last executing test programs: 4m25.971296174s ago: executing program 1 (id=15): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) clock_settime(0xcd1f6467c1540c16, &(0x7f00000000c0)) (async) io_setup(0x2, &(0x7f0000000000)=0x0) r2 = eventfd(0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r2, 0x0, 0x0, 0xffffffffffffff30}]) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) signalfd4(r3, &(0x7f0000000000), 0x8, 0x0) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r4, 0x40187013, &(0x7f0000000040)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x3}) 4m25.91202354s ago: executing program 1 (id=16): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0x4a40, 0x0) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) (async) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000540)='sched\x00') (async) exit(0xfffffffffffffff7) openat$ashmem(0xffffffffffffff9c, &(0x7f00000010c0), 0x400, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) r4 = syz_usb_connect$hid(0x5, 0x90, &(0x7f0000000380)=ANY=[@ANYRES64, @ANYRESOCT=r0, @ANYRES32], 0x0) open$dir(&(0x7f0000001100)='./file0\x00', 0x100200, 0x40) (async) r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x43501) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0x1}, 0x7, 0x41, &(0x7f0000000580)="6a3cc041d02ca092842ffbfa7a24075f8f839fff773fba04e81401000a17ea23f4edde1aac2138bd65d918aeb003ba9368c9c67aaaec1e043119164a3729d58da0b1b995bc8f75e509d49e51e8761191e953644c04ec59da424f159352ec2bedbda258a2a55e5c323a8c3e2c71fb60b1fa1ff703cdfe061e738e30a705a373e9442460e84fc7e2d42c47b7f68d2c78d00c17f63f54cef89a4ad214ec41b10961c02264ef222bb193695a0220e821e063a7e37554a8d4a4a51dfd1c2d0f0cc8545a296fa3573d8aff660dbabf0bf0c674baf295749595a57776ed12302ef6215c3bc04e239d152b95cf5702b41699b38127", 0xf1, 0x1000, 0xe6c3, 0x0, 0x2d, 0x7, &(0x7f0000000680)="067b90b52403880f5aacd94ecfc5e4cc31621865823380bc1c81c1ac713c279a75e08edfedd6243705783db6c2eb1ff2cc12026b16c27ea7a881a8e809193401f2186c3fbf7fb5cb44f9502cc7cb0c18b3e64438337c203058e077caf933924fd638df25c51f5b4baa50a576ef45e55f32683adb6368ad940373cd2ee884ae12d5e755cf42fa70b98768a1efeda332635bd0d79d1ca30cb6e84debf44faccb5de71366ac92cce46bb118aedfcaf585c3c33ea714219a4edee778413b19b4b2d384a76203cab18b0f05bb6047412d0888ebe1652ec5d7ae"}) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r6, 0x8915, &(0x7f00000000c0)={'batadv_slave_0\x00', {0x2, 0x0, @local}}) (async) poll(&(0x7f0000000200)=[{r6}, {r3, 0x4008}, {r0, 0x20}], 0x3, 0x4) (async) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r7, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000140)=0x7) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000e02700000000000000000000000000002d00000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c00000000000000ac14142c000000000000000000000000000000000000560000000000fdffffff01000000ac141410000000000000000000000000000000003200000000000000fe800000000000000000000000000500023500000000000000000000feffffff00000000ff010000000000000000000000000001000000003c00000002000000ff02000000000000000000000000000100000000010300"], 0x23c}}, 0x0) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r8, 0x0, 0x20, 0x0, &(0x7f0000000300)) 4m25.731422718s ago: executing program 1 (id=18): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x2) 4m25.728603258s ago: executing program 1 (id=19): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000008ec0)={{0x12, 0x1, 0x110, 0x2b, 0x95, 0xd9, 0x8, 0x4e2, 0x1412, 0xca10, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0xfa, 0xa0, 0xbf, [{{0x9, 0x4, 0x0, 0x8, 0x0, 0x8, 0x6, 0x62}}]}}]}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x447}}, 0x0, 0x0, 0x0}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x80002, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) r1 = socket(0x18, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x1d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') open(&(0x7f00000005c0)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) ioprio_set$uid(0x3, 0x0, 0x4000) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/208, 0xd0}, {&(0x7f0000001800)=""/221, 0xdd}, {&(0x7f0000004500)=""/4101, 0x1005}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/158, 0x9e}, {&(0x7f0000000480)=""/138, 0x8a}, {&(0x7f0000000300)=""/155, 0x9b}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000780)=""/280, 0x118}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x100}], 0x3, 0x40000100, 0x0) r3 = socket(0xa, 0x3, 0x3a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$poke(0x4, r5, &(0x7f0000000380), 0x10000) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0xd, @remote}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x7b3, 0x0, 0xd]}}, 0x5c) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) 4m24.913032069s ago: executing program 1 (id=24): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000a80)) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x20, 0x0, &(0x7f0000000180)=0x4d) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000040)={0x4}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0}) close(0x3) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x4, 0x0, &(0x7f0000000080)=[@exit_looper], 0x0, 0x0, 0x0}) 4m24.791448831s ago: executing program 1 (id=25): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 64) r1 = getpid() (rerun: 64) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x149) (async) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r3, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/custom1\x00', 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@mcast2, @remote, 0x17, 0x1e}}) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) eventfd(0x4) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/vmstat\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000140)) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, 0x0, 0x0) (async) recvmmsg$unix(r8, 0x0, 0x0, 0x400122a0, 0x0) sendmmsg(r8, 0x0, 0x0, 0x9200000000000000) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r7) sendmsg$IPVS_CMD_NEW_DEST(r8, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="a8000000acbff32899a13fb8922f5d00889f840814ef28cc491f8778b0a28a2d44456b9518ca5b24947109e650b245466cfa9bcf99a08357e468e08caaea88a46b1b8854596f8dacee4707d043003959", @ANYRES16=r9, @ANYBLOB="01002dbd7000ffdbdf250500000034000180070006007272000014000300fc0100000000000000000000000000030a0006006c626c637200000008000b007369700008000400080000000c00038006000400010100004c00028008000400fc99000014000100ac1414bb000000000000000000000000080003000400000014000100ff02000000000000000000000000000106000e004e2300000800030001000000"], 0xa8}}, 0x488d0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 4m24.779405482s ago: executing program 32 (id=25): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 64) r1 = getpid() (rerun: 64) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x149) (async) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r3, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/custom1\x00', 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@mcast2, @remote, 0x17, 0x1e}}) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) eventfd(0x4) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/vmstat\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000140)) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, 0x0, 0x0) (async) recvmmsg$unix(r8, 0x0, 0x0, 0x400122a0, 0x0) sendmmsg(r8, 0x0, 0x0, 0x9200000000000000) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r7) sendmsg$IPVS_CMD_NEW_DEST(r8, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="a8000000acbff32899a13fb8922f5d00889f840814ef28cc491f8778b0a28a2d44456b9518ca5b24947109e650b245466cfa9bcf99a08357e468e08caaea88a46b1b8854596f8dacee4707d043003959", @ANYRES16=r9, @ANYBLOB="01002dbd7000ffdbdf250500000034000180070006007272000014000300fc0100000000000000000000000000030a0006006c626c637200000008000b007369700008000400080000000c00038006000400010100004c00028008000400fc99000014000100ac1414bb000000000000000000000000080003000400000014000100ff02000000000000000000000000000106000e004e2300000800030001000000"], 0xa8}}, 0x488d0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 4m19.764947998s ago: executing program 3 (id=74): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close_range(r1, r0, 0x0) 4m19.74345232s ago: executing program 3 (id=75): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x1, 0x11, r0, 0x1) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) 4m19.519476383s ago: executing program 3 (id=76): mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) (async) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) futex_waitv(&(0x7f00000006c0)=[{0x7, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0xffffd000) socket(0x25, 0x1, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) write(r1, &(0x7f0000000400)="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", 0x1f000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0, 0xfffffe28}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) unshare(0x62040200) (async) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000024c0)=ANY=[], 0x90) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e25, @broadcast}, 0x10) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000003c0)='./file1/file3\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file1/file3\x00', 0x100) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0xf4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) (async) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0xffffffffffffffff, &(0x7f0000000280)='./bus/../file0\x00', 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/dev_mcast\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x420001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 4m19.502783334s ago: executing program 3 (id=77): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x12b8b000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0xa9501a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xb7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) fadvise64(r2, 0x3, 0x0, 0x4) fcntl$setflags(r1, 0x2, 0x1) 4m19.249328439s ago: executing program 3 (id=79): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x45, &(0x7f0000000100)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) 4m19.183691096s ago: executing program 3 (id=81): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x3, &(0x7f0000000040)=0x5, 0xfdda) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000280)={{{0x7, 0x1}}, 0xef, 0x1, &(0x7f0000000140)="779eef1fc7176397fcc6d2f1025ffefe399b9d38a50a6144d468cab574ae40dce57c15563490bb279e8560d02dd9a143c9b498f91f12675738e7e202cf0f916c373f6af5bc105acc36cd1d75b72c5b0a851447b89e91f492908c2ec7fceb515a41072a770b4464b7d05a576e6e366bb20b1ef00f9caed60a0a077fa63b22d5c634522add562833cec905b1386c837a46ec5146996f9cd6a0339bca6c32682ea077b59e04d02ae79bc0ea8acfeba9ef88eaf0aab67f4e45045c0ebaee4c8a901e636a50c480f5a05b6a207e7fc5a63070b4a71e60dcd29fdb5772498bc665fcbe39d0fe0aeecc9a577d4a318f59edc8"}) r3 = socket$tipc(0x1e, 0x2, 0x0) pwrite64(r3, &(0x7f00000002c0), 0x0, 0x100000000) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000100)={{{0x5, 0x1}}, 0xb2, 0xc9, &(0x7f0000000000)="2af3393ab47408a4586455c43a3eb01afece539221b06bbaaef778019a15c134c0db26af3ba644e650788e1d15486afbdba66932f77fbe6fabfb14622c1fff14da4efc09f7a1a6529b562697011ac1e3d24f8a1a425407a57bf09099627d58ad7aed8f02c51f799aa64b0e1b88cc1426bac18b7f0070da3b602b164fca49c7f490652a7eb8dc1596432a13be95032dc5bebf2c4c02be1d7cd8c7bc0846c0c849ba7dd2c80a8613fdba7ee34002b3cdc1d767"}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x5422, 0x0) r5 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000300)='cpuset.memory_spread_page\x00', 0x2, 0x0) pread64(r7, &(0x7f0000000100)=""/125, 0x7d, 0x1) read(r5, &(0x7f0000000340)=""/72, 0x48) close_range(r0, r1, 0x0) 4m19.130981161s ago: executing program 33 (id=81): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x3, &(0x7f0000000040)=0x5, 0xfdda) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000280)={{{0x7, 0x1}}, 0xef, 0x1, &(0x7f0000000140)="779eef1fc7176397fcc6d2f1025ffefe399b9d38a50a6144d468cab574ae40dce57c15563490bb279e8560d02dd9a143c9b498f91f12675738e7e202cf0f916c373f6af5bc105acc36cd1d75b72c5b0a851447b89e91f492908c2ec7fceb515a41072a770b4464b7d05a576e6e366bb20b1ef00f9caed60a0a077fa63b22d5c634522add562833cec905b1386c837a46ec5146996f9cd6a0339bca6c32682ea077b59e04d02ae79bc0ea8acfeba9ef88eaf0aab67f4e45045c0ebaee4c8a901e636a50c480f5a05b6a207e7fc5a63070b4a71e60dcd29fdb5772498bc665fcbe39d0fe0aeecc9a577d4a318f59edc8"}) r3 = socket$tipc(0x1e, 0x2, 0x0) pwrite64(r3, &(0x7f00000002c0), 0x0, 0x100000000) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000100)={{{0x5, 0x1}}, 0xb2, 0xc9, &(0x7f0000000000)="2af3393ab47408a4586455c43a3eb01afece539221b06bbaaef778019a15c134c0db26af3ba644e650788e1d15486afbdba66932f77fbe6fabfb14622c1fff14da4efc09f7a1a6529b562697011ac1e3d24f8a1a425407a57bf09099627d58ad7aed8f02c51f799aa64b0e1b88cc1426bac18b7f0070da3b602b164fca49c7f490652a7eb8dc1596432a13be95032dc5bebf2c4c02be1d7cd8c7bc0846c0c849ba7dd2c80a8613fdba7ee34002b3cdc1d767"}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x5422, 0x0) r5 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000300)='cpuset.memory_spread_page\x00', 0x2, 0x0) pread64(r7, &(0x7f0000000100)=""/125, 0x7d, 0x1) read(r5, &(0x7f0000000340)=""/72, 0x48) close_range(r0, r1, 0x0) 4m12.305009606s ago: executing program 2 (id=178): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x295) socket$netlink(0x10, 0x3, 0x0) syz_open_pts(0xffffffffffffffff, 0x900) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000001000)=0x2) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000844) close_range(r1, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) unshare(0x28040680) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0xe, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x80000000}}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000"], 0x24, 0x0) unshare(0x20000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/123, 0x7b, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x1, 0x25}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 4m12.203360966s ago: executing program 2 (id=181): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') preadv(r1, &(0x7f0000000840)=[{&(0x7f0000000700)=""/24, 0x18}], 0x1, 0x2a8, 0x8) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xdf9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8f8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sched_setscheduler(0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = dup2(r2, r2) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 4m10.84741229s ago: executing program 2 (id=190): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) times(&(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fd8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4m10.84701339s ago: executing program 2 (id=191): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f000072d000/0x3000)=nil, 0x3000, 0x65) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 64) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x4106c0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0)=r3, 0x12) (async, rerun: 64) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12) r8 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1, 0x12) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3) (async) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) (async) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x7fff, 0x9, 0x5, 0x6}, {0x33b2, 0x5, 0x4, 0x10001}, {0x1, 0x5, 0x1, 0x400}]}) (async) recvmsg(0xffffffffffffffff, 0x0, 0x12020) (async) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r9, &(0x7f0000000040)=ANY=[], 0x6) 4m10.776609187s ago: executing program 2 (id=192): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000006, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000006, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x5c, 0x0, &(0x7f0000000200)=[@dead_binder_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x2001, 0x2}, @fda={0x66646185, 0x3, 0x1, 0x13}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}, @decrefs, @exit_looper], 0x0, 0x0, 0x0}) 4m10.672901307s ago: executing program 2 (id=193): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x4, 0x4) (async) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) (async) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000040)={0x10, 0x0, {0x55, 0x7, 0x7, {0x6, 0xa}, {0x800, 0x80}, @ramp={0x1, 0x10, {0x2, 0x4, 0x72da, 0x2}}}, {0x53, 0x8, 0x18, {0x2003, 0x59e}, {0x9, 0xbc}, @cond=[{0x0, 0x4, 0xfffd, 0x200, 0x10, 0x8}, {0x6558, 0x1, 0x7, 0x9, 0x7, 0x6}]}}) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_control_io(r5, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write(r5, 0x81, 0x6, &(0x7f00000002c0)="b9425b44651d") (async) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f0000001200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_readahead}]}}) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r6, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 3m55.615672397s ago: executing program 34 (id=193): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x4, 0x4) (async) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) (async) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000040)={0x10, 0x0, {0x55, 0x7, 0x7, {0x6, 0xa}, {0x800, 0x80}, @ramp={0x1, 0x10, {0x2, 0x4, 0x72da, 0x2}}}, {0x53, 0x8, 0x18, {0x2003, 0x59e}, {0x9, 0xbc}, @cond=[{0x0, 0x4, 0xfffd, 0x200, 0x10, 0x8}, {0x6558, 0x1, 0x7, 0x9, 0x7, 0x6}]}}) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_control_io(r5, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write(r5, 0x81, 0x6, &(0x7f00000002c0)="b9425b44651d") (async) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f0000001200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_readahead}]}}) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r6, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 3m40.378854275s ago: executing program 4 (id=633): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x141342, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) pipe2(&(0x7f0000000040), 0x880) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3d) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x400000000000009, 0x7ffc, 0x10000, 0x800000010000, 0x4, 0x4002004c2, 0x0, 0x654, 0x0, 0x3ffffc, 0xfffffffffffffffd, 0x7fffffff, 0x20000000009, 0xffff, 0xfffffffffffffff7], 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x15c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000100)={0xeeee0000, 0x2000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m40.377264145s ago: executing program 4 (id=634): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}], 0x7}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}], 0x6, 0x40000100, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 3m40.377160504s ago: executing program 4 (id=635): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs\x00', 0x1ff) 3m40.377039055s ago: executing program 4 (id=636): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) unshare(0x62040200) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='pids.current\x00', 0x5000000, 0x0) readv(r2, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/249) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 3m40.215332981s ago: executing program 4 (id=637): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) socket$unix(0x1, 0x1, 0x0) (async) r0 = socket$unix(0x1, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) fstat(r1, &(0x7f0000000000)) read$eventfd(r1, &(0x7f0000000140), 0x8) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) (async) listen(r0, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prctl$PR_GET_NAME(0x10, 0x0) pipe2$9p(&(0x7f0000000580), 0x80000) (async) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) (async) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) (async) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f0000001200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_readahead}]}}) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048fc) write$binfmt_script(r5, &(0x7f00000002c0)={'#! ', '', [{0x20, '\xc0z\xa6\xd3\xdb\b\xeb\xa7\x80\xd8\xaf\xb4\xfc\b\t'}, {0x20, '\x05\xfa\x92S\xd7\x03R \xce=\xa4\x1eb_\x92\xe2\x8a*\xcf|\x121S\xb3\xfd2@\aJSR\xca\xab\x00\x91\xba\xa1\x00l\x86\t\x98\xc5\xb7\xd5\xd4\xee\xa4?_\xab\"``R\xf6\xe8P\x80\xc2<\f\xefS\x8e\x809\x18\xc5K\xc6\x1fKC\xdd8\xe5\x16(\x05\xedY\x80{\xb7~Z<\xce\xd35\xfcO`de\x15\xfc\xc27\ta\xb2\xae\x98D#h\x1a\x9aU'}]}, 0x84) close(r5) (async) close(r5) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r6, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 3m39.398598431s ago: executing program 4 (id=648): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x5) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0xde2dd94e801a86de, 0x5a) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0xde2dd94e801a86de, 0x5a) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r2) (async) r3 = dup(r2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0xa, &(0x7f0000000480)=[{0x7, 0x9, 0xb, 0x6}, {0x0, 0x8, 0xa, 0x80000000}, {0x2, 0x0, 0x9, 0x89}, {0x401, 0x5, 0x0, 0xffffa3fd}, {0x3, 0xf0, 0x9, 0x3e}, {0x43, 0x1, 0xa, 0x1c}, {0xc5, 0x7, 0x2, 0x2}, {0x4, 0x0, 0x3, 0x7ff}, {0x4, 0x44, 0x40, 0x40000}, {0xfff9, 0x80, 0x7, 0x8}]}) close_range(r4, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) move_mount(r6, &(0x7f0000000080)='./file0/../file0/file0\x00', r7, &(0x7f0000000180)='./file0/../file0\x00', 0x54) (async) move_mount(r6, &(0x7f0000000080)='./file0/../file0/file0\x00', r7, &(0x7f0000000180)='./file0/../file0\x00', 0x54) ioctl$KVM_CREATE_VCPU(r6, 0x81007702, 0x2) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x300, 0x0, 0x0, 0x2000, 0x3}, 0x0, &(0x7f0000000100)={0x244, 0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff}, 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x84014, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_off}, {@redirect_dir_follow}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x84014, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_off}, {@redirect_dir_follow}]}) r9 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r9, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) (async) mknodat$loop(r9, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r9, &(0x7f00000001c0)='./file0/../file0\x00', r7, &(0x7f0000000240)='./file0\x00', 0x400) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3m24.345023581s ago: executing program 35 (id=648): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x5) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0xde2dd94e801a86de, 0x5a) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0xde2dd94e801a86de, 0x5a) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r2) (async) r3 = dup(r2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0xa, &(0x7f0000000480)=[{0x7, 0x9, 0xb, 0x6}, {0x0, 0x8, 0xa, 0x80000000}, {0x2, 0x0, 0x9, 0x89}, {0x401, 0x5, 0x0, 0xffffa3fd}, {0x3, 0xf0, 0x9, 0x3e}, {0x43, 0x1, 0xa, 0x1c}, {0xc5, 0x7, 0x2, 0x2}, {0x4, 0x0, 0x3, 0x7ff}, {0x4, 0x44, 0x40, 0x40000}, {0xfff9, 0x80, 0x7, 0x8}]}) close_range(r4, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) move_mount(r6, &(0x7f0000000080)='./file0/../file0/file0\x00', r7, &(0x7f0000000180)='./file0/../file0\x00', 0x54) (async) move_mount(r6, &(0x7f0000000080)='./file0/../file0/file0\x00', r7, &(0x7f0000000180)='./file0/../file0\x00', 0x54) ioctl$KVM_CREATE_VCPU(r6, 0x81007702, 0x2) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x300, 0x0, 0x0, 0x2000, 0x3}, 0x0, &(0x7f0000000100)={0x244, 0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff}, 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x84014, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_off}, {@redirect_dir_follow}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x84014, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_off}, {@redirect_dir_follow}]}) r9 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r9, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) (async) mknodat$loop(r9, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r9, &(0x7f00000001c0)='./file0/../file0\x00', r7, &(0x7f0000000240)='./file0\x00', 0x400) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3m23.027407831s ago: executing program 0 (id=924): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r0 = userfaultfd(0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000000)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) unlink(&(0x7f0000000000)='./file0\x00') 3m22.203385423s ago: executing program 0 (id=928): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) geteuid() (async) r4 = geteuid() r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) fstat(r5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r8, &(0x7f0000000440)) (async) fstat(r8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r9) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x20, 0x14, 0x9, 0x2, 0x25dfdbff, {0x5}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x8000000000000000}]}, 0x20}}, 0x20004000) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r11, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r11, &(0x7f0000004200)={0x50, 0x0, r13, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) (async) write$FUSE_INIT(r11, &(0x7f0000004200)={0x50, 0x0, r13, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r11, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r11, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e110096704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6cc90e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f56c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111fe6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a5476941d71c6bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b6f178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab42fa6104d5a99aa36b73ac3622ccae122524c28a6557cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd41322a8b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc40821258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a166470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0xb0, 0x0, 0x0, [{{0x1, 0x1, 0x80, 0x2328, 0x6, 0x3, {0x5, 0x6, 0x9, 0x3, 0x9, 0x7, 0x6, 0xdf, 0x7, 0x6000, 0x2, r14, 0x0, 0xffffffff, 0xf026}}, {0x3, 0x8, 0x5, 0x3, '.&$#\\'}}]}, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000000980)="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", 0x2000, &(0x7f0000002b80)={&(0x7f00000001c0)={0x50, 0x0, 0xfffffffffffffffe, {0x7, 0x2b, 0x91ca, 0xffffffff80040200, 0x3, 0x5, 0x9, 0x80000000, 0x0, 0x0, 0x80, 0x100}}, &(0x7f0000000240)={0x18, 0x0, 0x9, {0x1000}}, &(0x7f0000000280)={0x18, 0x0, 0x7, {0x7}}, &(0x7f00000002c0)={0x18, 0x0, 0x4, {0x16e32}}, &(0x7f0000000300)={0x18, 0x0, 0xcb}, &(0x7f0000000340)={0x28, 0x0, 0x4, {{0x0, 0x7, 0x2}}}, &(0x7f0000000380)={0x60, 0xfffffffffffffff5, 0xd886, {{0x9, 0x5, 0x7, 0xfff, 0x6, 0x3, 0xfffffffb, 0x6}}}, &(0x7f0000000400)={0x18, 0x0, 0x9, {0x1}}, &(0x7f0000006380)=ANY=[@ANYBLOB="bc60ee32d661bcd3130002000000000073ba00000000000031a719286f445faa63a17f38427718c9c73100305b74b4934ab0a51ec44e494791f48f75b1a29a769cfb5aaf0fa2cff98fd87d5094b666cc0687eadaec35e646f7cac20f1b38594af2f159acffe5d4c857e47568e0f66c3b2613eba3b739d86e2878c182f34b4602f60774da453811f439c9a2e24f12d452d5fcdcb624186e2e6e67e2b1e81df67121e73194573681e28a5792b9f243581156f340cf419038dee7ab0e8d40587deee519b8c506162f"], &(0x7f0000000480)={0x20, 0xfffffffffffffff5, 0xb860, {0x0, 0x10}}, &(0x7f0000000540)={0x78, 0xfffffffffffffffe, 0x1, {0x3, 0x80000000, 0x0, {0x1, 0x0, 0x28f, 0x6, 0x9, 0xfffffffffffffffd, 0xc, 0x4, 0x6, 0x0, 0x8001, r3, 0x0, 0x1, 0xffffffff}}}, &(0x7f0000000640)={0x90, 0x0, 0x0, {0x2, 0x3, 0x5, 0x3, 0x6, 0x3, {0x6, 0x0, 0x80000000, 0x40, 0x80, 0x5, 0x6, 0x0, 0x712, 0xa000, 0x8001, r4, r7, 0x4, 0x8ec1}}}, &(0x7f00000062c0)=ANY=[@ANYBLOB="400000000000000000800000000000000400000000000000060000000000000013000000060000002e3f62696e64657266732f62696e7a7645fec6c5abcc4e0c7664657231000000000000"], &(0x7f0000000740)={0x10, 0x0, 0xfffffffffffffff7}, &(0x7f0000002980)={0xa0, 0x0, 0x3, {{0x2, 0x2, 0x2, 0x1, 0x2, 0xfff, {0x5, 0xb, 0x8, 0xb, 0x10001, 0x3, 0xfffffffd, 0x1ff, 0x80, 0xc000, 0x1, r9, r10, 0x7fff, 0xfffffff7}}, {0x0, 0x1}}}, &(0x7f0000000840)={0x20, 0x0, 0xab4b, {0x4000, 0x4, 0x7, 0x1}}, &(0x7f0000002a40)={0x130, 0x0, 0xfffffffffffff2ba, {0x200, 0xd, 0x0, '\x00', {0x28, 0x1c00, 0x1ff, 0xffff, r14, 0xee00, 0x8000, '\x00', 0x1, 0x2, 0x18c0, 0xa5f, {0x2, 0xfffffff7}, {0x67c, 0x6}, {0x8, 0x6}, {0x8}, 0x8, 0x9, 0x7, 0x1a8e}}}}) fstat(r1, &(0x7f00000000c0)) (async) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r15, r15) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r16 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r16, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xb, 0x0, 0x8e, 0x0, 0x0, 0x2000000}}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfaf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 3m22.116470282s ago: executing program 0 (id=929): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES16=r1], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) 3m20.859272965s ago: executing program 0 (id=952): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) r0 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0xb}, 0x800, 0x2, 0x1, 0x7, 0x7fc, 0xfffe}, 0x20) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x70bd2c, 0x25dfdbff}, 0x10}}, 0x20008000) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="020709090200000025bd7000fbdbdf007b5c937df8fcdd97f4f313e1fa4bd2aa371decd21a82da035b9150abe947444f27689a20a11b9708d6001000000000000088ce43d297be76ce64562cdbd0bc6b64da9eb9677bc05be4015a0c39de39f600ffe39422c6f67b9b1266701b17da5014add2b08d4d2fcdecd5f2c8dee7ce51601cc7dd37a49c8383a0e983fc"], 0x10}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000180)='wg2\x00', 0x4) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x2, 0x0, 0x29, r2}, 0x10) mmap(&(0x7f0000502000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0xd645b000) r3 = syz_io_uring_complete(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x289}) ioctl$SIOCGETSGCNT_IN6(r3, 0x89e1, &(0x7f00000002c0)={@remote, @remote}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r4, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000640)=ANY=[], 0xf0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="1d", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000340)}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000c00)=[@ip_retopts={{0x20, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x3, 0xf}, @generic={0x94, 0x8, "b22ead432046"}]}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000d80)}}, {{0x0, 0x0, 0x0}}], 0x6, 0x24004c41) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x9a, &(0x7f0000000180)=@string={0x9a, 0x3, "7500cca1d5df0a295a98ab100244b8b3dcc487db04c74ed651c071bcf189431d3840bec03cecf762fc6b85b8e9b287f8f7f82aec22dfe34f76ad5762fd75950d9cf7d8fe2f27dacff83903f33bcae193c4c299ad5650c23647c4aea9dd94880261d1a2095d04df8941c4aaaea5fdb8371e1e16746f41b8a448e2ec467982bfa6139e85dcaa9b66d688f09cf00882c1dddc4bc9be952b53f2"}}]}) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="2ba52ebd7000fddbdf251b00000006002100"], 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40c0) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) 3m20.327859848s ago: executing program 0 (id=965): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x147342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) preadv2(r1, &(0x7f0000000680)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000340)=""/169, 0xa9}, {&(0x7f0000000400)=""/164, 0xa4}, {&(0x7f00000004c0)=""/72, 0x48}, {&(0x7f00000005c0)=""/167, 0xa7}], 0x5, 0x9, 0x3, 0x10) fsetxattr(r1, &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000200)='\x00', 0x1, 0x0) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000000)={@local, @broadcast}) r2 = getpid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') ioprio_set$pid(0x3, r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xff86}], 0x20, 0x5405, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f00000000c0)=0x7, 0x4) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) sendfile(r0, r4, 0x0, 0x7ffff000) 3m20.278040773s ago: executing program 0 (id=966): stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) 3m14.760204769s ago: executing program 7 (id=1070): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000003840)={[0x100]}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0xa, 0x4e26, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 3m14.758998049s ago: executing program 7 (id=1071): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0) r1 = socket(0x8, 0x1, 0xfffffff9) syz_open_dev$char_usb(0xc, 0xb4, 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000008d"]) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @empty, 0x2}, 0x1c) r5 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r6, 0x8b2b, &(0x7f0000000000)={'wlan1\x00', @remote}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4008840) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0) (async) socket(0x8, 0x1, 0xfffffff9) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x3) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000008d"]) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @empty, 0x2}, 0x1c) (async) socket(0xa, 0x1, 0x0) (async) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) (async) bind$inet6(r5, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x26e1, 0x0) (async) close(r6) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) ioctl$SIOCSIFHWADDR(r6, 0x8b2b, &(0x7f0000000000)={'wlan1\x00', @remote}) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4008840) (async) 3m14.670290568s ago: executing program 7 (id=1072): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8083, 0x7, 0x300, 0x1dafa}, 0x10) (async) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8083, 0x7, 0x300, 0x1dafa}, 0x10) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000140)=0x0) r4 = getuid() mount$binderfs(&(0x7f0000000000), &(0x7f0000000080)='./binderfs2\x00', &(0x7f0000000100), 0x1010882, &(0x7f0000000180)={[{@max={'max', 0x3d, 0x1}}], [{@appraise_type}, {@obj_role}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, r3}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/rnullb0\x00'}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@euid_gt={'euid>', r4}}]}) read$FUSE(r2, &(0x7f0000002100)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$9p_unix(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x1100008, &(0x7f0000000340)={'trans=unix,', {[{@noxattr}, {@version_L}], [{@fowner_gt={'fowner>', r3}}, {@dont_appraise}, {@subj_user={'subj_user', 0x3d, 'appraise_type=imasig'}}, {@uid_gt={'uid>', r5}}]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x10, r1, 0xffffe000) 3m14.65405138s ago: executing program 7 (id=1073): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) r3 = socket$inet6(0xa, 0x802, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f00000001c0)='./file0\x00') setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f00000003c0), 0x4) sendto$inet6(r3, 0x0, 0x0, 0x40000c0, &(0x7f0000000180)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xac}}, 0x9}, 0x1c) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x23ca, @ipv4={'\x00', '\xff\xff', @local}, 0x8c}, 0x1c) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000000300000000000004050006"], 0x70}}, 0x0) sendmmsg(r8, &(0x7f0000000180), 0x3ef, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m13.832762031s ago: executing program 7 (id=1077): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003000c0b, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x1112}) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f0000000040)=0x6e, 0x0) shutdown(r3, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0xfffffd88, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003000c0b, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0) (async) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x1112}) (async) accept4$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f0000000040)=0x6e, 0x0) (async) shutdown(r3, 0x1) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r4, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0xfffffd88, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) (async) 3m13.707326923s ago: executing program 7 (id=1078): r0 = epoll_create(0x80) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0xb0000007}) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000080)="45ea4c4256d20f6695ec2146189dceaa4d270059316ea5a9abd1c0e9e36a5d34ae93b9dec1c4d27099068a9e2afe5b6c61d0bdb41269091dfb7452b19a92d1ee75def9775a4674df0ea8c3bd8e51a0a65cd35d88660077bc2d9a546dcf6b61988d5202fe7397b490fdd668ef0b42329027e7ca2702c1ff006ec03edbcdf74b7c713c627a556294e5f2a8c67e5d79e954526482676696e53c50a4b7fbacd4facc94b0b8876e355e6f2b5901bd867746f41cc32b9c7d27c1b4b09e9c54b16f476d501f2441e03813951aa33b332bb493719735cfb197d87f545e6d5c6d36863eb404f2a010a8781c9e8754", 0xea}, {&(0x7f0000000180)="df461c2d01feca8da11c3a1b3a204776db1703ba38317b384955ac7bba5a8586b122c03b5109db9f7f84d9f81fa6e69640df5d562d4f1cab6c298d96e16580f1d7d4f603696832fe16de874394c9444c9d87b2fdf95ebbecb53e689d92dded0cee02b817de332c5628aa462fcdccfb803238f2add8013f16ed0d6a66917d16e77266319b260aed9c57f54501b3f988fb35570da3a8b57df21a8d049595b65a06", 0xa0}, {&(0x7f0000000240)="66f89e3331223ff851a534cb79b1aca1f493441dd072218600ed7632e26960929fbe3871d9f24c356dc7f532a2b725ea2afaf8e3bda5121f1214c94fc8bcf6f6d0cfd941ec29df569cb8765965ff7a5b3286c42e9c327536ae6dce09178a79186f2708b3f6acfa5a4520e528f84d3104907a69bf8b19230ec4e403195460f8abad54f63b18e1b16bdb31968b0467b064308298131cc4f6696475c3551d0dae0c93fe88af2a6dcef954c6396f79b686298ff8cd910bc73de13263f27a19044a31061ab1b438b91e08ff682647136bd847a2632189fe", 0xd5}, {&(0x7f0000000340)="335114e4994fdd8519ae3233adbc97b93b267b618144a715c45405cbb26ec78e4c8c52238657a2b8de605cc8e6fc378878e74750ecd86817b4606ff979a602", 0x3f}], 0x4) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f00000003c0)={0x1, 'bond0\x00', {}, 0xf449}) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) read$FUSE(r2, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r4 = socket(0x2, 0x80000, 0xe9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000002540)={'hsr0\x00', &(0x7f0000002480)=@ethtool_flash={0x33, 0x8, './file0\x00'}}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000002580)={0x79, 0x0, 0x72b}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002640), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000002700)={&(0x7f0000002600), 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x1c, r5, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xd3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004091}, 0x20000001) openat$fuse(0xffffffffffffff9c, &(0x7f0000002740), 0x2, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000002780)='./file1\x00', 0x2c000, 0x42) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f00000027c0)={0xb}) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000002800)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) getdents(r1, &(0x7f0000002a40)=""/157, 0x9d) ioctl$TCGETA(r1, 0x5405, &(0x7f0000002b00)) mount$9p_fd(0x0, &(0x7f0000002b40)='./file0\x00', &(0x7f0000002b80), 0x200000, &(0x7f0000002bc0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@appraise_type}, {@subj_user={'subj_user', 0x3d, ',/](/l\''}}, {@fowner_gt={'fowner>', r3}}]}}) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000002c40)) ioctl$BLKPG(r1, 0x1269, &(0x7f0000002d40)={0x1, 0x0, 0x98, &(0x7f0000002c80)={0x3, 0x6ef, 0x9}}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4010, r6, 0x96512000) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000002d80)={{{@in=@multicast2, @in=@private=0xa010102, 0x4e24, 0x4, 0x4e21, 0x401, 0xa, 0x20, 0xa0, 0x16, 0x0, r3}, {0x2, 0xfffffffffffffffb, 0x1, 0x1, 0xff, 0x7fffffff, 0x5, 0x8}, {0x7f, 0x1, 0x6, 0x6}, 0x7fffffff, 0x6e6bb5, 0x2, 0x1, 0x3, 0x3}, {{@in=@empty, 0x4d2, 0xff}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3500, 0x2, 0x0, 0x10, 0x8, 0x80, 0x3}}, 0xe8) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000002e80)={0x0, 0x3, 0x7, 0x2, 0x5}) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000002ec0)={0x0, 0x2710}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002f00)='./file1/file0\x00', 0x80) ioctl$BTRFS_IOC_SUBVOL_CREATE(r7, 0x5000940e, &(0x7f0000002f40)={{r8}, "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"}) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000003f80)=0x100000001) 3m5.086107916s ago: executing program 36 (id=966): stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) 2m58.586281429s ago: executing program 37 (id=1078): r0 = epoll_create(0x80) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0xb0000007}) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000080)="45ea4c4256d20f6695ec2146189dceaa4d270059316ea5a9abd1c0e9e36a5d34ae93b9dec1c4d27099068a9e2afe5b6c61d0bdb41269091dfb7452b19a92d1ee75def9775a4674df0ea8c3bd8e51a0a65cd35d88660077bc2d9a546dcf6b61988d5202fe7397b490fdd668ef0b42329027e7ca2702c1ff006ec03edbcdf74b7c713c627a556294e5f2a8c67e5d79e954526482676696e53c50a4b7fbacd4facc94b0b8876e355e6f2b5901bd867746f41cc32b9c7d27c1b4b09e9c54b16f476d501f2441e03813951aa33b332bb493719735cfb197d87f545e6d5c6d36863eb404f2a010a8781c9e8754", 0xea}, {&(0x7f0000000180)="df461c2d01feca8da11c3a1b3a204776db1703ba38317b384955ac7bba5a8586b122c03b5109db9f7f84d9f81fa6e69640df5d562d4f1cab6c298d96e16580f1d7d4f603696832fe16de874394c9444c9d87b2fdf95ebbecb53e689d92dded0cee02b817de332c5628aa462fcdccfb803238f2add8013f16ed0d6a66917d16e77266319b260aed9c57f54501b3f988fb35570da3a8b57df21a8d049595b65a06", 0xa0}, {&(0x7f0000000240)="66f89e3331223ff851a534cb79b1aca1f493441dd072218600ed7632e26960929fbe3871d9f24c356dc7f532a2b725ea2afaf8e3bda5121f1214c94fc8bcf6f6d0cfd941ec29df569cb8765965ff7a5b3286c42e9c327536ae6dce09178a79186f2708b3f6acfa5a4520e528f84d3104907a69bf8b19230ec4e403195460f8abad54f63b18e1b16bdb31968b0467b064308298131cc4f6696475c3551d0dae0c93fe88af2a6dcef954c6396f79b686298ff8cd910bc73de13263f27a19044a31061ab1b438b91e08ff682647136bd847a2632189fe", 0xd5}, {&(0x7f0000000340)="335114e4994fdd8519ae3233adbc97b93b267b618144a715c45405cbb26ec78e4c8c52238657a2b8de605cc8e6fc378878e74750ecd86817b4606ff979a602", 0x3f}], 0x4) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f00000003c0)={0x1, 'bond0\x00', {}, 0xf449}) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) read$FUSE(r2, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r4 = socket(0x2, 0x80000, 0xe9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000002540)={'hsr0\x00', &(0x7f0000002480)=@ethtool_flash={0x33, 0x8, './file0\x00'}}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000002580)={0x79, 0x0, 0x72b}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002640), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000002700)={&(0x7f0000002600), 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x1c, r5, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xd3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004091}, 0x20000001) openat$fuse(0xffffffffffffff9c, &(0x7f0000002740), 0x2, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000002780)='./file1\x00', 0x2c000, 0x42) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f00000027c0)={0xb}) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000002800)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) getdents(r1, &(0x7f0000002a40)=""/157, 0x9d) ioctl$TCGETA(r1, 0x5405, &(0x7f0000002b00)) mount$9p_fd(0x0, &(0x7f0000002b40)='./file0\x00', &(0x7f0000002b80), 0x200000, &(0x7f0000002bc0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@appraise_type}, {@subj_user={'subj_user', 0x3d, ',/](/l\''}}, {@fowner_gt={'fowner>', r3}}]}}) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000002c40)) ioctl$BLKPG(r1, 0x1269, &(0x7f0000002d40)={0x1, 0x0, 0x98, &(0x7f0000002c80)={0x3, 0x6ef, 0x9}}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4010, r6, 0x96512000) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000002d80)={{{@in=@multicast2, @in=@private=0xa010102, 0x4e24, 0x4, 0x4e21, 0x401, 0xa, 0x20, 0xa0, 0x16, 0x0, r3}, {0x2, 0xfffffffffffffffb, 0x1, 0x1, 0xff, 0x7fffffff, 0x5, 0x8}, {0x7f, 0x1, 0x6, 0x6}, 0x7fffffff, 0x6e6bb5, 0x2, 0x1, 0x3, 0x3}, {{@in=@empty, 0x4d2, 0xff}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3500, 0x2, 0x0, 0x10, 0x8, 0x80, 0x3}}, 0xe8) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000002e80)={0x0, 0x3, 0x7, 0x2, 0x5}) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000002ec0)={0x0, 0x2710}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002f00)='./file1/file0\x00', 0x80) ioctl$BTRFS_IOC_SUBVOL_CREATE(r7, 0x5000940e, &(0x7f0000002f40)={{r8}, "d2bcd6b035e3eeeaf2137837fd669ccd7e7522d690f9b224865ff9f6848c95ec030f864c8885c0eaa0d8e36ade2bad471db86314c83051523c05843f7927e2b1a2e9727c9dbf56e0b93a560884d27dd077517091e2dbcf1ee1fd4a459837dd26997e6e9db3a56bdfc30c5ce7b7937c28d95b41da00c67703e5b2d12f41f411e604e58434ff10d7c46116d6164cc018092d09231559d97947732e35af4c987337395d55fe90c7fddbe07cfabe938b9ac30dca6516672edba15e26ab618b5b464b62dea83c516d56d7e0a45ba13da4b41b4af094b7aee51a4734f75f6b09bafe199ddda8024aa51e033dba48c102a0805e79fa1034e42810944ba72138c9a8733db9e4d651549e84edf8c18dade3270ae8bd44e445c5c5cd91f63123339befbb9e69acda60182ee2723cbd93dd0df517c29c662f097dda2ff4bc7bfe977e886a9b7703a62070c81dd8b2564076583369a97d300984cdc7a460b83efba15bd42b8e1d328b95efc8739e98e19a49156316007bca98e279a9f137bc4b73f663678483f60e8406e899fd07e9103c69b8ef9827d3837de5d8a9fd2e2f7412377f0705a83ea75654ee67d28ef259f40611214e77455edecbb9ea0b18f0682fbb7b1e7eed953478924286d6e87dc16505ea092ba145aa354091f1094342ae307be6bad8505e76d3bc2f84dab6decb9fe65b40a1d85b17e7003465cba7f22deea48b634c78fccebc75150132c10fd22c967937e9b0947e0248fa03fe64e46b6be5138a19c4b536d35f5f44abe93c08da6b83e9de9e079f9d998c07c4025f688d7301e66f262ed42829c4595251d5c2088e1570d27fd3d58334853901609bbeeea7ef74d03b6653e03f67bcb297743176f908f8a2a9033f091c8ea2edf9fd92d71ed6aa501a0f011720683a93920fa0b6512210afa13c5a234c3639eb390c6d4fb5919ba13b1046ff1ba42f89b768867d9609fdd77cfaaf393830be85b38b3c9f8d3eee48e8f6b3fc927124c9ce254c50e74ef7475849d70e7958b989bb9b4ef1a6fafcf02f87cadf345169b56b5a18c57d3cffc3055a828c2d96a8cb4de4147aeb7ecf78da35b11577c83141ac24ecec82302626594361e423a3f0a391e8ba34b7f1bf824c8f3dba53b651dbde093f0da98ac8a664b449ed8145798be0e09b73e42681027b7cb0a2e83fab0b02bca7298f138144e9203f090d52d4ed9ef9f7fad23789ad8b63aa26d7d30927f922296cd2cefa5c8d804b98a604354da9c9976511e8c3970b56dda0214b71152ab6906fe514ee6cec803f0a94fb972e4f0d0d3734da8cac27a4e27b931554129e904de4a7e9fa441e6b1acacce3498f42f66427d96b348bf4af85442901a35c1e952586b4f055eec3b28e96753b625c861a9843b44fd37a3e67ceddf71356c072cbd8b8a9959323c3b205afb7de4e97e5df6c50458441a702adb0d77b946836bea6d91b8b0dcd47bd39147ccf61d34a311554a868a1ae14bb8ebcf426aa7ad920534dc01fc01c61c8f7c47e4c45c0951d8d39bbf363621905db87061c061f2f6aab7f82cf25c75a5e9363b0d64d0a53fe30aa4cb5f25ffa41b7ddb41e0f8596fc70258d73092139420a66f221dbd16e0b658d0f7f5de8be12c453aaf7eab01e8ab2a403e8fac6629eabf4772d290f737492430471cb84149bc1a868cfed4de90411159c4ca4ad0b7ffc281700cd16b4ad5d7ff4d41cba36ab714c59328896e003746c5d2fd10dde8f34b8a2d3ccef9c5ab06c445c5f406ffec5c9affeafcef46b26d0ea65c4fe74b6988a1b1431fe90cde01a8e4a4536ce340ab12153e66706006b5d0359425cbda2b1e6e807391a1cc2fa4666597a55b63d7135a6eef42ba26f7d663cf660e8075d939d354ce03335756f44f4bb1bb04ce892d6f8cfb5fb2bef3652b6f7f32767738767b59dc5d16d147e266b009f9da2900fa9db78088fb777eb1d2d7cdc19b93da29c01580eb2167eb7a5dd7e338c6ec87fc4b9a973b7b0784b72379947044d735cb2d4f0717690ff262688296afd42df4e4ddcb6d835122f1cbcd317f3106d35dacab6bba3dbebe3fb0ce8d3d552396f2a22ffea0af410d6d6c952c3ce7947b6f70af35e68d640aa9bd97e45f36819346dd4daed44e11953eb2052584bcc2def3dd05eaa96de1d01795e04c5f270251999141e3068439d201ac4c2784489553a4ed57e049d76aafc6493366e8ece506c27f50feaab9638b2e880fa57ae691968cc08abe15050b2bc07c11a8bcadb266f2b709448a3a1a6004d28ee894e3e74feee418ed61e4de10b5c86973b399a2914235ee34a06fc9013ed99b278cee65bdca48c783c4c52c0cdcc9385cf2bf0d548f996c3abd2e8d36acc78c49d9b9454658cfe10ff6908d43db106669afc600928fb62cfda0fa0e13c7fa8f5adf1c45bd542fe242ac12c3342da6871c677ed5125128fe9c54039d85c09887ff1f40f9443d51d44dbbb79ff7563e648b0ac8d8b0c09a102dd0e8760f24e9ec1790c5606c429e40203fcb856ab97ef911ddc6067ef98a69f4cf880e32f1715aaa972fdf02141b014eb461cf1faa00f98de327b35c787a807079b7e791f68c1c3087b6d5e8525cac8dbd948f1e81f2cdd59981e68de327c065aaf44bbd88cf226df8a3f92bffa4685c647336e871bdc7233c01d727eb00f95753e244d4c685fe0da97f63ddafb0c661c6422bf8a5a54f32dce8424cc124a7a6c68eec13e33088ae5b7334d68e52fe3a3df075d42aec033df4ee77ce73c85cec6fa95f80b9068fe59c264d49190b0ff94ac7cb45f62eaa9954b94546a7f1e772cb979a31e5f08e54ddf312af4c113e7f77857b89001e607b27e63d714078fc6b7926bf14be79a7f90b4f900e7bede9173549f878618d6c82b764e355412059bdb380fe872676a07842e4a9542b94f624227e364df3bffe880fbab6d1b44419b1fdf57f3c8c4f2d3675879312cd17a0670dedb2815f8e707b77094a1cb5affb70dbdf29bdc0971852825c60da5ae91279d39cd46343791b71850b0582bd41876ee09e554894cdd54b6bd1658c1532e1332ebe920b1e09fce6fa9e86364cf0bf611b39dd4a70a54aba297e7edf0d5bd2bcabc1aabc9ff4e9454c0dea278d97a7887448508ab6a9d4a811ec2e66b28ca5cec13dba0559228a437f4eb79f7ef73fa05903c90a1f91563777ba671f8f6f85ac37e7a466fb1e5d7103db579248b85beb9e04bc18508c684a346d2c86412188f2fbf67a9a3514e357cf1bd22fb4a8db9a11335db062f0e84baf0d124785336305c076b51c3dad9307e717f6fa8d1a214a27c00406d67bbf1dd908fef4338881d5698dfcc56ae0ca280f4e4853bced35815f73ece76b4ba60140d7759cab05c03b4c5139d32cc9a8f62898db5a64c4edd1f1e1cfc5d49e13a2a1641d19adce803bd0bfae0f599e5bc8631f2dddf695b36aeb165088973a3a749dc076d882f97e6cf5aa586f3d4e8ae44c0ffc5206cdc18db0f78f337bb262d1e93529e9cbe5f40c0bab30d2387dcd10b9f9041967abe409b11602809b472033b2e31c6740355905f284fc7eaf6ed4231fca07383427064c3b13fb97a783bca8f448b1d5e546f289dc03d8e70463ba6d28bc3ba04e9e0de89c4b8733a0b50a7f7e0c54eb2ac4921661ec8953ef1d8a3d04e443ca396ca62e9d6ab89b1cbc02610b09c7431bbb99a8dfa359041536f6d6f4168a3f6d3fe3fb0c28a2ab4f12d9d577af5cb44196046acb47fc5e64d7ce6d76243cc6bd04b373cc3ae85059dd31fbdac1ed06ff5ae91050382fb385d326235d6845c16dc7708e314fec3a4e76c4c1500631fae5a6fcb148ad97b01717b5a18de7ed2c888e6a5a4c2f6818f655a11d40acea574b1937951a856ac2ac9733e7dceec7e72b5354d4aa60f3c5901db938e21f75195c58df12b84321208a982e2ac249296957ffa6744fdfdf7d23fa18fda18ea9148406e3b21dd5c09b9c80c908b6ee603f7d8cdf66d23c8e8f90e91bdc495712ee3cf46cdf165650d0562b0889be359bd3e26a64fb2a3ae6a8f5354501f77bf3d329bf18de1641c1a3b96a3d064c529c1ffb67a727ad9bcbb9808d813b44209ccb50f622eff186c2d7c0227aa8f149cf016d1d2015ae28f85f4f5d237d7a887bc1fa100a83fa7147160dece52913d1cc7a2120a510d0543ef63f34e10f2c5c5c8959ffacea1c3e05471b18aed41f9869eed82b285c35358502fbcd18f688f374982248b9a6ab760294e2af4bc9a62bf74f2c28eb3986ea5b3f60c049e55bea0875a5bb8f258458704d53ebe61c581ffd7bbf0fb3ca2918dbc86ac51ccbeb3921ac52d66cac2e983f1ccbaede54fd9dd0afe2458494a9ad094c4dff52b23de0d83c256198eb12030ec70d6df9d5c55d608a9a10fe1de528e6fc27865ecb7cda9cdc094b60677026a99607c96854cbfea4380a300b43f211e979377613314efe388156edf1833b8672d02d3aeaa9e78fc0eb696edecf3b78ba639cda91f8a54634f9d60f3391f2277cd76cc98a2851be42a52ea04ea7eea31c63d2005df022db14e825bac974b43958543d361be515a68bc9b94deaa902bed94469f4fe16737c5cab84dc95f3942183f9eaca3a9f2ac5ba219ce5cc75d183d65c62149b168b9322e6aa05393b61a6add11296e3a74d91bb763d1649c0656082cec428bd36229a0ae312abc10c77c0c8f2d010769aa3c855aa2abd20a8cb86b135626ccc2f01d7e52bc929eaaf2a147fb5e381e73fa0f5c8038f8a36334c05d8aed4c696dbf54a76ccd36923b6611649718455a111049633f4dbafcfa0375fa3cd8020b709e37513383efde22929c2ad75fa007eda2fbf3db61e2644c3bfca1613b9491733f10a7dfddfc63df5259c49108e9554502e312a17543afa6dcce8c0721ca1db819455917c64478e64f9b056d5de1f169a42cefb004fdcd277007ff2d8d1be616005b271ecbfec2dec2fd586a976e49def60428db9b8a4f2441c9c80d3470e37a5179687b441a769b6f728a9e439574dbee8580d54174f26198f90aced1603a61ff3aa1b0565d9f055fe7ab79dd762fcdcde8c78d30e4af80631fcd3c4cff916ff8e285087e2e463dc2ece2b93d4ae26624b09270144a45361997553e0762d673329a97b6dbf1eafba8bcc433c9acad2fefbe2b625cc97335cdf4cdea43691119c5a264286cb384bee38766c6f7c6e85b497c424f58dc3829bd6331efb655cc2bcbb07fb6317a71156d6ce812371a31edc916185081edde4231e0c987096ed50d12abb1d2362c4a27a94668ed83b7506a780488d9bac7f9b7076d3298e4bf15065988b4041fe41501e0d83401013cc6858ffd69deb5b9ebb6954ea39137418dd3335a53c53b8fc46f47b9963edacd12699636a4ba654804f486a139c7be48747609a0d30330ed0c3da52e7f4da1331e8bbc68f73d44350830304d7cf2192c58960492b27fdbfa43e9c37c5f6be8efa8831c54849fd7dbf5a356ff52a9db87fc4b2057dffc1167defc5183756667769c4b4d4d51fa883f8ef151b1e8b075547f10588f6c5d8d19d93ab2da84fbec4ad3bc554bfc07d43fbd11774e9abcedc389d879c8cefee1f7872bca045e8f27d5c9c63a2730b8aed4dea5d6caf6d65ea088f0427182e587142844539577e2cc6480e55676ebfe8d32264e9ca38340ef8f27efa1c9380cc899ea8b5432449139ebacb7024d6315e7833050fd8239709592af059537dd47da18993e105adfac7a8d8790b745fbc909eb35a03dd4c0b809f7852bafef4d6bffdd2e538f8b0e96a9"}) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000003f80)=0x100000001) 5.623546713s ago: executing program 6 (id=3197): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r7}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r5, @ANYRES16=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYRES8=r5, @ANYRES32=r7, @ANYBLOB="de00340000018cdaaeb7c7484159b53c488faa07282355b9e9b0b1f89223fce9320af5e5e899e7445e2b9ee339de4cd324f159d2db4b5fe58ce2e436b701cfdcfed0f559f151461911c5ce9026a749a9c62dee7a0bc28753148c4e15579f385db1193416689476db227dcaa383eac7e067b51e8d69afbe02b7f1e0ca8e7305b66a2963186d59c7aa7c7625a1c195d7fa86ec0f55038834813d8a74c6c456f36af3611c7d3acdbd7dd70d6cbfe7"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000c0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000fbd7000fbdbdf250900000008003c00c800000005002900000000000500300000000000050030000100000005002a00010000000800ec6bb9d2e73cd43f0900aaaaaaaaaa20000008002c000010000008003a0004000000"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x360}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000001140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r9, 0x0) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa08, 0x0) r10 = socket$inet6(0xa, 0x3, 0x7) r11 = getpid() r12 = syz_pidfd_open(r11, 0x0) ioctl$UFFDIO_API(r12, 0xff03, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e23, 0x0, 0x0, 0x0, 0x2}, {0x2, 0x25db, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x2, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0xa, @in=@dev, 0x200, 0x0, 0x0, 0x6}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc}, {0x6ea}, 0x2, 0x0, 0x1}, {{@in=@local, 0x4d3, 0x32}, 0x0, @in=@multicast2, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1000}}, 0xe8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x14, 0x0, &(0x7f0000000300)=[@increfs_done={0x40106308, 0x3}], 0x0, 0x0, 0x0}) 5.495326226s ago: executing program 6 (id=3198): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x800000000088}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r3, 0x4068aea3, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) sendfile(r0, r0, 0x0, 0x7ffff000) 4.584376766s ago: executing program 6 (id=3201): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000003080)) (async) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165142, 0x0) syz_clone3(&(0x7f00000002c0)={0x100000, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) write(r1, &(0x7f0000000400)="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", 0x1f000) 4.568268908s ago: executing program 6 (id=3202): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xbdc, 0x0, 0x0, &(0x7f00000001c0)) r5 = gettid() pause() r6 = syz_open_procfs(r5, &(0x7f0000000180)='wchan\x00') pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 1.799344712s ago: executing program 8 (id=3220): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='o', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c040) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x200440c0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002c00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002c40)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r3, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$FS_IOC_SETFLAGS(r5, 0xc0606610, &(0x7f0000000040)=0x60) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x14, &(0x7f0000000100)={@mcast2}, 0x14) timer_create(0x7, &(0x7f0000000100)={0x0, 0x41, 0x4}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="28010000160001002bbd7000fedbdf250a0101010000000000000000000035603c722b79f010000000000000000001014e2300004e2400000a0080201d00000041ab26a3422f8251599de99066368b7a1e38e722d62053ffe3347adda37fda6ba1e3fcb5092c0dda2a91d4fae90570116e2a975a9a235f54b651b647e485b87e39af5610d2e5975cb49b9e9870415140cabf3abe89773b7f40f2b5814e913f8b704b615afec33741ebfdf3be19ea057edbfb65d64252f83534167f7a488f46d0b4fc93f8adebb286cb5aac42d4f9c8f629bfdf196db05313d352178fe95a203613ad577547119d00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000004d533000000ac1414100000000000000000000000000800000000000000b507000000000000000000000000000006000000000000000900000000000000faffffffffffffffffffffff000000000300000000000000020000000000000002000000000000000100000000000000faffffffffffffff0000000001000100f9ffffff2abd700000000000020002060100000000000000080000004f07000008001f00040000002c0013000a010100000000000000000000000000ac1e0001000000000000000000000000000000000a000000"], 0x128}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r10, &(0x7f0000000440)=ANY=[], 0xffffffffffffff04) setns(r10, 0x8000000) close_range(r6, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 1.760715005s ago: executing program 9 (id=3222): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) (async) r1 = socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000040)={@loopback, @multicast1, 0x0, "7d06320850ccb62a88778b7e462d2b6a36ca8cae6d9cd1b6c607497cb6a2f67a", 0xbc00, 0x7, 0x3}, 0x3c) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/123, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x1, 0x25}}, &(0x7f00000001c0)={0x0, 0x11, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1.683244783s ago: executing program 8 (id=3223): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x70, 0x1e, 0x9, 0x2, 0x25dfdbff, {0x1}, [@typed={0x59, 0x1, 0x0, 0x0, @str='/dev/rnlb0\x00\xe1\xb6y\xe7\xa3\xd3o\x8a\x84\xb7@~Z\xb4t\x87\x19\x87\xa6u\x80\xe4\x81\xad\xe7\xb4 \xc9\xcd\xd5o\xb6V\xc3\xebs\x8f\xba\xd5\xc4wm6\xb5\x85\xa2\x89<\fY\xc6K\xef[\xd0\x9a($R[C\x1d\x13/\x93\xea\x9f\xd1\xf8r\xca:\x88\x8d'}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000810}, 0x4000) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x118, r1, 0x20, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffe}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}]}, 0x118}, 0x1, 0x0, 0x0, 0x8100}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x40980, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x11) r4 = socket$netlink(0x10, 0x3, 0xc) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000000)={0x4, 0x4, 0x0, 0x0, 0x0, 0x7}) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x800000}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x7c, r1, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8010}, 0x4040000) 1.681832744s ago: executing program 9 (id=3224): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x40980, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x11) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x2}}, 0x10, 0x0}, 0x10) r2 = socket(0x10, 0x803, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000300)={0x5, &(0x7f0000000080)=[{0xf, 0x2}, {0x3, 0x3}, {0x80, 0x5f}, {0x8000, 0xb2}, {0x5, 0x1000}]}) recvmsg(r2, &(0x7f0000000400)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, 0x80, 0x0}, 0x142) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x82}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) getegid() close_range(r0, 0xffffffffffffffff, 0x0) 1.61230471s ago: executing program 8 (id=3225): r0 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000140)=0x4) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000200)={@void, @void, @eth={@multicast, @remote, @val={@void}, {@ipv4={0x800, @generic={{0x1c, 0x4, 0x1, 0x2, 0x78, 0x68, 0x0, 0x9, 0x11, 0x0, @private=0xa010101, @multicast1, {[@cipso={0x86, 0x32, 0x2, [{0x6, 0x5, "61a130"}, {0x5, 0x2}, {0x0, 0xb, "5e3d5805a1d94d8a10"}, {0x1, 0x10, "d89667bb15bddd1ba7e880badb4c"}, {0x7, 0x3, "bf"}, {0x7, 0x7, "b635f4dca7"}]}, @generic={0x89, 0x12, "a0d0ef2f747d6a4df219ee02b30d8a7d"}, @rr={0x7, 0x17, 0x89, [@rand_addr=0x64010101, @broadcast, @local, @multicast2, @remote]}, @noop]}}, "35158125311a3dd4"}}}}}, 0x8a) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x8, 0x0) dup3(r1, r4, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000000000)={0x1, 0x0, 0xe, 0x8000000000000003, 0xffffffffffffffff}) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) fcntl$getflags(r0, 0x401) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000081c09668800000000000109022400010000000f0904000004030000000921faff0890a98b1e09058103ff03c9ff"], 0x0) r9 = syz_clone(0x22000000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r9, 0x6, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) 1.580019464s ago: executing program 9 (id=3226): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCGIDLE(r0, 0x8010743f, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') pread64(r2, &(0x7f0000000040)=""/4096, 0x1000, 0x7ffffffffffff8) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0xffffd000) socket(0x25, 0x1, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(r1, &(0x7f0000000400)="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", 0x1000) 1.223408759s ago: executing program 6 (id=3227): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019c09000f01c2", 0x69}], 0x1, 0x7d, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000001280)="42188746643bf38e4f0d37e6536fb01d69e740ac36e2de6acc9820666c0c9afeb7f7e995299d18219729486b515d22d63518760f3a3f639547bccfe46e11e21c49a93524c3d2e4ddb58057dd676d08452608c7d75551543340438e3ab80dbac03b0c308ff57608afa27a7e5e7b1d8e3148eec326d8ea35b8a2f606d009a8a4550d89b96d4c65f28c6377d262073854b18b8a5bb9246a27c7535cb177cb7fef3d2975b0f97c58fa965dfa5f626e81be407efcdd32d3615710706e2be96069791835c3a7b881d8fe879e2ffe90ee4b38b3d60691058473992a66c57f5d29cf0238662e79a0609fa107b2e29bb93078d232179d5bf3a749e551537e3250c7be238fa0cbd88860782e745c64fd21830d1c209151dcbc66512f5697228cba6a782020c9decf2ec6c8d45cb1ab866895ff6905fcac6635baed37c644159e7672a7135d79bbc08e1ed35f5c29906056899b64f376955d391aa8f91b1da0af1cc5177485e705eb83d8e6bde2c68f03d2b434a776e2628951ae706f075e82fc6c9a1d1d8a9d4c8e8ef282c2c2369e0baea1b85b7534e65fca52c69fcc085e818fa1ab1de30b7e20c45170cd1b2be0b67706f5567a861698850d40356e48cbfb23d29487f1d7e4bfe4bebd33f26cfe8dc0040816dc57436ff085aab2b14591f280b59583222a53cc012d2f9f5e4621230907e57b0334d7fc623812a6b2bfd8c02988393d245393ef2957e80cebebdd9af30a41768b5670d3dbc252615887cb8b31b10a4536092bcdea80d8b21d74a080cf3ce5b818788bade4ce1bbd13a4a5aa4537e9d21e15261d129c22bfcae0e29116b15cc509ee96219c1920949aaef42038a9040aa60bfedcc2750d3748285587038b7635dd6d27b22165b651897be7f570df4e335e6dccf8b2eec7920631a7ee4dcabcf453a3145bc8cd5517097e068279bf83d4a51e6a0a239c37a3554c603be8fcaaf044ecd2567616a5a30e5eba1b6f85c1b69186b6a68dfc15efd8e9c629764060c6cfdf9b0a98cff376d6e872cf9668a85d236610b0bc557837152818f3fab80a470ead850df16c54f6f2bbf898ef88f623a579e4d079bb32a903ad1f3b2faa4679bb2030c5c38aaef87c5916c6fa5c8459ac4ffd2855b4c0daff88865b7a7ce9be1c3d9a30515e190318e3f3fea99e3f1e1e46f12b0d846f2270f53f5edbbd0a1ce9bb701ac45c81741348123258d4d4ec65d5c61e82144894f0feab16a445c5249cf7e7bb4313a463cf6bb50ff27bac96ffbb3c5578ea39130335014f8a7048542f0ad402b29f268ed61bd01d60f4dd1a6d0e63a2799b2db2409adf5c0c1523764b3b7ca324cc9552c1f6fc7c01007030d849d7552e5dd3886a9d628dcfa32c3799f40f0855fe6b1d4d5be533c4935eeb631b6d29fd1a91b6ac75f421704ec41d920ac6da0382f5443f613a6f22d371709fe5df70a9bb116adeb9f1a0f1cea8420ec43137519fe0148381bea1647be7d6cb037361b0efbfedaeff66721f907b06110fff0ce870099c5e80fd774a3906fc068f1a4352f5435463202a22e249b668e614fa2e6f7cab9a72ad686c5ff1e2063d994b5f42d5a8a2e0d575a11cbc8adcc7ae8bfb2dc8c5d23b1bc5c2d770eb844cd733c50e8a68212393a74db7a8e04687744267695627e69ed45ff06eb8ace7cebdb9e6080330ffbc9a30c76035ba17051020ca8249183e183103de7a167d000877354d9dfffbf8bbe5ae5d035193d36c1ed78aa565ecc1f61c90724ff44932fd8188b18e777736f753329b35b2f76ee1f4236a3cfc15e9773a254a919fb093a33f961bda24e24560040448ceddefe1f6609b71f760619f66f3a8ca89b8f81e836e8a0117ecaa79e476f7948ad74a7d3f736097c7c1a07b4226367c9b388475bf1c570dba6e7dfa09b277f03343d1f685fdb2bfbc36c5bc0f95ca2ed00184e5132d8eb64fa0426f2421a5e5c676b7dd63c1f3f7af3ffefd56a1af742aa2170459b06da838c8f91630541edea6ca6e95238cf6520c00b676a593b61743f607bb0391912c23da70ec421f49723981ea05bba3a91fbccf22b213052f21c60c4b5e5cca34bdc26a055b52bd94d24930266f7bb50d3409da5474e2f5f8b19205a11e43b573069579689e611cab668d1f12aa27db9bf6c0f11af1d124057235140f0484056b6fa6b8a039b60d8ce6408d1cb193146f6e64b17a11a2348d6fe6306abf85229834650668b79dd211f6256eebbcb2e15aed1c8516a893752ca4097ef8bacc0391f2a28d9ca3fd376b76f145e0191a960aa99a88b8dc5c43229ac4a5b371db656e5c7acea1a4750136bbfd784493a94565df5630b4c5f0e2c20960ad4d82e1d622a3e76e2cadfdbd13cf05a5a9291458bd5518426457972ecc6917adc775243dcf48474f551a97d0b69861f95feecffebf00a8ce75e299ab8ca8641c87279e0602ebf46472038789a74bdd51e9120de8c66285873d407718806c4235b47247af7a1cbf72fc78078a42af5a724b2993861ddd5dbd600673c00d1a1f3a07e167e0c2a4f9f0f0d78b02ec66a7f02b1414a4cfedb8bef7b96bb9eb07fdbe8e2429c8610d6d60aa36f6509190c07903d7dd5cad3d9a52c85fd32d4461eb6fa1e93d3a93e86593bb0efbc610615701ecd9afef6dcdefb77713de2382fc16a2d88358b1b1e4ce7ccd19e0618cf177b386a9d176d665bddc6d07971ecbc074f597c70233467ccc01a9993ce8774de0aa2b8cf6416eea6588e96fd4343aae078a1a69456b6677c3963d6e0a0e1efface9a34c72d7fd8c7f0d0c65b061fe8799e6df721b5db50fa0eb3e99033f90531f1cfaeae891feb22bf362c9a437fed1eef55642c37a90ff2a7e9e6d9495f62636b1cad8fe3d01861d75e8a20cbda285a6612d4fba24b240b8cdaaa326bc33469c093fc28411ff7e741ca304dcbb23b373f34f88de49629158be1a4977008c3537232e09d936fd6be8c2d48c2bee0223966298468d516343b702f1297c7f94d281fe19c8c4d93053d980858d3201384676660571de1a5f138690f02d206a09c28a32546b98c81f1696498d704d6dd07221e2720bcc6aab3c6c26930ad9a915f12e60b249a95c216202e2aa3c0e698d81cbd965f79087341077012be6a73faa2cf3e7a335ff501500007c7299b12ca8e2a5605a7eb1e134785a20b18266e61cfbffdd7988b7803d0c3f55b02e7cc648f0006c9fdbc10b35e52058a06087b7060376971e6a9a81d0a8428fd6359c61ff0dd3fd27ee16cd8649d6728f7f72c356037f0550fd4e7a245b0f2db0444eb26597632430dec987fcf4e2e61f2b8d830700045c055d70a5ace81995fe9161f76cce6aec9575b85453bcdde43bdc166e9e5c96e28b2bcdaa2ec000170964e9899ab30c88df81a9867e2a44ca57118f1f67e037a17b1a16ae0818d27d495ce70c72078118567d34fad58d76407f84c1dffe91ec24b9506779a7458e348667381e0a0060d049f0843c4487f6bdf0a5031fcbe582b8b214e7fe5524c7ee140a09293cc0cecc6bfce7b134e37dce9653fa3d1e20962b0a2cf58846f154c72849a031a691f196a57bbcfdfd090ee8eeed17f313299a2cf9951d2ff59a0809c77594c2650d8d910064d600f8943f7ffde044ba61abf7774a9ac6135a0557e2d73fe0704aefe95e786b5b0489c5464dc6b483de0685b45d0e1970c83928e845b0c3628b55f5f55a9ec9d800a4d667b8039227581ea38035c494b2badb7032c6864899b9f444bec432464f7febe78eaaba2f211dd036bc4c4a6492a904f247e7cf34ccb2d2dad3862a5a64784060d6ecc6c05c7341aa2aaf2230b43265be504bcdab72c30395f3846b46a1cbbd5f48805d02e7ccf08bfe7a980dc9b5901e077b4a23a63b65414b8829912e4612dbb4b81c357413ecc6f2233803c407c7cb2d0a3ee3c0cbb03f020837d696a0c5b318e8d102f3b522d5f1a4e04fd8de60ffebb825fd56a474df0200238a1d52406d9c9af06eb43fee59f531c700b4ec01f911b119af0ded9d060b51f6fc7bfa8bb42609643d26fd6c4acd62e72fec9810c91af77c437acccf07f25339d025a6ae598089a5377be6663ded9ff42665f2a0a724da623904b1e3c146f90befbc734a0ec180c174dbfa143eee09e287b4335aed2b14eb8f9de7d966135cb8d3b3d736d9e39aff10605af6d47d28b8c942ac96c024da8507ee43a28c27e41a112099777fb038f0d08bbd7651e4478c8180fd13defb429448e0d4e95e8cda420e1c9ce2c6a33f40365ee459fe140341e71a6ddf49a06cfd9a953e0bad8effc3bf5c9c64bb599f503ee654e79e500a20feb683a53a94658c1d6557bcdb5d281c2189f797b5140a887276075bb1a4fa98f0ffbd26602daeb2e9d07ec7a70414ec2b0d3331167eeb85c2ece07b4f53056fcc8e5de173dea32de9a11fb109e493368df56a33ebe856001a401c6347fe39f9e0761d5d8e799c3a433ce966641d325a55d15d69eb41eaeebc3e5b93ba01276955dfa5d2c27a1c854b392248dbf271e7e80c689169079cdc25b7862c892a76e80dc8a931d5a3bb9ba3e7c812f967a480d76cc2e25b54d7956078200929d4c19d0e55df5ea9c6ffb8dbb71968318106645db73d4a5e428eeb993a27bcb893598c15e9f0230c2008b8809734d120bf71768391451d017a549f6358e589d85801c3c6555021cf02fa6a0d9d2fd444a037d71189b5fd3e485e1a1c3b6dd207ff04648162d57fc14743519a4e2bc078e6180e84b7f2e05e64f2b679b4fd89068bc5df9c6a103b69ed148c4a7504c94d5146bb92a27f01c1c2b6828de98cd7d7063b38aa6df86a567506a84087ddb653b6b378e83a6b4e258e2e883b3c4e9a80132a1ff75bddae5fe7bde57a706565f8f72725d6a0ad08b9f166b59614541ac41e6d3eb6effebcca392c428a7f380fd2c1a5df77d956bef70eed64458a4e05ff995bcae6c90d6a0636b61099115be25023dfb059829fee202a877394d6cb58573b638e1890112b75732e1d8980138ecf154b2c40ec20ca06a7201919da8d084e48773bb930280542dcff5c8ea6fb71b1bc7212e460cccfd108f3cbf5cb1481b98b2db8570e9d93f980dda6fbf025cb5fe24213811e459c23018779af7fa729d57b280029f2963c81cb618d4bb7c0aa17064e853c39cecc94083d52729e5ca319577244711547ba96274ed3e7e4a6683500225cc2a104ae7e61fd781f48e38e5a4e4ea478a660cc7cd4411858b904f59f9400562d2b8df42c4b6c7fd25aebb4b8fe67f4b3348120e65d1f5056b5c65efe5854fb342122eaa5203a4783a6e2800d0bbb86559436e437934831a12ef0b22331f3b09c4333f8acf124724ff5a515e3778d3590ff5461683cafd2adb71ea74bc9224b9b81227b32125054d50fad9db845fd58f5e91ef56dc243c301e1ec8770f3c94ea77b1283591a7160d5afb0254672598068c3be7596d1c1cf820f334502c0ef8a709459fcd6876b76e122acdd5fb96e57fc724152bc2bb90711e450c7e947f2ab916e0f98b7d56ac5e63041980319ca15da8c5b9ece8f724befa273a143512e83ce27128603f4426b0f54b7ad683a64a4bf9721c6f6c1b298c64a095c74735cd35b6b87bf306f8abacd56430a8064749dc03d66f6e141d7b7f5d6243906ffb9f996333643e39cdfad39e38c9d643a90ff682d8b7960abc97bcf605d3636c084a3c1c1e35c73651b846defc971c64d51eb0c7af293e06ad69ee3b45a9d0d0b9c63d63e070d53cff245e701d1e2c5b807d93b993decb55f54dad30d1e7f5e5d2575314ba715045b27884e4fe6ec20cbbeb018b4e619ba102a0b71319100482623b30307b1dea01d4556a54e688a80654e081b82c0cf6f05a5f4f6f4b07cf3aae5af441c3c48fadd44d2e29fed9e0f6082abdcb9745174b632f86be1a2f255752cae75a65b2da7c15b681603232c2c700a86926cbb0b06e09b3d5b3420178faa4de6c2053344c77d3b62176e74ded79c7385c5f2a7088a92fcd5728d005a11ceeab0d78f09fbfe1e934a5651793d9078442b0edeeecc6a3270c791df4cc29d879652a16ddb09da5d24e8c4b3eeb7848564fd4a228d5f30b47d743e72e46805c6a37e16996e1fde4de9a8f9cf69129b74ff5097575eed6b722048fbad60d03b1ab43bfa5d84e20defa7d781b68d2b8b19e47b096830dfa84d8cc8b73f02091e147c5af44bad930adf837a0017477578d55bb3b257691a1b4ff0f20dc4f5b353a3b1e98a3dfdf2e1bf5a7a03a39269c2f002db986212aa0a3da045b4ce265d92d9af2a27ee3dcd6be61608a71c07e964aff69471341cf2fe6890de784a4925ed1cfa7a1aeb69929372567c5f08127fd0fe0149580358f07081854c4667355d25ca4805f4d48b5fdef557e206b4260474dbe3c43d322dd88b716a83ecc9f3bd8ebffb12522164f1c1ac9d7f1c498db4fc022c56eac233d1cb8df6eb33cd0f632be058c068d1e1beceba6f4bca817d65cd7a6364bc7d8f4f60b604df7f1d086f11556d9684ce9a428a4a20592c884ac40acb191c6886d7e48ed76b7638dfecc4ec0fbda53cedc4a344c4d1fab780b0c8576f0088d5e7de8dfde07e662f5ab55480153931f1b965bde90d95d7f4dea6bb6c5b7dec83c82ab352359a2e882223f0c6e76633274077160632c6ef959bbb4729508ac7de0e08f7de96f18839391d500f8762f99c2313bd0f44be362ce0d5ca8a3b2515fddabad99838674c711085052ab6ae4566944b52cdb45467eb330645bea87624be6826ff1510eec3c4a9a67b79a089596b995fd499e6d981870ff61f2e99458e7f0e2d6bd25deaf9b33d611d5e4ae8ee5b1e07fb4f07ef0d59a8abe7009e661db310d96c50cb90e1d8cbdc8e33b72b3af3c6798e6ef4005a31f95b99e755807c74739a0574fb11b139784ae84ca11ebb89448fb142b2c02f2a27967149510d08c7ca4df558c238106c9ce9b68ffbee17214306bddae7897736986d50c98066d18950a7d0300956908454aee1d52096784a07ab38a2f90d1ce4164eae0aab62709c571f1f6393fa7e2e97a4d95ca5ab7f128ca112d66111f19f80af95266b3b1451053d2e0c0036cbfa2294296e3c25af53fbcd9b99f2b36bf0037947f62c9246a8783f56906efa08361291981e6dd29d13fc3592e52c1896dfcc920b2b7034fb8d888b5e3d2ac451ccd035e33c29146079e8a0c0dd28d94901c6bd321c609440f1b40f777cd45435748e06d1b148a35af23e6fb762a8ad9796ffd0506a177c686d219e05ffd877ed2424b7ea58e368d39dd8655cb2117a2dfbc72d47eb78f8087dbd165b3f389df4fc398ac152a11276d9a8891bb0c70d0391e901b630f360aa94b1936673dfc608953e087ea63716ea9f2492321b50638218cf19b9adef3dfefe21ec390f0e6f45fbd1da3abec8509f5d61fb64e4358db2ffde60fc485c2d8066f11a9ff254c8404c54d52faa609d2dceb7c3273ca2d72baaa1de0084ec28a9777dae1fd133203c8d13f4402f5c60b9871f8f4588565d90a3f159bae8a935b1ab1bf31428d7b552d0fc1ca1938d6ad01fa0459ba2fb60f132a19bc01f613f113a33c138f844754a5a87cbe7e8caa6fad53d06dc2cd03c3f697ad3c579286d62c2183e85c8506b71403d7b49f1f471e701cdf637ecd959fefd1b44e5839d71e7e1ca4437b99c0a2e6b5ce58b91d366542685b865622e45f69da8218b60b8bfc586b215d9e640a9e6cf6d78356e5c2e53700e40015a733af702f0d7f0d427b38a5e3a29072d2d029dfa63b8665acbaac7438ed32eebcf3d996d9243248bcbd0176aaa5654271c45fa4fe894f0f837744fc46caef5867cccfed9b9a59eb01131267e7688f33092335c805883b3211a6572b122b55118de500552dbc2feeb92ccfd11a63ff2d883d48b2848cab65f9328483d4d2dca7639c854d27f92430dcfa2bcd65ccf529bd9c75a14c6ca0afc4511920c08cf5a2aacaf664ed3cfc2137b114e731493964b26d97352fa13f2334bc5815ef8aa23b2e1e74b3dd348a6ba25effe708c2c3362b12a26cf32ff800e97fdebd0828b215f93e60cf4288f02ec2514580835fc343ab664ba85a47ad3d40412b104f66a778294d83fe59fbee24deac59b750f133fdad2615e1cb9da2fd33dfb5163c396dc18a75bfd6427aaa3de52d4288559ea126689c43ad3f75495c69e41a9c0f3c6071c3520d6e4509fc5e358e2090157d322d44c84613de1384cd6c6fcd04a11a8a34394154b2b9a1130a35f1963949d5cc55f88244cd72d1580c73b32295e0d0b23286635d36a884513138d138e3957ec201f3f7a15a9a7af3da3aafd717399830cf5730571fbf2c74ef624ee880fbb28a08e4be83d794214fe1e7434996e025a1ceda9b67c65acb5fb9b68fc719d520cd3fa6733b7475a75dc3325f60f9fb628cf2fc2a25dc76bf21ee24ea8381e92ba8366d5de4094c00f77cd931fea960e12280577f6ce355869f4fb4167d5c9427c33c7ed05187c60e9afd6bed2c6696c46001834d05e7a609f5ecd4525dc1ca7fa507823d6c65a4ab33b7745a6fbad3dbe4c40ac8061e3f483b54d8663c85cd5cdad48c51bf0445c850d2111ac531741582e960e44875215d10d738a515a0a7418d6d045310fafe4006cfc4d265cf267cb48959d2291de1a52a14b97539cd4b56132406d6084bcfe793d4b87ddd7fbe84d739ceb3e54cf4e465f4ed4d07be7fb8cb49e28cf86ca7fa6e8695b979fabc50c417edf513a183b41ff91eb714640aef4339fc235dec53062148fc4b03abfcb1c830dc3bc0636d99d82abd6e1cd6b6f08c3a8f61db7239275ef63f3e0b540eeede52f163b2c14638223f3dfe192ff2aa55e4fdeea48c8484b9c3fc0c3c5cd74662e14af3843ebc506a4d5c6bd4253959fa9b1435aa09079e0aef5ca30f55fa7c95ae45e30cbeee94ca0618c9eae30a972f903a56705055dc857b9603768bfc74c4f4120050190033fd3f8e6ad21622b813200f76d60412d45a54a6edbb41da150317e2b4395375987debfd075abb5dc7932d159d7f68933b0183f8d4113909abc7d68614445d55bc35c952d90de2fce0a21c0214d7b35079a1c254aa51b8c909fd048b374fb20dcaf494783bf2b3c088a6ccaa22b29682ebc083bc315cf534bd11c99d5969f670a4375a2a252ea92aceb3bc287d965ade516402ca8475466ef7bfd36ae6819a9eae16b13527bf070698e7b311853b46f2861a1972878509559469307055b50f57d44e6053c326018da4761954866809d61a23ac9ccd55df97b64cf6c53a0210c8398c3fc9e024f88192b302fc29fc48bfe611933807634bd43d27870f9739d5e6e51c399203501aa3bfa143d473882617ab31591caad168ea92b9a67d155e7c1e08b12eb6f4bf85c17f2c85454f29ee0eb95fe2365cb22e97429badf52babbeb0ce8fe9ea3559de95e470443835288a15b69e46d4180a72087fca03004a89f9107150ea677a4af8fa4676f1679c323df2048ac976edfb19208501f09ec340a43bad0089f8f60e984b57e128afa5a529de0478efc7f7a4dd2df1f882700dba8b4f4456515fd242f50f3a31a250534329850d34ac7abf127b57daa0c5b82526bf0b028f28c086eb9fe898ce6563de420805792d3aab677f22b345d5424514e9d593be34d10aa9941cc013f0dc6890ac4b38172fcb6dc53433e75ff5b466aefb3270e2154f91513755e63a221565b423ce5a90b91845ce60376106a0ec3768b2448681e88dc4f0d01ab2e52dcdec171e561a28f81dc1c65aa9f2671d627851fe0872c8bf68bc214fccc5b6d2d604657bf19b363a25ed60b156435ae89254985e28ce02e61cb1b63e2d3a2bafc979d65eacdd6ad5f7c822cc151dfd5e59b590ffb7c66ff077c0c19958e0c3a2279e1e3bd3df4d21095e0a3f0844132e674ce3f30ae603cddbc8d5ea91cdc00dfa9747b11b04f106bafba18b0c0efc3ebce9901550e489a1acd86d62e2f40e974af86abba9aadb964b5a1d8c204d0a626bcecdc4b2ac3cd3476fda0099e17701fdcfeb7fc83707c10f658ffff3047ff76bb2ea3b4ae95ed864e31cdc4acccf13073991f5edc89afb87d7165a8cfa5f7aa26b1ab38ba2a9011ceb6bdfeddbd71ff572af62985eaa3e754b1ac067d10fdbe307ee37d69f9658b1fdf6cedc4ca56a098c749abdee946bf7701f6d2409ed3de27d3e3b52e6b76fcc294d7b6505f4aebd15dcbe65c3ff6c02c7931f18bff3d21ceec8526cb59e898cfc87a89d943a82a398df7efe61165236d482f0209b8c71974339ccec925f271b3eb7e8c4fcc46766ac657e18b1745aa1f3c347e31187d30e452140c19c55db7e2536aa754275fd96591bde07657f43188ad3869368060f261e390ef756ab558f3168b5c7783e33120163f7a2c7252cab4f14b72e8bda0971fb8a66bf0c8d5910d1a8850f2d362257cf0613b0481dfb4313f59834157d94cb3c6050f0f057c3cc1eb2a64325c8c4de70bd22b904cfe3bc745a8e9333a129651a5c750646937b392edf37908bd1dc4483b4396ffdbf51b687322aa62c3269c0a887b71b9003e3fd48a775535e2c02a3a690fc95f3afcfa58a9974ec7ba6e0e615c82134f7ac8d30f3a7adc1fdedc1be340d2e6c95adac5b435721aaf4b1ad0af596e7f1c7208f0e58245fc5e77e52760ccf3b5812cc75047bf00e3c2fd556bbfefa8e3c2ba7911c6831e0821ec1514ce493de1e3c625da390e15bb872a0cfb33748c3947755f713ea242c77671a2d9d344a0cee3477a4b3997060f9eaa6a57ff6046eddb69500e57129b674fe99c490c9bca57ba0133854b25cb4840b6bf30bf7d4570839e9cad3a086d89c32acb88d35e80a0bdc86932de99ad2f34d9824839c457fdef5d817438674e4601a35aee9409a24ac1e0792e0c92ed23c10833d9f3ebf0f12cec61434d3638cf7654f399362ae658fb69b8bbb13a3346fa2c8de7dce5a1c9f4ef4bcbb116a8750b38bac538588508fdf2621c84bc41f8ec1d9c0c9ac6be3bdf2ee6faa4202337e405ecb297f9044d6962317ff2dc54869b32560cfb43812120f8288ae51f7651420ce926c98ad60423b97aa58af774aa075e0ee3015370083acb5ff5a2b497efff2f5446892b64734bad99ccb96ea54c803e8a160c70136af3d6b92e36b82355dbe420d41d5741d20520146f4b8c91cc80cc1a809c20a8e31d17b815d9b5cd2070a09025c17c5dbbc778d0255b7372a409241d2d6c634ef60a72215d4869f624b3180aa25f793e83704227356684da3704a13b7aa73b7492139771864994e3e0f7232dafc95426f5730ca09383a6b979264fa0a65f3c3af65d77a57aa6dc9f66a3867a74f2ae113216f22a12105affdbb01ecf0c6a00a8ea7235a6f50a78354ab50ae1e448dd5dbd17d4494f6ec7cb85fa0ba2f73a136bbe4da7a1050a69318a695b5c90760b0de15b1df381347d6d3d0cb01b4a834c9e267feb8c8ae005d49488e479f124d43939621591132a15ce473a1900039ff7ab80e5539e7e4fff6a03c36666ebe2ff269596bb2701ed379be6533150dfc4c63a048c7e32da00", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)={0x130, 0x0, 0x979, {0x1, 0x3, 0x0, '\x00', {0x10001, 0x4, 0x200000000003, 0xc558, 0xee00, r5, 0x4000, '\x00', 0x10, 0x4000000003, 0x0, 0x9, {0xfffffffffffffffe, 0xd}, {0x8, 0x2}, {0x9, 0xffff9d04}, {0x7}, 0xd, 0xfffffeff, 0x4, 0x400}}}}) write$FUSE_INIT(r3, &(0x7f0000001200)={0x50, 0x0, r4}, 0x50) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x4, 0x0) chdir(0x0) linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, 0x0, 0x400) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 1.091642342s ago: executing program 6 (id=3228): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3}) (async) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000001880), 0x40, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) (async) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000280)=0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) openat$incfs(r3, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000140)={0x4, {{0xa, 0xe21, 0xffff, @private2, 0x200}}, 0x0, 0x1, [{{0xa, 0x4e24, 0x40, @private2, 0x1}}]}, 0x110) (async) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x224, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x68, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1, 0xf5, 0x1, {0x22, 0xd}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x10, 0x50}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 1.013232279s ago: executing program 9 (id=3229): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001e0001"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) 931.389018ms ago: executing program 9 (id=3230): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) setuid(0xee01) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) bind$unix(r1, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) (async) truncate(&(0x7f0000000e40)='./file0\x00', 0x3) (async) ioprio_set$uid(0x3, 0x0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/123, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x1, 0x25}}, &(0x7f00000001c0)={0x0, 0x11, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 929.738318ms ago: executing program 9 (id=3231): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) syz_io_uring_setup(0x79d0, 0x0, &(0x7f00000010c0), 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x20008895, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc20a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000100)={0x20, 0x11, 0x8, {0x8, 0x10, "82616faab7e9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x12b8b000) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x8000) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000000080)={0x2c, r3, 0x1, 0x70bd2a, 0x25dfdbfa, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x2c}}, 0x4) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f00000000c0)={0x3c, 0x8, 0x100, 0x0, "f7d65a25dd2632bbc1d63cc2a79885273fc7f428787040dc7549bbdd794f2351"}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) setns(r5, 0x10000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) clock_gettime(0x0, &(0x7f0000000000)) 189.100721ms ago: executing program 8 (id=3237): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019c09000f01c2", 0x69}], 0x1, 0x7d, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4, 0x94}) r3 = socket$nl_audit(0x10, 0x3, 0x9) modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) modify_ldt$read(0x0, &(0x7f0000001ec0)=""/103, 0x67) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbff, 0x4080101}, 0xc) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r0, 0x4068aea3, &(0x7f0000000100)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x4, 0x0) chdir(0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 91.306621ms ago: executing program 5 (id=3238): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x41, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x502) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_clone(0x1228000, 0x0, 0xfffffffffffffdad, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) process_mrelease(r5, 0x0) setsockopt$sock_int(r3, 0x1, 0x50, &(0x7f0000000000)=0x5, 0x4) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00003d4000/0x3000)=nil, 0x3000}, 0x3}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000240)="0979e127b8b3891be8dd397c67fc82251cecd27196a59beb85cb7450266767e735d2f6932155ed86f508fe87dbb49fc69db4458cbb2113dbf9f32c7a53eed2206e041bb9eee97a5798b41527404ddeff"}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x40a02, 0x0) write$khugepaged_scan(r7, &(0x7f0000000000), 0x8) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 90.789831ms ago: executing program 5 (id=3239): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) (async) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x200) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, ':'}}], [], 0x6b}}) (async) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r4, r3, 0x0, 0xffffffff) 78.537342ms ago: executing program 5 (id=3240): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = socket(0x10, 0x2, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x20, 0x0, 0x0) (async) write(r1, &(0x7f0000000500)="1c0000001a009b8a14e500"/28, 0x1c) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), r1) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x64, r3, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = gettid() sendmsg$unix(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {r7}}}], 0x20}, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) recvmmsg(r6, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) r10 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r10, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)={0x20, 0x11, 0x1, 0x0, 0x0, "", [@nested={0xf, 0x0, 0x0, 0x0, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @generic="341888"]}]}, 0x20}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r12, 0x400448c9, 0x0) (async) ioctl$KVM_SET_GSI_ROUTING(r10, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000000000008c000000010000000000000000000000040000000800"/52]) close_range(r0, 0xffffffffffffffff, 0x0) 59.690874ms ago: executing program 5 (id=3241): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000040)=@deltfilter={0x450, 0x2d, 0x200, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x5}, {0x7, 0xf}, {0x2, 0x5}}, [@f_tcindex={{0xc}, {0x420, 0x2, [@TCA_TCINDEX_POLICE={0x414, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x100, 0x2, 0x7f, 0x9, 0x9, 0x5, 0xf, 0x8001, 0x101, 0x0, 0xce, 0xac, 0x56b44aa6, 0x8, 0x2, 0x5, 0x6, 0xff, 0x10, 0xc3e9, 0xfffffffa, 0x1, 0x6461, 0x7fffffff, 0xe, 0xe23, 0x1, 0x2, 0xe4, 0x401, 0xa0, 0x3, 0x8, 0x6, 0x5, 0x5, 0xb, 0x7, 0xf, 0x2, 0xceb9, 0x9, 0xc46, 0x401, 0x131, 0x2, 0xfffffffc, 0xda, 0x0, 0x9, 0x6, 0x1, 0x0, 0xe55, 0x0, 0x6, 0x6, 0x6, 0xe3a3, 0x5, 0xfffffeff, 0x9, 0x8, 0xfffffff9, 0x8001, 0xffffb53d, 0x2, 0x101, 0xffffffa4, 0x10001, 0x1, 0xe, 0x0, 0x6, 0x2, 0x0, 0x80000000, 0x38f, 0x4509, 0x10001, 0x7fff, 0x3794, 0x8, 0x8, 0x9, 0x6, 0x8, 0x9a3, 0x80, 0x9, 0x100, 0xef26, 0x7, 0x2, 0x0, 0x7f, 0x3, 0x3, 0xa, 0x5, 0x5, 0x3, 0x0, 0x0, 0x2327863e, 0x2, 0x43, 0x7, 0xb9d, 0x69d, 0x1, 0x2, 0x6, 0x4, 0x400, 0x3ff, 0x8000, 0xe, 0x2, 0x7, 0xe, 0x4, 0x3, 0xfffffffa, 0xd5, 0x6, 0x1, 0x0, 0xf, 0x609e, 0x8, 0xfffffff7, 0x2400, 0x763, 0xfffffc00, 0x2, 0xfffffff7, 0x9, 0x4, 0x3, 0x2, 0xca, 0x3, 0x1, 0x3, 0x5, 0x800, 0x9, 0x3, 0x7, 0x4, 0x3, 0xb0, 0x5, 0x3, 0x7, 0x2, 0x8001, 0x10001, 0xffffff0d, 0x3e, 0x2, 0x6, 0xad3, 0x6, 0x6, 0x7746, 0x66, 0x0, 0x5, 0x6, 0x6, 0x6e2, 0x401, 0x9, 0xc10d, 0x1, 0x11, 0x7fffffff, 0xcf7, 0x218b, 0x16, 0x10, 0x2, 0x81, 0x10001, 0x3, 0x1, 0x170, 0x401, 0xa5c, 0x1, 0x7, 0x80, 0x3, 0x4, 0x5, 0x0, 0x5, 0x7, 0x8, 0x14f, 0x2, 0x100, 0x3, 0x3ff, 0x0, 0x7, 0x9, 0x200, 0x1, 0x10, 0x3, 0x2, 0x2, 0xfff, 0x80000000, 0x99f7, 0x5, 0x800, 0x0, 0x602f, 0x6, 0x200, 0x8000, 0xe2, 0x0, 0x4, 0x2, 0x1ff, 0x9, 0x5, 0x1, 0x3, 0x0, 0x7, 0x1ff, 0x6, 0xffffff18, 0x0, 0x1, 0x9, 0x3, 0x7, 0x9, 0xbf28370, 0x6, 0xf9f2, 0x5, 0xe9d6, 0x7, 0x8, 0x43f, 0x1, 0x100, 0x2]}]}, @TCA_TCINDEX_MASK={0x6}]}}]}, 0x450}, 0x1, 0x0, 0x0, 0x80}, 0x800) r1 = socket(0x2b, 0x1, 0x8001) setsockopt$inet6_tcp_int(r1, 0x6, 0x1, &(0x7f0000000540)=0x4, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vxcan1\x00', 0x0}) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f00000005c0)=0xe, 0x4) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000600)={'security\x00', 0x2, [{}, {}]}, 0x48) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000680), 0x42300, 0x0) getsockopt$inet_mreqsrc(r4, 0x0, 0x25, &(0x7f00000006c0)={@broadcast, @broadcast, @dev}, &(0x7f0000000700)=0xc) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000008) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r6, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0xc758}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x1}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000900)={'ip6_vti0\x00', &(0x7f0000000880)={'ip6_vti0\x00', r2, 0x29, 0x0, 0x9, 0x6, 0x8, @local, @private2, 0x7800, 0x1, 0xe42c, 0x1}}) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x5, 0x4e20, 0x5, 0x2, 0x0, 0x0, 0x3b, r7}, {0x5, 0x10, 0x3, 0xffffffff, 0x3, 0x5, 0x518a185, 0x7}, {0x9, 0x7a9, 0x9}, 0x800, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x4d2, 0x2b}, 0x2, @in=@loopback, 0x3506, 0x1, 0x0, 0x0, 0x2, 0x9, 0x400}}, 0xe8) write(r5, &(0x7f0000000a40)="92a226bbd4718e6fe0a69682e34844009b6ad4c48aa32db9a64206c184830f5c7190e60b2db120aaadf07cb1557df09efd269c3c77e1950b99c9abce528358be848a74c41fae777fb2e32240ed0f7fedaae62ec1db852d0fb73917b417b3883d9d3dce1d09261d39f944d197034a916d73843997723e31d21e14f9480a845a1195b6b274fc178f556aaae262df59c46bdcbfb7ebdd06ac34e52031c74adbc9445389ca791c0bc6730e7369094eb12a509a5b79131fdf29271ff9dff50ad3eec0759b9a2fd3546b3e518446e44787417963d572034f0080c6d37e73", 0xdb) read$FUSE(r4, &(0x7f0000000b40)={0x2020, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002b80)={0x0, 0x0}, &(0x7f0000002bc0)=0xc) r10 = getgid() write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002c00)={0xa0, 0xffffffffffffffda, r8, {{0x6, 0x0, 0x100000000, 0xfffffffffffffffe, 0x9, 0x2, {0x1, 0x8000, 0x9, 0x1, 0x6, 0x200, 0x3b, 0x1, 0x9230, 0x0, 0x7, r9, r10, 0x5, 0x6}}, {0x0, 0x10}}}, 0xa0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002d00), r4) sendmsg$TIPC_NL_MEDIA_GET(r11, &(0x7f0000002f40)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002d40)={0x1b4, r12, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "dc1d68c6cd34772cb83d525a861b1c7aa42caaf5d9b5b22fff56fe1ab2f66a6ef4c85f44"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x35d0}]}, @TIPC_NLA_MEDIA={0x108, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6a59}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd7c3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x206}]}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r4, 0x4010ae74, &(0x7f0000002f80)={0x4, 0x3, 0x800}) syz_genetlink_get_family_id$team(&(0x7f0000002fc0), r11) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r13, &(0x7f0000003140)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003100)={&(0x7f0000003040)={0x98, r12, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb359}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x30}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x44001}, 0x800) 3.026919ms ago: executing program 5 (id=3242): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) futex(0x0, 0x86, 0x0, 0x0, 0x0, 0x40) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d) (async) r2 = epoll_create1(0x0) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) epoll_pwait2(r2, &(0x7f0000000000)=[{}], 0x1, &(0x7f00000000c0)={r3, r4+10000000}, &(0x7f0000000180)={[0x7ff]}, 0x8) (async) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000000000007000000010000000000000000000000e60200009e530000000000000000000000000000000000000000000000000000020000000600000001000000000000000000000000000000ead10000976ae3e0863564a79465b4d2820000000000100000000000005100000003000000"]) ioctl$BINDER_FREEZE(r0, 0xc0046209, 0x0) (async) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000001c0)={0x10000, 0x10000, 0x8}) 1.88393ms ago: executing program 8 (id=3243): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1e, 0x0, 0x4) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x924) write$evdev(r1, &(0x7f0000000040), 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) close(0xffffffffffffffff) close_range(r2, 0xffffffffffffffff, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"]) 401.86µs ago: executing program 5 (id=3244): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000003840)={[0xd]}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) socketpair(0x27, 0x4, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) poll(&(0x7f0000000200)=[{r1, 0x8088}, {r0, 0x1141}, {r1, 0x2400}, {r0}, {r2, 0x325d}, {r1, 0x4200}, {r3, 0x4404}, {r0, 0x8080}, {r0, 0x11}, {r1, 0x14a1}], 0xa, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101, 0x0) close(r4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x104, 0xa, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_USERDATA={0xdb, 0xd, 0x1, 0x0, "77f864cc0d04cca40a7622a348b9b3d4ebc31fbb7803f543aeac62883ff6719ef2ab1b5a8d3b51a0d9e1015ee43aa6ed818f4b510287c51e8c50ccc7ce33441b5c555ce0bfa63b9d1a8626d808ad480988f21f5eb5be8042c2b245b60f2a902eb5c55f2ebe504fe39a40e7d7300790bc8bc5c9cafbab54c5601b0f12f462bc0589736c20388dff3e1eced1d07cc72c41b11a23267ccd479204df3e1d1174e7fe1094c6009f3f2f6acc83202436fb6f1c6d3ab14419a98f4337d58bc4590187a77c3af449396afb42ae87caf71ee312adc51a9401fd2719"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x104}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004000)={0x24, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@nested={0x10, 0xd7, 0x0, 0x1, [@nested={0xc, 0xbe, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}]}]}, 0x24}}, 0x4008000) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x800, &(0x7f0000000640)={[{@rlog_pages={'rlog_pages', 0x3d, 0xfffffffffffffffe}}]}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r8) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, 0x0) ioctl$KVM_SET_PIT2(r7, 0x4070aea0, &(0x7f00000000c0)={[{0x0, 0xfff2, 0x9b, 0x8, 0x3, 0x9, 0xff, 0x3, 0x5f, 0x9, 0xa, 0x10}, {0xe2, 0x9, 0x9, 0xb5, 0x6, 0x4, 0x9, 0x0, 0x81, 0x0, 0x6, 0x97, 0x3}, {0xe9a4, 0x8, 0x8d, 0x79, 0x8, 0x9, 0x2, 0x40, 0xf2, 0x3, 0x0, 0x6, 0x4}], 0x6000}) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1408012abd7000fddbea972f049ddf25"], 0x14}, 0x1, 0x0, 0x0, 0x40002}, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000380)) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 0s ago: executing program 8 (id=3245): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000001a40)={0x401, 0x2, "ef9b4c51926fdad954f84c51cda44a3877ca455b6b3aee9da0c7592de321fad18267834c36164aec819317dbf7445e76818f6d5082dbbf10d98042a81cd9e007f074df83071aca24cebf88e6de42b7687e3421f6791853345238f64b316f3e9c555cb9650242da00d39dba9bbffce8e4b20dc9e4cb2a55333265faf9bef812cc49841fe159a8d8421bd59b541da7013551acde2a134893ef27a807a2a33de53eb23a7106f957d6a0f4dd224ad408f25b2b7d343fa1f8a0d6c5256cee50c148063e861390cefa5ebd4d05a4e1c1f5fe7cc831b12da406746922e4dc67cf6824565346803d530cda36316db0848eef381b49412d9b8e7150680c6ef971edeeec8b"}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) pwritev(r5, &(0x7f0000001980)=[{&(0x7f00000001c0)}, {&(0x7f0000000480)="0f806dce373e698a5bed60032a70196d9511712e9f3cdff7f64b5f021d5276e53e91b267da9946c3a29879eba690a68b547db339171039bf39ddfba0b7da91724e234acdbd269c23df7c8911846ca4541476c739b2e6cae63a370b122f82ef13b31d081b93a0374acb8176549b6f8160182c26e263af4254f8196336d5f8f83a64280416617027ed636e357936dee37f4b523f38dfa9ce56e91915543fb1146f4a86a01666e81f1510f2727cbaa55076fe24df2f8a469065a132ac6b764b2b5d9c81c3191f1620a0d3d79f0ed04ccb6e23bd8b93ef16597a523ca133fbee2c46f40087eeb0162cccc7cc1851a4", 0xed}, {&(0x7f00000002c0)="c8a505f0e5e4edf4c461d2adf5d93a2134b0f8016bd4e7167b57fe4a939fcea0205af1f4dbc430ea6bab11e294b8f4342a51e0c9f2309081da08f369aa963d70e9a023e6985a4003b615a17ef94f382d5127d4fa0ff68b3e014cffc49a954749d7045993d5aa40f9e5ca", 0x6a}, {&(0x7f0000000200)="78cd51291cdf192c67958788d8327b002c629a1d4da51e28aaf7fdcb3179e0e3fa27573617d7600bee505baabc500e7b54", 0x31}, {&(0x7f0000000580)="d2337ba429d493649c01548b2d4a53ec0584a9d209a8f12308d557005df9c23884bfe8165a707fd6edfffedf0db2de2ff5a6c39f2c476f87aefbdf8ba472cfe34384302ed667fabd8c48dd935421c97ce8f0deebc9737d7bd053882ccf5345eecd4127aa73b2631f8f53feb3270a9c8d736202c2e9f55aa0dc0bceb01bfcf9ec482f30773e2b0df80d8d579f4026e4f8b4d1f46e65d74d45", 0x98}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000000640)="bbe77956bed7547d6a", 0x9}, {&(0x7f00000006c0)="510a297234db6cd56ae05a1bbe1affaa7c9e825e48313de11573a8629f47f2c1e4e398b0007e7d11caaaf6ff75b1559618861e58600cc8eec6eaf554603cad8b56616eb2029f0220c6b572bb6b205bf8272637eb0ccca3ed7b96b21428c13c4814ceb691000b505301698201e9d2eabc881d0b1c8f77325ce6332e5054db6fb3751d040d3c867c1f26eef84645815dfcc0733f652a013ef1e3690a4d7a3639ca5b89e6bb64", 0xa5}, {&(0x7f0000001880)="4832c71b5515649bc72671ca74e7a2ec5f4e95b250b6939793bda3cf66c49f88b8b506960ab819ff76c06a18e77faa7d04aad37a57dc683494d79382a5dd77b54708a233e7495fe70170c402dc779c09948b76ac39157fea29d99aa3aaea94344c683ecf48f4fdcbd43ebcea20f3d3786dccaa791c33dfb7ad31f2de06b2389e963c70dea50bc85f0fff786290eacf689ba372da712df3d84c34295738e3b32ea4da6ce59c38d13faa96bd7fbfa8ca5f46dce2bbc67bef4fce63ffd401a4fe1c2698bf755a44bffd2944fefd4a20e683ae06feb8cc4ec3e1b1", 0xd9}], 0x9, 0x1, 0xfffff000) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='vfat\x00', 0x1d483, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) eventfd(0x0) (async) pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000001a40)={0x401, 0x2, "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"}) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0, 0x4}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) pwritev(r5, &(0x7f0000001980)=[{&(0x7f00000001c0)}, {&(0x7f0000000480)="0f806dce373e698a5bed60032a70196d9511712e9f3cdff7f64b5f021d5276e53e91b267da9946c3a29879eba690a68b547db339171039bf39ddfba0b7da91724e234acdbd269c23df7c8911846ca4541476c739b2e6cae63a370b122f82ef13b31d081b93a0374acb8176549b6f8160182c26e263af4254f8196336d5f8f83a64280416617027ed636e357936dee37f4b523f38dfa9ce56e91915543fb1146f4a86a01666e81f1510f2727cbaa55076fe24df2f8a469065a132ac6b764b2b5d9c81c3191f1620a0d3d79f0ed04ccb6e23bd8b93ef16597a523ca133fbee2c46f40087eeb0162cccc7cc1851a4", 0xed}, {&(0x7f00000002c0)="c8a505f0e5e4edf4c461d2adf5d93a2134b0f8016bd4e7167b57fe4a939fcea0205af1f4dbc430ea6bab11e294b8f4342a51e0c9f2309081da08f369aa963d70e9a023e6985a4003b615a17ef94f382d5127d4fa0ff68b3e014cffc49a954749d7045993d5aa40f9e5ca", 0x6a}, {&(0x7f0000000200)="78cd51291cdf192c67958788d8327b002c629a1d4da51e28aaf7fdcb3179e0e3fa27573617d7600bee505baabc500e7b54", 0x31}, {&(0x7f0000000580)="d2337ba429d493649c01548b2d4a53ec0584a9d209a8f12308d557005df9c23884bfe8165a707fd6edfffedf0db2de2ff5a6c39f2c476f87aefbdf8ba472cfe34384302ed667fabd8c48dd935421c97ce8f0deebc9737d7bd053882ccf5345eecd4127aa73b2631f8f53feb3270a9c8d736202c2e9f55aa0dc0bceb01bfcf9ec482f30773e2b0df80d8d579f4026e4f8b4d1f46e65d74d45", 0x98}, {&(0x7f0000000880)="3e534e067f4aa82a1571ee6622540362d92e2f7ec7865c0446035d06530ef351e721efbd26aad1cad2649e5ba934d777e6098257c945d390d23e359be746cd86e04ae562629a4a7f550b5e8bd2e7db50cd7711a12cd0b57fb86f6d9a95451c1f7089857bd5e951ef7144ad8938a55c07e80cc67656e29ff0a2414db310edad86c12f825ecab33f37909df0e2292e1a04d9f070addf409f53894ea43b014d419b6e616dca0a55d80973e1813f88ebe4d0d784ded7f7e85ae5a056c3ca68f2057fbc76d46c1bbc20cf87ba205c9691259239403f9dcb8ee4a70fca88c256920c0ea3049e08c16ca2ed49524f968d4c48811adc78997aaf614e4798defee4981c5da36baf49a18347c00ac8df298ae76a66616b99430707385841413eb5333ba5a7196898f723cd7642e934f8216826bce92a2242246d1eab3d9fba7b19b3a87e6b17b5aaa3b1ba39af550229a147f928613ed57e10b343643dafe58c3993c55185e60be7fa414fb64ed9f87324af37c3166fa9b7d7a3aae460e6fc83afd63869f69c30559d7bb075759be23b327d6c5ddffe8e80ac7baacd6c9e252478bb5ba91b303b8a8efb855fc8fd814b6f6d7a2d259595b9a3e2e1b5e3f8c33d2bfbd8f95f2400b877a92b63fe0e75ea27676a4791ad06cac172a066f3d930ab43646ce826ef330277228b77fb017f4a5fb05690eb1b56e2cdfe6730421a90c1d644882bd4268cab5cdcffe09024ae929b8b2d75afb2c4342b319162338a7e455bfadd709736b4b18810482ee3ccf3a55d45873959cf2405256b86cf382cde8e98fd73f56c04261b2e6c9c4f227bcac7742640001eab3d99a25882afa7142c506fd8b26b66b58ddbfe5a5c6e79ae9d4caf8d97282bb31589af819d54fd5137ffc732a388aa375e66de817475b6c584582ce3aeaf50001f871fe24f4148b3d07e22784bf23e29e4f0e347c6292377fdb1f76096ac779242dcb65eb00417386b1be1b48a9a9eae1b118e8c33d12627a54d75d158e0e26ceb770f5a481c053f5c29fa1414f008c02f659575b2d8f791c913d4727f70c21660e0e2b8c1de0149a5ba4bacf2f2fe4d8821ec22d671a3239cd04ac2285903580563a34436e481e7e779fb8e90ac322687314fe85261eaedaadadced1f6fa9d775517c17f5ef3dae54b6fcf05195dd5e6e2cc6920d74198b7b741ce445f50f487cbf96ddceeb96ba59c9ab0c429ea3895a873b269f42b970f455da574318ccd24ed0e30593b4afbbec527feb333f41934c0dad7cf8df3d31495867edee8cb3cd7a83d4fc2cb11470409d0bd46219c605abc338da1cfe974add72c61ca1ad3113a8f4a326ab03d908043645bdb11c92827a3c1e0615fede10ab8fcb1878a0094766f2b4397093b723aa5423ad3b4f7d12c289f2c0d0bdb8e87a8ea76672f4ef9741dce13f421e761db642cf301c9ba0fea0eedc67188adc82941528c6d9178794062b03ced8b9696661c7cc22bb887e03107c0ccfa835f3f6d10fe065d5215938f048a4f04e463b1a98ee3f48d6455fdcdaed73088ff0f0bdf8b46652803db033413b2b2dc2508ea94c51b9a510191c9bf3d99c95be5f0f454df554d982f25168bd86b9cd89d3cc38b55050b8c7da4f8083d7e12b347781a3614a9806248d0f66997178344c310b1cc0e156dbe35b90dae8a9f0714c4f2dde38b4c44cd480c5049f4d1bbb89c312c39b4c4a78870862beefa74fff9524b17755b3c4dde5ddd0a80c29bebc5b1250151073c26ea123d868ad447329ae27583b7bd737d15d8b4f9d99e16c4102187189679d07f359b01dd3872423a769659674ceaea266dc932de2db574c8d6c2fc2479d75cab26077c5a3a695b8369fffe10eb4d69924039ef4697a20d655ebad754f20cb23f556dee2899e86bd56c846d7042e6d61bfb8985cbfbdbda535e7903a9678436058447f8a39542e5d019f65742a7a9614e2fe137221ff971dd37a3f46f7be4883e485b418d99a0d6f0b2f73c07712913d6f2870b2c4d200eed71a7125d6595d3ae99c02ec7d935f0486a865bc8690dcc69bd1f2a30d997f87bf5ce30a86a7e3c107eb780a1f8bda74bbfd4333071975a38d9154dab18ed2ace3b444df9ecad59ef81c27711cb5b9a6b69b9844996e7861b1fa54f053eb8241a0dac29799d987ac99ea2390fa60d2bc884099624ffb2db9a8a08ac3c6c82b4bceaa436e9aaa146b54826f16a81ff95e618b4b406ed7688e43536abf2b965bce29ca56228b62d784d47380b0b6f36de0a613a396efdec73296e9457523667fc600753f638e47fd9e7d5a5997fdad9a25bdbfc312ceaca00a3a6fcc14916458fc36bb08ccd5f246b9d06a7d17839d0c66c5086d3518069fae5906dfed09223efdbe516a8d596552da14b5874d8db146087dc70b2f1d8ac0afbb264c352db8be8dc7d6370f08d84a82d7b5ed8e97e63615451e6c28577cfcbd43f93ce1c8a644a7fd8eca7be957692e6b68e0d45e8870fde05a35e840e962dbc3862c8d0a8e2eeef2e7a7b4057bc453440c8b2ed9fcdcf38def08a0d04e9dd3811ab0282f487c8d454c525dfe9b45a541b10248b36d172be0f35cbac34d6ff15131521722d1deb5b974dc6050e29ad62f662bd26d6f09847c5023929e639aa9e15fc31e49985fafe2be852cfd8de5ba8b460719fd4889262f650bb3323cea637a10883c7254fa2791ed820baf4477526bb23570ba261d8f9c359c1780ab8c6abd6e5ee691a3746152737ebd55e32a950437e8698b8fdf95c604296fbbc6c61293ac11470b4b577bf00d01a1a761eb18f43bb1858a5c16bf2c2d4a61899fed2c80eb280e8d2e04098f846563e7a0ffe042f812167bd51550d7704e418e7b95d956db1aa5a75e76471852800c419e234b78c572a9216993b59657a32e45e242602536b098c858839b4f70fa8e48b40fa4bef925d0b30abd378a89805a76743fd337958bb4d7851afae025d3fa8498ec670e78a36fcddc78945152b975cec8434bd184567ebeefb0aa5f3ee8bc6b250f349405f0be7e1c54e7ef7b21d4282a478e5a150acee1289358d172d4a65e46a73ee5ea27305c6bb35cb3dc2ef1e318d2baa5d571610616f54659f358287a582f60de3e1e15d9ff841b75f5096d9b1d16c07e4aad0bcf0b56e00b0567b7b6b964446ced440ef4a570153bb41fd04e476c2588c14f42eae2594c7b35f91f54cf59bd96fd02abac9a95c912fcb97d6a874e59e722e51c38bad3d4a241fea8a7e055a98fdd28a857ed67f40f23819d96014ddf72c5fba062dff75a8bcd66ac079064191612c5477fff6dc8babc99510b4471539efbdbed76f7b2bbc6550469b1e0a2aa3b186ae93c4883fb55160d13e3e674afed3a06adfdfbca6a7bf907bef1931c87585db3307b9be23e9a67dfb80a08f9904f442d2007fba99a3442d820706dd0893f5d5ebd3cf954744b2d2d98f4ce38f870380149023a216dd18f3d7fd37def0220d1a8ded10f9a71977c85f68b140111c0a25c68ad39ae66dafa2207fb80d7a1078663aa545932854617b99af3a01cdf55f52ab663efcc0203bebfcf15c59ad7d7be310a690871f582174c7acbe03a162bf5e4944f21fce73d90b90f61951c5291cf8c71ab184f9ad8cbb0ba6e6ef3e956a12434f3af69570111c529ff811a421a234b85fc799f2487d62fef4cf4bce4043e2153768309fd4c1f2081f10b25b44bb01256c38c47892c159793e546baf88656bd1148b38f9c4ed5224fb10732ed7560e4271790b061c21f284da033f341be08f67c88fe3632af94f6276c19adb88a7414e02ac5323423b49c4f94b040081ecb12354356f4349a1e28b131e035467113a8ce267acf73bf8a040c4816c9c187775066cd82baf9b07f38f11c9a499516b061db8402209de2fccf4a32430f32b6115445d3e8b103f81abd17e09bdf02ca7c258622174c7fdf31afa2e8e87f3fac482037205e4ecbe9da3fc7d2fb411855490abe93d33c71dd47fe552c77569a9d3edb5c7c02f85a9f40836774d3b25fd69ab019d963c4a50b21e114706ba6a2036a65356855c61a5a81f584bfa5b253e207e9ceed0b4d1bf9069d8a083f640cd630cc4a119660eacb2bbd3e743bef49d6afff15ffafa79ebfcf73b951ffe7a4b2700047070eeb3c2e29cc30dd054d09548350757bf6c6f0ee49e6016cdd6c4cb365628bd8dd80f989281e4d30365b7c2089b54e7dc6514a4ba8320b97a590238177c1a6caf0e54b6cc749f69f649e211e3aa7cb01b0c15461903843f9162a99da44d068d62d9d55dfbb1c3fb802cc4f9015ce903f285dfc3125b3b1e61994503bcbc628c143841d0e1cb08320d7eaa0115427f147bbd0e6486ed1cbdbd40c01bbb1b2b8f7413a176c004efad504195d2100e92fb5af883f7259da770790b3075400501309a566c863cbf1f7d90a427e613474ce3ed94b4832a6fbc064f9bcdd48c79b38efe9f38aacb315ff202492f5dc62a17862613039b57ce62bad672446eafbe3f2c46806a9b085f9733a6b4201c7fdf5fcc0a63372125e19182599e9514776d6c6f984f312100ecad70c9191b8fcc5bc25172067ad0e20bb0394ea2fe1d3de9bfe020d629f1f6df8e413ca930583659fd8377b52a76a9414ea2992a65c2a14b630c938e270e857b8a55ca7ceb50dee25fb2e0962c0097b0bb0eff90beb1ba24a11e7335df71b59d7e4921b5f0564e39aeca391b744a71328f899e998721861bbf47401b58065805fee65256a23b11c8c36ba18de1d133b4b813de537d06f7546bd1767b380592f70bb12e7937d847a87732b552545fa136dd9df594aefc7816c952c8ca53423716dcebca612112753852e0c2c5ad0d2ab08427777bf2f34b7bf1e7a5bbcd07939e35aff5fc7fae09a15bc56890d12cb919969dfe10e456b2d335d5287c18df308e2d8bed7eccc583144c4d246a0ed19ae99d217719e68e8c910cdbc780a32d8cb5f303e83340591d2f49aadaaac226f932649e4fa6e457684aca6e722b780d037c5f1ef769bfbe07b8a32278f28d1b9ce592482c9f3811a6f7afed8ae02ebe927c83be64b752c74d1f1c8d8397da8a04d656f8a233fe07c258964dd88dc230bf109c85d380bb7adc02cbda4355516119ec4590490be446882846364576dbed82f7a03840a34c7e53d0685e57463e4a60ce156d4a637ce494aa248b7af723362ab968eb1cafa5c43ee73b450fd72eda3f43d49a2c8a7cdc3d90b7d704643c6d021a6de4790d5e0301de774cd029a2e2954b0ebebb3671bfa31ae1e62bc5171ddbd897374225f6f7ae0fb71379dcff334eec947d27bb53593f46a34adc5d14da12eadbaf6aa667acb8a42732eedb2c0aebef70c9762ca1f0075c4b802b4545ca8690761b426fc36426c816d4d1a94cadfe950ea8ad9c8e371b74183b61ba239df83a666b61481f047d795921e3f5c100ca52b5c26152c480b10cff4d53bd99d16983179391d28c3461bfdc1e02f2f47b81fdb335a049536cb64f0f6f587a63e6ec9432001d245cc338d7db26cc7187739e4e06afc8ff64f6a304fedb9426c7f3d7df0737233ab9cb2e33745da6ef41a468ba43077493c12bdffe3e7b5067ed86e02e2a26f0cec59ea4f10c5964f6356011ba2e4c37e60445677dbfedb8083f45d9a0fc3d37e30eb9681a4d97487014c854b9768cdbf1127f1e77628fedcd1f365a2bc85ede58ddc88192376600895a3f8aa712431b5d99b318aa8bdcfeabd2bf99119f66c5e5daab915321a4110c720ee42d2e642c36c686376c9d3f40ea788d2c1c20fc177a52115b67b14", 0x1000}, {&(0x7f0000000640)="bbe77956bed7547d6a", 0x9}, {&(0x7f00000006c0)="510a297234db6cd56ae05a1bbe1affaa7c9e825e48313de11573a8629f47f2c1e4e398b0007e7d11caaaf6ff75b1559618861e58600cc8eec6eaf554603cad8b56616eb2029f0220c6b572bb6b205bf8272637eb0ccca3ed7b96b21428c13c4814ceb691000b505301698201e9d2eabc881d0b1c8f77325ce6332e5054db6fb3751d040d3c867c1f26eef84645815dfcc0733f652a013ef1e3690a4d7a3639ca5b89e6bb64", 0xa5}, {&(0x7f0000001880)="4832c71b5515649bc72671ca74e7a2ec5f4e95b250b6939793bda3cf66c49f88b8b506960ab819ff76c06a18e77faa7d04aad37a57dc683494d79382a5dd77b54708a233e7495fe70170c402dc779c09948b76ac39157fea29d99aa3aaea94344c683ecf48f4fdcbd43ebcea20f3d3786dccaa791c33dfb7ad31f2de06b2389e963c70dea50bc85f0fff786290eacf689ba372da712df3d84c34295738e3b32ea4da6ce59c38d13faa96bd7fbfa8ca5f46dce2bbc67bef4fce63ffd401a4fe1c2698bf755a44bffd2944fefd4a20e683ae06feb8cc4ec3e1b1", 0xd9}], 0x9, 0x1, 0xfffff000) (async) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='vfat\x00', 0x1d483, 0x0) (async) kernel console output (not intermixed with test programs): 7:44453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.6.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06438eec9 code=0x7ffc0000 [ 202.020912][ T36] audit: type=1326 audit(1760316016.347:44454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.6.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06438eec9 code=0x7ffc0000 [ 202.044560][ T36] audit: type=1326 audit(1760316016.347:44455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.6.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff06438eec9 code=0x7ffc0000 [ 202.077209][ T7703] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 202.077247][ T7703] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:643 [ 202.203745][ T7710] netlink: 'syz.9.2345': attribute type 5 has an invalid length. [ 202.221178][ T7710] netlink: 'syz.9.2345': attribute type 5 has an invalid length. [ 202.229115][ T7710] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.2345'. [ 202.252520][ T3579] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 202.407205][ T7717] incfs: Error accessing: /dev/rnullb0. [ 202.412999][ T7717] incfs: mount failed -20 [ 202.413809][ T7715] overlay: ./file0 is not a directory [ 202.423087][ T7717] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2347'. [ 202.432647][ T7718] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2347'. [ 202.434274][ T3579] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.453692][ T3579] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.463698][ T3579] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 202.477023][ T3579] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.486124][ T3579] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.495533][ T3579] usb 6-1: config 0 descriptor?? [ 202.637706][ T7726] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=257 sclass=netlink_tcpdiag_socket pid=7726 comm=syz.9.2349 [ 202.645121][ T7727] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=257 sclass=netlink_tcpdiag_socket pid=7727 comm=syz.9.2349 [ 202.664429][ T7726] binder: Unknown parameter '' [ 202.728256][ T3579] usbhid 6-1:0.0: can't add hid device: -71 [ 202.741184][ T3579] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 202.751595][ T3579] usb 6-1: USB disconnect, device number 20 [ 202.908195][ T7738] rust_binder: Error while translating object. [ 202.908243][ T7738] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 202.915720][ T7738] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:661 [ 203.254463][ T3579] usb 10-1: new full-speed USB device number 30 using dummy_hcd [ 203.401448][ T7776] input: syz0 as /devices/virtual/input/input30 [ 203.496084][ T7783] rust_binder: 737: no such ref 1 [ 203.501533][ T7783] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:737 [ 203.518102][ T7785] rust_binder: Write failure EINVAL in pid:739 [ 203.542870][ T7787] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 203.616340][ T3578] kernel write not supported for file /746/clear_refs (pid: 3578 comm: kworker/1:7) [ 203.639613][ T7744] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.653695][ T7744] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 203.668667][ T3584] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 203.673815][ T7744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.686008][ T7796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.686535][ T7744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.695235][ T7796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.713783][ T3579] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 203.726922][ T3579] usb 10-1: can't read configurations, error -71 [ 203.819276][ T3584] usb 6-1: device descriptor read/64, error -71 [ 203.842333][ T7810] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:679 [ 204.075118][ T3584] usb 6-1: device descriptor read/64, error -71 [ 204.341525][ T3584] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 204.480122][ T3584] usb 6-1: device descriptor read/64, error -71 [ 204.735991][ T3584] usb 6-1: device descriptor read/64, error -71 [ 204.764696][ T7818] /dev/rnullb0: Can't open blockdev [ 204.853321][ T3584] usb usb6-port1: attempt power cycle [ 205.215650][ T3584] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 205.238193][ T3584] usb 6-1: device descriptor read/8, error -71 [ 205.376992][ T3584] usb 6-1: device descriptor read/8, error -71 [ 205.642062][ T3584] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 205.664528][ T3584] usb 6-1: device descriptor read/8, error -71 [ 205.767236][ T7852] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 205.767261][ T7852] rust_binder: Error while translating object. [ 205.776367][ T7852] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 205.782829][ T7852] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:260 [ 205.793966][ T7853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.803046][ T3584] usb 6-1: device descriptor read/8, error -71 [ 205.942361][ T3584] usb usb6-port1: unable to enumerate USB device [ 205.952544][ T7865] rust_binder: Write failure EFAULT in pid:271 [ 206.630558][ T7870] rust_binder: Write failure EFAULT in pid:704 [ 206.663844][ T7875] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 206.681172][ T7878] rust_binder: Failed copying remainder into alloc: EFAULT [ 206.689748][ T7878] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 206.697449][ T7878] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 206.705917][ T7878] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:428 [ 206.849136][ T7904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.873741][ T7904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.881132][ T7905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.909026][ T7905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.989744][ T7916] rust_binder: Error while translating object. [ 206.989807][ T7916] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 206.996410][ T7915] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 207.006019][ T7916] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:727 [ 207.144023][ T7919] fuse: Bad value for 'fd' [ 207.421948][ T3577] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 207.582900][ T3577] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 207.592135][ T3577] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.601002][ T3577] usb 6-1: config 0 descriptor?? [ 207.624455][ T3584] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 207.644110][ T7942] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:764 [ 207.784318][ T3584] usb 10-1: Using ep0 maxpacket: 16 [ 207.801130][ T3584] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 207.809640][ T3584] usb 10-1: config 0 has no interface number 0 [ 207.815878][ T3584] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 207.825958][ T3584] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 207.836140][ T3584] usb 10-1: config 0 interface 41 has no altsetting 0 [ 207.844965][ T3584] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 207.854688][ T3584] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.863096][ T3584] usb 10-1: Product: syz [ 207.867653][ T3584] usb 10-1: Manufacturer: syz [ 207.872873][ T3584] usb 10-1: SerialNumber: syz [ 207.878875][ T3584] usb 10-1: config 0 descriptor?? [ 207.884572][ T7934] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 207.892075][ T7934] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 208.062147][ T7958] rust_binder: Error while translating object. [ 208.062240][ T7958] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 208.068704][ T7958] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:780 [ 208.102913][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 208.102938][ T36] audit: type=1400 audit(1760316022.305:44478): avc: denied { validate_trans } for pid=7962 comm="syz.8.2425" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 208.115704][ T7934] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 208.151260][ T7934] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 208.490712][ T3584] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 208.501082][ T3584] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -71 [ 208.512009][ T3584] usb 10-1: USB disconnect, device number 32 [ 208.680456][ T3577] usb 6-1: Cannot set autoneg [ 208.685721][ T3577] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 208.698853][ T3577] usb 6-1: USB disconnect, device number 25 [ 209.084181][ T7980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.093622][ T7980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.103166][ T7980] rust_binder: 793: no such ref 2 [ 209.262025][ T7993] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 209.262890][ T7993] Unsupported ieee802154 address type: 0 [ 209.311801][ T7993] rust_binder: 757: no such ref 1 [ 209.317065][ T7993] rust_binder: Error while translating object. [ 209.317103][ T7993] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 209.323694][ T7993] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:757 [ 209.347922][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 209.497981][ T8007] rust_binder: 283: no such ref 0 [ 209.503307][ T8007] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 209.510465][ T8008] rust_binder: 283: no such ref 0 [ 209.516181][ T8007] rust_binder: 283: no such ref 2 [ 209.521482][ T8007] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 209.521505][ T8008] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 209.541062][ T8008] rust_binder: 283: no such ref 2 [ 209.546695][ T8008] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 209.617615][ T3584] usb 10-1: new full-speed USB device number 33 using dummy_hcd [ 209.670886][ T3583] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 209.681253][ T8019] rust_binder: Error while translating object. [ 209.681297][ T8019] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 209.687606][ T8019] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:800 [ 209.717696][ T8022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.736423][ T8022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.789245][ T3584] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.799596][ T3584] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 209.811053][ T3584] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.821089][ T3584] usb 10-1: config 0 interface 0 has no altsetting 0 [ 209.828106][ T3584] usb 10-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 209.837340][ T3584] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.845538][ T3583] usb 6-1: Invalid ep0 maxpacket: 16 [ 209.851939][ T3584] usb 10-1: config 0 descriptor?? [ 209.980028][ T3583] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 210.139942][ T3583] usb 6-1: Invalid ep0 maxpacket: 16 [ 210.145502][ T3583] usb usb6-port1: attempt power cycle [ 210.287658][ T3584] kye 0003:0458:5019.0016: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 210.298878][ T3584] kye 0003:0458:5019.0016: unknown main item tag 0x0 [ 210.305689][ T3584] kye 0003:0458:5019.0016: unknown main item tag 0x0 [ 210.312496][ T3584] kye 0003:0458:5019.0016: unknown main item tag 0x0 [ 210.319224][ T3584] kye 0003:0458:5019.0016: unknown main item tag 0x0 [ 210.326112][ T3584] kye 0003:0458:5019.0016: unknown main item tag 0x0 [ 210.333827][ T3584] kye 0003:0458:5019.0016: hidraw0: USB HID v0.09 Device [HID 0458:5019] on usb-dummy_hcd.9-1/input0 [ 210.345078][ T3584] kye 0003:0458:5019.0016: tablet-enabling feature report not found [ 210.353144][ T3584] kye 0003:0458:5019.0016: tablet enabling failed [ 210.471176][ T8031] netlink: 'syz.8.2445': attribute type 4 has an invalid length. [ 210.482252][ T8031] netlink: 'syz.8.2445': attribute type 4 has an invalid length. [ 210.512993][ T3583] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 210.535644][ T3583] usb 6-1: Invalid ep0 maxpacket: 16 [ 210.537135][ T7999] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3965544961 (63448719376 ns) > initial count (51650093520 ns). Using initial count to start timer. [ 210.609930][ T3577] usb 10-1: USB disconnect, device number 33 [ 210.624706][ T8040] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 210.624824][ T8040] rust_binder: Error in use_page_slow: ESRCH [ 210.631591][ T8040] rust_binder: use_range failure ESRCH [ 210.638038][ T8040] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 210.644095][ T8040] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 210.652451][ T8040] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:814 [ 210.683595][ T3583] usb 6-1: new low-speed USB device number 29 using dummy_hcd [ 210.715886][ T3583] usb 6-1: Invalid ep0 maxpacket: 16 [ 210.721347][ T3583] usb usb6-port1: unable to enumerate USB device [ 211.017204][ T8063] netlink: 'syz.8.2455': attribute type 29 has an invalid length. [ 211.025275][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2455'. [ 211.035424][ T8063] binder: Unknown parameter '01777777777777777777777' [ 211.043094][ T36] audit: type=1400 audit(1760316025.063:44479): avc: denied { mounton } for pid=8062 comm="syz.8.2455" path="/273/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 211.067264][ T36] audit: type=1400 audit(1760316025.101:44480): avc: denied { unmount } for pid=3900 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 211.165693][ T8075] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.545271][ T8083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.561330][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 211.561741][ T8083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.142278][ T8091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.153230][ T8091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.589347][ T8109] 9pnet_fd: Insufficient options for proto=fd [ 212.625216][ T8111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.635645][ T8111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.972295][ T3583] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 213.029305][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 213.145718][ T3583] usb 6-1: config 0 has an invalid interface number: 199 but max is 1 [ 213.154596][ T3583] usb 6-1: config 0 has no interface number 1 [ 213.161446][ T3583] usb 6-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 213.172114][ T3583] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 213.183991][ T3583] usb 6-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 213.193226][ T3583] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 213.201436][ T3583] usb 6-1: SerialNumber: syz [ 213.207243][ T3583] usb 6-1: config 0 descriptor?? [ 213.213391][ T3583] usb 6-1: Found UVC 0.00 device (0002:0000) [ 213.220362][ T3583] usb 6-1: No valid video chain found. [ 213.233261][ T8117] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 213.233301][ T8117] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:870 [ 213.254526][ T36] audit: type=1400 audit(1760316027.137:44481): avc: denied { create } for pid=8118 comm="syz.8.2475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 213.432167][ T3577] usb 6-1: USB disconnect, device number 30 [ 214.413554][ T8141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.422483][ T8141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.433697][ T8141] overlayfs: missing 'lowerdir' [ 214.455363][ T3577] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 214.577244][ T8143] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 214.595028][ T3577] usb 6-1: device descriptor read/64, error -71 [ 214.831537][ T3579] usb 10-1: new full-speed USB device number 34 using dummy_hcd [ 214.863697][ T3577] usb 6-1: device descriptor read/64, error -71 [ 214.994245][ T3579] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 215.005976][ T3579] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 215.017697][ T3579] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 215.030568][ T3579] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 215.040279][ T3579] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.049056][ T3579] usb 10-1: Manufacturer: Ѝ [ 215.053724][ T3579] usb 10-1: SerialNumber: ꂠ閸ᚗ䣉뮯쩀蔛⓴銨跈ލ౦꿥턊윞⏟蝡ꯘ䧳缐쫓氕ྷ屋兙璋횝岮輳鿃䂾榳鹦ࣵᨣධ뱱ㅻ啁櫥⿒◹聛ｫ︸⿳ㅞ恋酖ꩮ俠텼糿鸒륉㽭ධ肛빱 [ 215.054331][ T8148] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:885 [ 215.078356][ T8143] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 215.132336][ T3577] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 215.250610][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 215.250614][ T4227] Bluetooth: hci0: command 0x1003 tx timeout [ 215.272088][ T3577] usb 6-1: device descriptor read/64, error -71 [ 215.310791][ T8144] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:775 [ 215.526442][ T3579] cdc_ncm 10-1:1.0: bind() failure [ 215.541713][ T3577] usb 6-1: device descriptor read/64, error -71 [ 215.549854][ T3579] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 215.557744][ T3579] cdc_ncm 10-1:1.1: bind() failure [ 215.564380][ T3579] usb 10-1: USB disconnect, device number 34 [ 215.658937][ T3577] usb usb6-port1: attempt power cycle [ 215.816132][ T8150] rust_binder: Error while translating object. [ 215.816198][ T8150] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 215.822970][ T8150] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:296 [ 215.922312][ T8159] /dev/rnullb0: Can't open blockdev [ 216.024133][ T3577] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 216.046898][ T3577] usb 6-1: device descriptor read/8, error -71 [ 216.158149][ T8184] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:786 [ 216.186268][ T3577] usb 6-1: device descriptor read/8, error -71 [ 216.464560][ T3577] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 216.498044][ T3577] usb 6-1: device descriptor read/8, error -71 [ 216.648360][ T3577] usb 6-1: device descriptor read/8, error -71 [ 216.656306][ T8202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.667763][ T8202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.733146][ T3583] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 216.776186][ T3577] usb usb6-port1: unable to enumerate USB device [ 216.926498][ T3583] usb 10-1: Using ep0 maxpacket: 16 [ 216.934525][ T3583] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.945357][ T3583] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.962374][ T3583] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 216.973306][ T3583] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.981925][ T3583] usb 10-1: Product: syz [ 216.986422][ T3583] usb 10-1: Manufacturer: syz [ 216.991676][ T3583] usb 10-1: SerialNumber: syz [ 217.170548][ T8216] __vm_enough_memory: pid: 8216, comm: syz.6.2508, bytes: 18014402804453376 not enough memory for the allocation [ 217.221217][ T3583] usb 10-1: 0:2 : does not exist [ 217.233041][ T3583] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 217.256746][ T3583] usb 10-1: USB disconnect, device number 35 [ 217.341842][ T36] audit: type=1400 audit(1760316030.934:44482): avc: denied { remount } for pid=8222 comm="syz.5.2511" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 217.380897][ T8226] 9pnet_fd: Insufficient options for proto=fd [ 217.544836][ T36] audit: type=1400 audit(1760316031.129:44483): avc: denied { write } for pid=8243 comm="syz.5.2518" path="socket:[49123]" dev="sockfs" ino=49123 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 217.562997][ T8246] /dev/loop0: Can't lookup blockdev [ 217.596768][ T8249] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.2520'. [ 217.893360][ T3583] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 217.926837][ T8259] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.935295][ T8256] random: crng reseeded on system resumption [ 218.032933][ T3583] usb 6-1: device descriptor read/64, error -71 [ 218.077317][ T8262] netlink: 'syz.9.2524': attribute type 1 has an invalid length. [ 218.290687][ T3583] usb 6-1: device descriptor read/64, error -71 [ 218.333664][ T3578] usb 10-1: new full-speed USB device number 36 using dummy_hcd [ 218.507167][ T3578] usb 10-1: not running at top speed; connect to a high speed hub [ 218.515992][ T3578] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 218.525137][ T3578] usb 10-1: config 1 interface 1 has no altsetting 0 [ 218.533665][ T3578] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 218.543152][ T3578] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.551528][ T3578] usb 10-1: Product: Ќ [ 218.555925][ T3578] usb 10-1: Manufacturer: ⷬ鷻愔띑Ꟃ꼡⿪㙿뼺뱈갂ꕀ鶃ᴠꡏ袤丅띦쑝셴觍봓㜸ࡾ䌈ᑏꙈ嗐䋠꒔끘棩ᧆ忯ᠾ怦㚆쀕⮣쩯敤ﲍᔐ勆䘟欁〄탢䞖淬䣼ꡀ莛륳띔룪⥚恅ॲ晛먂繺쟌썙⭟沜땵⪎쿖洃␭䁶꦳痉쨉撟틭糑ꦝ䧔喊浚ךּ苳毟﴿䭗䖯춷냶㬖ࣵ똮⒔艳﹠㧌 [ 218.559227][ T3583] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 218.591632][ T3578] usb 10-1: SerialNumber:  [ 218.731240][ T3583] usb 6-1: device descriptor read/64, error -71 [ 218.739865][ T8269] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 218.739901][ T8269] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:919 [ 218.821412][ T8262] rust_binder: Error while translating object. [ 218.831024][ T8262] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 218.839227][ T8262] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:807 [ 218.999588][ T3583] usb 6-1: device descriptor read/64, error -71 [ 219.118193][ T3583] usb usb6-port1: attempt power cycle [ 219.482937][ T3583] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 219.516330][ T3583] usb 6-1: device descriptor read/8, error -71 [ 219.655950][ T3583] usb 6-1: device descriptor read/8, error -71 [ 219.777657][ T8280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.786731][ T8280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.880498][ T8285] rust_binder: Write failure EFAULT in pid:936 [ 219.912471][ T3583] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 219.956458][ T3583] usb 6-1: device descriptor read/8, error -71 [ 220.096044][ T3583] usb 6-1: device descriptor read/8, error -71 [ 220.125809][ T8296] /dev/rnullb0: Can't open blockdev [ 220.151190][ T8298] overlay: ./file0 is not a directory [ 220.158796][ T8298] netlink: 100 bytes leftover after parsing attributes in process `syz.8.2534'. [ 220.213288][ T3583] usb usb6-port1: unable to enumerate USB device [ 220.459467][ T8303] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 221.197689][ T3578] usb 10-1: 2:1 : no UAC_FORMAT_TYPE desc [ 221.238280][ T3578] usb 10-1: USB disconnect, device number 36 [ 221.262051][ T4148] udevd[4148]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 221.555841][ T36] audit: type=1326 audit(1760316034.863:44484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8330 comm="syz.6.2546" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff06438eec9 code=0x0 [ 221.730668][ T8336] 9pnet_fd: Insufficient options for proto=fd [ 221.850199][ T8345] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 221.914704][ T8357] rust_binder: Error while translating object. [ 221.914741][ T8357] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 221.921160][ T8357] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:505 [ 221.981919][ T8339] rust_binder: Read failure Err(EFAULT) in pid:819 [ 222.002519][ T8360] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2554'. [ 222.168270][ T8370] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 222.168303][ T8370] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:518 [ 222.180923][ T8372] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.203562][ T36] audit: type=1400 audit(1760316035.469:44485): avc: denied { append } for pid=8374 comm="syz.5.2558" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 222.600536][ T8383] rust_binder: Error while translating object. [ 222.600598][ T8383] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 222.606920][ T8383] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:823 [ 222.648173][ T8385] input: syz1 as /devices/virtual/input/input33 [ 223.310295][ T8398] tmpfs: Unknown parameter '/file0' [ 223.754058][ T8413] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 224.064860][ T8420] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 224.078233][ T3584] usb 10-1: new full-speed USB device number 37 using dummy_hcd [ 224.081610][ T8420] __vm_enough_memory: pid: 8420, comm: syz.5.2573, bytes: 18014402804453376 not enough memory for the allocation [ 224.208006][ T8423] __vm_enough_memory: pid: 8423, comm: syz.5.2574, bytes: 18014402804453376 not enough memory for the allocation [ 224.220095][ T3584] usb 10-1: device descriptor read/64, error -71 [ 224.475397][ T3584] usb 10-1: device descriptor read/64, error -71 [ 224.486216][ T3578] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 224.625723][ T3578] usb 6-1: device descriptor read/64, error -71 [ 224.733057][ T3584] usb 10-1: new full-speed USB device number 38 using dummy_hcd [ 224.741749][ T8429] rust_binder: Write failure EFAULT in pid:359 [ 224.872679][ T3584] usb 10-1: device descriptor read/64, error -71 [ 224.904750][ T3578] usb 6-1: device descriptor read/64, error -71 [ 225.141943][ T3584] usb 10-1: device descriptor read/64, error -71 [ 225.162613][ T3578] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 225.190223][ T8431] /dev/rnullb0: Can't open blockdev [ 225.259093][ T3584] usb usb10-port1: attempt power cycle [ 225.282273][ T8440] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 225.302074][ T3578] usb 6-1: device descriptor read/64, error -71 [ 225.352934][ T36] audit: type=1400 audit(1760316038.394:44486): avc: denied { mounton } for pid=8450 comm="syz.6.2584" path="/syzcgroup/unified/syz6" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 225.354530][ T8451] /dev/rnullb0: Can't open blockdev [ 225.388339][ T8451] /dev/rnullb0: Can't open blockdev [ 225.416763][ T36] audit: type=1400 audit(1760316038.459:44487): avc: denied { listen } for pid=8455 comm="syz.8.2585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 225.457138][ T8458] syzkaller0: entered promiscuous mode [ 225.465071][ T8458] syzkaller0: entered allmulticast mode [ 225.572568][ T8466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.582235][ T3578] usb 6-1: device descriptor read/64, error -71 [ 225.586441][ T8466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.590122][ T8467] netlink: 8540 bytes leftover after parsing attributes in process `syz.6.2586'. [ 225.607001][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2586'. [ 225.617380][ T8467] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2586'. [ 225.634672][ T3584] usb 10-1: new full-speed USB device number 39 using dummy_hcd [ 225.657831][ T3584] usb 10-1: device descriptor read/8, error -71 [ 225.699137][ T3578] usb usb6-port1: attempt power cycle [ 225.797158][ T3584] usb 10-1: device descriptor read/8, error -71 [ 226.063892][ T3578] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 226.063901][ T3584] usb 10-1: new full-speed USB device number 40 using dummy_hcd [ 226.086856][ T3578] usb 6-1: device descriptor read/8, error -71 [ 226.097490][ T3584] usb 10-1: device descriptor read/8, error -71 [ 226.153400][ T8470] /dev/rnullb0: Can't open blockdev [ 226.226055][ T3578] usb 6-1: device descriptor read/8, error -71 [ 226.242850][ T8479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.247413][ T3584] usb 10-1: device descriptor read/8, error -71 [ 226.251696][ T8479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.364458][ T3584] usb usb10-port1: unable to enumerate USB device [ 226.392768][ T8481] netlink: 'syz.6.2595': attribute type 12 has an invalid length. [ 226.482531][ T3578] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 226.505264][ T3578] usb 6-1: device descriptor read/8, error -71 [ 226.645240][ T3578] usb 6-1: device descriptor read/8, error -71 [ 226.761599][ T3578] usb usb6-port1: unable to enumerate USB device [ 226.901428][ T8485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.910400][ T8485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.919519][ T8485] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 226.919547][ T8485] rust_binder: Error while translating object. [ 226.919766][ T8486] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true [ 226.928726][ T8485] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 226.935519][ T8486] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 226.943639][ T8485] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1003 [ 226.955118][ T8486] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1003 [ 227.458954][ T45] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 227.541456][ T8497] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 227.549956][ T8497] No source specified [ 227.554957][ T8497] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 227.573046][ T8500] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 227.627139][ T8503] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2604'. [ 227.645635][ T45] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.657544][ T45] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.668569][ T45] usb 10-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 227.678098][ T45] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.687250][ T45] usb 10-1: config 0 descriptor?? [ 227.804879][ T8508] bridge0: port 3(veth1_to_team) entered blocking state [ 227.812293][ T8508] bridge0: port 3(veth1_to_team) entered disabled state [ 227.819381][ T8508] veth1_to_team: entered allmulticast mode [ 227.825744][ T8508] veth1_to_team: entered promiscuous mode [ 228.176016][ T36] audit: type=1400 audit(1760316041.031:44488): avc: denied { append } for pid=8512 comm="syz.5.2607" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 228.177477][ T8513] rust_binder: Write failure EFAULT in pid:545 [ 228.501583][ T36] audit: type=1400 audit(1760316041.338:44489): avc: denied { relabelfrom } for pid=8529 comm="syz.5.2613" name="" dev="pipefs" ino=52065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 228.613530][ T8526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.622553][ T8526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.698077][ T8534] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1022 [ 228.698129][ T8534] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 228.707766][ T8534] rust_binder: Read failure Err(EFAULT) in pid:1022 [ 228.756640][ T36] audit: type=1400 audit(1760316041.562:44490): avc: denied { mounton } for pid=8536 comm="syz.8.2615" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 228.756722][ T8537] 9pnet_fd: Insufficient options for proto=fd [ 228.800226][ T3578] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 228.836522][ T8541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.845274][ T8541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.962228][ T3578] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 228.970948][ T3578] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 228.979945][ T3578] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 228.990345][ T3578] usb 6-1: config 220 has no interface number 2 [ 228.997182][ T3578] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 229.010839][ T3578] usb 6-1: config 220 interface 0 has no altsetting 0 [ 229.017721][ T3578] usb 6-1: config 220 interface 76 has no altsetting 0 [ 229.024740][ T3578] usb 6-1: config 220 interface 1 has no altsetting 0 [ 229.035265][ T3578] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 229.044812][ T3578] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.053190][ T3578] usb 6-1: Product: syz [ 229.057539][ T3578] usb 6-1: Manufacturer: syz [ 229.062382][ T3578] usb 6-1: SerialNumber: syz [ 229.284758][ T8530] rust_binder: Write failure EFAULT in pid:561 [ 229.295323][ T3578] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 229.308188][ T3578] usb 6-1: No valid video chain found. [ 229.314014][ T3578] usb 6-1: selecting invalid altsetting 0 [ 229.324518][ T3578] usb 6-1: USB disconnect, device number 43 [ 229.480550][ T8584] fuse: Bad value for 'fd' [ 229.560493][ T8598] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2633'. [ 229.660586][ T36] audit: type=1326 audit(1760316042.420:44491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8609 comm="syz.6.2638" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff06438eec9 code=0x0 [ 229.678648][ T8613] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2639'. [ 229.693455][ T8613] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2639'. [ 229.912912][ T8623] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2641'. [ 229.944336][ T8624] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 230.227028][ T3584] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 230.299639][ T45] hid-led 0003:0FC5:B080.0017: probe with driver hid-led failed with error -71 [ 230.317523][ T45] usb 10-1: USB disconnect, device number 41 [ 230.398650][ T3584] usb 6-1: Using ep0 maxpacket: 8 [ 230.410148][ T3584] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 230.429414][ T3584] usb 6-1: config 179 has no interface number 0 [ 230.446788][ T3584] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 230.463205][ T3584] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 230.474956][ T3584] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 230.486292][ T3584] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 230.502283][ T3584] usb 6-1: config 179 interface 65 has no altsetting 0 [ 230.511226][ T3584] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 230.520741][ T3584] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.604963][ T8644] 9pnet_fd: Insufficient options for proto=fd [ 230.670634][ T8648] rust_binder: Error while translating object. [ 230.670676][ T8648] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 230.677127][ T8648] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:392 [ 231.505283][ T36] audit: type=1326 audit(1760316044.116:44492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8665 comm="syz.8.2656" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f71c378eec9 code=0x0 [ 232.073422][ T8679] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 232.563994][ T8706] netlink: 'syz.8.2668': attribute type 15 has an invalid length. [ 232.597614][ T8706] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2668'. [ 232.619422][ T8706] netlink: 'syz.8.2668': attribute type 15 has an invalid length. [ 232.627479][ T8706] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2668'. [ 233.145540][ T45] usb 6-1: USB disconnect, device number 44 [ 233.195970][ T8717] incfs: Can't find or create .index dir in ./file0 [ 233.203376][ T8717] incfs: mount failed -1 [ 233.211793][ T36] audit: type=1400 audit(1760316045.729:44493): avc: denied { nlmsg_read } for pid=8718 comm="syz.9.2672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 233.498491][ T3579] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 233.671402][ T3579] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.682665][ T3579] usb 10-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 233.692139][ T3579] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.713255][ T3579] usb 10-1: config 0 descriptor?? [ 234.148455][ T8726] SELinux: security_context_str_to_sid () failed with errno=-22 [ 234.165093][ T3579] usbhid 10-1:0.0: can't add hid device: -71 [ 234.181191][ T3579] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 234.199351][ T3579] usb 10-1: USB disconnect, device number 42 [ 234.356169][ T8741] rust_binder: validate_parent_fixup: new_min_offset=37, sg_entry.length=0 [ 234.356191][ T8741] rust_binder: Error while translating object. [ 234.365264][ T8741] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 234.372870][ T8741] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:579 [ 234.397267][ T8743] /dev/rnullb0: Can't open blockdev [ 234.432392][ T8746] rust_binder: 583: no such ref 0 [ 234.438260][ T8747] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:583 [ 234.525212][ T8762] rust_binder: Write failure EFAULT in pid:417 [ 234.616962][ T8770] rust_binder: Got transaction with invalid offset. [ 234.623353][ T8770] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 234.630685][ T8770] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:425 [ 234.710244][ T650] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 234.717023][ T8775] fuse: Invalid gid '00000000000037777777777' [ 234.757578][ T8785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=8785 comm=syz.6.2694 [ 234.774656][ T8785] rust_binder: Write failure EFAULT in pid:435 [ 234.791414][ T8789] 9pnet_fd: Insufficient options for proto=fd [ 234.792920][ T8791] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 234.806064][ T8791] rust_binder: Error while translating object. [ 234.812954][ T8791] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 234.819762][ T8791] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:891 [ 234.864829][ T8798] rust_binder: 898: no such ref 0 [ 234.879465][ T8798] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 234.887278][ T8798] rust_binder: 898: no such ref 2 [ 234.892853][ T650] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 234.892905][ T8798] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 234.911406][ T650] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 234.935067][ T8801] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 234.935096][ T650] usb 6-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 234.951845][ T8801] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 234.956238][ T650] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.972472][ T650] usb 6-1: config 0 descriptor?? [ 234.978013][ T8751] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 234.989119][ T650] usbhid 6-1:0.0: can't add hid device: -22 [ 234.995989][ T650] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 235.031539][ T8809] kvm: pic: non byte write [ 235.038322][ T8809] input: syz1 as /devices/virtual/input/input35 [ 235.181469][ T8814] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 235.191191][ T8814] binder: Unknown parameter '#y/fuse' [ 235.204681][ T3584] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 235.340070][ T8823] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 235.364360][ T3584] usb 10-1: Using ep0 maxpacket: 16 [ 235.372150][ T3584] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.384109][ T3584] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 235.394565][ T3584] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 235.405805][ T3584] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 235.417773][ T3584] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 235.427214][ T3584] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.435809][ T3584] usb 10-1: Product: syz [ 235.440253][ T3584] usb 10-1: Manufacturer: syz [ 235.445372][ T3584] usb 10-1: SerialNumber: syz [ 235.451574][ T45] usb 6-1: USB disconnect, device number 45 [ 235.683588][ T3584] cdc_ncm 10-1:1.0: CDC Union missing and no IAD found [ 235.692249][ T8846] netlink: 240 bytes leftover after parsing attributes in process `syz.9.2712'. [ 235.696183][ T3584] cdc_ncm 10-1:1.0: bind() failure [ 235.708597][ T3584] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 235.715625][ T3584] cdc_ncm 10-1:1.1: bind() failure [ 235.722294][ T3584] usb 10-1: USB disconnect, device number 43 [ 236.271099][ T8865] rust_binder: Error while translating object. [ 236.271143][ T8865] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 236.278187][ T8865] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:907 [ 236.996896][ T8876] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 237.018030][ T8876] kvm: requested 82133 ns i8254 timer period limited to 200000 ns [ 237.030287][ T8876] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 237.038959][ T8876] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 237.052939][ T8876] overlayfs: conflicting options: userxattr,verity=require [ 237.061228][ T8876] /dev/rnullb0: Can't open blockdev [ 237.143529][ T8883] rust_binder: Error while translating object. [ 237.143587][ T8883] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 237.149987][ T8883] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:599 [ 237.341112][ T8893] rust_binder: Write failure EINVAL in pid:607 [ 237.519125][ T8923] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2739'. [ 237.559873][ T8925] netlink: 'syz.8.2740': attribute type 13 has an invalid length. [ 237.584402][ T8928] ip6gretap0: mtu less than device minimum [ 237.766032][ T3579] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 237.926769][ T3579] usb 6-1: Using ep0 maxpacket: 8 [ 237.934543][ T3579] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 16 [ 237.945206][ T3579] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 1023 [ 237.956905][ T3579] usb 6-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.971330][ T3579] usb 6-1: config 1 interface 0 has no altsetting 0 [ 237.980080][ T3579] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 237.989940][ T3579] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.998444][ T3579] usb 6-1: Product: ⡀ [ 238.003235][ T3579] usb 6-1: Manufacturer: 首榎沍䓄ﬦ駔Ⓓ鑽縋괉ꀢᇿ⒚醫Ꮴ᧣뮴衚牃凎塅䬐槾뀺觫ꅱⱒ呸츿｛ᔙば㟐위쎓솉ᄹ龽誖駧犈｀踏節䗒녜ꅉ퐬奲竎蓝Ⱶ堈瓙ᠪ앎嬖䏤ᬣ❈篷㘠梦焐匁ꖇㅠ䕒 [ 238.028610][ T3579] usb 6-1: SerialNumber: 巒緊䙋 [ 238.040159][ T8917] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 238.048420][ T8917] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 238.154645][ T8935] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2743'. [ 238.271129][ T8942] tipc: Trying to set illegal importance in message [ 238.283963][ T3579] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 238.297724][ T3579] usb 6-1: USB disconnect, device number 46 [ 239.111850][ T8976] rust_binder: Error while translating object. [ 239.111924][ T8976] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 239.118370][ T8976] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:485 [ 239.152592][ T8980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.159558][ T3578] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 239.163421][ T8980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.309599][ T3578] usb 6-1: device descriptor read/64, error -71 [ 239.383093][ T8990] fuse: Bad value for 'fd' [ 239.497748][ T9003] binder: Bad value for 'max' [ 239.577650][ T3578] usb 6-1: device descriptor read/64, error -71 [ 239.845557][ T3578] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 239.879139][ T9039] rust_binder: Failed copying remainder into alloc: EFAULT [ 239.879174][ T9039] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 239.886753][ T9039] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 239.896144][ T9039] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:510 [ 239.925265][ T9048] /dev/loop0: Can't lookup blockdev [ 239.957673][ T36] audit: type=1400 audit(1760316052.016:44494): avc: denied { accept } for pid=9052 comm="syz.8.2779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 239.995604][ T3578] usb 6-1: device descriptor read/64, error -71 [ 240.175376][ T36] audit: type=1326 audit(1760316052.221:44495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9098 comm="syz.8.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c378eec9 code=0x7ff00000 [ 240.199879][ T36] audit: type=1326 audit(1760316052.221:44496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9098 comm="syz.8.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c378eec9 code=0x7ff00000 [ 240.225201][ T36] audit: type=1326 audit(1760316052.221:44497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9098 comm="syz.8.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c378eec9 code=0x7ff00000 [ 240.249994][ T36] audit: type=1326 audit(1760316052.221:44498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9098 comm="syz.8.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c378eec9 code=0x7ff00000 [ 240.274536][ T36] audit: type=1326 audit(1760316052.221:44499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9098 comm="syz.8.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c378eec9 code=0x7ff00000 [ 240.274599][ T3578] usb 6-1: device descriptor read/64, error -71 [ 240.299308][ T36] audit: type=1326 audit(1760316052.221:44500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9098 comm="syz.8.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c378eec9 code=0x7ff00000 [ 240.305418][ T3579] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 240.330356][ T36] audit: type=1326 audit(1760316052.221:44501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9098 comm="syz.8.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c378eec9 code=0x7ff00000 [ 240.361635][ T36] audit: type=1326 audit(1760316052.221:44502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9098 comm="syz.8.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c378eec9 code=0x7ff00000 [ 240.385450][ T36] audit: type=1326 audit(1760316052.221:44503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9098 comm="syz.8.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c378eec9 code=0x7ff00000 [ 240.456558][ T3578] usb usb6-port1: attempt power cycle [ 240.499347][ T3579] usb 10-1: Using ep0 maxpacket: 16 [ 240.507002][ T3579] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.518060][ T3579] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.528989][ T3579] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 240.539191][ T3579] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.547832][ T3579] usb 10-1: Product: syz [ 240.552574][ T3579] usb 10-1: Manufacturer: syz [ 240.557963][ T3579] usb 10-1: SerialNumber: syz [ 240.821364][ T3578] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 240.839302][ T3579] usb 10-1: 0:2 : does not exist [ 240.849639][ T3579] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 240.858987][ T3578] usb 6-1: device descriptor read/8, error -71 [ 240.871743][ T3579] usb 10-1: USB disconnect, device number 44 [ 240.892115][ T4148] udevd[4148]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 241.004110][ T3578] usb 6-1: device descriptor read/8, error -71 [ 241.260340][ T3578] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 241.283117][ T3578] usb 6-1: device descriptor read/8, error -71 [ 241.405455][ T9124] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 241.405490][ T9124] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:949 [ 241.422181][ T3578] usb 6-1: device descriptor read/8, error -71 [ 241.466758][ T9128] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 241.466788][ T9128] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:953 [ 241.490557][ T9130] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 241.549765][ T3578] usb usb6-port1: unable to enumerate USB device [ 241.753295][ T45] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 241.915164][ T45] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 241.924048][ T45] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 241.934640][ T45] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 241.943758][ T45] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 241.955266][ T45] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 241.968063][ T45] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 241.977243][ T45] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 241.985379][ T45] usb 10-1: Product: syz [ 241.989693][ T45] usb 10-1: Manufacturer: syz [ 241.996980][ T45] cdc_wdm 10-1:1.0: skipping garbage [ 242.002366][ T45] cdc_wdm 10-1:1.0: skipping garbage [ 242.008252][ T45] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 242.014336][ T45] cdc_wdm 10-1:1.0: Unknown control protocol [ 242.147376][ T9132] can0: slcan on ptm0. [ 242.206608][ T9132] can0 (unregistered): slcan off ptm0. [ 242.268240][ T9149] rust_binder: Error while translating object. [ 242.268287][ T9149] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 242.274854][ T9149] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:955 [ 242.359610][ T9163] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2808'. [ 242.379306][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2808'. [ 242.471315][ T9173] fuse: Unknown parameter 'ȥI' [ 242.530769][ T9177] 9pnet_fd: Insufficient options for proto=fd [ 242.563180][ T9179] rust_binder: Error while translating object. [ 242.563240][ T9179] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 242.570261][ T9179] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:643 [ 242.763527][ T9191] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 242.772941][ T9192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.028642][ T3584] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 243.178600][ T3584] usb 6-1: device descriptor read/64, error -71 [ 243.435803][ T3584] usb 6-1: device descriptor read/64, error -71 [ 243.692973][ T3584] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 243.832649][ T3584] usb 6-1: device descriptor read/64, error -71 [ 244.089365][ T3584] usb 6-1: device descriptor read/64, error -71 [ 244.207372][ T3584] usb usb6-port1: attempt power cycle [ 244.573589][ T3584] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 244.584272][ T9221] 9pnet: Could not find request transport: port=0x180000000000000 [ 244.604820][ T3584] usb 6-1: device descriptor read/8, error -71 [ 244.616535][ T9223] netlink: 9 bytes leftover after parsing attributes in process `syz.8.2826'. [ 244.641117][ T9225] overlayfs: failed to clone upperpath [ 244.680685][ T9231] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2829'. [ 244.711255][ T650] usb 10-1: USB disconnect, device number 45 [ 244.746035][ T3584] usb 6-1: device descriptor read/8, error -71 [ 245.010864][ T3584] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 245.033580][ T3584] usb 6-1: device descriptor read/8, error -71 [ 245.172784][ T3584] usb 6-1: device descriptor read/8, error -71 [ 245.289534][ T3584] usb usb6-port1: unable to enumerate USB device [ 245.399450][ T36] kauditd_printk_skb: 7141 callbacks suppressed [ 245.399471][ T36] audit: type=1400 audit(1760316057.101:51645): avc: denied { remount } for pid=9250 comm="syz.9.2836" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 245.518696][ T9264] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 245.518851][ T9264] rust_binder: Error while translating object. [ 245.528402][ T9264] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 245.537784][ T9264] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:978 [ 245.550709][ T9264] can0: slcan on ptm0. [ 245.591508][ T9264] can0 (unregistered): slcan off ptm0. [ 245.625698][ T9272] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 245.635377][ T9272] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 245.987107][ T9296] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 245.987220][ T9295] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 245.993893][ T9295] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:658 [ 246.150492][ T9302] netlink: 'syz.8.2844': attribute type 4 has an invalid length. [ 246.167934][ T9302] netlink: 992 bytes leftover after parsing attributes in process `syz.8.2844'. [ 246.403721][ T3579] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 246.457174][ T3578] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 246.566752][ T3579] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 246.580071][ T3579] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1096, setting to 1024 [ 246.593029][ T3579] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 246.606455][ T3579] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 246.616007][ T3579] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.624423][ T3579] usb 6-1: Product: syz [ 246.629829][ T3579] usb 6-1: Manufacturer: 黙盾뵘⺔矔恏裓䳗鲩쭢⃭見ﰠ팙ᷛ⁢薷ݬ엡퓴嚤쒙䭔㡒괋賭概躕♾鱦䬒㛾닁뚭柗讧ᷮ鷁갟聯ᄔ渠旗뗘ᤆ钗崉羖죝헃岈窹㟜૯馒▻夎貫藍懪儉랐ꏁ隗㆚뾹櫘ꮶ說ㄉ䙠⤯ꖀَﯟ銅癬毸䭳䴘먒᱕靏䛠ꦰ빺娫뱳ࡆ삾黵⛜혓䯆㭂 [ 246.669014][ T3579] usb 6-1: SerialNumber: syz [ 246.678298][ T3578] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 246.688130][ T3578] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.696446][ T3578] usb 10-1: Product: syz [ 246.700935][ T3578] usb 10-1: Manufacturer: syz [ 246.706016][ T3578] usb 10-1: SerialNumber: syz [ 246.893659][ T9298] rust_binder: Error while translating object. [ 246.893715][ T9298] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 246.900872][ T9298] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:661 [ 246.913077][ T3579] cdc_ncm 6-1:1.0: bind() failure [ 246.930000][ T3579] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 246.936956][ T3579] cdc_ncm 6-1:1.1: bind() failure [ 246.943966][ T3579] usb 6-1: USB disconnect, device number 55 [ 246.961642][ T9316] input: syz1 as /devices/virtual/input/input37 [ 247.043822][ T9326] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 247.043865][ T9326] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:542 [ 247.088199][ T9332] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2856'. [ 247.345163][ T9340] /dev/rnullb0: Can't open blockdev [ 247.351856][ T9340] usb usb7: usbfs: process 9340 (syz.6.2858) did not claim interface 0 before use [ 247.368033][ T3578] (unnamed net_device) (uninitialized): Assigned a random MAC address: 8e:bf:91:60:90:ff [ 247.387640][ T36] audit: type=1400 audit(1760316058.950:51646): avc: denied { read } for pid=9343 comm="syz.8.2860" name="/" dev="configfs" ino=1343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 247.390402][ T3578] rtl8150 10-1:1.0: eth1: rtl8150 is detected [ 247.426051][ T36] audit: type=1400 audit(1760316058.950:51647): avc: denied { open } for pid=9343 comm="syz.8.2860" path="/" dev="configfs" ino=1343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 247.468127][ T9349] rust_binder: Error while translating object. [ 247.468184][ T9349] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 247.497436][ T9349] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:561 [ 247.530231][ T9354] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 247.593012][ T9370] rust_binder: Write failure EFAULT in pid:663 [ 247.730043][ T9383] rust_binder: Write failure EFAULT in pid:667 [ 247.731927][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.758693][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.758719][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.772285][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.772341][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.786756][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.786789][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.809708][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.809769][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.843486][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.843555][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.857404][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.857461][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.877118][ T9389] kvm: kvm [9388]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 247.886404][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.886457][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.900652][ T9389] kvm: kvm [9388]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 247.909834][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.909866][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.923737][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.923795][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.931962][ C0] usb 10-1: Rx status -71 [ 247.943877][ C0] usb 10-1: eth1: intr status -71 [ 247.949938][ C0] usb 10-1: Rx status -71 [ 247.955259][ C0] usb 10-1: eth1: intr status -71 [ 247.961872][ C0] usb 10-1: Rx status -71 [ 247.967624][ C0] usb 10-1: eth1: intr status -71 [ 247.977977][ C0] usb 10-1: Rx status -71 [ 247.983337][ C0] usb 10-1: eth1: intr status -71 [ 247.989479][ C0] usb 10-1: Rx status -71 [ 247.993905][ C0] usb 10-1: eth1: intr status -71 [ 247.999218][ C0] usb 10-1: Rx status -71 [ 248.004033][ C0] usb 10-1: eth1: intr status -71 [ 248.009505][ T330] usb 10-1: USB disconnect, device number 46 [ 248.015860][ C0] usb 10-1: Rx status -71 [ 248.015898][ C0] usb 10-1: eth1: intr status -71 [ 248.027813][ T149] usb 10-1: device reset failed [ 248.033183][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.033216][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.039817][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.039840][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.053354][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.065373][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.085436][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.092639][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.092667][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.148141][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.148170][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.155632][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.162756][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.170297][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.177055][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.201952][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.217054][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.223873][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.230753][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.237474][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.244260][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.250862][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.257538][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.264401][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.271255][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.282119][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.290997][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.302089][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.308997][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.315844][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.322578][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.329426][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.336461][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.343596][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.350225][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.403263][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.509328][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.525500][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.535415][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.542486][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.569481][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.584189][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.591123][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.598008][ T9380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.600533][ T9424] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2875'. [ 248.697604][ T9433] /dev/rnullb0: Can't open blockdev [ 248.719483][ T9436] 9pnet_fd: Insufficient options for proto=fd [ 248.719625][ T9435] 9pnet_fd: Insufficient options for proto=fd [ 248.851462][ T9444] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:588 [ 249.127371][ T9465] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 249.136768][ T9465] rust_binder: Read failure Err(EFAULT) in pid:680 [ 249.402919][ T3582] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 249.560956][ T9483] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 249.561968][ T9483] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 249.575789][ T3582] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.577638][ T9483] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1003 [ 249.589362][ T3582] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.609393][ T3582] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 249.619555][ T9485] rust_binder: Write failure EFAULT in pid:1005 [ 249.622949][ T3582] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 249.639126][ T3582] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.649002][ T3582] usb 6-1: config 0 descriptor?? [ 249.672421][ T9491] rust_binder: Write failure EFAULT in pid:1011 [ 249.807213][ T9497] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 249.814185][ T9497] rust_binder: Error while translating object. [ 249.824999][ T9497] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 249.831860][ T9497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:597 [ 249.887043][ T9500] rust_binder: Error while translating object. [ 249.900060][ T9500] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 249.906764][ T9500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:599 [ 249.932390][ T9506] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2904'. [ 249.987561][ T9509] rust_binder: inc_ref_done called when no active inc_refs [ 250.090191][ T9515] netlink: 'syz.9.2907': attribute type 39 has an invalid length. [ 250.145202][ T9517] rust_binder: Failed to allocate buffer. len:1184, is_oneway:false [ 250.231992][ T9520] overlayfs: failed to clone upperpath [ 250.464519][ T9467] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 250.471951][ T9467] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 251.312375][ T9540] fuse: Bad value for 'group_id' [ 251.317502][ T9540] fuse: Bad value for 'group_id' [ 251.651923][ T3583] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 251.812546][ T3583] usb 10-1: Using ep0 maxpacket: 16 [ 251.819227][ T3583] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.829526][ T3583] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 251.840273][ T3583] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 251.849533][ T3583] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.857694][ T3583] usb 10-1: Product: syz [ 251.861991][ T3583] usb 10-1: Manufacturer: syz [ 251.866835][ T3583] usb 10-1: SerialNumber: syz [ 252.090536][ T3583] usb 10-1: Audio class v2/v3 interfaces need an interface association [ 252.103533][ T3583] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 252.113997][ T3583] usb 10-1: USB disconnect, device number 47 [ 252.124455][ T4148] udevd[4148]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 252.347662][ T3582] usbhid 6-1:0.0: can't add hid device: -71 [ 252.354730][ T3582] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 252.363977][ T3582] usb 6-1: USB disconnect, device number 56 [ 252.448640][ T9556] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 252.456350][ T9556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:689 [ 252.656774][ T9561] futex_wake_op: syz.9.2925 tries to shift op by 32; fix this program [ 252.712645][ T9566] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 253.033300][ T3578] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 253.204603][ T3578] usb 10-1: Using ep0 maxpacket: 8 [ 253.230157][ T3578] usb 10-1: unable to get BOS descriptor or descriptor too short [ 253.241502][ T3578] usb 10-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 253.257961][ T9575] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 253.267579][ T3578] usb 10-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 253.281519][ T3578] usb 10-1: config 8 interface 0 has no altsetting 0 [ 253.298860][ T3578] usb 10-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 253.311730][ T3578] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.339443][ T3578] usb 10-1: Product: syz [ 253.346416][ T3578] usb 10-1: Manufacturer: syz [ 253.351222][ T3578] usb 10-1: SerialNumber: syz [ 253.481815][ T9585] /dev/loop0: Can't lookup blockdev [ 253.488833][ T9586] rust_binder: 9581 RLIMIT_NICE not set [ 253.489088][ T9581] rust_binder: Error while translating object. [ 253.497648][ T9581] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 253.504049][ T9581] rust_binder: Failure BR_FAILED_REPLY { source: EPERM } during reply - delivering BR_FAILED_REPLY to sender. [ 253.514820][ T9581] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:608 [ 253.590125][ T3583] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 253.772324][ T3583] usb 6-1: Using ep0 maxpacket: 16 [ 253.778742][ T3583] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 253.787464][ T3583] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.797943][ T3583] usb 6-1: config 0 has no interface number 0 [ 253.805727][ T3583] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 253.815410][ T3583] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.823884][ T3583] usb 6-1: Product: syz [ 253.828552][ T3583] usb 6-1: Manufacturer: syz [ 253.833404][ T3583] usb 6-1: SerialNumber: syz [ 253.843239][ T3583] usb 6-1: config 0 descriptor?? [ 253.851885][ T3583] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 253.858648][ T3583] usb 6-1: No valid video chain found. [ 254.065485][ T45] usb 6-1: USB disconnect, device number 57 [ 254.089860][ T9593] fuse: Unknown parameter 'f' [ 254.223136][ T9609] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 254.347788][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 254.347812][ T36] audit: type=1400 audit(1760316065.449:51651): avc: denied { remount } for pid=9614 comm="syz.8.2943" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 254.486158][ T36] audit: type=1400 audit(1760316065.579:51652): avc: denied { map } for pid=9620 comm="syz.8.2945" path="socket:[57867]" dev="sockfs" ino=57867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 254.982026][ T330] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 255.153332][ T330] usb 6-1: Using ep0 maxpacket: 16 [ 255.175827][ T330] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.187279][ T330] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.208797][ T330] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 255.219287][ T330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.229497][ T330] usb 6-1: Product: syz [ 255.234817][ T330] usb 6-1: Manufacturer: syz [ 255.240371][ T330] usb 6-1: SerialNumber: syz [ 255.293223][ T9652] fuse: Bad value for 'rootmode' [ 255.463504][ T9642] rust_binder: Write failure EFAULT in pid:702 [ 255.472912][ T330] usb 6-1: 0:2 : does not exist [ 255.487882][ T330] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 255.530383][ T330] usb 6-1: USB disconnect, device number 58 [ 255.567619][ T4148] udevd[4148]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 255.938306][ T3578] usb 10-1: selecting invalid altsetting 0 [ 255.968483][ T3578] snd-usb-audio 10-1:8.0: probe with driver snd-usb-audio failed with error -12 [ 255.984798][ T4148] udevd[4148]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:8.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 256.002727][ T3578] usb 10-1: USB disconnect, device number 48 [ 256.028411][ T9673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2961'. [ 256.848091][ T36] audit: type=1326 audit(1760316067.784:51653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9694 comm="syz.8.2968" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71c378eec9 code=0x0 [ 256.896716][ T36] audit: type=1326 audit(1760316067.784:51654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9694 comm="syz.8.2968" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71c378eec9 code=0x0 [ 256.942210][ T9700] netlink: 'syz.5.2970': attribute type 27 has an invalid length. [ 257.144708][ T330] usb 10-1: new full-speed USB device number 49 using dummy_hcd [ 257.305222][ T3584] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 257.314637][ T330] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 257.326053][ T330] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 257.339187][ T330] usb 10-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 257.348830][ T330] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.358836][ T330] usb 10-1: config 0 descriptor?? [ 257.364327][ T9698] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 257.373042][ T330] usbhid 10-1:0.0: can't add hid device: -22 [ 257.379138][ T330] usbhid 10-1:0.0: probe with driver usbhid failed with error -22 [ 257.465747][ T3584] usb 6-1: Using ep0 maxpacket: 8 [ 257.473741][ T3584] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 257.482468][ T3584] usb 6-1: config 179 has no interface number 0 [ 257.488960][ T3584] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 257.500992][ T3584] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 257.512667][ T3584] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 257.523995][ T3584] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 257.538301][ T3584] usb 6-1: config 179 interface 65 has no altsetting 0 [ 257.547688][ T3584] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 257.557610][ T3584] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.672735][ T3578] usb 10-1: USB disconnect, device number 49 [ 257.783775][ T403] usb 6-1: USB disconnect, device number 59 [ 258.033085][ T3578] usb 10-1: new full-speed USB device number 50 using dummy_hcd [ 258.172250][ T3578] usb 10-1: device descriptor read/64, error -71 [ 258.423219][ T9734] rust_binder: Error while translating object. [ 258.423251][ T9734] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 258.429167][ T3578] usb 10-1: device descriptor read/64, error -71 [ 258.429983][ T9734] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:726 [ 258.466975][ T9736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64805 sclass=netlink_route_socket pid=9736 comm=syz.5.2984 [ 258.686023][ T3578] usb 10-1: new full-speed USB device number 51 using dummy_hcd [ 258.739583][ T45] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 258.825190][ T3578] usb 10-1: device descriptor read/64, error -71 [ 258.900116][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 258.906997][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.918292][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.928221][ T45] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 258.937402][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.947152][ T45] usb 6-1: config 0 descriptor?? [ 258.953757][ T45] hub 6-1:0.0: USB hub found [ 259.082073][ T3578] usb 10-1: device descriptor read/64, error -71 [ 259.167990][ T45] hub 6-1:0.0: 1 port detected [ 259.199954][ T3578] usb usb10-port1: attempt power cycle [ 259.389616][ T45] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 259.396133][ T45] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 259.405842][ T45] usbhid 6-1:0.0: can't add hid device: -71 [ 259.412470][ T45] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 259.435818][ T45] usb 6-1: USB disconnect, device number 60 [ 259.563830][ T3578] usb 10-1: new full-speed USB device number 52 using dummy_hcd [ 259.586408][ T3578] usb 10-1: device descriptor read/8, error -71 [ 259.725639][ T3578] usb 10-1: device descriptor read/8, error -71 [ 259.939857][ T9739] netlink: 'syz.5.2985': attribute type 19 has an invalid length. [ 259.947843][ T9739] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2985'. [ 259.981181][ T3578] usb 10-1: new full-speed USB device number 53 using dummy_hcd [ 260.003816][ T3578] usb 10-1: device descriptor read/8, error -71 [ 260.142794][ T3578] usb 10-1: device descriptor read/8, error -71 [ 260.259703][ T3578] usb usb10-port1: unable to enumerate USB device [ 260.291597][ T3584] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 260.455126][ T3584] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1112, setting to 1024 [ 260.466527][ T3584] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 260.476721][ T3584] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 260.488998][ T3584] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 260.498604][ T3584] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.506936][ T3584] usb 6-1: Product: 潵ꉩ⡁蘭䟉枃⅃㞽㨄ᐜ儔ֽ祾⦬뽓ὄ䰾洕羹俬ꀟ阸貥ᑠꈓ劆昮ꁪ당뉤譺駜窶읇뗤遽ﭥ棨泏쟔◝䠴염䎂贴䷒镸㩕鰡懹讻ᡨ뢟鎨脅很諸떾댇⒌㚭援籝썆楸啑艒䥘꺐᫼㙝퍋∔彴管ᩡ㑮遟梊䯊Ꟍ湶딍拉ᗚ믿ꒄ厶쮶粠븀¡싩ꌴ礡ﯹ⯖⤾োલ [ 260.541256][ T3584] usb 6-1: Manufacturer: ᰉ [ 260.546073][ T3584] usb 6-1: SerialNumber: ䷰甹ື溎讈ꦔ㳪ܧ䣚伊黄섈鷌ꂘ뵣ꊒ䁒쒩屇墸ꉲត獧Ҹ搔⛠頎᥎臅潟፠승챴㽈 [ 260.562306][ T9744] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 260.999607][ T9741] rust_binder: Got transaction with invalid offset. [ 260.999730][ T9741] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 261.024050][ T9741] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:733 [ 261.036336][ T3584] cdc_ncm 6-1:1.0: bind() failure [ 261.055706][ T3584] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 261.061745][ T9856] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 261.062877][ T3584] cdc_ncm 6-1:1.1: bind() failure [ 261.080242][ T3584] usb 6-1: USB disconnect, device number 61 [ 261.111779][ T36] audit: type=1326 audit(1760316071.754:51655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.6.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06438eec9 code=0x7ffc0000 [ 261.148107][ T36] audit: type=1326 audit(1760316071.764:51656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.6.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06438eec9 code=0x7ffc0000 [ 261.179925][ T36] audit: type=1326 audit(1760316071.764:51657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.6.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff06438eec9 code=0x7ffc0000 [ 261.207358][ T36] audit: type=1326 audit(1760316071.764:51658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.6.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06438eec9 code=0x7ffc0000 [ 261.238989][ T9865] overlayfs: failed to clone upperpath [ 261.245003][ T36] audit: type=1326 audit(1760316071.764:51659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.6.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06438eec9 code=0x7ffc0000 [ 261.284330][ T36] audit: type=1326 audit(1760316071.764:51660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.6.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06438eec9 code=0x7ffc0000 [ 261.310578][ T36] audit: type=1326 audit(1760316071.764:51661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.6.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff06438eec9 code=0x7ffc0000 [ 261.334247][ T36] audit: type=1326 audit(1760316071.764:51662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.6.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06438eec9 code=0x7ffc0000 [ 261.361826][ T36] audit: type=1326 audit(1760316071.764:51663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.6.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06438eec9 code=0x7ffc0000 [ 261.385832][ T36] audit: type=1326 audit(1760316071.764:51664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.6.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06438eec9 code=0x7ffc0000 [ 261.481957][ T9892] tipc: Started in network mode [ 261.486876][ T9892] tipc: Node identity ac14140f, cluster identity 8 [ 261.493751][ T9892] tipc: Enabling of bearer rejected, failed to enable media [ 261.503879][ T9894] overlayfs: failed to resolve './file1': -2 [ 261.533084][ T330] usb 10-1: new low-speed USB device number 54 using dummy_hcd [ 261.694765][ T330] usb 10-1: No LPM exit latency info found, disabling LPM. [ 261.703360][ T330] usb 10-1: config 64 has an invalid interface number: 174 but max is 2 [ 261.713190][ T330] usb 10-1: config 64 has an invalid interface number: 252 but max is 2 [ 261.722076][ T330] usb 10-1: config 64 has an invalid descriptor of length 137, skipping remainder of the config [ 261.733262][ T330] usb 10-1: config 64 has 2 interfaces, different from the descriptor's value: 3 [ 261.738650][ T9900] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3017'. [ 261.743145][ T330] usb 10-1: config 64 has no interface number 0 [ 261.753227][ T9899] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3017'. [ 261.758986][ T330] usb 10-1: config 64 has no interface number 1 [ 261.774432][ T330] usb 10-1: config 64 interface 252 altsetting 252 endpoint 0x9 has invalid maxpacket 1023, setting to 8 [ 261.785925][ T330] usb 10-1: config 64 interface 252 altsetting 252 endpoint 0x4 has invalid maxpacket 512, setting to 8 [ 261.797509][ T330] usb 10-1: config 64 interface 252 altsetting 252 endpoint 0x6 is Bulk; changing to Interrupt [ 261.808391][ T330] usb 10-1: config 64 interface 252 altsetting 252 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 261.822253][ T330] usb 10-1: config 64 interface 174 has no altsetting 0 [ 261.829736][ T330] usb 10-1: config 64 interface 252 has no altsetting 0 [ 261.839124][ T330] usb 10-1: string descriptor 0 read error: -22 [ 261.845785][ T330] usb 10-1: New USB device found, idVendor=12d1, idProduct=1402, bcdDevice= 0.00 [ 261.855303][ T330] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.871315][ T330] usb-storage 10-1:64.174: USB Mass Storage device detected [ 261.986869][ T330] usb-storage 10-1:64.252: USB Mass Storage device detected [ 262.080439][ T3578] usb 10-1: USB disconnect, device number 54 [ 262.549740][ T3578] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 262.734725][ T3578] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 262.743979][ T3578] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.752079][ T3578] usb 6-1: Product: syz [ 262.756681][ T3578] usb 6-1: Manufacturer: syz [ 262.761326][ T3578] usb 6-1: SerialNumber: syz [ 262.772541][ T3578] r8152-cfgselector 6-1: Unknown version 0x0000 [ 262.784759][ T3578] r8152-cfgselector 6-1: config 0 descriptor?? [ 262.806960][ T9953] veth0_to_team: mtu greater than device maximum [ 262.866496][ T9961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=9961 comm=syz.8.3037 [ 263.042011][ T3584] usb 10-1: new full-speed USB device number 55 using dummy_hcd [ 263.203828][ T3584] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 263.214954][ T3584] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 263.228576][ T3584] usb 10-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 263.238176][ T3584] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.248019][ T3584] usb 10-1: config 0 descriptor?? [ 263.253621][ T9951] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 263.265470][ T3584] usbhid 10-1:0.0: can't add hid device: -22 [ 263.271827][ T3584] usbhid 10-1:0.0: probe with driver usbhid failed with error -22 [ 263.478301][ T330] usb 10-1: USB disconnect, device number 55 [ 263.530116][ T3584] r8152-cfgselector 6-1: USB disconnect, device number 62 [ 263.923682][ T9970] rust_binder: Read failure Err(EAGAIN) in pid:748 [ 263.977569][ T9985] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 264.006124][ T9987] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 264.030033][ T9989] rust_binder: Write failure EFAULT in pid:1078 [ 264.030736][ T9989] rust_binder: Write failure EFAULT in pid:1078 [ 264.140985][T10008] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 264.151545][T10008] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.152483][T10008] rust_binder: Error while translating object. [ 264.159495][T10008] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 264.166667][T10008] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1086 [ 264.221059][T10012] netlink: 100 bytes leftover after parsing attributes in process `syz.9.3051'. [ 264.432707][T10017] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 264.452346][T10017] rust_binder: Write failure EINVAL in pid:641 [ 264.535351][T10026] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:644 [ 264.542400][T10027] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:644 [ 264.553364][T10026] netlink: 'syz.6.3056': attribute type 1 has an invalid length. [ 264.615002][ T330] usb 10-1: new full-speed USB device number 56 using dummy_hcd [ 264.640841][T10029] /dev/loop0: Can't lookup blockdev [ 264.698666][T10042] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.699036][T10042] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 264.706143][T10042] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 264.714689][T10042] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:658 [ 264.739767][T10044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.766592][T10049] bpf: Bad value for 'gid' [ 264.779076][ T330] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 264.791047][T10049] /dev/rnullb0: Can't open blockdev [ 264.797306][ T330] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 264.815858][ T330] usb 10-1: New USB device found, idVendor=056a, idProduct=006a, bcdDevice= 0.00 [ 264.827120][ T330] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.845622][ T330] usb 10-1: config 0 descriptor?? [ 264.851402][T10012] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 264.877175][ T641] Bluetooth: hci0: Frame reassembly failed (-84) [ 264.921390][T10065] rust_binder: Failed to allocate buffer. len:4200, is_oneway:true [ 264.936283][T10068] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 264.952760][T10069] rust_binder: 10068 RLIMIT_NICE not set [ 265.047002][T10071] __vm_enough_memory: pid: 10071, comm: syz.5.3068, bytes: 18014402804453376 not enough memory for the allocation [ 265.080651][T10012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.091162][T10012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.108532][T10012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.118299][T10012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.344652][ T330] usbhid 10-1:0.0: can't add hid device: -71 [ 265.351307][ T330] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 265.360759][ T330] usb 10-1: USB disconnect, device number 56 [ 265.428229][ T3584] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 265.599383][ T3584] usb 6-1: Using ep0 maxpacket: 16 [ 265.606007][ T3584] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 265.614294][ T3584] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.624633][ T3584] usb 6-1: config 0 has no interface number 0 [ 265.632445][ T3584] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 265.641560][ T3584] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.650386][ T3584] usb 6-1: Product: syz [ 265.654794][ T3584] usb 6-1: Manufacturer: syz [ 265.659583][ T3584] usb 6-1: SerialNumber: syz [ 265.665289][ T3584] usb 6-1: config 0 descriptor?? [ 265.671425][ T3584] usb 6-1: Found UVC 0.00 device syz (046d:08d3) [ 265.677870][ T3584] usb 6-1: No valid video chain found. [ 265.918369][T10090] netlink: 140 bytes leftover after parsing attributes in process `syz.8.3075'. [ 266.166473][ T3578] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 266.272961][T10103] rust_binder: Write failure EFAULT in pid:798 [ 266.327045][ T3578] usb 10-1: Using ep0 maxpacket: 16 [ 266.340263][ T3578] usb 10-1: config 0 has an invalid interface number: 105 but max is 0 [ 266.349026][ T3578] usb 10-1: config 0 has no interface number 0 [ 266.357082][ T3578] usb 10-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 266.366610][ T3578] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.374990][ T3578] usb 10-1: Product: syz [ 266.379285][ T3578] usb 10-1: Manufacturer: syz [ 266.384163][ T3578] usb 10-1: SerialNumber: syz [ 266.389771][ T3578] usb 10-1: config 0 descriptor?? [ 266.396222][ T3578] usb 10-1: Found UVC 0.00 device syz (046d:08f3) [ 266.402824][ T3578] usb 10-1: No valid video chain found. [ 266.611333][T10085] fuse: Unknown parameter '0x00000000000000050x0000000000000008' [ 266.697629][T10085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.706880][T10085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.715657][ T3578] usb 10-1: USB disconnect, device number 57 [ 267.043824][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 267.043875][ T4227] Bluetooth: hci0: command 0x1003 tx timeout [ 267.366902][T10118] FAULT_INJECTION: forcing a failure. [ 267.366902][T10118] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 267.381171][T10118] CPU: 1 UID: 0 PID: 10118 Comm: syz.6.3084 Not tainted syzkaller #0 1f5813a52420658c51670c32aa0b3f2b32c06bdf [ 267.381217][T10118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 267.381232][T10118] Call Trace: [ 267.381240][T10118] [ 267.381251][T10118] __dump_stack+0x21/0x30 [ 267.381289][T10118] dump_stack_lvl+0x10c/0x190 [ 267.381317][T10118] ? __cfi_dump_stack_lvl+0x10/0x10 [ 267.381346][T10118] dump_stack+0x19/0x20 [ 267.381371][T10118] should_fail_ex+0x3d9/0x530 [ 267.381395][T10118] should_fail_alloc_page+0xeb/0x110 [ 267.381421][T10118] __alloc_pages_noprof+0x19b/0x7b0 [ 267.381449][T10118] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 267.381481][T10118] __folio_alloc_noprof+0x14/0x80 [ 267.381508][T10118] folio_prealloc+0x46/0x240 [ 267.381534][T10118] do_pte_missing+0x164c/0x4240 [ 267.381562][T10118] ? pte_marker_clear+0x1b0/0x1b0 [ 267.381587][T10118] ? unwind_next_frame+0x3c2/0x750 [ 267.381613][T10118] ? __x64_sys_ioctl+0x7f/0xa0 [ 267.381636][T10118] ? __x64_sys_ioctl+0x7f/0xa0 [ 267.381656][T10118] ? __kernel_text_address+0x11/0x40 [ 267.381683][T10118] ? __pte_offset_map+0x1b0/0x230 [ 267.381714][T10118] ? pte_offset_map_rw_nolock+0xba/0x110 [ 267.381743][T10118] handle_mm_fault+0x1166/0x1b90 [ 267.381766][T10118] ? __kasan_check_write+0x18/0x20 [ 267.381800][T10118] ? __cfi_handle_mm_fault+0x10/0x10 [ 267.381831][T10118] ? follow_page_pte+0x4a3/0xb90 [ 267.381861][T10118] ? gup_must_unshare+0x1e0/0x1e0 [ 267.381891][T10118] ? try_grab_folio_fast+0x155/0x500 [ 267.381917][T10118] ? vma_is_secretmem+0x11/0x50 [ 267.381946][T10118] __get_user_pages+0x1169/0x22d0 [ 267.381972][T10118] ? __reset_page_owner+0x450/0x450 [ 267.382001][T10118] ? populate_vma_page_range+0x230/0x230 [ 267.382026][T10118] ? down_read_killable+0x79/0xf0 [ 267.382062][T10118] ? __cfi_down_read_killable+0x10/0x10 [ 267.382085][T10118] ? get_user_pages_fast_only+0xc0/0xc0 [ 267.382111][T10118] get_user_pages_unlocked+0x1b7/0x6e0 [ 267.382140][T10118] hva_to_pfn+0x25f/0xa60 [ 267.382159][T10118] ? kvm_fetch_guest_virt+0x154/0x190 [ 267.382191][T10118] ? __cfi_hva_to_pfn+0x10/0x10 [ 267.382210][T10118] ? handle_changed_spte+0x70e/0x12b0 [ 267.382237][T10118] ? mmu_try_to_unsync_pages+0xa3/0x7a0 [ 267.382263][T10118] ? kvm_tdp_mmu_fast_pf_get_last_sptep+0x290/0x290 [ 267.382292][T10118] __gfn_to_pfn_memslot+0x29f/0x330 [ 267.382313][T10118] kvm_faultin_pfn+0x5db/0x1510 [ 267.382334][T10118] ? kernel_text_address+0xa9/0xe0 [ 267.382359][T10118] ? fast_page_fault+0x1160/0x1160 [ 267.382378][T10118] ? __kvm_mmu_topup_memory_cache+0x49a/0x860 [ 267.382408][T10118] ? get_guest_cr3+0xc0/0xc0 [ 267.382439][T10118] kvm_tdp_page_fault+0x204/0x320 [ 267.382463][T10118] kvm_mmu_do_page_fault+0x29d/0x5f0 [ 267.382487][T10118] ? kvm_arch_async_page_ready+0x480/0x480 [ 267.382511][T10118] ? cgroup_rstat_updated+0x132/0x7f0 [ 267.382542][T10118] ? kvm_multiple_exception+0x6d8/0xad0 [ 267.382568][T10118] ? __cfi_rcu_note_context_switch+0x10/0x10 [ 267.382595][T10118] ? __kernel_text_address+0x11/0x40 [ 267.382620][T10118] kvm_mmu_page_fault+0x143/0x970 [ 267.382644][T10118] handle_ept_violation+0x21c/0x440 [ 267.382668][T10118] ? vmx_vcpu_run+0x1100/0x2000 [ 267.382697][T10118] ? __cfi_handle_ept_violation+0x10/0x10 [ 267.382719][T10118] vmx_handle_exit+0x12c2/0x1b40 [ 267.382747][T10118] ? kvm_deliver_exception_payload+0xd7/0x200 [ 267.382773][T10118] ? __cfi_vmx_vcpu_run+0x10/0x10 [ 267.382801][T10118] ? vmx_handle_exit_irqoff+0xe9/0x7a0 [ 267.382837][T10118] vcpu_run+0x4bd0/0x7830 [ 267.382874][T10118] ? preempt_schedule_irq+0x9c/0x100 [ 267.382907][T10118] ? signal_pending+0xc0/0xc0 [ 267.382932][T10118] ? __kasan_check_write+0x18/0x20 [ 267.382961][T10118] ? xfd_validate_state+0x68/0x150 [ 267.382993][T10118] ? fpu_swap_kvm_fpstate+0x93/0x5f0 [ 267.383015][T10118] ? __kasan_check_write+0x18/0x20 [ 267.383044][T10118] ? fpregs_mark_activate+0x69/0x160 [ 267.383068][T10118] ? fpu_swap_kvm_fpstate+0x44d/0x5f0 [ 267.383091][T10118] ? fpu_swap_kvm_fpstate+0x93/0x5f0 [ 267.383114][T10118] kvm_arch_vcpu_ioctl_run+0x101a/0x1aa0 [ 267.383143][T10118] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 267.383169][T10118] ? kstrtoull+0x13b/0x1e0 [ 267.383206][T10118] ? kstrtouint+0x78/0xf0 [ 267.383229][T10118] ? ioctl_has_perm+0x1aa/0x4d0 [ 267.383254][T10118] ? __asan_memcpy+0x5a/0x80 [ 267.383274][T10118] ? ioctl_has_perm+0x3e0/0x4d0 [ 267.383298][T10118] ? has_cap_mac_admin+0xd0/0xd0 [ 267.383322][T10118] ? __kasan_check_write+0x18/0x20 [ 267.383351][T10118] ? mutex_lock_killable+0x92/0x1c0 [ 267.383372][T10118] ? __cfi_mutex_lock_killable+0x10/0x10 [ 267.383392][T10118] ? proc_fail_nth_write+0x17e/0x210 [ 267.383419][T10118] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 267.383447][T10118] kvm_vcpu_ioctl+0x96f/0xee0 [ 267.383468][T10118] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 267.383487][T10118] ? __cfi_vfs_write+0x10/0x10 [ 267.383506][T10118] ? __kasan_check_write+0x18/0x20 [ 267.383534][T10118] ? mutex_unlock+0x8b/0x240 [ 267.383553][T10118] ? __cfi_mutex_unlock+0x10/0x10 [ 267.383571][T10118] ? __fget_files+0x2c5/0x340 [ 267.383594][T10118] ? __fget_files+0x2c5/0x340 [ 267.383617][T10118] ? bpf_lsm_file_ioctl+0xd/0x20 [ 267.383645][T10118] ? security_file_ioctl+0x34/0xd0 [ 267.383668][T10118] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 267.383687][T10118] __se_sys_ioctl+0x132/0x1b0 [ 267.383709][T10118] __x64_sys_ioctl+0x7f/0xa0 [ 267.383731][T10118] x64_sys_call+0x1878/0x2ee0 [ 267.383760][T10118] do_syscall_64+0x58/0xf0 [ 267.383786][T10118] ? clear_bhb_loop+0x50/0xa0 [ 267.383816][T10118] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 267.383839][T10118] RIP: 0033:0x7ff06438eec9 [ 267.383859][T10118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.383877][T10118] RSP: 002b:00007ff0652e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.383902][T10118] RAX: ffffffffffffffda RBX: 00007ff0645e5fa0 RCX: 00007ff06438eec9 [ 267.383919][T10118] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 267.383934][T10118] RBP: 00007ff0652e2090 R08: 0000000000000000 R09: 0000000000000000 [ 267.383949][T10118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.383962][T10118] R13: 00007ff0645e6038 R14: 00007ff0645e5fa0 R15: 00007ffef3320908 [ 267.383981][T10118] [ 268.165973][T10143] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 268.446129][ T45] usb 6-1: USB disconnect, device number 63 [ 281.879526][T10194] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 281.908149][T10196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=10196 comm=syz.8.3109 [ 281.930996][ T330] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 281.951976][T10202] /dev/loop0: Can't lookup blockdev [ 281.973527][T10208] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 281.981090][T10208] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:700 [ 282.092862][ T330] usb 6-1: unable to get BOS descriptor or descriptor too short [ 282.110947][ T330] usb 6-1: not running at top speed; connect to a high speed hub [ 282.119628][ T330] usb 6-1: config 4 has an invalid interface number: 56 but max is 0 [ 282.127994][ T330] usb 6-1: config 4 has no interface number 0 [ 282.134144][ T330] usb 6-1: config 4 interface 56 has no altsetting 0 [ 282.142637][ T330] usb 6-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=61.74 [ 282.152524][ T330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.160599][ T330] usb 6-1: Product: syz [ 282.164786][ T330] usb 6-1: Manufacturer: syz [ 282.169608][ T330] usb 6-1: SerialNumber: syz [ 282.392739][ T330] snd-usb-audio 6-1:4.56: probe with driver snd-usb-audio failed with error -71 [ 282.406877][ T330] usb 6-1: USB disconnect, device number 64 [ 282.577227][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3116'. [ 282.591469][T10222] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 282.592033][T10222] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 282.606645][T10222] rust_binder: Write failure EINVAL in pid:1115 [ 282.626515][T10227] rust_binder: got new transaction with bad transaction stack [ 282.633458][T10227] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1117 [ 282.776464][T10244] 9pnet: p9_errstr2errno: server reported unknown error OX۵רѳlu9 [ 282.817394][T10248] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3128'. [ 282.879208][T10253] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3130'. [ 282.917681][T10258] netlink: 'syz.8.3131': attribute type 27 has an invalid length. [ 282.927538][T10258] gretap0: left promiscuous mode [ 282.942510][T10258] veth0_to_team: left allmulticast mode [ 282.970520][ T9828] bridge0: port 3(veth1_to_team) entered blocking state [ 282.978588][ T9828] bridge0: port 3(veth1_to_team) entered forwarding state [ 283.002541][T10262] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.002838][T10262] rust_binder: Failed copying into alloc: EFAULT [ 283.010794][T10262] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 283.018002][T10262] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 283.026844][T10262] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1128 [ 283.056810][T10264] rust_binder: Error while translating object. [ 283.067789][T10264] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 283.074121][T10264] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:806 [ 283.102018][T10268] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 283.384687][ T3582] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 283.546823][ T3582] usb 6-1: unable to get BOS descriptor or descriptor too short [ 283.555451][ T3582] usb 6-1: not running at top speed; connect to a high speed hub [ 283.566630][ T3582] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.578627][ T3582] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 283.590994][ T3582] usb 6-1: string descriptor 0 read error: -22 [ 283.597826][ T3582] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 283.607809][ T3582] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.622621][ T3582] usb 6-1: 0:2 : does not exist [ 284.271890][ T650] usb 10-1: new low-speed USB device number 58 using dummy_hcd [ 284.439599][ T650] usb 10-1: No LPM exit latency info found, disabling LPM. [ 284.450646][ T650] usb 10-1: config 64 has an invalid interface number: 174 but max is 2 [ 284.461592][ T650] usb 10-1: config 64 has an invalid interface number: 252 but max is 2 [ 284.471841][ T650] usb 10-1: config 64 has an invalid interface descriptor of length 2, skipping [ 284.483195][ T650] usb 10-1: config 64 has an invalid interface number: 140 but max is 2 [ 284.492570][ T650] usb 10-1: config 64 has no interface number 0 [ 284.500509][ T650] usb 10-1: config 64 has no interface number 1 [ 284.509002][ T650] usb 10-1: config 64 has no interface number 2 [ 284.518130][ T650] usb 10-1: config 64 interface 252 altsetting 252 endpoint 0x9 has invalid maxpacket 1023, setting to 8 [ 284.531698][ T650] usb 10-1: config 64 interface 252 altsetting 252 endpoint 0x4 has invalid maxpacket 512, setting to 8 [ 284.544108][ T650] usb 10-1: config 64 interface 252 altsetting 252 endpoint 0x6 is Bulk; changing to Interrupt [ 284.555542][ T650] usb 10-1: config 64 interface 252 altsetting 252 endpoint 0x1 has invalid maxpacket 1024, setting to 8 [ 284.569074][ T650] usb 10-1: config 64 interface 140 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 284.583960][ T650] usb 10-1: config 64 interface 140 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 8 [ 284.604404][ T650] usb 10-1: config 64 interface 174 has no altsetting 0 [ 284.612062][ T650] usb 10-1: config 64 interface 252 has no altsetting 0 [ 284.619765][ T650] usb 10-1: config 64 interface 140 has no altsetting 0 [ 284.631042][ T650] usb 10-1: string descriptor 0 read error: -22 [ 284.634522][T10320] 9pnet_fd: Insufficient options for proto=fd [ 284.637832][ T650] usb 10-1: New USB device found, idVendor=12d1, idProduct=1402, bcdDevice= 0.00 [ 284.654013][ T650] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.668867][ T650] usb-storage 10-1:64.174: USB Mass Storage device detected [ 284.701031][T10328] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3156'. [ 284.716833][ T650] usb-storage 10-1:64.252: USB Mass Storage device detected [ 284.756921][T10334] fuseblk: Unknown parameter ';' [ 284.771816][ T650] usb-storage 10-1:64.140: USB Mass Storage device detected [ 284.806862][ T3579] usb 9-1: USB disconnect, device number 33 [ 284.885898][ T3578] usb 10-1: USB disconnect, device number 58 [ 284.939601][ T9776] veth1_to_team: left allmulticast mode [ 284.945388][ T9776] veth1_to_team: left promiscuous mode [ 284.951661][ T9776] bridge0: port 3(veth1_to_team) entered disabled state [ 284.960377][ T9776] bridge_slave_1: left allmulticast mode [ 284.966216][ T9776] bridge_slave_1: left promiscuous mode [ 284.973082][ T9776] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.984993][ T9776] bridge_slave_0: left allmulticast mode [ 284.987004][ T3582] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 284.991980][ T9776] bridge_slave_0: left promiscuous mode [ 285.006518][ T3582] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 285.006690][ T9776] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.018646][ T3582] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 285.040768][ T3582] usb 6-1: USB disconnect, device number 65 [ 285.066513][T10216] udevd[10216]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 285.133734][T10339] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.142321][T10339] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.151792][T10339] bridge_slave_0: entered allmulticast mode [ 285.158614][T10339] bridge_slave_0: entered promiscuous mode [ 285.166301][T10339] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.173699][T10339] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.181168][T10339] bridge_slave_1: entered allmulticast mode [ 285.187854][T10339] bridge_slave_1: entered promiscuous mode [ 285.202388][ T9776] tipc: Left network mode [ 285.211427][ T9776] veth1_macvtap: left promiscuous mode [ 285.212729][T10344] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.219085][ T9776] : left promiscuous mode [ 285.219578][T10344] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 285.230404][T10344] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 285.239563][T10344] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:702 [ 285.265715][T10346] incfs: Backing dir is not set, filesystem can't be mounted. [ 285.284531][T10346] incfs: mount failed -2 [ 285.406314][T10339] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.413987][T10339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.422538][T10339] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.431009][T10339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.491843][ T641] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.503783][ T641] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.545181][ T9828] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.553446][ T9828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.583645][ T9828] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.590935][ T9828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.649994][T10371] binder: Bad value for 'max' [ 285.666737][T10339] veth0_vlan: entered promiscuous mode [ 285.681365][T10339] veth1_macvtap: entered promiscuous mode [ 285.709076][T10377] SELinux: policydb table sizes (0,0) do not match mine (5,6) [ 285.722128][T10377] SELinux: failed to load policy [ 285.888876][T10383] /dev/rnullb0: Can't open blockdev [ 285.939479][ T641] Bluetooth: hci0: Frame reassembly failed (-84) [ 285.967271][T10391] rust_binder: Read failure Err(EFAULT) in pid:7 [ 285.984893][T10389] rust_binder: Got transaction with invalid offset. [ 285.999541][T10389] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 286.009917][T10389] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1157 [ 286.146516][T10396] syzkaller0: create flow: hash 2431702646 index 0 [ 286.251712][T10398] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 286.252264][T10398] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 286.257865][T10396] syzkaller0 (unregistered): delete flow: hash 2431702646 index 0 [ 286.259386][T10398] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 286.275596][T10398] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:712 [ 286.377502][T10414] tmpfs: Unknown parameter './file0' [ 286.448616][ T36] kauditd_printk_skb: 41 callbacks suppressed [ 286.448647][ T36] audit: type=1400 audit(1760316095.457:51706): avc: denied { mount } for pid=10420 comm="syz.8.3182" name="/" dev="pstore" ino=1527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 286.531412][ T36] audit: type=1400 audit(1760316095.541:51707): avc: granted { setsecparam } for pid=10425 comm="syz.5.3184" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 286.536654][T10426] fuse: blksize only supported for fuseblk [ 286.581454][ T36] audit: type=1400 audit(1760316095.578:51708): avc: denied { unmount } for pid=10339 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 286.618235][T10433] rust_binder: 36: no such ref 3 [ 286.623251][T10433] rust_binder: 36: no such ref 0 [ 286.629186][T10433] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 286.638208][T10433] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 286.645483][T10433] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 286.786091][ T36] audit: type=1400 audit(1760316095.775:51709): avc: denied { write } for pid=10443 comm="syz.5.3191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 286.845679][T10450] VFS: Mount too revealing [ 286.871224][T10453] netlink: 'syz.8.3194': attribute type 11 has an invalid length. [ 286.885176][ T9828] Bluetooth: hci1: Frame reassembly failed (-84) [ 287.047777][T10455] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 287.076343][ T650] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 287.264822][ T650] usb 6-1: Using ep0 maxpacket: 16 [ 287.271526][ T650] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 287.280422][ T650] usb 6-1: config 0 has no interface number 0 [ 287.286786][ T650] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 287.297392][ T650] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 287.309378][ T650] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 287.318770][ T650] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.323949][T10463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 287.326874][ T650] usb 6-1: Product: syz [ 287.337966][ T650] usb 6-1: Manufacturer: syz [ 287.342728][ T650] usb 6-1: SerialNumber: syz [ 287.348515][ T650] usb 6-1: config 0 descriptor?? [ 287.354229][T10444] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 287.361911][T10444] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 287.584012][T10444] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 287.591692][T10444] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 288.087817][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 288.087841][ T4228] Bluetooth: hci0: command 0x1003 tx timeout [ 288.244504][ T650] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 288.255389][ T650] asix 6-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 288.271800][ T650] asix 6-1:0.251: probe with driver asix failed with error -71 [ 288.281423][ T650] usb 6-1: USB disconnect, device number 66 [ 288.375632][ T9828] Bluetooth: hci0: Frame reassembly failed (-84) [ 288.419331][ T3579] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 288.579421][ T3579] usb 10-1: Using ep0 maxpacket: 8 [ 288.586565][ T3579] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 33958, setting to 1024 [ 288.598074][ T3579] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 288.610412][ T3579] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 520 [ 288.623170][ T3579] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 288.632702][ T3579] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.642483][ T3579] usb 10-1: Product: 搢䰺ޛ빪尒陼듛⚡歩铁嫶币坙ﮐ⚽方⼎琀馟五ꏙㅟ眉`ൎ٤䟪꤀췾濵書㼒ꨑꖂ큀햆䋕⇱ﯻ㍏腅灉鱿鉔㉼룱至ⱱ幬昍䮞叛㣏庉嵈ꖄ鬡㇢㽩㼋妺쪦ᨥ⛢匥媛깷槩៹䧵쀙ṉ [ 288.668307][ T3579] usb 10-1: Manufacturer: ᰀ [ 288.673206][ T3579] usb 10-1: SerialNumber: 贴욖歐陏䐊⮉࢒ɢᩜ悍⥰뱠쮤麋⤬᭰썻ᢓ홯ઘ墨᪫׻귤ꊓ흂ꥐ䐟⋈孨ꎣ䆥멚邦ꕛꛕﰽ팓ꙹ雭၏ᯖ䚌Ｉ﫺팴腹敃꬞䀳鶕ㅗ◘辢 [ 289.028383][ T4227] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 289.126105][T10470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.134975][T10470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.148072][ T3579] cdc_ncm 10-1:1.0: bind() failure [ 289.155550][ T3579] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 289.163340][ T3579] cdc_ncm 10-1:1.1: bind() failure [ 289.170564][ T3579] usb 10-1: USB disconnect, device number 59 [ 289.316930][ T3578] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 289.455891][ T3578] usb 6-1: device descriptor read/64, error -71 [ 289.706149][T10492] binder: Unknown parameter 'context[7' [ 289.723990][ T3578] usb 6-1: device descriptor read/64, error -71 [ 289.887053][T10504] /dev/loop0: Can't lookup blockdev [ 289.915382][T10506] rust_binder: Write failure EFAULT in pid:1173 [ 289.932108][ T36] audit: type=1400 audit(1760316098.713:51710): avc: denied { rename } for pid=10495 comm="syz.8.3208" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 289.991771][ T3578] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 290.150526][ T3578] usb 6-1: device descriptor read/64, error -71 [ 290.406996][ T3578] usb 6-1: device descriptor read/64, error -71 [ 290.525856][ T3578] usb usb6-port1: attempt power cycle [ 290.567359][ T4227] Bluetooth: hci0: command 0x1003 tx timeout [ 290.573689][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 290.870982][T10518] netlink: 1323 bytes leftover after parsing attributes in process `syz.8.3215'. [ 290.881115][T10518] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 290.887961][ T3578] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 290.890245][T10518] rust_binder: Write failure EINVAL in pid:61 [ 290.910680][ T3578] usb 6-1: device descriptor read/8, error -71 [ 290.916593][T10521] rust_binder: 64: no such ref 3 [ 291.028391][T10525] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 291.028434][T10525] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1180 [ 291.052752][ T3578] usb 6-1: device descriptor read/8, error -71 [ 291.101669][T10533] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3220'. [ 291.184246][T10538] rust_binder: Got transaction with invalid offset. [ 291.184280][T10538] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 291.191663][T10538] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1190 [ 291.218206][T10541] netlink: 'syz.8.3223': attribute type 1 has an invalid length. [ 291.240453][T10543] can0: slcan on ptm0. [ 291.244109][T10541] can1: slcan on ptm1. [ 291.306212][T10541] can1 (unregistered): slcan off ptm1. [ 291.316144][ T3578] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 291.330314][T10543] can0 (unregistered): slcan off ptm0. [ 291.350473][ T3578] usb 6-1: device descriptor read/8, error -71 [ 291.498159][ T3578] usb 6-1: device descriptor read/8, error -71 [ 291.614761][ T3578] usb usb6-port1: unable to enumerate USB device [ 291.700142][ T3582] usb 9-1: new full-speed USB device number 34 using dummy_hcd [ 291.851048][T10584] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 291.861631][ T3582] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 291.879291][ T3582] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 291.892520][ T3582] usb 9-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 291.901948][ T3582] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.911255][ T3582] usb 9-1: config 0 descriptor?? [ 291.916573][T10556] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 291.925367][ T3582] usbhid 9-1:0.0: can't add hid device: -22 [ 291.931496][ T3582] usbhid 9-1:0.0: probe with driver usbhid failed with error -22 [ 291.940996][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3229'. [ 292.234412][ T3582] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 292.289948][ T36] audit: type=1326 audit(1760316100.930:51711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10597 comm="syz.5.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6f98eec9 code=0x7ffc0000 [ 292.314303][ T36] audit: type=1326 audit(1760316100.930:51712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10597 comm="syz.5.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6f98eec9 code=0x7ffc0000 [ 292.323881][ T3584] usb 9-1: USB disconnect, device number 34 [ 292.345363][ T36] audit: type=1326 audit(1760316100.930:51713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10597 comm="syz.5.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1d6f98eec9 code=0x7ffc0000 [ 292.370210][ T36] audit: type=1326 audit(1760316100.930:51714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10597 comm="syz.5.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6f98eec9 code=0x7ffc0000 [ 292.394511][ T36] audit: type=1326 audit(1760316100.930:51715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10597 comm="syz.5.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1d6f990de7 code=0x7ffc0000 [ 292.419356][ T3582] usb 10-1: Using ep0 maxpacket: 16 [ 292.426550][ T36] audit: type=1326 audit(1760316100.930:51716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10597 comm="syz.5.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f1d6f990d5c code=0x7ffc0000 [ 292.447542][ T3582] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.465073][ T3582] usb 10-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 292.471555][ T36] audit: type=1326 audit(1760316100.930:51717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10597 comm="syz.5.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1d6f990c94 code=0x7ffc0000 [ 292.478414][ T3582] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.507967][ T36] audit: type=1326 audit(1760316100.930:51718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10597 comm="syz.5.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1d6f990c94 code=0x7ffc0000 [ 292.513892][ T3582] usb 10-1: config 0 descriptor?? [ 292.533129][ T36] audit: type=1326 audit(1760316100.930:51719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10597 comm="syz.5.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1d6f98db2a code=0x7ffc0000 [ 292.562876][ T36] audit: type=1326 audit(1760316100.930:51720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10597 comm="syz.5.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6f98eec9 code=0x7ffc0000 [ 292.813931][T10612] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 292.814068][T10612] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:846 [ 292.940654][T10634] ------------[ cut here ]------------ [ 292.958066][T10634] WARNING: CPU: 1 PID: 10634 at mm/page_alloc.c:5234 __alloc_pages_noprof+0xe8/0x7b0 [ 292.969390][T10634] Modules linked in: [ 292.973805][T10634] CPU: 1 UID: 0 PID: 10634 Comm: syz.5.3244 Not tainted syzkaller #0 1f5813a52420658c51670c32aa0b3f2b32c06bdf [ 292.986246][T10634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 292.996066][ T3582] logitech 0003:046D:C20A.0018: unknown main item tag 0x1 [ 292.996985][T10634] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 293.005962][ T3582] logitech 0003:046D:C20A.0018: hidraw0: USB HID v0.00 Device [HID 046d:c20a] on usb-dummy_hcd.9-1/input0 [ 293.010176][T10634] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 82 0e ee 05 00 0f 85 be 00 00 00 c6 05 75 0e ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 293.010207][T10634] RSP: 0018:ffffc9000c32f860 EFLAGS: 00010246 [ 293.035451][T10636] rust_binder: Failed to allocate buffer. len:4240, is_oneway:true [ 293.042063][T10634] RAX: 0000000000000000 RBX: 0000000000000020 RCX: 0000000000000000 [ 293.057264][ T3582] logitech 0003:046D:C20A.0018: no inputs found [ 293.064682][T10634] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000c32f918 [ 293.079247][T10634] RBP: ffffc9000c32f988 R08: ffffc9000c32f917 R09: 0000000000000000 [ 293.088375][T10634] R10: ffffc9000c32f900 R11: fffff52001865f23 R12: ffffc9000c32f8a0 [ 293.096858][T10636] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 293.096894][T10636] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:865 [ 293.107107][T10634] R13: dffffc0000000000 R14: 1ffff92001865f10 R15: 0000000000000000 [ 293.125769][T10634] FS: 00007f1d7084d6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 293.135712][T10634] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.142821][T10634] CR2: 0000200000001000 CR3: 0000000120f88000 CR4: 00000000003526b0 [ 293.151196][T10634] Call Trace: [ 293.154662][T10634] [ 293.157982][T10634] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 293.164173][T10634] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 293.170071][T10634] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 293.175792][T10634] ___kmalloc_large_node+0x81/0x220 [ 293.181043][T10634] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 293.186928][T10634] __kmalloc_large_node_noprof+0x1e/0xe0 [ 293.192625][T10634] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 293.198743][T10634] __kmalloc_noprof+0x336/0x530 [ 293.203746][T10634] ? __cfi_lockref_get+0x10/0x10 [ 293.208800][T10634] incfs_realloc_mount_info+0xa7/0x4d0 [ 293.214402][T10634] ? incfs_add_sysfs_node+0x118/0x240 [ 293.220115][T10634] incfs_alloc_mount_info+0x479/0x600 [ 293.225636][T10634] incfs_mount_fs+0x3ca/0x960 [ 293.230437][T10634] ? __cfi_incfs_mount_fs+0x10/0x10 [ 293.235815][T10634] ? vfs_parse_fs_string+0x102/0x170 [ 293.241218][T10634] ? selinux_capable+0x38/0x50 [ 293.246245][T10634] legacy_get_tree+0x106/0x1b0 [ 293.251638][T10634] ? __cfi_incfs_mount_fs+0x10/0x10 [ 293.256938][T10634] vfs_get_tree+0x9e/0x290 [ 293.261941][T10634] do_new_mount+0x251/0xb40 [ 293.266599][T10634] ? security_capable+0xcf/0xf0 [ 293.272115][T10634] path_mount+0x688/0x1050 [ 293.276634][T10634] ? putname+0x113/0x150 [ 293.281063][T10634] __se_sys_mount+0x2bd/0x480 [ 293.285894][T10634] ? __x64_sys_mount+0xf0/0xf0 [ 293.290857][T10634] ? __kasan_check_write+0x18/0x20 [ 293.296091][T10634] ? fpregs_restore_userregs+0x11d/0x260 [ 293.301893][T10634] __x64_sys_mount+0xc3/0xf0 [ 293.306698][T10634] x64_sys_call+0x2021/0x2ee0 [ 293.311859][T10634] do_syscall_64+0x58/0xf0 [ 293.316954][T10634] ? clear_bhb_loop+0x50/0xa0 [ 293.321883][T10634] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 293.322486][ T3582] usb 10-1: USB disconnect, device number 60 [ 293.328003][T10634] RIP: 0033:0x7f1d6f98eec9 [ 293.338821][T10634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.361595][T10634] RSP: 002b:00007f1d7084d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 293.370658][T10634] RAX: ffffffffffffffda RBX: 00007f1d6fbe5fa0 RCX: 00007f1d6f98eec9 [ 293.379292][T10634] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000200000000000 [ 293.387678][T10634] RBP: 00007f1d6fa11f91 R08: 0000200000000640 R09: 0000000000000000 [ 293.395983][T10634] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 293.404258][T10634] R13: 00007f1d6fbe6038 R14: 00007f1d6fbe5fa0 R15: 00007ffdbcce4688 [ 293.412376][T10634] [ 293.415434][T10634] ---[ end trace 0000000000000000 ]--- [ 293.421860][T10634] incfs: Error allocating mount info. -12 [ 293.428006][T10634] incfs: mount failed -12