 397.726231][ T9] usb 10-1: can't read configurations, error -61 [ 397.732947][T17488] rust_binder: Write failure EINVAL in pid:1208 [ 397.733087][T17488] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1208 [ 397.864187][ T9] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 398.024185][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 398.030836][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 398.038973][ T9] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 398.047925][ T9] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 398.055725][ T9] usb 10-1: can't read configurations, error -61 [ 398.062305][ T9] usb usb10-port1: attempt power cycle [ 398.404194][ T9] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 398.425345][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 398.437579][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 398.445519][ T9] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 398.454421][ T9] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 398.462186][ T9] usb 10-1: can't read configurations, error -61 [ 398.479870][T17494] cgroup: none used incorrectly [ 398.518649][ T36] audit: type=1400 audit(2000000371.997:35663): avc: denied { accept } for pid=17496 comm="syz.4.5314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 398.604215][ T9] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 398.624578][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 398.631199][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 398.639093][ T9] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 398.648158][ T9] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 398.664194][ T9] usb 10-1: can't read configurations, error -61 [ 398.678449][ T9] usb usb10-port1: unable to enumerate USB device [ 398.682454][T17508] 9pnet_fd: Insufficient options for proto=fd [ 398.716538][T17512] can: request_module (can-proto-3) failed. [ 398.737887][T17514] netlink: 'syz.1.5321': attribute type 1 has an invalid length. [ 398.760493][T17517] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5322'. [ 399.198778][T17572] No source specified [ 399.309520][ T36] audit: type=1400 audit(2000000000.360:35664): avc: denied { setopt } for pid=17588 comm="syz.7.5348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 399.697740][ T36] audit: type=1326 audit(2000000000.750:35665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17626 comm="syz.1.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7b58eba9 code=0x7ffc0000 [ 399.723623][ T36] audit: type=1326 audit(2000000000.750:35666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17626 comm="syz.1.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7b58eba9 code=0x7ffc0000 [ 399.752466][ T36] audit: type=1326 audit(2000000000.770:35667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17626 comm="syz.1.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fba7b58eba9 code=0x7ffc0000 [ 399.776071][ T36] audit: type=1326 audit(2000000000.770:35668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17626 comm="syz.1.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7b58eba9 code=0x7ffc0000 [ 399.799940][ T36] audit: type=1326 audit(2000000000.770:35669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17626 comm="syz.1.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7b58eba9 code=0x7ffc0000 [ 399.823653][ T36] audit: type=1326 audit(2000000000.770:35670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17626 comm="syz.1.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fba7b58eba9 code=0x7ffc0000 [ 399.834225][ T10] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 400.014208][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 400.020531][ T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 400.029606][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.039971][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 400.050479][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 400.059782][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.068033][ T10] usb 5-1: Product: syz [ 400.072228][ T10] usb 5-1: Manufacturer: syz [ 400.083964][ T10] usb 5-1: SerialNumber: syz [ 400.331091][T17682] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 400.331137][T17682] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:121 [ 400.348742][T17684] netlink: 'syz.7.5383': attribute type 4 has an invalid length. [ 400.378830][T17684] netlink: 'syz.7.5383': attribute type 4 has an invalid length. [ 400.493018][ T10] usb 5-1: 0:2 : does not exist [ 400.502796][ T10] usb 5-1: USB disconnect, device number 119 [ 400.511562][T15136] udevd[15136]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 400.704218][ T45] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 400.834301][ T45] usb 10-1: device descriptor read/64, error -71 [ 401.049634][T17713] sock: sock_set_timeout: `\' (pid 17713) tries to set negative timeout [ 401.084198][ T45] usb 10-1: device descriptor read/64, error -71 [ 401.324185][ T45] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 401.454236][ T45] usb 10-1: device descriptor read/64, error -71 [ 401.520661][T17729] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=17729 comm=syz.7.5400 [ 401.533647][T17729] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5400'. [ 401.589279][T17739] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5403'. [ 401.694196][ T45] usb 10-1: device descriptor read/64, error -71 [ 401.804277][ T45] usb usb10-port1: attempt power cycle [ 402.144228][ T45] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 402.170695][ T45] usb 10-1: device descriptor read/8, error -71 [ 402.214199][ T9] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 402.305218][ T45] usb 10-1: device descriptor read/8, error -71 [ 402.344201][ T9] usb 5-1: device descriptor read/64, error -71 [ 402.362773][T17783] overlayfs: failed to clone upperpath [ 402.383599][T17788] fuse: Unknown parameter 'A' [ 402.544186][ T45] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 402.565184][ T45] usb 10-1: device descriptor read/8, error -71 [ 402.594205][ T9] usb 5-1: device descriptor read/64, error -71 [ 402.695233][ T45] usb 10-1: device descriptor read/8, error -71 [ 402.804299][ T45] usb usb10-port1: unable to enumerate USB device [ 402.834917][ T9] usb 5-1: new full-speed USB device number 121 using dummy_hcd [ 402.906946][T17797] 9pnet: Could not find request transport: fe [ 402.964186][ T9] usb 5-1: device descriptor read/64, error -71 [ 403.183357][T17841] overlayfs: failed to clone upperpath [ 403.204218][ T9] usb 5-1: device descriptor read/64, error -71 [ 403.314376][ T9] usb usb5-port1: attempt power cycle [ 403.654200][ T9] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 403.675347][ T9] usb 5-1: device descriptor read/8, error -71 [ 403.805440][ T9] usb 5-1: device descriptor read/8, error -71 [ 403.970940][T17859] overlayfs: failed to resolve './bus/file0': -2 [ 404.054181][ T9] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 404.075343][ T9] usb 5-1: device descriptor read/8, error -71 [ 404.206616][T17870] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5453'. [ 404.225662][ T9] usb 5-1: device descriptor read/8, error -71 [ 404.246076][ T36] kauditd_printk_skb: 80 callbacks suppressed [ 404.246094][ T36] audit: type=1400 audit(2000000005.300:35751): avc: denied { mounton } for pid=17876 comm="syz.9.5456" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 404.246150][T17878] overlayfs: missing 'lowerdir' [ 404.294352][T17883] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:136 [ 404.308308][T17885] rust_binder: Error while translating object. [ 404.317566][T17885] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 404.323733][T17885] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:138 [ 404.333425][T17885] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 404.342839][T17885] rust_binder: Read failure Err(EFAULT) in pid:138 [ 404.344334][ T9] usb usb5-port1: unable to enumerate USB device [ 404.371558][T17887] netlink: 'syz.9.5459': attribute type 10 has an invalid length. [ 404.715755][T17903] netlink: 'syz.1.5465': attribute type 12 has an invalid length. [ 404.798577][ T36] audit: type=1400 audit(2000000005.850:35752): avc: denied { listen } for pid=17917 comm="syz.1.5470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 405.085833][T17939] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5477'. [ 405.108048][T17941] overlayfs: failed to clone upperpath [ 405.121023][T17941] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5478'. [ 405.130206][T17941] bridge_slave_1: left allmulticast mode [ 405.136048][T17941] bridge_slave_1: left promiscuous mode [ 405.141955][T17941] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.149959][T17941] bridge_slave_0: left allmulticast mode [ 405.155701][T17941] bridge_slave_0: left promiscuous mode [ 405.161322][T17941] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.326832][T17960] SELinux: unknown common  [ 405.331840][T17960] SELinux: failed to load policy [ 405.337686][T17960] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:163 [ 405.359607][T17967] overlayfs: failed to clone upperpath [ 405.399855][T17975] 9pnet_fd: Insufficient options for proto=fd [ 405.837908][T18014] rust_binder: Failed copying into alloc: EFAULT [ 405.837953][T18014] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 405.844391][T18014] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 405.852672][T18014] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1246 [ 405.884793][T18016] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 405.894402][T18016] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 405.915331][T18018] netlink: 57 bytes leftover after parsing attributes in process `syz.4.5502'. [ 405.944190][ T9] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 405.980784][T18022] netlink: 'syz.4.5504': attribute type 12 has an invalid length. [ 406.041676][T18023] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 406.115430][ T9] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.126645][ T9] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.140895][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 406.147912][ T9] usb 10-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 406.160802][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.170761][ T9] usb 10-1: config 0 descriptor?? [ 406.336211][T18040] 9pnet_fd: Insufficient options for proto=fd [ 406.342735][T18039] $: renamed from bridge_slave_0 (while UP) [ 406.364552][ T36] audit: type=1400 audit(2000000007.420:35753): avc: denied { create } for pid=18043 comm="syz.7.5509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 406.586861][T18005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.595430][T18005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.754073][ T36] audit: type=1400 audit(2000000007.800:35754): avc: denied { shutdown } for pid=18046 comm="syz.1.5510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 406.788925][ T9] usbhid 10-1:0.0: can't add hid device: -71 [ 406.795071][ T9] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 406.803809][ T9] usb 10-1: USB disconnect, device number 13 [ 406.843709][T18054] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5512'. [ 406.852834][T18054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5512'. [ 406.862451][T18054] rust_binder: Write failure EFAULT in pid:1263 [ 407.043544][T18064] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 407.058302][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 407.078687][ T12] tipc: Subscription rejected, illegal request [ 407.299576][ T36] audit: type=1400 audit(2000000008.350:35755): avc: denied { map } for pid=18070 comm="syz.9.5518" path="socket:[89989]" dev="sockfs" ino=89989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 407.871475][ T36] audit: type=1400 audit(2000000008.920:35756): avc: denied { getopt } for pid=18093 comm="syz.7.5524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 408.098064][T18105] overlayfs: missing 'lowerdir' [ 408.138961][ T9] rust_binder: 18070: removing orphan mapping 0:1024 [ 408.186223][T18120] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5533'. [ 408.224786][T18123] rust_binder: Write failure EINVAL in pid:199 [ 408.323545][T18133] overlayfs: failed to clone upperpath [ 408.673576][T18157] fuse: Unknown parameter 'rootmo;Bb'de' [ 408.884001][T18167] rust_binder: 18166 RLIMIT_NICE not set [ 408.884445][T18166] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:203 [ 408.912998][T18171] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:208 [ 408.943167][T18178] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551614) [ 408.952385][T18178] rust_binder: Error while translating object. [ 408.964535][T18178] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 408.970718][T18178] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:215 [ 409.007202][ T36] audit: type=1326 audit(2000000010.060:35757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18181 comm="syz.9.5556" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f595238eba9 code=0x0 [ 409.074187][ T2119] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 409.074207][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 409.258893][T18201] __vm_enough_memory: pid: 18201, comm: syz.4.5562, bytes: 18014402804453376 not enough memory for the allocation [ 409.834679][T18235] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5574'. [ 409.875734][T18240] rust_binder: 222: no such ref 3 [ 409.880891][T18240] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:222 [ 409.882724][ T36] audit: type=1400 audit(2000000010.930:35758): avc: denied { setattr } for pid=18238 comm="syz.9.5576" name="IEEE-802.15.4-MAC" dev="sockfs" ino=90424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 410.121677][T18250] rust_binder: 231: no such ref 3 [ 410.126916][T18250] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:231 [ 410.127361][T18250] rust_binder: Error while translating object. [ 410.136659][T18250] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 410.142980][T18250] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:231 [ 410.285304][T18263] can0: slcan on ttyS3. [ 410.544174][ T45] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 410.694043][ T36] audit: type=1326 audit(2000000011.740:35759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18236 comm="syz.7.5575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9dc18eba9 code=0x7fc00000 [ 410.727018][ T45] usb 10-1: Using ep0 maxpacket: 16 [ 410.737918][ T45] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.749405][ T45] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 410.760853][ T45] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 410.770454][ T45] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.783842][ T45] usb 10-1: Product: syz [ 410.791481][ T45] usb 10-1: Manufacturer: syz [ 410.796572][ T45] usb 10-1: SerialNumber: syz [ 410.803686][ T45] usb 10-1: config 0 descriptor?? [ 411.016731][ T45] usb 10-1: USB disconnect, device number 14 [ 411.052186][T18263] can0 (unregistered): slcan off ttyS3. [ 411.094573][T18298] 8021q: VLANs not supported on lo [ 411.582699][T18329] SELinux: security_context_str_to_sid () failed with errno=-22 [ 411.608085][T18334] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:249 [ 411.742128][T18339] netlink: 'syz.7.5596': attribute type 4 has an invalid length. [ 411.761613][T18339] netlink: 'syz.7.5596': attribute type 4 has an invalid length. [ 412.457990][T18341] binder: Bad value for 'stats' [ 413.200871][T18358] rust_binder: 1282: no such ref 0 [ 413.263701][T18362] 9pnet_fd: Insufficient options for proto=fd [ 413.271663][T18363] rust_binder: Error while translating object. [ 413.271698][T18363] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 413.277949][T18363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1284 [ 413.346578][ T36] audit: type=1326 audit(2000000014.400:35760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18375 comm="syz.9.5610" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f595238eba9 code=0x0 [ 413.435381][T18380] overlayfs: failed to clone upperpath [ 413.604925][ T36] audit: type=1400 audit(2000000014.660:35761): avc: denied { listen } for pid=18384 comm="syz.7.5613" path=2F3237312FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 414.080553][T18396] /dev/rnullb0: Can't open blockdev [ 414.451747][T18431] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5630'. [ 414.517897][T18439] fuse: Bad value for 'rootmode' [ 414.523511][T18439] overlay: Unknown parameter 'fowner' [ 414.665121][T18450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=18450 comm=syz.4.5637 [ 414.702635][T18454] rust_binder: inc_ref_done called when no active inc_refs [ 414.739606][T18463] netlink: 'syz.7.5642': attribute type 4 has an invalid length. [ 414.754798][T18463] netlink: 'syz.7.5642': attribute type 6 has an invalid length. [ 414.762633][T18463] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.5642'. [ 414.957498][ T36] audit: type=1400 audit(2000000016.010:35762): avc: denied { create } for pid=18483 comm="syz.7.5647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 414.977716][ T10] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 415.136488][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 415.145645][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.153660][ T10] usb 5-1: Product: syz [ 415.157938][ T10] usb 5-1: Manufacturer: syz [ 415.162549][ T10] usb 5-1: SerialNumber: syz [ 415.301218][T18488] overlayfs: failed to clone upperpath [ 415.346560][T18493] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5650'. [ 415.355670][T18493] bridge_slave_1: left allmulticast mode [ 415.361334][T18493] bridge_slave_1: left promiscuous mode [ 415.367066][T18493] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.370845][ T10] usb 5-1: USB disconnect, device number 124 [ 415.380447][T18493] bridge_slave_0: left allmulticast mode [ 415.386346][T18493] bridge_slave_0: left promiscuous mode [ 415.392290][T18493] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.405398][T18496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=18496 comm=syz.1.5651 [ 415.553835][T18504] /dev/loop0: Can't lookup blockdev [ 415.594534][T18511] syz.1.5657(18511): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 415.970465][T18544] overlayfs: failed to clone upperpath [ 416.122489][T18554] overlayfs: failed to clone upperpath [ 416.178656][T18561] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5675'. [ 416.188044][T18561] netlink: 'syz.7.5675': attribute type 16 has an invalid length. [ 416.196213][T18561] netlink: 'syz.7.5675': attribute type 25 has an invalid length. [ 416.204277][T18561] netlink: 19630 bytes leftover after parsing attributes in process `syz.7.5675'. [ 416.214938][T18561] tipc: Enabling of bearer rejected, failed to enable media [ 416.314777][T18572] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5680'. [ 416.512509][T18578] fuse: Bad value for 'fd' [ 416.551758][T18583] overlay: Unknown parameter 'uid' [ 416.557119][T18582] overlay: Unknown parameter 'uid' [ 416.856798][T18585] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5686'. [ 417.287382][T18625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=18625 comm=syz.7.5701 [ 418.574255][T18642] netlink: 92 bytes leftover after parsing attributes in process `syz.7.5707'. [ 419.159649][T18649] 9pnet_fd: Insufficient options for proto=fd [ 419.176020][T18649] overlay: ./file0 is not a directory [ 419.322959][T18665] overlayfs: failed to clone upperpath [ 419.330857][T18665] overlayfs: missing 'workdir' [ 419.337078][T18665] erofs: dax options not supported [ 419.365632][T18667] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5717'. [ 420.328296][T18705] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5731'. [ 420.541719][T18730] overlay: Unknown parameter 'fsname' [ 420.656027][T18749] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5745'. [ 420.711052][T18761] fuse: Bad value for 'fd' [ 420.808368][T18773] overlayfs: failed to clone upperpath [ 420.877788][T18781] netlink: 'syz.9.5755': attribute type 4 has an invalid length. [ 420.896533][T18781] netlink: 'syz.9.5755': attribute type 4 has an invalid length. [ 421.346682][T18813] tipc: Enabling of bearer rejected, failed to enable media [ 421.354198][ T10] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 421.484202][ T10] usb 5-1: device descriptor read/64, error -71 [ 421.666487][T18822] overlayfs: failed to clone upperpath [ 421.673403][T18822] overlayfs: failed to resolve './bus': -2 [ 421.724200][ T10] usb 5-1: device descriptor read/64, error -71 [ 421.964174][ T10] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 422.094198][ T10] usb 5-1: device descriptor read/64, error -71 [ 422.334198][ T10] usb 5-1: device descriptor read/64, error -71 [ 422.445535][ T10] usb usb5-port1: attempt power cycle [ 422.784197][ T10] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 422.805227][ T10] usb 5-1: device descriptor read/8, error -71 [ 422.935251][ T10] usb 5-1: device descriptor read/8, error -71 [ 423.174177][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 423.205372][ T10] usb 5-1: device descriptor read/8, error -71 [ 423.302650][T18904] overlayfs: failed to clone upperpath [ 423.335375][ T10] usb 5-1: device descriptor read/8, error -71 [ 423.454476][ T10] usb usb5-port1: unable to enumerate USB device [ 424.059992][T18968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5819'. [ 424.069236][T18968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18968 comm=syz.1.5819 [ 424.140765][T18986] /dev/rnullb0: Can't open blockdev [ 424.871408][ T36] audit: type=1326 audit(2000000025.920:35763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18963 comm="syz.9.5817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595238eba9 code=0x7fc00000 [ 425.224787][T19025] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5839'. [ 425.299527][T19032] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5841'. [ 425.624876][T19047] /dev/rnullb0: Can't open blockdev [ 425.806067][T19069] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1340 [ 426.027024][T19087] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 426.099846][T19089] rust_binder: 1359: no such ref 1 [ 426.124160][T19089] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1359 [ 426.318342][T19113] netlink: 324 bytes leftover after parsing attributes in process `syz.9.5870'. [ 426.338546][T19113] overlayfs: failed to clone upperpath [ 426.602383][ T36] audit: type=1400 audit(2000004379.648:35764): avc: denied { lock } for pid=19121 comm="syz.7.5872" path="socket:[94232]" dev="sockfs" ino=94232 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 426.968331][T19149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5881'. [ 426.982762][T19150] overlayfs: failed to clone upperpath [ 426.992891][ T36] audit: type=1400 audit(2000004380.038:35765): avc: denied { append } for pid=19148 comm="syz.4.5881" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 427.108475][T19157] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5884'. [ 427.201476][T19171] netlink: 'syz.9.5888': attribute type 1 has an invalid length. [ 427.209331][T19171] netlink: 164 bytes leftover after parsing attributes in process `syz.9.5888'. [ 427.233350][T19173] overlayfs: missing 'lowerdir' [ 427.716979][T19202] fuse: Bad value for 'user_id' [ 427.722010][T19202] fuse: Bad value for 'user_id' [ 427.838059][T19219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 427.896134][T19226] rust_binder: Write failure EINVAL in pid:1374 [ 427.931051][ T36] audit: type=1400 audit(2000004380.978:35766): avc: denied { write } for pid=19228 comm="syz.4.5910" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 428.805717][T19266] netlink: 'syz.4.5923': attribute type 29 has an invalid length. [ 428.856543][T19271] 9pnet_fd: Insufficient options for proto=fd [ 429.164191][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 429.294178][ T9] usb 5-1: device descriptor read/64, error -71 [ 429.524185][T19303] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5937'. [ 429.534990][ T9] usb 5-1: device descriptor read/64, error -71 [ 429.688473][T19324] overlayfs: failed to clone upperpath [ 429.688473][T19325] overlayfs: failed to clone upperpath [ 429.784191][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 429.914198][ T9] usb 5-1: device descriptor read/64, error -71 [ 430.154165][ T9] usb 5-1: device descriptor read/64, error -71 [ 430.233497][ T36] audit: type=1400 audit(2000004383.278:35767): avc: denied { watch watch_reads } for pid=19338 comm="syz.7.5950" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 430.264362][ T9] usb usb5-port1: attempt power cycle [ 430.426773][T19362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5956'. [ 430.604190][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 430.655222][ T9] usb 5-1: device descriptor read/8, error -71 [ 430.805344][ T9] usb 5-1: device descriptor read/8, error -71 [ 430.910369][T19410] overlayfs: failed to clone upperpath [ 431.044239][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 431.065249][ T9] usb 5-1: device descriptor read/8, error -71 [ 431.105716][T19421] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5975'. [ 431.140429][ T36] audit: type=1326 audit(2000004384.188:35768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19423 comm="syz.9.5977" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f595238eba9 code=0x0 [ 431.195166][ T9] usb 5-1: device descriptor read/8, error -71 [ 431.304225][ T9] usb usb5-port1: unable to enumerate USB device [ 431.911231][T19441] 9pnet_fd: Insufficient options for proto=fd [ 432.043220][T19463] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 432.043247][T19463] rust_binder: Read failure Err(EFAULT) in pid:1397 [ 432.060357][ T36] audit: type=1400 audit(2000004385.108:35769): avc: denied { read } for pid=19456 comm="syz.9.5990" path="socket:[94659]" dev="sockfs" ino=94659 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 432.113725][T19468] /dev/rnullb0: Can't open blockdev [ 432.153227][ T36] audit: type=1326 audit(2000004385.148:35770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19427 comm="syz.7.5978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9dc18eba9 code=0x7fc00000 [ 432.252477][T19489] sock: sock_set_timeout: `\' (pid 19489) tries to set negative timeout [ 432.280173][T19496] overlayfs: missing 'lowerdir' [ 432.392279][T19499] rust_binder: 19499 RLIMIT_NICE not set [ 432.419895][ T422] rust_binder: 19498: removing orphan mapping 0:1024 [ 432.845490][ T36] audit: type=1400 audit(2000004385.898:35771): avc: denied { accept } for pid=19529 comm="syz.7.6014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 432.982649][T19550] netlink: 'syz.1.6020': attribute type 4 has an invalid length. [ 432.990570][T19550] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6020'. [ 433.017058][ T36] audit: type=1400 audit(2000004386.068:35772): avc: denied { accept } for pid=19551 comm="syz.4.6021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 433.126821][T19554] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 433.209865][T19557] binder: Bad value for 'stats' [ 433.233900][T19559] rust_binder: got new transaction with bad transaction stack [ 433.233926][T19559] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1441 [ 433.294711][T19563] x_tables: duplicate underflow at hook 1 [ 434.156782][ T36] audit: type=1400 audit(2000004387.208:35773): avc: denied { create } for pid=19600 comm="syz.4.6039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 434.196781][T19603] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6040'. [ 434.738547][T19625] overlayfs: failed to clone upperpath [ 434.945928][T19638] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6051'. [ 435.024352][T19653] 9pnet_fd: p9_fd_create_unix (19653): problem connecting socket: ./file0: -111 [ 435.103049][T19666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6060'. [ 435.127485][T19672] veth0_to_team: entered promiscuous mode [ 435.133256][T19672] veth0_to_team: entered allmulticast mode [ 435.151189][T19675] overlayfs: failed to clone upperpath [ 435.158033][T19671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6061'. [ 435.497915][T19698] 9pnet_fd: Insufficient options for proto=fd [ 435.745826][ T36] audit: type=1400 audit(2000004388.798:35774): avc: denied { setattr } for pid=19699 comm="syz.1.6069" name="[io_uring]" dev="anon_inodefs" ino=96502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 435.903176][T19723] netlink: 120 bytes leftover after parsing attributes in process `syz.7.6078'. [ 435.912592][T19723] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6078'. [ 436.037873][T19727] netlink: 80 bytes leftover after parsing attributes in process `syz.7.6078'. [ 436.072382][ T36] audit: type=1326 audit(2000004389.118:35775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19693 comm="syz.9.6068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595238eba9 code=0x7fc00000 [ 436.329767][T19751] overlayfs: failed to resolve './file1': -2 [ 436.790785][T19792] overlayfs: failed to clone upperpath [ 437.449056][ T36] audit: type=1400 audit(2000004390.498:35776): avc: denied { create } for pid=19847 comm="syz.4.6118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 437.554469][T19862] netlink: 8540 bytes leftover after parsing attributes in process `syz.7.6123'. [ 437.563721][T19862] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6123'. [ 437.641467][ T36] audit: type=1400 audit(2000004390.688:35777): avc: denied { read } for pid=19863 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 437.927335][ T36] audit: type=1400 audit(2000004390.978:35778): avc: denied { listen } for pid=19891 comm="syz.4.6135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 438.093450][ T36] audit: type=1400 audit(2000004391.138:35779): avc: denied { getattr } for pid=19905 comm="syz.9.6140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 Stopping sshd: stopped /usr/sbin/sshd (pid 202) [ 438.281854][ T36] audit: type=1326 audit(2000004391.328:35780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19930 comm="syz.4.6149" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faac9d8eba9 code=0x0 OK Stopping crond: stopped /usr/sbin/crond (pid 194) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) Stopping network: [ 438.570987][ T36] audit: type=1400 audit(2000004391.618:35781): avc: denied { read write } for pid=19962 comm="ip" path="/dev/console" dev="rootfs" ino=34 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 438.709704][ T36] audit: type=1400 audit(2000004391.758:35782): avc: denied { unlink } for pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 OK Stopping iptables: [ 438.763619][ T36] audit: type=1400 audit(2000004391.808:35783): avc: denied { read write } for pid=19989 comm="iptables" path="/dev/console" dev="rootfs" ino=34 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 438.799635][T19992] overlayfs: missing 'lowerdir' OK Stopping system message bus: [ 438.831778][T19998] netlink: 'syz.9.6164': attribute type 12 has an invalid length. [ 438.881337][T20002] 9pnet_fd: Insufficient options for proto=fd [ 438.894296][T20002] 9pnet_fd: Insufficient options for proto=fd [ 438.911932][T20002] 9pnet_fd: Insufficient options for proto=fd [ 438.931277][T20002] 9pnet_fd: Insufficient options for proto=fd [ 438.937712][T20002] 9pnet_fd: Insufficient options for proto=fd done [ 438.964183][T20002] 9pnet_fd: Insufficient options for proto=fd [ 438.984337][T20002] 9pnet_fd: Insufficient options for proto=fd [ 438.992014][T20014] overlayfs: failed to clone upperpath [ 438.999514][T20002] 9pnet_fd: Insufficient options for proto=fd [ 439.006513][T20014] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6169'. [ 439.012453][T20002] 9pnet_fd: Insufficient options for proto=fd [ 439.029499][T20002] 9pnet_fd: Insufficient options for proto=fd [ 439.042446][T20002] 9pnet_fd: Insufficient options for proto=fd [ 439.054261][T20002] 9pnet_fd: Insufficient options for proto=fd [ 439.065644][T20002] 9pnet_fd: Insufficient options for proto=fd [ 439.071939][T20002] 9pnet_fd: Insufficient options for proto=fd [ 439.084381][T20002] 9pnet_fd: Insufficient options for proto=fd [ 439.097721][T20002] 9pnet_fd: Insufficient options for proto=fd [ 439.104446][T20002] 9pnet_fd: Insufficient options for proto=fd [ 439.110931][T20002] 9pnet_fd: Insufficient options for proto=fd [ 439.117691][T20002] 9pnet_fd: Insufficient options for proto=fd [ 439.124303][T20002] 9pnet_fd: Insufficient options for proto=fd [ 439.130554][T20002] 9pnet_fd: Insufficient options for proto=fd [ 439.137117][T20002] 9pnet_fd: Insufficient options for proto=fd [ 439.143470][T20002] 9pnet_fd: Insufficient options for proto=fd [ 439.149959][T20002] 9pnet_fd: Insufficient options for proto=fd [ 439.156820][T20002] 9pnet_fd: Insufficient options for proto=fd [ 439.163124][T20002] 9pnet_fd: Insufficient options for proto=fd [ 439.169606][T20002] 9pnet_fd: Insufficient options for proto=fd [ 439.176470][T20002] 9pnet_fd: Insufficient options for proto=fd [ 439.182967][T20002] 9pnet_fd: Insufficient options for proto=fd [ 439.189924][T20002] 9pnet_fd: Insufficient options for proto=fd [ 439.196354][T20002] 9pnet_fd: Insufficient options for proto=fd [ 439.202682][T20002] 9pnet_fd: Insufficient options for proto=fd [ 439.209154][T20002] 9pnet_fd: Insufficient options for proto=fd Stopping klogd: OK Stopping acpid: [ 439.400687][T20032] overlayfs: failed to clone upperpath [ 439.407392][T20032] overlayfs: failed to clone upperpath [ 439.529873][T20073] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 439.559782][T20079] overlayfs: failed to resolve './file0': -2 [ 440.221595][T20113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6197'. OK Stopping syslogd: stopped /sbin/syslogd (pid 92) OK umount: can't remount debugfs read-only Connection to 10.128.1.131 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 440.880871][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 440.880894][ T36] audit: type=1400 audit(2000004393.908:35794): avc: denied { write } for pid=283 comm="syz-executor" path="pipe:[1576]" dev="pipefs" ino=1576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 441.124226][ T9] rust_binder: 0: removing orphan mapping 0:4208 [ 441.265151][ T208] veth1_macvtap: left promiscuous mode [ 441.270720][ T208] veth0_vlan: left promiscuous mode [ 441.627443][ T208] veth1_macvtap: left promiscuous mode [ 441.633001][ T208] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 442.977351][T20144] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 442.984200][T20144] ACPI: PM: Preparing to enter system sleep state S5 [ 442.991171][T20144] kvm: exiting hardware virtualization [ 442.996711][T20144] reboot: Power down serialport: VM disconnected.