last executing test programs: 3m40.949732423s ago: executing program 0 (id=268): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x8006, 0x4, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) write(r3, &(0x7f0000000000)="242200001e005f02", 0x8) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') pread64(r5, &(0x7f0000000180)=""/195, 0xc3, 0x100) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r6, 0x1, 0x2a, 0x0, &(0x7f0000000580)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f00000000c0)="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", 0xfa, r1}, 0x68) preadv2(r2, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0}], 0x3, 0x0, 0x5, 0x9) 3m40.945033404s ago: executing program 0 (id=270): open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) mount(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000380)='erofs\x00', 0xa0c000, &(0x7f0000000180)='dax=always') 3m40.944335814s ago: executing program 0 (id=271): mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000040)={[{@stats}]}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f0000000080)={0x20, 0x24, 0xff, {0xc9, 0x11, "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"}}, &(0x7f00000001c0)={0x0, 0x3, 0x81, @string={0x81, 0x3, "b91b6e16384e4091b212258a23d99aa32981d445164ca929e9f9d3b373556183d166e552ffdecea6db1a49825fb4bd27dbf8dc1210702d8283b6a363358a0a4ad6faefa639c41823c075edefd35bb01c3c05411dbe746a698f00fa0e6b227e387eccf5185354c7258ca2582d1086f2ee4ba0c4a01fe1ad0ed2f914c66e8c17"}}}, &(0x7f0000000540)={0x34, &(0x7f00000002c0)={0x0, 0x15, 0x53, "1458d18d6d283654f45ba7ea8fc304aeb01c324cc92b6d89907126bbb979d7f813d5761c4f3f308efa3f5786893897da547af4dbbfabbe72b77a742fa311e43f911d46da460f1f03de7c295b713a25c3eef143"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000003c0)={0x20, 0x0, 0xc0, {0xbe, "7b3dcc42dc902e72fb90d7291468807b984e42714dfcfee891aefcc9a4ced2c92933bd181352adbc665040033e8125ecf356c29739c3f20442ba434812f55c5b7f2a0915ffc4f4e04c40b6c141b31632e938d3d2b1e4032fd1aa363ff5107515bf0ecbeeda726c78df65c2569ca25b813cdb1c6cfa0aebe4730026a5bcc9237452bef715266906fb6179789291afa3ef1e4573e4bc0e020b547841075e54748b14734bc62ff7ac27b743e6d04d50c6f5839b5ded8247ee66077023e9915b"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x7}}) (async) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f0000000080)={0x20, 0x24, 0xff, {0xc9, 0x11, "687f6b4fbd04aac6b48bbb3b2cc82866e79b78dca89c11e30d24b06c040d4ac20dbe81f5716e3d6a359794f98b5a60c4a6e63406ab4297b7bcc04d3e8d6bf1b46f428b5f141eb71113157bff0197a1e926028ff56fb6fb534362da16435aafa5f9d4af8351aaab239d48def7313c950b2bf4dc342827fb957e8b5820ccfc405df3bd4c3c1e01e1713180f186ce79eff0455928b8a519d027a4652d6fbd348b951d80656bc5b48680d0a2d4f7b7d1ceae457baa5e524bc593cab125f3a7383fe05cb719481cf6582f9679db9642bfaafe47eb89fb07c71b455351e035c8b0c400e6a9e215fb928ae3cc6f4e98449679ae3a46eff6993ed91125c9bd3763"}}, &(0x7f00000001c0)={0x0, 0x3, 0x81, @string={0x81, 0x3, "b91b6e16384e4091b212258a23d99aa32981d445164ca929e9f9d3b373556183d166e552ffdecea6db1a49825fb4bd27dbf8dc1210702d8283b6a363358a0a4ad6faefa639c41823c075edefd35bb01c3c05411dbe746a698f00fa0e6b227e387eccf5185354c7258ca2582d1086f2ee4ba0c4a01fe1ad0ed2f914c66e8c17"}}}, &(0x7f0000000540)={0x34, &(0x7f00000002c0)={0x0, 0x15, 0x53, "1458d18d6d283654f45ba7ea8fc304aeb01c324cc92b6d89907126bbb979d7f813d5761c4f3f308efa3f5786893897da547af4dbbfabbe72b77a742fa311e43f911d46da460f1f03de7c295b713a25c3eef143"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000003c0)={0x20, 0x0, 0xc0, {0xbe, "7b3dcc42dc902e72fb90d7291468807b984e42714dfcfee891aefcc9a4ced2c92933bd181352adbc665040033e8125ecf356c29739c3f20442ba434812f55c5b7f2a0915ffc4f4e04c40b6c141b31632e938d3d2b1e4032fd1aa363ff5107515bf0ecbeeda726c78df65c2569ca25b813cdb1c6cfa0aebe4730026a5bcc9237452bef715266906fb6179789291afa3ef1e4573e4bc0e020b547841075e54748b14734bc62ff7ac27b743e6d04d50c6f5839b5ded8247ee66077023e9915b"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x7}}) 3m40.423706194s ago: executing program 0 (id=277): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000080)=0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) sendmsg$inet(0xffffffffffffffff, 0x0, 0x41) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x268096, 0x0) getuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpgid(0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000140)={0x1, r5}) sendmmsg$unix(r3, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_fuse_handle_req(r6, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r7, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) rt_sigaction(0x3e, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000080)=0x8) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r8, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xdd52d6c}}, 0x1006) timer_create(0x1, &(0x7f0000000300)={0x0, 0x19, 0x2, @thr={&(0x7f0000000200)="5d4ed12b5247c003adb3ccc99dc6f743cf9729f8554a5ad952fb0e94d927912acfc7d10743d4ef2ff602dad98d0892694935cb2ff4111d31b350f16d6b7466ffeca65c95da0db11f34b08d57532bf4b0ed871b436fe65adf0f949faa9ad29c5c7566f39185b2db210f", &(0x7f0000000280)="872d7e0990eab9e40fb2e2d32b1c4d130351f7dec8f3fc19f94ee0c93105f9a1e95be9718acb47988c94f2c5147d9f9192c206d39f7e8c7828bd82669e8dc821ebadb70e014502e74578fc5af0423faf4f3e91c0fc6879cc32"}}, &(0x7f0000000340)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) r9 = socket$inet6(0xa, 0x3, 0x87) fgetxattr(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB="6b747266732e630069e7075823eec01b66972d384d0f516a5aed98575178d9489f3d4d639846424a280cd985fb939791831ad2"], 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0xffff}]}, 0x10) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 3m40.408176134s ago: executing program 0 (id=278): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, 0x0, 0x0, 0x9a) r2 = userfaultfd(0x801) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000340)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c1000000a000000000000", 0x58}], 0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x4) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r6 = openat$incfs(r5, &(0x7f00000000c0)='.log\x00', 0x0, 0x70) read$FUSE(r6, &(0x7f0000000f00)={0x2020}, 0x2020) openat$incfs(r5, &(0x7f00000001c0)='.pending_reads\x00', 0x48000, 0x3) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x100a, 0x1}, @fda={0x66646185, 0x1, 0x1, 0x7}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000080)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 3m39.551455791s ago: executing program 0 (id=293): keyctl$set_reqkey_keyring(0xe, 0x5) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x22, 0x14, {[@global=@item_4={0x3, 0x1, 0x0, "84b2e5e7"}, @local=@item_4={0x3, 0x2, 0x5, "45501821"}, @global=@item_012={0x2, 0x1, 0x9, '#\x00'}, @global=@item_4={0x3, 0x1, 0xb, "56049fb4"}, @main=@item_012={0x1, 0x0, 0xa, '&'}]}}, 0x0}, 0x0) (async, rerun: 32) r1 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x50, &(0x7f00000000c0)={0x11, 0xd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = dup(r5) write$FUSE_DIRENTPLUS(r6, 0x0, 0xb0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}}) (async) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xccf) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) getsockopt$inet6_int(r7, 0x29, 0x24, 0x0, &(0x7f0000000100)) (async) r8 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (async, rerun: 32) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) vmsplice(r9, &(0x7f0000000240)=[{&(0x7f0000000180)='wi', 0x2}, {&(0x7f0000000100)="0a62a8ea", 0x4}], 0x2, 0x1) (async) ioctl$sock_inet_udp_SIOCINQ(r9, 0x541b, &(0x7f0000000200)) (async) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) (async) syz_usb_control_io$hid(r0, &(0x7f0000001f80)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) ioctl$HIDIOCAPPLICATION(r8, 0x4802, 0x4) (async) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b45, &(0x7f0000000280)={0x0, 0xc5ba, 0x40, 0x1, 0xc3}, 0x0, 0x0) (async) sendfile(r11, r10, 0x0, 0x7ffff000) 3m24.109824874s ago: executing program 32 (id=293): keyctl$set_reqkey_keyring(0xe, 0x5) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x22, 0x14, {[@global=@item_4={0x3, 0x1, 0x0, "84b2e5e7"}, @local=@item_4={0x3, 0x2, 0x5, "45501821"}, @global=@item_012={0x2, 0x1, 0x9, '#\x00'}, @global=@item_4={0x3, 0x1, 0xb, "56049fb4"}, @main=@item_012={0x1, 0x0, 0xa, '&'}]}}, 0x0}, 0x0) (async, rerun: 32) r1 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x50, &(0x7f00000000c0)={0x11, 0xd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = dup(r5) write$FUSE_DIRENTPLUS(r6, 0x0, 0xb0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}}) (async) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xccf) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) getsockopt$inet6_int(r7, 0x29, 0x24, 0x0, &(0x7f0000000100)) (async) r8 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (async, rerun: 32) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) vmsplice(r9, &(0x7f0000000240)=[{&(0x7f0000000180)='wi', 0x2}, {&(0x7f0000000100)="0a62a8ea", 0x4}], 0x2, 0x1) (async) ioctl$sock_inet_udp_SIOCINQ(r9, 0x541b, &(0x7f0000000200)) (async) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) (async) syz_usb_control_io$hid(r0, &(0x7f0000001f80)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) ioctl$HIDIOCAPPLICATION(r8, 0x4802, 0x4) (async) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b45, &(0x7f0000000280)={0x0, 0xc5ba, 0x40, 0x1, 0xc3}, 0x0, 0x0) (async) sendfile(r11, r10, 0x0, 0x7ffff000) 2m16.470985988s ago: executing program 2 (id=1076): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$SIOCSIFMTU(r1, 0x8923, &(0x7f0000000140)={'vcan0\x00', 0x4e171e32}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x94822, &(0x7f0000000340)=ANY=[@ANYBLOB="6e725f6900d9ef3b238e5d94f98c34c8bbf3bd52346a52bdfb8493c2b38058d4e97db1db24f78d772eef343b3a6570758ac7871e9587448863a13037566766df8de91b5fe49b0b0ff10f9305493a6b618f6e5c5bc44dbe1ca325318cc86c037d36b881b46d2ecc45137802496245883966e117"]) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = open(&(0x7f0000000000)='./file0\x00', 0x80ff, 0x1) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x1) fcntl$getflags(r4, 0x401) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, &(0x7f0000000200)={0xe, {{0xa, 0x4e24, 0x20006de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2, 0x80000}}}, 0x108) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'macvlan0\x00', 0x400}) close_range(r0, 0xffffffffffffffff, 0x0) 2m16.33895343s ago: executing program 2 (id=1081): r0 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r0, 0xe, &(0x7f0000000140)={0x5, 0x7fff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES16=r2, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000003c0000000a000000fe8000000000000000000000000000aa0000000001000000000000000000000000000000ff010000000000000000000000000001000000002b0000000a000000fe8800000000000000000000000000010000000000000000000000000000000000000000ff020000000000000000000000000001000000003200000002000000fe8000000000000000000000000000000000000004"], 0x254}}, 0x0) 2m16.097314655s ago: executing program 2 (id=1083): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, 0x0, &(0x7f00000002c0)) readlink(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000400)="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", 0x1f000) 2m16.034251867s ago: executing program 2 (id=1085): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) unshare(0x22020600) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) (async) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) (async) 2m16.031714636s ago: executing program 2 (id=1086): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) epoll_create1(0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r1, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x2) (async) setresuid(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x9c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xfffffffffffffff7, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000002740)=""/243, 0xf3, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xffffffff7fffffff, 0x1, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/173, 0xad, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}, @dead_binder_done], 0x0, 0x0, 0x0}) 2m15.988953737s ago: executing program 2 (id=1087): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000000)=0x8, 0x4) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x26d4, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0xd, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x6, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x4, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3e, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) readv(r1, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x4, 0xdddd0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x2, r6}, 0x10) recvmmsg(r4, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}, 0x80000001}], 0x1, 0x2041, 0x0) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}, {0x0}], 0x2) 2m15.948613388s ago: executing program 33 (id=1087): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000000)=0x8, 0x4) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x26d4, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0xd, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x6, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x4, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3e, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) readv(r1, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x4, 0xdddd0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x2, r6}, 0x10) recvmmsg(r4, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}, 0x80000001}], 0x1, 0x2041, 0x0) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}, {0x0}], 0x2) 2m12.300290439s ago: executing program 3 (id=1154): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0069f793b60c714796416f3632ff352f41cf7e30"]) add_key$user(0x0, 0x0, &(0x7f0000000080)='YK', 0x2, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="f0", 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x4044081) r2 = syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000001100)='maps\x00') preadv(r3, &(0x7f0000000280)=[{&(0x7f00000007c0)=""/182, 0xb6}], 0x1, 0x800, 0x8) sendmsg$key(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x2, 0x8, 0x5, 0x2, 0x1c, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e24}, @sadb_ident={0x2, 0xa, 0x7}, @sadb_address={0x5, 0x17, 0x6c, 0x80, 0x0, @in6={0xa, 0x4e22, 0x3, @remote, 0x8}}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e20}, @sadb_address={0x5, 0x7, 0x32, 0x80, 0x0, @in6={0xa, 0x4e20, 0xcf7f, @mcast2, 0x8}}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_key={0x9, 0x8, 0x1c8, 0x0, "a3cde560cd8cf6cea4ce833fedb5aa1cae2edbe900feb1db3948d9e9da6cd5fd3dacd168a1a2bae3717bdc28e6f539bc6a6af58619bb8e5132"}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e21}]}, 0xe0}}, 0x24000001) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x118a, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2m12.174970392s ago: executing program 3 (id=1155): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000002140)=[@text64={0x40, &(0x7f00000020c0)="1858b036410f017d0048b8dc4b13b61e0b813a0f8520f8f8c00000a00f23f8660f2263c4c17c773666420f3a428ce80c00000000c4a10de3293e3e6767450f01cf6536460f01f8c422d1b7900000c0fe", 0x50}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f00000003c0), 0x6) close_range(r0, 0xffffffffffffffff, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r9, 0x29, 0x37, &(0x7f0000000040)={0x67, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x2}]}, 0x10) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1002, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000003, 0x10012, r10, 0x0) 2m9.974495165s ago: executing program 3 (id=1201): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000240)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='cpuset.sched_load_balance\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x10000008) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m9.107718221s ago: executing program 3 (id=1227): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r0, 0xfffffffffffffff9, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r2 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = getuid() sendmsg$nl_generic(r1, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40001082}, 0xc, &(0x7f0000000700)={&(0x7f0000000280)={0x448, 0x1b, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1b}, [@typed={0x3b, 0xfe, 0x0, 0x0, @binary="f02367476257c568ef88f70f2211fbcb10c5f9b2807c73012fb9397befef17edc0597eaa85a559f8a22c7925ba2106aad0d9bff7f71cfe"}, @generic="367023a0c6429a510153bedabc633234bc98188c7342c91bd83742da66efb20144f6e2e64c1f1cd4848df11a1c6e2fbc4f17ff1c34662d50479e3a7d95edb71a1cddcd7da2f7c945ff2471ed968d", @nested={0x100, 0xfe, 0x0, 0x1, [@generic="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"]}, @nested={0x20, 0x7f, 0x0, 0x1, [@nested={0x4, 0x46}, @nested={0x4, 0xb7}, @typed={0x14, 0x121, 0x0, 0x0, @ipv6=@empty}]}, @generic="bcf8dde137befcbba6c2fab2dd4b580101dde00987fb5b954ef7ba2b03da3123bc363965f631579c5ec8ba9a1fd6dd166ee23ca48090c1ea", @typed={0xf1, 0x117, 0x0, 0x0, @binary="299ecb81695e86f9360450c4040c8b223ca7a01698ff38b7882d57ea58eec863284096cbb8693ffaba9cf59beb50a420e18ca8af1e37cb9872bbd49f1494b29f9acf248404422008583000463800ec021014f79162ac7549f887c565d8f843a407ea2aefff20216e7eba67058588174e5440359bb712317d280bde6bd3ee0d0f47bb93f51b33da4b7bb1f52d28d7341f27de6beecb257178c72ef95df790f8864afe4aaa10844ab4cfa1bdfee497f09388ef6cc13f04689c77b002fad7c1583093d9da673e18a42850d4559ac55a842e8742bbcb34e7496a035b0eff596b146baa9b5713f4246785d81c116ae5"}, @nested={0x15b, 0xca, 0x0, 0x1, [@generic="37a10610e5412b46db0177399fdcc3c222177c6ed997018c03d1c24f8abdebfb0670be3ec670fafd30c7ecfc27bb2ed03eeea9fe1f2c07daa63726a5661696fcd361671028e0ed05e532d1eb76ba17c287fde6cccdbb78a3f82c89fb55d8efc1a79625d7323209f9a6a48a5bd55df4824a986f79054f44dd9209a5d29d76db2b5eb971fde21558aed6fdf2019d860ac54ea789f1c75abc250e037cb4bc163bb204f5c3a0e6bff3d728da1d0ed52b313be1dba3e56235c6fc3b114587152bbe3885bcb341ab22caaedcc64307b958dcd9202d27111ca78b7b2a7d144608e70cd98c08a2e71198224f0680497c43a8c73b11849decf7dd1d6a01", @generic="07fee01ec20e5916ce888e86600f8b4990f6df649e5c6b6c9979092fe1eb3d0ff3d899bca0044e3a6b943ec487b6ae0da88bbec8db10f7b99a5bbef2b85bcbc62d4b", @typed={0x8, 0x1e, 0x0, 0x0, @uid=r3}, @typed={0x14, 0x123, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x448}, 0x1, 0x0, 0x0, 0x800}, 0x4008081) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0) mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='pstore\x00', 0x1800000, &(0x7f0000000200)='--^}*&+++,@\x00') sendmmsg$inet6(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x2, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYRES8=r0], 0x110}}], 0x1, 0x931766f6319eed40) sendfile(r2, r1, 0x0, 0x80000000) 2m9.052709173s ago: executing program 3 (id=1230): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x208000, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) (async) listen(r1, 0x0) (async) ioctl$int_in(r1, 0x5421, &(0x7f0000000200)=0x87) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x3, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8080}, 0x4000000) accept4(r1, 0x0, 0x0, 0x400000000000000) (async) write(r0, &(0x7f00000000c0)="6325564f2132cf6498f623179e4555f2631dd6257040f2d8450b93226bbe9d08c03af3a367120efa83f360aacdf69853573476d094221e6b67c6a5096f112645695e8faf1164c17a156a532e22bee2c09b30e614eb6f33e16dbd6c35d1693cef255692", 0x63) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) 2m8.796078358s ago: executing program 3 (id=1239): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="848315", 0x3}], 0x1, 0x0, 0x0, 0x2c}, 0x40040) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_cmd={0x47, 0x2, 0x20000004, 0x3ff, 0x3f, 0x7, 0x1, 0x3, 0x6, 0x3, 0x101, 0x142f, 0x8, 0x3, 0x0, 0xa, [0x4000000, 0xff]}}) r3 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r5) syz_genetlink_get_family_id$team(&(0x7f0000000180), r5) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3a) r6 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r6, 0x6}) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') preadv(r7, &(0x7f0000000280)=[{&(0x7f0000002a00)=""/4096, 0x1000}], 0x1, 0x1f2, 0x1) write$P9_RREADDIR(r7, &(0x7f0000000280)={0xa6, 0x29, 0x1, {0xd81e, [{{0x40, 0x4, 0x1}, 0x8, 0x1c, 0x7, './file0'}, {{0x20, 0x3, 0x3}, 0x1, 0x98, 0x7, './file0'}, {{0x20, 0x4, 0x5}, 0x7, 0x9, 0x7, './file0'}, {{0x1, 0x3, 0x2}, 0xf, 0x8, 0x7, './file0'}, {{0x10, 0x4, 0x3}, 0x9, 0xf, 0x7, './file0'}]}}, 0xa6) close_range(r0, 0xffffffffffffffff, 0x0) 2m8.761195268s ago: executing program 34 (id=1239): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="848315", 0x3}], 0x1, 0x0, 0x0, 0x2c}, 0x40040) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_cmd={0x47, 0x2, 0x20000004, 0x3ff, 0x3f, 0x7, 0x1, 0x3, 0x6, 0x3, 0x101, 0x142f, 0x8, 0x3, 0x0, 0xa, [0x4000000, 0xff]}}) r3 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r5) syz_genetlink_get_family_id$team(&(0x7f0000000180), r5) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3a) r6 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r6, 0x6}) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') preadv(r7, &(0x7f0000000280)=[{&(0x7f0000002a00)=""/4096, 0x1000}], 0x1, 0x1f2, 0x1) write$P9_RREADDIR(r7, &(0x7f0000000280)={0xa6, 0x29, 0x1, {0xd81e, [{{0x40, 0x4, 0x1}, 0x8, 0x1c, 0x7, './file0'}, {{0x20, 0x3, 0x3}, 0x1, 0x98, 0x7, './file0'}, {{0x20, 0x4, 0x5}, 0x7, 0x9, 0x7, './file0'}, {{0x1, 0x3, 0x2}, 0xf, 0x8, 0x7, './file0'}, {{0x10, 0x4, 0x3}, 0x9, 0xf, 0x7, './file0'}]}}, 0xa6) close_range(r0, 0xffffffffffffffff, 0x0) 1m4.382940409s ago: executing program 1 (id=2383): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r1 = dup(r0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xc9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x85) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f00000002c0), 0x102, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) eventfd2(0x8, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x3) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x2000, 0x1}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$uinput_user_dev(r7, &(0x7f0000000900)={'syz1\x00', {0x9, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x10, 0x1000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x100, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xbffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x7, 0xffffffff, 0x0, 0xffff, 0x0, 0x20, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x6, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x105], [0x10, 0xffffffff, 0x7, 0x0, 0xfffffffc, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0xbb, 0x1, 0xfffffffc, 0x5, 0x800, 0x0, 0xfffffffc, 0x0, 0x100, 0x0, 0x3, 0xec6a, 0x5, 0x40000000, 0xffffffff, 0xfffffffc, 0x7fffffff, 0xfffffffd, 0x7fffffff, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0xb9a5, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x4, 0x4000000, 0x80, 0x0, 0x4, 0x0, 0x8, 0x800000, 0x7], [0x10000, 0x4, 0x0, 0x0, 0xffffffff, 0x1, 0xa000000, 0x0, 0x9, 0xffff7fff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x520, 0xc, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x2af, 0x0, 0x9, 0x0, 0x10000, 0x100, 0x0, 0x69, 0x0, 0x6, 0x400, 0x0, 0x0, 0x0, 0x800082ce, 0x0, 0x3, 0x0, 0x0, 0xff, 0x4000005, 0x0, 0x0, 0x2, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x6, 0x0, 0x401, 0x0, 0x211, 0x4, 0x0, 0x100, 0x3, 0x0, 0x8, 0x80, 0x0, 0x3, 0x0, 0xfffffffe, 0x5, 0x7fff, 0x0, 0xd, 0x800000, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x8000000, 0x6, 0x9, 0x3, 0x20, 0x0, 0x6, 0xbfb6, 0x4, 0x1b11f586, 0x3, 0x0, 0x0, 0x1, 0xffffffff, 0x100, 0x0, 0x6, 0x3, 0xfffffffd, 0x53591b27, 0x3fffffd, 0x0, 0x10000, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x0, 0x5]}, 0x45c) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000200)={0xe1}) 1m3.866887669s ago: executing program 1 (id=2399): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="cc0000001b0001002dbd7000fddbdf2500008000000000000000000000000000ac1e00010000000000000000119e9c66c88d4a6a4e2300040a00008032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00080000000000008000000000000000f8ffffffffffffffff01000000000000010000000000000009000000000000000900000000000000000000008015010002000000000000000100000000000000fd0000000000000004000000000000000700000000000000000002030000000029000000000000000c0008"], 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) r2 = socket$pppl2tp(0x18, 0x1, 0x1) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x72c}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) dup3(r2, r3, 0x80000) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r0, 0x22e7c000) 1m3.80330562s ago: executing program 1 (id=2400): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x8000) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000140)={0x80}) 1m3.788596641s ago: executing program 1 (id=2401): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') unshare(0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) unshare(0x40020000) 1m3.714909162s ago: executing program 1 (id=2402): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000000)=0x9, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x0, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000002a3ee5c92a18d74fc4fa08a0a1d30800074000000000080008400000000354d7109f9f9d900d412b3a5b6d6be3c9a2debcce97071e4c4147078700ce203e05244dbe085681a2afa0b01f0cfca7fbb795876ad0b7557feb366dece7434aca14317a49581979b8cd585f67cb9a0a08a48cebdfb8bf14c25a1b5ea0e701bcc64aa9a4"], 0x9c}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001200010a00000000000000000700000019bf2de6fcfdd20a5be93438b0fd15e832409bedb7ac90754fe6145e3043d91fd263f8006c9ed116a52b5c7eb19c61c54f8d937d78557eeec01641c60f40cf6a1713fd38b8e53f5103cab7e9becd50df5bd5fa6bd1a00198676b213fe97a3a624111d47aea5e12ee5797b0be25bd39e02cad96f643698902268f28d40c155155b90d7931f9c01c90285648443a4bf92b92f0c6cb43080165ffb4c26ad37c55ffcbf633229668c35830041a74499b62993c68a84d14ac0bbe0be89ae877342fe98b0623b2fca299c9fa1acd3540a7bba787b48d14a23867f874a5f31a876e350b86f8b18527"], 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0x0, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x5000) socket$netlink(0x10, 0x3, 0xa) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0xa02000000000000, 0x60, &(0x7f0000001300)={'filter\x00', 0xb001, 0x4, 0x3c0, 0xe8, 0x0, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xf296, 0xd}}}, {{@arp={@private=0xa010101, @loopback, 0x0, 0x0, 0x6, 0x70, {@mac=@random="c1328a2329f2", {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@broadcast, {[0x0, 0x0, 0x0, 0xff]}}, 0x4, 0x7, 0xfffd, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10000, 'syz0\x00', {0x7b}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000045) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f00000003c0)) 1m3.620752454s ago: executing program 1 (id=2403): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000000c0)={0x8f, 0x0, 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x38) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="640fcab830b830670f205d0c04650f23cf2e0f00550dc4e1795aef660f38827653b805000000b961b553000f01d966ba210066b8070266eff20f21e6", 0x3c}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m3.568497725s ago: executing program 35 (id=2403): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000000c0)={0x8f, 0x0, 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x38) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="640fcab830b830670f205d0c04650f23cf2e0f00550dc4e1795aef660f38827653b805000000b961b553000f01d966ba210066b8070266eff20f21e6", 0x3c}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21.529596488s ago: executing program 7 (id=3086): mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={[{@max={'max', 0x3d, 0x7fffffff}}]}) 21.375234511s ago: executing program 7 (id=3087): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000c40)={"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"}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000380)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f00000003c0)="10", 0x1, 0x4000, &(0x7f0000000140)={0x11, 0xf7, r4, 0x1, 0x0, 0x6, @random="ed98e6a17953"}, 0x14) syz_open_dev$evdev(&(0x7f0000000300), 0x2, 0x20c040) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) socket$packet(0x11, 0x3, 0x300) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(r5, &(0x7f0000000400)="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", 0x1f000) 21.171135795s ago: executing program 7 (id=3088): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89ff, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x20, 0x10, 0xfffffff3, 0x0, {{0x5, 0x4, 0x2, 0x7, 0x14, 0x65, 0x0, 0x9, 0x2f, 0x0, @empty, @empty}}}}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000080)=0x8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) timer_create(0x5, &(0x7f00000000c0)={0x0, 0x22, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='gid_map\x00') write$FUSE_IOCTL(r4, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x7ffffffe, r3, &(0x7f00000001c0)={0x30000000}) timer_create(0x3, &(0x7f0000000200)={0x0, 0x39, 0x4}, &(0x7f0000000240)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) unshare(0x4000400) r7 = timerfd_create(0x1, 0x800) timerfd_gettime(r7, &(0x7f0000000300)) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000002c0)={0x43, 0x2, 0x3}, 0x10) sendto$inet6(r6, &(0x7f0000000540)='\x00\x00\x00', 0x3, 0x44800, 0x0, 0x0) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r9 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r9, 0xffff) fcntl$addseals(r9, 0x409, 0x7) r10 = ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f0000000000)={r9, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086200, &(0x7f00000001c0)=0x1) recvmsg(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) timer_delete(r5) 21.129121656s ago: executing program 7 (id=3089): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000000)) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 20.943129259s ago: executing program 7 (id=3090): openat$rnullb(0xffffffffffffff9c, 0x0, 0x60a00, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x801) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000280)={{r2}, 0xdda8, 0xb531, 0x3ff}) (async) sendmsg$nl_xfrm(r2, 0x0, 0x4008084) (async) socket$key(0xf, 0x3, 0x2) r3 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 20.867771431s ago: executing program 7 (id=3091): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x7) fstat(r0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3, 0xd4, 0x1}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x80, 0x141) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) open(&(0x7f0000000080)='./cgroup\x00', 0x282, 0x40) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') (async) exit(0x7) (async) fstat(r0, 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2800, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) eventfd2(0x4001, 0x800) (async) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3, 0xd4, 0x1}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x80, 0x141) (async) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) (async) open(&(0x7f0000000080)='./cgroup\x00', 0x282, 0x40) (async) 20.776855713s ago: executing program 36 (id=3091): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x7) fstat(r0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3, 0xd4, 0x1}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x80, 0x141) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) open(&(0x7f0000000080)='./cgroup\x00', 0x282, 0x40) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') (async) exit(0x7) (async) fstat(r0, 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2800, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) eventfd2(0x4001, 0x800) (async) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3, 0xd4, 0x1}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x80, 0x141) (async) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) (async) open(&(0x7f0000000080)='./cgroup\x00', 0x282, 0x40) (async) 20.150991455s ago: executing program 8 (id=3103): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, &(0x7f00000000c0)={0x7, 0x20}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) preadv(r3, &(0x7f0000001500)=[{&(0x7f0000000140)=""/37, 0x25}], 0x1, 0x1, 0x1) fsetxattr$security_ima(r2, &(0x7f0000000080), &(0x7f0000000100)=@sha1={0x1, "be9c7712b6a385fcf6ba86a81c0cdb9daf371dbc"}, 0x15, 0x3) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdirat$cgroup(r1, &(0x7f00000001c0)='syz1\x00', 0x1ff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x77622a85, 0x1000, 0x980}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1, 0x14}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 20.088318106s ago: executing program 8 (id=3106): ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x636042, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='YK', 0x2, 0xffffffffffffffff) keyctl$revoke(0x3, r3) keyctl$read(0xb, r3, 0x0, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x15000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 19.958438729s ago: executing program 8 (id=3113): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c, 0x80800) fsetxattr$security_ima(r0, &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "9eb000e658dbe5a922c1aae79221dce8c5e8abe6"}, 0x15, 0x3) r1 = dup3(r0, r0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r1) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) close_range(r0, r2, 0x2) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x40, 0x9}, 0x18) execveat(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)={[&(0x7f0000000240)='/selinux/member\x00', &(0x7f0000000280)='}\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000300)='security.ima\x00', &(0x7f0000000340)='security.ima\x00']}, &(0x7f00000003c0), 0x800) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x1, 0x9}) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, &(0x7f0000000440)={0x0, 0x7c, ""/124}) r4 = signalfd(r1, &(0x7f0000000500)={[0x1]}, 0x8) read$usbfs(r4, &(0x7f0000000540)=""/164, 0xa4) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000600)={0x1, 0x0, [{0xa0f, 0x0, 0x8}]}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000640)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x400, 0x0) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f00000006c0)={0xfffffff8, 0x4}) r5 = syz_io_uring_complete(0x0) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000740), r1) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x50, r6, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x159}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x8d0}, 0x40041) getresuid(&(0x7f0000000880)=0x0, &(0x7f00000008c0), &(0x7f0000000900)) setreuid(0xee00, r7) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x690) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000a80)=0xe8) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000940)=@sr0, r8, &(0x7f0000000ac0)) mkdirat(r3, &(0x7f0000000b00)='./file0\x00', 0x1c9) ioctl$BLKCRYPTOIMPORTKEY(r1, 0xc0401289, &(0x7f0000000c00)={&(0x7f0000000b40)="4b9ca5a9e71987ebbaaca0861cf3b02ba311125199220373ebf044080747ee7541370508495ba58b634ddad1f89f34912abcc120f15cf7cbcbb77ff115982f", 0x3f, &(0x7f0000000b80)=""/127, 0x7f}) r9 = open_tree(r1, &(0x7f0000000c40)='./file0\x00', 0x0) fdatasync(r9) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000c80)=0x3, 0x4) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000fc0)={0x24, &(0x7f0000000e40)={0x40, 0x30, 0x6d, {0x6d, 0x2b, "664db703160323308910a6b2878dc0ab2fca19d73372acaedb773eed71135e8fde703a5ac8874ba9c66f789bf0a50e7e0e78dc1c517770970d376b03235b547f98e3be40b359916e07a7680f1fb53b162afae6e387aa400174e2d34e4f1716e4a690d5a7f8f16e15d75a57"}}, &(0x7f0000000ec0)={0x0, 0x3, 0x4b, @string={0x4b, 0x3, "b60c35f9613db30e321dad410bfa31d3fc63e68e5b4c92e21cae34c4ffc3be97a400745c49744355e78e172a2298ff795fd581db4494be1fe91f965692006a6a0ed70cf39684a839b7"}}, &(0x7f0000000f40)={0x0, 0x22, 0x1e, {[@global=@item_4={0x3, 0x1, 0x3, "c3f69f48"}, @global=@item_4={0x3, 0x1, 0x9, "e36113d9"}, @local=@item_4={0x3, 0x2, 0x4, "82fbaca0"}, @global=@item_4={0x3, 0x1, 0x1, "4c17f82c"}, @global=@item_012={0x0, 0x1, 0xe183c737494602ba}, @local=@item_012={0x2, 0x2, 0xa, "a67c"}, @main=@item_012={0x2, 0x0, 0x9, "9898"}, @local=@item_012={0x2, 0x2, 0x9, "06f8"}]}}, &(0x7f0000000f80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0xe9b}}}}, &(0x7f00000012c0)={0x2c, &(0x7f0000001000)={0x40, 0x2f, 0xc0, "0885de5e178ed4f2c867dbfa2bc40a73d57b611d7cd62dc95065f73f3c7ae9c178e1b9400b5ff682561243e1256164f3d2a1be8171746e89c4f31caa88f243fa8a896631d364af5c33a592255fac96364384c86c17dd5af865091543fa6a283b0622217b0a9b6607facf04d59d84795d8fc7d5995e30b9fa1f1573b8b65c0fb102d062557bfb4d316616f946f5439d6f1b71ae37c689b902bb908bc28c8e66ff59d587f59d1fb156b0137b1b21a62087d7eae8a0e71562cc47970f6ff2c0ba67"}, &(0x7f0000001100)={0x0, 0xa, 0x1, 0xec}, &(0x7f0000001140)={0x0, 0x8, 0x1}, &(0x7f0000001180)={0x20, 0x1, 0xf3, "a678125c4df720075d35473cb00b8911dc564dbc107bc2d97521b8dbf3ba33f7226ee20eb199abd6baaf60bb5ec0c9728c7d28b90c587f711339175d3216b4ba2f765c9002a3e2f7087b0de4c170c18d7e7820a006b7daf7187fcdfc25198b92b9edb3b80ed2f995ffb5f583f043630dfc8609bd1e35f93d8f0c4f9771517266a5b8a944fcbd949ea8b680b42b2f1901c47bc5a84b62a0cd1934f835805236ec05a9254b9cdae9ce1d53ecb46820ed646fcd8acd459154760193f14109c5be38cac3922e0a7f4e1357044126169ad201000a83586cd5b1ef548a864a250bffcd31d169e07499e5c83e9eb3201f7f5c58c52c35"}, &(0x7f0000001280)={0x20, 0x3, 0x1, 0xc8}}) 18.512539167s ago: executing program 8 (id=3125): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$bind(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2012, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bpf(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080), 0x403, &(0x7f0000000440)={[{@uid={'uid', 0x3d, 0xee01}}], [{@euid_gt}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfsroot={'smackfsroot', 0x3d, 'mountinfo\x00'}}]}) sendmmsg$inet6(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x20c00a, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x800, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mknod(&(0x7f0000000100)='./file1/file3\x00', 0xc000, 0x7) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x168, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xed, 0x6, "fa5a8c2f80a87bb2c3c265ef6787c1c1be36abe9d994c81826cbd31edab057fd18462822cacb08097b063b019cb76336b06a50df81893f3c74782cfe4dc33d68cff37be71e19597b775fc3c2dd7c712175d26ca985d34a9e5dd7cedca7ca5a433c7cdad851f9edc19c40b1ee45b6ad0ae81a9a7293f5ee0958f0dac26351fac5a28a1aa54bcae970b6ae0763bbd2ead32bfc5836795e3fa0d69af75099c294cc4d1882652f7e0385b0424c5bca060cb131ad875bf1fb430da4deb0eaedaa2e484bf6d1dcecee550e1e6602a7546492b15cb8bef20f1f41173610554d27461c3a3389e91a82eb684b4a"}, @NFTA_TABLE_USERDATA={0x57, 0x6, "b3c0fc49309c23a0e248d63ac1a81ca422dbdf818ed9162a48417e6feeef01f4347fdf191225ce460d72dc8b2d90787d06038bfc6f3931c1ad8b44de4ff911f71ad724694c0a2ebf97a975b66e0ea40be369d5"}]}, @NFT_MSG_DELTABLE={0xc0, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x94, 0x6, "f80ea1dd269a1dbe1b5f79dfcad00513bf9cf811dc5c531a1adbf4e77b077b9ea63243862e7ddb8409023b96ef07665abfb483758075d99793eb66b6e45e5a44b0b0d958968f87b8473d17c697ad33f23c12ab420fbb6fa631741d1e5aa6ea60f11539648326f23f8317996435e99062822b54f1c0c133cee8f7d44fcc4d10740ad09cba2b74ccfd143b0eeb6bf1f462"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x140, 0x14, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_OBJ_USERDATA={0xdb, 0x8, "12e1cffc4feccf00f75febfd1d3df3ce519a1a2508c9bcc691a104572d1fe0606bb9d77d7165908e2d552cad4866362724295476b1847f5643febd9262c2e4f7678bd98525b1fba1647425ebe87cb54eb0c14b36dec6594d378b21e4ce5e4f82b06dc6fbdde2e736a63fc0e9923a392a36c8e84b3be167c31ae5d759561b77ac4bb2b7e6ee85b4cdc56bf153b10750ffd457d659d5a7d29ccefbec385a55c8e22806d32cb05936aca235ec5f8723e5e121dbe9b0cc1464a52fd157af581fbad4cb648e05fa63a82f538d7ee319457beb5ffb8c1b7c2776"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x2b, 0x8, "3f0de52622ca4029aa37d19c3bea89b1d7b4a2ce2ae8ab9b96ea170f45ce645a2cc6cd2bd8bd55"}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x1c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0xdc, 0x5, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_USERDATA={0x77, 0xc, "be0103b0b227eea94dc426400182eb718a4c0636db470234373ee9d7ac2e1188e555dc6bf3c5554bcfff9df794b4c70acc3c01970495e529bea599e18a828493a40d2c6c7db32a7b2090683285afd0dbaceebb95917411c8c9db33ae0e9dda1a01b1747ab8f5bcaef1221c987f89d4664ad315"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x8}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xa}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0xe0, 0x14, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_OBJ_USERDATA={0xb1, 0x8, "be6b2020d5c6b3a1b9f799d2ace52f17687e76941435b26497ad5d90a49344effb7171b06be043b403f2112adcbbd2b7fc1781e8ad45384b654b5c9be787358bc79b361bd632b96fd7f5e0b1e915ad2288dd9c08aa8642f82c39789b732a8bb5884026d8dc418d01f851e8922ef0baec0baf429e82c28f3654b1c3ca1e2af2a19c6bf380ed2260951f2a9ed7c29583f4523c1676e10cb789ee4e486764f78f84369804dc5f28fb67c286f91f79"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa487e640bf17d11d, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5ac}, 0x1, 0x0, 0x0, 0x80}, 0x804) sendfile(r1, r0, 0x0, 0x80000000) 18.423574599s ago: executing program 8 (id=3126): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) (async) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r2, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/248, 0xf8}], 0x1}, 0xa}], 0x1, 0x40002100, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) io_setup(0x5, &(0x7f0000000440)=0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r6, 0x1, &(0x7f00000006c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x3, 0x0, r7, 0x0}]) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ptype\x00') preadv(r8, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x81, 0x0) (async) r9 = dup(r1) write$FUSE_BMAP(r9, &(0x7f0000000000)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="a276663c890700", @ANYRESHEX=r9, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00']) (async) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r11, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) (async) sendfile(r11, r10, 0x0, 0x80000000) 18.338336381s ago: executing program 8 (id=3132): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x420040, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001580)=""/4064, 0xfe0}, {&(0x7f0000000440)=""/204, 0xcc}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000600)=""/87, 0x57}, {&(0x7f0000003580)=""/4094, 0xffe}, {&(0x7f0000002580)=""/232, 0xe8}, {&(0x7f0000000140)=""/61, 0x3d}], 0x7}, 0xc98}], 0x1, 0x2, 0x0) recvmsg$unix(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40000100) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x10) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 18.271423712s ago: executing program 37 (id=3132): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x420040, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001580)=""/4064, 0xfe0}, {&(0x7f0000000440)=""/204, 0xcc}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000600)=""/87, 0x57}, {&(0x7f0000003580)=""/4094, 0xffe}, {&(0x7f0000002580)=""/232, 0xe8}, {&(0x7f0000000140)=""/61, 0x3d}], 0x7}, 0xc98}], 0x1, 0x2, 0x0) recvmsg$unix(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40000100) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x10) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 4.463033982s ago: executing program 4 (id=3397): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) fsopen(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x138) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd7000fcdbdf256f0000000a00060008021100000100000000d600100000000a0006000802110000010000050018010d0000000800a100010000000800220175000000080026006ccd72bfcad7560900000a0006000802"], 0x60}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004040) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setfsgid(0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)=""/45, 0x2d}], 0x1}, 0x22100) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000e40)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@empty, 0x0, 0x6159, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6c}, @in6=@remote, {0x0, 0x40, 0x0, 0x0, 0x4000}, {0x8, 0x0, 0x10, 0x100000400000000}, {}, 0x0, 0x3506, 0xa, 0x0, 0xfe, 0x60}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'rmd320-generic\x00'}, 0x0, 0x60}}]}, 0x184}}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'veth0_to_bond\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) write$binfmt_aout(r7, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"}) r8 = syz_open_pts(r7, 0x20800) dup3(r8, r7, 0x0) 3.56538137s ago: executing program 4 (id=3411): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x4) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000880)={"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"}) syz_usb_ep_write(r1, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r3, &(0x7f0000000400)={0x2c, &(0x7f00000001c0)={0x0, 0x21, 0xc9, {0xc9, 0x21, "c29f8320a7dcd962425ad2e1acb7348676338bbd01d55023c512f6dc7c41042568386c669a7ecf5f829ed864912479a5c9564f80cd1847e9a2bb1d04d8f6479fb13c87a338bfb8eac268328efc2fbc20eb4d2cef854e34ab04ee0d4d26006bfc061d58e9bc73d6e69fe3cba7b14ff5ed75989c9e4a61e2efd9b7245cb8559d2f43c0c3e96a4d9b514b72830e89500a5ba713548e138c640bcd85fedc73827b6e2939a4e25607399ce885dbd01c9da9b3b6e0c4f8972cdf096d7f4c0f149b8c4383521388a492fd"}}, &(0x7f00000002c0)={0x0, 0x3, 0x2d, @string={0x2d, 0x3, "65db49b9b921878516a0e80f52736bfaa5554240a9b6904b1eb197753dda476f08f39346de1e33ae28ce71"}}, &(0x7f0000000300)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x7, 0x10}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x60, 0x7, 0x3, "0b5494b8", "697f8787"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x1, 0xe1, 0x3, 0x2, 0x5, 0x2}}}, &(0x7f0000000980)={0x84, &(0x7f0000000440)={0x20, 0x12, 0x7e, "37ae95999bf6f8961473b5f58c61a0be5ed70ec19168d438d852222dadd4b40fcd29dfa9af0cc8eaef608a78b49d87762bef0ffda72b8caf0e416687a61660edc17be0b7968308cd541af69f4a704f11ce558591a8129b19f47d9dfb4a1892332f61e2d4267a424ee6d9175f28caf7ce3e3a75037f21f7cc9cb571779e5b"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x30}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000600)={0x20, 0x0, 0x4}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x13a2, 0x2}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000740)={0x40, 0xb, 0x2, "ed07"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x7}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000800)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000840)={0x40, 0x19, 0x2, "de50"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x6}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x6}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000ddc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x41046180, 0x5, 0x3, 0x98ca, 0x7, 0x0, 0x0, 0x1d6ef038135692fc}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="1827dacb7cd53e01b4852de2d748e21fa033071acb841f449efc23d452101807ae5c485596338a6d31388444ae8ade7b60a85a37d3db29ef19ae4c4d4db9c2c82c7908debb2e2b5ebef336aad77bef942d064955079af4e914f372cec8ed0440f6ee0bded3c565283bdb75124011227712d5f01e8c1eb86cf69205a8b5b374edee58ebaf09d62191cf41190260c30a719bbc9bc29be0d60c678791de6b236c9b5a057247c281937c2b2ae747c858532113e0a1e7af49298ef54f15572301d3c907b02529bc470beab8f9208cf92b17a9df99ceff90a1e384d6bda3fe823d8eff0e2229a43c31781935de69466b1082c0f88d3716f234e1d6e17e1360f6621e686d661af20eaf08cc97c261590ac3291667a87bbf66f86d9005f034ea5517b2187b6dfecebc1cb8fc4dab511a2890a68ed185483c548168803f353520cc6f820d1349ac985e12a3ff6e8a78b29ed97213962fca3ba7d04d1ab4dbcfe93a88831f784ed278d079eb3e2e69d3161600fc7b0dae825b510a59c14315fc6ca0ce68dafd088f02a92ae0ab3f15ca1a863b640e8e4a89407a8b8d752892e1f8b0e793d430c3ec46cbe2b6a4bdad728c34e734864aeac2b6b2eb51c3a2f9e6773c5834166511086dc35847cfa17974889795ed305353d41c9399bb95936a3c1be1099f21795cfc04d9699929eca65a0edcae5d4e564404e5292dc15f40d78d94be9e8dca92983bc71729ab30a70455bbfd5a98d97cab9778d9b7b69fb20019e7e7c7bc17c84da1dab53a187a116ac229e00312c95b1074afff18a8771a4ab47be2205745836dc3cc1ce531fe697e9a734698fb2343b331ad9f13214d1d7d511dc646fb8b3b70fb4611e6d102a0e2bda6311ca824537f699efdefbd8a3a523e26272f07abd75504188edc788af9c75aabf77f4ac883573f63ded319fa5a8b6317d4490391879629446fa5ea4c695f3db9739f7bc1da7a19f3e1c0ccca98307b3a7a38272b7455c8957b17138c9e170c27895fcf47eb5530948b7cc43d61a621293b0c83dc893f02def2b42a8bd7ad6c9cdfeb7a3bde141e98e5af7500b07d85c6314949b754c88cc666bdaaec89271f56ec11bfa0aa337feb1140b8a07fbd5c79bdd0239f8aa1d454c0e5a16e99d38d1212ff709bb1964c317c98bfef37b56944666f0320ec85b5b1e07731de5584901f8c65e14fd2ba83b500fdbb137c7cdf91d66400688a5da6405ca7e0b8107ed65be0ef5c6234b62f613e7e76d6f3d5cc12bde4342391524e25bab6ec0a358c6c66b7cdbdd9301f91589af65cb7c02fe8271a798c5e122fef9e7581d28884d33d01f0475c9ac052d2d014bdc09e2738487742f7bff40facf2e96dcdfefa336c46923b77b334daf7b01a9fd5d957a29b83adf6f23acc507a58dabe6b2804532bc1a865a01b1126127f7c6a8029531db8a51d8472c0abffca5be97b9b5433ad220ab9ad65cf94a1167f3fb2b8804ce66f9f5cae212724b2b3a04343580f5919f446f40eaa0177f25ebe68ee7c7a35d9d5ef6e1cb220eaf8ad9b269b15c2ab9692c345f3c3bd5965f06adfdfa2d672b5e3184ebe192f73e70e829adfac2e6318d238dceb6e3d7d1422d57ff7124793b92966bd229c0725b0d591e59c57f98841b5ffad16d0ae903406014d3e632d0654e9084f870e124046f3ebae3ecbf5c5365aa32ebf169ccf1243dc8fb296cef006d5f00447ecd2980abb98e3b6e6bf6181e5df7994ea1c1273784af0d92a57394c71926dc143228a8ade103ff61860d21ffd467b2c41bbbd2490dd36add865828fb64396f16831a3a74f57ee2254cc93b25b7219bc00339a2518be3caa4765ed63295c84f1d59144e96aacfb57c6441f64f29729bb7d68127ae2472bbf089570003b1e820191878ab6f53db01c180751e34672cf5a96edfefe164580d6101672281b59f58f3c7b1222f2b6d19c8a8e5f9ad539045f7dbadaa767f993da974dae20744bf5ad0e0ec71ee97696659981e067463c78bd9337b8bcfc070e7e5b47303eaaf9651c19f19a15eab8e2c47041828be50994b5695ee5fbc9a9ecacf9de714215eb7992c07f262db8843937934fdf6fdd31d0f3a44f074f3a1dd6622dbdb3364df79d5ec90ead64c29e05a6c5358cc6b9d8493b7e1c53a91c37aa3653cf2002072461f4b99fcdec142e53b87f61ea55cdb834dd4e03f2f57a206cabe2f3f3cbfad3b4117bf4434718022b09a8419959a9bb97fba50a6b3b9a844cd1301de7bae89f8d1bf549b88dd2bd0697e70ce89cc2e383221ca2ae9d3671a730466c250a8963f6411a42ecc85a00c01b2b43c39432d5065a5fd11c29a23169891cd674cf3a31e82587a26c8d48aa3debeaf067a26669599fae850126dd516512e0cf5ab556b5582add7d2f665723a2244007ddc302f0ec29da73578a80c998849be2f766a334c7ade4dd46f37d648899da5cf7437af2d6e8d03d934903387c4c7e260909d59b546dfac9ffdce11fb92e5bb6ff6836fa0e6d0c5942b4660fdd68d3cc8a76ce0960584dbf634695ca75752b19067ba535e4779189b111c9a3e0ea877067c046d10021b0e60eae8d5dd7536b4474d8ab74679e2d8e68bc9208db5561e28d0bec177cda1e2f944a4cd97b6432033ce40063cbced6b36e486b096adffd699c9fdf58d5ec54bf4afdf52493fbfcd91e807da31ff675b567058697aa088118a6ecf1b7c7dceba3ba87d59d882fce3b3b676763ed658e991c4fd5746946815af0a2c1e96aeb27383cf6638d6d7e1932b3a028250fee18db7c46acd7fab33ab22ff91cf78029a4ed96494151652213fb7dcca0a8944568bf84aded113e20e6897d6b8f6f9fe5f6975c7cbf999d15ce5f8d50454d58e7a5b285fce4ef9d14758cf4a9619b17275fa66f2c6c48d44da95657708062bec9b633ba2df082766f549c5c1b661fc8a5f7b8b6699503da733a66df44f116c4a470b73648cb64bf04101e7bc1d048d230addbf22a5b98aea08beda847e33552faf771d9b181f610ce34530543096257856ea3a08276bec1ea40e7bf6957143623ef47b5c41e61d076eef0a5195431b49beab9fd7f07b1a153491a7250a889b26ce657df550b226fb94cb5f52306f47ee3af4627ef0cdc0c50536af7b386440b878ed5d672670abdb3ea3e3c3c031e67293104a4d6476cf325f6fe4762ce2351dffac116387baadb82f987cab7fe88ce1be7d44ccd572bfd29114d2ce4d5e90f4d6bf7be39ce25ab7de52815e4059d783564d518dd208714de1c524ff69a4ec5f29bb631eff605cc6f30a0bcfba44810a3a6fc263891791b51cb4be0d60d3d0798e38b01b9a21150589a436fb4df4584bf6e7094176884921bbb0f87b1bcdfb6df8aef8f58393800816c15647650448da0ba5bb76f7bf76c3be83aceab79eedae80e1fb46a2557a9485aa7a8053a5835e609fdf54222f5b43cba63c9508dbbd0e22953768f88e2070236d7255f682464d09c7ba12b2e8787a1bc889af686d2c355961d8f92f877bb09baef09d70b5b306047d8d3cb97fb06ba8d09bfbae02314dddf98092b6ef275743e9deb391995003d83b549ecd604daa9bd34ef311aeced5db504242241c0717f8302efedcd3fd43686a7ee21c73ba3c5af98c93d09158c9011e11bc4b51a3a4e904c4b6ced1a786adf310073405c27df6aae6d5da4398d78622ba9144ad09902da49b77046ad22fd303f07c1533f271eb82794b402382d2971f46c7907069907a7afb9e94dd4071685f91cfca10d86aad7c385e4d90f0d44d37588a8f1f267c1d8445634ca4194d1a0c5894a6d00cae3af3aec991cfefda59e3f46c0a6e2fac55b35259a9960ec7dbd1c7dd128368393f0de1e0994ba1f5b41762c22213f56bbf4c2cca458dd5731f9379f0651ba61fbf17a5861eb417e20a7fc9df12c6771f5ab322213ec95beff96dc1811dd0f45be8fb1ed93c2cc01e694620b550e45bd265fb357f52699cf9ca3ddf331fe4d11c5e97bb57631d9c7620b5c19562c85ef8e04ecd5cd5b713fbd94b6b76331a83f304cd8ae1a903ffa722cf5697b1e1bde206735656ce57254744daff8013f47f9aa4f062d8c5956fa8df5ee79d6e6ffbc0c47cd0c99517a6d92fe8ad18c001be4b55af7a6533712c6a2ccb7e813016e7cb74a94bf2a2ce9b3b440faae19210d43320cb81a6472d1da775ca27f2b5bbe5964271eefccdfa0bd6b163357af4539fdb5d5e2e7e1795040776d4d75b70928b8efa954556f4d225bd9b6f9e5a71a8e7a3ef5c36d459233c66650ada1c55dfa02bca3997f93b92028881d9c3ec0e7e1a42c587482b0cfbc77e8520c6ca0f3e5127c96b41056b7279d9e62358e39dc95e779affaaaddc8e9ee66ba336feca8b957ccb4f352c0d162390e3bde27b15132407c97c3a6b5f1704e1e559ee12655a71d7dce3711c8af907d7d2875e2407ff8c59c5457678058d3d00a7971d239c1b1c67dac3ff3fbcc2d8c8035e31040118ac46ba5110a16aedd0b7f731a4f86a63a697501a664946eaf7da6d3cc2a296f294ee765b8f26363ba6116e0ea0ef8eabb0f1e7cc429611194cf0bb66463d26a82dd118cbbd3f1040dca2f5f82ac5eb5df41a4658fcb34b68066c5708a4a16c48fd290b32e392e7f5b662f4e3fa2d79a814f52824cf737872604672bdaf80fc527deb1f690339c92b6c6c6c8635de5a2e1a7ff617d0f1c11bc3a3504d0de94d77678025ab5bea511d783df148e58b0793251db3b7b9e03bb201be89d5939c0a60ab548460d543d015082e00ad9d05418c327ebafbad7924aaf70e5fa6eb0be359b65ac2fbbcad495b17712e033cbf1853d1e2450ac4c8d19287074e76ca3d087d376b0f861b525d4949098dd4e3a3cc50118c8587adf6587ed9aa0352b7d812fe66bb64eb0c0f4d46822aa9c3d4848454d49b61cca24d7d6b82fafc5d8eb4e40e3665f24a95182b70b22c5f9303a49d1278f25de9855246c729fc8ba300fad799a949b9b0ce303477d22337d599d4c8441461d25725965183210a729fc59c4e5ddb45c0b9db06a09619e6009aa0653cd1e8b06d0e55c133d5022dcf91f12a21e9f977de2485f886c5133a8837987e7bc90662156b0250cc76cb03ad9fa36733ef371479ea9c1313682866b963f1f96bba8c658e2c6a10e5e29d8a07d4999b735bdef7f60326aa64fc198c3f2670fa4a44717fc613f1282fc324fd9476e6da7866cb6ce1efa8a1577088f2aa757584b8ade9f2ba34a2287870da2cc7704008b6e057eaf8bfe2fd0d6d60cf03e1751d2284c6439ee6079708451e64b1f7e7dc8400ae99e0d834a7daba6c3a8219812adff0760129e18a41eb0448c57a909714cd395933436e9ae040277f213e30ab7b6e7e3109642ffa051b3c423f6ffa7830c75d229acd617d6bc1f7948f09238f5437ff4fb302034fec1fed96c55c46c7d70d6ab3018c1a3d76120077f815fa67ec8815f44fd0cae7d1509d217a432ce904c778f201a508fdea4672e9cff797bd1d0f58d46f39396e148573ae9b2468e4ee5bd9a5abce8166333c524f0a104da2e3c99ddbc51fc6f4e7c628af79c93d0fbe61b1c4a72b11fe423597f126467a01ee6dad848f24abdfe453592f02c84e017fe553f27e639f88824d70aeeaca54758184f95f12d696291798046bb075fefd6876e8ef893f5b9340e21fc63c67feb6f03055f2f394a591164a61b1aab14c468998175b75974543e79b241dc69a6e346374dec5eebae154e36f29d17273e608ce69d539a5e4702f474bad66fbf3348f0c859bf884576faeeac754e290ec97e863526e55420da72b6b6cd209e6685ffb64e9865d00eb017c843d3c0cf3ab26f53f76316fbe009f0b2c4932b0694fecf1a148dbead458ca9f5f6d678d6c6fbd23fb6aea9e951914300eaaaf69bf35d4ce11c0349a02aa14529a083e701eac0177d4ddb305a9f9a5cf8bacd96327a161bb8b877813ea022d62bac8f0ab9eb5e9d145dda4b1fe79c0bee34c8bbfe866ba376d3a71b9809adda06e64eafaa6cf53fff8ed63e15525fd409e13b1809ae6e6e937acf858a59d2073b304171d5ab35ec92f66fbb2d4e34d46e886c3546c1026d0ff27821a15aa397dbc686540d546ea66fb43dcb9beaeadde6250cfe8e563f9033b432018c88bec07279c6a0228f3eb11031d3435d95c9c1789a5338f74aa6db2c853c87f8f2397f9067fa59774770f64b8ae42b9a07f85f1bcabbc6d3b3456a253bdb73ad3de0aa416589b722053c81db90e7b66a835d636615701e6869fef016bfaba9da0a869005ffc3174b605fdabdb8c7346262ce78a64aa7036960913edfffad202d664d1771018de43b6548a6672f48979b8e30017a93da2c093266306e09eb203fb37d7d54466fb26d4414ba88346d02d8811f100dcb0a3e50ae46247b986b928f12c1ad506c6b33b49d7e6955ae9619f73c79b72a95b053d53c4c54d36dceb8ae780b321aa41b5d61caa21a6c65329f08da522bbbb3d07501b39cc6bfbe4a2ef8054d7c57666bc805ed451517a1432b958141f3ce94752a67a17aadb41590037da8efdb251eb56de30b0e0e75adfbf4e06d4777f843a8d7c31e2ab62d98764217491d46960d67d3ee1213d150c28e75d1f440d41ffc3cf876554e2d4a354f70fce17e4c0fdc64992c32e785263ca4ffcab57d3d46d220627ed05f1628551e9843137996bc7a0b773e1ccfe5364216a8003757ffdc052d93793a3463baf4eef5dd283826f8510bb1f20505a6e61cb3d571d0f77e67ff3c0aa5ca91f6d68c7e0d2d79c649b091b30b2911c5c47157c9c531296eba681e039eaecab83722cc2fd5b91913a463ba9f693e34da60b1adb8ee9f4a83fa67e25f19e4cd6e19ed1381cba8b5b4591109637ae1f7f29b5495fc5f8057da565d937e7577735bd98fe626ce8568897d240f054ad69c8e0ca424d1be51b17d5e639253fb2fe6791e01edcf9c4f8404233d7f98b52c31c4996b6b63112d0126036ca20cf52a2da2478683c41bfd8fb5b34de59d5e87b5075e5e1d78ad06c6a2f6e662145be3d30d140b62c49df203350ea4412c97aaeec7aaa00d81b89f3b7295607840de2a8386f52012b5c4e6e0e1986565bc4f99b6bc10f3a2ab59783a8b9f3c696f741af0f51b6592c68ddff861fc7d2b16876b05a54eae9ec0e170fbf26d9358941c6cba50a5c41e77f72c7f41e0bbf6023f04f7701f676a64cb63ea1a8d373ee6a99ba56449699ccdf8a11dc7d840d695cd5ef987f74e5b16594cc8c6c2251c47b429281b6e34c0288c7242052ac3c9c63213f6ddb08726001e0afe1fb312d463db8722f1617972dc7f365de498027ef0b5c6d100e583348cd777a2afbfd60ef59969c8f88358b6995c177a7d7e69d86b11e36f42bae8c9af599d3f828447c31004000163bb74ef20f656f6a1c8159bd0f867f2e283c10656a40a397b2e514c19efb5d5a5f54316509801bd8208a2c84b2ef13e54d7b8af8787b826b50095a15e33a5e8e306454312a83af7869b7ba0039ca601751b580a9190435d35a8ce9d8e9558ca1bcea3cc3604f4e991aee79fd0d2393b9f87e8dac7782e837e1de5e88a7c79385a2b14556041f49c1113df43efd8aea14c4b651d713fc9989b2fd77ce13a98efef5e83cc6843d313117753d82870c5efec8cc6fd855ab6e0fc6d48c66874fdcb2d007db7fbb9371da3836eb23da1106283a20e32617bcaba574b7b6298d48334eaeef905ff348c2bfbc1c83a88d6915b644d1854161ab4f1d1db12e74de2853e48d1a10f9835c226bca6944d0de6a18e0e07df45ad72a7d354045a6997ffdee010e37091a3a5280e5db8aeea0245217a6f1160a6287d9a28c0eeabaebe755b9485da5b7ccb85166ed902e63200e5e8ac464124bef0196eddee6cfe90fce770b416817e1ca78494786bdaeafa3538841f74bbdb2585d63f667ef227287efa56c030c0999e9ead590f1ce383a138233235494ecec0aed97c803b4d7c4fb80ac9a3bcb1dd2bab51382a94195bee034c3f3d3d9efc44add83ec580a5cfe8f5942b1694b0ab3ef4b2d9f7c0b8634b056c6b6eeb946be1825fa452abdbc1545cd94774abed3fdc2b0399929298221030f6cd0a2b38490f5e4bfd53ee20de10eeb2ffacca980d40e0885cb91c94a4d81a61d863efd0f7a12da233e1dacf7af728950892ef887abcc5e4d08c6b57834a1e5dd1dfc69418fc681b47d8cd34c6a3846b0e1afdc7c7f9033ff817a72ac617c0a1e59e4e6ea40bd668c499f221c5f63700e74b68ba3045b4460f0fa60308cf8964d95237d888d5c1b1be0fa7bd2703eaeb0d2914b8d22cbd8693c16f21bb72566f38aa97e86f212557d40e10b285e1d4de0b153c8f91e168e9d0031bb7ee7fec5f0c3fbf15bc6fbceeae6dd363b7e9835b175b0be16a3348a2c2d07468449fbb2fcfca9e7d8b72b623355715a6a1edc87ea4c699ffeacb2277fbb5658a1eb12d0a7a93bf100ab11cf49b35c16a14044ac8e5bd69af05b252325f0eca41f90681b4a1ec399096939a96685926655a0c4d172d06646c87f35b65c0d7654882b79838f78c35febbdb378f9f28d7e6ba1c1fa191bbcdbf991731f546439a966e4f7a15c77367161bde14b731c9f2b91114fa46e02e70f07d3c40988e8140866ed3dcd98ef5524700deb75c1a6414016da0ce6845e936a8692b7beac01bc855a72a490c667c3b755ffaaa57af54af1bd07ae7b203be85f3653aa63cc5ae10f6e585c7bd8a5257604e82fad6c7be6f1a47eb665c1422c03d3263f351671a48bd5eed22077b8c16e706f009880941c29b90c29a11ef008a371b29200f32523b9847d911fab4ee1468bf98a49ff73703e2d9d7bbf6ae37459c3cb502541f304e1d5918518a06225b65f3b38b91f8e0b49a29ef9aacca369ce5cf8b45738e29118ab06078b885189acf4d0a5200b86cb2269dde90dfada27975dbe6ded12232c0faf7ea12ecacbdf416cff8632e48346478a75c0279c1920b7556fc6670704d5d97912c75d3a9cffe6891abdf747a6850ba7d9668e56c7e7ecc03c5c388e886bc984c8bfd9f470b7e4ea4d146c3c28e4f8ff82b9558266343036e6239a26f567f7633911ccc51522c29ff3ca36ad5b8cfd6ec1c86ae08f30d87a503c909e66dc278e9d14f3fae4bfa4813f315b1610ed76fc149d92f319044e813c3769d4978637e0ee732d3bb86e9fa584181f41d4304c07a1cb71d10f07da649288275a213eff161c536c7366d4c010cf9a4b1c2f2940607dc7468e51204c6983c554d616d48f93ae51e6a7769b3285785ae7bcba3cfb27879df1d7f1f18849a70814eb51df6d1d8cbe80b736cb38326f7db7a06e49cd4fe41b3f7a9156cfac9222ac23d13765e7f2910a365fb23a208f192cfca97b2b8a3de44a2d90d3c865bec109f4bdfb1d37216cf5f71a27c39a83b5562b0c06d76b46b2d8f5b15cb1765d6c78d065d24bedf72405dcb8e795fe183196a6b620f918a2dd7fdfac142aa653fd431ec153e3daac8f615a45b3a0d665d5fe36efb6e2f18b8399429e4f363748eddd5cd2a637e9a0a553fac6d05a3e2bd1b26f2f99433f8f59a3691417a4f35ff7d46a22e39e94641d942706850cb2843ff4a34122e37dcc8224ae9f6ab7f64ff4a0bcb0aaff2f429e4f0f5fcf90ab6a2c45e8f2408d9bbd4f60d6b01a0cf527895e1cd063b178b8973930b9488d81d3f0f7985b900d0a894c29642b809ef39294bfaaa5401f5ed50cbb91a047b60ad54b323a2f2ada04d19d6dbda02e0f22d4d6520f9db2263181c97c9bb74dd8a90adedc80bfd064eb103f67d02ea17571f870c779470bb6460c658da4c502b9a10c8050fc26ad5cc1ae1eb02f0d703d05b48f48ab8c9f9a1bd000181ccf929d45544b44e9a3cd0bcd412ad639323283ed229e5486a2a93babb165880a0a7329834bb51a0631cba5caa30637ca3f07074051c608b7c7170c8c415c2eb88bd6a798bd86953ff71052506ccf0e2357deff6cef24de5b7f68a17082c08d096e43fbe727ab0ab1aa27a703ccd58168039e50dce2d400ed7f2a217c1eea7b29455fbf910d36db324d1c6b53343a78484883ad100a0b5b28c74ab6296df5bf8048fb916e8ddda0ded3f5b08d262b9b1cb1ecb149c02a21490ebebe8856c844d448d2a3878dcc930c3c88d9addf73917e9d3f878fb12fba3e602cfde199a0e69eab56e3d4ffa01135b3145baa613be01f0b94af5bd3b8b432339c954f52b8551fd13790bc1ee18be226b819d8001a3da8e097f84c166e4002e4c1043d3a3721f05105cd17a278b9509d7a04826e8a5b4956bbf976ffb4857fd88da99cfea8d2e0a1c4f52f71f87cbee8c02fbf59b12bdaccb67d0b95f0a56693eafafeefce1953d708b56532ed5bbe12626a3d041c031b48a47b34c504f7dd57e21147b920c058385ddc8cbea5332086c269b0d5c2439f30fa431f88d1a10e25eba0df70d8617ecd5546314ffeae9c4baab872ab82a45eeaf0e1e1533e8a6189c324f31b652aeadc52981b66161313999c5a7bd7c79ef4ee55c7cb00ebd9637ffe01924508a44ab72ab16b70b8b815ce7d27772db315122f4a5a7679af5ac685c26320a71cdd8066b19f749705e2e35d1d9166ecb066053dd05a759270e119944cf99b918cb5e4e6c931031ae2eeffe349ac246c92174091c687c58879e1f05c43b010f7ec3f204c106cf60740b0bc2d355f57bbaec7d060dedab9aebaa4094e72ebffbf61cdfb7d69fbd146daea59339fa83c19c5f75b866af5e7f387740e675e1e2ba29c261d9e7237c6e9ef1b39a8fdacb44de0eaff5f4f9e3e42b75d0a37834eab0cf47acf65e882f0962e01982e783c0dae7efbc95dccb235562e5a2e04fd2b4b43388c0292e6e8198c6df0348920d6e1c8acdd2e892d3f7aef7703824dbb08695642f0e444ade6c4f1ec1e267feb5135cccd50fcde643acb66dbd18f507496957ced435e0db0a8e8441a8e2ebc365f995c32399f7d180b6faeb85ee1921b95f82f3194bed7d157e842257d2da26dfac90f32fb53147e48e232d5115f1cd12b45c55330b29775ab776599afa504b7fe114cd7fb3ab4eb6c30becb82f448b284b20010bea918019af99b2a9ccab1585aec19fd1abe8365a6023f96dddf1a37cce2734bb6585143729850bcd811787bd07cb5fdd57cc987f9278b7f5ef3c7529a9b6d20d18cc4446f1036cf7635da6732986c38df4785e2e428f14b84957319772bdbb7d2d2d20321e522b1ec6c807f3a3f575643d4b71e1bbd1e843b5816aa68900298f5058c65a9fe1022978a44a77bde2b99e221de97cd7fa6a2ea440220bac20e3e4c1e4224958aca15681d3a18f74218114c3e5eefa1fc16de8c07f1d1297b0e772d05f205337175c1dbe88dfc876dcfce367304afac68c41b98ed2ba3f04fd1b37db27dd5d9c9aafaeadfcc44585908ea655ffce1fc2516b060256777e8953e2a6861ec4460034691aed001ea2971627615fc7972773d6a8c343117bae3fc68cfd1f187c478c0f52e86b118c65c39848a8c582ed908fb1242ad3455288cc858e52e119d368e00783c2b8c2916ba564a3501326baefe1dcadac8b4b8b666f20a3a245ca171b43af", 0x2000, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000006dc0)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x4) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) (async) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000880)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde9809c8814618e976832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada133b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631def9f126c25ba4f37caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d3130180613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd60200c1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) (async) syz_usb_ep_write(r1, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_control_io(r3, &(0x7f0000000400)={0x2c, &(0x7f00000001c0)={0x0, 0x21, 0xc9, {0xc9, 0x21, "c29f8320a7dcd962425ad2e1acb7348676338bbd01d55023c512f6dc7c41042568386c669a7ecf5f829ed864912479a5c9564f80cd1847e9a2bb1d04d8f6479fb13c87a338bfb8eac268328efc2fbc20eb4d2cef854e34ab04ee0d4d26006bfc061d58e9bc73d6e69fe3cba7b14ff5ed75989c9e4a61e2efd9b7245cb8559d2f43c0c3e96a4d9b514b72830e89500a5ba713548e138c640bcd85fedc73827b6e2939a4e25607399ce885dbd01c9da9b3b6e0c4f8972cdf096d7f4c0f149b8c4383521388a492fd"}}, &(0x7f00000002c0)={0x0, 0x3, 0x2d, @string={0x2d, 0x3, "65db49b9b921878516a0e80f52736bfaa5554240a9b6904b1eb197753dda476f08f39346de1e33ae28ce71"}}, &(0x7f0000000300)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x7, 0x10}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x60, 0x7, 0x3, "0b5494b8", "697f8787"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x1, 0xe1, 0x3, 0x2, 0x5, 0x2}}}, &(0x7f0000000980)={0x84, &(0x7f0000000440)={0x20, 0x12, 0x7e, "37ae95999bf6f8961473b5f58c61a0be5ed70ec19168d438d852222dadd4b40fcd29dfa9af0cc8eaef608a78b49d87762bef0ffda72b8caf0e416687a61660edc17be0b7968308cd541af69f4a704f11ce558591a8129b19f47d9dfb4a1892332f61e2d4267a424ee6d9175f28caf7ce3e3a75037f21f7cc9cb571779e5b"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x30}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000600)={0x20, 0x0, 0x4}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x13a2, 0x2}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000740)={0x40, 0xb, 0x2, "ed07"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x7}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000800)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000840)={0x40, 0x19, 0x2, "de50"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x6}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x6}}) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r2, &(0x7f000000ddc0)={0x2020}, 0x2020) (async) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x41046180, 0x5, 0x3, 0x98ca, 0x7, 0x0, 0x0, 0x1d6ef038135692fc}}, 0x50) (async) syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r2, &(0x7f0000006dc0)="ba5b8ea61489f0f38300fd701eb516b4c60bbe2ff4823e4606fb2bb264192217c6fa28b332cf26b91e1d9164bd551945a835ae0d1cbd61c683a32fcfc15e84e91526d14a8f3a5e20426db65cd52292757c753315dcfc610cc8fec0689484ec083ec9b5abb9fae2bf0a3b615f0dea062169cf61a9f0cb3f29a6c28752f80c082728c300e1ecca8a70b8e500dea6d9152bc6627bfd3018cfb624a1b541defe58da6df08027d67434aaa60468d9fc3772251814262313bc9f879561d5479379d0bcc9736efeb8b2927751c83c2beb3cebe9a44b8962332c6298095dd686e96a86ff0ea7add27ad201b64b7340ce6dfa43464a8270f0f11b1485389f8b4e85756be2ebcc8a560a2edf06e44cc43d256501a1e44283fc4c14cd5a17a8538c602de6eaa0db28eb73343825ef7d295cf1af0d4a3154db224d319f1c109a09bf3a723e5bf7c69aa82ce7150de7713ac205e73945a7f94b1cdfb1376f2e41a70fb7d39cc4e38e60c2ca1ab7937defac79abe448aed5be52805b47f4811729cccc363b0dd88472950ce5afedf7e3ee53e567540674d48528c0dd9c341ba63fe213d5c907889e1a048e7c239306ef73a03cdd8c2636831949418bc4b651e523f781f3588ce069c174e7195d6a15a14f09d14b1f7bb2b33d37421e63ddfa269ab8b62a0ee3d97d516a5bb00b8125e38eb3a536a0b17b54621febb2936dbba1079139474afcbdb0ce42811d1e4c345eddf278b16de9ef061afa842c4596f93d7f4b25a1e04efa933b7c3c9f69a6e998acc68e22b11bb935fa8715134028a6cdaecec54089c2a0c689dbb9b54114b03889ffc4230be929a2b27b04f8db25c52f0e994d55197cf4a035a060a5d0a5bb702bb1c5c4cd8762cfa2bd55440960be8fa8a21193cefb0ea9fd71854f8201129ea98e89224f80b50d3280b2ca4675719b12be1544eb3d1c9aa6d0b8fb3bbc76895d9bb836683f84fdd22fe08add2f5b05afdc35c1ca9464ff38c5023c6e83c08d4782056cfa79f5afcb6a64b3588611d728a201dd5347a476b41e230ca9d495df26795e8f3f3aaa3bf94f9b7480c2a6c699cf91a48f7b1f6cd489f65fe73e13c009e18d70ba6f14d2d6f1553ebda5e195342486f18229b2627418b336bebce7c27aab37618dc9f2451d9eb0680101af466f33aff9a8b12961e2cd01e815f673190e7c3cbf84cf0d233679cdd5cac74c4fc4d784398fedd4f52c098632d8e10a12f34cbfb256ba61362432ec74732abc64c3b711f2aab8273ef88e31897d2e503bb80493c0a1182d638420beb6ef9e11aca868c9fc61aa787ca8dbac99df545ce2d5d5c4fc7e31e415e5c2b06a32abeab7306c528bd22c23135e94fafa4271ad4bb229871909786a2252b8214a30f09bea5913b84079d2fe6845d75013a15069002b0e0956e4c81c2a9f75fcc040c47ad4c23a4f2797c8d9c43f87cbbe0786b11967d5ad1dcbc5fe39b61615ba16392337b78bd5e5fc9ad9d646be0ab3a8d246309e056fa66d34ddef99b7371713b9e2827a30d54645664743af794ebbe927e43df9146950aa24058b81ce7f9555d1987baa47c486bc4180db65b897eb21ff2529423c88f2227ef4eef0b035ccc9d11f895d18ed9f00504d9db260d1561a5cc3692a52dac20d64ed22c50da171b223fcfe0a7e451c8341deb63e3ed6ffca9fd79aac6c8cd4e58a4c2af8acd487bea4846b7c222add7872d21ab64567800fee1b1669f631201335fbc5d1b3d9045b000055edc3bd551518216893d708a44b438e4479e33508c12fe031e8f7a1968912eb7cbe4053f5940063c2fb5770387db74dd8707a71b7671cc5abf42012a9ee638c60f59d9678b22fc536ffb953843ed6c66ab9bcf7cf5ff249a440aa726339b9a96fd3a0e3c3ed11ab910ebdc3e0eba99809fbd8bf1580f0a140924bedce7e90ee7e0d8bb9f8cbc990da15772e67d36991a25c38b77ef6d01357ccbbf6549103955a4dc82e0b1cd5e16907a4e7f488b0949934947a7b69f3956b3b62c9d357c9a3329dda4b827437c6d0efc7f5b767253c0a7b463ec9ec9064142f0b14a1c617ef9b7130a51cc2b98079337edfac68c8b777b73bd58097daa9f64ca3b9daabcc53dfce7be8dcd83b73f453023d5732ab3bb95a80845e6e427ba688518ef7425cf036ad42df97b339ab880c949081ebe5f4c051823cd12679164984abc2a2e3676e7e44c20643e48a2f2440ef1b541b9baf3e8a7db7a0f01c5217ef20038474d9c1207e72fd71a25d5a8f7b91be13b3a3b9d57edcf7c88b0a3b4a060a7e03a5667e5b444b0057dd5ab4e1c85e09f5552faa5654bba884bdca0247f12b3244a0f7a0492e321eb418cfa75915d76e9e26d734345fbd6e9b40f9c47b203ebbfbad6b330ec90adac0e1b03745e48a1eb3fa3c079d47062bf5a779c3479e6f5c4b8800a1e7513fcdfa0a6c6bcaccc6f736a0ec4031d7fa23c89bb6a8702a694aa87e88521490a5dbd5d0e5775b561ef9d4376e367e31a83df641c55d3801f573ef7a2ea945379f9d07a04cf8bae55e51599719f79ca33917c421ff63a335e11b4f266f5171e27b60b544f893cc8fec2bd191ff7ed87476e31979df4f01d71af376541bf09c0147d3ccb91285e6eff7c44fc8031e3a03b47abea0828e42861d2747259e1f7815d1d18bc8efcc36a27643fbbbf33eeed6b5036773a305a901da08f858e1909ff3ea335bb48200020044b0711b67615a0626017da66274e804883aa858d04707d443805caceb8bd239e31ea7a446752fe789205bb083f1ca90d1589c43e8bb152801fff7bf3853d8bfcdd630b41aa3fe1f09bdc4cb1ec33885c21b883935468dfa05063f9d7c1faf14115ed359122187a90b2045c96650b2be20f1519edaa1d3597d2bb22e08954d00f7addb14b639258c75698a98046028c6f9ff187086b569cd4856d97ea1799722158e8418dde709acb7fcf890edeedf6f49c7d79ee5df4c535d53bb54ecd4a3031471262190d44b1d86a5410f34b80e387eee07acb83acb7de24b2df74b0b9bd6179e132d1a5e70fb52a2f704df3851e264192663297183b1dcf9e7f1a2c746991c2f239308201a1daa8b2478079af02204c8244adc87dfcc0397a4db01f1f079c39bed4b12a5c5e4cc0b0c66e83691ddb7e7c30d23a1b97ae7e0fdb56564ba2999c7aecced3e0fd1d185bdc1c27f4404f11177275563d1303dbdd6947277d90ff461425f6e6aa64a69a1463861f83fedd00d0c3f8c21eb9184cc02f501ab353cdcd3ec8da677e8da8472d22bf14f34bd5c4335dcb59d8a645a7074f604cf2defbd2fa005b0b88d64f010f1902612a3006dbd0c0c6af178ae888dcddd074845fd691dfe45d56311f491549581b225d6997703eb55cbd60beabb8d468d07ef9e6d8ad78521a455dd0595a66c2d5bef407cf266c4837e8b41ec5b08e7f097abc73e0e36ab26e101e5f994f672c741a49e608d93843e84a42162f0774436fded89e7e753902869178a9346c237266943780da10ac18b6a8abb97b558d4fb331fd90820b2a3b64b11776e7d4f53a1bb0f6695319120905d8d32f9042c3a40c2c47f89b4622cde88af69f732bb6438085a7c614a9cb913a7753feacbc54e32c33431230c78b252b4bc0874b1e07d85e7cb3b07957916d448bba0e9d97c320a7fca0e01948cf7507fb3bd94221e3b92ba3c55f00a4569d64c3eb3936a2fae6db0d527b55e40171f2df19b84cfcd57332eba0765eebabbd9e6a9bc8e1f43829d170025cd465318a28ef062815445264aee30b5976da2480cd70d23255b6f240ea6f211560b767ea16b8738f8e85398d4df771b1005e5d590062d55434d504b5e9be5a8b3d2b3b41413cfc2a808318679ef0b2607d6ef00496234956cdf74ba8332051a8facb438dceada860d3aad5cb33385023d224715cc28cec354686541f66902a883c4552528b078aadc8528a442dab2e68451d9ad0966687c6d8fd696652af8d43ffd37e7ccb96d5a0bf6d72c37685512e90bd085d5f46d36ef55af96e2eaa1f5d5ce44460413578d716f963df48ac4ce00130bb44db351e4fb52f8b2ae0a944c49514da5d740f3891c34b0681066f0c2f7c26a80a44018832051d2c358df63f6e339da476150cf834100f26e73ed4bbd82107c2fcd401955bcf1c83c2a1a1b1f72c60da8f9c5647113364cff4a204af27f131883e993e436c186b5319f1d2475842d032baaf41722e697e2d1fe83717e1fb6be097fea1fba7d354ebf8d688d78b0df5c11a49f3f3a2a134ba1157372820cf67138b7672bc6e115219df45ffbc31074cd6ef7ce0ec8574bda2c839a086335164894a9ccd2da9b53c95ea12f6499ced7e2011720f0fcc32fc6fd00a8a206754abec3525674040f63cad36056425d329cae87d1e76cdcb43fa95151f250362666eed4a3924551919da9d6ffb8094d836340ea3cfd1d4916b6b631bb0886f696e60b604c4d7fdd55e282e22c549814ce6f75bd3460488d3500ce58aa241a6a8c5d50af901df1b85dbd32fced3dfc4d510f08ccaf81fdae78db2d5bf7676f0b2ab72fe3f43878f7dc43e4bab02047ff51c02b37b1db2f68068fdee95f59248a633ee9dd1153b0a54129197fe8fea93fc473ce6097704da00fc25c99adbd1e24e5532868e8b1c2649699385a480785c88d837513a33ea024af35adf57c6c7a0bc8f5495d7424235116a79739c86842bb35e9ca5da7798f7ae3ccd9434dad566b70bed82c644cb65ddb37e94a2f06c332b32a829aad2ddc813ebcc07e07e5587f7f7ab27bafa0aac1441a809fba549bd3fa7b8c16851c3d22d7ba41ebb1b19f8e9f5d114950a5798ad8ed4d1b5bb4ddc6f3cecdd719baa78ad32d0fb94b8156811f9ef54ab2a29738e2e596b1424b19ef39d0a354c3e8aa6227f4fb2787b10cfc615dc356800066f800718edb658bb3b85d775c0724e7c2942c8cacf420a0e23fc2bc40d078ca5f4fb9d95236c8c35008c43e864b2ee0d7f2a634978c6c34bc2b5040a29ca1b1c60a92d7ff86b3c9dd90ebf3fb212d4c23d69be399837b92fa04dca5075ea7877561ab64664d12a1e1ff39cc20f4518b460ae9f87995bd3ae66272f3f24a47c6340cb0318b67acdb26064bcccf7ccba386e07127d9ffbda288cf2924623902d9f4be97605ab5dd02a969f44de8a94abd68020c1f47033ac2b7d0e9431035e358f7d876a119e31b154b6e66815f286a41a23cba9fea4dc4febb5210b291202e8dbeb6ee9e006f108ddf891ece25c7311e7f4c788c37e8a39382405627a547e609393cffd1cbfadf90ff9060a14700539d497dafb6a249e4ec814a9e68d7a954a3c51776af6fd839b9b4b1af37797431c15794508731fd5be32edc6514ee16681f9934b0d83185ca69820d3a590d511e9f5f3ee5bf33f6ed22d507481bd7f05aa644ff19809d49a3c2924cc408ddb839d6f07cf0894ec6a6372c453d23aa324802308833027861946679abd540548abb956743cf0ccb3925caff0c597334b72e8d081c7aa9822207426b16539e370678a2fda3f34555d721570e725e3eab5cce6e0f7faaa3580f6c7d7eedbab4a0b7af72d3daa450e467917181bb2c3eaec374209f7e74a4e9195487316e7c934d3f4d0a0ffd73ae1c0855690d5f03d04ad567dcdfc366f92bf13c3e667dbce23e2b64232c11f641bd7cac7f1f9eee72eb98a5cc28226afcd1fefec1b275186c48f063fc2e99448569bb5a903ad450a5812b17c8fa3a7ae639734974d368ad0968b2ff1381c128ab00b837d765e36bfdaf8d5284975faf739b9882a0db327ea522fbd71c3a708cc674bee98602540804d856829826a95543c0168af63ff084c46ed81320f5d6bcca8fe5955091caeb78ddf53b819ff91bce937e02025beaff559462045263a3ff132dfdb5024747bb5afcdf8dee04a8085a9268790256483e7f33fde71478f8772339154952dff0e1acffe87ee37f830c30b89042b778cc87fbbb7967fb0110a54ea4a7bbdc575a93dfcd4f1841c9a75dce63f90afed202aceb7a9593d0deece3adfd66b4f40f50c0cc1822835bfba2b20f25d991f8ed85204e9b56da4709e3c1544a96fcb914c327aa8d6e7e22b21c3745f579483a1959a2766cb34a961572c6b1cedc06cbb4299053514fbb384f8192f4a5e0483667c685b3fd032a9c01471651bd7f8503eb7a9b564f779f9d33b120fb9eae779e37b28c82790917da2d763186401bf9b9d3a50572dbd7f7ac54a5afed50594e175ecb23f9c9fb949bbf84b94ec580a1d70aa405d645ee0848517d239d5dd0c0474e0b50991236b57d6af5325621399fa647946be8b27bff179dabfbf084cd7bc3fdb5313636ba7ee5264e90d76add5b41c3d23fbcb2e9066f187bba2770abea27f2aaf8cbe545f216e5bdecb3a584511970314058474803a24f88903bbd69e333e2c9046183c7945736a0f39676b64b12b319c3ce11107679c67d87ab6e9e1d2d28905674e9da798e2026cb544d4ae356991d29ed4bd38f2a5a7c6cf2a30b1b6d48700cce7eb573e84a46c25070525f67d45538704ca3cf53be6c44e84fbb40387803e6db47b373cd36783689b7f93eb27287570dae90d21214a85d6bfa898fcc2181af6e25daea786d7d50afa58731b4fac9c9d2861c802cfa6ef854e747217c0a894a28d21d0a43b9de43985c4756c29b561029ef95cfdc27bf38f26dac2fdf97cc58d9c1c59bf4ee59768ad51a1d0d8de92d0e2c723b1ddf411d23566ce0b72cc227d41fb63b6a13188fe72525ad316fae05f5aa7233f7bfed187f1b1f87a861afb173552f5d7c9bc7acc95107bbc323c376044a01ab13da42d1ab27b86dc3de3b157e47790b78896bcb2c532a7b7487bb6f24c4021c42357df52e4d5848b5584609a482dea46d173d2a695958002abd093c25f002116f8afc55e729024a4dedf5a4d3c626ebd9367fc18e7e4c7554fba0ad7349c5d526ea6dbd2c03ff33580b15fec3c1f827e885db592b47015544f6b1d400bde1133afa0071f68feebd987a807cc6d5b1b8827410c0b6d46c4b0cf6a5df999f71ba3ef4d9dae246d3e58e7428d98a33076ffc525946780d0100000000000000b872f0999d47c6e424317bd8b0e2f70ac10dfaa19990e2a3f744ea5b32996dc228ff8de836b5ecb7e56cfb3dbf48172b5ff09eecf14439b8bbc5cf3ccc9863ef5547fa2896b73196cdcab97954f9acbec8e7d2626b1a3b8983fa31961ef8c8684ee824f343933cd73d516e1f8086556ab718010022319ab39f72b9e7989e50ec8681f3f6a778e7d23c8be2f4c26bc0ed855947107e93cc9e7515fe67b0c3b6e43d9fb157be2b2f2d9c799de55214974ec254f54cb6c20a76e656cd753502499750238164f1cefc37636e9eb4038053b631c95d80bc50e248ef5692eeb3f0c86aa50476eeb8f80f7115a4c410dd80264c123ff0b62b6291db85865816cc36871b061984a4afc440029c338684330a640e9b31e06eea4ded4e15d92c44a28368138aed08699aee772ac5734e74a65a6b8acd6cb86b2bcf12330ea808524ee838adfa3c185d24e3b2e5e89a5c9b95a659298a4935549e218d4bb4da58a2a663251ffae5c6137f8e70a86a3a26f4bdf2187fa4b9fb3c822ab961846fc01d247530c89daed7ef18a14cba3b47d369980cf48049021cbaa271caee8e00aea56ac7b5c29899348ae129ba840c39f33a7c2f0b2fefb5291d23ea7e5aa91101585576d9996a05897341e41063bf9cae137ed985283bbe3abe8e5a2754378e2ca7f1287056c8a05459d6a47ae4933c43879287b7ee557f3af6b047775ce76aa064be50caec22382a5e735765910fdd926d148ff77f42ee9f60fedb0c4158e02a385934c84521d52be0e0e0dddb0bae54acc1685919cc0d62192950c2e476d169f3533ff9dd440c6092450e15e5199d1d302bd81c3f1df78e71a39df0194beb1ff8dac956129b7be3d39b6505b17d2fb309859d6de62cf58760a4623267ec5496588d2ab5407e31a132f26fe29ece80ad80653ca190b83c9ac8345259087f0a84a001fbfb49c7442ab371d30897b94779039f17857ea96afb9fa41db33d7f3dcf123244975a1714a96db05fc1bcac173081dfaae090b16c05aca4dc98afd5798347b2cfc60ba92eb5e237752d64df1982ef13b116f6b010b0d2eca243f0f991a3f34a486bf58e06d6f922e07413d5844ff279559f8c401785e0207ece4ce7dc53c7705e2647a3c352902efb136fb0f6952eb8acebf90e7e56e831c228cc319e9d079d89d2ff1d43fc1a1139c2d7893ae246747a8c0c1c34c28cf5d6ea9b6c71b3e966b3f32259a19c3e35e4a08d4dd27052033fd7f1437ce9cd2088b31b8ba974558dedb1f8d4355e224e1b8df8da3bc93cb3f9b582ac379dcd0104a3f146d6d3fb699de99cccd099beabe63841a2dba61a465b258692fd98c9d4ff1fbc7212ea2066c5367f64707e7b2e14c51d78a5328d044ac33b1313502b986ac0462c6c3455f60f727e3e895b1e4df196d4f7a9e21c53a6500f0dc6e957530164bc648ebfedb6c973ae8fe49a92fca7274f29edcb202356775baab723f9e3a03a1d24d6dda56853ef0a91ca8bc7c530e28ee896efd1a1f5866206dd82e0eb554f4afedd9e87562903b49963d72d8caca7bb0975252f8f5578287e583aac618995a941299fa0973e67ae44469336e45b68f978fedfc8785e333610f8029b194226f86e770ac987cb84f9c76e5ccaaefe64bfcadf5635bee6077e05364e8872100003c9442e1c7cadd6f98e0dc9e2db17eabc8e6307ffd485dd06935a423d5c9cff832cc1d481e49d6dc00176d0342fdab19cec251b6fbed3ab6374ecd022de617cb2720ffebfb8b98b426cb445439b7b088fc7d9ed9a91989f2bbad8519070a6f916df7c49e3184fef1753387a5a2b5b991e04de915e053c471d198b843fb0afe5a68cf8fffe65bab08f6f5425d458a55de6355558bc5049e3a176977630a45de0b7076cdda2a167003090bbbfba5618ba2f6481cdb1386d1fb3c44a35c4d0cf9ca14dad697078fa4a062e55515c8cd69c6b2e911b19f637cba7c6ca26b3b4b2a74fd5cbc64f269fa5d6f9628830962db2d7ee04a6c37673c593771e568e8dd6cb965e67e6f4be91e625c1015160c234e8893eac8ba39708b9f32e519abfb9c5b2562e424d6eb2c8a737a830997821fc294c559d14d7c0bc8fb03ceb44f1bce3f63c46607ba95d70cb8098d30e1e3e6c5957ed3b4bb1b96d3c3879098247483e6c4f669bd556387b346bfc5497fd76a8e89bf185968f3e3dd58214ec024f5a4a180b31eefef8233bbcac8d9706b35476cd5d4cbe86034928f5c4a3c07fbd3e19ec89536aaa4fcbc2c7212ad2b5c3213a32d760e9883149f1770ef77a1313bcbbd41ebe246e847aac1baf975fdd326bf81fc68e19ce8cc7f056f5be524f35fdc7f4c0420c36846ce5415c725291ebe4964090e5c59d6844ad02acb37c437486e677b0b48c8bfced79275ff64f4be33b3492d40b8496754a36b9657efbaeb2e958de29b2de4c2346de000039c2877e1a21bf2b550d0ac6cce5feb72faaccb3ba47f498c460669ca345b5561f99b5f2f020a2c01b9d95399064eed1b7e75b802f3e70239b1c58c75f9067ca4543ec5d5e32fbfbb36d9ba9db1682c7c63e91f399752c155dc5077a2dacfdd6f9e52031290be704314d5ebdcccf9f30985dbae514d0283f6c4b7e3ebdd46b6279e8031b3847a8b46240053ce76bee81fa7b62266a1b501153aacda0803809cb4671d53f6e55dad8fd508373c1c2c9353a1c9f8de2509eacbe8e1733477880c549e327a8db5aae29169ac886cd5086b7f4e8823549c44e48fcc3683fd045dd93677336998c4016dc31823ec36a0d2ceca92c131cb3d8d5e08275f40f70943de8bbcf583a8985c30dbacef8425aaca57dc860753c31c17194f71c5d316572bcf81ab8db62e06c1ee39c6a24dd0f68d82c75762842c9bbb70127029154cb768aafd308471eb518c8aecf27c0efd01883961ce002a6231189293d00dc4d71824d2af860b7b3efc3c282b2719dc737bc5c3ac23dd7dd1420472d64acf6bb2d97503804a67cf9516e28167ab8fd38acf90ce56cfb304b59a5960f4f38963db71bd7ead69178d8ce52b74297ea3a0cdd55bb1eb849c02f8a87610bc7fc48a7af7d6e56cc41cff303afadeb6b4592605c3c3c2385c9a165c1c7e30194c0e994499472b08aaaaca3707b9baf3185f5b1314853d50d7b86f255615fd4009f07b87085bcc44c865f7e14d29e64f95001bc00c68afc3a0a0555027d460519f15264289c0918cf594b5ad37252575a9484a1de681f70745d2c6248581cd3702767115637c7cf7bc15a63775b90c285be77db8b85dc08ab81bb307694417a8d1c4aa1ed8716bc58a35e1dc8e23cde3748c6a93370397dd5c41371fbe45b86e3180e410dec137bd47730c7fdb7e062cafae686201b69071f6027ac38c191c333d27f5cc814c4522859598e7e54a04a7deae272533ae39e296785124efb6714089e6567b8db2cb403d87bea3a718b925825b914764ead06b48727e4c42bee1a36e9844f35c79fb50c89e4d9ad6a7b464299fcd10037166c2cecd017bfc184ef59fe2575e93a139a47e2baf5482f3a5d248413c87a39baf7e1eb1441ceb37f5df211844834808cd4df62b2e0b0b0a75da0e27720b5ae54fe00518e951e21ba4e1bc2d454e7bbfb86e3aaf7b9a25e354e56aeebd11e832471fc8edd0d3b4d3c123779cee870c86d97d703bc44b639a2fc49855fa54e9304de1dcedf90df397733fa94792c1bf0685335b027f3de1ac8f7f007f61ea9e51988f1fcbaf982b5b808645c4eb2fcaaca3c10667eddc4007061eaf3c250744baae0332bff7c9f077ede4b593853f4a165dcfee11b75d5107d1a86a6669c231415eef1dbb58f0b829ef03f4ee0e6acc787b1ad31807852ec4269d23322304842ac0cb13cd53e7e4479cb7fd9d7b4ecd722ecfea4c59f69760323d9930b03cba558cbe30711447ca93a01596d2bc245e9908738b1de17f07c9eeaa28472e08570a3129e81c874a894b23b1d8a77c1b4275fdea8adf5ff10bad0ebd41073059c3a900801699d4c1b023336ed5d675b57db4770f85b0cf1e0dab135633936ceaffbc4a8a1dd58bec1fd3fbcee9be9874158abd4376928b2023191d2c87f3657943a60dcb16212704cfbee381e58194c5671b594494c60325512773dc7dc38da37d8b275becb97f472067bfd7d3594afd78a0803839248c75fdce6b62711026cc32e1e3aa01152175a3096603394e773883790e96622a2b347ebe569eb26d4010115cfa611d4deb83ae4b0753b528fea440c95d5650acb53931f8ef6b6614b2aefd0754c5484b6139ad18a0cc23efbc3def8595ca45ef24cb6083c93261381a111f2ef450f5f95a343de96d4d426d3a7a72526b09b825a75df24dbf4d51a5b77f8cb948bcb78c4b4c09da92aeaf9855d40b0d5d8eabc5fe57c555f58ba0125e29512d2295b0c9ddba45f37a346e7826a4e3bcfa40a54be096f695adf9e66bc9f369556ac26c6fe46d4bd80ac949cd31e1390c14387a81cb5cf814944e60a2937", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 1.899177612s ago: executing program 4 (id=3460): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) unshare(0x62040200) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x79, 0xac}, 0x0) setreuid(0xee00, 0x0) setreuid(0x0, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.898763892s ago: executing program 4 (id=3461): setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x4e24, 0x101, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2a3c}, {0xa, 0x4e23, 0xfffffffd, @remote, 0x20006}, 0xffffffffffffffff, {[0x1, 0x0, 0xfffffffe, 0x10083, 0x0, 0x0, 0x1]}}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x4200, 0x0) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000002c0)={{0xa, 0x4e20, 0x9, @remote, 0xaa26}, {0xa, 0x4e22, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0xee}, 0x0, {[0x1f, 0x7, 0x9, 0x100, 0xf, 0x5, 0x9, 0xb6df]}}, 0x5c) (async) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="19002dbd7000fcffffff1b00000018000180140002"], 0x2c}}, 0x0) (async) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000) (async) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e00)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0xfe81, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, 0x1c, &(0x7f0000000140), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2000000000000000290000003700000055020000000000000006000000007e7132983fb6157456a53504000000180000000000000029000000"], 0x38}}, {{&(0x7f00000007c0)={0xa, 0x4e22, 0x7ff, @empty, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000d80)}}], 0x2, 0x4) (async) r4 = socket(0x8000000010, 0x2, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r7, 0x3, 0x1) (async) getdents64(r7, &(0x7f0000002540)=""/4096, 0x1000) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x28, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'xfrm0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048010}, 0x0) (async) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') lseek(r8, 0x10001, 0x0) fallocate(r4, 0x10, 0xffff, 0x400) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) 1.890110623s ago: executing program 4 (id=3462): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) write(r3, &(0x7f0000000240)="94", 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001480), 0x4800, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x9) tee(r2, r6, 0x8f5, 0x0) write$binfmt_script(r6, 0x0, 0xd9) write(r4, 0x0, 0x0) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000140)=[@wr_crn={0x46, 0x20, {0x3, 0x6}}, @wrmsr={0x1e, 0x20, {0x86e, 0x5}}, @uexit={0x0, 0x18, 0xba31}, @wrmsr={0x1e, 0x20, {0xb97, 0xa675}}, @wrmsr={0x1e, 0x20, {0x92d, 0x5}}, @code={0xa, 0x52, {"450f322e66400fc7b49d060000000f07b92a0b00000f320f20c035080000000f22c0c401a5eb150000000026363e0f01c40fc737c4823d388e00800000410f0112"}}, @code={0xa, 0x64, {"f30f2c8700000000b9bc030000b8b5330000ba000000000f300f20e035002000000f22e0440f01ca66f264400f22972e6641f40f01f8660f2f0d0500000066baf80cb8c291fa88ef66bafc0cb0eaee410f01d1"}}, @cpuid={0x14, 0x18, {0x5, 0xec}}, @rdmsr={0x32, 0x18, {0x659}}, @cpuid={0x14, 0x18, {0xffffffff, 0x1}}, @uexit={0x0, 0x18, 0xf15}, @wr_crn={0x46, 0x20, {0x0, 0x5}}, @wrmsr={0x1e, 0x20, {0xa60, 0x1ff}}, @wr_crn={0x46, 0x20, {0x3, 0x7ff}}, @wrmsr={0x1e, 0x20, {0x37f, 0x8}}, @cpuid={0x14, 0x18, {0xea29, 0x9}}, @cpuid={0x14, 0x18, {0x1, 0x5}}, @wr_crn={0x46, 0x20, {0x8, 0x2}}, @cpuid={0x14, 0x18, {0x2, 0x2}}, @uexit={0x0, 0x18, 0x1a}, @uexit={0x0, 0x18, 0x3}, @code={0xa, 0x44, {"8f09009311440f559efe0000004e0fc76ea22e26410f019a198501120f01f8449d460fc771fe0f3566b89b000f00d0660fc737"}}], 0x30a}) ioctl$KVM_SET_XSAVE(r8, 0x5000aea5, &(0x7f0000000480)={[0x81, 0x8, 0x7, 0x3, 0x21, 0x8, 0xc, 0x8001, 0x9, 0xd, 0x2, 0x82e, 0x5ed808ba, 0x8, 0xb, 0x5901e284, 0x4, 0x3, 0x5, 0x4, 0x3, 0x1, 0x2, 0x5, 0x7f, 0xfff, 0x6, 0x5, 0x6, 0x7, 0x7, 0x7, 0x401, 0x8, 0xffffcabd, 0x6, 0xdf, 0x7, 0x101, 0x9, 0x9, 0x7fff, 0xffff18dc, 0x7, 0x80000000, 0x2, 0xd9, 0x3, 0xfffffffa, 0x8, 0x1, 0x9, 0x5, 0x10000, 0xdcf, 0x81, 0x0, 0x9, 0x42, 0x100, 0x200, 0xd9, 0x3, 0xffff8000, 0x400, 0x1800, 0xfffffffe, 0x0, 0x2fd8b4c9, 0x8, 0x8, 0xfffffffc, 0x1, 0x3e4e, 0x7, 0x900000, 0x10, 0x9, 0x9, 0x959b, 0x4, 0xff, 0x4, 0x1, 0xfffffeb7, 0x6, 0x6e67, 0xe2a7, 0x400, 0x8, 0x9c, 0xeb, 0x2, 0xae4, 0x760, 0x4b0, 0x8, 0xc965, 0xfffffff8, 0x81, 0x7022e9a1, 0xffff, 0x8000, 0x70b, 0x3b68625d, 0xfffffff8, 0xe753, 0x4, 0x9, 0x10ea2749, 0x78, 0x101, 0x7, 0x87, 0x4, 0x6000000, 0xf16, 0xfd3c, 0x78, 0x400, 0x6, 0x1, 0x9, 0x9, 0x1, 0x5, 0x1, 0x7, 0x2, 0x1, 0x6, 0x1000, 0x2, 0x4, 0x6, 0xd, 0x2701, 0x4, 0x8001, 0x100, 0x3, 0x4, 0x9, 0xa, 0x8, 0x7ff, 0x8, 0x6, 0x7, 0x4, 0x0, 0x6b71, 0x3e0b, 0x3, 0x401, 0x7fff, 0x9, 0x8, 0x13, 0x57, 0x0, 0x0, 0x9, 0xd, 0x1, 0x5, 0x3, 0x2, 0x6, 0x2, 0x1, 0x0, 0x8, 0x0, 0x1, 0x3, 0x6, 0x8, 0xfffffff7, 0xffffffff, 0x8f, 0xfffffff9, 0xfffffff8, 0x9, 0x4, 0xfffffff0, 0x8, 0x0, 0x6, 0x5, 0x800, 0x0, 0x4, 0x7, 0x758, 0x8000, 0x7ff, 0x7, 0x7f, 0x9, 0x3, 0x382f84e3, 0x0, 0x0, 0x3, 0x2a, 0x7, 0x7, 0x3, 0x4, 0x2, 0x3, 0xf86, 0x73e, 0x7d1e, 0x0, 0x4, 0x3, 0x8, 0x8, 0x7, 0x9, 0x8, 0x8, 0x8, 0x2, 0x5, 0x401, 0x8000, 0x3, 0x9, 0x80, 0x4, 0x9, 0x100, 0x1, 0x10, 0x3, 0x8, 0x2, 0x9, 0x6f, 0x0, 0x0, 0x2, 0x8, 0x5, 0x4, 0x168, 0x8, 0x6, 0x7, 0x4, 0x6, 0x7, 0x2, 0xffffffff, 0x3, 0xcb, 0x7, 0x34c, 0x9, 0x9, 0xbffb, 0x3cf9, 0x9, 0x2, 0x6, 0x7, 0xc, 0x7f, 0x9, 0xe, 0x7, 0x80000000, 0x6, 0xffffff91, 0x2, 0x10000, 0x0, 0x5, 0xd, 0x200, 0x0, 0x3f, 0x5, 0x1ff, 0xec60, 0xdce1, 0x2, 0x0, 0xffffffff, 0x1, 0x400, 0xc3f, 0x9, 0x8000, 0x10, 0xd45e, 0x3, 0x40, 0x4, 0x7fff, 0x10, 0xfffffffc, 0xa75, 0x2, 0x5f, 0x2b31, 0xffffffff, 0x4c6, 0x0, 0x80, 0xae800000, 0x5, 0x7fff, 0x10000, 0x9220, 0x3, 0x11b1, 0x1, 0x5, 0x8, 0xffff, 0x9, 0x4, 0x6, 0x8, 0x5, 0x9, 0x8, 0x3ff, 0x4, 0x9, 0x9, 0x2, 0x81, 0x1, 0xce3, 0x1e21685a, 0x4, 0xffff, 0x8000, 0x7, 0x8, 0xfff, 0x3, 0x9, 0x7ff, 0xfffffff7, 0x5, 0x80000000, 0x1ffe, 0x401, 0x0, 0x7f, 0x1, 0x5, 0x3, 0x8, 0x5, 0x2, 0x7, 0x9, 0x3, 0xace, 0x63655a51, 0x7, 0x4, 0x9, 0x3b8, 0x7, 0x10000, 0x6, 0x3, 0x57, 0x6, 0x9, 0x7fff, 0x3, 0x9, 0x5, 0x7, 0x1, 0x32, 0x6, 0x620b, 0x1, 0x3, 0xc29, 0x8, 0x101, 0x7, 0x6eb8, 0x3ff, 0x5, 0x6b6, 0x1, 0xfa0, 0x5, 0x7, 0x991, 0x8a, 0x101, 0x5, 0x36, 0xfffffff9, 0x1, 0x4, 0x3e, 0x0, 0xfffffffc, 0x6, 0x0, 0x6357, 0x6, 0x0, 0xff, 0x9, 0x9, 0x3, 0x1, 0x2, 0x826b, 0x1, 0x3ff, 0x0, 0x4, 0x7, 0x4, 0x1, 0x1f, 0xffff, 0xffff, 0x6, 0x4, 0x1ff, 0x10001, 0xbba, 0x4, 0x2, 0x0, 0x7fff, 0x10000, 0x10001, 0x4, 0x0, 0x4, 0x8fff, 0x7, 0xff, 0x1, 0x7, 0x5, 0x574, 0x4, 0x1, 0x0, 0x2, 0x9, 0x7fffffff, 0x7f, 0x9, 0x3, 0x0, 0x3, 0x401, 0x1, 0xdd52, 0xbc0d, 0x6699, 0x10001, 0x80000001, 0x6, 0x7fffffff, 0x7, 0x3, 0xc, 0x1, 0x100, 0x9, 0x1, 0xffffffff, 0x0, 0x5, 0x7f, 0x8, 0x242e6e06, 0x9, 0xe, 0x1, 0x0, 0x1, 0xa31, 0x0, 0x0, 0x8, 0x40, 0xc49, 0x10, 0xffffffff, 0x8, 0x1000, 0x8000, 0x6, 0x5, 0x6, 0x3ff, 0x0, 0x5, 0xa23, 0x1, 0x8, 0x6, 0x8, 0x6, 0xff800000, 0x8001, 0x80000001, 0x8, 0x8, 0x5, 0xfffffffe, 0x3, 0xf7d, 0xff30, 0x1, 0x5, 0x6, 0x2, 0x1, 0x8, 0x5, 0x200, 0x1, 0x0, 0x9, 0x0, 0xe00, 0xe0000, 0x4, 0x5, 0xff, 0x8, 0x9, 0x0, 0x10, 0x3, 0x1, 0x0, 0x400, 0x6, 0xfffffffd, 0x4, 0x1, 0xb97, 0xfff, 0xd, 0x3, 0xfff, 0xdf5, 0xd, 0x2, 0x1e4, 0x4, 0x4, 0x3, 0x80, 0x8, 0xa, 0x7, 0x40a, 0x9e32, 0x96, 0x3, 0x8, 0x8, 0x425, 0x6, 0x7f, 0x3ff, 0x8, 0x0, 0x3, 0xf, 0x5, 0x3ff, 0x4, 0x8000, 0xb3e1, 0x9, 0x4, 0x0, 0xe4c, 0xff, 0x7, 0x91f, 0x3ff, 0xb, 0x5, 0x179a, 0xaf, 0x6, 0x5, 0xfffffffc, 0xf0, 0x40, 0xbc, 0xd, 0x4, 0x3, 0x2, 0x5, 0x0, 0xa3e, 0xb36, 0x9, 0x5, 0x1ff, 0x89, 0x7, 0x2, 0x8, 0x416d7d61, 0x3, 0x200, 0x6, 0x9, 0xc4, 0x120000, 0x401, 0x0, 0x9, 0xe870, 0x2, 0x6, 0x4, 0x7, 0x9, 0x7, 0x9, 0xfffffffd, 0x7fff, 0x3, 0xffffffff, 0x7, 0x100, 0x2, 0x100, 0x81, 0xa0, 0x8, 0x6, 0x1e, 0x6, 0x8000, 0x40, 0x15, 0x3, 0x7, 0x1, 0x5c707e8a, 0xe, 0xaf, 0x80000000, 0x7, 0x50d, 0x6, 0xfffffffb, 0xfffffffe, 0x9, 0x0, 0x5, 0x7, 0x2, 0x1, 0x2, 0xf6, 0x6bc, 0xff, 0xffffffff, 0x1, 0x8, 0x7, 0x8, 0x3, 0x9, 0x0, 0x0, 0x100, 0x9, 0xff, 0x100, 0xe, 0xfffffffd, 0x6, 0x7, 0x4, 0x1, 0x0, 0x5, 0x2, 0x1, 0x7, 0x80, 0x6, 0x2, 0xfaf, 0x8, 0x5, 0x0, 0xbc2, 0x4, 0x10001, 0x1, 0x4, 0x3, 0x440477d0, 0xa, 0x19a00000, 0x0, 0x0, 0x9bd, 0x8, 0x7, 0x0, 0x0, 0x689a5533, 0xed, 0x3, 0x38e2afb8, 0x9, 0x800, 0x1, 0x0, 0x6, 0x6, 0xffe00000, 0x1000, 0x1ff, 0x6, 0x400, 0x5, 0x5, 0x4, 0x2, 0x13bfdca2, 0xffffffff, 0x5, 0x6, 0x8001, 0x100, 0x7, 0x8001, 0x8, 0x2, 0xfff, 0xd1, 0x3, 0x2, 0xc7, 0xffff, 0xff6, 0x1, 0x0, 0xff9, 0x101, 0xf, 0x3cf48, 0x3, 0x8001, 0x4, 0x7, 0x1, 0x64b73d60, 0x9, 0x8a4, 0x9, 0x3, 0x80000000, 0x9, 0x5, 0x4, 0x5, 0xfffffffa, 0x7ff, 0x79f, 0x8, 0x3, 0x2, 0x1, 0xc, 0x80000000, 0x4, 0xf6, 0x7665, 0x1ff, 0x3, 0xfffffffe, 0x8000, 0x25, 0x0, 0x1, 0x9, 0x1, 0x8, 0x9, 0x4, 0x6, 0x3, 0x1, 0xffffffff, 0x3, 0x7fff, 0x8, 0x4, 0x48000000, 0x3, 0x2, 0x9, 0x3, 0x8, 0xffffff62, 0x7, 0x2, 0x1, 0x7, 0x373d, 0xf4, 0x3, 0x2, 0x26d, 0x5c, 0x4, 0x9, 0x8, 0x8000, 0x2, 0x0, 0x8, 0x27b3, 0x1, 0x401, 0x7fffffff, 0x3, 0x3, 0x5, 0x9, 0x0, 0x5, 0x7, 0x2, 0x651, 0x8, 0x10000, 0x8, 0x9, 0x3, 0x2, 0x3, 0xbb, 0xffffffff, 0xfffffeff, 0x0, 0x1, 0x0, 0x3, 0x3, 0x0, 0x200, 0x7b6a, 0x1000, 0x1000, 0x80000001, 0x4000, 0x7, 0x2, 0xd3, 0x2, 0x4, 0x2, 0x1, 0x10, 0x0, 0x5, 0x101, 0x7, 0x1, 0x2, 0x15, 0x6, 0x4, 0x0, 0xffffff71, 0x3, 0x1000, 0x7, 0x87fc, 0xfffffce2, 0xecd, 0x1, 0x7, 0x8, 0x2, 0x7, 0x6, 0x7fff, 0x8, 0x6, 0xc00, 0x800, 0xde2, 0x5, 0x3, 0x4, 0x2, 0x7ff, 0x1, 0x0, 0x18, 0x1f, 0x2, 0x0, 0x7fff, 0x1, 0x1, 0x4, 0x7, 0x6, 0x10000, 0x7, 0xc2bd, 0x4, 0x2, 0x2, 0xffffffff, 0x4000000, 0x7, 0x8, 0x3, 0x401, 0x80, 0x0, 0x4e7f, 0xe2, 0x3, 0x3, 0x2, 0x9, 0x6, 0x0, 0xa, 0x595b, 0x8, 0x6, 0x8, 0x4, 0x3, 0x4, 0x8, 0x8, 0x5, 0x9, 0xfff, 0x7, 0x9, 0xfffffff9, 0x7, 0x4d4, 0x0, 0xffffffff, 0xb1, 0x49bf, 0x2bcb, 0x0, 0x3, 0x7, 0x96f, 0x2, 0x4, 0xed, 0x0, 0xf2c7, 0x1, 0xffffffff, 0x1, 0x4, 0x80, 0x0, 0xcf, 0x45c91958, 0x5, 0x1ff, 0x7, 0x705, 0x7, 0x7fffffff, 0x43b50401, 0x40, 0x0, 0x3, 0x8, 0x4, 0x40, 0x5, 0xc0e, 0x4, 0x0, 0x800, 0x8, 0x5, 0x7, 0x8d024f3, 0x2, 0xfffffffe, 0x0, 0x6, 0x70c2, 0x96, 0xb, 0x4, 0x6, 0x4, 0x40]}) creat(&(0x7f00000014c0)='./file0\x00', 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 1.667082337s ago: executing program 4 (id=3464): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000003c0)={0x0, 0x13, 0x8, "28ea0ca7c72dc9e3"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x4a}, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x4f512762bdaf78b2, 0x1}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x20, 0x20}}, 0x0, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000580)={0x40, 0xb, 0x2, "cc79"}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x100}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0xc}, 0x0, 0x0}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f000001a000/0x1000)=nil, 0x1000, 0xa8ca3411d1c26009, 0x13, r0, 0xce33a000) 1.438014842s ago: executing program 9 (id=3468): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002d00), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002180), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x400a0800}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x3c, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x820) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000002d40)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8040) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x7, 0x1, 0x1, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x80, 0xd, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x49, 0x2, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0xa, 0x8}}]}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB]}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1\xbf\x00nh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\xe5\x00\x00\x00', 0x0) dup(r4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000100)={0x2020}, 0x2020) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) 1.379707623s ago: executing program 5 (id=3469): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$inet6(0xa, 0x3, 0xffffff06) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.321764674s ago: executing program 5 (id=3470): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x7fa962bfffff, 0x13012, r1, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 1.232757775s ago: executing program 5 (id=3471): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') r1 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000500)={r2, 0xffffffff, {0x2a00, 0x80010000, 0x0, 0x2, 0x7ffb, 0x0, 0x4, 0x100b, 0x30, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f400000000801900000000000000000000e4ffffff000040010000000700", [0x5, 0x8000009]}}) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000540)='\x00\x00\x00@\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\f\xf7\xaf\x95\x83=\t7h\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa2\xb3\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_DA\xd1\x96Y\x05T\xfb\fH`\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x03\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\v&\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xcaxv\x8bI\xfa;\xd3\x89\x9cC\xe8\xc2\x8b\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT(L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8\xb5\x03Q\xc2\t\xee\xb0\xfb\xc6\x9d\xda\xac\xb1\x1c\xc1Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\xb3\xba<\xd8`\x10\xa5\xfc\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xf3\xbdZ\xfd\x92\x11\xa3+\x9d%\x8c\xf4\xbc\xdb\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU49\x8c\xb3\xa2:\xe3\xd4\x84\x1b\xdaR-\xd2\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}\x06\x00\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00/v)\x04\x18t\xa2\'\xafu\xa9B<\xbd\n\xd6\x9b\x1e\x05,\x9f\x88+\xec\xdc\x8f\x1c\x99a\x93*)z\xfbbC\xe8\b&p\x90\x93\xc3.\xe6!\b\xc3\xd5/h\x1a\xe2\x81\xa1\xee\x1eS\xf6\x14\xcc\xab\xc4\xddg\x9aa\xeb\x8b\x9f\xb2Y\xde`K\xd1\x9cXO\x00\x02!V*\x87\x1aD\x12\xc8\xf2\x04h\xb1_jrD\xd6\xe3g\xfe\xbe\x1d\xc7\xf6\xf4\xd3c\xc7xo\x88\xe3H') 1.232474045s ago: executing program 5 (id=3472): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040)) ioctl$TCSETSF(r1, 0x5457, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000200)={0xa, 0xd}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x4, 0x0, &(0x7f0000000ac0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000b00)="eab7eff9f911a8687976f7a6c5998dd78bac5fab3d8503b46631f279d44ff48534e4b9696e0cfd4fb45a17df1d83d3234c9910e572e34d902837352ebb7f40e638637e2d0882b350465d585835d54296"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) 1.154043987s ago: executing program 5 (id=3473): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x10001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f00000003c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY\t\x00\x00\x00\x00\x00\x00\x003\x1f\xc5!\xb2\x1bs\xfc\x00\x00\x00\x00\x00\x00\x0f\xff\xfc\t\x9c\xda\xf2\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8cfV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\x88\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12J\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda\xe8H\xc3\x9a\xfdNak\x99\x87\n\x1d\xb22m\xdd\xa9\xc1\x9a\xac\xd2\xda\xed\xab\xa2J\xf7e_\xe6\xd5\xcf\x8a\x13sF\xc3\x83\x0e=\x00\x00\x00\x00\x00\x00\xf1\xff\xff\xff\xff\xff\xff\xff\x00\x00\xb8Y\xd0\x13F4$6\xb0I\xc3\xfas\xdcnq\\\x19~\xcd\xc27D\v\xe6v\xe3\xd4\xb8\x15LW\xad\xb5S\t\x9d$D9Q_\xa7\xd0\xe8\xe7\xa4\xee\x19\x86/j\xb7A\xd7\xfb\x13\xbf\xcd\xb2m\x9f\x1e\xe4l\xa7x\x1d\xe3\xca/\x8d%\x90\t\x1d\x9bV\xeb{\xd8\x1d7\xa8v\xfch\xe65\xb4W\xa4PY\xac\xfbK`~N\xea\x87\x92\xd7\x11\xc4\xe9ME.\v\x97 t\x92}\xfd\xa1\xfaQX\x13\x9bMU,\x88\x8b\xcf\xb4\x92\xe4\xf5\x85/\xd9\x8b/\xcf\f\x1b\xf8\xf9\x12\xe0') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0xd3c59000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d80), r0) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES64=r3, @ANYBLOB="010129ddc000ffb60c0fc481da94e6fb0af5dbdf252a"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4810) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/custom0\x00', 0x0, 0x0) dup2(r4, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r7, 0x4068aea3, &(0x7f0000000240)={0xed, 0x0, 0x79}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x1d, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff}}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r9, 0x4010ae68, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r11 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000002840)='ip_vti0\x00', 0x10) setsockopt$inet_opts(r11, 0x0, 0x4, &(0x7f0000000040)="441f08ded64ccde8c94ef56491ee54be0e1c2095ed27c1c6fe76cef3e2", 0x1d) connect$inet(r11, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) 1.133802637s ago: executing program 5 (id=3474): mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000500)={0x0, 0x10008e, 0x40000}, 0x20) r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x20, 0xfb, 0x6}]}) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = syz_open_procfs$pagemap(r3, &(0x7f00000008c0)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000004c0)={0x60, 0x1, &(0x7f0000165000/0x4000)=nil, &(0x7f000075c000/0x3000)=nil, 0x6, &(0x7f0000000100)=[{0x0, 0xbe63, 0xd}, {0x5, 0x75b2d368, 0x8}], 0x2, 0x8000e5}) syz_usb_connect$cdc_ncm(0x1, 0x75, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x2, 0xbff07746d0f68cd1, 0xb, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "c602"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x33ac, 0x9, 0xff}, {0x6, 0x24, 0x1a, 0x9, 0x2}, [@obex={0x5, 0x24, 0x15, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x16, 0xd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x13, 0x0, 0x4}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x350, 0x6, 0x9, 0x9, 0xff, 0x8}, 0x64, &(0x7f00000002c0)={0x5, 0xf, 0x64, 0x1, [@generic={0x5f, 0x10, 0xa, "85c0a26c698ba4971ac216b6b35adab5c178864b24c53639d205d9beee59a87fa9d390436589ce38a796a633a398dcc76c620e252ae1ac04a60836bd132f8caaa68b3e3c41191cb8dec103d22832bd71fda9d18174a687d53eadab62"}]}, 0x5, [{0x76, &(0x7f0000000340)=@string={0x76, 0x3, "5149b2fe815d51a5e9a9004dc4a527f56ab6271bc9006fb654809961d90fdc4eb5b814a1a79e1b1d2ea2f79ec4d3ba9720b57229e09e30bc8bda73ee12ef6ea37871d197a816a8e4198538e151892538c7fd182071d7028cb42abc13534321cb65c9e27e93899257a63eb012b20a9c431fed5c32"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000000400)=@lang_id={0x4}}, {0xba, &(0x7f0000000540)=@string={0xba, 0x3, "839a63aa96d09c3055b604f417897456bb37c23bbe5f8b92ea48c2b4e83d619da73daab5d3dfc5f0010686126839811303955448e53d3b454f141741a4f35ce8390bfd1beb899eb620e402d9c16b66b70b27f28b9b9526f6c878be7823d70ffbe0231def928481989dba2f3757744264b86a127425f163ac2094d999c56db7ca81542a78583ee52cf119729ede3e51de12703861d2eb80beac66f7ee1b27a9bc08f75be9cb50c797d7f6017a87b0c5b98f01b7b22899bc1d"}}, {0xa8, &(0x7f0000000600)=@string={0xa8, 0x3, "0541615ef2679de0ace72049605196ffc98a9727676f195bd18d08fab8f9291ce28f5731987ec3ac13660539054c89e02b58eddb3889b68e3f4cd2339ccc9cc302617ce94a1f6194243f8d87c40dc10341947c2bdaf8dd1de7fa3ef3f858368cf7ce891076985dcb541a9c08cd7356ef4835b586b57fd6c87d961e5b286cbb174ab8d3dedafeb2ad429be0e6afa84e712507ca6f68053ec5cf72ab9af06ecee22f223975e093"}}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Di', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) syz_usb_disconnect(r1) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r5, 0x107, 0xf, 0x0, &(0x7f0000000080)) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0], 0x0) ioctl$EVIOCRMFF(r1, 0x40045506, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000700)={{{@in6=@private1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000800)=0xe8) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000006c0)=@filename='./cgroup/file0\x00', r7, &(0x7f0000000840)='./cgroup\x00') memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) 867.143873ms ago: executing program 9 (id=3475): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000010d40)=ANY=[@ANYBLOB="002222000000962313040b53743ff617f3c48d620700000800830000000057a90da1f60b000004f2"], 0x0}, 0x0) (async) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) close_range(0xffffffffffffffff, r1, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000100)={0x20, 0x8, 0x97, {0x97, 0x7, "807c7e07a2831cd3aa481e4bc7f5ea863ee02a9941bd7a068f56387927d3a0e621f3b06a8ca445bab64df81cea363c9924af087e526ea2a2d4dc7d5e14bad4f66f96c2673d3b9d7d7ef32c227da54edaa21e6f7c6d7f0f6787455c08f684946b895fbaa0862bb2038c87abb330d80a56b1d3d43acd727af32925fb1df9ad450885e9ffa87a21c1c6eb6c927de15644475a22015144"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x446}}, &(0x7f0000000080)={0x0, 0x22, 0xc, {[@main=@item_4={0x3, 0x0, 0xb, "6733f1d4"}, @main=@item_012={0x1, 0x0, 0xc, 'L'}, @main=@item_4={0x3, 0x0, 0xb, "00bd74b5"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0xe2, 0x1, {0x22, 0x68c}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x60, 0xd, 0x46, "db41f9ec551b56f6854a9b62338acd5179ed522c636422fd5ac260bd823637b66304bdecd91c18bd81707afb0a40edbede6e7eb73f3eca8198bd05306d9d20ec8e2d7d30ad92"}, &(0x7f0000000340)={0x0, 0xa, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xa}, &(0x7f00000005c0)={0x20, 0x1, 0x100, "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"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x7}}) (async) io_submit(0x0, 0x0, 0x0) (async) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0) (async) listen(0xffffffffffffffff, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x0, 0x0, 0x2, 0x60, 0x80, 0x3b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xfffffffffffffffe, 0x0, 0x2, 0x1}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100"], 0xb8}}, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) (async) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x8, 0x0, 0x0) (async) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2982, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) 486.49042ms ago: executing program 6 (id=3486): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) add_key$fscrypt_v1(0x0, &(0x7f0000000000)={'fscrypt:', @desc1}, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$setlease(r7, 0x400, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0xb0, 0x4002004c4, 0x1000, 0x0, 0x2, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f0000000000)=0x2d265528) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) close(r8) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@handle={0x73682a85, 0x1e, 0x2}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RESET(r1, 0x5514) ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000380)={&(0x7f0000000400)=""/111, 0x6f}) copy_file_range(r8, &(0x7f0000000340)=0x7, r0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x4004000, &(0x7f0000000180)="d7eae97883c90e12f485fbe761da7093d0db2e50a23eb3151f675a6df0b6aaf2ad4a1543c2ab86c18c58dbbed274f73a859595637232589b98a6413e5e97db6bc1304bd4cd575dbe8c872b28ce552e725ae6fbd90e71e09b5e8742a72f8e74c968a186", 0x63, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="ba203d7b38abe96b3163f8ab6125e3517078953af78ea4f6d8189442ea27b1a1c4226a2e201b6536115daa9a828074747f39f7e00718f080cc6550dc7cc2119a6967427701ef10425b92044a7de8242698c21b24bcbf85894599aa706644c97ac6d351bc9f5c33f1ae74213770c8d27e332a99ab19f9297eb774393465f6a88ef428") 359.905693ms ago: executing program 9 (id=3487): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x51d0c2, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r1) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0x80) (async) r3 = fsmount(r2, 0x1, 0x80) fchdir(r3) (async) fchdir(r3) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) read(r0, 0x0, 0x0) 346.333413ms ago: executing program 9 (id=3488): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x141a82, 0x33) write$vga_arbiter(r2, &(0x7f0000000000)=@unlock_all, 0xb) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'erspan0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0x86dd, r3, 0x1, 0x20, 0x6, @broadcast}, 0x14) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) waitid$P_PIDFD(0x3, r2, 0x0, 0x4, &(0x7f00000000c0)) 279.203774ms ago: executing program 9 (id=3489): ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000040)={0x5, 0x9}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x660f3000) write(0xffffffffffffffff, &(0x7f0000000400)="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", 0x1f000) 279.041644ms ago: executing program 9 (id=3490): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000002080), 0x4, 0x80000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x2000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x4000) lseek(r2, 0x2000, 0x4) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x40085503, 0x0) syz_usb_connect$printer(0x5, 0x36, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r3, 0x127f, 0x3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89b1, &(0x7f0000000900)={'wg1\x00', @remote}) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0xc001, 0x0, 0x0) userfaultfd(0x80001) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') close(0x3) read$FUSE(r7, &(0x7f0000000040)={0x2020}, 0x2020) setsockopt$inet6_udp_int(r6, 0x11, 0x1, &(0x7f0000000080), 0x4) 178.854296ms ago: executing program 6 (id=3491): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$inet_icmp(0x2, 0x2, 0x1) write(r1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp\x00') pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) (async) io_setup(0x82, &(0x7f0000000080)) (async) clock_gettime(0x0, &(0x7f0000000240)) 68.490308ms ago: executing program 6 (id=3492): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000000a40)={0x0, [{0x2, 0x8, 0x106, &(0x7f0000000540)="d7"}, {0x2, 0x8, 0x2, &(0x7f0000000080)=':'}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x2, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x60cf6ba5a5e3603a, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7ffffffb, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x8000, 0x0}]}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0) listen(0xffffffffffffffff, 0x15) close_range(r0, 0xffffffffffffffff, 0x0) 7.21717ms ago: executing program 6 (id=3493): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x1003}) close_range(r0, 0xffffffffffffffff, 0x0) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000200)={{r2}, "baaebfb5f9c27e635fd5e66a8bcacf34de400e2fbb3b63d781031df908b431db97d9e20b707dac0f59a8337d138128b21021fa2a0885c211e60d6a8451605221e14631c6461bc517f767546e5fdad9a05ed7d14b134421bbe7d905f21e31c27058e83290b42b2116f819715bd940be0848cc02552a058908d8b28adec590541d9d4330c39ce4301209cf8708720755cea0789c21fbafe113a11273c9470a1464ac771546a2f0d60076d442d0fee9bbb6da96acddd8ab32df9be01d6a4beafde655083f47013835382de051c2ccc8692c169a828bb212f097ae45c651c6546880291b9f6a5070f9c460b77b0049511181d31d78836900da13bf00a00bee13a653e9b90a89ed69898edacd8f5866f7682511da6b46867533be59fb6e40989d512358667e81be425cbf38226cd084a43f8bad5aa43ec4afd496812f0acb9ffa5166f46fd441f993bc335eb32df9b75528eb241596097667d264e268a73e91ecfaa9747f50e561e375b067ddd56d5fd895d0aa5ed787adbbf1c5c7e45eb58fe4de10229af527d1616243235de4561a2dab6c44f3da211f12e2b0848fbb718896932b9ea8af54db34710d681ce96fd31ccb1541ef002d9fc8abf58dc2bb5990a34ee72dfb72ed2a4bad88a42c3361c4bd231d4464f5f9d64824bb3d4d97cd7c2eecdced8c5880ef1f1d7029d902fb42c5d4f0c200ca89b273914122d1c55c54f4c4afc3feb5e21dbc2b77d533168edbee1de7cae3c2f458875e50eb5595db8efa93aa51faa32258db8424e691ca1b19ae1ca99d295fb39e4abac0487fa327768af8b02ba5da99d6a4363167b57091f0de04548736c1de5286d1c3a91edf890271ece39ae3ca90cbf4cb3239c9d333086021d8ea83af0b21c4baf6b385d7de2191b42daa8d69480559ca4a6dfa627137b897ef311dc4fead947349508ee136b66c4e8db275b9213de429d918d8fe1a4b6236f10270f3c299fcf059e66e0e07a0958c24fd7480b458c0dfa40ffe1e95994fac96b32f509df3b354863b2f0af8f219dbc060742792de065b2e8bc5550ad4d1fc8c558aae5430d033bf839da3490557298067d8476d7a8874071565a1c44610ab9e4570db8d8e4f9bc758f39d6278d8d573ef092ac42c8dbf8c313c1861a3f827aa44d48655344973326aace39170812e45c43d93b023970e1a77c480ed79870bcccda4294399b0b8f53208c15fa59732ed0d92bfaf47dc14ab90397645806b97febd052a5106ffb3252da8096bd05a83793f69046d4d7e84f31820555b82611d62874ecb2ef7d9ef4c7978c6016c881f8b5e065fbe9269c7d2fc7e88998bdf5872a2497f308910490b42c0168f07460cab71525555a50ead5836bcdb6ee036663782d5fb2e6f4985a6886db3ae7a7860cf31a95722ff55f778e41f8525269e851fb43b9646a4c0b7dfbe4736dda068fc9b3504df8988a2de9cdb6c0c7666d16c6b706806e636257e01cad1bf326894f7d899b85e05d93cd740f48b5461209bf619d7e503000c5149fcd9c809948f90d414379d55757552b99d0c6ca726564471f1468fc64524b4d831ec3d20d4e23d37cfca83874600c5288d2849969d4dc27efdd1d0861736a62c0001251405401416e9f96028822d8a2399b7f8c42319ed0421a39f1ca3b7073ecd72bc47cbe67b11490762e8a2d32e0b5702ea09b6e070dda6c11fe4b144632c71f0db088a0a77c2f3566dd94a24554283d515f31ff0281ff62e215e761a600460dd0e9afd00956310c4ec1d01873a94f3a1ebdfea67116791ecf6a804b6729e4807c5553c92752b37956d5dd32bcd99cfb7bc628140d75aff0b28c7788678fbc40aea74ad0bf3f569dff11c5ea615c98d00e9665882142bab08ea5651b92ec3126ffe84477bfc5c578dfe77e107687fd4c22ed3de668c1d2a9ee5f18646a8113c3aafb6ac7d80c5d9ca8dfd40cd99bcee968d0267e58ddc7d3fa61115959b8d8181c6ac0e7522356e06fc94b3a5f6325d3c1987b8fd67be5abd7fb65ccba0bc8d459a8a34a54733c95e3650403ac622b691f3a9c053f147dfed31a582538b233d5fc449ae4e135eeb3981cf2c8d590ebdaa672089f6a2767ff980bedf49d77a702bdf80c47a73a15f5f328fabf49e531d81326a1d5e1ef7eb5f901a15da76870e6b67ec4b73869dc5974bb43a6e7d449ac78f5ee01beae8ce80149ee7e474d9db8fce4b69c84c82cb52617d6c8633d13281e65955e3722a773edb1f8ca82cbb52fbb497e0d0e2e35c545f0c55a6b0a6a731f523aae5001b109323441ca1bf473e1cf80c74466327522e7d6f7a282444eda947251c7eeaec3641d07333654c9b86bf55bf6afbdc6676359dacea526ddb810cd628cca96c3c0d540afda104eef30c2646ae1648d27cf5f813f42baf853ec9f9ecc0e07917397958247b75f513f70ef3b2c78bfe8ac112637578a5477b194c87f5619771cc102fbcbf9906d2ba590fe2bf6c609e0c8b6fe02103ec696d713169ef029ab17e9544fe7cd646b3336cc6d9c8fd50987068ff4d4732ed43e5ce8af8751ecdbc512c5ee57bfdf99d9bef3575cf1a6958dede3e3b5a5fc33c26f7aff183ee3b91e743b1edb0d798cd8b94ae401be45aea4782ee645cdca7c63d1f5d3ddb9ffef13873d053fc64c3c844f9ae6d8731b51f1137b17ef0f76fe93a8efffa7e7a4c4ca062337af5f6f5f323e94fd81ef5310f7353cb275e2f1a482fda9b6f26ae427f27876e618cef6518157f4b80901da3c806c3ca0bcceb040984c3b53af92414a365fc1bdbe9993ad3c0c17978af993e613ff003065664490eb1028e9cf61aac19db0700b8748a0d41d5fd9a133304d7baa73b172c51733efc0517962969786ac85d6748ee977ecf8c26fab6ccf324a7e2e547f37b4ebc100dd5e9feb983895042e0505630f3c9857967232d4e42246ce01a3d65e0b5a78b53ac58999c9659100bce5ed7bffa39a99bb797238e714868af3346a3e47c5ccc3620a815e0ab394278e133e17e7e71b71e4e4b8ac52a2713848efd0b1c0737d2400cdec03dcb674da007dfb8c51cd8dbe4c3161ece46e74299cf6cb494f8627c28c4566a353173d9a439eb92a747ead8460482d55007067e246284dccd6ee19516bfbcb140a43b03a4e41756ee50e88cc351c2dfae476e6a77cbb72b984a63c15f18ae6bc09ecc17284d7532d37989ca95a938c1e45c6016897f513d9e645fdd7b1d5709703c00ad43f6b48f2129f3772cf0113edcd780c03c44535f5be3c22d54cbf0f4a38dd49ebe1b5ea017f6c3b12404e4ddb1810f88db03f2b3cba899110193b4aa23afd99639f14afa2579bb7a45acbc3b5909f7f71d973e3ef9c3e6a3160ce90013910cfae64478451fbac30f00a3e782dddefcd2b3e0e18029b16cb59cecd843ffe3f8e364b1ede3871901d56d304154905735c02b7e461b1225e01402dc7207a2bc82782adc8059646c902f07bd729786198c5e20262850ee84eeb1156562bfb1ef05f8b79833d7d93231a9d90f6d293872595a15db959547e5c0d2c75251bc5d2893ba0ad9fe32208f4056e548678689b5d0db8b7c199d910293d2fa6f45a8e8929ee03d11edb3c98dca78f2fb68d79a8edfc8b406c0c05b0c2efdfcefa54c3801eb2426395f2e49f51e96ee164468a43ccc35ddaf1f64f67c40d263269280d3cb2e2963e204aa2756b6dae6fe2ec7de2787943d7408764b98b8b8805d43e6a4d173bf5584df2dd5779273ca11c2b6f33838eedf2e38f394dccbd0e5e9a1a006672e3eb204361174f236e61cc01926862350d9fea217cd982fa45481c5cadeeae968418f895605154cce7bcc99000179ea2532ab717f64d6c039c750b0d25242c05c043f5408a7ce603b0cff60f027ead8028a87b5a34fde100472b6b8cfabf5a0bffa62f5945bb21fc1a495dd701f03446b2c89768e932b830b691a3bb39db8fc8f7415770fc1e47bdbdad67c4595b0ef11c242c1edbb21ab22e137afaca97bd59183adcb5daf104399f24ebece5493a66c63efde64f879adb67dae9c8105077154f48353e2f2de8046d67b9ce876dc34e1b7a8b51fa20f863332f83d089e03ded5ca8bf2032aa03e10e4a8919b20bd2592b003a8e43b1098a4e73eba066543c7d6f7093dce4fea588eefd4c9c6522115ef0942a5b702ba0d033879d06a3dd65fb989ca499c3c4754aaea013e0123e7e1e185d8cdc84fc9fcefe587b699139285e50c7723b79f1f99d0396b3732b0303e9210e521d532583b15d8f8d7a4f00ae3bb673b75982b69e0e572a2f80d5f022b60ea79a810a7809234c38108e513dc85bd96090ad0f200bcb312268dd23ab7445aaf9a3ec7fe45d32cf040393cf784b5e8c85a7698c6ed5255fcf0a5d9e51bd530a75f4361a494d11560449f7b2c7c2760763cee108587b9039cc616230abbd74de0719cf073f572524046c144d0087a141ec89668e930d9ff262d6014a22de3a789d14cb35e37ce3b0cd44eded321a94ab8ea63d72d302f2e93fd8223aba20ffdb4a728a2c5cb2a2af21667499a1d4f3f52ec4650df5871e8e937a79749645df4f7fdd3c0e7d5ff0d2a474424a5f55ba03609b8fa9dc75b6fbaf6496c8d4ccb73c43aaf174b7bea6ab6230cd839175f7d45141c3249248f21319812fe2a145bbcba095343315a0e3467386cd7f7496b6def74cfae26f34f0e005c81095efd01b86808886ea6b33a8303c3f9df15fa13499a03a3e5965e81e02b51306026cf86406f7dfec577d6f2c40bb5c050cf86dbcf939cf49e14c35575ab3eb5bf7f71e854eaedca823c0892231ed87ab3db074a4b6357805ed4efd04c29bc8c56f4c01a3c57e0b551899453ba36d5d90a9078bf6755542efbc3a2d0c08acaa3a2727a8d0c39964e5b51dae7addd2f7f882a1cf6048107891b80451201a68efedd25cfff07e7080be95f668ba3e1273f469b283a287fea01fd6026e5e4b5bce264e2cb870ca4dfeef40b366c43ad74fcafaf5422c37d0209fe01a30ada3f7fea5ff94f0769bfeacc1eed5728c79b02034fd48acee48703a5908a8605f835a5398fbfd82bf045bd3c1f7722e33495b7f6959be3e30d2f8cbf288e408473ef3bf5a910538c242fbbd8d53ed17459d903f5216b0a8bed7ce516292f57bc646604c22053fae6c5483bac9b1fa6f819f7b323c89b042e7f5ef4bebd83f8bba549acaab46a2061fae6a11f7ea3a81bc18c62f883dbaaa8e296ce797c3fdce950abdcafbf2665a866c798b6d39094b731042a46d01f9adb044928a7d3e30bde8373f35289430169d6751df7fd11f297534767d3cfe69fe41dcf7e70f5193965b1d0423ce2737ed0c3f9cb9d60342e62f2b9049ab5868b1540f607b71b243a65ff403097a751bf52d76aa6a4ceca2ccefcf0a6c9847d498e5955053bab765f4012ff439a4cb4327ec6e25ac48d658a932f3f79cadf851a7962fafeb8dae6d3919d2bdf2383e16657a748dea30aa479ab3a96fb132ec170d0d2384cee22facdf3a6f1eb012035c6c645f7cf2848843d8c239dd3dbba6abe68d63918ead38e6fb4f97679bc81c69cbc9687e7636571bd7cbe69428bbfae7e69fcfd8a87b5dd25884712bdc21f5262eb17609493f05232a0f4056c2d7e4501353c02bb37ca97e50a626fbae9c54108eec5f214abe3db762efd5beda72e918d4ccc2ef67cccece23ec10fd4bec88f01dc3cfe85d0fa896cf49c87aa4ccc5a32e6251828c6610205eeecbd5da70c3014984fd7446308f60ce7422fc0b8c2c447c3d3dff4c22513dc2d748aef84ee54"}) 2.41164ms ago: executing program 6 (id=3494): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) mmap(&(0x7f0000018000/0x1000)=nil, 0x1000, 0xa8ca3411d1c26009, 0x13, r0, 0x22e7f000) 0s ago: executing program 6 (id=3495): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket(0xf, 0xa, 0x0) write(r1, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) socket(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000005c0)={{0x12, 0x1, 0x250, 0x61, 0x58, 0x1b, 0x20, 0x5dc, 0x1, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x1, 0x80, 0x4, [{{0x9, 0x4, 0x47, 0xc, 0x1, 0x2e, 0x73, 0x68, 0x81, [], [{{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x0, 0x2}}]}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB='+cpu'], 0x5) r3 = memfd_secret(0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x3, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8081}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88fb}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8a28}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') pread64(r5, &(0x7f00000001c0)=""/210, 0xd2, 0x60a2d3b9) ppoll(&(0x7f0000000100)=[{r4, 0x8100}], 0x1, 0x0, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT]) kernel console output (not intermixed with test programs): or pid=1977 comm="syz.2.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 92.018068][ T1996] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.545'. [ 92.116308][ T36] audit: type=1400 audit(1757041931.450:492): avc: denied { execute } for pid=2008 comm="syz.3.548" path=2F6D656D66643A0B656DDA9952406993FE9B232AFF202864656C6574656429 dev="tmpfs" ino=1063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.126821][ T2009] rust_binder: Write failure EFAULT in pid:474 [ 92.157644][ T36] audit: type=1400 audit(1757041931.490:493): avc: denied { setopt } for pid=2010 comm="syz.3.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.183790][ T36] audit: type=1400 audit(1757041931.490:494): avc: denied { create } for pid=2010 comm="syz.3.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 92.193391][ T45] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 92.203776][ T36] audit: type=1400 audit(1757041931.490:495): avc: denied { listen } for pid=2010 comm="syz.3.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 92.238753][ T2018] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.240605][ T2018] rust_binder: Failed to allocate buffer. len:1168, is_oneway:false [ 92.257725][ T36] audit: type=1400 audit(1757041931.540:496): avc: denied { getopt } for pid=2015 comm="syz.3.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 92.290115][ T2025] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.290562][ T2026] rust_binder: Error in use_page_slow: ESRCH [ 92.297170][ T2026] rust_binder: use_range failure ESRCH [ 92.303339][ T2026] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 92.308977][ T2026] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 92.317048][ T2026] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:340 [ 92.358674][ T2029] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.368238][ T2029] rust_binder: Error in use_page_slow: ESRCH [ 92.368950][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.374721][ T2029] rust_binder: use_range failure ESRCH [ 92.381114][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.393005][ T2029] rust_binder: Failed to allocate buffer. len:4160, is_oneway:false [ 92.398784][ T45] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 92.405761][ T2029] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 92.413891][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.422832][ T2029] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:343 [ 92.438023][ T45] usb 3-1: Product: syz [ 92.453437][ T45] usb 3-1: Manufacturer: syz [ 92.458053][ T45] usb 3-1: SerialNumber: syz [ 92.502339][ T2032] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.518888][ T2034] incfs: Error accessing: /dev/loop1. [ 92.530809][ T2034] incfs: mount failed -20 [ 92.561979][ T31] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 92.665396][ T1980] fuseblk: Bad value for 'fd' [ 92.672271][ T45] usb 3-1: 0:2 : does not exist [ 92.680479][ T45] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 92.692281][ T45] usb 3-1: USB disconnect, device number 22 [ 92.701984][ T31] usb 4-1: device descriptor read/64, error -71 [ 92.941989][ T31] usb 4-1: device descriptor read/64, error -71 [ 92.948289][ T331] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 93.103079][ T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.114075][ T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.123930][ T331] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.136950][ T331] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.146027][ T331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.154733][ T331] usb 5-1: config 0 descriptor?? [ 93.191960][ T31] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 93.331971][ T31] usb 4-1: device descriptor read/64, error -71 [ 93.563512][ T331] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 93.573296][ T31] usb 4-1: device descriptor read/64, error -71 [ 93.580158][ T331] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 93.682083][ T31] usb usb4-port1: attempt power cycle [ 93.826187][ T2043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.834873][ T2043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.844195][ T2043] netlink: 'syz.4.560': attribute type 6 has an invalid length. [ 93.851954][ T2043] netlink: 'syz.4.560': attribute type 4 has an invalid length. [ 93.859678][ T2043] netlink: 'syz.4.560': attribute type 6 has an invalid length. [ 93.867537][ T2043] netlink: 'syz.4.560': attribute type 13 has an invalid length. [ 93.875400][ T2043] netlink: 'syz.4.560': attribute type 15 has an invalid length. [ 93.883297][ T2043] netlink: 'syz.4.560': attribute type 19 has an invalid length. [ 93.891079][ T2043] netlink: 3684 bytes leftover after parsing attributes in process `syz.4.560'. [ 94.021992][ T31] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 94.042978][ T31] usb 4-1: device descriptor read/8, error -71 [ 94.173546][ T31] usb 4-1: device descriptor read/8, error -71 [ 94.293755][ T331] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.301765][ T331] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz1] on syz0 [ 94.319127][ T2063] fido_id[2063]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 94.359863][ T2068] netlink: 'syz.1.569': attribute type 4 has an invalid length. [ 94.368301][ T2068] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.389470][ T2068] netlink: 'syz.1.569': attribute type 27 has an invalid length. [ 94.403758][ T2068] lo: entered promiscuous mode [ 94.408636][ T2068] lo: entered allmulticast mode [ 94.414341][ T2068] tunl0: entered promiscuous mode [ 94.419385][ T2068] tunl0: entered allmulticast mode [ 94.421990][ T31] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 94.425506][ T2068] gre0: entered promiscuous mode [ 94.437185][ T2068] gre0: entered allmulticast mode [ 94.443067][ T2068] gretap0: entered promiscuous mode [ 94.443939][ T2072] rust_binder: Error in use_page_slow: ESRCH [ 94.448323][ T2072] rust_binder: use_range failure ESRCH [ 94.448345][ T2068] gretap0: entered allmulticast mode [ 94.454481][ T2072] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 94.460162][ T2068] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 94.465816][ T2072] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 94.489057][ T2072] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:367 [ 94.498593][ T31] usb 4-1: device descriptor read/8, error -71 [ 94.575365][ T2077] rust_binder: Write failure EFAULT in pid:389 [ 94.643083][ T31] usb 4-1: device descriptor read/8, error -71 [ 94.762291][ T31] usb usb4-port1: unable to enumerate USB device [ 94.801989][ T63] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 94.951964][ T63] usb 2-1: Using ep0 maxpacket: 8 [ 94.958175][ T63] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.968441][ T63] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 94.977440][ T63] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 94.991740][ T63] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 95.000884][ T404] usb 5-1: reset high-speed USB device number 8 using dummy_hcd [ 95.008582][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.016677][ T63] usb 2-1: Product: syz [ 95.020878][ T63] usb 2-1: Manufacturer: syz [ 95.025606][ T63] usb 2-1: SerialNumber: syz [ 95.222546][ T2093] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 95.230779][ T2093] rust_binder: Write failure EINVAL in pid:402 [ 95.239272][ T63] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 95.253159][ T63] cdc_ncm 2-1:1.0: bind() failure [ 95.263835][ T63] usb 2-1: USB disconnect, device number 21 [ 95.279588][ T2095] input: syz1 as /devices/virtual/input/input12 [ 95.306641][ T2095] input: syz1 as /devices/virtual/input/input11 [ 95.344739][ T477] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 95.352944][ T477] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz1] on syz0 [ 95.375625][ T2106] rust_binder: Write failure EFAULT in pid:404 [ 95.440618][ T2104] overlayfs: failed to resolve './file0': -2 [ 95.691983][ T63] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 95.842394][ T63] usb 4-1: Using ep0 maxpacket: 16 [ 95.848768][ T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.849613][ T2126] 9pnet_fd: Insufficient options for proto=fd [ 95.859940][ T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.876157][ T63] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 95.885441][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.905088][ T63] usb 4-1: config 0 descriptor?? [ 95.982401][ T2139] 9pnet_fd: Insufficient options for proto=fd [ 95.992960][ T2140] rust_binder: 2137 RLIMIT_NICE not set [ 96.116203][ T63] usbhid 4-1:0.0: can't add hid device: -71 [ 96.130335][ T63] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 96.141799][ T2150] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 96.153828][ T63] usb 4-1: USB disconnect, device number 21 [ 96.213995][ T2160] rust_binder: Write failure EFAULT in pid:411 [ 96.348318][ T2174] rust_binder: Error in use_page_slow: ESRCH [ 96.348337][ T2174] rust_binder: use_range failure ESRCH [ 96.354445][ T2174] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 96.359973][ T2174] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 96.368037][ T2174] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:422 [ 96.670899][ T2184] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.691959][ T404] usb 5-1: device descriptor read/64, error -71 [ 96.733616][ T2185] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 96.786149][ T2188] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.794272][ T2188] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.800747][ T2188] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.807580][ T2188] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.813924][ T2188] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.820449][ T2188] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.827053][ T2188] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.833771][ T2188] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.840037][ T2188] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.846806][ T2188] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.853137][ T2188] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.871735][ T2193] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.880952][ T2192] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 236) [ 96.887446][ T2192] rust_binder: Error while translating object. [ 96.900254][ T2192] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 96.906454][ T2192] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:396 [ 96.972688][ T404] usb 5-1: device firmware changed [ 96.987139][ T10] usb 5-1: USB disconnect, device number 8 [ 97.121973][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 97.161978][ T477] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 97.249358][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 97.249376][ T36] audit: type=1326 audit(1757041936.580:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2197 comm="syz.2.610" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb182f8ebe9 code=0x0 [ 97.293030][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 97.304574][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 97.315512][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 97.323104][ T477] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 97.325272][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.336344][ T477] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.348919][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.362784][ T477] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.371326][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.380396][ T477] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.389057][ T10] usb 5-1: config 0 descriptor?? [ 97.401555][ T477] usb 2-1: config 0 descriptor?? [ 97.408643][ T477] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 97.602978][ T10] plantronics 0003:047F:FFFF.0007: ignoring exceeding usage max [ 97.613564][ T10] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 97.622449][ T10] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 97.821985][ T404] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 97.971969][ T404] usb 4-1: Using ep0 maxpacket: 16 [ 97.978269][ T404] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 97.986649][ T404] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 97.993908][ T404] usb 4-1: config 0 has no interface number 0 [ 98.001393][ T404] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 98.010460][ T404] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.018525][ T404] usb 4-1: Product: syz [ 98.022715][ T404] usb 4-1: Manufacturer: syz [ 98.027320][ T404] usb 4-1: SerialNumber: syz [ 98.032667][ T404] usb 4-1: config 0 descriptor?? [ 98.038540][ T404] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 98.044950][ T404] usb 4-1: No valid video chain found. [ 98.245641][ T36] audit: type=1400 audit(1757046289.575:532): avc: denied { bind } for pid=2199 comm="syz.3.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 98.247131][ T404] usb 4-1: USB disconnect, device number 22 [ 98.771892][ T2210] rust_binder: Error while translating object. [ 98.771997][ T2210] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 98.778302][ T2210] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:400 [ 98.963465][ T2216] tmpfs: Unknown parameter 'm¡¯hp' [ 98.964151][ T36] audit: type=1400 audit(1757046290.295:533): avc: denied { getopt } for pid=2215 comm="syz.4.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 99.037315][ T2222] tipc: Started in network mode [ 99.042367][ T2222] tipc: Node identity 4, cluster identity 4711 [ 99.048694][ T2222] tipc: Node number set to 4 [ 99.205724][ T2233] rust_binder: 146: no such ref 1 [ 99.210958][ T2233] rust_binder: 146: no such ref 1 [ 99.216585][ T2233] rust_binder: 146: no such ref 1 [ 99.243461][ T2240] rust_binder: inc_ref_done called when no active inc_refs [ 99.244968][ T36] audit: type=1400 audit(1757046290.575:534): avc: denied { read } for pid=2241 comm="syz.2.622" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 99.275231][ T36] audit: type=1400 audit(1757046290.575:535): avc: denied { open } for pid=2241 comm="syz.2.622" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 99.298634][ T36] audit: type=1400 audit(1757046290.595:536): avc: denied { name_bind } for pid=2244 comm="syz.4.624" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 99.326803][ T2242] IPv6: NLM_F_CREATE should be specified when creating new route [ 99.334994][ T2243] binder: Binderfs stats mode cannot be changed during a remount [ 99.342816][ T36] audit: type=1400 audit(1757046290.665:537): avc: denied { remount } for pid=2241 comm="syz.2.622" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 99.363589][ T2243] rust_binder: Error while translating object. [ 99.363641][ T2243] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 99.369897][ T2243] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:447 [ 99.496074][ T36] audit: type=1400 audit(1757046290.825:538): avc: denied { shutdown } for pid=2251 comm="syz.2.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.525383][ T36] audit: type=1400 audit(1757046290.825:539): avc: denied { mount } for pid=2251 comm="syz.2.626" name="/" dev="configfs" ino=2070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 99.548058][ T36] audit: type=1400 audit(1757046290.825:540): avc: denied { search } for pid=2251 comm="syz.2.626" name="/" dev="configfs" ino=2070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.751968][ T477] usb 5-1: reset high-speed USB device number 9 using dummy_hcd [ 99.763344][ T2268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.632'. [ 99.779206][ T2268] netlink: 124 bytes leftover after parsing attributes in process `syz.2.632'. [ 99.902367][ T477] usb 5-1: device firmware changed [ 99.907637][ T31] usb 5-1: USB disconnect, device number 9 [ 99.943867][ T404] usb 2-1: USB disconnect, device number 22 [ 99.995579][ T2273] netlink: 'syz.3.633': attribute type 4 has an invalid length. [ 100.043701][ T31] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 100.052163][ T2281] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 100.052199][ T2281] rust_binder: Error in use_page_slow: EBUSY [ 100.062625][ T2281] rust_binder: use_range failure EBUSY [ 100.068930][ T2281] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 100.074493][ T2281] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 100.082451][ T2281] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:411 [ 100.193648][ T2290] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.203569][ T2290] rust_binder: Error while translating object. [ 100.204240][ T31] usb 5-1: config 0 has an invalid interface number: 160 but max is 0 [ 100.210096][ T2290] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 100.216666][ T31] usb 5-1: config 0 has no interface number 0 [ 100.224590][ T2290] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:418 [ 100.235691][ T31] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 100.239983][ T2290] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 100.249303][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.258130][ T2290] rust_binder: Read failure Err(EFAULT) in pid:418 [ 100.266445][ T31] usb 5-1: Product: syz [ 100.285036][ T31] usb 5-1: Manufacturer: syz [ 100.289654][ T31] usb 5-1: SerialNumber: syz [ 100.297320][ T31] usb 5-1: config 0 descriptor?? [ 100.318953][ T31] usb 5-1: Found UVC 0.00 device syz (05ac:8501) [ 100.328324][ T31] usb 5-1: No valid video chain found. [ 100.341838][ T2298] netlink: 20 bytes leftover after parsing attributes in process `syz.3.642'. [ 100.422098][ T2311] rust_binder: Write failure EFAULT in pid:476 [ 100.430857][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.437847][ T2303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.444583][ T2303] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 100.451077][ T2303] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:521 [ 100.501111][ T2318] rust_binder: 432: no such ref 0 [ 100.534836][ T2320] bridge0: port 3(syz_tun) entered blocking state [ 100.541383][ T2320] bridge0: port 3(syz_tun) entered disabled state [ 100.548048][ T2320] syz_tun: entered allmulticast mode [ 100.553911][ T2320] syz_tun: entered promiscuous mode [ 100.559270][ T2320] bridge0: port 3(syz_tun) entered blocking state [ 100.565755][ T2320] bridge0: port 3(syz_tun) entered forwarding state [ 100.601400][ T2320] kvm: pic: non byte write [ 100.633826][ T404] usb 5-1: USB disconnect, device number 10 [ 100.653966][ T2326] rust_binder: Write failure EFAULT in pid:525 [ 101.487992][ T2361] rust_binder: Write failure EINVAL in pid:439 [ 101.512949][ T2363] overlayfs: failed to resolve './file1': -2 [ 101.641970][ T404] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 101.771984][ T404] usb 3-1: device descriptor read/64, error -71 [ 101.841996][ T31] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 101.928324][ T2399] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:468 [ 101.991974][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 102.009872][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.020894][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.030876][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 102.043783][ T404] usb 3-1: device descriptor read/64, error -71 [ 102.044052][ T31] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 102.059111][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.067841][ T31] usb 5-1: config 0 descriptor?? [ 102.231863][ T2422] rust_binder: Error while translating object. [ 102.231960][ T2422] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 102.238179][ T2422] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:491 [ 102.281993][ T404] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 102.397021][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 102.397037][ T36] audit: type=1400 audit(1757046293.725:556): avc: denied { bind } for pid=2431 comm="syz.1.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.432099][ T404] usb 3-1: device descriptor read/64, error -71 [ 102.434101][ T36] audit: type=1400 audit(1757046293.765:557): avc: denied { mounton } for pid=2433 comm="syz.1.682" path="/proc/503/task" dev="proc" ino=18423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 102.476083][ T31] microsoft 0003:045E:07DA.0008: item 0 4 0 8 parsing failed [ 102.483760][ T31] microsoft 0003:045E:07DA.0008: parse failed [ 102.489961][ T31] microsoft 0003:045E:07DA.0008: probe with driver microsoft failed with error -22 [ 102.557156][ T2448] overlayfs: missing 'lowerdir' [ 102.682056][ T404] usb 3-1: device descriptor read/64, error -71 [ 102.712891][ T10] usb 5-1: USB disconnect, device number 11 [ 102.792094][ T404] usb usb3-port1: attempt power cycle [ 103.131984][ T404] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 103.152978][ T404] usb 3-1: device descriptor read/8, error -71 [ 103.273328][ T2458] kvm: apic: phys broadcast and lowest prio [ 103.283391][ T404] usb 3-1: device descriptor read/8, error -71 [ 103.468606][ T36] audit: type=1400 audit(1757046294.795:558): avc: denied { connect } for pid=2465 comm="syz.1.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.488132][ T36] audit: type=1400 audit(1757046294.795:559): avc: denied { write } for pid=2465 comm="syz.1.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.532337][ T404] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 103.539454][ T2474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.697'. [ 103.558617][ T2476] 9pnet_fd: Insufficient options for proto=fd [ 103.565889][ T404] usb 3-1: device descriptor read/8, error -71 [ 103.576809][ T2478] tipc: Enabling of bearer rejected, media not registered [ 103.641979][ T477] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 103.686795][ T2491] cgroup: fork rejected by pids controller in /syz1 [ 103.713105][ T404] usb 3-1: device descriptor read/8, error -71 [ 103.794626][ T477] usb 5-1: unable to get BOS descriptor or descriptor too short [ 103.807206][ T477] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 103.816302][ T477] usb 5-1: config 1 has no interface number 1 [ 103.827748][ T477] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.832460][ T404] usb usb3-port1: unable to enumerate USB device [ 103.836935][ T477] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.851244][ T477] usb 5-1: Product: syz [ 103.855451][ T477] usb 5-1: Manufacturer: syz [ 103.866514][ T477] usb 5-1: SerialNumber: syz [ 103.884654][ T36] audit: type=1400 audit(1757046295.215:560): avc: denied { create } for pid=2531 comm="syz.3.705" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 103.911965][ T36] audit: type=1400 audit(1757046295.235:561): avc: denied { write } for pid=2531 comm="syz.3.705" name="file2" dev="tmpfs" ino=994 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 103.934521][ T36] audit: type=1400 audit(1757046295.235:562): avc: denied { open } for pid=2531 comm="syz.3.705" path="/174/file2" dev="tmpfs" ino=994 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 103.957342][ T36] audit: type=1400 audit(1757046295.235:563): avc: denied { ioctl } for pid=2531 comm="syz.3.705" path="/174/file2" dev="tmpfs" ino=994 ioctlcmd=0x127a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 103.981534][ T36] audit: type=1400 audit(1757046295.275:564): avc: denied { unlink } for pid=293 comm="syz-executor" name="file2" dev="tmpfs" ino=994 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.004199][ T331] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 104.071722][ T2543] overlayfs: conflicting options: userxattr,verity=require [ 104.081999][ T36] audit: type=1326 audit(1757046295.405:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2461 comm="syz.4.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6798ebe9 code=0x50000 [ 104.109968][ T2545] netlink: 'syz.1.709': attribute type 29 has an invalid length. [ 104.145303][ T331] usb 3-1: device descriptor read/64, error -71 [ 104.173190][ T2553] overlayfs: failed to clone upperpath [ 104.180886][ T2553] overlayfs: failed to clone upperpath [ 104.183053][ T2555] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:555 [ 104.484999][ T404] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 104.663073][ T404] usb 4-1: config 1 has an invalid descriptor of length 208, skipping remainder of the config [ 104.678375][ T404] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.697478][ T404] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 104.706917][ T404] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 104.720837][ T404] usb 4-1: SerialNumber: syz [ 104.935438][ T404] usb 4-1: 0:2 : does not exist [ 104.941957][ T404] usb 4-1: unit 5 not found! [ 104.952523][ T404] usb 4-1: USB disconnect, device number 23 [ 104.978823][ T2044] udevd[2044]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 105.466199][ T2605] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 105.481506][ T2605] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 105.500678][ T2605] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 105.515829][ T2605] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 105.568714][ T2610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 105.581505][ T2613] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 105.771951][ T404] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 105.921941][ T404] usb 3-1: Using ep0 maxpacket: 8 [ 105.928392][ T404] usb 3-1: unable to get BOS descriptor or descriptor too short [ 105.939883][ T404] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 105.952728][ T404] usb 3-1: config 0 has no interface number 0 [ 105.962434][ T404] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 105.979726][ T404] usb 3-1: config 0 interface 88 has no altsetting 0 [ 105.992985][ T404] usb 3-1: string descriptor 0 read error: -22 [ 105.999262][ T404] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 106.008388][ T404] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 106.021618][ T404] usb 3-1: config 0 descriptor?? [ 106.031302][ T404] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input13 [ 106.427105][ T477] usb 5-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 106.443817][ T2634] kvm: pic: non byte read [ 106.450629][ T477] usb 5-1: found format II with max.bitrate = 0, frame size=5 [ 106.458483][ T2634] kvm: pic: level sensitive irq not supported [ 106.458551][ T2634] kvm: pic: non byte read [ 106.470082][ T477] usb 5-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 106.479080][ T2634] kvm: pic: level sensitive irq not supported [ 106.479137][ T2634] kvm: pic: non byte read [ 106.490089][ T2634] kvm: pic: level sensitive irq not supported [ 106.490143][ T2634] kvm: pic: non byte read [ 106.500599][ T477] usb 5-1: found format II with max.bitrate = 0, frame size=5 [ 106.509428][ T477] usb 5-1: failed to enable PITCH for EP 0x82 [ 106.516171][ T2634] kvm: pic: level sensitive irq not supported [ 106.516229][ T2634] kvm: pic: non byte read [ 106.528869][ T477] usb 5-1: 2:1: cannot set freq 12216350 to ep 0x82 [ 106.542351][ T2634] kvm: pic: level sensitive irq not supported [ 106.542409][ T2634] kvm: pic: non byte read [ 106.566676][ T477] usb 5-1: USB disconnect, device number 12 [ 106.585895][ T2634] kvm: pic: level sensitive irq not supported [ 106.585957][ T2634] kvm: pic: non byte read [ 106.629120][ T2634] kvm: pic: level sensitive irq not supported [ 106.629177][ T2634] kvm: pic: non byte read [ 106.648412][ T2634] kvm: pic: level sensitive irq not supported [ 106.648471][ T2634] kvm: pic: non byte read [ 106.676973][ T1838] usb 3-1: USB disconnect, device number 28 [ 106.708697][ T2634] kvm: pic: level sensitive irq not supported [ 106.708761][ T2634] kvm: pic: non byte read [ 106.725141][ T2634] kvm: pic: level sensitive irq not supported [ 107.349337][ T2669] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 107.391672][ T2669] rust_binder: Write failure EINVAL in pid:580 [ 107.451307][ T36] kauditd_printk_skb: 14610 callbacks suppressed [ 107.451326][ T36] audit: type=1400 audit(1757046298.775:15176): avc: denied { write } for pid=2670 comm="syz.4.751" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 107.515975][ T36] audit: type=1400 audit(1757046298.825:15177): avc: denied { ioctl } for pid=2672 comm="syz.3.752" path="socket:[20494]" dev="sockfs" ino=20494 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.610477][ T2687] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 107.650865][ T36] audit: type=1400 audit(1757046298.975:15178): avc: denied { connect } for pid=2698 comm="syz.4.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.670665][ T2700] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 107.681254][ T10] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 107.695858][ T10] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 107.722515][ T2707] rust_binder: 2700 RLIMIT_NICE not set [ 107.729252][ T1838] rust_binder: 2698: removing orphan mapping 0:4248 [ 107.903123][ T404] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 107.916721][ T2719] rust_binder: Write failure EFAULT in pid:512 [ 107.954612][ T2724] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 107.955010][ T2725] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:227 [ 108.073062][ T404] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.092441][ T404] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.102359][ T404] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 108.111490][ T404] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 108.119541][ T404] usb 4-1: SerialNumber: syz [ 108.329095][ T2703] netlink: 80 bytes leftover after parsing attributes in process `syz.3.760'. [ 108.340529][ T36] audit: type=1400 audit(1757046299.665:15179): avc: denied { setopt } for pid=2702 comm="syz.3.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.361025][ T404] usb 4-1: 0:2 : does not exist [ 108.365937][ T404] usb 4-1: unit 129 not found! [ 108.372269][ T404] usb 4-1: USB disconnect, device number 24 [ 108.380343][ T2044] udevd[2044]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 108.557078][ T2741] cgroup: fork rejected by pids controller in /syz2 [ 109.580210][ T2829] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 109.643491][ T2830] rust_binder: 2829 RLIMIT_NICE not set [ 109.643652][ T2830] rust_binder: got new transaction with bad transaction stack [ 109.649550][ T2830] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:586 [ 109.660292][ T2832] erofs: dax options not supported [ 109.665445][ T404] rust_binder: 2828: removing orphan mapping 0:4224 [ 109.732495][ T2846] netlink: 32 bytes leftover after parsing attributes in process `syz.4.785'. [ 109.771610][ T36] audit: type=1400 audit(1757046301.095:15180): avc: denied { map } for pid=2847 comm="syz.2.786" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 109.797982][ T36] audit: type=1400 audit(1757046301.095:15181): avc: denied { execute } for pid=2847 comm="syz.2.786" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 109.883782][ T36] audit: type=1400 audit(1757046301.215:15182): avc: denied { create } for pid=2863 comm="syz.3.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 109.884021][ T2864] syz.3.791 uses obsolete (PF_INET,SOCK_PACKET) [ 109.927131][ T36] audit: type=1400 audit(1757046301.255:15183): avc: denied { ioctl } for pid=2869 comm="syz.4.793" path="socket:[20981]" dev="sockfs" ino=20981 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 109.973070][ T2872] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 110.081970][ T1838] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 110.181712][ T36] audit: type=1400 audit(1757046301.505:15184): avc: denied { execute_no_trans } for pid=2880 comm="syz.3.796" path="/197/file1" dev="tmpfs" ino=1123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 110.235870][ T1838] usb 3-1: device descriptor read/64, error -71 [ 110.482040][ T1838] usb 3-1: device descriptor read/64, error -71 [ 110.541972][ T331] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 110.693323][ T331] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 110.700932][ T331] usb 4-1: can't read configurations, error -61 [ 110.721965][ T1838] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 110.832034][ T331] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 110.851980][ T1838] usb 3-1: device descriptor read/64, error -71 [ 110.983399][ T331] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 110.991019][ T331] usb 4-1: can't read configurations, error -61 [ 110.997451][ T331] usb usb4-port1: attempt power cycle [ 111.091970][ T1838] usb 3-1: device descriptor read/64, error -71 [ 111.202057][ T1838] usb usb3-port1: attempt power cycle [ 111.341981][ T331] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 111.363667][ T331] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 111.371325][ T331] usb 4-1: can't read configurations, error -61 [ 111.501991][ T331] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 111.523728][ T331] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 111.531346][ T331] usb 4-1: can't read configurations, error -61 [ 111.537763][ T331] usb usb4-port1: unable to enumerate USB device [ 111.544196][ T1838] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 111.573031][ T1838] usb 3-1: device descriptor read/8, error -71 [ 111.703046][ T1838] usb 3-1: device descriptor read/8, error -71 [ 111.942636][ T1838] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 111.962985][ T1838] usb 3-1: device descriptor read/8, error -71 [ 112.092992][ T1838] usb 3-1: device descriptor read/8, error -71 [ 112.202040][ T1838] usb usb3-port1: unable to enumerate USB device [ 112.609144][ T36] audit: type=1400 audit(1757046303.935:15185): avc: denied { ioctl } for pid=2894 comm="syz.1.801" path="socket:[20347]" dev="sockfs" ino=20347 ioctlcmd=0x8980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 112.615789][ T2895] fuse: Unknown parameter 'rootmod0000000004Rid­“GiœA' [ 112.822122][ T2897] /dev/nbd2: Can't lookup blockdev [ 112.984573][ T36] audit: type=1400 audit(1757046304.315:15186): avc: denied { accept } for pid=2917 comm="syz.4.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.985579][ T2918] bpf: Bad value for 'uid' [ 113.012920][ T36] audit: type=1400 audit(1757046304.315:15187): avc: denied { read } for pid=2917 comm="syz.4.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 113.187233][ T36] audit: type=1400 audit(1757046304.515:15188): avc: denied { create } for pid=2929 comm="syz.1.813" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 113.291952][ T2941] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 113.291977][ T2941] rust_binder: Error while translating object. [ 113.300609][ T2941] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 113.306823][ T2941] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:618 [ 113.363989][ T2950] loop2: detected capacity change from 0 to 7 [ 113.383116][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 113.395072][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.404282][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 113.412427][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.415592][ T36] audit: type=1400 audit(1757046304.735:15189): avc: denied { mount } for pid=2954 comm="syz.3.821" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 113.421581][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 113.422422][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.460840][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 113.469483][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.478687][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 113.487672][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.496855][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 113.550851][ T2969] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.551310][ T2969] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 113.567614][ T2969] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 113.603570][ T2978] rust_binder: Error while translating object. [ 113.604987][ T2977] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 113.611728][ T2978] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 113.620875][ T2977] input: syz1 as /devices/virtual/input/input14 [ 113.631169][ T2978] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:638 [ 114.539317][ T2999] syz.3.835 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 114.589668][ T36] audit: type=1400 audit(1757046305.915:15190): avc: denied { getopt } for pid=2983 comm="syz.4.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.678153][ T36] audit: type=1400 audit(1757046306.005:15191): avc: denied { getattr } for pid=3005 comm="syz.4.839" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22575 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 114.708287][ T36] audit: type=1400 audit(1757046306.035:15192): avc: denied { getopt } for pid=3011 comm="syz.3.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 114.744799][ T36] audit: type=1400 audit(1757046306.055:15193): avc: denied { accept } for pid=3011 comm="syz.3.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.769311][ T36] audit: type=1400 audit(1757046306.055:15194): avc: denied { create } for pid=3011 comm="syz.3.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 114.825606][ T3038] fuse: Bad value for 'fd' [ 115.001965][ T404] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 115.151984][ T404] usb 4-1: Using ep0 maxpacket: 32 [ 115.158227][ T404] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.169157][ T404] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.181959][ T404] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 115.191027][ T404] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.199958][ T404] usb 4-1: config 0 descriptor?? [ 115.359458][ T3070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=3070 comm=syz.4.857 [ 115.359455][ T3071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=3071 comm=syz.4.857 [ 115.405898][ T3022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.414438][ T3022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.423088][ T3022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.431641][ T3022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.439768][ T3022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.448290][ T3022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.456350][ T3022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.464860][ T3022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.472991][ T3022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.481476][ T3022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.501733][ T404] usbhid 4-1:0.0: can't add hid device: -71 [ 115.508119][ T404] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 115.519294][ T404] usb 4-1: USB disconnect, device number 29 [ 115.771094][ T3076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.858'. [ 115.812517][ T3085] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96 [ 115.957895][ T3097] netlink: 16 bytes leftover after parsing attributes in process `syz.4.864'. [ 116.192001][ T404] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 116.341951][ T404] usb 4-1: Using ep0 maxpacket: 32 [ 116.348131][ T404] usb 4-1: config 211 has an invalid descriptor of length 0, skipping remainder of the config [ 116.359755][ T404] usb 4-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=7c.8a [ 116.368869][ T404] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.376915][ T404] usb 4-1: Product: syz [ 116.381102][ T404] usb 4-1: Manufacturer: syz [ 116.385751][ T404] usb 4-1: SerialNumber: syz [ 116.769128][ T3114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.870'. [ 117.012009][ T404] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 117.163290][ T404] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 117.174350][ T404] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.184169][ T404] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 117.193262][ T404] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.204464][ T404] usb 3-1: config 0 descriptor?? [ 117.210374][ T404] hub 3-1:0.0: USB hub found [ 117.410226][ T404] hub 3-1:0.0: 1 port detected [ 117.424298][ T3134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.878'. [ 117.505853][ T3137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.879'. [ 117.515055][ T3137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.879'. [ 117.524462][ T3137] netlink: 'syz.4.879': attribute type 1 has an invalid length. [ 117.532146][ T3137] netlink: 'syz.4.879': attribute type 2 has an invalid length. [ 117.539884][ T3140] netlink: 'syz.4.879': attribute type 1 has an invalid length. [ 117.547772][ T3140] netlink: 'syz.4.879': attribute type 2 has an invalid length. [ 117.855228][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 117.855246][ T36] audit: type=1400 audit(1757046309.185:15200): avc: denied { ioctl } for pid=3158 comm="syz.4.886" path="socket:[22770]" dev="sockfs" ino=22770 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 117.886977][ T3159] netlink: 'syz.4.886': attribute type 13 has an invalid length. [ 118.174876][ T404] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 118.174993][ T331] usb 3-1: USB disconnect, device number 33 [ 118.430975][ T3174] overlayfs: failed to clone upperpath [ 118.539470][ T3179] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 118.539505][ T3179] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:646 [ 118.579197][ T2001] Bluetooth: hci0: Frame reassembly failed (-84) [ 118.864229][ T404] usb 4-1: USB disconnect, device number 30 [ 118.887320][ T3191] binfmt_misc: register: failed to install interpreter file ./cgroup [ 118.896325][ T3191] exFAT-fs (rnullb0): invalid boot record signature [ 118.903023][ T3191] exFAT-fs (rnullb0): failed to read boot sector [ 118.909449][ T3191] exFAT-fs (rnullb0): failed to recognize exfat type [ 118.927533][ T36] audit: type=1400 audit(1757046310.255:15201): avc: denied { append } for pid=3192 comm="syz.3.896" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 118.950683][ T3193] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 118.958890][ T3193] rust_binder: Write failure EINVAL in pid:668 [ 119.010696][ T3194] random: crng reseeded on system resumption [ 119.010695][ T36] audit: type=1400 audit(1757046310.335:15202): avc: denied { write } for pid=3192 comm="syz.3.896" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 119.346363][ T3202] 9pnet_fd: Insufficient options for proto=fd [ 119.382870][ T3209] overlayfs: failed to clone upperpath [ 119.413992][ T36] audit: type=1400 audit(1757046310.745:15203): avc: denied { create } for pid=3219 comm="syz.4.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 119.778815][ T3223] fuse: Bad value for 'fd' [ 119.861758][ T3227] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:675 [ 120.009087][ T36] audit: type=1326 audit(1757046311.335:15204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3228 comm="syz.3.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3565d8ebe9 code=0x7fc00000 [ 120.267337][ T36] audit: type=1400 audit(1757046311.595:15205): avc: denied { mounton } for pid=3267 comm="syz.3.922" path="/221/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=fifo_file permissive=1 [ 120.503344][ T3280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3280 comm=syz.1.926 [ 120.621985][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 120.622977][ T392] Bluetooth: hci0: command 0x1003 tx timeout [ 120.951986][ T404] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 121.103227][ T404] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 121.112389][ T404] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.121091][ T404] usb 3-1: config 0 descriptor?? [ 121.281316][ T3297] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 121.331548][ T404] usb 3-1: Cannot read MAC address [ 121.339098][ T404] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 121.353440][ T404] usb 3-1: USB disconnect, device number 34 [ 121.972242][ T3325] netlink: 20 bytes leftover after parsing attributes in process `syz.1.943'. [ 121.983330][ T3326] netlink: 16 bytes leftover after parsing attributes in process `syz.1.943'. [ 122.165661][ T36] audit: type=1326 audit(1757046313.495:15206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3338 comm="syz.3.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3565d8ebe9 code=0x7ffc0000 [ 122.189212][ T36] audit: type=1326 audit(1757046313.495:15207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3338 comm="syz.3.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3565d8ebe9 code=0x7ffc0000 [ 122.198790][ T3339] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 122.219030][ T3339] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 122.219530][ T36] audit: type=1326 audit(1757046313.495:15208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3338 comm="syz.3.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3565d8ebe9 code=0x7ffc0000 [ 122.258679][ T36] audit: type=1326 audit(1757046313.495:15209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3338 comm="syz.3.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3565d8ebe9 code=0x7ffc0000 [ 122.772073][ T331] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 122.901985][ T331] usb 4-1: device descriptor read/64, error -71 [ 122.931965][ T31] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 123.083017][ T31] usb 3-1: too many endpoints for config 0 interface 0 altsetting 165: 86, using maximum allowed: 30 [ 123.094057][ T31] usb 3-1: config 0 interface 0 altsetting 165 has 1 endpoint descriptor, different from the interface descriptor's value: 86 [ 123.107374][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 123.114049][ T31] usb 3-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 123.123124][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.131797][ T31] usb 3-1: config 0 descriptor?? [ 123.141954][ T331] usb 4-1: device descriptor read/64, error -71 [ 123.346129][ T31] usb 3-1: string descriptor 0 read error: -71 [ 123.354071][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 123.360049][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 123.371353][ T31] usb 3-1: USB disconnect, device number 35 [ 123.383575][ T331] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 123.436135][ T3420] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 123.443668][ T3422] 9pnet_fd: Insufficient options for proto=fd [ 123.449837][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 123.449855][ T36] audit: type=1400 audit(1757046314.765:15223): avc: denied { create } for pid=3421 comm="syz.1.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 123.471180][ T3424] 9pnet_fd: Insufficient options for proto=fd [ 123.528807][ T36] audit: type=1326 audit(1757046314.855:15224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3438 comm="syz.1.983" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23b698ebe9 code=0x0 [ 123.541997][ T331] usb 4-1: device descriptor read/64, error -71 [ 123.569019][ T36] audit: type=1400 audit(1757046314.895:15225): avc: denied { read } for pid=3442 comm="syz.2.984" name="usbmon0" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 123.592304][ T36] audit: type=1400 audit(1757046314.895:15226): avc: denied { open } for pid=3442 comm="syz.2.984" path="/dev/usbmon0" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 123.615993][ T36] audit: type=1400 audit(1757046314.895:15227): avc: denied { ioctl } for pid=3442 comm="syz.2.984" path="/dev/usbmon0" dev="devtmpfs" ino=89 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 123.634624][ T3445] netlink: 'syz.1.983': attribute type 29 has an invalid length. [ 123.672144][ T3443] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 123.672178][ T3443] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 123.680183][ T3443] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:689 [ 123.791967][ T331] usb 4-1: device descriptor read/64, error -71 [ 123.912085][ T331] usb usb4-port1: attempt power cycle [ 124.077801][ T3450] netlink: 'syz.4.986': attribute type 1 has an invalid length. [ 124.106679][ T3454] netlink: 'syz.4.988': attribute type 46 has an invalid length. [ 124.149256][ T3465] fuse: Bad value for 'fd' [ 124.154080][ T3466] fuse: Bad value for 'fd' [ 124.154080][ T3465] fuse: Bad value for 'fd' [ 124.261971][ T331] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 124.282979][ T331] usb 4-1: device descriptor read/8, error -71 [ 124.328785][ T36] audit: type=1326 audit(1757046315.655:15228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3480 comm="syz.4.996" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc6798ebe9 code=0x0 [ 124.413283][ T331] usb 4-1: device descriptor read/8, error -71 [ 124.420281][ T36] audit: type=1400 audit(1757046315.745:15229): avc: granted { setsecparam } for pid=3489 comm="syz.2.998" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 124.475129][ T3496] rust_binder: Error in use_page_slow: ESRCH [ 124.475150][ T3496] rust_binder: use_range failure ESRCH [ 124.481161][ T3496] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 124.486677][ T3496] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 124.494531][ T3496] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:698 [ 124.515448][ T36] audit: type=1400 audit(1757046315.845:15230): avc: denied { mounton } for pid=3498 comm="syz.2.1002" path="/202/file0" dev="tmpfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 124.560989][ T3504] rust_binder: 706: no such ref 2 [ 124.566122][ T3504] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:706 [ 124.587236][ T36] audit: type=1400 audit(1757046315.915:15231): avc: denied { mount } for pid=3506 comm="syz.2.1004" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 124.618622][ T36] audit: type=1400 audit(1757046315.925:15232): avc: denied { connect } for pid=3506 comm="syz.2.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.671983][ T331] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 124.706915][ T331] usb 4-1: device descriptor read/8, error -71 [ 124.808591][ T3511] rust_binder: Write failure EINVAL in pid:711 [ 124.809403][ T3511] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:711 [ 124.866222][ T331] usb 4-1: device descriptor read/8, error -71 [ 124.982041][ T331] usb usb4-port1: unable to enumerate USB device [ 125.569470][ T3567] rust_binder: Write failure EFAULT in pid:721 [ 125.881976][ T404] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 126.042366][ T404] usb 3-1: too many configurations: 11, using maximum allowed: 8 [ 126.058026][ T404] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 126.067266][ T404] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.075930][ T404] usb 3-1: Product: syz [ 126.080257][ T404] usb 3-1: Manufacturer: syz [ 126.085128][ T404] usb 3-1: SerialNumber: syz [ 126.089042][ T3587] 9pnet_fd: Insufficient options for proto=fd [ 126.202180][ T3625] 9pnet_fd: Insufficient options for proto=fd [ 126.305827][ T404] usb 3-1: USB disconnect, device number 36 [ 126.807432][ T3684] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1066'. [ 127.325996][ T3718] 2N: renamed from vcan0 (while UP) [ 127.332814][ T3718] tmpfs: Unknown parameter 'nr_i' [ 127.514451][ T3735] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1081'. [ 127.925616][ T1987] tipc: Left network mode [ 127.930956][ T1987] veth1_macvtap: left promiscuous mode [ 127.936833][ T1987] veth0_vlan: left promiscuous mode [ 128.016518][ T3748] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.023655][ T3748] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.030835][ T3748] bridge_slave_0: entered allmulticast mode [ 128.038650][ T3748] bridge_slave_0: entered promiscuous mode [ 128.045351][ T3748] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.052893][ T3748] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.060022][ T3748] bridge_slave_1: entered allmulticast mode [ 128.066420][ T3748] bridge_slave_1: entered promiscuous mode [ 128.134051][ T2001] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.141137][ T2001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.150356][ T1989] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.157465][ T1989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.185021][ T3748] veth0_vlan: entered promiscuous mode [ 128.196336][ T3748] veth1_macvtap: entered promiscuous mode [ 128.284635][ T3762] rust_binder: 3759 RLIMIT_NICE not set [ 128.290436][ T10] rust_binder: 3758: removing orphan mapping 0:4248 [ 129.339854][ T3806] tc_dump_action: action bad kind [ 129.349146][ T3806] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1102'. [ 129.377502][ T3810] rust_binder: 16: no such ref 3 [ 129.380790][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 129.380808][ T36] audit: type=1400 audit(1757046320.705:15253): avc: denied { mount } for pid=3807 comm="syz.4.1103" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 129.383386][ T3810] rust_binder: Write failure EINVAL in pid:16 [ 129.480659][ T3815] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:18 [ 129.503732][ T3817] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.347638][ T36] audit: type=1400 audit(1757046321.675:15254): avc: denied { create } for pid=3830 comm="syz.3.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 130.372363][ T3833] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 130.375214][ T3833] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:743 [ 130.392617][ T3833] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 130.437786][ T3839] netlink: 37 bytes leftover after parsing attributes in process `syz.3.1114'. [ 130.548725][ T36] audit: type=1400 audit(1757046321.875:15255): avc: denied { mount } for pid=3853 comm="syz.4.1118" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 130.622830][ T3866] overlayfs: failed to clone upperpath [ 130.702533][ T36] audit: type=1400 audit(1757046322.035:15256): avc: denied { create } for pid=3857 comm="syz.5.1120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 130.728624][ T36] audit: type=1400 audit(1757046322.035:15257): avc: denied { sys_admin } for pid=3857 comm="syz.5.1120" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 130.875327][ T3884] netlink: 'syz.5.1130': attribute type 4 has an invalid length. [ 130.896440][ T3884] netlink: 'syz.5.1130': attribute type 4 has an invalid length. [ 130.907045][ T3884] netlink: 4432 bytes leftover after parsing attributes in process `syz.5.1130'. [ 131.170694][ T3889] syz.4.1132 (3889): attempted to duplicate a private mapping with mremap. This is not supported. [ 131.269256][ T36] audit: type=1400 audit(1757046322.595:15258): avc: denied { accept } for pid=3907 comm="syz.4.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 131.714775][ T3965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1155'. [ 131.745758][ T2001] Bluetooth: hci0: Frame reassembly failed (-84) [ 131.974608][ T3976] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2076 sclass=netlink_xfrm_socket pid=3976 comm=syz.4.1159 [ 132.066402][ T3991] netlink: 'syz.1.1165': attribute type 11 has an invalid length. [ 132.344738][ T36] audit: type=1400 audit(1757046323.675:15259): avc: denied { connect } for pid=3999 comm="syz.1.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 132.477811][ T4018] netlink: 'syz.4.1175': attribute type 58 has an invalid length. [ 132.489021][ T4018] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 132.555822][ T4027] fuse: Bad value for 'fd' [ 133.262646][ T4042] 9pnet_fd: Insufficient options for proto=fd [ 133.290108][ T36] audit: type=1400 audit(1757046324.615:15260): avc: denied { create } for pid=4045 comm="syz.5.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 133.556346][ T4064] overlayfs: failed to clone upperpath [ 133.814391][ T36] audit: type=1326 audit(1757046325.145:15261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4079 comm="syz.4.1199" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc6798ebe9 code=0x0 [ 133.837352][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 133.842302][ T392] Bluetooth: hci0: command 0x1003 tx timeout [ 133.868403][ T4085] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:772 [ 134.752038][ T36] audit: type=1400 audit(1757046326.075:15262): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 135.162362][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.169540][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.176970][ T4182] bridge_slave_0: entered allmulticast mode [ 135.183356][ T4182] bridge_slave_0: entered promiscuous mode [ 135.189730][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.196890][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.204058][ T4182] bridge_slave_1: entered allmulticast mode [ 135.210290][ T4182] bridge_slave_1: entered promiscuous mode [ 135.220527][ T1989] ip6gretap0: left allmulticast mode [ 135.225947][ T1989] ip6gretap0: left promiscuous mode [ 135.231207][ T1989] bridge0: port 3(ip6gretap0) entered disabled state [ 135.238371][ T1989] bridge_slave_1: left allmulticast mode [ 135.244161][ T1989] bridge_slave_1: left promiscuous mode [ 135.249941][ T1989] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.257459][ T1989] bridge_slave_0: left allmulticast mode [ 135.263208][ T1989] bridge_slave_0: left promiscuous mode [ 135.268809][ T1989] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.355241][ T1989] tipc: Left network mode [ 135.357853][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.366636][ T4182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.373932][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.380971][ T4182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.390319][ T1989] veth1_macvtap: left promiscuous mode [ 135.395918][ T1989] veth0_vlan: left promiscuous mode [ 135.483465][ T2001] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.496009][ T2001] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.509213][ T1993] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.516299][ T1993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.524709][ T1993] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.531754][ T1993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.558474][ T4182] veth0_vlan: entered promiscuous mode [ 135.569713][ T4182] veth1_macvtap: entered promiscuous mode [ 135.604388][ T36] audit: type=1326 audit(1757046326.935:15263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4205 comm="syz.6.1240" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcce4d8ebe9 code=0x0 [ 135.658401][ T4212] rust_binder: 2: no such ref 3 [ 136.086880][ T4233] netlink: 'syz.1.1253': attribute type 11 has an invalid length. [ 136.205752][ T4240] overlayfs: failed to clone upperpath [ 136.211859][ T4240] fuseblk: Bad value for 'user_id' [ 136.217087][ T4240] fuseblk: Bad value for 'user_id' [ 136.418975][ T4274] overlayfs: failed to resolve './cgroup': -2 [ 136.426608][ T36] audit: type=1400 audit(1757046327.755:15264): avc: denied { accept } for pid=4273 comm="syz.1.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 136.453407][ T4276] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 136.461496][ T4276] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 136.470699][ T4276] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 136.478688][ T4276] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 136.978585][ T36] audit: type=1400 audit(1757046328.305:15265): avc: denied { read } for pid=4304 comm="syz.1.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 137.029400][ T36] audit: type=1400 audit(1757046328.355:15266): avc: denied { setopt } for pid=4304 comm="syz.1.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 137.061141][ T4308] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1282'. [ 137.070750][ T4308] 9pnet_fd: Insufficient options for proto=fd [ 137.129908][ T36] audit: type=1400 audit(1757046328.455:15267): avc: denied { watch watch_reads } for pid=4316 comm="syz.1.1286" path="/395" dev="tmpfs" ino=2134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 137.243991][ T4326] tipc: Trying to set illegal importance in message [ 137.365180][ T4333] /dev/nbd6: Can't lookup blockdev [ 137.409148][ T4346] syz.6.1298 (4346): /proc/4345/oom_adj is deprecated, please use /proc/4345/oom_score_adj instead. [ 138.028374][ T4364] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 138.052759][ T4368] overlayfs: failed to clone upperpath [ 138.054488][ T4369] overlayfs: failed to clone upperpath [ 138.085767][ T4364] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 138.212689][ T4399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1314'. [ 138.230191][ T4399] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1314'. [ 138.236223][ T4402] rust_binder: Failed to allocate buffer. len:10771147061988852024, is_oneway:false [ 138.239227][ T4402] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 138.239539][ T4399] netlink: 'syz.1.1314': attribute type 3 has an invalid length. [ 138.248830][ T4402] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:38 [ 138.259522][ T4399] netlink: 'syz.1.1314': attribute type 2 has an invalid length. [ 138.282825][ T4399] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1314'. [ 138.377039][ T36] audit: type=1400 audit(1757046329.705:15268): avc: denied { mounton } for pid=4415 comm="syz.6.1319" path="/file0" dev="ramfs" ino=26587 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 138.377049][ T4416] fuse: Bad value for 'fd' [ 138.641949][ T1838] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 138.793037][ T1838] usb 7-1: config 0 has an invalid descriptor of length 199, skipping remainder of the config [ 138.803432][ T1838] usb 7-1: too many endpoints for config 0 interface 0 altsetting 33: 104, using maximum allowed: 30 [ 138.814377][ T1838] usb 7-1: config 0 interface 0 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 104 [ 138.827546][ T1838] usb 7-1: config 0 interface 0 has no altsetting 0 [ 138.834215][ T1838] usb 7-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 138.843284][ T1838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.851949][ T1838] usb 7-1: config 0 descriptor?? [ 139.058793][ T1838] usb 7-1: string descriptor 0 read error: -71 [ 139.066120][ T1838] usb 7-1: USB disconnect, device number 2 [ 139.357796][ T4475] 2N: renamed from vcan0 (while UP) [ 139.377469][ T4477] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1344'. [ 139.576357][ T4487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.577856][ T36] audit: type=1400 audit(1757046330.905:15269): avc: denied { read } for pid=4486 comm="syz.6.1348" path="socket:[27688]" dev="sockfs" ino=27688 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 139.822313][ T331] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 139.972975][ T331] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.984072][ T331] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 139.995564][ T331] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.004657][ T331] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.012672][ T331] usb 7-1: Product: syz [ 140.016844][ T331] usb 7-1: Manufacturer: syz [ 140.021427][ T331] usb 7-1: SerialNumber: syz [ 140.029139][ T331] cdc_mbim 7-1:1.0: skipping garbage [ 140.229240][ T4487] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 140.494064][ T4508] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1356'. [ 140.746891][ T4544] netlink: 'syz.5.1367': attribute type 63 has an invalid length. [ 140.754822][ T4544] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1367'. [ 140.763819][ T4544] gretap0: entered allmulticast mode [ 140.769431][ T4544] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 140.838036][ T4487] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 140.846843][ T331] cdc_mbim 7-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 140.854366][ T331] cdc_mbim 7-1:1.0: setting rx_max = 2048 [ 140.921772][ T4579] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1377'. [ 140.995671][ T4582] netlink: 1304 bytes leftover after parsing attributes in process `syz.5.1378'. [ 141.909543][ T36] audit: type=1400 audit(1757046333.235:15270): avc: denied { mount } for pid=4597 comm="syz.5.1384" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 142.586987][ T331] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device [ 142.594420][ T331] wwan wwan0: port wwan0mbim0 attached [ 142.602500][ T331] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, de:e9:70:5f:97:0b [ 142.614902][ T331] usb 7-1: USB disconnect, device number 3 [ 142.624371][ T331] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM [ 142.633154][ T36] audit: type=1400 audit(1757046333.955:15271): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 142.656181][ T36] audit: type=1400 audit(1757046333.955:15272): avc: denied { search } for pid=150 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.677582][ T36] audit: type=1400 audit(1757046333.955:15273): avc: denied { read } for pid=150 comm="dhcpcd" name="n15" dev="tmpfs" ino=4601 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 142.699324][ T36] audit: type=1400 audit(1757046333.965:15274): avc: denied { open } for pid=150 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=4601 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 142.722796][ T331] wwan wwan0: port wwan0mbim0 disconnected [ 142.733607][ T36] audit: type=1400 audit(1757046333.965:15275): avc: denied { getattr } for pid=150 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=4601 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 142.762157][ T36] audit: type=1400 audit(1757046333.985:15276): avc: denied { read } for pid=4627 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.785405][ T36] audit: type=1400 audit(1757046333.985:15277): avc: denied { open } for pid=4627 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.810665][ T36] audit: type=1400 audit(1757046333.985:15278): avc: denied { getattr } for pid=4627 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.836114][ T36] audit: type=1400 audit(1757046334.065:15279): avc: denied { write } for pid=4626 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.061952][ T331] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 143.213306][ T331] usb 7-1: unable to get BOS descriptor or descriptor too short [ 143.221415][ T331] usb 7-1: not running at top speed; connect to a high speed hub [ 143.229925][ T331] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 143.238698][ T331] usb 7-1: config 1 has an invalid descriptor of length 137, skipping remainder of the config [ 143.248997][ T331] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.259270][ T331] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 143.268342][ T331] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.276364][ T331] usb 7-1: Product: syz [ 143.280510][ T331] usb 7-1: Manufacturer: syz [ 143.285135][ T331] usb 7-1: SerialNumber: syz [ 143.493405][ T4624] __vm_enough_memory: pid: 4624, comm: syz.6.1394, bytes: 18014402804453376 not enough memory for the allocation [ 143.526000][ T4680] fuse: blksize only supported for fuseblk [ 143.567521][ T4684] overlayfs: failed to clone upperpath [ 143.600673][ T4691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4691 comm=syz.5.1407 [ 144.076174][ T331] usb 7-1: 0:6 : does not exist [ 144.087822][ T331] usb 7-1: 0:36 : does not exist [ 144.099691][ T331] usb 7-1: USB disconnect, device number 4 [ 144.461955][ T331] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 144.612987][ T331] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 144.621154][ T331] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 144.632865][ T331] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 144.643792][ T331] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 144.654935][ T331] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 144.667823][ T331] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 144.676877][ T331] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.685595][ T331] usb 7-1: config 0 descriptor?? [ 144.690859][ T4705] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 144.882053][ T4743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1426'. [ 145.031303][ T4762] overlayfs: failed to clone upperpath [ 145.101430][ T331] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xd [ 145.109350][ T331] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 145.117007][ T331] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 145.124564][ T331] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 145.133647][ T331] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 145.152430][ T331] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 145.303226][ T404] usb 7-1: USB disconnect, device number 5 [ 145.401748][ T4798] netlink: 'syz.1.1443': attribute type 4 has an invalid length. [ 145.757678][ T4818] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1450'. [ 145.772863][ T4818] fuse: Bad value for 'fd' [ 145.888231][ T4834] exFAT-fs (rnullb0): invalid boot record signature [ 145.894903][ T4834] exFAT-fs (rnullb0): failed to read boot sector [ 145.901230][ T4834] exFAT-fs (rnullb0): failed to recognize exfat type [ 145.908416][ T4835] exFAT-fs (rnullb0): invalid boot record signature [ 145.915048][ T4835] exFAT-fs (rnullb0): failed to read boot sector [ 145.921374][ T4835] exFAT-fs (rnullb0): failed to recognize exfat type [ 145.957706][ T4837] tipc: Started in network mode [ 145.962622][ T4837] tipc: Node identity fffffffa, cluster identity 4711 [ 145.969434][ T4837] tipc: Node number set to 4294967290 [ 146.223821][ T4866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=87 sclass=netlink_route_socket pid=4866 comm=syz.1.1465 [ 146.321995][ T331] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 146.471942][ T331] usb 7-1: Invalid ep0 maxpacket: 16 [ 146.601946][ T331] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 146.751981][ T331] usb 7-1: Invalid ep0 maxpacket: 16 [ 146.757463][ T331] usb usb7-port1: attempt power cycle [ 146.764806][ T4886] netlink: 165 bytes leftover after parsing attributes in process `syz.5.1472'. [ 146.874314][ T4893] overlayfs: failed to clone upperpath [ 146.931654][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 146.931671][ T36] audit: type=1400 audit(1757046338.255:15293): avc: denied { listen } for pid=4892 comm="syz.5.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 147.101986][ T331] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 147.132291][ T331] usb 7-1: Invalid ep0 maxpacket: 16 [ 147.149570][ T36] audit: type=1400 audit(1757046338.475:15294): avc: denied { ioctl } for pid=4918 comm="syz.4.1482" path="socket:[29237]" dev="sockfs" ino=29237 ioctlcmd=0xae60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 147.175827][ T36] audit: type=1400 audit(1757046338.475:15295): avc: denied { read } for pid=4918 comm="syz.4.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 147.261963][ T331] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 147.282311][ T331] usb 7-1: Invalid ep0 maxpacket: 16 [ 147.287809][ T331] usb usb7-port1: unable to enumerate USB device [ 148.115880][ T4925] overlayfs: failed to clone upperpath [ 149.103494][ T4937] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 149.110694][ T4937] rust_binder: Write failure EINVAL in pid:67 [ 149.175543][ T4946] /dev/rnullb0: Can't open blockdev [ 149.187348][ T4946] /dev/rnullb0: Can't open blockdev [ 149.316656][ T4958] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.316968][ T4958] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 149.342778][ T4962] Invalid ELF header type: 3 != 1 [ 149.347661][ T36] audit: type=1400 audit(1757046340.675:15296): avc: denied { module_load } for pid=4959 comm="syz.6.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 149.377422][ T36] audit: type=1400 audit(1757046340.685:15297): avc: denied { execute } for pid=4960 comm="syz.4.1496" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=28323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 149.412242][ T4962] Invalid ELF header type: 3 != 1 [ 149.417555][ T4962] Invalid ELF header type: 3 != 1 [ 149.425985][ T36] audit: type=1400 audit(1757046340.755:15298): avc: denied { create } for pid=4959 comm="syz.6.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 149.461422][ T4962] Invalid ELF header type: 3 != 1 [ 149.472252][ T4974] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1502'. [ 149.488425][ T36] audit: type=1326 audit(1757046340.815:15299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.5.1502" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f265878ebe9 code=0x0 [ 149.566783][ T36] audit: type=1400 audit(1757046340.895:15300): avc: denied { setattr } for pid=4981 comm="syz.6.1506" name="PACKET" dev="sockfs" ino=29405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 149.690059][ T36] audit: type=1400 audit(1757046341.015:15301): avc: denied { setopt } for pid=4994 comm="syz.6.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 149.792839][ T4999] rust_binder: 4998 RLIMIT_NICE not set [ 150.046319][ T5008] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1515'. [ 150.076935][ T5010] bridge0: entered allmulticast mode [ 150.082791][ T5010] 9pnet_fd: Insufficient options for proto=fd [ 150.174278][ T36] audit: type=1326 audit(1757046341.505:15302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5036 comm="syz.1.1524" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23b698ebe9 code=0x0 [ 150.851947][ T1838] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 151.001946][ T1838] usb 7-1: Using ep0 maxpacket: 16 [ 151.008321][ T1838] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 151.016651][ T1838] usb 7-1: config 0 has no interface number 0 [ 151.023073][ T1838] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 151.033059][ T1838] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 151.043155][ T1838] usb 7-1: config 0 interface 41 has no altsetting 0 [ 151.047959][ T5055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5055 comm=syz.1.1530 [ 151.051649][ T1838] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 151.071475][ T1838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.078741][ T5058] sock: sock_set_timeout: `syz.1.1531' (pid 5058) tries to set negative timeout [ 151.079626][ T1838] usb 7-1: Product: syz [ 151.092733][ T1838] usb 7-1: Manufacturer: syz [ 151.097352][ T1838] usb 7-1: SerialNumber: syz [ 151.102989][ T1838] usb 7-1: config 0 descriptor?? [ 151.108279][ T5048] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 151.115755][ T5048] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 151.323704][ T5048] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 151.330911][ T5048] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 151.526501][ T5089] sit0: entered promiscuous mode [ 151.532913][ T5089] netlink: 'syz.4.1542': attribute type 1 has an invalid length. [ 151.540723][ T5089] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1542'. [ 151.953029][ T1838] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 152.067110][ T5095] netlink: 'syz.4.1545': attribute type 32 has an invalid length. [ 152.083924][ T5095] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5095 comm=syz.4.1545 [ 152.237277][ T5124] fuse: Unknown parameter '…d' [ 152.314971][ T36] audit: type=1400 audit(1757046343.645:15303): avc: denied { setopt } for pid=5137 comm="syz.4.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 152.368423][ T1838] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 152.390506][ T1838] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 152.400444][ T1838] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71 [ 152.414071][ T1838] usb 7-1: USB disconnect, device number 10 [ 152.657241][ T36] audit: type=1400 audit(1757046343.985:15304): avc: denied { create } for pid=5177 comm="syz.1.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 153.113880][ T5223] wireguard: wg2: Could not create IPv4 socket [ 153.171973][ T5223] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 153.203205][ T5228] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.225725][ T5230] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:125 [ 153.245650][ T36] audit: type=1326 audit(1757046344.575:15305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5231 comm="syz.6.1592" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcce4d8ebe9 code=0x0 [ 153.635745][ T36] audit: type=1326 audit(1757046344.965:15306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5248 comm="syz.4.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6798ebe9 code=0x7fc00000 [ 153.659332][ T36] audit: type=1326 audit(1757046344.965:15307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5248 comm="syz.4.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6798ebe9 code=0x7fc00000 [ 153.695333][ T36] audit: type=1400 audit(1757046345.025:15308): avc: denied { create } for pid=5258 comm="syz.4.1599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 153.704005][ T5259] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5259 comm=syz.4.1599 [ 153.935153][ T5269] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1603'. [ 154.158095][ T1838] rust_binder: 5272: removing orphan mapping 0:4120 [ 154.199291][ T5284] rust_binder: Write failure EFAULT in pid:143 [ 155.182041][ T5301] netlink: 'syz.5.1615': attribute type 1 has an invalid length. [ 155.196096][ T5301] netlink: 'syz.5.1615': attribute type 2 has an invalid length. [ 155.752510][ T5318] overlayfs: missing 'lowerdir' [ 155.757878][ T5319] overlayfs: missing 'lowerdir' [ 155.862577][ T5325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1624'. [ 155.893543][ T36] audit: type=1400 audit(1757046347.225:15309): avc: denied { write } for pid=5324 comm="syz.4.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 155.917884][ T5323] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5323 comm=syz.1.1623 [ 155.999989][ T5337] tipc: Started in network mode [ 156.005015][ T5337] tipc: Node identity 5f000000000000000000000000000001, cluster identity 4711 [ 156.014246][ T5337] tipc: Enabling of bearer rejected, failed to enable media [ 156.072269][ T36] audit: type=1400 audit(1757046347.405:15310): avc: denied { create } for pid=5349 comm="syz.5.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 156.111380][ T36] audit: type=1400 audit(1757046347.425:15311): avc: denied { ioctl } for pid=5349 comm="syz.5.1633" path="socket:[30157]" dev="sockfs" ino=30157 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 156.716797][ T5386] 9pnet_fd: Insufficient options for proto=fd [ 157.024017][ T5399] overlayfs: failed to clone upperpath [ 157.282055][ T36] audit: type=1400 audit(1757046348.615:15312): avc: denied { write } for pid=5415 comm="syz.6.1654" name="/" dev="incremental-fs" ino=317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.373481][ T5419] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:161 [ 157.684488][ T36] audit: type=1326 audit(1757046349.015:15313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5433 comm="syz.1.1660" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23b698ebe9 code=0x0 [ 157.938642][ T36] audit: type=1400 audit(1757046349.265:15314): avc: denied { getopt } for pid=5441 comm="syz.4.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 158.423825][ T5454] tipc: New replicast peer: 255.255.255.255 [ 158.430030][ T5454] tipc: Enabled bearer , priority 10 [ 158.575755][ T5489] overlayfs: failed to resolve './file0': -2 [ 158.610935][ T5493] netlink: 'syz.6.1674': attribute type 4 has an invalid length. [ 158.618992][ T5493] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1674'. [ 158.668439][ T5510] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1679'. [ 159.013180][ T5528] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 159.597851][ T5554] random: crng reseeded on system resumption [ 159.625299][ T5555] overlayfs: failed to clone upperpath [ 159.638144][ T36] audit: type=1400 audit(1757046350.965:15315): avc: denied { ioctl } for pid=5553 comm="syz.6.1695" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 159.716295][ T36] audit: type=1400 audit(1757046351.045:15316): avc: denied { map } for pid=5557 comm="syz.6.1697" path="socket:[30557]" dev="sockfs" ino=30557 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 159.739629][ T36] audit: type=1400 audit(1757046351.045:15317): avc: denied { accept } for pid=5557 comm="syz.6.1697" path="socket:[30557]" dev="sockfs" ino=30557 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 159.770197][ T36] audit: type=1400 audit(1757046351.095:15318): avc: denied { write } for pid=5560 comm="syz.6.1698" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 159.802143][ T5566] netlink: 'syz.6.1699': attribute type 2 has an invalid length. [ 160.101416][ T5569] overlayfs: failed to clone upperpath [ 160.512735][ T36] audit: type=1326 audit(1757046351.845:15319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5590 comm="syz.5.1707" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f265878ebe9 code=0x0 [ 160.724432][ T5601] binder: Bad value for 'defcontext' [ 160.762470][ T5609] fuse: Unknown parameter '' [ 160.811639][ T5616] fuse: Bad value for 'group_id' [ 160.816680][ T5616] fuse: Bad value for 'group_id' [ 161.367067][ T36] audit: type=1400 audit(1757046352.695:15320): avc: denied { lock } for pid=5640 comm="syz.5.1724" path="socket:[31215]" dev="sockfs" ino=31215 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 161.479899][ T5645] tipc: Started in network mode [ 161.484842][ T5645] tipc: Node identity , cluster identity 4711 [ 161.490931][ T5645] tipc: Failed to set node id, please configure manually [ 161.498267][ T5645] tipc: Enabling of bearer rejected, failed to enable media [ 161.516789][ T5649] overlayfs: failed to clone upperpath [ 161.606455][ T5664] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1730'. [ 161.750926][ T5676] /dev/loop4: Can't lookup blockdev [ 161.758733][ T5676] bpf: Bad value for 'mode' [ 162.485429][ T5719] veth0_to_team: entered promiscuous mode [ 162.491286][ T5719] veth0_to_team: entered allmulticast mode [ 162.745367][ T5734] netlink: 'syz.1.1757': attribute type 16 has an invalid length. [ 162.753255][ T5734] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1757'. [ 162.910610][ T5743] bridge0: port 3(erspan0) entered blocking state [ 162.917086][ T5743] bridge0: port 3(erspan0) entered disabled state [ 162.923614][ T5743] erspan0: entered allmulticast mode [ 162.929234][ T5743] erspan0: entered promiscuous mode [ 162.934598][ T5743] bridge0: port 3(erspan0) entered blocking state [ 162.941043][ T5743] bridge0: port 3(erspan0) entered forwarding state [ 163.458846][ T5751] overlayfs: failed to clone upperpath [ 163.466031][ T5753] overlayfs: failed to clone upperpath [ 163.513018][ T5768] 9pnet_fd: Insufficient options for proto=fd [ 163.518411][ T5770] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1769'. [ 163.628629][ T5794] No source specified [ 163.738632][ T5806] overlayfs: failed to clone upperpath [ 163.744489][ T5807] overlayfs: failed to clone upperpath [ 163.850267][ T5816] rust_binder: Write failure EFAULT in pid:227 [ 164.040841][ T5821] 9pnet_fd: Insufficient options for proto=fd [ 164.207738][ T5842] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 164.246742][ T5850] overlayfs: failed to clone upperpath [ 164.468059][ T5882] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 164.471401][ T5882] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 164.590185][ T5880] netlink: 5308 bytes leftover after parsing attributes in process `syz.5.1808'. [ 164.764536][ T5889] tipc: Started in network mode [ 164.769446][ T5889] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 164.778424][ T5889] tipc: Enabling of bearer rejected, failed to enable media [ 164.834218][ T5900] netlink: 'syz.1.1816': attribute type 2 has an invalid length. [ 164.896869][ T5913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1821'. [ 164.926111][ T5920] netlink: 'syz.1.1823': attribute type 4 has an invalid length. [ 164.943164][ T5923] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1824'. [ 165.040963][ T36] audit: type=1326 audit(1757046356.365:15321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5841 comm="syz.4.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6798ebe9 code=0x7fc00000 [ 165.135416][ T5944] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1831'. [ 165.753598][ T36] audit: type=1400 audit(1757046357.073:15322): avc: denied { read } for pid=5985 comm="syz.4.1845" path="socket:[31615]" dev="sockfs" ino=31615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 165.837414][ T5989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1846'. [ 165.895758][ T6001] bridge0: port 4(erspan0) entered blocking state [ 165.902276][ T6001] bridge0: port 4(erspan0) entered disabled state [ 165.908765][ T6001] erspan0: entered allmulticast mode [ 165.914429][ T6001] erspan0: entered promiscuous mode [ 165.919800][ T6001] bridge0: port 4(erspan0) entered blocking state [ 165.926231][ T6001] bridge0: port 4(erspan0) entered forwarding state [ 166.910452][ T6076] overlayfs: failed to clone upperpath [ 166.989003][ T6084] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1876'. [ 167.026890][ T36] audit: type=1400 audit(1757046358.270:15323): avc: denied { accept } for pid=6091 comm="syz.1.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 167.127524][ T6098] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1880'. [ 167.137215][ T6098] 9pnet_fd: Insufficient options for proto=fd [ 167.708524][ T36] audit: type=1400 audit(1757046358.906:15324): avc: denied { mounton } for pid=6102 comm="syz.6.1882" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 167.709869][ T6104] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 167.734029][ T6104] rust_binder: Read failure Err(EFAULT) in pid:239 [ 167.757261][ T6106] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:242 [ 167.764655][ T36] audit: type=1400 audit(1757046358.962:15325): avc: denied { mounton } for pid=6105 comm="syz.6.1883" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 167.971885][ T6111] overlayfs: failed to resolve './file1': -2 [ 168.653772][ T36] audit: type=1400 audit(1757046359.785:15326): avc: denied { unmount } for pid=4182 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 168.670509][ T6120] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.691809][ T36] audit: type=1400 audit(1757046359.832:15327): avc: denied { write } for pid=6122 comm="syz.6.1889" path="socket:[32376]" dev="sockfs" ino=32376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 168.736857][ T6125] rust_binder: Error while translating object. [ 168.736886][ T6125] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 168.743459][ T6125] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:250 [ 168.753688][ T6127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.778338][ T36] audit: type=1400 audit(1757046359.906:15328): avc: denied { create } for pid=6130 comm="syz.6.1891" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 168.828712][ T6137] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:262 [ 168.829598][ T6137] rust_binder: Read failure Err(EFAULT) in pid:262 [ 170.080568][ T6194] 9pnet: Could not find request transport: f [ 170.161197][ T6207] netlink: 'syz.4.1917': attribute type 12 has an invalid length. [ 170.220818][ T6222] tipc: Started in network mode [ 170.225788][ T6222] tipc: Node identity ac14142f, cluster identity 4711 [ 170.232574][ T6222] tipc: Enabling of bearer rejected, failed to enable media [ 170.633922][ T6257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6257 comm=syz.1.1935 [ 171.228393][ T6293] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1950'. [ 171.850957][ T36] audit: type=1326 audit(1757046362.777:15329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.4.1960" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc6798ebe9 code=0x0 [ 171.904881][ T36] audit: type=1326 audit(1757046362.833:15330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.4.1960" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc6798ebe9 code=0x0 [ 172.103705][ T6356] binder: Bad value for 'stats' [ 172.247258][ T6375] overlayfs: failed to clone upperpath [ 172.296624][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.296658][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.306063][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.312755][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.319266][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.325972][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.332578][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.339105][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.345821][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.353817][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.364853][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.373578][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.389413][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.396135][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.403063][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.409857][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.416367][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.438450][ T6385] /dev/loop0: Can't lookup blockdev [ 172.439952][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.452037][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.458484][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.478180][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.487642][ T6392] 9pnet_fd: Insufficient options for proto=fd [ 172.500246][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.500272][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.506762][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.514045][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.525151][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.531595][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.544489][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.551226][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.557883][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.564407][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.571187][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.577824][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.585072][ T36] audit: type=1326 audit(1757046363.469:15331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6394 comm="syz.5.1980" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f265878ebe9 code=0x0 [ 172.614700][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.614726][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.621437][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.627952][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.634603][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.641209][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.647683][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.654200][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.660641][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.667155][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.673588][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.680092][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.686563][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.693051][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.699536][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.706018][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.712475][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.718976][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.725410][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.731907][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.738346][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.744856][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.751319][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.757801][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.764263][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.770764][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.777401][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.784076][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.790672][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.797291][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.803750][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.810244][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 173.582748][ T6418] 9pnet_fd: Insufficient options for proto=fd [ 173.643773][ T6430] fuse: Bad value for 'rootmode' [ 173.687133][ T6442] overlayfs: failed to clone upperpath [ 174.253839][ T6460] netlink: 'syz.4.2004': attribute type 4 has an invalid length. [ 174.281646][ T6470] netlink: 'syz.4.2007': attribute type 4 has an invalid length. [ 174.301317][ T6473] 9pnet_fd: Insufficient options for proto=fd [ 175.076094][ T6521] x_tables: duplicate underflow at hook 1 [ 175.946971][ T6565] 2N: renamed from vcan0 (while UP) [ 176.103351][ T771] bridge0: port 3(syz_tun) entered disabled state [ 176.118943][ T771] syz_tun (unregistering): left allmulticast mode [ 176.125581][ T36] audit: type=1400 audit(1757046366.779:15332): avc: denied { map } for pid=6572 comm="syz.6.2040" path="/proc/sys/net/ipv4/tcp_rmem" dev="proc" ino=34160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 176.128452][ T771] syz_tun (unregistering): left promiscuous mode [ 176.156625][ T771] bridge0: port 3(syz_tun) entered disabled state [ 176.177308][ T6567] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.184386][ T6567] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.191461][ T6567] bridge_slave_0: entered allmulticast mode [ 176.198051][ T6567] bridge_slave_0: entered promiscuous mode [ 176.204498][ T6567] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.211528][ T6567] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.218606][ T6567] bridge_slave_1: entered allmulticast mode [ 176.224833][ T6567] bridge_slave_1: entered promiscuous mode [ 176.296698][ T6567] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.303907][ T6567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.309849][ T36] audit: type=1400 audit(1757046366.948:15333): avc: denied { accept } for pid=6599 comm="syz.5.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 176.311233][ T6567] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.338261][ T6567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.364151][ T2001] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.371657][ T2001] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.381702][ T1989] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.388779][ T1989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.398066][ T2001] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.405138][ T2001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.431196][ T6567] veth0_vlan: entered promiscuous mode [ 176.442330][ T6567] veth1_macvtap: entered promiscuous mode [ 176.516612][ T6622] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2052'. [ 176.525737][ T6622] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2052'. [ 176.534754][ T6622] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2052'. [ 176.616723][ T6641] overlayfs: failed to clone upperpath [ 176.728275][ T477] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 176.900171][ T477] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 176.908282][ T477] usb 2-1: config 1 has no interface number 0 [ 176.914613][ T477] usb 2-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 176.925547][ T477] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 176.935744][ T477] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 176.948133][ T477] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 176.957474][ T477] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.965771][ T477] usb 2-1: Product: syz [ 176.970010][ T477] usb 2-1: Manufacturer: syz [ 176.974841][ T477] usb 2-1: SerialNumber: syz [ 176.980825][ T6607] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 176.988405][ T6607] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 177.066111][ T6653] tipc: Cannot configure node identity twice [ 177.082391][ T6656] 9pnet_fd: Insufficient options for proto=fd [ 177.098342][ T6659] overlayfs: failed to clone upperpath [ 177.148527][ T6668] 9pnet_fd: Insufficient options for proto=fd [ 177.211767][ T6683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.221062][ T6683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.234868][ T477] usb 2-1: USB disconnect, device number 23 [ 177.563512][ T6735] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:27 [ 177.564074][ T6735] rust_binder: Read failure Err(EFAULT) in pid:27 [ 177.573645][ T6735] rust_binder: Write failure EFAULT in pid:27 [ 177.593043][ T6740] binder: Bad value for 'max' [ 177.641719][ T1993] erspan0: left allmulticast mode [ 177.646806][ T1993] erspan0: left promiscuous mode [ 177.652049][ T1993] bridge0: port 4(erspan0) entered disabled state [ 177.659232][ T1993] bridge_slave_1: left allmulticast mode [ 177.664898][ T1993] bridge_slave_1: left promiscuous mode [ 177.670835][ T1993] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.678690][ T1993] bridge_slave_0: left allmulticast mode [ 177.685456][ T1993] bridge_slave_0: left promiscuous mode [ 177.691425][ T1993] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.802210][ T1993] tipc: Left network mode [ 177.807700][ T1993] veth0_vlan: left promiscuous mode [ 177.907598][ T6755] kvm: pic: non byte write [ 177.928750][ T6755] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 177.984148][ T36] audit: type=1400 audit(1757046368.518:15334): avc: denied { link } for pid=6762 comm="syz.1.2098" name="file1" dev="overlay" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 178.006749][ T36] audit: type=1400 audit(1757046368.518:15335): avc: denied { setattr } for pid=6762 comm="syz.1.2098" name="#30" dev="tmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 178.029297][ T36] audit: type=1400 audit(1757046368.518:15336): avc: denied { rename } for pid=6762 comm="syz.1.2098" name="#30" dev="tmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 178.052140][ T36] audit: type=1400 audit(1757046368.518:15337): avc: denied { write } for pid=6762 comm="syz.1.2098" name="file0" dev="tmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 178.412117][ T6768] tipc: Cannot configure node identity twice [ 178.881075][ T6790] tipc: Cannot configure node identity twice [ 178.904231][ T6793] incfs: Options parsing error. -22 [ 178.909512][ T6793] incfs: mount failed -22 [ 178.914453][ T6793] tmpfs: Unknown parameter 'noinode32' [ 179.062654][ T6815] incfs: Error accessing: ./file1. [ 179.067896][ T6815] incfs: mount failed -2 [ 179.073012][ T6815] devpts: called with bogus options [ 179.223316][ T36] audit: type=1400 audit(1757046369.677:15338): avc: denied { map } for pid=6824 comm="syz.1.2119" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 179.247885][ T36] audit: type=1400 audit(1757046369.677:15339): avc: denied { execute } for pid=6824 comm="syz.1.2119" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 179.290069][ T6827] rtc_cmos 00:00: Alarms can be up to one day in the future [ 179.363222][ T6842] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 179.371536][ T6842] rust_binder: Write failure EINVAL in pid:80 [ 179.500076][ T6846] rust_binder: 286: no such ref 2 [ 179.511310][ T6846] rust_binder: 286: no such ref 2 [ 179.530373][ T36] audit: type=1326 audit(1757046369.958:15340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6848 comm="syz.5.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265878ebe9 code=0x7ff00000 [ 179.554247][ T36] audit: type=1326 audit(1757046369.958:15341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6848 comm="syz.5.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265878ebe9 code=0x7ff00000 [ 179.578347][ T36] audit: type=1326 audit(1757046369.958:15342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6848 comm="syz.5.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265878ebe9 code=0x7ff00000 [ 179.602241][ T36] audit: type=1326 audit(1757046369.958:15343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6848 comm="syz.5.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265878ebe9 code=0x7ff00000 [ 179.730516][ T6854] SELinux: Context system_u:object_r:iptables_initrc_exec_t:s0 is not valid (left unmapped). [ 179.935055][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 179.942964][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 179.950725][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 179.958488][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 179.965883][ T31] rtc rtc0: __rtc_set_alarm: err=-22 [ 181.701003][ T6929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2154'. [ 181.725963][ T6938] /dev/loop0: Can't lookup blockdev [ 181.808911][ T31] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 181.970312][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.982674][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.991744][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.999761][ T31] usb 2-1: Product: syz [ 182.004523][ T31] usb 2-1: Manufacturer: syz [ 182.009147][ T31] usb 2-1: SerialNumber: syz [ 182.016513][ T31] cdc_ncm 2-1:1.0: skipping garbage [ 182.021795][ T31] cdc_ncm 2-1:1.0: skipping garbage [ 182.027526][ T31] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 182.034342][ T31] cdc_ncm 2-1:1.0: bind() failure [ 182.040283][ T31] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 182.047164][ T31] cdc_ncm 2-1:1.1: bind() failure [ 182.293155][ T6958] netlink: 'syz.4.2165': attribute type 4 has an invalid length. [ 182.998204][ T6975] rust_binder: 299: no such ref 2 [ 183.003272][ T6975] rust_binder: Read failure Err(EAGAIN) in pid:299 [ 183.003567][ T6975] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 183.357859][ T36] kauditd_printk_skb: 18557 callbacks suppressed [ 183.357880][ T36] audit: type=1400 audit(1757046373.539:33901): avc: denied { create } for pid=6986 comm="syz.5.2176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 183.398836][ T6992] netlink: 'syz.5.2178': attribute type 16 has an invalid length. [ 183.406731][ T6992] netlink: 'syz.5.2178': attribute type 3 has an invalid length. [ 183.414514][ T6992] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.2178'. [ 183.518399][ T7004] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2183'. [ 183.559476][ T36] audit: type=1326 audit(1757046373.726:33902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.6.2184" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcce4d8ebe9 code=0x0 [ 183.601295][ T7011] syz.5.2185: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0 [ 183.616819][ T7011] CPU: 1 UID: 0 PID: 7011 Comm: syz.5.2185 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 183.616851][ T7011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 183.616869][ T7011] Call Trace: [ 183.616877][ T7011] [ 183.616886][ T7011] __dump_stack+0x21/0x30 [ 183.616945][ T7011] dump_stack_lvl+0x10c/0x190 [ 183.616969][ T7011] ? __cfi_dump_stack_lvl+0x10/0x10 [ 183.616996][ T7011] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 183.617026][ T7011] dump_stack+0x19/0x20 [ 183.617050][ T7011] warn_alloc+0x1bc/0x2a0 [ 183.617074][ T7011] ? stack_depot_save_flags+0x38/0x800 [ 183.617094][ T7011] ? __cfi_warn_alloc+0x10/0x10 [ 183.617118][ T7011] ? kasan_save_track+0x4f/0x80 [ 183.617136][ T7011] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 183.617163][ T7011] ? xskq_create+0x68/0x2a0 [ 183.617181][ T7011] ? xsk_init_queue+0xb6/0x120 [ 183.617197][ T7011] ? xsk_setsockopt+0x43f/0x6f0 [ 183.617214][ T7011] ? do_sock_setsockopt+0x26d/0x400 [ 183.617231][ T7011] ? __x64_sys_setsockopt+0x1b8/0x250 [ 183.617250][ T7011] ? x64_sys_call+0x2adc/0x2ee0 [ 183.617277][ T7011] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 183.617299][ T7011] __vmalloc_node_range_noprof+0x135/0x1420 [ 183.617329][ T7011] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 183.617354][ T7011] ? avc_has_perm+0x144/0x220 [ 183.617379][ T7011] ? kasan_save_alloc_info+0x40/0x50 [ 183.617404][ T7011] ? __kasan_kmalloc+0x96/0xb0 [ 183.617424][ T7011] vmalloc_user_noprof+0x77/0x90 [ 183.617448][ T7011] ? xskq_create+0xdb/0x2a0 [ 183.617466][ T7011] xskq_create+0xdb/0x2a0 [ 183.617485][ T7011] xsk_init_queue+0xb6/0x120 [ 183.617504][ T7011] xsk_setsockopt+0x43f/0x6f0 [ 183.617522][ T7011] ? __cfi_xsk_setsockopt+0x10/0x10 [ 183.617539][ T7011] ? do_futex+0x309/0x500 [ 183.617560][ T7011] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 183.617583][ T7011] ? security_socket_setsockopt+0x33/0xd0 [ 183.617601][ T7011] ? __cfi_xsk_setsockopt+0x10/0x10 [ 183.617619][ T7011] do_sock_setsockopt+0x26d/0x400 [ 183.617637][ T7011] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 183.617660][ T7011] __x64_sys_setsockopt+0x1b8/0x250 [ 183.617679][ T7011] x64_sys_call+0x2adc/0x2ee0 [ 183.617706][ T7011] do_syscall_64+0x58/0xf0 [ 183.617731][ T7011] ? clear_bhb_loop+0x50/0xa0 [ 183.617753][ T7011] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 183.617774][ T7011] RIP: 0033:0x7f265878ebe9 [ 183.617793][ T7011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.617810][ T7011] RSP: 002b:00007f26571e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 183.617831][ T7011] RAX: ffffffffffffffda RBX: 00007f26589c5fa0 RCX: 00007f265878ebe9 [ 183.617846][ T7011] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 183.617857][ T7011] RBP: 00007f2658811e19 R08: 0000000000000004 R09: 0000000000000000 [ 183.617870][ T7011] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.617883][ T7011] R13: 00007f26589c6038 R14: 00007f26589c5fa0 R15: 00007ffd1ada0e88 [ 183.617906][ T7011] [ 183.617917][ T7011] Mem-Info: [ 183.624725][ T36] audit: type=1400 audit(1757046373.791:33903): avc: denied { create } for pid=7007 comm="syz.6.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 183.637671][ T7016] overlayfs: failed to clone lowerpath [ 183.640017][ T7013] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7013 comm=syz.6.2184 [ 183.642885][ T7011] active_anon:22867 inactive_anon:2 isolated_anon:0 [ 183.642885][ T7011] active_file:22044 inactive_file:2258 isolated_file:0 [ 183.642885][ T7011] unevictable:0 dirty:32 writeback:2 [ 183.642885][ T7011] slab_reclaimable:4402 slab_unreclaimable:78378 [ 183.642885][ T7011] mapped:30336 shmem:16599 pagetables:1288 [ 183.642885][ T7011] sec_pagetables:0 bounce:0 [ 183.642885][ T7011] kernel_misc_reclaimable:0 [ 183.642885][ T7011] free:1399755 free_pcp:2145 free_cma:0 [ 184.003274][ T7011] Node 0 active_anon:91492kB inactive_anon:8kB active_file:88176kB inactive_file:9032kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125472kB dirty:128kB writeback:8kB shmem:66396kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:6612kB pagetables:5116kB sec_pagetables:0kB all_unreclaimable? no [ 184.035832][ T7011] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965948kB mlocked:0kB bounce:0kB free_pcp:5736kB local_pcp:68kB free_cma:0kB [ 184.068173][ T7011] lowmem_reserve[]: 0 3921 3921 [ 184.073450][ T7011] Normal free:2636428kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:91548kB inactive_anon:8kB active_file:88176kB inactive_file:9032kB unevictable:0kB writepending:128kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:5104kB local_pcp:1912kB free_cma:0kB [ 184.104728][ T7011] lowmem_reserve[]: 0 0 0 [ 184.109205][ T7011] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 184.117248][ T7034] netlink: 'syz.1.2146': attribute type 4 has an invalid length. [ 184.128336][ T7011] Normal: 2296*4kB (UE) 1204*8kB (UME) 1066*16kB (UME) 433*32kB (UME) 243*64kB (UME) 84*128kB (UME) 46*256kB (UME) 26*512kB (UME) 21*1024kB (UME) 12*2048kB (UM) 608*4096kB (UM) = 2637568kB [ 184.160587][ T7011] 41203 total pagecache pages [ 184.169023][ T7011] 6 pages in swap cache [ 184.177814][ T7011] Free swap = 124440kB [ 184.185393][ T7011] Total swap = 124996kB [ 184.191013][ T7011] 2097051 pages RAM [ 184.197374][ T7011] 0 pages HighMem/MovableOnly [ 184.203318][ T7011] 351534 pages reserved [ 184.209844][ T7011] 0 pages cma reserved [ 184.216903][ T7011] Memory allocations: [ 184.220943][ T7011] 0 B 0 init/main.c:1370 func:do_initcalls [ 184.228448][ T7011] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 184.236574][ T7011] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 184.244510][ T7011] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 184.252837][ T7011] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 184.261175][ T7011] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 184.269963][ T7011] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 184.277981][ T7011] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 184.286181][ T7011] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 184.294338][ T7011] 0 B 0 init/initramfs.c:101 func:find_link [ 184.479535][ T7059] 2N: renamed from vcan0 (while UP) [ 184.479632][ T36] audit: type=1400 audit(1757046374.586:33904): avc: denied { getattr } for pid=7058 comm="syz.6.2202" path="cgroup:[4026532469]" dev="nsfs" ino=4026532469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 184.518527][ T36] audit: type=1400 audit(1757046374.623:33905): avc: denied { map } for pid=7058 comm="syz.6.2202" path="socket:[35584]" dev="sockfs" ino=35584 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 184.623958][ T36] audit: type=1326 audit(1757046374.726:33906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7060 comm="syz.6.2203" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcce4d8ebe9 code=0x0 [ 184.962293][ T36] audit: type=1326 audit(1757046375.034:33907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7090 comm="syz.5.2213" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f265878ebe9 code=0x0 [ 185.320607][ T404] usb 2-1: USB disconnect, device number 24 [ 185.513021][ T7110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 185.513557][ T7112] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 185.520182][ T7111] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:309 [ 185.809369][ T404] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 185.959117][ T404] usb 2-1: device descriptor read/64, error -71 [ 186.215824][ T404] usb 2-1: device descriptor read/64, error -71 [ 186.444952][ T7133] rust_binder: 317: no such ref 1 [ 186.472532][ T404] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 186.500023][ T7134] rust_binder: 7133 RLIMIT_NICE not set [ 186.611666][ T404] usb 2-1: device descriptor read/64, error -71 [ 186.879044][ T404] usb 2-1: device descriptor read/64, error -71 [ 186.996761][ T404] usb usb2-port1: attempt power cycle [ 187.361045][ T404] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 187.382748][ T404] usb 2-1: device descriptor read/8, error -71 [ 187.522353][ T404] usb 2-1: device descriptor read/8, error -71 [ 187.777548][ T404] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 187.800041][ T404] usb 2-1: device descriptor read/8, error -71 [ 187.875318][ T7159] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2239'. [ 187.939460][ T404] usb 2-1: device descriptor read/8, error -71 [ 188.055728][ T404] usb usb2-port1: unable to enumerate USB device [ 188.164648][ T7178] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2244'. [ 188.188038][ T7181] 9pnet_fd: Insufficient options for proto=fd [ 188.219768][ T7192] fuse: Bad value for 'group_id' [ 188.225497][ T7192] fuse: Bad value for 'group_id' [ 188.226754][ T36] audit: type=1400 audit(1757046378.091:33908): avc: denied { relabelfrom } for pid=7191 comm="syz.4.2249" name="" dev="pipefs" ino=35819 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 188.230767][ T7192] fuse: Bad value for 'group_id' [ 188.262293][ T7192] fuse: Bad value for 'group_id' [ 188.266547][ T7199] overlayfs: failed to clone upperpath [ 188.269685][ T7192] fuse: Bad value for 'group_id' [ 188.283713][ T7192] fuse: Bad value for 'group_id' [ 188.289151][ T7192] fuse: Bad value for 'group_id' [ 188.294256][ T7192] fuse: Bad value for 'group_id' [ 188.299414][ T7192] fuse: Bad value for 'group_id' [ 188.304598][ T7192] fuse: Bad value for 'group_id' [ 188.312231][ T7192] fuse: Bad value for 'group_id' [ 188.317454][ T7192] fuse: Bad value for 'group_id' [ 188.322578][ T7192] fuse: Bad value for 'group_id' [ 188.332417][ T7192] fuse: Bad value for 'group_id' [ 188.337675][ T7192] fuse: Bad value for 'group_id' [ 188.342625][ T7192] fuse: Bad value for 'group_id' [ 188.347926][ T7192] fuse: Bad value for 'group_id' [ 188.352880][ T7192] fuse: Bad value for 'group_id' [ 188.358215][ T7192] fuse: Bad value for 'group_id' [ 188.363370][ T7192] fuse: Bad value for 'group_id' [ 188.368485][ T7192] fuse: Bad value for 'group_id' [ 188.373447][ T7192] fuse: Bad value for 'group_id' [ 188.378527][ T7192] fuse: Bad value for 'group_id' [ 188.383463][ T7192] fuse: Bad value for 'group_id' [ 188.389597][ T7192] fuse: Bad value for 'group_id' [ 188.394567][ T7192] fuse: Bad value for 'group_id' [ 188.399759][ T7192] fuse: Bad value for 'group_id' [ 188.404753][ T7192] fuse: Bad value for 'group_id' [ 188.409875][ T7192] fuse: Bad value for 'group_id' [ 188.414896][ T7192] fuse: Bad value for 'group_id' [ 188.420121][ T7192] fuse: Bad value for 'group_id' [ 188.425186][ T7192] fuse: Bad value for 'group_id' [ 188.430250][ T7192] fuse: Bad value for 'group_id' [ 188.435215][ T7192] fuse: Bad value for 'group_id' [ 188.440559][ T7192] fuse: Bad value for 'group_id' [ 188.445535][ T7192] fuse: Bad value for 'group_id' [ 188.450568][ T7192] fuse: Bad value for 'group_id' [ 188.455533][ T7192] fuse: Bad value for 'group_id' [ 188.460661][ T7192] fuse: Bad value for 'group_id' [ 188.465684][ T7192] fuse: Bad value for 'group_id' [ 188.470750][ T7192] fuse: Bad value for 'group_id' [ 188.475739][ T7192] fuse: Bad value for 'group_id' [ 188.480763][ T7192] fuse: Bad value for 'group_id' [ 188.485724][ T7192] fuse: Bad value for 'group_id' [ 188.490737][ T7192] fuse: Bad value for 'group_id' [ 188.495705][ T7192] fuse: Bad value for 'group_id' [ 188.500760][ T7192] fuse: Bad value for 'group_id' [ 188.505722][ T7192] fuse: Bad value for 'group_id' [ 188.510748][ T7192] fuse: Bad value for 'group_id' [ 188.515711][ T7192] fuse: Bad value for 'group_id' [ 188.520801][ T7192] fuse: Bad value for 'group_id' [ 188.525745][ T7192] fuse: Bad value for 'group_id' [ 188.530822][ T7192] fuse: Bad value for 'group_id' [ 188.535772][ T7192] fuse: Bad value for 'group_id' [ 188.540880][ T7192] fuse: Bad value for 'group_id' [ 188.545850][ T7192] fuse: Bad value for 'group_id' [ 188.550923][ T7192] fuse: Bad value for 'group_id' [ 188.555900][ T7192] fuse: Bad value for 'group_id' [ 188.561003][ T7192] fuse: Bad value for 'group_id' [ 188.565950][ T7192] fuse: Bad value for 'group_id' [ 188.571031][ T7192] fuse: Bad value for 'group_id' [ 188.576086][ T7192] fuse: Bad value for 'group_id' [ 188.581160][ T7192] fuse: Bad value for 'group_id' [ 188.586105][ T7192] fuse: Bad value for 'group_id' [ 188.591688][ T7192] fuse: Bad value for 'group_id' [ 188.596742][ T7192] fuse: Bad value for 'group_id' [ 188.602032][ T7192] fuse: Bad value for 'group_id' [ 188.607029][ T7192] fuse: Bad value for 'group_id' [ 188.612159][ T7192] fuse: Bad value for 'group_id' [ 188.617182][ T7192] fuse: Bad value for 'group_id' [ 188.622289][ T7192] fuse: Bad value for 'group_id' [ 188.627315][ T7192] fuse: Bad value for 'group_id' [ 188.632389][ T7192] fuse: Bad value for 'group_id' [ 188.637357][ T7192] fuse: Bad value for 'group_id' [ 188.642367][ T7192] fuse: Bad value for 'group_id' [ 188.647353][ T7192] fuse: Bad value for 'group_id' [ 188.652402][ T7192] fuse: Bad value for 'group_id' [ 188.657359][ T7192] fuse: Bad value for 'group_id' [ 188.662378][ T7192] fuse: Bad value for 'group_id' [ 188.667353][ T7192] fuse: Bad value for 'group_id' [ 188.672389][ T7192] fuse: Bad value for 'group_id' [ 188.677400][ T7192] fuse: Bad value for 'group_id' [ 188.682495][ T7192] fuse: Bad value for 'group_id' [ 188.687502][ T7192] fuse: Bad value for 'group_id' [ 188.692572][ T7192] fuse: Bad value for 'group_id' [ 188.697549][ T7192] fuse: Bad value for 'group_id' [ 188.702606][ T7192] fuse: Bad value for 'group_id' [ 188.707563][ T7192] fuse: Bad value for 'group_id' [ 188.712930][ T7192] fuse: Bad value for 'group_id' [ 188.717939][ T7192] fuse: Bad value for 'group_id' [ 188.723033][ T7192] fuse: Bad value for 'group_id' [ 188.728018][ T7192] fuse: Bad value for 'group_id' [ 188.733150][ T7192] fuse: Bad value for 'group_id' [ 188.738101][ T7192] fuse: Bad value for 'group_id' [ 188.743190][ T7192] fuse: Bad value for 'group_id' [ 188.748137][ T7192] fuse: Bad value for 'group_id' [ 188.753244][ T7192] fuse: Bad value for 'group_id' [ 188.758202][ T7192] fuse: Bad value for 'group_id' [ 188.763308][ T7192] fuse: Bad value for 'group_id' [ 188.768433][ T7192] fuse: Bad value for 'group_id' [ 188.773500][ T7192] fuse: Bad value for 'group_id' [ 188.778450][ T7192] fuse: Bad value for 'group_id' [ 188.783526][ T7192] fuse: Bad value for 'group_id' [ 188.788566][ T7192] fuse: Bad value for 'group_id' [ 188.793664][ T7192] fuse: Bad value for 'group_id' [ 188.798617][ T7192] fuse: Bad value for 'group_id' [ 188.803682][ T7192] fuse: Bad value for 'group_id' [ 188.808735][ T7192] fuse: Bad value for 'group_id' [ 188.813788][ T7192] fuse: Bad value for 'group_id' [ 188.819187][ T7192] fuse: Bad value for 'group_id' [ 188.824357][ T7192] fuse: Bad value for 'group_id' [ 188.829459][ T7192] fuse: Bad value for 'group_id' [ 188.834626][ T7192] fuse: Bad value for 'group_id' [ 188.839826][ T7192] fuse: Bad value for 'group_id' [ 188.842916][ T7214] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 188.844941][ T7192] fuse: Bad value for 'group_id' [ 188.857781][ T7192] fuse: Bad value for 'group_id' [ 188.862923][ T7192] fuse: Bad value for 'group_id' [ 188.867882][ T7192] fuse: Bad value for 'group_id' [ 188.872980][ T7192] fuse: Bad value for 'group_id' [ 188.877930][ T7192] fuse: Bad value for 'group_id' [ 188.883009][ T7192] fuse: Bad value for 'group_id' [ 188.887961][ T7192] fuse: Bad value for 'group_id' [ 188.893028][ T7192] fuse: Bad value for 'group_id' [ 188.897992][ T7192] fuse: Bad value for 'group_id' [ 188.903076][ T7192] fuse: Bad value for 'group_id' [ 188.908018][ T7192] fuse: Bad value for 'group_id' [ 188.913099][ T7192] fuse: Bad value for 'group_id' [ 188.918045][ T7192] fuse: Bad value for 'group_id' [ 188.923148][ T7192] fuse: Bad value for 'group_id' [ 188.928108][ T7192] fuse: Bad value for 'group_id' [ 189.045295][ T7224] overlayfs: missing 'lowerdir' [ 189.056465][ T36] audit: type=1400 audit(1757046378.867:33909): avc: denied { mounton } for pid=7223 comm="syz.4.2260" path="/file0" dev="rootfs" ino=28385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 189.186342][ T36] audit: type=1326 audit(1757046378.989:33910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7202 comm="syz.5.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265878ebe9 code=0x7fc00000 [ 189.315670][ T7267] fuse: Bad value for 'user_id' [ 189.320696][ T7267] fuse: Bad value for 'user_id' [ 189.365684][ T36] audit: type=1400 audit(1757046379.157:33911): avc: denied { create } for pid=7272 comm="syz.4.2275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 189.417635][ T7279] fuse: Unknown parameter 'rogtmode' [ 189.417727][ T7280] fuse: Unknown parameter 'rogtmode' [ 189.629683][ T7285] rust_binder: Failed to allocate buffer. len:216, is_oneway:false [ 189.645934][ T7287] support for cryptoloop has been removed. Use dm-crypt instead. [ 189.891418][ T7291] overlayfs: missing 'lowerdir' [ 189.927544][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 190.089111][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.098972][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 190.108017][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.116682][ T10] usb 2-1: config 0 descriptor?? [ 190.336466][ T7289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.345228][ T7289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.353319][ T7289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.361989][ T7289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.370233][ T7289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.378797][ T7289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.386883][ T7289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.395628][ T7289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.403829][ T7289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.412440][ T7289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.429839][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 190.436081][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 190.445331][ T10] usb 2-1: USB disconnect, device number 29 [ 190.757353][ T7337] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2297'. [ 190.890214][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 191.050653][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 191.056879][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.067038][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 191.077358][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 191.086545][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.094579][ T10] usb 2-1: Product: syz [ 191.098740][ T10] usb 2-1: Manufacturer: syz [ 191.103320][ T10] usb 2-1: SerialNumber: syz [ 191.538914][ T10] usb 2-1: 0:2 : does not exist [ 191.638079][ T7388] 9pnet_fd: Insufficient options for proto=fd [ 191.698538][ T7395] 9pnet_fd: Insufficient options for proto=fd [ 192.415209][ T7414] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2320'. [ 192.424298][ T7414] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2320'. [ 192.433518][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2320'. [ 192.507308][ T36] audit: type=1400 audit(1757046382.093:33912): avc: denied { setopt } for pid=7306 comm="syz.1.2289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 193.759377][ T10] usb 2-1: USB disconnect, device number 30 [ 194.131302][ T10] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 194.294745][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 194.307291][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.320706][ T7435] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2328'. [ 194.329852][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 194.341066][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.350072][ T10] usb 2-1: config 0 descriptor?? [ 194.355512][ T7433] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 194.581203][ T7433] usb usb8: usbfs: process 7433 (syz.1.2327) did not claim interface 0 before use [ 194.812717][ T10] playstation 0003:054C:0BA0.000B: hidraw0: USB HID v1.01 Device [HID 054c:0ba0] on usb-dummy_hcd.1-1/input0 [ 194.922600][ T36] audit: type=1326 audit(1757046384.346:33913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7393 comm="syz.4.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbc6792adb9 code=0x7fc00000 [ 194.948404][ T7442] netlink: 'syz.5.2330': attribute type 4 has an invalid length. [ 194.982842][ T7448] mmap: syz.4.2333 (7448): VmData 29335552 exceed data ulimit 68. Update limits or use boot option ignore_rlimit_data. [ 194.996332][ T7450] fuse: Bad value for 'fd' [ 195.023126][ T10] playstation 0003:054C:0BA0.000B: Invalid reportID received, expected 18 got 64 [ 195.037511][ T10] playstation 0003:054C:0BA0.000B: Failed to retrieve DualShock4 pairing info: -22 [ 195.057436][ T10] playstation 0003:054C:0BA0.000B: Failed to get MAC address from DualShock4 [ 195.077097][ T10] playstation 0003:054C:0BA0.000B: Failed to create dualshock4. [ 195.096418][ T10] playstation 0003:054C:0BA0.000B: probe with driver playstation failed with error -22 [ 195.243284][ T10] usb 2-1: USB disconnect, device number 31 [ 195.253197][ T1993] erspan0: left allmulticast mode [ 195.258556][ T1993] erspan0: left promiscuous mode [ 195.270052][ T1993] bridge0: port 3(erspan0) entered disabled state [ 195.277373][ T1993] bridge_slave_1: left allmulticast mode [ 195.283078][ T1993] bridge_slave_1: left promiscuous mode [ 195.288996][ T1993] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.296649][ T1993] bridge_slave_0: left allmulticast mode [ 195.302777][ T1993] bridge_slave_0: left promiscuous mode [ 195.309109][ T1993] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.341138][ T1993] bridge0 (unregistering): left allmulticast mode [ 195.395897][ T7471] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.403150][ T7471] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.410814][ T7471] bridge_slave_0: entered allmulticast mode [ 195.419738][ T7471] bridge_slave_0: entered promiscuous mode [ 195.429957][ T1993] tipc: Left network mode [ 195.435591][ T1993] veth1_macvtap: left promiscuous mode [ 195.442030][ T1993] veth0_vlan: left promiscuous mode [ 195.505319][ T7471] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.513054][ T7471] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.520310][ T7471] bridge_slave_1: entered allmulticast mode [ 195.527356][ T7471] bridge_slave_1: entered promiscuous mode [ 195.578447][ T7477] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2342'. [ 195.618030][ T7471] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.625159][ T7471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.632473][ T7471] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.639533][ T7471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.665431][ T1989] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.673731][ T1989] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.694552][ T1990] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.701630][ T1990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.726114][ T1989] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.733202][ T1989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.788346][ T7471] veth0_vlan: entered promiscuous mode [ 195.833088][ T7471] veth1_macvtap: entered promiscuous mode [ 195.867793][ T7500] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 195.875638][ T7500] rust_binder: 340: no such ref 1 [ 196.022922][ T7520] binder: Unknown parameter 'hazytime' [ 196.131543][ T477] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 196.153306][ T36] audit: type=1400 audit(1757046385.505:33914): avc: denied { setattr } for pid=7526 comm="syz.4.2354" name="NETLINK" dev="sockfs" ino=37248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 196.292007][ T477] usb 2-1: Using ep0 maxpacket: 32 [ 196.297573][ T477] usb 2-1: too many configurations: 143, using maximum allowed: 8 [ 196.306514][ T477] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 196.314172][ T477] usb 2-1: can't read configurations, error -61 [ 196.420350][ T31] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 196.452432][ T477] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 196.581785][ T31] usb 5-1: config 0 has an invalid interface number: 23 but max is 0 [ 196.589899][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.600092][ T31] usb 5-1: config 0 has no interface number 0 [ 196.606262][ T31] usb 5-1: config 0 interface 23 altsetting 0 endpoint 0x9 has an invalid bInterval 255, changing to 7 [ 196.617379][ T31] usb 5-1: config 0 interface 23 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.631662][ T31] usb 5-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 196.640817][ T477] usb 2-1: Using ep0 maxpacket: 32 [ 196.646005][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.654007][ T31] usb 5-1: Product: syz [ 196.658559][ T31] usb 5-1: Manufacturer: syz [ 196.663239][ T477] usb 2-1: too many configurations: 143, using maximum allowed: 8 [ 196.671155][ T31] usb 5-1: SerialNumber: syz [ 196.676678][ T477] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 196.684563][ T31] usb 5-1: config 0 descriptor?? [ 196.689669][ T477] usb 2-1: can't read configurations, error -61 [ 196.696064][ T477] usb usb2-port1: attempt power cycle [ 196.702071][ T31] ums-usbat 5-1:0.23: USB Mass Storage device detected [ 197.072837][ T477] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 197.094571][ T477] usb 2-1: Using ep0 maxpacket: 32 [ 197.100106][ T477] usb 2-1: too many configurations: 143, using maximum allowed: 8 [ 197.109030][ T477] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 197.116652][ T477] usb 2-1: can't read configurations, error -61 [ 197.233326][ T7541] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2359'. [ 197.255040][ T477] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 197.276433][ T477] usb 2-1: Using ep0 maxpacket: 32 [ 197.287359][ T477] usb 2-1: too many configurations: 143, using maximum allowed: 8 [ 197.296575][ T477] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 197.304506][ T477] usb 2-1: can't read configurations, error -61 [ 197.312300][ T477] usb usb2-port1: unable to enumerate USB device [ 197.930333][ T7556] /dev/loop0: Can't lookup blockdev [ 199.099887][ T7578] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2373'. [ 199.318427][ T477] usb 5-1: USB disconnect, device number 13 [ 199.350883][ T7588] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 199.350919][ T7588] rust_binder: Read failure Err(EFAULT) in pid:16 [ 199.396700][ T7595] /dev/rnullb0: Can't open blockdev [ 199.424417][ T36] audit: type=1400 audit(1757046388.553:33915): avc: denied { mounton } for pid=7598 comm="syz.4.2381" path="/8/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 199.459051][ T36] audit: type=1400 audit(1757046388.599:33916): avc: denied { unmount } for pid=7471 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 199.472056][ T7607] rust_binder: Write failure EFAULT in pid:361 [ 199.520404][ T36] audit: type=1400 audit(1757046388.646:33917): avc: denied { setopt } for pid=7615 comm="syz.5.2388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 199.558045][ T7624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.558401][ T7624] rust_binder: Write failure EFAULT in pid:365 [ 199.574993][ T7625] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 199.586530][ T36] audit: type=1400 audit(1757046388.646:33918): avc: denied { create } for pid=7619 comm="syz.4.2389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 199.597343][ T7627] netlink: 'syz.5.2392': attribute type 13 has an invalid length. [ 199.648348][ T36] audit: type=1400 audit(1757046388.768:33919): avc: denied { bpf } for pid=7604 comm="syz.1.2383" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 199.698458][ T7644] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2396'. [ 199.726480][ T7606] input: syz1 as /devices/virtual/input/input18 [ 199.779072][ T404] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 199.927100][ T36] audit: type=1400 audit(1757046389.029:33920): avc: denied { append } for pid=7653 comm="syz.1.2399" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 199.952729][ T404] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 199.963197][ T404] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 199.972570][ T404] usb 5-1: config 220 interface 0 has no altsetting 0 [ 199.980797][ T404] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 199.989866][ T404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.997880][ T404] usb 5-1: Product: syz [ 200.002053][ T404] usb 5-1: Manufacturer: syz [ 200.006674][ T7654] __vm_enough_memory: pid: 7654, comm: syz.1.2399, bytes: 18014402804453376 not enough memory for the allocation [ 200.006849][ T404] usb 5-1: SerialNumber: syz [ 200.247786][ T404] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 200.254361][ T404] usb 5-1: No valid video chain found. [ 200.262630][ T404] usb 5-1: USB disconnect, device number 14 [ 200.277044][ T36] audit: type=1400 audit(1757046389.357:33921): avc: denied { map } for pid=7661 comm="syz.5.2405" path="socket:[37647]" dev="sockfs" ino=37647 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 200.315433][ T2001] bridge_slave_1: left allmulticast mode [ 200.321204][ T2001] bridge_slave_1: left promiscuous mode [ 200.326973][ T2001] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.335218][ T2001] bridge_slave_0: left allmulticast mode [ 200.341193][ T2001] bridge_slave_0: left promiscuous mode [ 200.346979][ T2001] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.426609][ T7668] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7668 comm=syz.5.2407 [ 200.505939][ T2001] veth1_macvtap: left promiscuous mode [ 200.511770][ T2001] veth0_vlan: left promiscuous mode [ 200.576348][ T7665] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.583708][ T7665] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.590770][ T7665] bridge_slave_0: entered allmulticast mode [ 200.597183][ T7665] bridge_slave_0: entered promiscuous mode [ 200.603801][ T7665] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.610863][ T7665] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.618126][ T7665] bridge_slave_1: entered allmulticast mode [ 200.624631][ T7665] bridge_slave_1: entered promiscuous mode [ 200.676603][ T7665] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.683778][ T7665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.691095][ T7665] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.698124][ T7665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.718703][ T1993] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.726693][ T1993] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.736286][ T1989] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.743375][ T1989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.753585][ T1989] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.760633][ T1989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.785766][ T7665] veth0_vlan: entered promiscuous mode [ 200.798501][ T7665] veth1_macvtap: entered promiscuous mode [ 200.827425][ T7686] can0: slcan on ptm1. [ 200.835556][ T7686] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2410'. [ 200.992807][ T7685] can0 (unregistered): slcan off ptm1. [ 201.018705][ T7717] loop7: detected capacity change from 0 to 7 [ 201.080823][ T7721] overlay: ./file0 is not a directory [ 201.483771][ T7742] netlink: 'syz.4.2417': attribute type 4 has an invalid length. [ 201.839464][ T36] audit: type=1400 audit(1757046390.815:33922): avc: denied { setattr } for pid=7753 comm="syz.4.2421" name="udp" dev="proc" ino=4026532411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 201.874796][ T36] audit: type=1400 audit(1757046390.843:33923): avc: denied { setattr } for pid=7755 comm="syz.4.2422" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 203.001151][ T7776] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 203.270101][ T7811] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2440'. [ 203.542370][ T7847] rust_binder: Error while translating object. [ 203.542414][ T7847] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 203.548687][ T7847] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:81 [ 203.696569][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2454'. [ 203.791111][ T7861] binder: Bad value for 'max' [ 203.807852][ T7863] rust_binder: Write failure EFAULT in pid:97 [ 203.820164][ T36] audit: type=1400 audit(1757046392.666:33924): avc: denied { read } for pid=7864 comm="syz.4.2457" name="file0" dev="tmpfs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 203.958369][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 203.966515][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 203.974561][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 203.982575][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 203.990853][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 203.998885][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.006929][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.015113][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.023063][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.031085][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.039070][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.047081][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.055031][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.063372][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.071608][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.080176][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.088381][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.096389][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.104386][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.112499][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.120496][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.121893][ T10] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 204.136138][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.144200][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.160308][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.170502][ T7882] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2462'. [ 204.179444][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.189774][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.197859][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.205794][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.214125][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.222219][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.230711][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.238793][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.246847][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.254969][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.263018][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.279567][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.287655][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.295735][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.303713][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.311765][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.319786][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.326338][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.327879][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.338413][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.346281][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.362592][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.370793][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.372875][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 204.381911][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.403600][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.414550][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.422584][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.426455][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.430637][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.446597][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.454604][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.462223][ T10] usb 5-1: Product: syz [ 204.462684][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.478470][ T10] usb 5-1: Manufacturer: syz [ 204.483817][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.491748][ T10] usb 5-1: SerialNumber: syz [ 204.496499][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.504496][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.512622][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.520735][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.528821][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.536833][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.544904][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.552958][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.561040][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.569040][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.577078][ T7875] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.724623][ T7865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.733285][ T7865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.905453][ T7898] netlink: 'syz.7.2467': attribute type 4 has an invalid length. [ 205.169036][ T7910] netlink: 'syz.5.2472': attribute type 15 has an invalid length. [ 205.199374][ T7912] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 205.295619][ T7926] overlayfs: failed to clone upperpath [ 205.926571][ T7968] fuse: Bad value for 'fd' [ 207.056089][ T10] usb 5-1: 0:2 : does not exist [ 207.063597][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 207.075490][ T10] usb 5-1: USB disconnect, device number 15 [ 207.087448][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 207.114404][ T8025] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 207.161085][ T36] audit: type=1400 audit(1757046395.798:33925): avc: denied { setattr } for pid=8034 comm="syz.4.2516" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 208.094292][ T8061] rust_binder: pid 8061 performed invalid decrement on ref [ 208.101760][ T8061] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 208.188246][ T8068] FAT-fs (rnullb0): bogus number of reserved sectors [ 208.202729][ T8068] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 208.224520][ T36] audit: type=1400 audit(1757046396.789:33926): avc: denied { load_policy } for pid=8069 comm="syz.4.2528" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 208.224537][ T8070] SELinux: policydb version -2117783179 does not match my version range 15-33 [ 208.224570][ T8070] SELinux: failed to load policy [ 208.262267][ T36] audit: type=1400 audit(1757046396.826:33927): avc: denied { setattr } for pid=8069 comm="syz.4.2528" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 208.278429][ T8072] rust_binder: 122: no such ref 0 [ 208.291212][ T8072] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 208.298519][ T8072] rust_binder: 122: no such ref 0 [ 208.316491][ T8074] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2530'. [ 208.469078][ T36] audit: type=1400 audit(1757046397.013:33928): avc: denied { create } for pid=8091 comm="syz.6.2535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 209.105959][ T8120] netlink: 'syz.6.2545': attribute type 63 has an invalid length. [ 209.113989][ T8120] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2545'. [ 209.122929][ T8120] gretap0: entered allmulticast mode [ 209.128761][ T8120] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 209.476052][ T36] audit: type=1400 audit(1757046397.958:33929): avc: denied { open } for pid=8127 comm="syz.4.2548" path="/47/file0" dev="tmpfs" ino=273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 210.423891][ T8171] tipc: Enabling of bearer rejected, failed to enable media [ 210.433069][ T8171] tipc: Can't bind to reserved service type 3 [ 211.380588][ T8187] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2568'. [ 211.390511][ T8187] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 211.398634][ T8187] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 211.398663][ T8187] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:155 [ 211.639530][ T8208] usb usb8: usbfs: process 8208 (syz.4.2574) did not claim interface 0 before use [ 211.930421][ T404] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 212.091896][ T404] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 212.100183][ T404] usb 5-1: config 0 has no interface number 1 [ 212.106297][ T404] usb 5-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 212.116174][ T404] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 212.127633][ T404] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 212.136712][ T404] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 212.144733][ T404] usb 5-1: SerialNumber: syz [ 212.149931][ T404] usb 5-1: config 0 descriptor?? [ 212.371259][ T404] usb 5-1: Found UVC 0.00 device (0002:0000) [ 212.378212][ T404] usb 5-1: No valid video chain found. [ 212.385348][ T404] usb 5-1: USB disconnect, device number 16 [ 213.147044][ T8214] input: syz1 as /devices/virtual/input/input20 [ 213.406499][ T31] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 213.545557][ T31] usb 5-1: device descriptor read/64, error -71 [ 213.802269][ T31] usb 5-1: device descriptor read/64, error -71 [ 213.831823][ T8241] fuse: Unknown parameter 'ë' [ 213.933382][ T8266] netlink: 4432 bytes leftover after parsing attributes in process `syz.6.2595'. [ 213.949650][ T8269] fuse: Unknown parameter 'h' [ 213.982914][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2597'. [ 214.059628][ T31] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 214.163894][ T8304] overlayfs: failed to clone upperpath [ 214.186353][ T8306] fuse: Bad value for 'fd' [ 214.219473][ T31] usb 5-1: device descriptor read/64, error -71 [ 214.476198][ T31] usb 5-1: device descriptor read/64, error -71 [ 214.591165][ T8338] fuseblk: Bad value for 'source' [ 214.593958][ T31] usb usb5-port1: attempt power cycle [ 214.957491][ T31] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 214.979951][ T31] usb 5-1: device descriptor read/8, error -71 [ 215.119116][ T31] usb 5-1: device descriptor read/8, error -71 [ 215.274045][ T8351] netlink: 'syz.7.2625': attribute type 13 has an invalid length. [ 215.374658][ T31] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 215.397314][ T31] usb 5-1: device descriptor read/8, error -71 [ 215.404178][ T8356] rust_binder: Write failure EFAULT in pid:74 [ 215.528373][ T36] audit: type=1326 audit(1757046403.614:33930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8358 comm="syz.7.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869e58ebe9 code=0x7ffc0000 [ 215.570918][ T31] usb 5-1: device descriptor read/8, error -71 [ 215.577253][ T36] audit: type=1326 audit(1757046403.651:33931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8358 comm="syz.7.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f869e58d550 code=0x7ffc0000 [ 215.660927][ T36] audit: type=1326 audit(1757046403.651:33932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8358 comm="syz.7.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f869e58d550 code=0x7ffc0000 [ 215.685450][ T31] usb usb5-port1: unable to enumerate USB device [ 215.706373][ T36] audit: type=1326 audit(1757046403.651:33933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8358 comm="syz.7.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869e58ebe9 code=0x7ffc0000 [ 215.746509][ T36] audit: type=1326 audit(1757046403.651:33934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8358 comm="syz.7.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f869e58ebe9 code=0x7ffc0000 [ 215.781119][ T36] audit: type=1326 audit(1757046403.651:33935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8358 comm="syz.7.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869e58ebe9 code=0x7ffc0000 [ 215.855787][ T36] audit: type=1326 audit(1757046403.651:33936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8358 comm="syz.7.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f869e58ebe9 code=0x7ffc0000 [ 215.889080][ T36] audit: type=1326 audit(1757046403.679:33937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8358 comm="syz.7.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869e58ebe9 code=0x7ffc0000 [ 215.918126][ T36] audit: type=1400 audit(1757046403.885:33938): avc: denied { map } for pid=8368 comm="syz.7.2631" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 215.979398][ T8378] veth1_macvtap: left promiscuous mode [ 215.984949][ T8378] macsec0: entered allmulticast mode [ 215.991150][ T8378] veth1_macvtap: entered promiscuous mode [ 215.996980][ T8378] veth1_macvtap: entered allmulticast mode [ 216.002856][ T8378] macsec0: left allmulticast mode [ 216.007917][ T8378] veth1_macvtap: left allmulticast mode [ 216.750208][ T8400] bridge0: entered allmulticast mode [ 216.755893][ T8400] bridge0: left allmulticast mode [ 216.950495][ T8404] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2639'. [ 217.192754][ T8411] 9pnet: Unknown protocol version 9 [ 217.198614][ T8411] overlay: ./file0 is not a directory [ 217.223108][ T8413] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2642'. [ 217.277610][ T8416] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 238) [ 217.277639][ T8416] rust_binder: Error while translating object. [ 217.289553][ T8416] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 217.295777][ T8416] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:187 [ 217.333899][ T8421] fuse: Bad value for 'user_id' [ 217.348744][ T8422] fuse: Bad value for 'user_id' [ 217.359161][ T8422] fuse: Bad value for 'user_id' [ 217.360109][ T8421] fuse: Bad value for 'user_id' [ 217.400749][ T8429] rust_binder: Error while translating object. [ 217.400787][ T8429] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 217.407917][ T8417] rust_binder: Error while translating object. [ 217.409753][ T8429] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:198 [ 217.417699][ T8417] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 217.432914][ T8417] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:102 [ 217.445706][ T8417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8417 comm=syz.7.2642 [ 217.611121][ T8435] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2649'. [ 218.122797][ T8450] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2655'. [ 218.133826][ T8450] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 218.133863][ T8450] rust_binder: Error while translating object. [ 218.143249][ T8450] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 218.149621][ T8450] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:107 [ 218.544913][ T8474] veth1: entered allmulticast mode [ 218.588989][ T8478] veth1: left allmulticast mode [ 218.605506][ T8480] EXT4-fs: dax option not supported [ 218.611196][ T8480] rust_binder: Error in use_page_slow: ESRCH [ 218.611216][ T8480] rust_binder: use_range failure ESRCH [ 218.617574][ T8480] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 218.623064][ T8480] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 218.631152][ T8480] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:213 [ 218.702715][ T31] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 218.720663][ T31] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 218.795202][ T8509] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2671'. [ 219.638815][ T36] audit: type=1400 audit(1757046407.456:33939): avc: denied { mount } for pid=8513 comm="syz.5.2673" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 219.825715][ T8528] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2677'. [ 220.085248][ T8554] rust_binder: 239: no such ref 1 [ 220.090365][ T8554] rust_binder: Write failure EFAULT in pid:239 [ 220.119616][ T8559] netlink: 'syz.6.2686': attribute type 4 has an invalid length. [ 220.924212][ T8573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 221.078384][ T8581] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 221.084892][ T8581] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:251 [ 221.106631][ T8583] netlink: 'syz.4.2694': attribute type 1 has an invalid length. [ 221.124050][ T8583] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2694'. [ 221.294544][ T8591] fuse: Invalid rootmode [ 221.309644][ T8593] netlink: 'syz.5.2699': attribute type 10 has an invalid length. [ 221.319024][ T8593] netlink: 'syz.5.2699': attribute type 10 has an invalid length. [ 221.750962][ T8610] rust_binder: Read failure Err(EAGAIN) in pid:124 [ 221.874348][ T8612] rust_binder: Error while translating object. [ 221.880978][ T8612] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 221.887163][ T8612] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:126 [ 221.896604][ T8612] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 221.905757][ T8612] rust_binder: Read failure Err(EFAULT) in pid:126 [ 221.926872][ T8618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 221.933699][ T8618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 221.940267][ T8618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 221.947024][ T8618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 221.953720][ T8618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 221.960303][ T8618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 221.967255][ T8618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 221.973782][ T8618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 221.980423][ T8618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 221.986933][ T8618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 221.993377][ T8618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.002393][ T8618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.009029][ T8618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.015567][ T8618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.022078][ T8618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.028616][ T8618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.035201][ T8618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.041744][ T8618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.048196][ T8618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.054927][ T8618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.061484][ T8618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.068027][ T8618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.074585][ T8618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.081041][ T8618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.087586][ T8618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.094045][ T8618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.100557][ T8618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.107023][ T8618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.113547][ T8618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.119992][ T8618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.126494][ T8618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.133090][ T8618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.145686][ T8621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=8621 comm=syz.5.2707 [ 222.223936][ T8636] overlayfs: conflicting options: metacopy=off,verity=require [ 222.369757][ T8646] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2714'. [ 222.776153][ T36] audit: type=1326 audit(1757046410.388:33940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8673 comm="syz.5.2725" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f265878ebe9 code=0x0 [ 222.905557][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2727'. [ 223.164037][ T8687] fuse: Unknown parameter 'roote' [ 223.220005][ T8659] overlayfs: statfs failed on './file0' [ 223.300160][ T8690] rust_binder: 137: no such ref 1 [ 223.389132][ T36] audit: type=1400 audit(1757046410.968:33941): avc: denied { watch watch_reads } for pid=8708 comm="syz.6.2735" path="/220/file0" dev="tmpfs" ino=1191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 224.145338][ T8715] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 224.145365][ T8715] rust_binder: Error while translating object. [ 224.154276][ T8715] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 224.160738][ T8715] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:141 [ 224.225753][ T8719] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 224.303128][ T36] audit: type=1400 audit(1757046411.819:33942): avc: denied { lock } for pid=8718 comm="syz.4.2740" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 224.344342][ T8733] rust_binder: 143: no such ref 1 [ 224.359438][ T8733] rust_binder: 143: no such ref 3 [ 224.377068][ T8733] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 224.386478][ T8733] rust_binder: Read failure Err(EAGAIN) in pid:143 [ 224.483728][ T36] audit: type=1400 audit(1757046411.987:33943): avc: denied { setattr } for pid=8742 comm="syz.6.2747" name="NETLINK" dev="sockfs" ino=43316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 224.529508][ T8748] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 224.540431][ T8748] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 224.575263][ T8748] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 224.600732][ T8748] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 224.670754][ T8777] netlink: 'syz.5.2758': attribute type 12 has an invalid length. [ 224.679714][ T8779] netlink: 'syz.6.2760': attribute type 4 has an invalid length. [ 224.693321][ T8779] netlink: 'syz.6.2760': attribute type 5 has an invalid length. [ 224.704687][ T8781] rust_binder: Write failure EFAULT in pid:150 [ 224.712703][ T8779] netlink: 'syz.6.2760': attribute type 1 has an invalid length. [ 224.729587][ T8777] tmpfs: Unknown parameter 'tmpfs' [ 224.847880][ T8788] netlink: 'syz.6.2763': attribute type 4 has an invalid length. [ 224.922125][ T8801] overlayfs: failed to clone upperpath [ 225.321073][ T8818] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2773'. [ 225.508890][ T36] audit: type=1326 audit(1757046412.950:33944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8827 comm="syz.4.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86de18ebe9 code=0x50000 [ 225.532239][ T36] audit: type=1326 audit(1757046412.950:33945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8827 comm="syz.4.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86de18ebe9 code=0x50000 [ 225.555647][ T36] audit: type=1326 audit(1757046412.950:33946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8827 comm="syz.4.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86de18ebe9 code=0x50000 [ 225.579037][ T36] audit: type=1326 audit(1757046412.950:33947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8827 comm="syz.4.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86de18ebe9 code=0x50000 [ 225.602362][ T36] audit: type=1326 audit(1757046412.950:33948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8827 comm="syz.4.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86de18ebe9 code=0x50000 [ 225.625652][ T36] audit: type=1326 audit(1757046412.950:33949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8827 comm="syz.4.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86de18ebe9 code=0x50000 [ 225.649818][ T8829] rust_binder: Failed copying into alloc: EFAULT [ 225.649841][ T8829] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 225.656313][ T8829] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 225.664745][ T8829] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:299 [ 225.722720][ T8831] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8831 comm=syz.5.2778 [ 226.455883][ T8860] rust_binder: Write failure EFAULT in pid:308 [ 226.851417][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 226.952062][ T8885] netlink: 'syz.5.2797': attribute type 63 has an invalid length. [ 226.959953][ T8885] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2797'. [ 227.022509][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 227.028815][ T10] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 227.037022][ T10] usb 5-1: config 0 has no interface number 0 [ 227.043120][ T10] usb 5-1: config 0 interface 214 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 227.053342][ T10] usb 5-1: config 0 interface 214 has no altsetting 0 [ 227.061689][ T10] usb 5-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 227.070783][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.078801][ T10] usb 5-1: Product: syz [ 227.082952][ T10] usb 5-1: Manufacturer: syz [ 227.087585][ T10] usb 5-1: SerialNumber: syz [ 227.092806][ T10] usb 5-1: config 0 descriptor?? [ 227.098126][ T8873] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 227.319761][ T8873] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 227.373497][ T8902] overlayfs: failed to clone upperpath [ 227.463468][ T8916] overlayfs: failed to clone upperpath [ 228.199237][ T8950] overlayfs: failed to clone upperpath [ 228.222068][ T8952] ext3: Bad value for 'dax' [ 228.486494][ T8970] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 228.495292][ T8970] overlayfs: missing 'lowerdir' [ 228.524428][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 228.536176][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 228.547433][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 228.774024][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 228.786137][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 228.797533][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 228.808893][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 228.820207][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 228.831484][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 228.842751][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 228.854027][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 228.865345][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 228.876632][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 228.887841][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 228.899160][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 228.910481][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 228.921777][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 228.933071][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 228.944485][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 228.955798][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 228.967121][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 228.978353][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 229.000613][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 229.012765][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 229.024427][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 229.037994][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 229.051554][ T10] ax88179_178a 5-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.4-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 9e:58:7b:cd:56:97 [ 229.071808][ T10] usb 5-1: USB disconnect, device number 21 [ 229.078369][ T10] ax88179_178a 5-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.4-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 229.333426][ T8988] 9pnet_fd: Insufficient options for proto=fd [ 229.518142][ T9009] fuse: Bad value for 'fd' [ 229.880015][ T9019] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 230.006110][ T9021] rust_binder: Write failure EFAULT in pid:178 [ 230.329821][ T36] kauditd_printk_skb: 64 callbacks suppressed [ 230.329841][ T36] audit: type=1326 audit(1757046417.457:34014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9035 comm="syz.6.2855" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcce4d8ebe9 code=0x0 [ 230.435043][ T9041] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 230.470029][ T9047] veth1: entered allmulticast mode [ 230.475377][ T9047] veth1: left allmulticast mode [ 230.507975][ T9053] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 230.582884][ T9064] rust_binder: 350: no such ref 1 [ 230.610768][ T36] audit: type=1400 audit(1757046417.718:34015): avc: denied { relabelfrom } for pid=9068 comm="syz.4.2865" name="NETLINK" dev="sockfs" ino=44497 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 230.636442][ T9070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2865'. [ 230.659520][ T36] audit: type=1400 audit(1757046417.747:34016): avc: denied { relabelto } for pid=9068 comm="syz.4.2865" name="NETLINK" dev="sockfs" ino=44497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 230.702567][ T9079] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:357 [ 230.704466][ T9079] veth1: entered allmulticast mode [ 230.723679][ T9078] veth1: left allmulticast mode [ 230.806196][ T9103] netlink: 'syz.4.2875': attribute type 64 has an invalid length. [ 230.820841][ T9103] rust_binder: 362: no such ref 1 [ 230.833626][ T9103] rust_binder: 362: no such ref 1 [ 230.846768][ T9103] rust_binder: 362: no such ref 1 [ 230.852971][ T9103] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:362 [ 231.081752][ T9111] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 231.316450][ T9113] tc_dump_action: action bad kind [ 231.322184][ T9113] rust_binder: Write failure EFAULT in pid:186 [ 231.382886][ T9117] tipc: New replicast peer: 255.255.255.255 [ 231.412987][ T9117] tipc: Enabled bearer , priority 10 [ 231.526188][ T36] audit: type=1400 audit(1757046418.579:34017): avc: denied { append } for pid=9118 comm="syz.7.2882" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 231.528096][ T9119] rust_binder: Write failure EFAULT in pid:190 [ 231.554752][ T36] audit: type=1400 audit(1757046418.579:34018): avc: denied { ioctl } for pid=9118 comm="syz.7.2882" path="/56/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 231.915542][ T9145] rust_binder: Failed to allocate buffer. len:10771147061988852024, is_oneway:false [ 231.915570][ T9145] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 231.925036][ T9145] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:368 [ 231.983251][ T9152] netlink: 'syz.4.2895': attribute type 63 has an invalid length. [ 232.000401][ T9152] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2895'. [ 232.235092][ T9166] rust_binder: 197: no such ref 5 [ 232.240253][ T9166] rust_binder: Write failure EINVAL in pid:197 [ 232.605443][ T477] tipc: Node number set to 1593835521 [ 232.764695][ T9180] netlink: 'syz.4.2904': attribute type 4 has an invalid length. [ 232.788847][ T9179] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2905'. [ 232.860089][ T9202] overlayfs: failed to clone upperpath [ 232.884761][ T9207] overlayfs: failed to clone upperpath [ 232.904647][ T36] audit: type=1400 audit(1757046419.860:34019): avc: denied { create } for pid=9212 comm="syz.5.2917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 233.573638][ T36] audit: type=1400 audit(1757046420.486:34020): avc: denied { setattr } for pid=9244 comm="syz.5.2929" name="RAW" dev="sockfs" ino=44875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 233.603521][ T9249] 9pnet_fd: Insufficient options for proto=fd [ 233.798289][ T9261] rust_binder: 393: no such ref 1 [ 233.803518][ T9261] rust_binder: Write failure EFAULT in pid:393 [ 233.850612][ T9263] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:395 [ 233.858658][ T9265] overlayfs: failed to clone upperpath [ 233.893203][ T9270] overlayfs: failed to resolve './bus/file0': -2 [ 233.945783][ T9278] veth0_vlan: entered allmulticast mode [ 234.082518][ T9272] 9pnet_fd: Insufficient options for proto=fd [ 234.271011][ T9296] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 234.291433][ T9301] __vm_enough_memory: pid: 9301, comm: syz.4.2949, bytes: 18014402804453376 not enough memory for the allocation [ 234.322873][ T9303] __vm_enough_memory: pid: 9303, comm: syz.4.2950, bytes: 18014402804453376 not enough memory for the allocation [ 234.541887][ T9310] overlayfs: failed to clone upperpath [ 234.804816][ T36] audit: type=1326 audit(1757046421.636:34021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9319 comm="syz.4.2956" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f86de18ebe9 code=0x0 [ 235.307120][ T9348] overlayfs: failed to clone upperpath [ 235.429657][ T36] audit: type=1400 audit(1757046422.225:34022): avc: denied { read } for pid=9362 comm="syz.5.2969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 235.429732][ T9363] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=9363 comm=syz.5.2969 [ 235.590944][ T9374] No source specified [ 235.911824][ T36] audit: type=1400 audit(1757046422.674:34023): avc: denied { map } for pid=9387 comm="syz.7.2976" path="socket:[46497]" dev="sockfs" ino=46497 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 235.967471][ T9396] rust_binder: 209: no such ref 3 [ 236.145510][ T63] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 236.307021][ T63] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.319521][ T63] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 236.328639][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.336663][ T63] usb 5-1: Product: syz [ 236.340912][ T63] usb 5-1: Manufacturer: syz [ 236.345511][ T63] usb 5-1: SerialNumber: syz [ 236.620053][ T9428] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.627211][ T9428] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.634404][ T9428] bridge_slave_0: entered allmulticast mode [ 236.642826][ T9428] bridge_slave_0: entered promiscuous mode [ 236.649654][ T9428] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.656766][ T9428] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.664010][ T9428] bridge_slave_1: entered allmulticast mode [ 236.670450][ T9428] bridge_slave_1: entered promiscuous mode [ 236.741891][ T9428] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.749017][ T9428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.756346][ T9428] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.763412][ T9428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.786404][ T1993] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.794516][ T1993] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.804705][ T1989] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.811780][ T1989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.821490][ T1993] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.828590][ T1993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.858144][ T9428] veth0_vlan: entered promiscuous mode [ 236.870140][ T9428] veth1_macvtap: entered promiscuous mode [ 237.016734][ T9449] netlink: 'syz.6.2997': attribute type 13 has an invalid length. [ 237.051623][ T9453] rust_binder: Error while translating object. [ 237.051690][ T9453] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 237.064789][ T9453] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 237.229190][ T63] cdc_ncm 5-1:1.0: bind() failure [ 237.254457][ T63] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 237.261747][ T63] cdc_ncm 5-1:1.1: bind() failure [ 237.267874][ T63] usb 5-1: USB disconnect, device number 23 [ 237.453909][ T9466] rust_binder: Error while translating object. [ 237.453951][ T9466] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 237.460376][ T9466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:222 [ 237.472706][ T9466] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 237.482329][ T9466] rust_binder: Read failure Err(EFAULT) in pid:222 [ 237.657965][ T9478] netlink: 'syz.6.3004': attribute type 1 has an invalid length. [ 237.740001][ T9499] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:467 [ 237.760632][ T9501] bpf: Bad value for 'uid' [ 237.829065][ T9525] netlink: 1036 bytes leftover after parsing attributes in process `syz.6.3016'. [ 238.041030][ T9535] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 238.049038][ T9535] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 238.059653][ T9535] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 238.069284][ T9535] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 238.069869][ T9537] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 238.188300][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 238.217627][ T9541] netlink: 5 bytes leftover after parsing attributes in process `syz.7.3023'. [ 238.226810][ T9541] 0ªö»ôM: renamed from gretap0 (while UP) [ 238.233561][ T9541] 0ªö»ôM: entered allmulticast mode [ 238.239077][ T9541] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 238.353616][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.368173][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.399986][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 238.423570][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 238.431602][ T10] usb 5-1: SerialNumber: syz [ 238.546487][ T36] audit: type=1400 audit(1757046425.133:34024): avc: denied { compute_member } for pid=9561 comm="syz.7.3028" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 238.546824][ T9562] exFAT-fs (rnullb0): invalid boot record signature [ 238.576788][ T9562] exFAT-fs (rnullb0): failed to read boot sector [ 238.583226][ T9562] exFAT-fs (rnullb0): failed to recognize exfat type [ 238.612129][ T9566] x_tables: duplicate underflow at hook 1 [ 238.666014][ T10] usb 5-1: 0:2 : does not exist [ 238.671051][ T10] usb 5-1: unit 5: unexpected type 0x09 [ 238.680302][ T477] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 238.688927][ T10] usb 5-1: USB disconnect, device number 24 [ 238.851522][ T477] usb 6-1: Using ep0 maxpacket: 32 [ 238.857955][ T477] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 238.875102][ T477] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 238.885980][ T477] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 238.895201][ T477] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 238.905252][ T477] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 238.915000][ T477] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 238.928300][ T477] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 238.937546][ T477] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.947303][ T36] audit: type=1400 audit(1757046425.507:34025): avc: denied { setattr } for pid=9572 comm="syz.7.3035" name="AF_VSOCK" dev="sockfs" ino=48167 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 238.970943][ T477] usb 6-1: config 0 descriptor?? [ 239.036137][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 239.195186][ T477] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 239.207216][ T477] usb 6-1: USB disconnect, device number 2 [ 239.213745][ T477] usblp0: removed [ 239.281013][ T36] audit: type=1400 audit(1757046425.825:34026): avc: denied { append } for pid=9578 comm="syz.4.3037" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 239.304598][ T36] audit: type=1400 audit(1757046425.825:34027): avc: denied { read } for pid=9578 comm="syz.4.3037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 239.403915][ T9599] overlayfs: empty lowerdir [ 239.409479][ T9599] SELinux: security_context_str_to_sid () failed with errno=-22 [ 239.441759][ T9605] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 239.461336][ T9609] rust_binder: Failed to allocate buffer. len:10771147061988852024, is_oneway:false [ 239.490010][ T9611] rust_binder: 513: no such ref 0 [ 239.496147][ T9611] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 239.503444][ T9611] rust_binder: 513: no such ref 0 [ 239.522659][ T9617] fuse: Unknown parameter '0x0000000000000003' [ 239.522832][ T36] audit: type=1400 audit(1757050778.050:34028): avc: denied { mounton } for pid=9616 comm="syz.4.3050" path="/165/file0" dev="tmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 239.685628][ T10] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 239.803281][ T404] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 239.847155][ T10] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 239.855573][ T10] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 239.864315][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 239.873354][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 239.883102][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 239.894178][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 239.907337][ T10] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 239.916431][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.925153][ T10] usb 6-1: config 0 descriptor?? [ 239.930389][ T9552] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 239.985076][ T404] usb 5-1: Using ep0 maxpacket: 32 [ 239.991392][ T404] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 239.999547][ T404] usb 5-1: config 0 has no interface number 0 [ 240.007095][ T404] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 240.016149][ T404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.024202][ T404] usb 5-1: Product: syz [ 240.028410][ T404] usb 5-1: Manufacturer: syz [ 240.033011][ T404] usb 5-1: SerialNumber: syz [ 240.038341][ T404] usb 5-1: config 0 descriptor?? [ 240.044249][ T404] smsc95xx v2.0.0 [ 240.152732][ T9552] usb usb9: check_ctrlrecip: process 9552 (syz.5.3027) requesting ep 01 but needs 81 [ 240.162277][ T9552] usb usb9: usbfs: process 9552 (syz.5.3027) did not claim interface 0 before use [ 240.172713][ T10] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 240.476182][ T404] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 240.489791][ T404] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 240.548690][ C1] usblp0: nonzero read bulk status received: -71 [ 240.551944][ T36] audit: type=1400 audit(1757050779.004:34029): avc: denied { read write } for pid=9551 comm="syz.5.3027" name="lp0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 240.586181][ T36] audit: type=1400 audit(1757050779.004:34030): avc: denied { open } for pid=9551 comm="syz.5.3027" path="/dev/usb/lp0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 241.674564][ T31] usb 6-1: USB disconnect, device number 3 [ 241.694379][ T31] usblp0: removed [ 242.049276][ T31] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 242.060512][ T9698] 9pnet_fd: Insufficient options for proto=fd [ 242.120171][ T404] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 242.131337][ T404] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 242.142152][ T404] usb 5-1: USB disconnect, device number 25 [ 242.210762][ T31] usb 6-1: No LPM exit latency info found, disabling LPM. [ 242.218866][ T31] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 242.227620][ T31] usb 6-1: config 1 has an invalid descriptor of length 237, skipping remainder of the config [ 242.237932][ T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.248917][ T31] usb 6-1: string descriptor 0 read error: -22 [ 242.255176][ T31] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 242.265202][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.276540][ T31] usb 6-1: 0:2 : does not exist [ 242.394726][ T9714] binder: Bad value for 'max' [ 242.455677][ T404] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 242.489579][ T9691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.498172][ T9691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.507660][ T63] usb 6-1: USB disconnect, device number 4 [ 242.616109][ T404] usb 5-1: Using ep0 maxpacket: 32 [ 242.622603][ T404] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 242.630839][ T404] usb 5-1: config 0 has no interface number 0 [ 242.642192][ T404] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 242.655811][ T404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.664295][ T404] usb 5-1: Product: syz [ 242.668526][ T404] usb 5-1: Manufacturer: syz [ 242.676587][ T404] usb 5-1: SerialNumber: syz [ 242.697955][ T404] usb 5-1: config 0 descriptor?? [ 242.704102][ T404] smsc95xx v2.0.0 [ 242.907878][ T1989] bridge_slave_1: left allmulticast mode [ 242.916546][ T1989] bridge_slave_1: left promiscuous mode [ 242.925142][ T1989] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.933582][ T1989] bridge_slave_0: left allmulticast mode [ 242.939347][ T1989] bridge_slave_0: left promiscuous mode [ 242.945063][ T1989] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.001674][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 243.073846][ T36] audit: type=1400 audit(1757050781.369:34031): avc: denied { sqpoll } for pid=9722 comm="syz.6.3093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 243.123423][ T1989] veth1_macvtap: left promiscuous mode [ 243.129141][ T1989] veth0_vlan: left promiscuous mode [ 243.227728][ T9733] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 243.227763][ T9733] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:34 [ 243.305632][ T9735] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.323449][ T9735] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.330645][ T9735] bridge_slave_0: entered allmulticast mode [ 243.337057][ T9735] bridge_slave_0: entered promiscuous mode [ 243.343800][ T9735] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.350881][ T9735] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.358078][ T9735] bridge_slave_1: entered allmulticast mode [ 243.364680][ T9735] bridge_slave_1: entered promiscuous mode [ 243.392239][ T9744] 2N: renamed from vcan0 (while UP) [ 243.438767][ T9735] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.445855][ T9735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.453148][ T9735] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.460256][ T9735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.485663][ T1990] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.493027][ T1990] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.504068][ T1993] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.511154][ T1993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.520246][ T1990] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.527339][ T1990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.563365][ T9735] veth0_vlan: entered promiscuous mode [ 243.579208][ T404] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 243.586155][ T9735] veth1_macvtap: entered promiscuous mode [ 243.606010][ T404] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 243.690876][ T36] audit: type=1400 audit(1757050781.949:34032): avc: denied { setattr } for pid=9764 comm="syz.8.3103" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 243.701941][ T9772] ip6gretap0: mtu less than device minimum [ 243.771556][ T9774] rust_binder: 6: no such ref 0 [ 243.798443][ T9758] rust_binder: Error while translating object. [ 243.798494][ T9758] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 243.806403][ T9758] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:49 [ 243.824384][ T9785] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3109'. [ 243.883880][ T9796] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 243.883942][ T9796] rust_binder: Read failure Err(EFAULT) in pid:61 [ 243.912614][ T36] audit: type=1400 audit(1757050782.155:34033): avc: denied { accept } for pid=9799 comm="syz.5.3115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 244.009102][ T404] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 244.020034][ T404] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 244.029240][ T404] usb 5-1: USB disconnect, device number 26 [ 244.305952][ T31] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 244.467585][ T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.477791][ T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 244.487354][ T31] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 244.496513][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 244.504569][ T31] usb 6-1: SerialNumber: syz [ 244.711171][ T9812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3118'. [ 244.724773][ T36] audit: type=1400 audit(1757050782.921:34034): avc: denied { getattr } for pid=9803 comm="syz.5.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 244.747976][ T31] usb 6-1: 0:2 : does not exist [ 244.752904][ T31] usb 6-1: unit 5 not found! [ 244.759727][ T31] usb 6-1: USB disconnect, device number 5 [ 244.770189][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 244.796725][ T9816] 9pnet_fd: Insufficient options for proto=fd [ 244.814207][ T36] audit: type=1400 audit(1757050782.996:34035): avc: denied { map } for pid=9817 comm="syz.6.3121" path="socket:[47971]" dev="sockfs" ino=47971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 244.969048][ T1838] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 245.129487][ T1838] usb 5-1: Using ep0 maxpacket: 16 [ 245.135728][ T1838] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 245.143876][ T1838] usb 5-1: config 0 has no interface number 0 [ 245.150022][ T1838] usb 5-1: config 0 interface 41 has no altsetting 0 [ 245.159157][ T1838] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 245.168414][ T1838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.176444][ T1838] usb 5-1: Product: syz [ 245.180616][ T1838] usb 5-1: Manufacturer: syz [ 245.185253][ T1838] usb 5-1: SerialNumber: syz [ 245.190728][ T1838] usb 5-1: config 0 descriptor?? [ 245.196669][ T1838] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22 [ 245.323015][ T9828] syz.8.3125: attempt to access beyond end of device [ 245.323015][ T9828] loop8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 245.335898][ T9828] FAT-fs (loop8): unable to read boot sector [ 245.342773][ T9828] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 245.356950][ T9828] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 245.378259][ T1948] rust_binder: 9824: removing orphan mapping 0:4120 [ 245.416025][ T9812] binder: Unknown parameter 'subj_user' [ 245.424477][ T36] audit: type=1400 audit(1757050783.567:34036): avc: denied { append } for pid=9839 comm="syz.5.3129" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 245.425332][ T9812] overlayfs: missing 'workdir' [ 245.471132][ T1948] usb 5-1: USB disconnect, device number 27 [ 245.480356][ T1989] bridge_slave_1: left allmulticast mode [ 245.493265][ T1989] bridge_slave_1: left promiscuous mode [ 245.507567][ T1989] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.519322][ T1989] bridge_slave_0: left allmulticast mode [ 245.525427][ T1989] bridge_slave_0: left promiscuous mode [ 245.531306][ T1989] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.574701][ T9857] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 245.574740][ T9857] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:83 [ 245.682407][ T1989] veth1_macvtap: left promiscuous mode [ 245.697276][ T1989] veth0_vlan: left promiscuous mode [ 245.750669][ T9858] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3136'. [ 245.767286][ T9861] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.774388][ T9861] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.781498][ T9861] bridge_slave_0: entered allmulticast mode [ 245.788182][ T9861] bridge_slave_0: entered promiscuous mode [ 245.794829][ T9861] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.801923][ T9861] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.809181][ T9861] bridge_slave_1: entered allmulticast mode [ 245.815615][ T9861] bridge_slave_1: entered promiscuous mode [ 245.883075][ T9861] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.890237][ T9861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.897488][ T9861] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.904554][ T9861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.919971][ T9876] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3139'. [ 245.929538][ T9869] binder: Unknown parameter '00000000000000000004' [ 245.939764][ T1990] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.950643][ T1990] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.960660][ T1990] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.967738][ T1990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.976632][ T1993] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.983684][ T1993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.036883][ T9861] veth0_vlan: entered promiscuous mode [ 246.062490][ T9861] veth1_macvtap: entered promiscuous mode [ 246.125775][ T36] audit: type=1400 audit(1757050784.230:34037): avc: denied { read } for pid=9891 comm="syz.9.3134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 246.125869][ T9892] 2N: renamed from vcan0 (while UP) [ 246.283965][ T9899] rust_binder: 4: no such ref 0 [ 246.302518][ T9901] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:6 [ 246.302643][ T9901] rust_binder: Write failure EINVAL in pid:6 [ 246.345430][ T9903] kvm: user requested TSC rate below hardware speed [ 246.399250][ T36] audit: type=1400 audit(1757050784.474:34038): avc: denied { map } for pid=9910 comm="syz.5.3149" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 246.422929][ T36] audit: type=1400 audit(1757050784.502:34039): avc: denied { execute } for pid=9910 comm="syz.5.3149" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 246.628114][ T9925] veth1_macvtap: left promiscuous mode [ 246.633608][ T9925] macsec0: entered promiscuous mode [ 246.640318][ T9925] veth1_macvtap: entered promiscuous mode [ 246.646147][ T9925] macsec0: left promiscuous mode [ 246.767334][ T9931] fuseblk: Unknown parameter 'fu' [ 247.247145][ T1948] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 247.408903][ T1948] usb 6-1: unable to get BOS descriptor or descriptor too short [ 247.417313][ T1948] usb 6-1: config 2 has an invalid interface number: 34 but max is 2 [ 247.425549][ T1948] usb 6-1: config 2 has an invalid interface number: 6 but max is 2 [ 247.433598][ T1948] usb 6-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 247.443887][ T1948] usb 6-1: config 2 has no interface number 0 [ 247.449986][ T1948] usb 6-1: config 2 has no interface number 2 [ 247.456090][ T1948] usb 6-1: config 2 interface 1 altsetting 190 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 247.467157][ T1948] usb 6-1: config 2 interface 34 altsetting 8 has an invalid endpoint descriptor of length 5, skipping [ 247.478264][ T1948] usb 6-1: config 2 interface 34 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 247.491335][ T1948] usb 6-1: too many endpoints for config 2 interface 6 altsetting 7: 37, using maximum allowed: 30 [ 247.502468][ T1948] usb 6-1: config 2 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 247.515531][ T1948] usb 6-1: config 2 interface 1 has no altsetting 0 [ 247.522202][ T1948] usb 6-1: config 2 interface 34 has no altsetting 0 [ 247.528923][ T1948] usb 6-1: config 2 interface 6 has no altsetting 0 [ 247.537121][ T1948] usb 6-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice=37.c4 [ 247.546177][ T1948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.554257][ T1948] usb 6-1: Product: syz [ 247.558468][ T1948] usb 6-1: Manufacturer: syz [ 247.563137][ T1948] usb 6-1: SerialNumber: syz [ 247.588762][ T9948] overlayfs: missing 'lowerdir' [ 247.850611][ T1948] usb 6-1: selecting invalid altsetting 0 [ 247.877217][ T1948] usb 6-1: USB disconnect, device number 6 [ 247.903588][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:2.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 248.177433][ T9988] batadv_slave_0: entered promiscuous mode [ 248.193880][ T9987] batadv_slave_0: left promiscuous mode [ 248.343006][ T9992] rust_binder: Error while translating object. [ 248.343054][ T9992] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 248.368116][ T9992] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:565 [ 248.390938][ T1948] rust_binder: 9936: removing orphan mapping 0:24 [ 248.435924][ T9994] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3175'. [ 248.451026][ T9994] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 248.730208][T10002] rust_binder: Failed copying remainder into alloc: EFAULT [ 248.730238][T10002] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 248.737867][T10002] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 248.746406][T10002] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:116 [ 248.795593][T10006] bpf: Bad value for 'uid' [ 248.810099][T10006] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 248.810123][T10006] rust_binder: Error while translating object. [ 248.820088][T10006] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 248.826287][T10006] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:120 [ 248.871986][ T36] audit: type=1400 audit(1757050786.783:34040): avc: denied { remount } for pid=10011 comm="syz.5.3184" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 248.902528][T10013] overlay: Unknown parameter 'func' [ 248.955954][T10018] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 248.955986][T10018] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 248.964040][T10018] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:126 [ 248.965392][ T36] audit: type=1400 audit(1757050786.883:34041): avc: denied { setattr } for pid=10026 comm="syz.6.3189" name="NETLINK" dev="sockfs" ino=50444 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 249.019203][T10031] overlayfs: failed to clone upperpath [ 249.062176][ T36] audit: type=1326 audit(1757050786.967:34042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10019 comm="syz.4.3187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86de18ebe9 code=0x7fc00000 [ 249.087705][ T36] audit: type=1400 audit(1757050786.995:34043): avc: denied { unmount } for pid=7471 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 249.110264][T10051] binder: Unknown parameter '' [ 249.300581][ T1948] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 249.461007][ T1948] usb 6-1: Using ep0 maxpacket: 8 [ 249.467386][ T1948] usb 6-1: unable to get BOS descriptor or descriptor too short [ 249.475916][ T1948] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 249.484040][ T1948] usb 6-1: config 0 has no interface number 0 [ 249.490114][ T1948] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 249.501076][ T1948] usb 6-1: config 0 interface 88 has no altsetting 0 [ 249.509889][ T1948] usb 6-1: string descriptor 0 read error: -22 [ 249.516574][ T1948] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 249.526053][ T1948] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 249.535006][ T1948] usb 6-1: config 0 descriptor?? [ 249.540149][ T404] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 249.549294][ T1948] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input22 [ 249.717711][ T404] usb 5-1: Using ep0 maxpacket: 16 [ 249.724848][ T404] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 249.733498][ T404] usb 5-1: config 0 has no interface number 0 [ 249.739809][ T404] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 249.749712][ T404] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 249.761227][ T404] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 249.770318][ T404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.771488][T10040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.778462][ T404] usb 5-1: Product: syz [ 249.789431][T10040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.790930][ T404] usb 5-1: Manufacturer: syz [ 249.803354][ T404] usb 5-1: SerialNumber: syz [ 249.809472][ T404] usb 5-1: config 0 descriptor?? [ 249.814992][T10068] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 249.822147][T10068] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 249.992036][ T36] audit: type=1400 audit(1757050787.837:34044): avc: denied { bind } for pid=10100 comm="syz.6.3212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 250.043951][T10068] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 250.051205][T10068] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 250.392529][ T404] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 250.402816][ T404] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 250.412521][ T404] asix 5-1:0.251: probe with driver asix failed with error -5 [ 250.421909][ T404] usb 5-1: USB disconnect, device number 28 [ 250.717331][T10130] wireguard: wg1: Could not create IPv4 socket [ 250.953472][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3221'. [ 250.974905][T10135] rust_binder: Error while translating object. [ 250.974936][T10135] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 250.981169][T10135] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:583 [ 250.993241][T10137] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 251.493713][T10164] IPv6: NLM_F_CREATE should be specified when creating new route [ 251.508416][T10164] netlink: 'syz.6.3232': attribute type 4 has an invalid length. [ 252.263314][ T331] usb 6-1: USB disconnect, device number 7 [ 252.294835][T10182] rust_binder: 142: no such ref 1 [ 252.299957][T10182] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142 [ 252.312637][ T2001] Bluetooth: hci0: Frame reassembly failed (-84) [ 252.314983][ T36] audit: type=1400 audit(1757050790.006:34045): avc: denied { mounton } for pid=10183 comm="syz.5.3241" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 252.763639][T10212] netlink: 'syz.9.3250': attribute type 3 has an invalid length. [ 252.771890][T10212] netlink: 944 bytes leftover after parsing attributes in process `syz.9.3250'. [ 252.781855][T10212] fuse: Bad value for 'fd' [ 252.787207][ T36] audit: type=1400 audit(1757050790.455:34046): avc: denied { associate } for pid=10210 comm="syz.9.3250" name="cpuacct.usage_sys" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 252.888735][T10225] fuse: Bad value for 'fd' [ 253.150932][T10242] overlayfs: failed to clone upperpath [ 253.178820][T10249] 9pnet_fd: Insufficient options for proto=fd [ 253.182962][ T31] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 253.343361][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 253.349697][ T31] usb 5-1: config index 0 descriptor too short (expected 4495, got 71) [ 253.358011][ T31] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 253.366280][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.376375][ T31] usb 5-1: config 0 has no interface number 0 [ 253.383988][ T31] usb 5-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 253.393099][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.401112][ T31] usb 5-1: Product: syz [ 253.405279][ T31] usb 5-1: Manufacturer: syz [ 253.409901][ T31] usb 5-1: SerialNumber: syz [ 253.415168][ T31] usb 5-1: config 0 descriptor?? [ 253.636760][T10216] 9pnet_fd: Insufficient options for proto=fd [ 253.643310][T10216] rust_binder: 618: no such ref 3 [ 253.757297][T10257] fuse: Bad value for 'fd' [ 253.785473][T10261] tipc: MTU too low for tipc bearer [ 253.865896][ T1838] usb 5-1: USB disconnect, device number 30 [ 254.411887][T10264] wireguard: wg2: Could not create IPv4 socket [ 254.477055][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 254.477056][ T392] Bluetooth: hci0: command 0x1003 tx timeout [ 254.528586][T10276] fuseblk: Unknown parameter 'uid>00000000000000060929' [ 254.701667][ T1948] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 254.862084][ T1948] usb 5-1: Using ep0 maxpacket: 32 [ 254.868387][ T1948] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 254.876619][ T1948] usb 5-1: config 0 has no interface number 0 [ 254.882727][ T1948] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 254.894315][ T1948] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 254.904149][ T1948] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 254.915549][ T1948] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 254.924623][ T1948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.932648][ T1948] usb 5-1: Product: syz [ 254.936818][ T1948] usb 5-1: Manufacturer: syz [ 254.941426][ T1948] usb 5-1: SerialNumber: syz [ 254.946588][ T1948] usb 5-1: config 0 descriptor?? [ 255.168446][ T1948] usb 5-1: invalid MIDI in EP 0 [ 255.176099][ T1948] snd-usb-audio 5-1:0.151: probe with driver snd-usb-audio failed with error -22 [ 255.186266][ T1948] usb 5-1: USB disconnect, device number 31 [ 255.196578][ T9577] udevd[9577]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 255.430721][T10295] binder: Bad value for 'stats' [ 255.781717][T10311] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 255.792578][T10311] SELinux: failed to load policy [ 255.799603][T10311] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551607) [ 255.799626][T10311] rust_binder: Error while translating object. [ 255.811913][T10311] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 255.818292][T10311] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:634 [ 255.977890][T10322] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 256.382496][T10346] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 256.399394][T10346] overlayfs: missing 'lowerdir' [ 256.469513][T10359] overlayfs: failed to clone upperpath [ 256.761054][ T36] audit: type=1326 audit(1757050794.167:34047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10317 comm="syz.6.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce4d8ebe9 code=0x7fc00000 [ 256.826074][ T36] audit: type=1326 audit(1757050794.223:34048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10383 comm="syz.6.3316" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcce4d8ebe9 code=0x0 [ 257.231852][T10388] input: syz0 as /devices/virtual/input/input23 [ 257.550756][T10409] netlink: 'syz.9.3323': attribute type 27 has an invalid length. [ 257.634321][T10420] x_tables: unsorted underflow at hook 2 [ 257.803291][ T31] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 257.869840][T10457] ªªªªª$: renamed from bridge_slave_0 (while UP) [ 257.877180][T10457] netlink: 'syz.6.3342': attribute type 4 has an invalid length. [ 257.975730][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 257.988852][ T31] usb 6-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 257.998310][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.008805][ T31] usb 6-1: config 0 descriptor?? [ 258.052840][ T36] audit: type=1400 audit(1757050795.373:34049): avc: denied { create } for pid=10497 comm="syz.6.3354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 258.092989][T10507] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3357'. [ 258.102870][T10506] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3357'. [ 258.105425][ T36] audit: type=1400 audit(1757050795.429:34050): avc: denied { read } for pid=10505 comm="syz.6.3357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 258.186634][T10516] overlayfs: failed to clone upperpath [ 258.243823][T10526] netlink: 'syz.6.3365': attribute type 21 has an invalid length. [ 258.251719][T10526] netlink: 388 bytes leftover after parsing attributes in process `syz.6.3365'. [ 258.500560][ T31] wacom 0003:056A:032F.000D: unknown main item tag 0x0 [ 258.507499][ T31] wacom 0003:056A:032F.000D: unknown main item tag 0x0 [ 258.514477][ T31] wacom 0003:056A:032F.000D: unknown main item tag 0x0 [ 258.521387][ T31] wacom 0003:056A:032F.000D: unknown main item tag 0x0 [ 258.528248][ T31] wacom 0003:056A:032F.000D: unknown main item tag 0x0 [ 258.536622][ T31] wacom 0003:056A:032F.000D: hidraw0: USB HID v0.00 Device [HID 056a:032f] on usb-dummy_hcd.5-1/input0 [ 258.729389][ T31] usb 6-1: USB disconnect, device number 8 [ 258.944317][T10559] /dev/rnullb0: Can't lookup blockdev [ 258.954854][T10561] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3379'. [ 258.982267][ T36] audit: type=1400 audit(1757050796.252:34051): avc: denied { audit_control } for pid=10567 comm="syz.4.3382" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 259.000452][T10570] 9pnet_fd: Insufficient options for proto=fd [ 259.041665][T10581] 9pnet_fd: Insufficient options for proto=fd [ 259.232015][T10597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=10597 comm=syz.4.3393 [ 259.245312][T10597] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 259.245343][T10597] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:697 [ 259.344920][T10607] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10607 comm=syz.4.3397 [ 259.670288][ T36] audit: type=1400 audit(1757050796.888:34052): avc: denied { map } for pid=10629 comm="syz.6.3404" path="socket:[52876]" dev="sockfs" ino=52876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 259.878153][ T31] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 260.221694][ T36] audit: type=1400 audit(1757050797.411:34053): avc: denied { nlmsg_write } for pid=10640 comm="syz.9.3409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 260.321048][ T36] audit: type=1400 audit(1757050797.495:34054): avc: denied { create } for pid=10669 comm="syz.9.3418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 260.420585][T10681] netlink: 'syz.9.3423': attribute type 11 has an invalid length. [ 260.439287][ T36] audit: type=1326 audit(1757050797.608:34055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10680 comm="syz.9.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1cf8ebe9 code=0x7ffc0000 [ 260.458323][T10685] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 260.469514][T10685] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:189 [ 260.469566][ T36] audit: type=1326 audit(1757050797.608:34056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10680 comm="syz.9.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1cf8ebe9 code=0x7ffc0000 [ 260.530571][ T331] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 260.676774][T10701] rust_binder: Error while translating object. [ 260.676817][T10701] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 260.683257][T10701] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:196 [ 260.692144][ T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.713557][ T331] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 260.730640][ T331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.743488][ T331] usb 5-1: config 0 descriptor?? [ 260.767367][T10714] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 260.984728][T10746] 9pnet_fd: Insufficient options for proto=fd [ 261.112260][T10770] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3451'. [ 261.178181][ T331] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 261.188214][ T331] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000E/input/input27 [ 261.261474][ T331] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 261.675508][T10779] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 261.684438][T10779] binder: Bad value for 'stats' [ 261.696822][T10649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.707344][T10649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.828593][ T1948] usb 5-1: USB disconnect, device number 32 [ 261.834664][T10649] incfs_lookup_dentry err:-103 [ 261.847338][T10649] incfs: Can't find or create .index dir in ./file0 [ 261.849099][T10801] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 261.857428][T10649] incfs: mount failed -103 [ 262.082043][T10832] /dev/rnullb0: Can't lookup blockdev [ 262.153634][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 262.153653][ T36] audit: type=1400 audit(1757050799.207:34070): avc: denied { read write } for pid=10840 comm="iptables" path="/dev/console" dev="rootfs" ino=1063 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 262.184108][ T36] audit: type=1400 audit(1757050799.216:34071): avc: denied { search } for pid=10840 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.206164][ T36] audit: type=1400 audit(1757050799.216:34072): avc: denied { write } for pid=10840 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.228123][ T36] audit: type=1400 audit(1757050799.216:34073): avc: denied { add_name } for pid=10840 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.252970][ T36] audit: type=1400 audit(1757050799.216:34074): avc: denied { create } for pid=10840 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 262.275895][ T36] audit: type=1400 audit(1757050799.216:34075): avc: denied { read open } for pid=10840 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=7362 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 262.306684][ T36] audit: type=1400 audit(1757050799.216:34076): avc: denied { lock } for pid=10840 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=7362 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 262.314910][T10847] overlayfs: failed to clone upperpath [ 262.391522][ T404] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 262.510757][T10863] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 262.510789][T10863] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 262.518732][T10863] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:224 [ 262.551913][ T404] usb 5-1: Using ep0 maxpacket: 32 [ 262.570829][ T36] audit: type=1400 audit(1757050799.599:34077): avc: denied { write } for pid=96 comm="acpid" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.592467][ T36] audit: type=1400 audit(1757050799.599:34078): avc: denied { remove_name } for pid=96 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.614973][ T36] audit: type=1400 audit(1757050799.599:34079): avc: denied { unlink } for pid=96 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 262.616244][ T404] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 262.639256][T10873] rust_binder: 10872 RLIMIT_NICE not set [ 262.645196][ T404] usb 5-1: config 0 has no interface number 0 [ 262.654726][ T331] rust_binder: 10871: removing orphan mapping 0:4120 [ 262.657001][ T404] usb 5-1: config 0 interface 184 has no altsetting 0 [ 262.673815][ T404] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 262.683039][ T404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.691584][ T404] usb 5-1: Product: syz [ 262.696002][ T404] usb 5-1: Manufacturer: syz [ 262.700636][ T404] usb 5-1: SerialNumber: syz [ 262.705897][ T404] usb 5-1: config 0 descriptor?? [ 262.711494][ T404] smsc75xx v1.0.0 [ 262.947647][ T31] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 263.118782][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 263.127648][ T31] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 263.136851][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.144896][ T31] usb 6-1: Product: syz [ 263.149090][ T31] usb 6-1: Manufacturer: syz [ 263.153736][ T31] usb 6-1: SerialNumber: syz [ 263.159105][ T31] usb 6-1: config 0 descriptor?? [ 263.280809][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3484'. [ 263.490080][T10927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.507527][T10927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.731220][T10927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.743157][T10927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 Connection to 10.128.0.91 closed by remote host. [ 263.990606][ T404] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 264.010570][ T404] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 264.038609][ T404] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 264.073055][ T404] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 264.083089][ T404] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 264.093544][ T404] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 264.138049][ T404] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 264.153462][ T404] usb 5-1: USB disconnect, device number 33 [ 264.167496][ T2001] bridge_slave_1: left allmulticast mode [ 264.173174][ T2001] bridge_slave_1: left promiscuous mode [ 264.178920][ T2001] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.186861][ T2001] bridge_slave_0: left allmulticast mode [ 264.192594][ T2001] bridge_slave_0: left promiscuous mode [ 264.198217][ T2001] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.297976][ T331] usb 6-1: USB disconnect, device number 10 [ 264.427101][ T2001] veth1_macvtap: left promiscuous mode [ 264.432621][ T2001] veth0_vlan: left promiscuous mode [ 264.703223][ T2001] bridge_slave_1: left allmulticast mode [ 264.708889][ T2001] bridge_slave_1: left promiscuous mode [ 264.714561][ T2001] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.722074][ T2001] bridge_slave_0: left allmulticast mode [ 264.727831][ T2001] bridge_slave_0: left promiscuous mode [ 264.733438][ T2001] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.741078][ T2001] bridge_slave_1: left allmulticast mode [ 264.747051][ T2001] bridge_slave_1: left promiscuous mode [ 264.752664][ T2001] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.760297][ T2001] bridge_slave_0: left allmulticast mode [ 264.765986][ T2001] bridge_slave_0: left promiscuous mode [ 264.771663][ T2001] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.962013][ T2001] veth1_macvtap: left promiscuous mode [ 264.967533][ T2001] veth0_vlan: left promiscuous mode [ 264.973039][ T2001] veth1_macvtap: left promiscuous mode [ 264.978529][ T2001] veth0_vlan: left promiscuous mode [ 266.187008][T10951] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 266.194032][T10951] ACPI: PM: Preparing to enter system sleep state S5 [ 266.200991][T10951] kvm: exiting hardware virtualization [ 266.206489][T10951] reboot: Power down serialport: VM disconnected.