last executing test programs: 2m53.461801521s ago: executing program 32 (id=7): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) getpid() setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r0, 0x0) clock_adjtime(0x0, &(0x7f00000000c0)={0x800, 0xffff, 0x4, 0x100000001, 0x9, 0xfffffffffffffffd, 0xf, 0x4, 0x7, 0x1, 0x2, 0x5, 0x1000, 0x8000, 0x4, 0x9, 0x6, 0x5, 0x1000, 0x9, 0x3, 0x6, 0x7, 0x2, 0x10000, 0x4}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x2) read$FUSE(r1, &(0x7f0000002c80)={0x2020}, 0xfffffdb2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x395e000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001000070000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a00"], 0x104}}, 0x0) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r6) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201010200000020"], 0x0) ioctl$EVIOCRMFF(r6, 0x41015500, &(0x7f0000000200)=0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 2m32.530366298s ago: executing program 33 (id=298): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000007a80), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r1, 0x4068aea3, &(0x7f0000000000)) setreuid(0x0, 0xee01) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 1m39.198663265s ago: executing program 0 (id=961): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = accept(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @private=0xa010100}, 0x10) dup(r1) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x6, 0x9, &(0x7f0000000080)={{0x21, @remote, 0x0, 0x3, 'sh\x00'}, {@private=0xa810101, 0x4, 0x0, 0x0, 0x100000, 0xfffffffe}}, 0x44) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) 1m39.198184165s ago: executing program 0 (id=963): openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x24}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000000d80)=""/200, 0xc8}, {&(0x7f0000000000)=""/250, 0xfa}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f0000000300)=""/76, 0x4c}, {&(0x7f0000000e80)=""/241, 0xf1}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000540)=""/85, 0x55}, {&(0x7f0000000780)=""/127, 0x7f}], 0x9}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}], 0x3, 0x2100, 0x0) close(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) lsm_get_self_attr(0x68, 0x0, 0x0, 0x1) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x20) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESHEX=r7, @ANYBLOB=',group_id=', @ANYRESOCT=r9]) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r5, 0x1}], 0x1, 0x6) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002cb44e610dd043190bc5e0102030109021b00010253a0530904910601020a00a30905081072fa4160e7"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r10, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d46549b, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x1000]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCMBIC(r11, 0x5417, &(0x7f0000000000)=0x7) 1m38.670134583s ago: executing program 0 (id=971): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24008844, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0xffff0000) 1m38.662964853s ago: executing program 0 (id=972): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r2 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) fchmodat(r1, &(0x7f0000000000)='./file0\x00', 0xc0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f00000000c0)={0x7fffffffffffffff, 0x9, 0xfffffffe, 0xb}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r3, 0x2000) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f00000001c0)=@filename='./file0\x00', 0x0, 0x0) 1m38.621052754s ago: executing program 0 (id=973): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast1}, 0x2, 0x0, 0x1}}, 0x2e) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b031407e0ff640f020047540f68a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 1m38.555750815s ago: executing program 0 (id=980): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000e80)={0x2, 0x0, @ioapic={0xeeef0000, 0x7886, 0xfffffffc, 0x4, 0x0, [{0x2, 0xff, 0x48, '\x00', 0xfd}, {0x8, 0x0, 0x6, '\x00', 0x2}, {0x6, 0x3, 0x30, '\x00', 0x2}, {0x7, 0x3, 0xaa, '\x00', 0x4}, {0xb7, 0x30, 0xe, '\x00', 0x2}, {0xa, 0x10, 0x5, '\x00', 0x9}, {0x7, 0x8, 0x44}, {0x16, 0xbd, 0xe0, '\x00', 0x2}, {0x5, 0x3, 0x6, '\x00', 0x9}, {0xb, 0x40, 0x80, '\x00', 0x4}, {0x7, 0x71, 0xfc, '\x00', 0x4}, {0x9, 0x3, 0x0, '\x00', 0xd}, {0x2d, 0x0, 0x10, '\x00', 0x4}, {0x5, 0x5, 0x16, '\x00', 0x7}, {0x8, 0x6, 0x0, '\x00', 0x2}, {0x4, 0x5, 0x1, '\x00', 0xff}, {0x3, 0x20, 0x2}, {0x2, 0xa1, 0x7f}, {0x80, 0x2, 0x7, '\x00', 0x4}, {0x8, 0xb, 0x4, '\x00', 0x37}, {0xfe, 0x4, 0x9}, {0x81, 0x36, 0x2}, {0x6, 0x5c, 0x1f, '\x00', 0x4}, {0xac, 0x0, 0x7, '\x00', 0x24}]}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="24000000000000000100000001", @ANYRES32, @ANYRES64, @ANYBLOB="2bd5bb48db59834b9328618036678ec4c6dac89cb841b8b4c8fd04de9f9a66cd495d5a1a543b82ba037c0c6e2fa0b40f4a5b546d90c1166fdd8b667154295b2d4a8097ec97e036e379d59aabd828b8f161c5fa95c5f4965b19d5b1198519c62a8c9a5e881822c07f3fd885ebf2c5f9dbb86654f0ce2bba773c64c3dd907d6f2443419a86b521da094260c5c326d9a0b9394be9c3230a8e7da852a30998bc476ae51f7d3896d507299d2f4ea3110377b9c3fd92ab6ab97f199b667aef67538172c801b0fb99c189c40b54508934a914fc837355d7d86b5c9660c42034c90001180349f0984086644cc9b69b4f10813e01b35346b2f08400416a6167ec3b577ae3fca5fa2e21bdcdd57a56a7f3ec43ecc2d9638bc2913008fd266d3cba6da35dcb5010e352b29ec1b50b41c29b2cbea62d3caee292fb62b267e02922d2412a63c9"], 0xf0, 0x1}}], 0x1, 0x44015) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m38.514226206s ago: executing program 34 (id=980): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000e80)={0x2, 0x0, @ioapic={0xeeef0000, 0x7886, 0xfffffffc, 0x4, 0x0, [{0x2, 0xff, 0x48, '\x00', 0xfd}, {0x8, 0x0, 0x6, '\x00', 0x2}, {0x6, 0x3, 0x30, '\x00', 0x2}, {0x7, 0x3, 0xaa, '\x00', 0x4}, {0xb7, 0x30, 0xe, '\x00', 0x2}, {0xa, 0x10, 0x5, '\x00', 0x9}, {0x7, 0x8, 0x44}, {0x16, 0xbd, 0xe0, '\x00', 0x2}, {0x5, 0x3, 0x6, '\x00', 0x9}, {0xb, 0x40, 0x80, '\x00', 0x4}, {0x7, 0x71, 0xfc, '\x00', 0x4}, {0x9, 0x3, 0x0, '\x00', 0xd}, {0x2d, 0x0, 0x10, '\x00', 0x4}, {0x5, 0x5, 0x16, '\x00', 0x7}, {0x8, 0x6, 0x0, '\x00', 0x2}, {0x4, 0x5, 0x1, '\x00', 0xff}, {0x3, 0x20, 0x2}, {0x2, 0xa1, 0x7f}, {0x80, 0x2, 0x7, '\x00', 0x4}, {0x8, 0xb, 0x4, '\x00', 0x37}, {0xfe, 0x4, 0x9}, {0x81, 0x36, 0x2}, {0x6, 0x5c, 0x1f, '\x00', 0x4}, {0xac, 0x0, 0x7, '\x00', 0x24}]}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="24000000000000000100000001", @ANYRES32, @ANYRES64, @ANYBLOB="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"], 0xf0, 0x1}}], 0x1, 0x44015) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m16.94811856s ago: executing program 2 (id=1216): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1100, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1100, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r4, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x7800, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r5, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r5, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r5, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}}) eventfd2(0x9, 0x80800) (async) r6 = eventfd2(0x9, 0x80800) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x400008001, 0x0, 0x1, r6, 0x1}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000900)={0x0, 0x0, 0x1, r6, 0x1}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x4, r6, 0x5}) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) rt_sigqueueinfo(0x0, 0x40, &(0x7f0000000080)={0x29, 0x1, 0x80}) r7 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) pipe2$9p(&(0x7f0000000200), 0x4080) (async) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RVERSION(r8, &(0x7f00000002c0)={0x13, 0x65, 0xffff, 0x5, 0x6, '9P2000'}, 0x13) (async) write$P9_RVERSION(r8, &(0x7f00000002c0)={0x13, 0x65, 0xffff, 0x5, 0x6, '9P2000'}, 0x13) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}, @free_buffer={0x40086303, r7}, @release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 1m16.916026341s ago: executing program 2 (id=1217): sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x40) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x100000001) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) close_range(r4, 0xffffffffffffffff, 0x0) 1m15.259190058s ago: executing program 6 (id=1234): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 1m15.229695218s ago: executing program 6 (id=1235): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x4000) 1m15.229253268s ago: executing program 6 (id=1236): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x0, 0x0, 0x0}) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) keyctl$chown(0x4, r0, r3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r4], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT]) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000280)={0x2, {{0xa, 0x4e20, 0x80000001, @empty, 0x7}}, 0x0, 0x4, [{{0xa, 0x4e24, 0x40100, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x9}}, {{0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, {{0xa, 0x4e21, 0xf, @loopback, 0x1}}, {{0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}]}, 0x290) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @local}, 0x10) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r8 = socket(0x10, 0x5, 0x0) ioctl$TUNSETNOCSUM(r5, 0x400454c8, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f00000034c0)=""/211, 0xd3}], 0x5}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000000040)={0x50, 0x0, r10, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) getresgid(&(0x7f00000000c0), &(0x7f0000000180)=0x0, &(0x7f0000000200)) getgroups(0x5, &(0x7f0000000540)=[r4, r4, r4, r4, r4]) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000780)={0x478, 0x0, r10, [{{0x1, 0x3, 0x46d, 0x9eae, 0x0, 0x4, {0x4, 0xf, 0xffffffff, 0x2, 0xe000000000, 0x80000001, 0x3, 0x5, 0x401, 0x8000, 0xdb98, r3, r11, 0x4, 0x3}}, {0x4, 0x8}}, {{0x6, 0x3, 0x3, 0x4, 0x5, 0x1ff, {0x2, 0x6, 0x8, 0x8, 0x6b, 0xfffffffffffffff8, 0x1, 0x4, 0x0, 0xa000, 0x8, r3, r4, 0xa4, 0x6}}, {0x1, 0xfffffffffffffa06, 0x5, 0x8, '\xaa\xaa\xaa\xaa\xaa'}}, {{0x2, 0x1, 0x8, 0x5, 0xcec26a94, 0x7fff, {0x3, 0x5a4, 0x401, 0xc15, 0x401, 0x9, 0x1ff, 0xffff, 0x0, 0x4000, 0xfffff001, r3, r12, 0x0, 0x8000}}, {0x1, 0x1, 0xb, 0x6, './binderfs\x00'}}, {{0x5, 0x3, 0x4, 0xc, 0x5, 0x5, {0x4, 0x401, 0x7ff, 0xc3b8, 0x2, 0x1, 0x0, 0x3, 0x2, 0xa000, 0x7, r3, r4, 0x6, 0x2}}, {0x5, 0x6, 0x1, 0x8, '-'}}, {{0x5, 0x1, 0x8, 0x53b5, 0x80000001, 0xfffff36a, {0x2, 0xc945, 0x2, 0x8000, 0x9, 0x7, 0x1, 0x64d1f757, 0x40, 0x0, 0x40, r3, r4, 0x9}}, {0x6, 0x0, 0x2, 0xfffffffe, '!@'}}, {{0x6, 0x0, 0xa, 0xffffffff, 0x5, 0x184, {0x2, 0xd0, 0xf4, 0xe, 0x7, 0x6, 0xe00000, 0x6, 0x3, 0x1000, 0x5c2, r3, r4, 0x0, 0x7}}, {0x5, 0x1, 0x3, 0x9, 'syz'}}, {{0x6, 0x2, 0x7fffffff, 0xfd, 0x4, 0xf, {0x5, 0x40, 0x3, 0x3, 0x0, 0x9, 0x9, 0x6, 0x1, 0x0, 0x9, r3, r4, 0x2, 0x3}}, {0x6, 0x1, 0xc, 0x7, '^&#/@\xa5^&&:\x8f,'}}]}, 0x478) connect$bt_rfcomm(r7, &(0x7f0000000000)={0x1f, @any, 0x7}, 0xa) 1m15.228959388s ago: executing program 6 (id=1237): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x48080, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x8) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000001c0)={0x2000009, 0x2, 0x9, 0x0, 0x2, "972d595029c59b15743b291346db66fb4c8676"}) read(r0, &(0x7f0000000280)=""/4096, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0x1a, r2, 0xba, 0x0) lstat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000013c0)={{{@in=@remote, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f00000014c0)=0xe8) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000001500)) newfstatat(0xffffffffffffff9c, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000001680)={'\x00', 0xb2, 0xfffffffb, 0x5, 0x8, 0x9, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, 0x0, r4) setreuid(r4, r4) read$FUSE(r1, &(0x7f00000069c0)={0x2020}, 0x2020) 1m15.214865398s ago: executing program 6 (id=1238): r0 = syz_io_uring_setup(0x36a2, &(0x7f0000000200)={0x0, 0x1151, 0x200, 0x2, 0x391}, &(0x7f0000000280), &(0x7f00000002c0)) r1 = syz_io_uring_setup(0x12cf, &(0x7f0000000380)={0x0, 0xffbfffff, 0x30c0, 0x2, 0x18f, 0x0, r0}, &(0x7f0000000340), &(0x7f0000000500)) r2 = epoll_create(0xaf2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0xe000200f}) ppoll(&(0x7f0000000040)=[{r2, 0x4200}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) 1m15.158621779s ago: executing program 2 (id=1242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x34, r3, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) setrlimit(0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000540)='net/rt_cache\x00') ftruncate(r5, 0x7fffffffffffffff) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="2d7069647320000000006a200b6e65745f7072696f202b667265657a65762012ad0c80fdc2115afbc9ca579c7a25e5419dd57c564c6d84b4babee169ac4991b372e5744367ef98084043bd7f01f048749b2c4f87508a81b071387d"], 0x1f) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e400f6"], 0x66) 1m15.056275121s ago: executing program 6 (id=1243): r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, 0x0, 0x10) 1m15.028860471s ago: executing program 35 (id=1243): r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, 0x0, 0x10) 1m15.024260521s ago: executing program 2 (id=1246): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x48080, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x8) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000001c0)={0x2000009, 0x2, 0x9, 0x0, 0x2, "972d595029c59b15743b291346db66fb4c8676"}) read(r0, &(0x7f0000000280)=""/4096, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0x1a, r2, 0xba, 0x0) lstat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000013c0)={{{@in=@remote, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f00000014c0)=0xe8) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000001500)) newfstatat(0xffffffffffffff9c, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000001680)={'\x00', 0xb2, 0xfffffffb, 0x5, 0x8, 0x9, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, 0x0, r4) read$FUSE(r1, &(0x7f00000069c0)={0x2020}, 0x2020) 1m14.990084852s ago: executing program 2 (id=1247): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v2={0x2000000, [{0x8, 0x8}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) mkdirat(r0, &(0x7f0000000040)='./file0/file0\x00', 0x80) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x8, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x3a) ioctl$PPPIOCSMRU(r4, 0x40047452, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xaece, 0x2) read(r6, &(0x7f0000000040)=""/8, 0x8) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) 1m14.803896015s ago: executing program 2 (id=1248): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000a40)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000007c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x1008800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x0, 0x2, 0x3, 0xeffffdff, 0x0, [{0x0, 0x90}, {0x19, 0x5, 0x0, '\x00', 0x10}, {0xfc}, {0xfe, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0x7}, {0x77}, {0x0, 0x85, 0xbe}, {0x0, 0xc2}, {0x0, 0x2, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0xfa, '\x00', 0x42}, {0x0, 0x5}, {0x0, 0x50, 0x0, '\x00', 0x1}, {0x4, 0x0, 0x4, '\x00', 0x3}, {0x1, 0x4e, 0x0, '\x00', 0xd}, {0x2, 0x2, 0x4, '\x00', 0x9}, {}, {0x1, 0xfd, 0x4, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x4, 0x7, '\x00', 0x3}, {0x80, 0x0, 0x0, '\x00', 0x40}, {0x0, 0x4}, {0x0, 0x0, 0x0, '\x00', 0x70}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0x10, 0x83, 0xe, '\x00', 0x3}]}}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20d01, 0x0) dup3(r6, r1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x3, 0x6, 0x8}}, 0x30) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) 1m14.803452795s ago: executing program 36 (id=1248): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000a40)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000007c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x1008800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x0, 0x2, 0x3, 0xeffffdff, 0x0, [{0x0, 0x90}, {0x19, 0x5, 0x0, '\x00', 0x10}, {0xfc}, {0xfe, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0x7}, {0x77}, {0x0, 0x85, 0xbe}, {0x0, 0xc2}, {0x0, 0x2, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0xfa, '\x00', 0x42}, {0x0, 0x5}, {0x0, 0x50, 0x0, '\x00', 0x1}, {0x4, 0x0, 0x4, '\x00', 0x3}, {0x1, 0x4e, 0x0, '\x00', 0xd}, {0x2, 0x2, 0x4, '\x00', 0x9}, {}, {0x1, 0xfd, 0x4, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x4, 0x7, '\x00', 0x3}, {0x80, 0x0, 0x0, '\x00', 0x40}, {0x0, 0x4}, {0x0, 0x0, 0x0, '\x00', 0x70}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0x10, 0x83, 0xe, '\x00', 0x3}]}}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20d01, 0x0) dup3(r6, r1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x3, 0x6, 0x8}}, 0x30) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) 55.720436159s ago: executing program 3 (id=1478): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201110100000020d80402f000000000000109022400010000400909040004020300020009210700840122070009058103020000000569423ccf91d0b691aeceae6d8c76ed9ef2836a46d8e7a55816847e74cae1a16072c62f5047cd784f60c379da2e44e8c93291cb4f9eac42390e59337285147a8b00f5be65af8207b4b990ce0245d7ee5277e01711c8ff7e7250"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x3, "dd00"}, @local=@item_012={0x1, 0x2, 0x2, "d9"}]}}, 0x0}, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000600)={0x40, 0xd, 0x8d, {0x8d, 0x23, "ccaf45c9ad6bc23448297c16b7f6cfd23366d3e481a21de0269b5cdba2ab66e1086b5db5334babc257d2cb7e413516b77363c0307a7c6a0d982459aa00bff8682f47a54328ad417d0e8c2f9d9f743da6c7e88876de25e4ac7ee9dc3e6e888bac1f181bd5be36ead21a948933ac2f1e77070b7e12bf7ae67af984e7975240b9cf7e9c8e418bdceedcf7c28f"}}, &(0x7f00000006c0)={0x0, 0x3, 0xaa, @string={0xaa, 0x3, "fbb38c4f8d34a577ab2dcac3e75001bcd9b5ad30a41ac6d980d5ffda6183ac5ce2a623a987ad46299f6388ce87cfd4dbb804e41c0d40432eea2f69cced952fd0ccb36873390d1fe3bb773ba3adaf283be23ac7ee67a5d97a15ad9c8331239013b9609285188e058011195708fcc6983a27e03e7ea26dd8771d660fce41ab764e363f2ec41fc5e499f211632d857d3f34f935a232bce9fd46915d49b94d40a85d1fc50fbd2ad76d27"}}, &(0x7f0000000040)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x8, 0x6}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x79, 0x0, 0x7, 0x0, "3eaac986", "00d6c494"}}, &(0x7f0000000780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x18, 0x0, 0x9, 0x8, 0x8, 0xfc00}}}, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x60, 0xe}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000880)={0x0, 0x8, 0xfffffffffffffdf1, 0xca}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x0, 0x20}}, &(0x7f0000000940)={0x40, 0x7, 0x2}, &(0x7f0000000980)={0x40, 0x9, 0x1, 0x9}, &(0x7f00000009c0)={0x40, 0xb, 0x2}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0x100}, &(0x7f0000000a40)={0x40, 0x13, 0x6}, &(0x7f0000000a80)={0x40, 0x17, 0x6}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "5dd4"}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0xffff}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0x1}}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x50, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x0, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, 0x0}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@flat=@weak_binder={0x77622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r2}, @flat=@binder={0x73622a85, 0x110a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 54.959953402s ago: executing program 3 (id=1487): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [{0x20, 'ethtool\x00'}, {0x20, 'cgroup.controllers\x00'}, {0x20, '#! '}]}, 0x2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 54.888108553s ago: executing program 3 (id=1490): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b819d56f4aa3fe1aaf904aa07b7b748ab54c9b47531624c0ca3cc3e9246587e7cea8af062e15c1c27d8e9d9328114f2bda697decbedc50cc278f543faa13098717d9f379121225b179faeebe79be6a82dea4403a3bc7990b1cfee9e5a1aaf11b32facecc76bc0ad86f4fa184dd6e451992a5", 0xa2}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000480)=""/76, 0x4c}], 0x2) 54.874861853s ago: executing program 3 (id=1491): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) (async) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='ip6_vti0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x0, 0x9, 0x6, 0xe, 0xc, 0x0, 0xc0000000, 0x3, 0x32, 0x5, 0x7, 0x3, 0x6, 0x5f, 0xfffffffc, 0x0, 0x2, 0x80000000, 0x5, 0x1ff, 0xfffffff9, 0xa}}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000023106a053103000000000001090224000100007e1109040002010300010009210000000122f80409058103"], 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in=@rand_addr=0x64010101, @in=@rand_addr=0x64010100, 0x4e22, 0x7, 0x4e22, 0x2, 0xa, 0xa0, 0x180}, {0xfffffffffffffff8, 0xc, 0x0, 0x1, 0x9, 0x4, 0x1, 0xf}, {0x0, 0x400, 0x13, 0x1}, 0x7, 0x6e6bb5, 0x2, 0x1, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x6c}, 0x2, @in6=@empty, 0x3502, 0xeb890936012e1bcb, 0x2, 0x4, 0x9, 0x7, 0xc658}}, 0xe8) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x0) (async) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f00000003c0)={r2, 0xffffffffffffffff, 0x5, 0x1e, &(0x7f0000000180)="17d19a7a01c24a760925d732d29ffe89a607ea08ab14d5d1a1f51c259b97", 0xe, 0x8, 0x5, 0x80, 0x7, 0x1, 0x5, 'syz0\x00'}) sendmsg$inet(r7, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@noop, @rr={0x7, 0xb, 0x5, [@multicast1, @private=0xa010101]}]}}}], 0x20}, 0x800) renameat2(r6, &(0x7f0000000140)='./file0\x00', r6, &(0x7f0000000200)='./bus\x00', 0x0) write$P9_RVERSION(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="130000800030303000"/19], 0x13) (async) write$P9_RVERSION(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="130000800030303000"/19], 0x13) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0}, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0}, 0x0) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0xe000) (async) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0xe000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 54.324062622s ago: executing program 3 (id=1492): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) pread64(r0, &(0x7f0000001200)=""/198, 0xc6, 0xff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="5953fdfffffffddbdf256b"], 0x38}}, 0x0) io_setup(0x1000044, &(0x7f0000000100)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000001180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/194, 0xc2, 0x1, &(0x7f0000000140)=""/4096, 0x1000}, &(0x7f00000011c0)=0x40) io_destroy(r3) 54.161949785s ago: executing program 3 (id=1494): mount$incfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2301480, &(0x7f00000001c0)={[{@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x40e}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x7f}}, {@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x800}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0xff}}], [{@smackfsroot={'smackfsroot', 0x3d, '):/.,&'}}]}) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x841, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 54.111299676s ago: executing program 37 (id=1494): mount$incfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2301480, &(0x7f00000001c0)={[{@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x40e}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x7f}}, {@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x800}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0xff}}], [{@smackfsroot={'smackfsroot', 0x3d, '):/.,&'}}]}) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x841, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 34.791404274s ago: executing program 7 (id=1714): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0xff05, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000100)=0x1, 0x3f) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) recvmmsg(r2, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}, 0xdc2}], 0x1, 0x200, 0x0) 34.791207914s ago: executing program 7 (id=1715): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='N-N:N/8N'], 0x6a) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r3, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '-(+'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40815}, 0x0) connect$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, @any, 0x8}, 0xa) 34.791092884s ago: executing program 7 (id=1716): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x204, 0x2) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x10000, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000c, 0x4010, r1, 0xb) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x2d0880) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0xc, 0x805b, 0x6, 0x4, 0x4, &(0x7f0000000040)="5a699b76"}) timer_settime(0x0, 0x1, &(0x7f0000000140)={{0x77359400}}, &(0x7f0000000180)) 34.790807934s ago: executing program 7 (id=1717): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000004c0)="17000000020001000003be8c5ee17688a20032000203000a0292000098fc5ad90a00bb6a880000d6c8db0000dba67e06020000e28900000200df018002000000fc0607bdff59100ac45761547a681f009cee4a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000000000800b59bd2b8e50ce5af649a702202ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5a1b47b6806323deb3", 0xb8) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x102) mount$cgroup2(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x2102400, 0x0) r5 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000100)="240000001a005f0214f9df07000904000a000000fe000058dbef0fee76546bdea5727b99", 0x24) getdents64(r6, &(0x7f00000063c0)=""/1024, 0x18) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x9c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}, @free_buffer={0x40086303, r5}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@flat=@handle={0x73682a85, 0x100, 0x3}, @fda={0x66646185, 0x6, 0x1, 0x9}, @fda={0x66646185, 0x0, 0x2, 0x1e}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x119040, 0x108) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ff5000/0x9000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00001f8000/0x3000)=nil, &(0x7f0000000300)="30cd2fa3cf1c25abfe2941fa9f1ef95a8751516bdfc297e055d23ee1dfa7c0f22f0fe764db464bbf0a48f776d0938581dddfa66bcfc9456bab0b63b30679480d55", 0x41, r8}, 0x68) 33.892233769s ago: executing program 7 (id=1718): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) r1 = socket$inet(0x2, 0x801, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendto$inet(r1, &(0x7f00000001c0), 0xfffffffffffffe58, 0x2000c094, 0x0, 0xffffffe6) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x7ffff000, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x12, r0, 0x4d75c000) 33.84319674s ago: executing program 7 (id=1719): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x7, 0x1}, 0x4a, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0xc50, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x21, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0xffffffff, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) 33.8151523s ago: executing program 38 (id=1719): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x7, 0x1}, 0x4a, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0xc50, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x21, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0xffffffff, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) 26.199892262s ago: executing program 1 (id=1792): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000000e3fef9150001c0"]) write$selinux_attr(r0, 0x0, 0x500) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETAW(r6, 0x5407, &(0x7f00000000c0)={0xfff, 0x0, 0x0, 0x8, 0x13, "eb00"}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc040}, 0x0) sendmmsg$unix(r7, &(0x7f00000000c0), 0x3f, 0x0) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)={0x20, r5, 0x1, 0x80, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xc46}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2805}, 0x800) 26.160757862s ago: executing program 1 (id=1793): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="02030003100000002cbd7000fcdbdf2502000900080000000a0000000000000005000600000000000a00000000000000feff0000000000000000000000000001020000000000000002000100000000000400030c1900000005000500000000000a00000000000000000000000000000000000000000000010700000000000000"], 0x80}, 0x1, 0x7}, 0x14) r1 = socket$inet(0x2, 0x4, 0x5) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0xc028ae92, &(0x7f0000000200)={0xe4, 0x4}) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x1000009}, 0x8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x4e20, 0x0, 0x4e21, 0x5, 0x2, 0x0, 0x0, 0x32, 0x0, r2}, {0xffffffffffffffff, 0x2, 0xe, 0x1, 0x7ff, 0xbe7, 0x0, 0x6}, {0x9, 0x121, 0x2, 0x8dd}, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d5, 0x32}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3506, 0x0, 0x2, 0xb, 0x0, 0x8, 0x3}}, 0xe8) 26.079436244s ago: executing program 1 (id=1794): mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x800, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r1, &(0x7f0000011480)=[{&(0x7f00000000c0)=""/186, 0xba}], 0x1, 0x2, 0x100005) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r4 = syz_usb_connect(0x3, 0x24, &(0x7f0000010440)=ANY=[@ANYRES16=r3, @ANYBLOB="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", @ANYRESDEC=r0, @ANYRESHEX=r2, @ANYRESHEX, @ANYRES32=r3], 0x0) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'lo\x00', 0x1000}) (async, rerun: 32) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f0007"], 0x18) (async, rerun: 32) syz_usb_control_io(r4, 0x0, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x13, 0x5e, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r5) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000ed9b", @ANYRES16=r8, @ANYBLOB="100029bd7000fcdbdf2546000000080001007063690011000200303030303a30303a31302e300000000008008e00010000000c008f0000000000000400000c0090003d07000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x40000c1) syz_usb_control_io(r4, 0x0, &(0x7f00000102c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0400"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r4, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000100)={0x40, 0x18, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000020001c000000000ffff3cffffffffff5b74c5482d02367f064b17fc"]) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r11, 0x4140aecd, &(0x7f0000010380)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r12}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 26.078113954s ago: executing program 1 (id=1795): ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 32) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) (rerun: 32) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) (async) chdir(&(0x7f0000000240)='./file0\x00') r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, 0x0) rename(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)='./file1\x00') (async) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="020000000100000000000000040000000000000030000000000000002000000000000000"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async, rerun: 64) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async, rerun: 64) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) rmdir(&(0x7f0000000380)='./file0/../file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async, rerun: 64) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x9, 0x0, 0xfffffe00}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TCSETSW2(r3, 0x5453, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002a40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file1\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)=ANY=[]) (async, rerun: 32) read$FUSE(r5, &(0x7f000000e440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (rerun: 32) syz_fuse_handle_req(r5, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x78, 0x0, 0xfffffffffffffffc, {0x4000000000005, 0x0, 0x0, {0x1, 0x9, 0x1, 0x800000004, 0x0, 0x0, 0x0, 0xfffffffc, 0x7, 0x0, 0x0, 0x0, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) chown(&(0x7f0000000100)='./file0/../file0\x00', r4, r6) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 26.077878004s ago: executing program 1 (id=1796): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r1, 0x1, 0xfffffd, 0x2000000, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x80) 26.017814714s ago: executing program 1 (id=1797): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="38010000fe0000", @ANYBLOB="18c0ad4bef471426143a0fb4ec08bc6c571e4c886a392f2033"], 0x138) mount$9p_fd(0x0, 0x0, &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 25.977425695s ago: executing program 39 (id=1797): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="38010000fe0000", @ANYBLOB="18c0ad4bef471426143a0fb4ec08bc6c571e4c886a392f2033"], 0x138) mount$9p_fd(0x0, 0x0, &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3.831984929s ago: executing program 5 (id=1951): mount$bpf(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, 0x0) 3.831865559s ago: executing program 5 (id=1952): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000340)=ANY=[], 0x200002e6) fcntl$setpipe(r1, 0x407, 0x7000000) 3.658958332s ago: executing program 5 (id=1959): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x1c, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) 2.485461391s ago: executing program 8 (id=1971): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x8, 0x6, 0x1, 0x7, 0x2, 0xfc, 0x1}, 0xc) 2.485339711s ago: executing program 8 (id=1972): clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5d, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x3, 0x0, 0x0, 0x2}) 2.484668921s ago: executing program 8 (id=1974): sysinfo(&(0x7f0000000680)=""/26) 2.416336582s ago: executing program 8 (id=1976): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x100) bind$inet(r1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x47ec, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'\x00', 0x52d35ce30131f272}) 2.354606252s ago: executing program 8 (id=1978): r0 = syz_open_dev$rtc(&(0x7f0000001540), 0x0, 0x48040) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x1) 2.341955753s ago: executing program 8 (id=1979): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6062, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="082415000000d1c4d0b196f4035c8b966e"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.540461076s ago: executing program 5 (id=1986): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.432155997s ago: executing program 5 (id=1992): stat(0x0, &(0x7f0000000300)) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, &(0x7f0000000000), 0x0, &(0x7f0000000080), 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000040) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1.431870417s ago: executing program 5 (id=1994): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000d00)={0x84, &(0x7f0000000680)={0x40, 0x0, 0xd, "26ff59f2c94071906882b9e3b7"}, 0x0, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "cf30"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x84, 0x3, "078d49"}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000500)={0x40, 0x1, 0x2, "3aec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000002c0)={0x0, 0xf, 0x2, "e911"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 509.568042ms ago: executing program 4 (id=2008): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) write$uinput_user_dev(r2, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffe, 0x9}, 0x37, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x4, 0x0, 0x1, 0x10000, 0xcd, 0x3, 0x8, 0x5, 0x20001, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x2, 0x7b8ec57e, 0x2000006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x0, 0x1000000, 0xffffffff, 0x0, 0x0, 0x9], [0x0, 0x0, 0x4, 0x9, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x9, 0x24, 0x0, 0x200401, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1010, 0x0, 0xf, 0x0, 0x7fff, 0x0, 0x1, 0xffff8000, 0xfffffffe, 0x862, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0xa10000, 0x80000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xb, 0x80000000, 0x0, 0x0, 0x4], [0x8000, 0x3, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4c44, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x1ff, 0x2, 0x8, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffe, 0xfffffff9, 0x17, 0x4], [0xffffeffc, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, 0x0, 0xc045, 0x0, 0x0, 0x7, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc, 0xffffffff, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x4, 0x7, 0x8000, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x9]}, 0x45c) 284.272806ms ago: executing program 9 (id=2015): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 270.479866ms ago: executing program 9 (id=2016): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) 186.405477ms ago: executing program 4 (id=2017): sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x42}, 0x48005) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="1c994528716b", 0x6}], 0x1}}], 0x1, 0xc0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0xdf8, 0x16) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008034, 0x0, 0x0) 128.200518ms ago: executing program 4 (id=2018): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x3) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="00214717", 0x4}], 0x1, 0x7, 0x0) 128.004638ms ago: executing program 9 (id=2019): mknod$loop(&(0x7f0000000780)='./bus\x00', 0x2000, 0x1) creat(&(0x7f000000eec0)='./bus\x00', 0x154) 119.596859ms ago: executing program 9 (id=2020): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x44, r1, 0x1, 0xfffffffe, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4}]}]}]}, 0x44}}, 0x0) 109.655629ms ago: executing program 9 (id=2021): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x4000400) unshare(0x64000600) 52.2576ms ago: executing program 4 (id=2022): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x2282, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'unlock', ' ', 'none'}, 0xc) 52.126249ms ago: executing program 4 (id=2023): r0 = syz_open_dev$usbmon(&(0x7f0000002240), 0x7, 0x8080) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000002280)) 51.95278ms ago: executing program 4 (id=2024): fchdir(0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) readv(r1, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) 0s ago: executing program 9 (id=2025): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x100002, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) kernel console output (not intermixed with test programs): 795739.110:463): avc: denied { ioctl } for pid=3918 comm="syz.3.1409" path="socket:[24703]" dev="sockfs" ino=24703 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 156.559709][ T9] usb 9-1: device descriptor read/64, error -71 [ 156.562197][ T3928] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:363 [ 156.567315][ T3928] rust_binder: Write failure EINVAL in pid:363 [ 156.588945][ T36] audit: type=1400 audit(1750795740.256:464): avc: denied { setcheckreqprot } for pid=3929 comm="syz.5.1414" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 156.799712][ T9] usb 9-1: device descriptor read/64, error -71 [ 156.909779][ T9] usb usb9-port1: attempt power cycle [ 157.079749][ T10] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 157.129717][ T350] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 157.229914][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 157.247732][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 157.255499][ T9] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 157.263706][ T10] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 157.271300][ T10] usb 8-1: can't read configurations, error -71 [ 157.280959][ T9] usb 9-1: device descriptor read/8, error -71 [ 157.288610][ T350] usb 6-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 157.297703][ T350] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.305705][ T350] usb 6-1: Product: syz [ 157.310376][ T350] usb 6-1: Manufacturer: syz [ 157.314966][ T350] usb 6-1: SerialNumber: syz [ 157.320202][ T350] usb 6-1: config 0 descriptor?? [ 157.410616][ T9] usb 9-1: device descriptor read/8, error -71 [ 157.649705][ T9] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 157.670646][ T9] usb 9-1: device descriptor read/8, error -71 [ 157.800674][ T9] usb 9-1: device descriptor read/8, error -71 [ 157.906457][ T3964] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1429'. [ 157.909822][ T9] usb usb9-port1: unable to enumerate USB device [ 157.915542][ T3964] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1429'. [ 157.930779][ T3964] netlink: 'syz.3.1429': attribute type 6 has an invalid length. [ 157.938562][ T3964] netlink: 'syz.3.1429': attribute type 5 has an invalid length. [ 157.946324][ T3964] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1429'. [ 157.979698][ T3973] overlayfs: failed to clone upperpath [ 158.099768][ T10] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 158.109328][ T3998] overlayfs: failed to clone upperpath [ 158.115323][ T36] audit: type=1400 audit(1750795741.776:465): avc: denied { map } for pid=3997 comm="syz.3.1441" path="socket:[24147]" dev="sockfs" ino=24147 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 158.143627][ T350] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 158.159816][ T350] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 158.179752][ T350] asix 6-1:0.0: probe with driver asix failed with error -71 [ 158.190612][ T350] usb 6-1: USB disconnect, device number 46 [ 158.256399][ T10] usb 8-1: not running at top speed; connect to a high speed hub [ 158.264998][ T10] usb 8-1: config 0 has an invalid interface number: 14 but max is 1 [ 158.278763][ T10] usb 8-1: config 0 has an invalid interface number: 37 but max is 1 [ 158.287109][ T10] usb 8-1: config 0 has an invalid interface number: 237 but max is 1 [ 158.299687][ T10] usb 8-1: config 0 has 3 interfaces, different from the descriptor's value: 2 [ 158.313755][ T10] usb 8-1: config 0 has no interface number 0 [ 158.322530][ T10] usb 8-1: config 0 has no interface number 1 [ 158.328945][ T10] usb 8-1: config 0 has no interface number 2 [ 158.335277][ T10] usb 8-1: config 0 interface 14 altsetting 75 endpoint 0xC has invalid maxpacket 503, setting to 64 [ 158.346390][ T10] usb 8-1: config 0 interface 14 altsetting 75 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 158.358575][ T10] usb 8-1: config 0 interface 14 altsetting 75 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 158.370031][ T10] usb 8-1: config 0 interface 14 altsetting 75 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 158.381271][ T10] usb 8-1: config 0 interface 14 altsetting 75 has an invalid descriptor for endpoint zero, skipping [ 158.392427][ T10] usb 8-1: config 0 interface 14 altsetting 75 has a duplicate endpoint with address 0x1, skipping [ 158.403208][ T10] usb 8-1: config 0 interface 14 altsetting 75 has a duplicate endpoint with address 0x9, skipping [ 158.413956][ T10] usb 8-1: config 0 interface 14 altsetting 75 has an invalid descriptor for endpoint zero, skipping [ 158.424886][ T10] usb 8-1: config 0 interface 14 altsetting 75 has an invalid descriptor for endpoint zero, skipping [ 158.435869][ T10] usb 8-1: config 0 interface 14 altsetting 75 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 158.446858][ T10] usb 8-1: config 0 interface 37 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 158.457504][ T10] usb 8-1: config 0 interface 37 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 158.468151][ T10] usb 8-1: config 0 interface 37 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 158.478966][ T10] usb 8-1: config 0 interface 37 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 158.491948][ T10] usb 8-1: too many endpoints for config 0 interface 237 altsetting 22: 251, using maximum allowed: 30 [ 158.503005][ T10] usb 8-1: config 0 interface 237 altsetting 22 has a duplicate endpoint with address 0xE, skipping [ 158.513805][ T10] usb 8-1: config 0 interface 237 altsetting 22 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 158.527043][ T10] usb 8-1: config 0 interface 14 has no altsetting 0 [ 158.533763][ T10] usb 8-1: config 0 interface 37 has no altsetting 0 [ 158.540648][ T10] usb 8-1: config 0 interface 237 has no altsetting 0 [ 158.548906][ T10] usb 8-1: Dual-Role OTG device on HNP port [ 158.555311][ T10] usb 8-1: New USB device found, idVendor=2c4e, idProduct=0100, bcdDevice=b5.39 [ 158.564376][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.572381][ T10] usb 8-1: Product: 鶕ﲅ慺墁ｦ堵赛☙묜⦵僋퍉턪렬즴捹㈨乶춻鎈埛衡镆卿ᩫ␝똹ꠗ὘ꐯ얄鎉椈傶ꫤ੔샽︼駕䑭쥸쩨嬄捺⤵킩ሼ碐꣙흓昌Ὃ廰环窺ଛ㻛痴왶弅뀯㬇怘䛆꒎눋鮮鮺㬣囐ჸﴷ紩輟᧏排흏ᎊ닖胸㛟쐉Ꮽ냆샒∓ÿ䲋堍ऴㅿɸ寎淵뾎풓듽귿戆ከ錃 [ 158.607200][ T350] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 158.610993][ T4023] rust_binder: validate_parent_fixup: fixup_min_offset=50, parent_offset=26 [ 158.614827][ T4023] rust_binder: Error while translating object. [ 158.615561][ T10] usb 8-1: Manufacturer: 䌪兗멼7悆鷹쯣′稃謅픶ⴟ䪕ꦐ [ 158.623766][ T4023] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 158.629996][ T10] usb 8-1: SerialNumber: syz [ 158.638149][ T4023] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:111 [ 158.648819][ T10] usb 8-1: config 0 descriptor?? [ 158.666753][ T3955] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 158.693813][ T4027] rust_binder: Error while translating object. [ 158.693857][ T4027] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 158.700083][ T4027] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:115 [ 158.709861][ T4027] overlayfs: missing 'lowerdir' [ 158.747406][ T36] audit: type=1400 audit(1750795742.406:466): avc: denied { getattr } for pid=4028 comm="syz.8.1455" path="cgroup:[4026532778]" dev="nsfs" ino=4026532778 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 158.761413][ T350] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.782007][ T350] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 158.793391][ T350] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.802569][ T350] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.810606][ T350] usb 6-1: Product:  [ 158.814095][ T4029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.814824][ T350] usb 6-1: Manufacturer: 賶Ⱗ᡾ꞓӾ﹮㰵ᄌﯱᒥ꼰곷嘚縋℟ꢿய [ 158.824198][ T4029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.832784][ T350] usb 6-1: SerialNumber: ࠐ [ 158.882764][ T10] usb 8-1: USB disconnect, device number 14 [ 158.911968][ T4035] overlayfs: failed to clone upperpath [ 158.972489][ T4039] overlayfs: missing 'lowerdir' [ 159.045623][ T36] audit: type=1400 audit(1750795742.706:467): avc: denied { map } for pid=4042 comm="syz.3.1468" path="socket:[24958]" dev="sockfs" ino=24958 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 159.070108][ T324] usb 9-1: new low-speed USB device number 15 using dummy_hcd [ 159.219735][ T324] usb 9-1: Invalid ep0 maxpacket: 16 [ 159.248578][ T4017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.257164][ T4017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.265993][ T350] cdc_ncm 6-1:1.0: bind() failure [ 159.271793][ T350] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 159.278575][ T350] cdc_ncm 6-1:1.1: bind() failure [ 159.286770][ T350] usb 6-1: USB disconnect, device number 47 [ 159.359759][ T324] usb 9-1: new low-speed USB device number 16 using dummy_hcd [ 159.509706][ T324] usb 9-1: Invalid ep0 maxpacket: 16 [ 159.515255][ T324] usb usb9-port1: attempt power cycle [ 159.801712][ T4069] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 159.801741][ T4069] rust_binder: Read failure Err(EFAULT) in pid:393 [ 159.869751][ T324] usb 9-1: new low-speed USB device number 17 using dummy_hcd [ 159.900039][ T324] usb 9-1: Invalid ep0 maxpacket: 16 [ 159.928911][ T4076] FAULT_INJECTION: forcing a failure. [ 159.928911][ T4076] name failslab, interval 1, probability 0, space 0, times 1 [ 159.941713][ T4076] CPU: 1 UID: 0 PID: 4076 Comm: syz.5.1475 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 159.941746][ T4076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 159.941757][ T4076] Call Trace: [ 159.941764][ T4076] [ 159.941771][ T4076] __dump_stack+0x21/0x30 [ 159.941798][ T4076] dump_stack_lvl+0x10c/0x190 [ 159.941817][ T4076] ? __cfi_dump_stack_lvl+0x10/0x10 [ 159.941838][ T4076] dump_stack+0x19/0x20 [ 159.941855][ T4076] should_fail_ex+0x3d9/0x530 [ 159.941876][ T4076] should_failslab+0xac/0x100 [ 159.941901][ T4076] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 159.941924][ T4076] ? rust_helper_krealloc+0x33/0xd0 [ 159.941943][ T4076] ? __kasan_kmalloc+0x96/0xb0 [ 159.941967][ T4076] krealloc_noprof+0x8d/0x130 [ 159.941989][ T4076] rust_helper_krealloc+0x33/0xd0 [ 159.942007][ T4076] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0x91/0x100 [ 159.942037][ T4076] _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xaf/0x100 [ 159.942063][ T4076] _RNvMs3_NtCshgDM7dBCdno_11rust_binder6threadNtB5_11ThreadError7try_new+0x76/0x3a0 [ 159.942095][ T4076] _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x473/0x1440 [ 159.942121][ T4076] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 159.942141][ T4076] ? security_inode_alloc+0x51/0x200 [ 159.942180][ T4076] ? inode_init_always_gfp+0x756/0x9e0 [ 159.942205][ T4076] ? proc_pid_make_inode+0x25/0x140 [ 159.942236][ T4076] ? proc_tid_base_lookup+0x2f/0x40 [ 159.942253][ T4076] ? do_filp_open+0x1c6/0x3e0 [ 159.942268][ T4076] ? do_sys_openat2+0x12c/0x1c0 [ 159.942285][ T4076] ? __x64_sys_openat+0x13a/0x170 [ 159.942301][ T4076] ? x64_sys_call+0xe69/0x2ee0 [ 159.942321][ T4076] ? do_syscall_64+0x58/0xf0 [ 159.942337][ T4076] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 159.942358][ T4076] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 159.942383][ T4076] ? avc_has_perm_noaudit+0x268/0x360 [ 159.942403][ T4076] ? __asan_memcpy+0x5a/0x80 [ 159.942420][ T4076] ? avc_has_perm_noaudit+0x286/0x360 [ 159.942439][ T4076] ? avc_has_perm+0x144/0x220 [ 159.942457][ T4076] ? __cfi_avc_has_perm+0x10/0x10 [ 159.942476][ T4076] ? selinux_file_open+0x457/0x610 [ 159.942501][ T4076] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1a9/0x2c20 [ 159.942528][ T4076] ? avc_has_extended_perms+0x7c7/0xdd0 [ 159.942546][ T4076] ? __asan_memcpy+0x5a/0x80 [ 159.942566][ T4076] ? avc_has_extended_perms+0x921/0xdd0 [ 159.942585][ T4076] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 159.942611][ T4076] ? do_vfs_ioctl+0xeda/0x1e30 [ 159.942634][ T4076] ? arch_stack_walk+0x10b/0x170 [ 159.942658][ T4076] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 159.942684][ T4076] ? _parse_integer+0x2e/0x40 [ 159.942706][ T4076] ? ioctl_has_perm+0x384/0x4d0 [ 159.942732][ T4076] ? has_cap_mac_admin+0xd0/0xd0 [ 159.942757][ T4076] ? proc_fail_nth_write+0x17e/0x210 [ 159.942775][ T4076] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 159.942794][ T4076] ? selinux_file_ioctl+0x6e0/0x1360 [ 159.942818][ T4076] ? vfs_write+0x8ba/0xe80 [ 159.942839][ T4076] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 159.942863][ T4076] ? __cfi_vfs_write+0x10/0x10 [ 159.942883][ T4076] ? __kasan_check_write+0x18/0x20 [ 159.942902][ T4076] ? mutex_unlock+0x8b/0x240 [ 159.942923][ T4076] ? __cfi_mutex_unlock+0x10/0x10 [ 159.942941][ T4076] ? __fget_files+0x2c5/0x340 [ 159.942965][ T4076] ? __fget_files+0x2c5/0x340 [ 159.942987][ T4076] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 159.943015][ T4076] ? __se_sys_ioctl+0x114/0x1b0 [ 159.943037][ T4076] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 159.943064][ T4076] __se_sys_ioctl+0x135/0x1b0 [ 159.943087][ T4076] __x64_sys_ioctl+0x7f/0xa0 [ 159.943110][ T4076] x64_sys_call+0x1878/0x2ee0 [ 159.943131][ T4076] do_syscall_64+0x58/0xf0 [ 159.943146][ T4076] ? clear_bhb_loop+0x50/0xa0 [ 159.943166][ T4076] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 159.943186][ T4076] RIP: 0033:0x7f3cc298e929 [ 159.943202][ T4076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.943224][ T4076] RSP: 002b:00007f3cc3806038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.943245][ T4076] RAX: ffffffffffffffda RBX: 00007f3cc2bb5fa0 RCX: 00007f3cc298e929 [ 159.943259][ T4076] RDX: 0000200000000640 RSI: 00000000c0306201 RDI: 0000000000000003 [ 159.943271][ T4076] RBP: 00007f3cc3806090 R08: 0000000000000000 R09: 0000000000000000 [ 159.943283][ T4076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.943296][ T4076] R13: 0000000000000000 R14: 00007f3cc2bb5fa0 R15: 00007fff4114f658 [ 159.943310][ T4076] [ 160.319748][ T350] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 160.347852][ T36] audit: type=1400 audit(1750795744.006:468): avc: denied { setattr } for pid=4081 comm="syz.5.1477" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 160.397253][ T4090] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1480'. [ 160.402436][ T324] usb 9-1: new low-speed USB device number 18 using dummy_hcd [ 160.480109][ T324] usb 9-1: Invalid ep0 maxpacket: 16 [ 160.485502][ T324] usb usb9-port1: unable to enumerate USB device [ 160.519714][ T350] usb 8-1: Using ep0 maxpacket: 16 [ 160.525975][ T350] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.536947][ T350] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 160.549787][ T350] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 160.558793][ T350] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.569370][ T350] usb 8-1: config 0 descriptor?? [ 160.814072][ T350] usbhid 8-1:0.0: can't add hid device: -71 [ 160.823265][ T350] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 160.841728][ T350] usb 8-1: USB disconnect, device number 15 [ 161.611687][ T892] bridge_slave_1: left allmulticast mode [ 161.617424][ T892] bridge_slave_1: left promiscuous mode [ 161.623470][ T892] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.631262][ T892] bridge_slave_0: left allmulticast mode [ 161.636982][ T892] bridge_slave_0: left promiscuous mode [ 161.642964][ T892] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.712728][ T892] veth1_macvtap: left promiscuous mode [ 161.718265][ T892] veth0_vlan: left promiscuous mode [ 161.779781][ T350] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 161.869734][ T4127] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.876792][ T4127] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.884344][ T4127] bridge_slave_0: entered allmulticast mode [ 161.892793][ T4127] bridge_slave_0: entered promiscuous mode [ 161.899220][ T4127] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.906552][ T4127] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.913868][ T4127] bridge_slave_1: entered allmulticast mode [ 161.920697][ T4127] bridge_slave_1: entered promiscuous mode [ 161.939785][ T350] usb 6-1: Using ep0 maxpacket: 32 [ 161.950940][ T350] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 161.959039][ T350] usb 6-1: config 0 has no interface number 0 [ 161.961217][ T4134] FAULT_INJECTION: forcing a failure. [ 161.961217][ T4134] name failslab, interval 1, probability 0, space 0, times 0 [ 161.979145][ T350] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 161.981888][ T4134] CPU: 1 UID: 0 PID: 4134 Comm: syz.8.1499 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 161.981914][ T4134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 161.981925][ T4134] Call Trace: [ 161.981932][ T4134] [ 161.981939][ T4134] __dump_stack+0x21/0x30 [ 161.981986][ T4134] dump_stack_lvl+0x10c/0x190 [ 161.982006][ T4134] ? __cfi_dump_stack_lvl+0x10/0x10 [ 161.982028][ T4134] dump_stack+0x19/0x20 [ 161.982046][ T4134] should_fail_ex+0x3d9/0x530 [ 161.982069][ T4134] should_failslab+0xac/0x100 [ 161.982094][ T4134] __kmalloc_noprof+0x69/0x450 [ 161.982116][ T4134] ? skcipher_next_slow+0x135/0x570 [ 161.982134][ T4134] skcipher_next_slow+0x135/0x570 [ 161.982154][ T4134] skcipher_walk_next+0x59d/0xba0 [ 161.982173][ T4134] ? xfd_validate_state+0x68/0x150 [ 161.982195][ T4134] skcipher_walk_done+0x4d5/0xaa0 [ 161.982215][ T4134] gcm_decrypt_aesni_avx+0x5d1/0x620 [ 161.982237][ T4134] ? __cfi_gcm_decrypt_aesni_avx+0x10/0x10 [ 161.982259][ T4134] ? iov_iter_iovec_advance+0x1eb/0x2b0 [ 161.982283][ T4134] ? iov_iter_advance+0x12f/0x1e0 [ 161.982306][ T4134] ? __iov_iter_get_pages_alloc+0x3df/0x9f0 [ 161.982330][ T4134] crypto_aead_decrypt+0x123/0x190 [ 161.982347][ T4134] simd_aead_decrypt+0x11f/0x130 [ 161.982377][ T4134] crypto_aead_decrypt+0x123/0x190 [ 161.982394][ T4134] tls_decrypt_sg+0x1603/0x34b0 [ 161.982420][ T4134] ? decrypt_skb+0x90/0x90 [ 161.982440][ T4134] ? tls_strp_msg_load+0x53d/0xa00 [ 161.982460][ T4134] ? kasan_save_alloc_info+0x40/0x50 [ 161.982478][ T4134] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 161.982498][ T4134] ? security_inode_alloc+0x51/0x200 [ 161.982520][ T4134] ? tls_rx_rec_wait+0x1f6/0x9c0 [ 161.982541][ T4134] ? do_syscall_64+0x58/0xf0 [ 161.982558][ T4134] ? tls_rx_reader_acquire+0x423/0x510 [ 161.982580][ T4134] tls_decrypt_sw+0xb9/0x980 [ 161.982602][ T4134] ? _raw_spin_unlock_bh+0x54/0x60 [ 161.982618][ T4134] ? lock_sock_nested+0x1f5/0x290 [ 161.982639][ T4134] ? signal_pending+0xc0/0xc0 [ 161.982661][ T4134] ? process_rx_list+0x438/0xf20 [ 161.982682][ T4134] ? __cfi_woken_wake_function+0x10/0x10 [ 161.982699][ T4134] tls_rx_one_record+0x58/0x3f0 [ 161.982721][ T4134] tls_sw_recvmsg+0xaa1/0x18e0 [ 161.982744][ T4134] ? __cfi_tls_sw_recvmsg+0x10/0x10 [ 161.982766][ T4134] ? selinux_socket_recvmsg+0x284/0x380 [ 161.982786][ T4134] ? __cfi_selinux_socket_recvmsg+0x10/0x10 [ 161.982808][ T4134] ? __cfi_tls_sw_recvmsg+0x10/0x10 [ 161.982828][ T4134] inet6_recvmsg+0x24b/0x4e0 [ 161.982845][ T4134] ? is_bpf_text_address+0x17b/0x1a0 [ 161.982870][ T4134] ? __cfi_inet6_recvmsg+0x10/0x10 [ 161.982886][ T4134] ? kernel_text_address+0xa9/0xe0 [ 161.982908][ T4134] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 161.982925][ T4134] ? security_socket_recvmsg+0x3a/0xf0 [ 161.982946][ T4134] sock_recvmsg+0x105/0x270 [ 161.982969][ T4134] sock_read_iter+0x232/0x2f0 [ 161.982989][ T4134] ? __cfi_sock_read_iter+0x10/0x10 [ 161.983011][ T4134] ? selinux_file_permission+0x88b/0xb30 [ 161.983037][ T4134] do_iter_readv_writev+0x4f2/0x6a0 [ 161.983061][ T4134] ? vfs_iter_read+0x5f0/0x5f0 [ 161.983082][ T4134] ? bpf_lsm_file_permission+0xd/0x20 [ 161.983102][ T4134] vfs_readv+0x2fb/0xa50 [ 161.983117][ T4134] ? do_readv+0x2d0/0x2d0 [ 161.983139][ T4134] ? vfs_write+0x8ba/0xe80 [ 161.983162][ T4134] do_readv+0x14d/0x2d0 [ 161.983185][ T4134] ? generic_atomic_write_valid+0x1c0/0x1c0 [ 161.983211][ T4134] ? __kasan_check_read+0x15/0x20 [ 161.983229][ T4134] __x64_sys_readv+0x81/0x90 [ 161.983250][ T4134] x64_sys_call+0x2a64/0x2ee0 [ 161.983271][ T4134] do_syscall_64+0x58/0xf0 [ 161.983286][ T4134] ? clear_bhb_loop+0x50/0xa0 [ 161.983305][ T4134] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 161.983323][ T4134] RIP: 0033:0x7f9d8538e929 [ 161.983338][ T4134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.983353][ T4134] RSP: 002b:00007f9d86122038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 161.983379][ T4134] RAX: ffffffffffffffda RBX: 00007f9d855b5fa0 RCX: 00007f9d8538e929 [ 161.983393][ T4134] RDX: 0000000000000002 RSI: 0000200000000100 RDI: 0000000000000003 [ 161.983405][ T4134] RBP: 00007f9d86122090 R08: 0000000000000000 R09: 0000000000000000 [ 161.983417][ T4134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.983429][ T4134] R13: 0000000000000000 R14: 00007f9d855b5fa0 R15: 00007ffc5a297f18 [ 161.983444][ T4134] [ 162.160600][ T4143] rust_binder: Error while translating object. [ 162.165152][ T350] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.174821][ T4143] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 162.179718][ T350] usb 6-1: Product: syz [ 162.193587][ T4143] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:99 [ 162.194892][ T350] usb 6-1: Manufacturer: syz [ 162.216093][ T36] audit: type=1400 audit(1750795745.866:469): avc: denied { read } for pid=4141 comm="syz.8.1503" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 162.222070][ T350] usb 6-1: SerialNumber: syz [ 162.494120][ T350] usb 6-1: config 0 descriptor?? [ 162.500778][ T350] smsc95xx v2.0.0 [ 162.504437][ T350] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 162.515077][ T350] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -22 [ 162.553603][ T948] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.560696][ T948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.569635][ T945] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.576709][ T945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.603197][ T4127] veth0_vlan: entered promiscuous mode [ 162.623053][ T4127] veth1_macvtap: entered promiscuous mode [ 163.059263][ T4178] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1493'. [ 163.158551][ T4181] fuse: Unknown parameter 'uQ0x0000000000000008' [ 163.219629][ T4184] tipc: Enabled bearer , priority 10 [ 163.250132][ T350] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 163.346983][ T4199] binder: Bad value for 'max' [ 163.360491][ T4201] netlink: 220 bytes leftover after parsing attributes in process `syz.8.1526'. [ 163.390151][ T350] usb 8-1: device descriptor read/64, error -71 [ 163.609734][ T10] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 163.629914][ T350] usb 8-1: device descriptor read/64, error -71 [ 163.763239][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.773332][ T36] audit: type=1326 audit(1750795747.436:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.9.1533" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f613bd8e929 code=0x0 [ 163.774473][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.806669][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 163.819624][ T10] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.828761][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.837646][ T10] usb 9-1: config 0 descriptor?? [ 163.889738][ T350] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 164.019702][ T350] usb 8-1: device descriptor read/64, error -71 [ 164.209710][ T31] tipc: Node number set to 2915056954 [ 164.245784][ T10] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 164.254781][ T10] plantronics 0003:047F:FFFF.0018: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 164.267690][ T350] usb 8-1: device descriptor read/64, error -71 [ 164.379920][ T350] usb usb8-port1: attempt power cycle [ 164.591161][ T31] usb 6-1: USB disconnect, device number 48 [ 164.753378][ T350] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 164.781554][ T350] usb 8-1: device descriptor read/8, error -71 [ 164.910821][ T350] usb 8-1: device descriptor read/8, error -71 [ 165.149753][ T350] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 165.170778][ T350] usb 8-1: device descriptor read/8, error -71 [ 165.300753][ T350] usb 8-1: device descriptor read/8, error -71 [ 165.409810][ T350] usb usb8-port1: unable to enumerate USB device [ 165.489076][ T4247] incfs_lookup_dentry err:-13 [ 165.493900][ T4247] incfs: Can't find or create .index dir in ./file0 [ 165.500625][ T4247] incfs: mount failed -13 [ 165.506504][ T4247] overlay: filesystem on ./bus not supported as upperdir [ 165.634171][ T4255] overlayfs: failed to resolve './file0': -2 [ 166.025850][ T4265] 9pnet_fd: Insufficient options for proto=fd [ 166.055631][ T4271] fuse: Bad value for 'fd' [ 166.409712][ T350] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 166.522838][ T4289] incfs_lookup_dentry err:-13 [ 166.527526][ T4289] incfs: Can't find or create .index dir in ./file0 [ 166.534192][ T4289] incfs: mount failed -13 [ 166.539254][ T4289] overlay: filesystem on ./bus not supported as upperdir [ 166.562560][ T350] usb 8-1: not running at top speed; connect to a high speed hub [ 166.572252][ T350] usb 8-1: config 0 has an invalid interface number: 14 but max is 1 [ 166.580453][ T350] usb 8-1: config 0 has an invalid interface number: 37 but max is 1 [ 166.588603][ T350] usb 8-1: config 0 has an invalid interface number: 237 but max is 1 [ 166.591153][ T36] audit: type=1326 audit(1750795750.246:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4284 comm="syz.9.1555" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f613bd8e929 code=0x0 [ 166.596836][ T350] usb 8-1: config 0 has 3 interfaces, different from the descriptor's value: 2 [ 166.628683][ T350] usb 8-1: config 0 has no interface number 0 [ 166.634769][ T350] usb 8-1: config 0 has no interface number 1 [ 166.640884][ T350] usb 8-1: config 0 has no interface number 2 [ 166.646995][ T350] usb 8-1: config 0 interface 14 altsetting 75 endpoint 0xC has invalid maxpacket 503, setting to 64 [ 166.657870][ T350] usb 8-1: config 0 interface 14 altsetting 75 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 166.668757][ T350] usb 8-1: config 0 interface 14 altsetting 75 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 166.680574][ T350] usb 8-1: config 0 interface 14 altsetting 75 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 166.691774][ T350] usb 8-1: config 0 interface 14 altsetting 75 has an invalid descriptor for endpoint zero, skipping [ 166.702905][ T350] usb 8-1: config 0 interface 14 altsetting 75 has a duplicate endpoint with address 0x1, skipping [ 166.713830][ T350] usb 8-1: config 0 interface 14 altsetting 75 has a duplicate endpoint with address 0x9, skipping [ 166.724571][ T350] usb 8-1: config 0 interface 14 altsetting 75 has an invalid descriptor for endpoint zero, skipping [ 166.735467][ T350] usb 8-1: config 0 interface 14 altsetting 75 has an invalid descriptor for endpoint zero, skipping [ 166.746466][ T350] usb 8-1: config 0 interface 14 altsetting 75 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 166.757596][ T350] usb 8-1: config 0 interface 37 altsetting 4 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 166.769480][ T350] usb 8-1: config 0 interface 37 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 166.780142][ T350] usb 8-1: config 0 interface 37 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 166.790754][ T350] usb 8-1: config 0 interface 37 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 166.803748][ T350] usb 8-1: too many endpoints for config 0 interface 237 altsetting 22: 251, using maximum allowed: 30 [ 166.814811][ T350] usb 8-1: config 0 interface 237 altsetting 22 has a duplicate endpoint with address 0xE, skipping [ 166.825793][ T350] usb 8-1: config 0 interface 237 altsetting 22 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 166.831337][ T4301] overlayfs: failed to resolve './file1': -2 [ 166.839184][ T350] usb 8-1: config 0 interface 14 has no altsetting 0 [ 166.851821][ T350] usb 8-1: config 0 interface 37 has no altsetting 0 [ 166.858501][ T350] usb 8-1: config 0 interface 237 has no altsetting 0 [ 166.866693][ T350] usb 8-1: Dual-Role OTG device on HNP port [ 166.873146][ T350] usb 8-1: New USB device found, idVendor=2c4e, idProduct=0100, bcdDevice=b5.39 [ 166.882380][ T350] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.890560][ T350] usb 8-1: Product: 鶕ﲅ慺墁ｦ堵赛☙묜⦵僋퍉턪렬즴捹㈨乶춻鎈埛衡镆卿ᩫ␝똹ꠗ὘ꐯ얄鎉椈傶ꫤ੔샽︼駕䑭쥸쩨嬄捺⤵킩ሼ碐꣙흓昌Ὃ廰环窺ଛ㻛痴왶弅뀯㬇怘䛆꒎눋鮮鮺㬣囐ჸﴷ紩輟᧏排흏ᎊ닖胸㛟쐉Ꮽ냆샒∓ÿ䲋堍ऴㅿɸ寎淵뾎풓듽귿戆ከ錃 [ 166.925221][ T350] usb 8-1: Manufacturer: 䌪兗멼7悆鷹쯣′稃謅픶ⴟ䪕ꦐ [ 166.933626][ T350] usb 8-1: SerialNumber: syz [ 166.938777][ T350] usb 8-1: config 0 descriptor?? [ 166.944101][ T4277] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 166.949730][ T10] usb 9-1: reset high-speed USB device number 19 using dummy_hcd [ 167.100339][ T10] usb 9-1: device firmware changed [ 167.105748][ T324] usb 9-1: USB disconnect, device number 19 [ 167.166233][ T350] usb 8-1: USB disconnect, device number 20 [ 167.244846][ T4312] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1565'. [ 167.249696][ T324] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 167.272024][ T4314] rust_binder: Error while translating object. [ 167.272048][ T4314] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 167.278226][ T4314] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:455 [ 167.288282][ T36] audit: type=1400 audit(1750795750.946:472): avc: denied { execute } for pid=4313 comm="syz.5.1566" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 167.420693][ T324] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.431272][ T324] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.441106][ T324] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 167.450199][ T324] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 167.458229][ T324] usb 9-1: SerialNumber: syz [ 167.477401][ T4321] bpf: Bad value for 'mode' [ 167.513320][ T36] audit: type=1400 audit(1750795751.176:473): avc: denied { map } for pid=4324 comm="syz.9.1571" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 167.541308][ T36] audit: type=1400 audit(1750795751.206:474): avc: denied { execute } for pid=4324 comm="syz.9.1571" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 167.586859][ T4330] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 167.668023][ T4292] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 167.670561][ T324] usb 9-1: 0:2 : does not exist [ 167.683433][ T324] usb 9-1: unit 5 not found! [ 167.691915][ T324] usb 9-1: USB disconnect, device number 20 [ 167.708307][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 168.081371][ T36] audit: type=1400 audit(1750795751.746:475): avc: denied { mounton } for pid=4339 comm="syz.7.1576" path="/59/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 168.117225][ T36] audit: type=1400 audit(1750795751.776:476): avc: denied { map } for pid=4344 comm="syz.7.1577" path="/60/bus" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 168.198138][ T4350] fuse: Unknown parameter '' [ 168.469735][ T10] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 168.489708][ T31] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 168.625976][ T36] audit: type=1400 audit(1750795752.286:477): avc: denied { mount } for pid=4362 comm="syz.9.1585" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 168.649506][ T36] audit: type=1400 audit(1750795752.286:478): avc: denied { remount } for pid=4362 comm="syz.9.1585" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 168.669686][ T31] usb 8-1: Using ep0 maxpacket: 8 [ 168.670921][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 168.675937][ T31] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 168.683416][ T10] usb 6-1: config 0 has an invalid interface number: 14 but max is 1 [ 168.691561][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.699863][ T10] usb 6-1: config 0 has an invalid interface number: 37 but max is 1 [ 168.708280][ T31] usb 8-1: config 0 descriptor?? [ 168.718218][ T10] usb 6-1: config 0 has an invalid interface number: 237 but max is 1 [ 168.728849][ T4365] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:67 [ 168.729151][ T10] usb 6-1: config 0 has 3 interfaces, different from the descriptor's value: 2 [ 168.747191][ T10] usb 6-1: config 0 has no interface number 0 [ 168.754423][ T10] usb 6-1: config 0 has no interface number 1 [ 168.760768][ T10] usb 6-1: config 0 has no interface number 2 [ 168.766876][ T10] usb 6-1: config 0 interface 14 altsetting 75 endpoint 0xC has invalid maxpacket 503, setting to 64 [ 168.777785][ T10] usb 6-1: config 0 interface 14 altsetting 75 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 168.788711][ T10] usb 6-1: config 0 interface 14 altsetting 75 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 168.799729][ T10] usb 6-1: config 0 interface 14 altsetting 75 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 168.810716][ T10] usb 6-1: config 0 interface 14 altsetting 75 has an invalid descriptor for endpoint zero, skipping [ 168.821622][ T10] usb 6-1: config 0 interface 14 altsetting 75 has a duplicate endpoint with address 0x1, skipping [ 168.832409][ T10] usb 6-1: config 0 interface 14 altsetting 75 has a duplicate endpoint with address 0x9, skipping [ 168.843161][ T10] usb 6-1: config 0 interface 14 altsetting 75 has an invalid descriptor for endpoint zero, skipping [ 168.854059][ T10] usb 6-1: config 0 interface 14 altsetting 75 has an invalid descriptor for endpoint zero, skipping [ 168.864943][ T10] usb 6-1: config 0 interface 14 altsetting 75 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 168.875935][ T10] usb 6-1: config 0 interface 37 altsetting 4 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 168.886731][ T10] usb 6-1: config 0 interface 37 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 168.897429][ T10] usb 6-1: config 0 interface 37 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 168.908095][ T10] usb 6-1: config 0 interface 37 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 168.921206][ T10] usb 6-1: too many endpoints for config 0 interface 237 altsetting 22: 251, using maximum allowed: 30 [ 168.932417][ T10] usb 6-1: config 0 interface 237 altsetting 22 has a duplicate endpoint with address 0xE, skipping [ 168.943267][ T10] usb 6-1: config 0 interface 237 altsetting 22 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 168.956624][ T10] usb 6-1: config 0 interface 14 has no altsetting 0 [ 168.963383][ T10] usb 6-1: config 0 interface 37 has no altsetting 0 [ 168.970109][ T10] usb 6-1: config 0 interface 237 has no altsetting 0 [ 168.978321][ T10] usb 6-1: Dual-Role OTG device on HNP port [ 168.984445][ T10] usb 6-1: New USB device found, idVendor=2c4e, idProduct=0100, bcdDevice=b5.39 [ 168.993531][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.001557][ T10] usb 6-1: Product: 鶕ﲅ慺墁ｦ堵赛☙묜⦵僋퍉턪렬즴捹㈨乶춻鎈埛衡镆卿ᩫ␝똹ꠗ὘ꐯ얄鎉椈傶ꫤ੔샽︼駕䑭쥸쩨嬄捺⤵킩ሼ碐꣙흓昌Ὃ廰环窺ଛ㻛痴왶弅뀯㬇怘䛆꒎눋鮮鮺㬣囐ჸﴷ紩輟᧏排흏ᎊ닖胸㛟쐉Ꮽ냆샒∓ÿ䲋堍ऴㅿɸ寎淵뾎풓듽귿戆ከ錃 [ 169.036183][ T10] usb 6-1: Manufacturer: 䌪兗멼7悆鷹쯣′稃謅픶ⴟ䪕ꦐ [ 169.044854][ T10] usb 6-1: SerialNumber: syz [ 169.059556][ T10] usb 6-1: config 0 descriptor?? [ 169.065079][ T4356] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 169.091774][ T36] audit: type=1400 audit(1750795752.756:479): avc: denied { execmem } for pid=4370 comm="syz.8.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 169.286884][ T10] usb 6-1: USB disconnect, device number 49 [ 169.409799][ T349] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 169.435008][ T36] audit: type=1400 audit(1750795753.096:480): avc: denied { unmount } for pid=4127 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 169.467807][ T4376] overlayfs: failed to resolve './file1': -2 [ 169.560062][ T349] usb 9-1: Using ep0 maxpacket: 8 [ 169.567356][ T349] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.577560][ T349] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 169.581985][ T4379] 9pnet_fd: Insufficient options for proto=fd [ 169.586492][ T349] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.593004][ T945] Bluetooth: hci0: Frame reassembly failed (-84) [ 169.602555][ T349] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 169.617849][ T349] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.629144][ T349] hub 9-1:1.0: bad descriptor, ignoring hub [ 169.635207][ T349] hub 9-1:1.0: probe with driver hub failed with error -5 [ 169.642683][ T349] cdc_wdm 9-1:1.0: skipping garbage [ 169.647881][ T349] cdc_wdm 9-1:1.0: skipping garbage [ 169.653185][ T349] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 169.820994][ T36] audit: type=1400 audit(1750795753.486:481): avc: denied { write } for pid=4380 comm="syz.5.1592" name="/" dev="configfs" ino=1586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 169.887820][ T4383] Unsupported ieee802154 address type: 0 [ 169.989778][ T349] usb 9-1: USB disconnect, device number 21 [ 170.127623][ T31] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 170.137658][ T31] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 170.147879][ T31] asix 8-1:0.0: probe with driver asix failed with error -71 [ 170.157129][ T31] usb 8-1: USB disconnect, device number 21 [ 170.359752][ T349] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 170.509703][ T349] usb 6-1: Using ep0 maxpacket: 32 [ 170.515899][ T349] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 170.524165][ T349] usb 6-1: config 0 has no interface number 0 [ 170.530268][ T349] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 170.541321][ T349] usb 6-1: config 0 interface 85 has no altsetting 0 [ 170.549332][ T349] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 170.558379][ T349] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.566364][ T349] usb 6-1: Product: syz [ 170.570549][ T349] usb 6-1: Manufacturer: syz [ 170.575129][ T349] usb 6-1: SerialNumber: syz [ 170.580220][ T349] usb 6-1: config 0 descriptor?? [ 170.659725][ T31] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 170.811038][ T31] usb 9-1: not running at top speed; connect to a high speed hub [ 170.819496][ T31] usb 9-1: config 0 has an invalid interface number: 14 but max is 1 [ 170.827620][ T31] usb 9-1: config 0 has an invalid interface number: 37 but max is 1 [ 170.835719][ T31] usb 9-1: config 0 has an invalid interface number: 237 but max is 1 [ 170.843902][ T31] usb 9-1: config 0 has 3 interfaces, different from the descriptor's value: 2 [ 170.852857][ T31] usb 9-1: config 0 has no interface number 0 [ 170.858922][ T31] usb 9-1: config 0 has no interface number 1 [ 170.864998][ T31] usb 9-1: config 0 has no interface number 2 [ 170.871099][ T31] usb 9-1: config 0 interface 14 altsetting 75 endpoint 0xC has invalid maxpacket 503, setting to 64 [ 170.881966][ T31] usb 9-1: config 0 interface 14 altsetting 75 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 170.892838][ T31] usb 9-1: config 0 interface 14 altsetting 75 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 170.903817][ T31] usb 9-1: config 0 interface 14 altsetting 75 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 170.914772][ T31] usb 9-1: config 0 interface 14 altsetting 75 has an invalid descriptor for endpoint zero, skipping [ 170.925628][ T31] usb 9-1: config 0 interface 14 altsetting 75 has a duplicate endpoint with address 0x1, skipping [ 170.936329][ T31] usb 9-1: config 0 interface 14 altsetting 75 has a duplicate endpoint with address 0x9, skipping [ 170.947016][ T31] usb 9-1: config 0 interface 14 altsetting 75 has an invalid descriptor for endpoint zero, skipping [ 170.957889][ T31] usb 9-1: config 0 interface 14 altsetting 75 has an invalid descriptor for endpoint zero, skipping [ 170.968748][ T31] usb 9-1: config 0 interface 14 altsetting 75 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 170.979719][ T31] usb 9-1: config 0 interface 37 altsetting 4 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 170.990564][ T31] usb 9-1: config 0 interface 37 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 171.001304][ T31] usb 9-1: config 0 interface 37 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 171.011944][ T31] usb 9-1: config 0 interface 37 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 171.024938][ T31] usb 9-1: too many endpoints for config 0 interface 237 altsetting 22: 251, using maximum allowed: 30 [ 171.036046][ T31] usb 9-1: config 0 interface 237 altsetting 22 has a duplicate endpoint with address 0xE, skipping [ 171.046838][ T31] usb 9-1: config 0 interface 237 altsetting 22 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 171.053424][ T349] usb 6-1: USB disconnect, device number 50 [ 171.060193][ T31] usb 9-1: config 0 interface 14 has no altsetting 0 [ 171.072771][ T31] usb 9-1: config 0 interface 37 has no altsetting 0 [ 171.079448][ T31] usb 9-1: config 0 interface 237 has no altsetting 0 [ 171.087650][ T31] usb 9-1: Dual-Role OTG device on HNP port [ 171.093736][ T31] usb 9-1: New USB device found, idVendor=2c4e, idProduct=0100, bcdDevice=b5.39 [ 171.102772][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.110767][ T31] usb 9-1: Product: 鶕ﲅ慺墁ｦ堵赛☙묜⦵僋퍉턪렬즴捹㈨乶춻鎈埛衡镆卿ᩫ␝똹ꠗ὘ꐯ얄鎉椈傶ꫤ੔샽︼駕䑭쥸쩨嬄捺⤵킩ሼ碐꣙흓昌Ὃ廰环窺ଛ㻛痴왶弅뀯㬇怘䛆꒎눋鮮鮺㬣囐ჸﴷ紩輟᧏排흏ᎊ닖胸㛟쐉Ꮽ냆샒∓ÿ䲋堍ऴㅿɸ寎淵뾎풓듽귿戆ከ錃 [ 171.145258][ T31] usb 9-1: Manufacturer: 䌪兗멼7悆鷹쯣′稃謅픶ⴟ䪕ꦐ [ 171.153982][ T31] usb 9-1: SerialNumber: syz [ 171.159098][ T31] usb 9-1: config 0 descriptor?? [ 171.164407][ T4402] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 171.378623][ T31] usb 9-1: USB disconnect, device number 22 [ 171.562886][ T4409] Unsupported ieee802154 address type: 0 [ 171.601299][ T4416] FAULT_INJECTION: forcing a failure. [ 171.601299][ T4416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.614385][ T4416] CPU: 1 UID: 0 PID: 4416 Comm: syz.5.1606 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 171.614417][ T4416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 171.614428][ T4416] Call Trace: [ 171.614435][ T4416] [ 171.614443][ T4416] __dump_stack+0x21/0x30 [ 171.614468][ T4416] dump_stack_lvl+0x10c/0x190 [ 171.614488][ T4416] ? __cfi_dump_stack_lvl+0x10/0x10 [ 171.614511][ T4416] dump_stack+0x19/0x20 [ 171.614530][ T4416] should_fail_ex+0x3d9/0x530 [ 171.614553][ T4416] should_fail+0xf/0x20 [ 171.614572][ T4416] should_fail_usercopy+0x1e/0x30 [ 171.614594][ T4416] _copy_from_user+0x22/0xb0 [ 171.614618][ T4416] dev_ifconf+0xd4/0x2e0 [ 171.614644][ T4416] ? __cfi_dev_ifconf+0x10/0x10 [ 171.614669][ T4416] ? __cfi_vfs_write+0x10/0x10 [ 171.614692][ T4416] ? __kasan_check_write+0x18/0x20 [ 171.614713][ T4416] ? mutex_unlock+0x8b/0x240 [ 171.614735][ T4416] sock_ioctl+0x488/0x7b0 [ 171.614757][ T4416] ? __cfi_sock_ioctl+0x10/0x10 [ 171.614779][ T4416] ? __fget_files+0x2c5/0x340 [ 171.614805][ T4416] ? bpf_lsm_file_ioctl+0xd/0x20 [ 171.614826][ T4416] ? security_file_ioctl+0x34/0xd0 [ 171.614850][ T4416] ? __cfi_sock_ioctl+0x10/0x10 [ 171.614872][ T4416] __se_sys_ioctl+0x135/0x1b0 [ 171.614897][ T4416] __x64_sys_ioctl+0x7f/0xa0 [ 171.614921][ T4416] x64_sys_call+0x1878/0x2ee0 [ 171.614943][ T4416] do_syscall_64+0x58/0xf0 [ 171.614960][ T4416] ? clear_bhb_loop+0x50/0xa0 [ 171.614980][ T4416] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 171.614999][ T4416] RIP: 0033:0x7f3cc298e929 [ 171.615016][ T4416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.615032][ T4416] RSP: 002b:00007f3cc3806038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.615054][ T4416] RAX: ffffffffffffffda RBX: 00007f3cc2bb5fa0 RCX: 00007f3cc298e929 [ 171.615069][ T4416] RDX: 00002000000003c0 RSI: 0000000000008912 RDI: 0000000000000003 [ 171.615083][ T4416] RBP: 00007f3cc3806090 R08: 0000000000000000 R09: 0000000000000000 [ 171.615096][ T4416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.615108][ T4416] R13: 0000000000000000 R14: 00007f3cc2bb5fa0 R15: 00007fff4114f658 [ 171.615124][ T4416] [ 171.629691][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 171.633178][ T2468] Bluetooth: hci0: command 0x1003 tx timeout [ 171.893658][ T4432] Unsupported ieee802154 address type: 0 [ 172.015439][ T4444] overlayfs: failed to resolve './file0': -2 [ 172.025015][ T4441] syzkaller0: entered promiscuous mode [ 172.045663][ T4441] syzkaller0: entered allmulticast mode [ 172.319829][ T324] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 172.379725][ T31] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 172.469703][ T324] usb 8-1: Using ep0 maxpacket: 32 [ 172.475961][ T324] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 172.484174][ T324] usb 8-1: config 0 has no interface number 0 [ 172.490281][ T324] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 172.501229][ T324] usb 8-1: config 0 interface 85 has no altsetting 0 [ 172.509302][ T324] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 172.518516][ T324] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.526619][ T324] usb 8-1: Product: syz [ 172.530798][ T324] usb 8-1: Manufacturer: syz [ 172.535395][ T324] usb 8-1: SerialNumber: syz [ 172.541669][ T324] usb 8-1: config 0 descriptor?? [ 172.547060][ T31] usb 6-1: not running at top speed; connect to a high speed hub [ 172.556121][ T31] usb 6-1: config 0 has an invalid interface number: 14 but max is 1 [ 172.564283][ T31] usb 6-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 172.574230][ T31] usb 6-1: config 0 has an invalid interface number: 37 but max is 1 [ 172.582322][ T31] usb 6-1: config 0 has an invalid interface number: 237 but max is 1 [ 172.591005][ T31] usb 6-1: config 0 has 3 interfaces, different from the descriptor's value: 2 [ 172.599998][ T31] usb 6-1: config 0 has no interface number 0 [ 172.606172][ T31] usb 6-1: config 0 has no interface number 1 [ 172.612282][ T31] usb 6-1: config 0 has no interface number 2 [ 172.618397][ T31] usb 6-1: config 0 interface 14 altsetting 75 endpoint 0xC has invalid maxpacket 503, setting to 64 [ 172.629359][ T31] usb 6-1: config 0 interface 14 altsetting 75 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 172.640257][ T31] usb 6-1: config 0 interface 14 altsetting 75 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 172.651280][ T31] usb 6-1: config 0 interface 14 altsetting 75 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 172.663117][ T31] usb 6-1: config 0 interface 14 altsetting 75 has an invalid descriptor for endpoint zero, skipping [ 172.674045][ T31] usb 6-1: config 0 interface 14 altsetting 75 has a duplicate endpoint with address 0x1, skipping [ 172.684778][ T31] usb 6-1: config 0 interface 14 altsetting 75 has a duplicate endpoint with address 0x9, skipping [ 172.695537][ T31] usb 6-1: config 0 interface 14 altsetting 75 has an invalid descriptor for endpoint zero, skipping [ 172.706452][ T31] usb 6-1: config 0 interface 14 altsetting 75 has an invalid descriptor for endpoint zero, skipping [ 172.717338][ T31] usb 6-1: config 0 interface 14 altsetting 75 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 172.728325][ T31] usb 6-1: config 0 interface 37 altsetting 4 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 172.739842][ T31] usb 6-1: config 0 interface 37 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 172.751215][ T31] usb 6-1: config 0 interface 37 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 172.761940][ T31] usb 6-1: config 0 interface 37 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 172.774926][ T31] usb 6-1: too many endpoints for config 0 interface 237 altsetting 22: 251, using maximum allowed: 30 [ 172.785992][ T31] usb 6-1: config 0 interface 237 altsetting 22 has a duplicate endpoint with address 0xE, skipping [ 172.796781][ T31] usb 6-1: config 0 interface 237 altsetting 22 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 172.810090][ T31] usb 6-1: config 0 interface 14 has no altsetting 0 [ 172.816777][ T31] usb 6-1: config 0 interface 37 has no altsetting 0 [ 172.823470][ T31] usb 6-1: config 0 interface 237 has no altsetting 0 [ 172.831631][ T31] usb 6-1: Dual-Role OTG device on HNP port [ 172.837690][ T31] usb 6-1: New USB device found, idVendor=2c4e, idProduct=0100, bcdDevice=b5.39 [ 172.846744][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.855328][ T31] usb 6-1: Product: 鶕ﲅ慺墁ｦ堵赛☙묜⦵僋퍉턪렬즴捹㈨乶춻鎈埛衡镆卿ᩫ␝똹ꠗ὘ꐯ얄鎉椈傶ꫤ੔샽︼駕䑭쥸쩨嬄捺⤵킩ሼ碐꣙흓昌Ὃ廰环窺ଛ㻛痴왶弅뀯㬇怘䛆꒎눋鮮鮺㬣囐ჸﴷ紩輟᧏排흏ᎊ닖胸㛟쐉Ꮽ냆샒∓ÿ䲋堍ऴㅿɸ寎淵뾎풓듽귿戆ከ錃 [ 172.862978][ T4467] overlayfs: failed to resolve './file0': -2 [ 172.889875][ T31] usb 6-1: Manufacturer: 䌪兗멼7悆鷹쯣′稃謅픶ⴟ䪕ꦐ [ 172.904364][ T31] usb 6-1: SerialNumber: syz [ 172.912909][ T31] usb 6-1: config 0 descriptor?? [ 172.918251][ T4462] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 172.991637][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 172.991657][ T36] audit: type=1400 audit(1750795756.656:484): avc: denied { create } for pid=4481 comm="syz.8.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 173.052912][ T324] usb 8-1: USB disconnect, device number 22 [ 173.069369][ T4492] overlayfs: failed to resolve './file0': -2 [ 173.134297][ T31] usb 6-1: USB disconnect, device number 51 [ 173.164094][ T4500] input: syz1 as /devices/virtual/input/input12 [ 173.215135][ T4508] exFAT-fs (rnullb0): invalid boot record signature [ 173.221796][ T4508] exFAT-fs (rnullb0): failed to read boot sector [ 173.228124][ T4508] exFAT-fs (rnullb0): failed to recognize exfat type [ 173.339716][ T45] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 173.469789][ T45] usb 10-1: device descriptor read/64, error -71 [ 173.549937][ T349] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 173.709719][ T45] usb 10-1: device descriptor read/64, error -71 [ 173.709763][ T349] usb 9-1: Using ep0 maxpacket: 8 [ 173.719375][ T4526] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 173.721162][ T4526] rust_binder: Read failure Err(EFAULT) in pid:499 [ 173.741750][ T349] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 173.741868][ T4528] fuse: Bad value for 'rootmode' [ 173.748374][ T349] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.772250][ T349] usb 9-1: config 0 descriptor?? [ 173.950007][ T45] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 173.957759][ T4532] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:191 [ 173.989723][ T31] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 174.079738][ T45] usb 10-1: device descriptor read/64, error -71 [ 174.150843][ T31] usb 6-1: config 0 interface 0 altsetting 236 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 174.163895][ T31] usb 6-1: config 0 interface 0 has no altsetting 0 [ 174.172032][ T31] usb 6-1: New USB device found, idVendor=2001, idProduct=b301, bcdDevice=45.a9 [ 174.181194][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.189201][ T31] usb 6-1: Product: syz [ 174.193679][ T31] usb 6-1: Manufacturer: syz [ 174.198323][ T31] usb 6-1: SerialNumber: syz [ 174.205460][ T31] r8152-cfgselector 6-1: Unknown version 0x0000 [ 174.211795][ T31] r8152-cfgselector 6-1: config 0 descriptor?? [ 174.218813][ T31] r8152 6-1:0.0: Expected endpoints are not found [ 174.329742][ T45] usb 10-1: device descriptor read/64, error -71 [ 174.379045][ T349] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 174.389156][ T349] asix 9-1:0.0: probe with driver asix failed with error -61 [ 174.421208][ T4528] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 174.421239][ T4528] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:501 [ 174.431253][ T31] r8152-cfgselector 6-1: USB disconnect, device number 52 [ 174.447700][ T45] usb usb10-port1: attempt power cycle [ 174.789790][ T45] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 174.810883][ T45] usb 10-1: device descriptor read/8, error -71 [ 174.939837][ T31] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 174.948507][ T45] usb 10-1: device descriptor read/8, error -71 [ 175.089707][ T31] usb 8-1: Using ep0 maxpacket: 32 [ 175.095938][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 131, changing to 11 [ 175.107128][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49607, setting to 1024 [ 175.118303][ T31] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 175.127364][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.135896][ T31] usb 8-1: config 0 descriptor?? [ 175.141917][ T31] hub 8-1:0.0: USB hub found [ 175.199740][ T45] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 175.220760][ T45] usb 10-1: device descriptor read/8, error -71 [ 175.350687][ T45] usb 10-1: device descriptor read/8, error -71 [ 175.459865][ T45] usb usb10-port1: unable to enumerate USB device [ 175.955218][ T4554] fuse: Bad value for 'group_id' [ 175.961006][ T4554] fuse: Bad value for 'group_id' [ 176.047424][ T31] hub 8-1:0.0: config failed, can't read hub descriptor (err -22) [ 176.057126][ T31] usbhid 8-1:0.0: can't add hid device: -71 [ 176.063133][ T31] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 176.081436][ T4563] /dev/nullb0: Can't lookup blockdev [ 176.090784][ T31] usb 8-1: USB disconnect, device number 23 [ 176.179357][ T4572] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4572 comm=syz.9.1670 [ 176.339723][ T45] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 176.490768][ T45] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.500602][ T45] usb 6-1: config 0 interface 0 has no altsetting 0 [ 176.507196][ T45] usb 6-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 176.516294][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.524816][ T45] usb 6-1: config 0 descriptor?? [ 176.657447][ T10] usb 9-1: USB disconnect, device number 23 [ 176.931902][ T45] sunplus 0003:04FC:05D8.0019: unknown main item tag 0x0 [ 176.939115][ T45] sunplus 0003:04FC:05D8.0019: unknown main item tag 0x0 [ 176.946253][ T45] sunplus 0003:04FC:05D8.0019: unknown main item tag 0x0 [ 176.953409][ T45] sunplus 0003:04FC:05D8.0019: unknown main item tag 0x0 [ 176.960549][ T45] sunplus 0003:04FC:05D8.0019: unknown main item tag 0x0 [ 176.967693][ T45] sunplus 0003:04FC:05D8.0019: unknown main item tag 0x0 [ 176.974815][ T45] sunplus 0003:04FC:05D8.0019: unknown main item tag 0x0 [ 176.981977][ T45] sunplus 0003:04FC:05D8.0019: unknown main item tag 0x0 [ 176.989071][ T45] sunplus 0003:04FC:05D8.0019: unknown main item tag 0x0 [ 176.999689][ T45] sunplus 0003:04FC:05D8.0019: hidraw0: USB HID v0.05 Device [HID 04fc:05d8] on usb-dummy_hcd.5-1/input0 [ 177.037015][ T4588] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1677'. [ 177.134874][ T31] usb 6-1: USB disconnect, device number 53 [ 177.289720][ T45] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 177.439750][ T31] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 177.448355][ T45] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.458595][ T45] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 177.471575][ T45] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 177.480724][ T45] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.489219][ T45] usb 8-1: config 0 descriptor?? [ 177.495161][ T45] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 177.516066][ T4604] FAULT_INJECTION: forcing a failure. [ 177.516066][ T4604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.529195][ T4604] CPU: 1 UID: 0 PID: 4604 Comm: syz.8.1683 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 177.529228][ T4604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 177.529239][ T4604] Call Trace: [ 177.529244][ T4604] [ 177.529250][ T4604] __dump_stack+0x21/0x30 [ 177.529268][ T4604] dump_stack_lvl+0x10c/0x190 [ 177.529279][ T4604] ? __cfi_dump_stack_lvl+0x10/0x10 [ 177.529291][ T4604] dump_stack+0x19/0x20 [ 177.529302][ T4604] should_fail_ex+0x3d9/0x530 [ 177.529316][ T4604] should_fail+0xf/0x20 [ 177.529326][ T4604] should_fail_usercopy+0x1e/0x30 [ 177.529338][ T4604] _copy_to_user+0x24/0xa0 [ 177.529352][ T4604] simple_read_from_buffer+0xed/0x160 [ 177.529363][ T4604] proc_fail_nth_read+0x19e/0x210 [ 177.529375][ T4604] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 177.529385][ T4604] ? bpf_lsm_file_permission+0xd/0x20 [ 177.529397][ T4604] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 177.529407][ T4604] vfs_read+0x27b/0xb60 [ 177.529420][ T4604] ? __cfi_vfs_read+0x10/0x10 [ 177.529431][ T4604] ? __kasan_check_write+0x18/0x20 [ 177.529443][ T4604] ? mutex_lock+0x92/0x1c0 [ 177.529455][ T4604] ? __cfi_mutex_lock+0x10/0x10 [ 177.529465][ T4604] ? __fget_files+0x2c5/0x340 [ 177.529480][ T4604] ksys_read+0x141/0x250 [ 177.529492][ T4604] ? __cfi_ksys_read+0x10/0x10 [ 177.529503][ T4604] ? __kasan_check_write+0x18/0x20 [ 177.529515][ T4604] ? __kasan_check_read+0x15/0x20 [ 177.529526][ T4604] __x64_sys_read+0x7f/0x90 [ 177.529538][ T4604] x64_sys_call+0x2638/0x2ee0 [ 177.529551][ T4604] do_syscall_64+0x58/0xf0 [ 177.529560][ T4604] ? clear_bhb_loop+0x50/0xa0 [ 177.529572][ T4604] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 177.529583][ T4604] RIP: 0033:0x7f9d8538d33c [ 177.529593][ T4604] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 177.529602][ T4604] RSP: 002b:00007f9d86122030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 177.529614][ T4604] RAX: ffffffffffffffda RBX: 00007f9d855b5fa0 RCX: 00007f9d8538d33c [ 177.529623][ T4604] RDX: 000000000000000f RSI: 00007f9d861220a0 RDI: 0000000000000003 [ 177.529630][ T4604] RBP: 00007f9d86122090 R08: 0000000000000000 R09: 0000000000000000 [ 177.529640][ T4604] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 177.529648][ T4604] R13: 0000000000000000 R14: 00007f9d855b5fa0 R15: 00007ffc5a297f18 [ 177.529656][ T4604] [ 177.781513][ T31] usb 6-1: not running at top speed; connect to a high speed hub [ 177.792361][ T31] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 177.803209][ T31] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 2039, setting to 64 [ 177.815515][ T31] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 177.824594][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.832620][ T31] usb 6-1: Product: ő皷Dž᩠鮧兠濛쯍露蛜㬠덹ꭔⶰ뷡뉖須軴曒⪀석掜휶룈㎫˱붳朋芇㈰䒒内采ᗶ姠௷翠ᐦ끽䊕뙹톇⧨鍌฽慚阘齠䲪⦥㔠츷興粶跛폿평⯿慌蛣⁩ᦞ뜺㒛┆를룯䃡ƃ蛴脝窧沘຀앓驧ရ夙约ᤑ찮ẩℒ쪙忽੅⠆캓悡ᦔ互䒎堙 [ 177.864079][ T31] usb 6-1: Manufacturer: ꇃᶐ䴢ꀑ쑋ஷ≀뤂⯁조χ㬒荒ᯛ舼䆤쓾琈䟞뀉库⻖ꁐफ팜눁힑䑎璩珓卩츝䤉㺈ꈶ꺏꼘༌꒨쩁䵐퓌淖ꔍꢀ╁쟟搆睽¤ [ 177.882622][ T31] usb 6-1: SerialNumber: 㐊 [ 177.888663][ T4567] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 178.300874][ T36] audit: type=1400 audit(1750795761.966:485): avc: denied { setattr } for pid=4627 comm="syz.9.1693" name="PACKET" dev="sockfs" ino=31398 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 178.477698][ T4567] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 178.477724][ T4567] rust_binder: Read failure Err(EFAULT) in pid:527 [ 178.487369][ T4567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.503307][ T4567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.569697][ T10] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 178.719675][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 178.732473][ T10] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 178.742927][ T10] usb 10-1: config 0 has no interface number 0 [ 178.758145][ T10] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 178.768338][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.776630][ T10] usb 10-1: Product: syz [ 178.781142][ T10] usb 10-1: Manufacturer: syz [ 178.785897][ T10] usb 10-1: SerialNumber: syz [ 178.796964][ T10] usb 10-1: config 0 descriptor?? [ 178.804645][ T10] smsc95xx v2.0.0 [ 179.047905][ T31] cdc_ncm 6-1:1.0: bind() failure [ 179.060614][ T31] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 179.067577][ T31] cdc_ncm 6-1:1.1: bind() failure [ 179.081171][ T31] usb 6-1: USB disconnect, device number 54 [ 179.205749][ T10] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 179.216669][ T10] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 179.379742][ T31] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 179.530779][ T31] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 179.539189][ T31] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 179.549507][ T31] usb 6-1: config 220 has no interface number 2 [ 179.555787][ T31] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 179.568949][ T31] usb 6-1: config 220 interface 0 has no altsetting 0 [ 179.575731][ T31] usb 6-1: config 220 interface 76 has no altsetting 0 [ 179.582600][ T31] usb 6-1: config 220 interface 1 has no altsetting 0 [ 179.590741][ T31] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 179.599816][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.607804][ T31] usb 6-1: Product: syz [ 179.611987][ T31] usb 6-1: Manufacturer: syz [ 179.616575][ T31] usb 6-1: SerialNumber: syz [ 179.835683][ T36] audit: type=1400 audit(1750795763.496:486): avc: denied { write } for pid=4632 comm="syz.5.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 179.921080][ T31] usb 6-1: selecting invalid altsetting 0 [ 179.927118][ T31] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 179.933508][ T31] usb 6-1: No valid video chain found. [ 179.941151][ T31] usb 6-1: USB disconnect, device number 55 [ 180.058652][ T349] usb 8-1: USB disconnect, device number 24 [ 180.075721][ T4639] overlayfs: missing 'lowerdir' [ 180.199612][ T36] audit: type=1400 audit(1750795763.856:487): avc: denied { unmount } for pid=3539 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 180.257781][ T4652] rust_binder: Write failure EINVAL in pid:217 [ 180.309015][ T4654] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:251 [ 180.364551][ T4658] tipc: Enabled bearer , priority 0 [ 180.480526][ T4657] tipc: Resetting bearer [ 180.492146][ T4657] tipc: Disabling bearer [ 180.552848][ T4665] overlayfs: missing 'lowerdir' [ 180.568233][ T4667] overlayfs: missing 'lowerdir' [ 180.669702][ T31] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 180.820767][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.831364][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 180.844504][ T31] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 180.853578][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.862159][ T31] usb 6-1: config 0 descriptor?? [ 180.867930][ T31] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 181.223764][ T4685] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:227 [ 181.300878][ T10] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -61 [ 181.321280][ T10] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -61 [ 181.931767][ T36] audit: type=1400 audit(1750795765.596:488): avc: denied { remove_name } for pid=3539 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.956282][ T36] audit: type=1400 audit(1750795765.596:489): avc: denied { unlink } for pid=3539 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 182.135960][ T4690] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.143058][ T4690] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.150200][ T4690] bridge_slave_0: entered allmulticast mode [ 182.156391][ T4690] bridge_slave_0: entered promiscuous mode [ 182.162898][ T4690] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.169981][ T4690] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.177078][ T4690] bridge_slave_1: entered allmulticast mode [ 182.183311][ T4690] bridge_slave_1: entered promiscuous mode [ 182.193201][ T304] bridge_slave_1: left allmulticast mode [ 182.198931][ T304] bridge_slave_1: left promiscuous mode [ 182.204625][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.212093][ T304] bridge_slave_0: left allmulticast mode [ 182.217714][ T304] bridge_slave_0: left promiscuous mode [ 182.223401][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.325357][ T4690] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.332413][ T4690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.339694][ T4690] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.346721][ T4690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.366420][ T892] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.373855][ T892] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.382606][ T304] veth1_macvtap: left promiscuous mode [ 182.388102][ T304] veth0_vlan: left promiscuous mode [ 182.425172][ T945] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.432253][ T945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.441231][ T892] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.448275][ T892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.477469][ T4690] veth0_vlan: entered promiscuous mode [ 182.488681][ T4690] veth1_macvtap: entered promiscuous mode [ 182.516385][ T4695] fuse: Bad value for 'fd' [ 182.525163][ T4695] overlay: filesystem on ./bus not supported as upperdir [ 182.533623][ T31] usb 10-1: USB disconnect, device number 6 [ 182.561182][ T36] audit: type=1400 audit(1750795766.226:490): avc: denied { append } for pid=4698 comm="syz.1.1722" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.622417][ T4707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1726'. [ 182.645654][ T4709] rust_binder: Error while translating object. [ 182.645677][ T4709] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 182.652719][ T4709] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:14 [ 182.809667][ T36] audit: type=1400 audit(1750795766.466:491): avc: denied { append } for pid=4718 comm="syz.9.1732" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.854167][ T36] audit: type=1400 audit(1750795766.516:492): avc: denied { getopt } for pid=4722 comm="syz.1.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 182.932308][ T36] audit: type=1400 audit(1750795766.596:493): avc: denied { nlmsg_write } for pid=4720 comm="syz.9.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 183.119739][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 183.269747][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 183.275960][ T10] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 183.285264][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.293873][ T10] usb 2-1: config 0 descriptor?? [ 183.437945][ T350] usb 6-1: USB disconnect, device number 56 [ 183.491311][ T4734] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 183.491337][ T4734] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:537 [ 183.621428][ T4737] input: syz0 as /devices/virtual/input/input13 [ 183.675157][ T4742] netlink: 304 bytes leftover after parsing attributes in process `syz.9.1742'. [ 183.675584][ T36] audit: type=1400 audit(1750795767.336:494): avc: denied { nlmsg_read } for pid=4741 comm="syz.9.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 184.120119][ T45] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 184.270784][ T45] usb 10-1: config 0 interface 0 altsetting 238 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.281998][ T45] usb 10-1: config 0 interface 0 altsetting 238 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.292175][ T45] usb 10-1: config 0 interface 0 has no altsetting 0 [ 184.298865][ T45] usb 10-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 184.308198][ T45] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.316947][ T45] usb 10-1: config 0 descriptor?? [ 184.329707][ T324] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 184.480744][ T324] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 184.490540][ T324] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 184.501840][ T324] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 184.510931][ T324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.518942][ T324] usb 6-1: Product: syz [ 184.523129][ T324] usb 6-1: Manufacturer: syz [ 184.527803][ T324] usb 6-1: SerialNumber: syz [ 184.533045][ T324] usb 6-1: config 0 descriptor?? [ 184.538333][ T4759] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 184.545667][ T4759] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 184.728340][ T4753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.737007][ T4753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.747007][ T4753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.755031][ T4759] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 184.755705][ T4753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.763446][ T4759] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 184.782111][ T45] acrux 0003:1A34:F705.001A: hidraw0: USB HID v0.00 Device [HID 1a34:f705] on usb-dummy_hcd.9-1/input0 [ 184.793226][ T45] acrux 0003:1A34:F705.001A: no inputs found [ 184.799237][ T45] acrux 0003:1A34:F705.001A: Failed to enable force feedback support, error: -19 [ 185.112843][ T10] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 185.123429][ T10] asix 2-1:0.0: probe with driver asix failed with error -71 [ 185.131705][ T10] usb 2-1: USB disconnect, device number 2 [ 185.332146][ T4754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.340770][ T4754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.643406][ T36] audit: type=1326 audit(1750795769.306:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4763 comm="syz.1.1750" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f09b598e929 code=0x0 [ 185.785323][ T324] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 185.795398][ T324] dm9601 6-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 185.808651][ T324] usb 6-1: USB disconnect, device number 57 [ 185.814889][ T324] dm9601 6-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet [ 186.030207][ T45] usb 10-1: reset high-speed USB device number 7 using dummy_hcd [ 186.489659][ T36] audit: type=1400 audit(1750795770.146:496): avc: denied { map } for pid=4775 comm="syz.1.1755" path="pipe:[32184]" dev="pipefs" ino=32184 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 186.512648][ T36] audit: type=1400 audit(1750795770.146:497): avc: denied { execute } for pid=4775 comm="syz.1.1755" path="pipe:[32184]" dev="pipefs" ino=32184 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 186.557428][ T4782] FAULT_INJECTION: forcing a failure. [ 186.557428][ T4782] name failslab, interval 1, probability 0, space 0, times 0 [ 186.573623][ T4782] CPU: 1 UID: 0 PID: 4782 Comm: syz.9.1758 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 186.573655][ T4782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 186.573667][ T4782] Call Trace: [ 186.573673][ T4782] [ 186.573682][ T4782] __dump_stack+0x21/0x30 [ 186.573707][ T4782] dump_stack_lvl+0x10c/0x190 [ 186.573727][ T4782] ? __cfi_dump_stack_lvl+0x10/0x10 [ 186.573757][ T4782] dump_stack+0x19/0x20 [ 186.573776][ T4782] should_fail_ex+0x3d9/0x530 [ 186.573797][ T4782] should_failslab+0xac/0x100 [ 186.573822][ T4782] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 186.573846][ T4782] ? rust_helper_krealloc+0x33/0xd0 [ 186.573868][ T4782] krealloc_noprof+0x8d/0x130 [ 186.573893][ T4782] rust_helper_krealloc+0x33/0xd0 [ 186.573911][ T4782] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0x91/0x100 [ 186.573945][ T4782] _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xaf/0x100 [ 186.573972][ T4782] _RNvMs3_NtCshgDM7dBCdno_11rust_binder6threadNtB5_11ThreadError7try_new+0x76/0x3a0 [ 186.574010][ T4782] _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x506/0x1440 [ 186.574037][ T4782] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 186.574059][ T4782] ? security_inode_alloc+0x51/0x200 [ 186.574080][ T4782] ? inode_init_always_gfp+0x756/0x9e0 [ 186.574105][ T4782] ? proc_pid_make_inode+0x25/0x140 [ 186.574129][ T4782] ? proc_tid_base_lookup+0x2f/0x40 [ 186.574149][ T4782] ? __x64_sys_openat+0x13a/0x170 [ 186.574169][ T4782] ? x64_sys_call+0xe69/0x2ee0 [ 186.574191][ T4782] ? do_syscall_64+0x58/0xf0 [ 186.574207][ T4782] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 186.574229][ T4782] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 186.574256][ T4782] ? avc_has_perm_noaudit+0x268/0x360 [ 186.574277][ T4782] ? __asan_memcpy+0x5a/0x80 [ 186.574298][ T4782] ? avc_has_perm_noaudit+0x286/0x360 [ 186.574319][ T4782] ? avc_has_perm+0x144/0x220 [ 186.574338][ T4782] ? __cfi_avc_has_perm+0x10/0x10 [ 186.574358][ T4782] ? selinux_file_open+0x457/0x610 [ 186.574385][ T4782] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1a9/0x2c20 [ 186.574413][ T4782] ? avc_has_extended_perms+0x7c7/0xdd0 [ 186.574432][ T4782] ? __asan_memcpy+0x5a/0x80 [ 186.574453][ T4782] ? avc_has_extended_perms+0x921/0xdd0 [ 186.574474][ T4782] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 186.574502][ T4782] ? do_vfs_ioctl+0xeda/0x1e30 [ 186.574525][ T4782] ? arch_stack_walk+0x10b/0x170 [ 186.574550][ T4782] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 186.574576][ T4782] ? _parse_integer+0x2e/0x40 [ 186.574599][ T4782] ? ioctl_has_perm+0x384/0x4d0 [ 186.574624][ T4782] ? has_cap_mac_admin+0xd0/0xd0 [ 186.574651][ T4782] ? proc_fail_nth_write+0x17e/0x210 [ 186.574669][ T4782] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 186.574687][ T4782] ? selinux_file_ioctl+0x6e0/0x1360 [ 186.574710][ T4782] ? vfs_write+0x8ba/0xe80 [ 186.574735][ T4782] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 186.574760][ T4782] ? __cfi_vfs_write+0x10/0x10 [ 186.574779][ T4782] ? __kasan_check_write+0x18/0x20 [ 186.574799][ T4782] ? mutex_unlock+0x8b/0x240 [ 186.574819][ T4782] ? __cfi_mutex_unlock+0x10/0x10 [ 186.574838][ T4782] ? __fget_files+0x2c5/0x340 [ 186.574864][ T4782] ? __fget_files+0x2c5/0x340 [ 186.574888][ T4782] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 186.574919][ T4782] ? __se_sys_ioctl+0x114/0x1b0 [ 186.574942][ T4782] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 186.574972][ T4782] __se_sys_ioctl+0x135/0x1b0 [ 186.574997][ T4782] __x64_sys_ioctl+0x7f/0xa0 [ 186.575021][ T4782] x64_sys_call+0x1878/0x2ee0 [ 186.575044][ T4782] do_syscall_64+0x58/0xf0 [ 186.575060][ T4782] ? clear_bhb_loop+0x50/0xa0 [ 186.575080][ T4782] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 186.575100][ T4782] RIP: 0033:0x7f613bd8e929 [ 186.575128][ T4782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.575144][ T4782] RSP: 002b:00007f613cc12038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.575171][ T4782] RAX: ffffffffffffffda RBX: 00007f613bfb5fa0 RCX: 00007f613bd8e929 [ 186.575187][ T4782] RDX: 0000200000000640 RSI: 00000000c0306201 RDI: 0000000000000003 [ 186.575200][ T4782] RBP: 00007f613cc12090 R08: 0000000000000000 R09: 0000000000000000 [ 186.575213][ T4782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.575226][ T4782] R13: 0000000000000000 R14: 00007f613bfb5fa0 R15: 00007ffe931619d8 [ 186.575242][ T4782] [ 187.048145][ T4793] binder: Binderfs stats mode cannot be changed during a remount [ 187.056024][ T36] audit: type=1400 audit(1750795770.706:498): avc: denied { remount } for pid=4792 comm="syz.9.1763" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 187.154011][ T4800] netlink: 'syz.9.1766': attribute type 4 has an invalid length. [ 187.161838][ T324] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 187.170056][ T4800] netlink: 'syz.9.1766': attribute type 7 has an invalid length. [ 187.177871][ T4800] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.1766'. [ 187.319694][ T324] usb 2-1: Using ep0 maxpacket: 8 [ 187.325923][ T324] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 187.335271][ T324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.344077][ T324] usb 2-1: config 0 descriptor?? [ 187.509683][ T45] usb 10-1: device descriptor read/64, error -71 [ 187.564830][ T36] audit: type=1400 audit(1750795771.226:499): avc: denied { setopt } for pid=4814 comm="syz.5.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 187.770903][ T45] usb 10-1: device firmware changed [ 187.776389][ T543] usb 10-1: USB disconnect, device number 7 [ 187.909698][ T543] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 188.060756][ T543] usb 10-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 188.077921][ T543] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 188.089069][ T543] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 188.100456][ T543] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 188.109616][ T543] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.119328][ T4807] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 188.751883][ T4848] overlay: filesystem on ./bus not supported as upperdir [ 188.784032][ T4852] incfs: Error accessing: ./file0. [ 188.789213][ T4852] incfs: mount failed -20 [ 189.159159][ T324] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 189.169279][ T324] asix 2-1:0.0: probe with driver asix failed with error -71 [ 189.177837][ T324] usb 2-1: USB disconnect, device number 3 [ 189.637630][ T4858] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1791'. [ 189.765299][ T4869] overlayfs: upper fs does not support tmpfile. [ 189.841782][ T945] bridge_slave_1: left allmulticast mode [ 189.847707][ T945] bridge_slave_1: left promiscuous mode [ 189.853747][ T945] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.861467][ T945] bridge_slave_0: left allmulticast mode [ 189.867114][ T945] bridge_slave_0: left promiscuous mode [ 189.873140][ T945] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.889995][ T324] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 189.971115][ T4874] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.978164][ T4874] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.985269][ T4874] bridge_slave_0: entered allmulticast mode [ 189.991828][ T4874] bridge_slave_0: entered promiscuous mode [ 189.999931][ T945] veth1_macvtap: left promiscuous mode [ 190.005487][ T945] veth0_vlan: left promiscuous mode [ 190.036813][ T4874] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.043923][ T324] usb 6-1: device descriptor read/64, error -71 [ 190.043974][ T4874] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.057314][ T4874] bridge_slave_1: entered allmulticast mode [ 190.063591][ T4874] bridge_slave_1: entered promiscuous mode [ 190.115114][ T4874] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.122190][ T4874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.129438][ T4874] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.136479][ T4874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.157332][ T892] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.164716][ T892] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.175196][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.182261][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.191348][ T892] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.198394][ T892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.220271][ T4874] veth0_vlan: entered promiscuous mode [ 190.230924][ T4874] veth1_macvtap: entered promiscuous mode [ 190.299760][ T324] usb 6-1: device descriptor read/64, error -71 [ 190.340152][ T4883] incfs: Error accessing: ./file0/file0. [ 190.345845][ T4883] incfs: mount failed -2 [ 190.539753][ T324] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 190.589729][ T350] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 190.669831][ T324] usb 6-1: device descriptor read/64, error -71 [ 190.749730][ T350] usb 5-1: Using ep0 maxpacket: 32 [ 190.755953][ T350] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 190.766855][ T350] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 190.776613][ T350] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 190.786410][ T350] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 190.799383][ T350] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 190.808422][ T350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.817076][ T350] usb 5-1: config 0 descriptor?? [ 190.909947][ T324] usb 6-1: device descriptor read/64, error -71 [ 191.019794][ T324] usb usb6-port1: attempt power cycle [ 191.359717][ T324] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 191.380742][ T324] usb 6-1: device descriptor read/8, error -71 [ 191.486445][ T4807] tmpfs: Bad value for 'nr_inodes' [ 191.510942][ T324] usb 6-1: device descriptor read/8, error -71 [ 191.690102][ T543] aiptek 10-1:17.0: Aiptek using 400 ms programming speed [ 191.697696][ T543] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:17.0/input/input14 [ 191.759717][ T324] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 191.780820][ T324] usb 6-1: device descriptor read/8, error -71 [ 191.910781][ T324] usb 6-1: device descriptor read/8, error -71 [ 192.019773][ T324] usb usb6-port1: unable to enumerate USB device [ 192.250960][ T350] usb 10-1: USB disconnect, device number 8 [ 192.589966][ T350] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 192.652105][ T4900] rust_binder: Error while translating object. [ 192.652125][ T4900] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 192.658373][ T4900] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:594 [ 192.739726][ T350] usb 10-1: Using ep0 maxpacket: 32 [ 192.755412][ T350] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 192.763625][ T350] usb 10-1: config 0 has no interface number 0 [ 192.771302][ T350] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 192.780478][ T350] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.788565][ T350] usb 10-1: Product: syz [ 192.789738][ T36] audit: type=1400 audit(1750795776.446:500): avc: denied { setopt } for pid=4901 comm="syz.5.1806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 192.792958][ T350] usb 10-1: Manufacturer: syz [ 192.817649][ T350] usb 10-1: SerialNumber: syz [ 192.822897][ T350] usb 10-1: config 0 descriptor?? [ 192.828620][ T350] smsc95xx v2.0.0 [ 192.832294][ T350] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 192.842510][ T350] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -22 [ 193.259703][ T350] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 193.281906][ T324] usb 5-1: USB disconnect, device number 12 [ 193.388610][ T4911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.397154][ T4911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.405855][ T36] audit: type=1400 audit(1750795777.066:501): avc: denied { connect } for pid=4897 comm="syz.9.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 193.427100][ T350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.438024][ T350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.447938][ T350] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 193.457034][ T350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.465593][ T350] usb 6-1: config 0 descriptor?? [ 193.649711][ T324] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 193.800829][ T324] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 193.813901][ T324] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 193.822975][ T324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.831624][ T324] usb 5-1: config 0 descriptor?? [ 193.837476][ T324] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 193.875204][ T350] playstation 0003:054C:0DF2.001B: item fetching failed at offset 3/5 [ 193.887110][ T350] playstation 0003:054C:0DF2.001B: Parse failed [ 193.893465][ T350] playstation 0003:054C:0DF2.001B: probe with driver playstation failed with error -22 [ 194.126802][ T36] audit: type=1400 audit(1750795777.786:502): avc: denied { ioctl } for pid=4905 comm="syz.5.1807" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 194.428420][ T36] audit: type=1400 audit(1750795778.086:503): avc: denied { create } for pid=4920 comm="syz.8.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 195.211268][ T4926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.211298][ T4926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.228056][ T4926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.228127][ T4926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.243346][ T4926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.243372][ T4926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.256712][ T4926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.256737][ T4926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.271598][ T4926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.271624][ T4926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.285066][ T4926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.285091][ T4926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.298640][ T4926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.298665][ T4926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.375776][ T4935] FAULT_INJECTION: forcing a failure. [ 195.375776][ T4935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.396352][ T31] usb 10-1: USB disconnect, device number 9 [ 195.410510][ T4935] CPU: 1 UID: 0 PID: 4935 Comm: syz.8.1816 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 195.410542][ T4935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 195.410554][ T4935] Call Trace: [ 195.410561][ T4935] [ 195.410569][ T4935] __dump_stack+0x21/0x30 [ 195.410595][ T4935] dump_stack_lvl+0x10c/0x190 [ 195.410615][ T4935] ? __cfi_dump_stack_lvl+0x10/0x10 [ 195.410638][ T4935] dump_stack+0x19/0x20 [ 195.410657][ T4935] should_fail_ex+0x3d9/0x530 [ 195.410678][ T4935] should_fail+0xf/0x20 [ 195.410697][ T4935] should_fail_usercopy+0x1e/0x30 [ 195.410719][ T4935] _copy_to_user+0x24/0xa0 [ 195.410743][ T4935] simple_read_from_buffer+0xed/0x160 [ 195.410763][ T4935] proc_fail_nth_read+0x19e/0x210 [ 195.410783][ T4935] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 195.410802][ T4935] ? bpf_lsm_file_permission+0xd/0x20 [ 195.410823][ T4935] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 195.410842][ T4935] vfs_read+0x27b/0xb60 [ 195.410863][ T4935] ? rtnl_unlock+0x12/0x20 [ 195.410882][ T4935] ? __cfi_dev_ifconf+0x10/0x10 [ 195.410906][ T4935] ? __cfi_vfs_read+0x10/0x10 [ 195.410931][ T4935] ? __kasan_check_write+0x18/0x20 [ 195.410953][ T4935] ? mutex_lock+0x92/0x1c0 [ 195.410974][ T4935] ? __cfi_mutex_lock+0x10/0x10 [ 195.410994][ T4935] ? __fget_files+0x2c5/0x340 [ 195.411021][ T4935] ksys_read+0x141/0x250 [ 195.411042][ T4935] ? __cfi_ksys_read+0x10/0x10 [ 195.411064][ T4935] ? __kasan_check_read+0x15/0x20 [ 195.411085][ T4935] __x64_sys_read+0x7f/0x90 [ 195.411107][ T4935] x64_sys_call+0x2638/0x2ee0 [ 195.411129][ T4935] do_syscall_64+0x58/0xf0 [ 195.411152][ T4935] ? clear_bhb_loop+0x50/0xa0 [ 195.411173][ T4935] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 195.411193][ T4935] RIP: 0033:0x7f9d8538d33c [ 195.411209][ T4935] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 195.411225][ T4935] RSP: 002b:00007f9d86122030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 195.411247][ T4935] RAX: ffffffffffffffda RBX: 00007f9d855b5fa0 RCX: 00007f9d8538d33c [ 195.411262][ T4935] RDX: 000000000000000f RSI: 00007f9d861220a0 RDI: 0000000000000004 [ 195.411284][ T4935] RBP: 00007f9d86122090 R08: 0000000000000000 R09: 0000000000000000 [ 195.411297][ T4935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.411309][ T4935] R13: 0000000000000000 R14: 00007f9d855b5fa0 R15: 00007ffc5a297f18 [ 195.411325][ T4935] [ 195.953688][ T324] usb 6-1: USB disconnect, device number 62 [ 196.019698][ T31] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 196.199690][ T31] usb 10-1: Using ep0 maxpacket: 8 [ 196.207208][ T31] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 196.216465][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.229024][ T31] usb 10-1: config 0 descriptor?? [ 196.288606][ T4945] input: syz0 as /devices/virtual/input/input15 [ 196.315878][ T4945] kvm_intel: kvm [4944]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xff [ 196.325403][ T4945] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 196.325439][ T4945] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:324 [ 196.345827][ T324] usb 5-1: USB disconnect, device number 13 [ 196.433678][ T4954] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.462595][ T4962] overlayfs: statfs failed on './file0' [ 196.500815][ T4967] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 196.512723][ T4967] SELinux: failed to load policy [ 196.534367][ T36] audit: type=1400 audit(1750795780.196:504): avc: denied { read } for pid=4970 comm="syz.4.1833" path="socket:[34060]" dev="sockfs" ino=34060 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 196.609097][ T36] audit: type=1326 audit(1750795780.266:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.4.1835" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3281f8e929 code=0x0 [ 196.769737][ T543] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 196.920644][ T543] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 196.933728][ T543] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 196.942793][ T543] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.951561][ T543] usb 6-1: config 0 descriptor?? [ 196.957338][ T543] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 197.538319][ T4989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1839'. [ 198.041514][ T31] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 198.052164][ T31] asix 10-1:0.0: probe with driver asix failed with error -71 [ 198.063371][ T31] usb 10-1: USB disconnect, device number 10 [ 198.929700][ T31] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 199.080783][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.091817][ T31] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 199.100869][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.109296][ T31] usb 5-1: config 0 descriptor?? [ 199.516475][ T31] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor [ 199.526643][ T324] usb 6-1: USB disconnect, device number 63 [ 199.539113][ T31] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001C/input/input16 [ 199.583074][ T5042] option changes via remount are deprecated (pid=5041 comm=syz.5.1862) [ 199.583161][ T5044] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1861'. [ 199.591404][ T36] audit: type=1400 audit(1750795783.246:506): avc: denied { remount } for pid=5041 comm="syz.5.1862" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 199.661533][ T31] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 199.694054][ T316] udevd[316]: setting mode of /dev/hidraw0 to 020600 failed: Read-only file system [ 199.703484][ T316] udevd[316]: setting owner of /dev/hidraw0 to uid=0, gid=0 failed: Read-only file system [ 199.809692][ T350] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 199.835458][ T5058] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 199.889450][ T5062] netlink: 'syz.5.1868': attribute type 4 has an invalid length. [ 199.897285][ T5062] netlink: 'syz.5.1868': attribute type 5 has an invalid length. [ 199.905044][ T5062] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.1868'. [ 199.921301][ T10] usb 5-1: USB disconnect, device number 14 [ 199.945886][ T5067] syzkaller0: entered promiscuous mode [ 199.951403][ T5067] syzkaller0: entered allmulticast mode [ 199.973021][ T350] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.983277][ T350] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.993752][ T350] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.002919][ T350] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.011175][ T350] usb 10-1: Product: syz [ 200.015434][ T350] usb 10-1: Manufacturer: syz [ 200.020149][ T350] usb 10-1: SerialNumber: syz [ 200.145476][ T5075] __vm_enough_memory: pid: 5075, comm: syz.5.1871, bytes: 70373039144960 not enough memory for the allocation [ 200.409697][ T349] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 200.495114][ T5081] pim6reg1: entered promiscuous mode [ 200.500545][ T5081] pim6reg1: entered allmulticast mode [ 200.569674][ T349] usb 6-1: Using ep0 maxpacket: 32 [ 200.576081][ T349] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 200.584576][ T349] usb 6-1: config 0 has no interface number 0 [ 200.591016][ T349] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.602340][ T349] usb 6-1: config 0 interface 85 has no altsetting 0 [ 200.610733][ T349] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 200.620001][ T349] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.628079][ T349] usb 6-1: Product: syz [ 200.632709][ T349] usb 6-1: Manufacturer: syz [ 200.637382][ T349] usb 6-1: SerialNumber: syz [ 200.649980][ T349] usb 6-1: config 0 descriptor?? [ 201.060032][ T349] usb 6-1: USB disconnect, device number 64 [ 201.586454][ T5089] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 201.595767][ T36] audit: type=1400 audit(1750795785.256:507): avc: denied { create } for pid=5088 comm="syz.5.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 201.655611][ T5095] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 201.663271][ T5095] SELinux: failed to load policy [ 201.677279][ T5097] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 201.697446][ T36] audit: type=1400 audit(1750795785.356:508): avc: denied { map } for pid=5098 comm="syz.5.1879" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 201.728492][ T5101] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1880'. [ 201.759473][ T5105] can0: slcan on ttyS3. [ 201.852756][ T5105] can0 (unregistered): slcan off ttyS3. [ 202.129713][ T31] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 202.279708][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 202.285855][ T31] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 202.295070][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.303957][ T31] usb 6-1: config 0 descriptor?? [ 202.472837][ T350] usb 10-1: 0:2 : does not exist [ 202.481285][ T350] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 202.494609][ T350] usb 10-1: USB disconnect, device number 11 [ 202.502763][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 202.633499][ T36] audit: type=1400 audit(1750795786.296:509): avc: denied { ioctl } for pid=5142 comm="syz.9.1886" path="mnt:[4026532391]" dev="nsfs" ino=4026532391 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 202.719524][ T5122] rust_binder: Write failure EINVAL in pid:669 [ 202.799512][ T5153] overlayfs: failed to resolve './file0': -2 [ 202.930781][ T31] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 202.940784][ T31] asix 6-1:0.0: probe with driver asix failed with error -61 [ 202.949637][ T5160] overlay: ./file0 is not a directory [ 202.949690][ T36] audit: type=1400 audit(1750795786.595:510): avc: denied { mounton } for pid=5154 comm="syz.8.1891" path="/153/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 202.978246][ T5161] netlink: 'syz.9.1892': attribute type 63 has an invalid length. [ 202.986118][ T5161] netlink: 5 bytes leftover after parsing attributes in process `syz.9.1892'. [ 202.995037][ T5161] gretap0: entered allmulticast mode [ 203.000610][ T5161] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 203.627269][ T5166] syzkaller0: entered promiscuous mode [ 203.632791][ T5166] syzkaller0: entered allmulticast mode [ 203.830875][ T36] audit: type=1400 audit(1750795787.418:511): avc: denied { getopt } for pid=5170 comm="syz.4.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 203.830984][ T5171] tmpfs: Invalid uid '0x00000000ffffffff' [ 204.148747][ T324] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 204.309088][ T324] usb 5-1: Using ep0 maxpacket: 8 [ 204.315185][ T324] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 204.324248][ T324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.332729][ T324] usb 5-1: config 0 descriptor?? [ 204.381051][ T36] audit: type=1400 audit(1750795787.933:512): avc: denied { map } for pid=5179 comm="syz.9.1898" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 204.459506][ T5186] rust_binder: Write failure EFAULT in pid:252 [ 204.494356][ T5188] can0: slcan on ttyS3. [ 204.641688][ T5188] can0 (unregistered): slcan off ttyS3. [ 204.656375][ T5212] rust_binder: Error while translating object. [ 204.656407][ T5212] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 204.662854][ T5212] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:258 [ 204.695895][ T5219] rust_binder: Error in use_page_slow: ESRCH [ 204.695922][ T5219] rust_binder: use_range failure ESRCH [ 204.701979][ T5219] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 204.707919][ T5219] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 204.716049][ T5219] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:260 [ 204.749652][ T316] udevd[316]: symlink '../../loop9' '/dev/disk/by-diskseq/52.tmp-b7:9' failed: Read-only file system [ 204.760405][ T1111] udevd[1111]: symlink '../../loop5' '/dev/disk/by-diskseq/53.tmp-b7:5' failed: Read-only file system [ 204.785334][ T316] udevd[316]: symlink '../../loop5' '/dev/disk/by-diskseq/53.tmp-b7:5' failed: Read-only file system [ 204.793304][ T1111] udevd[1111]: symlink '../../loop9' '/dev/disk/by-diskseq/52.tmp-b7:9' failed: Read-only file system [ 204.801242][ T316] udevd[316]: symlink '../../loop5' '/dev/disk/by-diskseq/53.tmp-b7:5' failed: Read-only file system [ 204.810807][ T1111] udevd[1111]: symlink '../../loop9' '/dev/disk/by-diskseq/52.tmp-b7:9' failed: Read-only file system [ 204.834491][ T316] udevd[316]: symlink '../../loop9' '/dev/disk/by-diskseq/55.tmp-b7:9' failed: Read-only file system [ 204.892110][ T316] udevd[316]: symlink '../../loop9' '/dev/disk/by-diskseq/55.tmp-b7:9' failed: Read-only file system [ 204.908290][ T36] audit: type=1400 audit(1750795788.429:513): avc: denied { read append } for pid=5235 comm="syz.9.1908" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 204.931698][ T36] audit: type=1400 audit(1750795788.429:514): avc: denied { open } for pid=5235 comm="syz.9.1908" path="/103/file0/.log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 205.185734][ T543] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 205.346068][ T543] usb 10-1: Using ep0 maxpacket: 16 [ 205.349061][ T349] usb 6-1: USB disconnect, device number 65 [ 205.358488][ T543] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.363685][ T316] udevd[316]: symlink '../../loop5' '/dev/disk/by-diskseq/54.tmp-b7:5' failed: Read-only file system [ 205.372409][ T543] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.390324][ T543] usb 10-1: config 0 interface 0 has no altsetting 0 [ 205.397290][ T543] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 205.406908][ T543] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.408282][ T316] udevd[316]: symlink '../../loop5' '/dev/disk/by-diskseq/54.tmp-b7:5' failed: Read-only file system [ 205.417868][ T543] usb 10-1: config 0 descriptor?? [ 205.445248][ T316] udevd[316]: symlink '../../loop5' '/dev/disk/by-diskseq/54.tmp-b7:5' failed: Read-only file system [ 205.447362][ T5243] can0: slcan on ttyS3. [ 205.677937][ T5242] can0 (unregistered): slcan off ttyS3. [ 205.694771][ T316] udevd[316]: symlink '../../loop5' '/dev/disk/by-diskseq/54.tmp-b7:5' failed: Read-only file system [ 205.863634][ T543] usbhid 10-1:0.0: can't add hid device: -71 [ 205.869721][ T543] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 205.887721][ T543] usb 10-1: USB disconnect, device number 12 [ 205.976839][ T349] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 206.149063][ T349] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 206.157207][ T349] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.167337][ T349] usb 6-1: config 0 has no interface number 0 [ 206.174770][ T349] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 206.183824][ T349] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.191831][ T349] usb 6-1: Product: syz [ 206.195986][ T349] usb 6-1: Manufacturer: syz [ 206.200557][ T349] usb 6-1: SerialNumber: syz [ 206.205787][ T349] usb 6-1: config 0 descriptor?? [ 206.290655][ T324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 206.300872][ T324] asix 5-1:0.0: probe with driver asix failed with error -71 [ 206.310910][ T324] usb 5-1: USB disconnect, device number 15 [ 206.430796][ T5290] loop2: detected capacity change from 0 to 16384 [ 206.431948][ T316] udevd[316]: symlink '../../loop9' '/dev/disk/by-diskseq/55.tmp-b7:9' failed: Read-only file system [ 206.442406][ T349] usb 6-1: USB disconnect, device number 66 [ 206.466860][ T1111] udevd[1111]: symlink '../../loop2' '/dev/disk/by-diskseq/56.tmp-b7:2' failed: Read-only file system [ 206.493622][ T5290] I/O error, dev loop2, sector 2048 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0 [ 206.529591][ T316] udevd[316]: symlink '../../loop2' '/dev/disk/by-diskseq/56.tmp-b7:2' failed: Read-only file system [ 206.545143][ T316] udevd[316]: symlink '../../loop2' '/dev/disk/by-diskseq/56.tmp-b7:2' failed: Read-only file system [ 206.864155][ T324] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 206.997270][ T5302] /dev/rnullb0: Can't open blockdev [ 207.011689][ T5304] binder: Unknown parameter 'qt' [ 207.017714][ T5299] overlay: ./file0 is not a directory [ 207.025956][ T324] usb 10-1: not running at top speed; connect to a high speed hub [ 207.036808][ T324] usb 10-1: config 0 has an invalid interface number: 14 but max is 1 [ 207.042550][ T5307] overlayfs: missing 'lowerdir' [ 207.045215][ T324] usb 10-1: config 0 has an invalid interface number: 37 but max is 1 [ 207.058066][ T324] usb 10-1: config 0 has an invalid interface number: 237 but max is 1 [ 207.066345][ T324] usb 10-1: config 0 has 3 interfaces, different from the descriptor's value: 2 [ 207.075407][ T324] usb 10-1: config 0 has no interface number 0 [ 207.081589][ T324] usb 10-1: config 0 has no interface number 1 [ 207.088626][ T324] usb 10-1: config 0 has no interface number 2 [ 207.094812][ T324] usb 10-1: config 0 interface 14 altsetting 75 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 207.106393][ T324] usb 10-1: config 0 interface 14 altsetting 75 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 207.118280][ T324] usb 10-1: config 0 interface 14 altsetting 75 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 207.129420][ T324] usb 10-1: config 0 interface 14 altsetting 75 has an invalid descriptor for endpoint zero, skipping [ 207.140403][ T324] usb 10-1: config 0 interface 14 altsetting 75 has a duplicate endpoint with address 0x1, skipping [ 207.151577][ T324] usb 10-1: config 0 interface 14 altsetting 75 has a duplicate endpoint with address 0x9, skipping [ 207.162380][ T324] usb 10-1: config 0 interface 14 altsetting 75 has an invalid descriptor for endpoint zero, skipping [ 207.173341][ T324] usb 10-1: config 0 interface 14 altsetting 75 has an invalid descriptor for endpoint zero, skipping [ 207.184406][ T324] usb 10-1: config 0 interface 14 altsetting 75 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 207.194238][ T5312] devtmpfs: Unknown parameter 'nr_inoYes' [ 207.195485][ T324] usb 10-1: config 0 interface 37 altsetting 4 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 207.212039][ T324] usb 10-1: config 0 interface 37 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 207.222766][ T324] usb 10-1: config 0 interface 37 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 207.233528][ T324] usb 10-1: config 0 interface 37 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 207.249207][ T324] usb 10-1: too many endpoints for config 0 interface 237 altsetting 22: 251, using maximum allowed: 30 [ 207.260377][ T324] usb 10-1: config 0 interface 237 altsetting 22 has a duplicate endpoint with address 0xE, skipping [ 207.271387][ T324] usb 10-1: config 0 interface 237 altsetting 22 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 207.284972][ T324] usb 10-1: config 0 interface 14 has no altsetting 0 [ 207.292059][ T324] usb 10-1: config 0 interface 37 has no altsetting 0 [ 207.298849][ T324] usb 10-1: config 0 interface 237 has no altsetting 0 [ 207.307653][ T324] usb 10-1: Dual-Role OTG device on HNP port [ 207.313846][ T324] usb 10-1: New USB device found, idVendor=2c4e, idProduct=0100, bcdDevice=b5.39 [ 207.322994][ T324] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.331103][ T324] usb 10-1: Product: 鶕ﲅ慺墁ｦ堵赛☙묜⦵僋퍉턪렬즴捹㈨乶춻鎈埛衡镆卿ᩫ␝똹ꠗ὘ꐯ얄鎉椈傶ꫤ੔샽︼駕䑭쥸쩨嬄捺⤵킩ሼ碐꣙흓昌Ὃ廰环窺ଛ㻛痴왶弅뀯㬇怘䛆꒎눋鮮鮺㬣囐ჸﴷ紩輟᧏排흏ᎊ닖胸㛟쐉Ꮽ냆샒∓ÿ䲋堍ऴㅿɸ寎淵뾎풓듽귿戆ከ錃 [ 207.365798][ T324] usb 10-1: Manufacturer: 䌪兗멼7悆鷹쯣′稃謅픶ⴟ䪕ꦐ [ 207.374290][ T324] usb 10-1: SerialNumber: syz [ 207.379506][ T324] usb 10-1: config 0 descriptor?? [ 207.420063][ T349] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 207.580430][ T349] usb 5-1: Using ep0 maxpacket: 32 [ 207.586953][ T349] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.597896][ T349] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.608170][ T324] usb 10-1: USB disconnect, device number 13 [ 207.609808][ T349] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 207.624827][ T349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.637410][ T349] usb 5-1: config 0 descriptor?? [ 208.008054][ T10] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 208.074407][ T349] savu 0003:1E7D:2D5A.001D: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 208.171076][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.183443][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.192542][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.200581][ T10] usb 6-1: Product: syz [ 208.204737][ T10] usb 6-1: Manufacturer: syz [ 208.209302][ T10] usb 6-1: SerialNumber: syz [ 208.353886][ T349] usb 5-1: USB disconnect, device number 16 [ 208.425008][ T324] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 208.585333][ T324] usb 10-1: Using ep0 maxpacket: 16 [ 208.591631][ T324] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.601833][ T324] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 208.612175][ T324] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 208.621328][ T324] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.629407][ T324] usb 10-1: Product: syz [ 208.633644][ T324] usb 10-1: Manufacturer: syz [ 208.638309][ T324] usb 10-1: SerialNumber: syz [ 209.073343][ T324] usb 10-1: cannot find UAC_HEADER [ 209.080006][ T324] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 209.089966][ T324] usb 10-1: USB disconnect, device number 14 [ 209.286055][ T10] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 209.292722][ T10] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 209.300223][ T10] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 209.624347][ T36] audit: type=1400 audit(1750795792.844:515): avc: denied { map } for pid=5337 comm="syz.9.1931" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:console_device_t:s0" [ 209.651492][ T36] audit: type=1400 audit(1750795792.844:516): avc: denied { execute } for pid=5337 comm="syz.9.1931" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:console_device_t:s0" [ 209.721928][ T10] cdc_ncm 6-1:1.0: setting tx_max = 88 [ 209.729567][ T10] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 209.743129][ T10] usb 6-1: USB disconnect, device number 67 [ 209.750712][ T10] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 210.291150][ T36] audit: type=1326 audit(1750795793.461:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5386 comm="syz.5.1937" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3cc298e929 code=0x0 [ 211.130277][ T5399] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 144, limit: 208, size: 179) [ 211.130295][ T5399] rust_binder: Error while translating object. [ 211.140863][ T5399] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 211.147085][ T5399] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:121 [ 211.191013][ T5401] fuse: Unknown parameter 'user_i00000000000000000003' [ 211.208760][ T5401] overlay: filesystem on ./bus not supported as upperdir [ 213.011322][ T45] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 213.094775][ T5458] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1966'. [ 213.182351][ T36] audit: type=1326 audit(1750795796.155:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5466 comm="syz.9.1970" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f613bd8e929 code=0x0 [ 213.235742][ T45] usb 6-1: Using ep0 maxpacket: 8 [ 213.241927][ T45] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 213.250363][ T45] usb 6-1: config 179 has no interface number 0 [ 213.256698][ T45] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 213.268033][ T45] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 213.279619][ T45] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 213.291015][ T45] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 213.302682][ T45] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 213.316255][ T45] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 213.325603][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.340743][ T5441] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 213.396116][ T5478] overlayfs: missing 'lowerdir' [ 213.780425][ T45] usb 6-1: USB disconnect, device number 68 [ 213.786417][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 213.786450][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 214.067497][ T5488] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 214.067817][ T5488] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 214.074358][ T5488] rust_binder: Read failure Err(EFAULT) in pid:304 [ 214.083258][ T5488] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 214.090057][ T5488] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:304 [ 214.711059][ T45] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 214.882103][ T45] usb 6-1: Using ep0 maxpacket: 16 [ 214.888246][ T45] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 214.897576][ T45] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.907665][ T45] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.918007][ T45] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 214.927116][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.935111][ T45] usb 6-1: Product: syz [ 214.939282][ T45] usb 6-1: Manufacturer: syz [ 214.943864][ T45] usb 6-1: SerialNumber: syz [ 215.184570][ T5537] netlink: 324 bytes leftover after parsing attributes in process `syz.9.2001'. [ 215.237134][ T5541] kvm: pic: non byte write [ 215.378915][ T45] usb 6-1: 0:2 : does not exist [ 215.736096][ T36] audit: type=1400 audit(1750795798.550:519): avc: denied { write } for pid=5576 comm="syz.9.2019" name="bus" dev="tmpfs" ino=808 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 215.758285][ T36] audit: type=1400 audit(1750795798.550:520): avc: denied { open } for pid=5576 comm="syz.9.2019" path="/138/bus" dev="tmpfs" ino=808 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 215.874457][ T5590] ------------[ cut here ]------------ [ 215.879973][ T5590] WARNING: CPU: 1 PID: 5590 at mm/page_alloc.c:5159 __alloc_pages_noprof+0xe4/0x6c0 [ 215.889377][ T5590] Modules linked in: [ 215.893288][ T5590] CPU: 1 UID: 0 PID: 5590 Comm: syz.9.2025 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 215.906760][ T5590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.916844][ T5590] RIP: 0010:__alloc_pages_noprof+0xe4/0x6c0 [ 215.922767][ T5590] Code: 0f 1f 44 00 00 41 83 fd 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 34 32 ee 05 00 0f 85 c4 00 00 00 c6 05 27 32 ee 05 01 <0f> 0b 31 c0 e9 b6 00 00 00 41 83 fd 0a 0f 87 aa 00 00 00 44 89 6c [ 215.942398][ T5590] RSP: 0018:ffffc900061e7680 EFLAGS: 00010246 [ 215.948466][ T5590] RAX: 0000000000000000 RBX: 1ffff92000c3ced4 RCX: 0000000000000000 [ 215.956454][ T5590] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900061e7728 [ 215.964441][ T5590] RBP: ffffc900061e77a8 R08: ffffc900061e7727 R09: 0000000000000000 [ 215.972413][ T5590] R10: ffffc900061e7710 R11: fffff52000c3cee5 R12: ffffc900061e76c0 [ 215.980417][ T5590] R13: 0000000000000016 R14: dffffc0000000000 R15: 0000000000000000 [ 215.988409][ T5590] FS: 00007f613cc126c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 215.997610][ T5590] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 216.004200][ T5590] CR2: 0000200000001000 CR3: 0000000126f0e000 CR4: 00000000003526b0 [ 216.012213][ T5590] Call Trace: [ 216.015518][ T5590] [ 216.018522][ T5590] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 216.024264][ T5590] ? __kasan_slab_alloc+0x73/0x90 [ 216.029324][ T5590] ? hashtab_init+0xdb/0x1f0 [ 216.033921][ T5590] ___kmalloc_large_node+0x9c/0x1d0 [ 216.039136][ T5590] ? ebitmap_read+0x21d/0x990 [ 216.043816][ T5590] ? hashtab_init+0xdb/0x1f0 [ 216.048437][ T5590] __kmalloc_large_node_noprof+0x1e/0xe0 [ 216.054074][ T5590] ? hashtab_init+0xdb/0x1f0 [ 216.058673][ T5590] __kmalloc_noprof+0x26d/0x450 [ 216.063536][ T5590] hashtab_init+0xdb/0x1f0 [ 216.067942][ T5590] ? policydb_read+0x86f/0x28c0 [ 216.072810][ T5590] symtab_init+0x44/0x70 [ 216.077054][ T5590] policydb_read+0x8fe/0x28c0 [ 216.081741][ T5590] ? kasan_save_alloc_info+0x40/0x50 [ 216.087027][ T5590] ? __cfi_policydb_read+0x10/0x10 [ 216.092157][ T5590] ? security_load_policy+0x128/0x12f0 [ 216.097621][ T5590] security_load_policy+0x162/0x12f0 [ 216.102942][ T5590] ? irqentry_exit+0x4a/0x60 [ 216.107543][ T5590] ? exc_page_fault+0x66/0xc0 [ 216.112233][ T5590] ? asm_exc_page_fault+0x2b/0x30 [ 216.117256][ T5590] ? __cfi_security_load_policy+0x10/0x10 [ 216.122992][ T5590] ? rep_movs_alternative+0x4a/0xa0 [ 216.128195][ T5590] sel_write_load+0x298/0x5e0 [ 216.132892][ T5590] ? futex_wait+0x288/0x540 [ 216.137396][ T5590] ? __cfi_sel_write_load+0x10/0x10 [ 216.142575][ T5590] ? __cfi_futex_wait+0x10/0x10 [ 216.147446][ T5590] ? bpf_lsm_file_permission+0xd/0x20 [ 216.152902][ T5590] ? __cfi_sel_write_load+0x10/0x10 [ 216.158131][ T5590] vfs_write+0x3c0/0xe80 [ 216.162379][ T5590] ? __cfi_vfs_write+0x10/0x10 [ 216.167161][ T5590] ? __kasan_check_write+0x18/0x20 [ 216.172276][ T5590] ? mutex_lock+0x92/0x1c0 [ 216.176790][ T5590] ? __cfi_mutex_lock+0x10/0x10 [ 216.181650][ T5590] ? __fget_files+0x2c5/0x340 [ 216.186445][ T5590] ksys_write+0x141/0x250 [ 216.190782][ T5590] ? __cfi_ksys_write+0x10/0x10 [ 216.195622][ T5590] ? __kasan_check_write+0x18/0x20 [ 216.200761][ T5590] ? fpregs_restore_userregs+0x11d/0x260 [ 216.206393][ T5590] __x64_sys_write+0x7f/0x90 [ 216.210997][ T5590] x64_sys_call+0x271c/0x2ee0 [ 216.215678][ T5590] do_syscall_64+0x58/0xf0 [ 216.220130][ T5590] ? clear_bhb_loop+0x50/0xa0 [ 216.224816][ T5590] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 216.230790][ T5590] RIP: 0033:0x7f613bd8e929 [ 216.235203][ T5590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.254829][ T5590] RSP: 002b:00007f613cc12038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 216.263319][ T5590] RAX: ffffffffffffffda RBX: 00007f613bfb5fa0 RCX: 00007f613bd8e929 [ 216.271310][ T5590] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 216.279314][ T5590] RBP: 00007f613be10b39 R08: 0000000000000000 R09: 0000000000000000 [ 216.287311][ T5590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.295315][ T5590] R13: 0000000000000000 R14: 00007f613bfb5fa0 R15: 00007ffe931619d8 [ 216.303714][ T5590] [ 216.306750][ T5590] ---[ end trace 0000000000000000 ]--- [ 216.312249][ T5590] SELinux: failed to load policy [ 216.744398][ T45] usb 6-1: 1:0: cannot get min/max values for control 6 (id 1) [ 216.755364][ T45] usb 6-1: USB disconnect, device number 69