last executing test programs: 43.559541752s ago: executing program 3 (id=500): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) socket$inet_tcp(0x2, 0x1, 0x0) futex(&(0x7f0000004000), 0x3, 0x0, 0x0, &(0x7f0000004000), 0xb201ffff) 43.540186732s ago: executing program 3 (id=501): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) fadvise64(r0, 0x10000001003, 0x9, 0x5) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1e984a11, 0x202812, r0, 0x7dfff000) syz_usb_connect$cdc_ecm(0x2, 0x52, &(0x7f0000001380)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x29, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0xb9, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x9, 0x4, 0x7}, [@call_mgmt={0x5, 0x24, 0x1, 0x6, 0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0x8, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0x0, 0xe6}}}}}]}}]}}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r1) syz_fuse_handle_req(r1, &(0x7f0000002800)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000000)) mmap(&(0x7f0000785000/0x4000)=nil, 0x4000, 0x8, 0x11, r0, 0x3d7c3000) 42.99775582s ago: executing program 3 (id=503): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0xfffffffffffffffe}) prctl$PR_SET_SECCOMP(0x41, 0x2, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x1c, 0x0, 0x33}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/92, 0x5c, 0x0, 0x3c}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x13}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 42.954824601s ago: executing program 3 (id=504): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x10d000, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd7000000000000000000000000000000000000000ec01fe8000000000000000000000000000bb00000000000000000a00100000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ffffffff0000000000000000000000000600000004"], 0xfc}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$unix(0x1, 0x1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') syz_fuse_handle_req(r3, &(0x7f0000000240)="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", 0x2000, &(0x7f0000009600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) select(0x0, 0x0, &(0x7f0000000340), &(0x7f0000001900)={0x0, 0x0, 0x80000000, 0x200000000}, &(0x7f0000000440)) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x3, 0x0, [0x0, 0x200000000580, 0x20000000097c, 0x200000000aca], 0x0, &(0x7f0000000240), 0x0}, 0x5f2) sendto$inet(r4, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002240)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r6, &(0x7f0000000080)={0x18, 0x0, r7, {0x8}}, 0x18) 42.886813682s ago: executing program 3 (id=507): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000017c0)="a2", 0x1}], 0x1, 0xc) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 42.803219234s ago: executing program 3 (id=508): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x24, 0x26, 0x0, 0x1c, 0x3, 0x400004f, 0x100010, 0x2c, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10001000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYRES16=r3, @ANYRES16=r3, @ANYRES8=r3, @ANYBLOB="08006b007102000008006b006e00000008006b00b400000008006b006801000008006b000a00000008006b00e001000008006b003700000008006b007800000008006b00e0010000"], 0x64}}, 0x44081) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req={0x100, 0x3ef, 0x2, 0x27}, 0x10) recvmmsg$unix(r4, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0xfffffffffffffffd) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0xa, 0x3, 0x3a) r7 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) recvfrom$unix(r8, 0x0, 0x0, 0x2040, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r9}, 0xc) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, r9}, 0xc) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00]'], 0x20}], 0x1}, 0x40) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x808081, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x15, 0x0, 0x33}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}}, &(0x7f0000000280)={0x0, 0x13, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 42.765135484s ago: executing program 32 (id=508): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x24, 0x26, 0x0, 0x1c, 0x3, 0x400004f, 0x100010, 0x2c, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10001000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYRES16=r3, @ANYRES16=r3, @ANYRES8=r3, @ANYBLOB="08006b007102000008006b006e00000008006b00b400000008006b006801000008006b000a00000008006b00e001000008006b003700000008006b007800000008006b00e0010000"], 0x64}}, 0x44081) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req={0x100, 0x3ef, 0x2, 0x27}, 0x10) recvmmsg$unix(r4, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0xfffffffffffffffd) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0xa, 0x3, 0x3a) r7 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) recvfrom$unix(r8, 0x0, 0x0, 0x2040, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r9}, 0xc) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, r9}, 0xc) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00]'], 0x20}], 0x1}, 0x40) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x808081, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x15, 0x0, 0x33}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}}, &(0x7f0000000280)={0x0, 0x13, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 31.471706104s ago: executing program 4 (id=636): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) r0 = socket$netlink(0x10, 0x3, 0x8000000004) (rerun: 64) writev(r0, 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) (async) syz_clone3(&(0x7f0000000300)={0x20000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100)=0x0, {0xb}, &(0x7f0000000140)=""/235, 0xeb, &(0x7f0000000280)=""/25, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0xa}, 0x58) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000840)=0x1000000, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async, rerun: 64) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f00000043c0)={0x29, 0x3, 0x80000, {0x1, 0x8, 0x0, 'group_id'}}, 0x29) (async, rerun: 64) ptrace$cont(0x1f, r4, 0x140, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ(r7, 0xaea2, 0xffffffffffffffff) ioctl$KVM_CLEAR_DIRTY_LOG(r7, 0xc018aec0, &(0x7f0000000800)={0x10000, 0x3c0, 0x3c0, &(0x7f0000000400)=[0xc943, 0x8, 0x2, 0x21, 0x8, 0x1, 0x1, 0x3, 0x6, 0x81, 0x6, 0x5, 0xffffffff, 0x9, 0x7fffffff, 0x5, 0x6, 0x1, 0xffff, 0x8, 0x7fff, 0x4, 0x7fffffffffffffff, 0x0, 0x4, 0x40, 0x119b, 0xcf, 0x68dcfe1c, 0x300, 0x3, 0xa2d, 0x8, 0xb, 0x3a, 0xbed, 0x0, 0x4, 0xfff, 0x3, 0x4, 0x4, 0x9, 0x1800000000, 0x100, 0x5, 0x6f76, 0xffffffff7fffffff, 0x97, 0x8001, 0x40, 0x9a, 0x0, 0x100000000, 0x9, 0x1, 0x9, 0x7af1, 0x4, 0xd2c, 0xba0e, 0xb3f, 0x5423, 0x8, 0x4, 0x8000000000000001, 0x80000000, 0x6, 0x0, 0x570, 0x4e, 0x2400000, 0x8, 0x5, 0x7, 0xffffffff00000000, 0x401, 0x8, 0x8, 0xfffffffffffffff9, 0x1, 0x6c, 0x4, 0x7, 0x101, 0x1, 0x6, 0x0, 0x4, 0x2d01, 0x1, 0x9, 0x0, 0x7, 0x6, 0x100000000, 0x3, 0x7, 0x3, 0x1ad, 0xfffffffffffffffd, 0x3, 0xfff, 0x251, 0x7fffffffffffffff, 0x7, 0x0, 0x89a2, 0x10001, 0x13, 0x80, 0x0, 0x46, 0x3, 0x7, 0x9, 0xf030, 0x6, 0x6, 0x6, 0x1, 0x6, 0xb, 0x8, 0x1, 0xa, 0x23db, 0xcb7]}) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) (async) bind$tipc(r2, 0x0, 0x0) (async) sendmsg$tipc(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) close_range(r1, 0xffffffffffffffff, 0x0) 31.379375346s ago: executing program 4 (id=641): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) socket(0x2a, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f00000022c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000c) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c4000000190001000000000000000000e000000200000000000000000000000000000000000000000000000000000000000000004e2300000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000060000000000000000000000000000000000000000000000f6ffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000c001500"], 0xc4}}, 0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@private=0xa010102, @in=@private=0xa010101, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x80, 0x0, 0x32}, {}, {0x0, 0x0, 0x100}, 0x0, 0x6e6bb7, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [{0x20, '.'}, {0x20, 'cgroup.kill\x00'}, {0x20, 'cgroup.kill\x00'}, {0x20, './binderfs/binder0\x00'}, {}, {0x20, 'cgroup.kill\x00'}, {0x20, './binderfs/binder0\x00'}], 0xa, "ba1a516fa7f6b98fc7ba407c5dbdb0d27e115675bb8801f0317390dd6c2b4ec7253e413b90731a87b424b29ffa667f54732409f47538b9605fd7e368d7fae0ab22bc035dc0e2fd41e4d4cd28be17ac40b1ec9b9dac1aea2c3ce87744802e87ba3bbe3ad494f1561969d2b9fcb73bbe743f2a70cf51262c514ed006c30e7a79ce37e24c40d0a20e55bf3d4d6f28f77e4e5e122aa83f295400316df1a98ed12e65cff249baa6e66d3e5e97557ec29891502db42fa7cdc62fd8af5f1f8962244728c000c2a7fd1e4b4ecbe4949311d066"}, 0x12c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff}) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000000300)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) write$selinux_access(0xffffffffffffffff, 0x0, 0x5f) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) 31.218782918s ago: executing program 4 (id=644): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000300)={0x0, &(0x7f0000000400)=[@code={0x1, 0x65, {"c4c2f917727766baf80cb883d01f8aef66bafc0cec65f3430f1efbc441fae6d4410f013666baf80cb8dcfed18eef66bafc0cec66baf80cb851f1fc8eef66bafc0cb000ee66b86e008ec098f3450f01890001c0fe"}}, @cpuid={0x2, 0x18, {0x8, 0x8}}, @uexit={0x0, 0x18, 0xc7}, @cpuid={0x2, 0x18, {0x1, 0x3}}, @cpuid={0x2, 0x18, {0xfffffff8, 0x401}}, @code={0x1, 0x63, {"360f01f566ba2000b800580000eff3a766ba6100b0acee460fba2c5300410f00533066baf80cb8cfbf5b83ef66bafc0cecb9c0080000b87e000000ba000000000f30b805000000b90e0000000f01d9450f08"}}, @cpuid={0x2, 0x18, {0x7, 0x3}}, @uexit={0x0, 0x18, 0x9}, @cpuid={0x2, 0x18, {0x1, 0xb20}}, @uexit={0x0, 0x18, 0x7}, @uexit={0x0, 0x18, 0x3}, @cpuid={0x2, 0x18, {0x7, 0x9}}, @cpuid={0x2, 0x18, {0x0, 0xa8f2}}, @uexit={0x0, 0x18, 0x14000000000000}, @uexit={0x0, 0x18, 0x3}, @uexit={0x0, 0x18, 0x1}, @cpuid={0x2, 0x18, {0x0, 0x3}}, @code={0x1, 0x4b, {"66b83a018ec8c4e12def0766ba420066b87d0066ef450f01cf66460f3880970070000066bad004edf30f0966bad004b02bee400f01c5f30f1eff"}}, @code={0x1, 0x6a, {"b901080000b800000080ba000000000f3066ba4000ec0f08b92c0800000f3266b80f000f00d8b805000000b92d0000000f01c10f09c4c17d110066baf80cb8500d1e81ef66bafc0cb8f8510000ef0f20c035000000800f22c0"}}, @uexit={0x0, 0x18}, @cpuid={0x2, 0x18, {0x4, 0x3}}, @uexit={0x0, 0x18, 0xfffffffffffffff7}, @cpuid={0x2, 0x18, {0x2, 0x7}}, @cpuid={0x2, 0x18, {0x1, 0x8}}, @cpuid={0x2, 0x18, {0x200, 0x55}}, @uexit={0x0, 0x18, 0x2}, @code={0x1, 0x6a, {"b8010000000f01d94f0fc71f8f0844a2b200000000000f20c035000000800f22c0f0400fbabdda0000000048b800600000000000000f23d80f21f835000000400f23f8450f01d16464430f088f6828960ade6566f2670f001a"}}], 0x3f7}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000800)={[0x2, 0x3, 0x1, 0xa, 0x0, 0x7, 0x6687, 0xffffffffffffffff, 0x2, 0x8, 0x1, 0x8001, 0x9, 0x8, 0x54e181d3, 0x2], 0xddcd7000, 0x201000}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x28a, 0x0, 0x3}]}) ioprio_set$pid(0x2, 0x0, 0x0) getgroups(0x3, &(0x7f0000000000)=[0xee01, 0x0, 0xffffffffffffffff]) setregid(0xffffffffffffffff, r4) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000100)=ANY=[@ANYRES8=r6]) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r7, 0x80404508, &(0x7f00000008c0)=""/225) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f0000000180)=0xfffffc29) capset(&(0x7f00000001c0)={0x19980330, r8}, &(0x7f0000000200)={0x4, 0x400, 0x7fffffff, 0x4, 0xf5e, 0x6}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000240)='vegas\x00', 0x6) read(r5, &(0x7f0000000080)=""/93, 0xffffff6c) 30.895343483s ago: executing program 4 (id=648): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) write$evdev(r4, &(0x7f0000000000)=[{{}, 0x2, 0x4, 0x200}, {{}, 0x1, 0x3c2, 0x6}], 0x30) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x0, 0x80000000000000}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x2}, @fda={0x66646185, 0x8, 0x1, 0x16}}, &(0x7f0000000500)={0x0, 0x18, 0x40}}}], 0x51, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"}) 30.816429434s ago: executing program 4 (id=649): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000bc0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f00000001c0)=0x6e, 0x80000) connect$unix(r4, &(0x7f0000000340)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r5 = eventfd2(0x9, 0x80800) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000900)={0x4002, 0x0, 0x1, r5, 0x1}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x1, r5, 0x5}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={@fda={0x66646185, 0x0, 0x1, 0x38}, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000040)}}], 0x11, 0x0, 0x0}) 30.757730905s ago: executing program 4 (id=650): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x1, 'erspan0\x00', {}, 0x6}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000200), 0x102102, 0x0) pwritev2(r2, &(0x7f0000000840)=[{&(0x7f0000000280)="b658", 0x2}], 0x1, 0xffffffff, 0xc00, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000200)="1c0000001a009b8a070000003b9b701f400004000000eb3f7a7f1de29a", 0x1d) r6 = gettid() recvmmsg(r0, &(0x7f0000000a40)=[{{&(0x7f0000000100)=@ax25={{0x3, @rose}, [@null, @netrom, @rose, @rose, @default, @netrom, @rose, @rose]}, 0x80, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/204, 0xcc}], 0x1}, 0x3}, {{&(0x7f00000003c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000440)=""/121, 0x79}], 0x1, &(0x7f00000004c0)=""/8, 0x8}, 0xa}, {{&(0x7f0000000540)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000900)=[{&(0x7f00000005c0)=""/234, 0xea}, {&(0x7f00000006c0)=""/142, 0x8e}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000880)=""/74, 0x4a}], 0x4, &(0x7f0000000940)=""/222, 0xde}, 0xdc}], 0x3, 0x1, &(0x7f0000000b00)={0x0, 0x989680}) syz_open_procfs(r6, &(0x7f0000000040)='syscall\x00') r7 = syz_open_procfs(r6, &(0x7f00000000c0)='net/ip6_mr_vif\x00') unshare(0x22020600) lseek(r7, 0x10001, 0x0) sendfile(r1, r3, &(0x7f0000000b40)=0x8, 0x1400000000000000) 30.699083576s ago: executing program 33 (id=650): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x1, 'erspan0\x00', {}, 0x6}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000200), 0x102102, 0x0) pwritev2(r2, &(0x7f0000000840)=[{&(0x7f0000000280)="b658", 0x2}], 0x1, 0xffffffff, 0xc00, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000200)="1c0000001a009b8a070000003b9b701f400004000000eb3f7a7f1de29a", 0x1d) r6 = gettid() recvmmsg(r0, &(0x7f0000000a40)=[{{&(0x7f0000000100)=@ax25={{0x3, @rose}, [@null, @netrom, @rose, @rose, @default, @netrom, @rose, @rose]}, 0x80, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/204, 0xcc}], 0x1}, 0x3}, {{&(0x7f00000003c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000440)=""/121, 0x79}], 0x1, &(0x7f00000004c0)=""/8, 0x8}, 0xa}, {{&(0x7f0000000540)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000900)=[{&(0x7f00000005c0)=""/234, 0xea}, {&(0x7f00000006c0)=""/142, 0x8e}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000880)=""/74, 0x4a}], 0x4, &(0x7f0000000940)=""/222, 0xde}, 0xdc}], 0x3, 0x1, &(0x7f0000000b00)={0x0, 0x989680}) syz_open_procfs(r6, &(0x7f0000000040)='syscall\x00') r7 = syz_open_procfs(r6, &(0x7f00000000c0)='net/ip6_mr_vif\x00') unshare(0x22020600) lseek(r7, 0x10001, 0x0) sendfile(r1, r3, &(0x7f0000000b40)=0x8, 0x1400000000000000) 2.029860009s ago: executing program 5 (id=1064): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000002100)='./cgroup/cgroup.procs\x00', &(0x7f0000002140)={0x200000, 0x118}, 0x18) r4 = openat(r3, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x1da) read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x2020) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x44142, 0x0) (async) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f00000020c0)={0xff, 0x1}) (async) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r7, 0x2000) (async) sendfile(r6, r5, 0x0, 0x3895) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0}) 2.003106389s ago: executing program 5 (id=1065): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xff2e) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='attr\x00') getdents(r2, &(0x7f0000000140)=""/72, 0x48) getdents(r2, 0xffffffffffffffff, 0x5a) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) ppoll(&(0x7f0000000140)=[{r1, 0x10}], 0x1, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0xc, {0x2, 0x4e20, @rand_addr=0x64010102}}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000180)=ANY=[], 0x190) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000000000010a00000000000000001e0000000e00030084067d13fbbcd3547fe50000"], 0x24}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x20000, 0xf3) read$FUSE(r9, &(0x7f0000001540)={0x2020}, 0x2020) munlockall() ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) 1.820546782s ago: executing program 1 (id=1072): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r4 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x80800) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000280)={0x80000000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='net/xfrm_stat\x00') read$FUSE(r7, &(0x7f00000023c0)={0x2020}, 0x2020) keyctl$read(0xb, r6, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000200)="c4c29992146e36f3260f210db9cb0a00000f32c4e37d1d850d000000902e66660fda07c4c31d5e6b00dbb85255cd550f23d80f21f835800000900f23f866ba2100b804186761ef6626660f380895c0968015b8008800000f23c00f21f835030002000f23f8", 0x65}], 0x1, 0x75, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000b20000/0x400000)=nil) read$FUSE(r8, &(0x7f0000001500)={0x2020}, 0x2020) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x0) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f000002b000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x17, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.777895213s ago: executing program 2 (id=1075): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r4, 0x4018aee3, &(0x7f0000000100)=@attr_pmu_irq={0x0, 0x1, 0x1, 0x0}) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x0, 0x0, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/168, 0xa8, 0x0, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/179, 0xb3, 0x0, 0x12}}, &(0x7f0000000280)={0x0, 0x20, 0x48}}}, @increfs_done={0x40106308, 0x2}, @decrefs={0x40046307, 0x3}], 0x1000, 0x0, &(0x7f0000001180)="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"}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000001100)=[{&(0x7f0000000000)="8b21097e", 0x4}, {0x0}], 0x2, 0x8) fcntl$setflags(r5, 0x2, 0x0) splice(r0, 0x0, r6, 0x0, 0xaf4, 0xd) 1.548346967s ago: executing program 1 (id=1082): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r2, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r3, 0x0) (async) shutdown(r1, 0x1) (async) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) (async) r5 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r5, 0xffff) (async) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000100)={r5, 0x0, 0x1000, 0xa000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0xc0086202, &(0x7f0000000080)=0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1.541007396s ago: executing program 1 (id=1083): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000140)=[@register_looper], 0x50, 0x0, &(0x7f0000000180)="c410687af45c2c88d140855b60ff0ae19139acbe886e09540e73a8da59f0f884601ebbc9ecc0d68b87cf9a14b0974281981642e61e4b7c75d3b4f86c68e0d90761343f3e7960c926da42f34cdeec3c3b"}) 1.409115468s ago: executing program 1 (id=1084): ioprio_set$pid(0x2, 0x0, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r2 = add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x18, r2, r2) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async, rerun: 32) read(r0, &(0x7f0000000080)=""/93, 0xffffff6c) (rerun: 32) 1.382944949s ago: executing program 1 (id=1085): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xca000, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000880)={"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"}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc000000010902"], 0x0) r4 = userfaultfd(0x40800) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x6a4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fstat(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@private2, @in6=@private2}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000200)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in, @in=@multicast2}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) removexattr(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)=@known='user.incfs.id\x00') r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) read$FUSE(r7, &(0x7f0000006300)={0x2020}, 0x2020) 1.071871803s ago: executing program 5 (id=1086): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x242, 0x161) write$tcp_mem(r2, &(0x7f000003eec0)={0x7fffffffffffffff, 0x20, 0x1, 0x20, 0x2}, 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x125d, &(0x7f0000001080)) r4 = socket(0x1d, 0x2, 0x6) setsockopt$inet_int(r4, 0x6a, 0xd, 0x0, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x200000}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 1.050996563s ago: executing program 5 (id=1088): ioprio_set$pid(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001880), r0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000018c0)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x60080d5}, 0x20000000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) 1.050153974s ago: executing program 5 (id=1090): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioprio_set$uid(0x3, 0x0, 0x2004) (async, rerun: 32) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async, rerun: 32) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) socket$tipc(0x1e, 0x2, 0x0) (async, rerun: 64) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x0, &(0x7f000082a000/0x400000)=nil) (async, rerun: 64) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf250a000000040002801f0002"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="02"], 0x70}}, 0x0) (async) sendmmsg(r7, &(0x7f0000000180), 0x3ef, 0x0) (async, rerun: 32) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="5c020000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6], 0x25c}}, 0x0) (async, rerun: 32) timerfd_create(0x1, 0x80800) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) (async) recvfrom$unix(r2, &(0x7f00000002c0)=""/119, 0x77, 0x10000, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1f, 0x202812, r0, 0x7dfff000) 1.002047464s ago: executing program 5 (id=1092): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r3 = syz_usb_connect(0x3, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000600)={0x2c, &(0x7f0000000240)={0x20, 0x24, 0xf3, {0xf3, 0xf, "81d8ad5b96f00bdfb5ad76b26812c600fbab4b6c0ffb372415c9c03fa10121e8781fe681a98712043449fdebd41df9fba79ca12e510619193b1db12317b4b0d8649435d6a09fd39c5f35d247a3cfc89f47dc37165472cd80b6c9b7b4fe1d8883f109c1cd3f40617057ce951b286cd5f5b5025f0705806d1d7713ef616c3053e6ee04849a6fa87732c07012760a5dca7bf19ef63dcf75daa1d4c194bdf23a2b4b189503384f3a6b57422a8c8f653117c4cc7ea7b4d514c1359e015c613cd4f02254c04e60525ebbe8fd2fe8c5d61098d742400dcf37d53ceefa81365ed6667cff08486c76d65cef1e2876db42a4245fcb02"}}, &(0x7f0000000440)={0x0, 0x3, 0xe5, @string={0xe5, 0x3, "6b8db19dfe163d54816f811d20e80f9d4b986d5af4b77c097957f5f54c82166aa6a955a428d42a48887f680b16444e52a3275c46d3d89b957ed158e3160e99337e1aa94096eefa87299e9be97dfd3b3386069943a5cb6401f152446fa94d23444562c9f5a0b0b01438d55800a9c3bed11a853683ea25903b1e9fc34620cba4608fe0ade037221c5f8db76de2cd5008f4a7e8a692be6ee5ce9a83a2e86942a701b9c8f154f0893936289d326747761bce0248fda00f78ff358de7a7eab3feb5d142fe434fa834af9424f65afa2bd798fa27ecbde0da9359e1665e7a3a312d9a182b2cfd"}}, &(0x7f0000000540)={0x0, 0xf, 0x17, {0x5, 0xf, 0x17, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x115, 0x9, 0x7f, 0x6, 0xfb}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xf, 0xf, 0xf}]}}, &(0x7f0000000580)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x0, 0x2, "4d6f73b0", "2f27e3e4"}}, &(0x7f00000005c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x1, 0x4, 0x2, 0x1, 0x1, 0x3}}}, &(0x7f0000000b00)={0x84, &(0x7f0000000640)={0x40, 0xb, 0xc1, "c7ca53b664c429abcb0c40155b35530e111f56210de20557b5d62395a6ff18d8be09e27a9e19fec49c945901d670796a7d9ce9e84eb811b5540d9688b97ef068b7f33f174299ccd96ad0a1858adaf9b902305805189fffac4247c3adc75462ffd5a0d5114beb9c0f71fbf6f221b4b05d69a9c30284a2631285969b67d31fcd2162c95e4873a044507fd0be5aa329c468b867e7fd90fbc65e990d4f1477a90cd09ce134ae86f8ea76439cbe7f1ccda70507fdf359beb06194f0fa6508d349d7e643"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000800)={0x20, 0x0, 0x8, {0x1c00, 0x20, [0xf]}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x2}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "d878"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x400}, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000980)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "20a5"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000a40)={0x40, 0x1c, 0x1}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x99}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0xc}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="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", 0xff, 0x4004011, &(0x7f0000000040)={0x11, 0x17, r4, 0x1, 0xb, 0x6, @multicast}, 0x14) 940.602805ms ago: executing program 2 (id=1095): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x4) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1002, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) eventfd(0x4) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 875.009646ms ago: executing program 2 (id=1096): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {0x0, 0x4000}, {0x10, 0x13, @l2={'ib', 0x3a, 'tunl0\x00'}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x40008}, 0x8080) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)={0xc000001a}) dup3(r5, r6, 0x80000) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000040)="00c5", 0x2}], 0x1, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close_range(r2, 0xffffffffffffffff, 0x0) 874.519246ms ago: executing program 2 (id=1097): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000002480)="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", 0x2000, &(0x7f0000004d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10}], 0x5b, 0x0, 0x0}) 874.249506ms ago: executing program 2 (id=1098): pipe(0x0) fsopen(0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mount$incfs(&(0x7f0000000040)='./file1/file4/file7/file6\x00', &(0x7f0000000180)='./file1/file4/file6\x00', &(0x7f0000000200), 0x1, &(0x7f00000003c0)={[{@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x5}}, {@no_bf_readahead}, {@no_bf_cache={'no_bf_cache', 0x3d, 0x1}}, {@rlog_pages={'rlog_pages', 0x3d, 0x8000000000000000}}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) read(r0, &(0x7f0000000080)=""/93, 0xffffff6c) 665.840189ms ago: executing program 1 (id=1099): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) process_vm_readv(r1, &(0x7f0000000140)=[{&(0x7f0000000100)=""/57, 0x39}], 0x1, &(0x7f0000000400)=[{&(0x7f00000029c0)=""/4096, 0x1000}], 0x1, 0x0) syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006010003000000002a90a02700000000b3813e"], 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x85, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcd6, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r4 = add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000240)="c704f4dae5e3e4e545fbba956b44dd03a3e1616eb0f08760ea71e4ef9f625727cfeba20a273a7c68b29f063553d0c3167d45c8dbf6f5caf076d957e22e67f8699ba03787cbd4118624c224914ebf8323dfa553c42bea711a9d85a4d21c052536a657aa0be927", 0x66, r0) keyctl$link(0x8, r4, r0) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[]) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xe2ca6, &(0x7f0000000200)=ANY=[@ANYBLOB='max=0']) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000002c0)) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r5, &(0x7f0000003480)={0x2020}, 0x2020) 93.073658ms ago: executing program 0 (id=1100): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000180)=[@code={0x1, 0x5c, {"66410f3266baf80cb82e82ff84ef66bafc0c66b859ea66efb8010000000f01d9463b350f000000b9330300000f32c4e3997a0a8cc443edce611d8866ba2100ed64440f23a4c421c572f000"}}, @code={0x1, 0x45, {"f3ad260f2e8508000000ef0f01cb6464360f01f8672e66460f38815cbc0666baa10066b8960066efc443654921800f06f3420f09"}}, @uexit={0x0, 0x18, 0x2}, @code={0x1, 0x6d, {"400fc75bebc4e2c59a0c5866f2430f5a3ddf000000c4a2d52b6dce2e2666470f5ac836260f015807670fc75c113d66baf80cb882335d8fef66bafc0c66b8000066ef66b871000f00d8c744240003010000c744240205000000ff1c24"}}, @cpuid={0x2, 0x18, {0xfffffffd, 0x6}}, @code={0x1, 0x6f, {"b805000000b9000000000f01c166baf80cb8c4ce7584ef66bafc0cb8a1de0000eff30f1efb40d9cdc74424003b010000c744240200000000ff1c24c4c1f1c2a5a5000000002e0f01b21f0000008fc870ccd107c463ed7c05faffff7f23f4"}}, @uexit={0x0, 0x18, 0x9df}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18, 0x5}, @cpuid={0x2, 0x18, {0xaf, 0x7}}, @cpuid={0x2, 0x18, {0x8000, 0xfffffffd}}, @uexit={0x0, 0x18, 0x2}, @code={0x1, 0x7a, {"c4a13d71e2dbc7442400b8c73f9fc7442402b1700000c7442406000000000f0114242e400f01c4660f7ed0c4e12b5cf348b891000000000000000f23c80f21f835000060000f23f80f73f64a0fac9200500000360fc76973b94f030000b8c624c5c5ba000000000f30"}}, @cpuid={0x2, 0x18, {0x3ff, 0x81}}, @uexit={0x0, 0x18, 0x100000001}, @code={0x1, 0x6a, {"c4a27d22bc6e090000000f783ec4e31168665027c422dd9af166ba2100ed67f00fc05357c744240000900000c744240200000000c7442406000000000f01142466ba4000b800000000ef47a0132759d5730bef6e26470fc72f"}}, @uexit={0x0, 0x18, 0x124}, @uexit={0x0, 0x18, 0x7fff}, @code={0x1, 0x6f, {"9cc744240000000000c744240242ea0000c7442406000000000f011424fe000f20d835080000000f22d8c7442400f7ffffffc7442402f97f0000c7442406000000000f01142466b811008ec8676766450f73dd270f21fff3ae67420f01c9"}}, @uexit={0x0, 0x18, 0x4}, @code={0x1, 0x4e, {"66ba4300edf240adb90e020000b803000000ba000000000f30676436410f3066ba2000b000ee360f20a5c4413f59ea430f01dff021410cc462dddf4af6"}}, @code={0x1, 0x54, {"cdcc650fc76d090f01cf440f00daf041304202c4a1915ea4d991f604aeb8010000000f01c167450f38097a35b988090000b80a000000ba000000000f3026642e0fc7f7"}}, @uexit={0x0, 0x18, 0xc5}, @code={0x1, 0x8b, {"c74424001d000000c744240205000000c7442406000000000f011c2466420f3a622700b999080000b800000080ba000000000f30650f6a5e0066ba4000b86bc00000efc461cf583c5fb805000000b9300000000f01c148b800000000000000000f23d80f21f835c00000300f23f88fcae8120eef0014170f01cf"}}, @code={0x1, 0x4a, {"0f09440fc76f14f2420f2ceeb8010000000f01d92e4d0fc76ae566baf80cb8c0ed5484ef66bafc0ced26f3426e0f23e3b9680200000f32d9e0"}}, @uexit={0x0, 0x18, 0x6}, @cpuid={0x2, 0x18, {0xfffffffd, 0x2}}, @code={0x1, 0x71, {"410f32b97f0200000f32f20f07b9800000c00f3235001000000f30650fc7990f0000000f21580f013748b800000000000000800f23c80f21f8350400e0000f23f866baf80cb818199c84ef66bafc0cb8bd53ffffef0f20c035100000000f22c0"}}], 0x638}) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f00000007c0)={{0x2, 0x0, 0x80, {0x3000, 0x7000, 0x1}}, "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", "bd5a203deb071ed4379bd4b8d9e1ef8fe7a687a2b320b1889e331f454616cb9d563edd4286b327dee4222295a81373bfb9491cab248ef0956659ab84144620f388513e4fd50fb10add79fceadce245fe99abff7fb5401d8b0b97eec8f7f102fb4bdf9197b89f16b92fab89949037d5909ab6b069ba8074f8394dfa6ccd09f051fa98e8e720c83bd3cd7fac4d35381bacc1910bd9d8e4e6ccf427c6f638e80f38fa10226da63ec6d3cdb00cbda457cb5640608d77737f4d895b7a93c9e24f316363a146b73b181f04a15335b014b6d14744914871cfdbcc7abab5967a46bdeab29584cc3c77eb4616dcfd379e5fa24325d9e60f05469c6918a0426287fcc19e0047cd1e32f5bee6c09957e155bb7c4b36ef11570bc2cd62c938c5af1ab523cde9d6432a76f417cc54a4ab4e702525e28ea2e560aaf271aa2e54b0d42bdd32d6637278f8759538c3c2451fa78646fca889859d1082e41631dc5149ca4acf455db5e0e0103cd4673768a408dfe78d5a7ffb219cc05724ae10a60e85b37d442258b9770bd2b86348681f4a36b0e65e65e370376477149ada42150c78c95b6e8df9f89aead0d78446c226ce305c8fb6fa9da32752d1a32668582ae58ab8d750a736aee93b2c5133a0f32cf3d4c0d2a21d8008a872733462ac86241688698028ee71bc11c91c8342bed4c35dc96f029ee3884616e3dcc9b7fa25750bcd4c819ac2d89297ce700e5ba1a9a7c8f15e76baf607286343904efd35356add157b3ee3146832d50ebbeb8ac0f7ff86400e8cd6d091fafa429e51ef23e627d5a9f40e4f6cb489cb9495b66239d9805cd045a9d334af02a443cec424fa26a5d17914f3a8f85b66e4a6dafb8903eb68772501a42cbfd4445c6883c35c86f0d69bc34d25fe58f7d539fede470b4b8cf5c9301a5c91b8e2110294b6f74754dece78f5bbc42d7e586cc276b34c234ce51f8f0963a53db48b92a39a6a8618a1d2cdbdbcf95380b8f6e882b9e98a433c2188d56f1e490f2638d16599a5e6d2a8992d7aee408edb936e7aa1915a94fd9e7f54a3c2d69fb9449b324e1da2f468298ac9ea23bfa8ebae1c8256385183087ecdf226178bf0d8651818f22446e48ea92a04215bbb41c5ec5a6bc9aafbcc661c39d7bd12c690f5b45badc41e7f8ac7573ab1b41cbb554ac183277fc77e163d3639c2250c4854b092918d6fdb9adb53cc527ac3be57426b7235f7cfc375c3830bbac0fdb3cecf6ff42f4b783bb19dc9ebcc242d2740b6c8f9a9aa8887df78db29da9582e934734be0e79abb9aa9d1b8b57ae1a59e5cf78e681c5489fb0a4c2f0a1723ee1f7b01c0d608dd09d3f89863552837685a5332ea9a6a6c73b3d63eed4f0976d69ca486aeffb4178443100e3853e32f0d89ec636b67dfb0dc3851082f3ac7e3642ad49ff3bf04a6df19a6f46f3fb48ccc6c1e442cb23c351d1ff4263b2a4f58fa47b275a2885143d528dc77eb61a8b27cdeefdc980f1401531e767a8581d61ed9e22d5e5e46f403de3dde5e78ec404f602793ef7e67716d76e0a2c2489b1a977a241f5a38d208990b5b90361062ab4590728ee2168924295ce0e9f67cfc731a6c22351239739a993b601172f8b97598d679f1b2e3d727055a33273c5dc0eb53643cb317875af4a3ed27d8cf9bc250b03f76f883dfff69b22f50500b0a9236d7b1eb48302c3e6ac09857bf2e4656afe99d021224fa1c3dec83e4ce819b4ebe9f5d6afe7ff2bfdfc6d4f77733c4de25a53a24c2a2dea5d4ed16638a1c5ac448ad6027e57e1c4d79e145932f995d0e0940d81fef021e4c2cc61c9366ca40555f43952f125bf8b845e0cf87a50dc80ef80d15f39a332e9971d3fdbfb21fb40ce97e219b27ff02d1e07a9bf80548221eaf500c1a7009f1cdc1969438d2dbfcf840e41236c64c331a9abf8b19d50aebd36505bb3acc0a0855555fd25cde98b4dd55d25c1c6366482fa1174ea2c5779fa70095762763fbfe94de6344372c778f319033aa9c09e7673f85eb23d9beee949771a0702091fdd90a82736a6b3d1605d58576bd87cba915718dd98dca2ca3d85d0cf995082eb3a2623639840d1b433a0117ad9c6cd182182a68b5283581986c6872ecc69e20c7799b69684db470535c9f73a78f6e970d83c6409088c03443d2d5a5ee4bbc1f74e638a203dc4fdf5fa37432f7605320afd827293599152bc91f688dc89de962fdf66324b894a6c6925cd284ceaaba794832e2b1f5160dcdea72973bf6070efe9367e281bdb2ed013583e902137be1b964c9f574a0af3b2c411bb1850d50307af3ff704fb7df803f11343b2c5f4c6eaf6f935a992a88aed4c9f95c90d1b14cf8fb765d31f535c41c4af975c6da77a485c241f297bca12295a564d081f05b3d8c884ed8adfcccc59b0789ae2fecc48f7bcad0e1a38dcefba24e78b11a15e84b6ae2323a9beaba77c0a9a04b78781bcb1a67263cfb719a958013fcaf99ed268e1eb55a402fc2e84f71de5857bcd7287ab5a7216d3f568f26830b15ad50b21e87f2770ded796fe1d8cb3fd508ac56da94ec4cb250f93a5b9c7e26b5535dcff972781bcc1614ad196896c717dd08ea329c6955bcd629f9b00cd98b718177bef26c5c58ee07d0c859a12a28afbb449b1eec8c1ae1e1c3c650e2865e438c2ada336ae3d8b0f5bc903415056d977bf41b3d638c73ab44501f3e848d081f2d484252e7a1dd08042d96e93acd88d5e3dbb26cd84cfbcc56d8cced3b0d3f68a9c6d3f4e8ad779002892cf473fe929da4b49326218ac0a2e8983815a2d087dbefb4ea26909a841f264176eaad94572ccd8377324cb2b311d351e98c7fef6051a0e1ee9f7fc618fb05a03fa8c60c10458de3448a307585f4df2b539ba73d0676caf82cf8b9788fb1a4e0aac2cd3c88e19b230d3ae93007e89ac7063a0d7ca49ce202415f08478eaee98a7d4876e0b827cc00f93bcbf5904534cb3ce29b00032f89c9cf885363e3f0263e76ae205f352ae428062d8a7ae01e2f9758888de4fcfd55aa90573d61735383e4a016304129d375838a2e541abcffda2a56a55fdf25d5244391049f6083d6d0fce4c50417e9daa4fcf2fccc30d3c0bafa44a4b725401f11d9e2c16b6cb3dd4e148ab9ef7090296abc41b4ae4d766d04a3386721b51a4322b205c3a1158930f29f77b855b305c2084e0059d6ff2ddeb950c924be778eb4bc9f34c42b47281042c887ada9c9e8d6177b59922541070b93c241623e6c70e0c67d3e8116b8c35ea2dcf71837afc7b5a5b6bcbb738349705531afa6651bb53afcb10c59a4cb63428484817efab61def155a1e0c79706ecbaa5a2412c88add68c1ba27885a804fd074f6b48c547a595beb61f14a3efa8550307cce9c312b75e27b97468d1f0187cd979e783154cdba05a9ac8424448914c44cbd3f3d9456f77c30447dfda66fe7d2138744bf3c27f602de0e762e6ef41c5900caacf09e90886a5162ef5e59251fdb908253e5cedfd5fc64acf8cf4e864d94a114646d3f4eb31c5345efac9886fd6c2a95d74e6c8e4d95373def685014c0cd8111defc465ed2320a4aa1e8fab407310c4f3a04f2464d718f6f0c0d1026147fe80eb6c2bae832919cea6f41409dd10a94bfb7b561d00915955aa3600cd75babf6daf19ae9be8ab66990dd4c56f8a26fb2cb1b5c3abc4883bd73e3580b57dd36946d11016d5b07bed103fa9dd3926b746bea03eb1fd9d06a4c054457fde0752efcc8925bca5af023531859abc2cdac2a31db3f9bd9ba0d100688d130be27ea22959ed986aef8699d07eb0c8d6cd338fd4ec905b61d4c7ec47d2a8048f237b41b9e506ae0c03f5680ccad97c99251e543987778cd50d3bb6d93589079d93a434e73e90ae1cacbdd2ba7f4043530c1d9d079422a94af682128a0dd7343c65586d797803b372d916471d9c9428fc9d3eb91ca66d6e3132f38762efd476e18ce74c22b51f4f22932655e4b72307779c404629373c8a6324b129d4ede9f1d8eb70bd6aecd26d86b7c132cc89a1e447595084d4b6e93474dee8192056ae9b44b83d75cc07befd9d4c8700522f2380ea033681fff1b1abbcb56311f392a9620dfdb9dff36ad4d415790b997e78a875b10c03e170bf4e1c90b910f96da0fd4cd2e0c3e025be081a4b78ef409c113e176fb21696ea6161cd33ccbe87ef726f885fddb9fe25773dcce40fab53f7fa4b2dbc94108291252dcbf5a199b42e1bef7d6c418a216bf6614aaf9c6b63604d9e5af7a6007dbedec1a5eae85d086d82b1949bf4485268eb87fbfeba7e5526d1dda1ab3ad27995fdc3f775e2494438050f7b184e62ceb5c775774739b9a8ad91d5ba19337a905447e37c2d2ff2fca0b43417efec759a576f7e107f4e56765e33e8a37a48c23356b851b9367b8124b69b7036e593663895f296ad9a520208cdda752e46853b4e3acfb7fe21f213a00742fff4835b4b3512eb5ddd5a4fde8cd0aa86bd7beb1e532beed63ae1261a64ff18beb93326b6c35f2fd8eca8895487927b85b2ac5d17bf0cd773dbb60ff11b27da56cedced858fddbb8178a2f4489b982f2c4cb18694f0acd5b5ffba710650144c3fbb0bb3f7004f1a4aea6194b3dee5b3b69baa47142d3f1ff02ed6406d6bdbed60aa4d764829c7ac672c8561822d872e4b9861cf841d4f0936e9d0c696c627dee66cd5167c9c6e9c9bcffb7b5a561f1181a8a026a29c563d444a7482e082de2699635dbd7851dee4f60018daf2ad6bf10797240d897d2e7a18c9070160e07435782518d2a64bbb5a6bd4925cc2aeb14ac47cd4145c82df0360c7d09de974f8924156bb2dd15e035a0eda91585808572a5a7790d391646c5f65b1021b69b36aca9c6fa8ec98794ffe5c6ce2a258d6eea0fd061293ab9b8a38644dcb80a284de3116ca7ad9c2d3c6cbd511184d10434a4b5b40d2137f85719f673e2e06063c2e31913a3a6b56885b81a9cb78c61a74c8ccc1f0b71f9577bf9d26eb93829e218fe2f0898c7e2739eb372a3ba7b581098d0a04c05c640d329b3979aaf933e971afe6a6ab661bbdb9948cc62af98c1a8eb072fc92f0e5991db18c688161952f8871fe8eedea2a480e92c777e3d6dff640d07c7191195e2b3720908ad0e865e360202d85939b7c5fe268b6761773756687b251d7135ffb5c4c397f51e1b6db90faa3c0c5dcbb36e3124a547ab8019a368706ce5c5a9a25ce2595f6c63c0a8444f8bc9b323a54066df8d3ea7fe50f6891b7f7537e16a87b2fef31a1a792d873d70f726ed7d29988cc419e10e5feafcd99605f536f5d5fa6280d937eca07133bed17963a3fee9c1d489270cf7cc18e0c92e6e6b4ff0d1558ce727731bc8ae1932b099d7785f5277dd2e4a78879cf74f80a209d15a59cd6a42d34115f12e04b98d0a8d3d3d8d1bde1e3eaee2cb21c9f31df81a0cc236821fb1c6a8f4a8c80ac0fdc2edaf03df846f7f5e8280c66da262564153c289a39250e47772e82e64e34444bc23e3116cf076187f2d387bd10426a936a8e6bb5e7631f89aefb9fa046de1a3b9e56a8bebc29dc97bad8d53f4d5d0121a00c256966035dc3394f9eaeff3ae22d14ada031aa0812879d0a9bf6df16fd21b0f9b4225637dd839c72fcb376f6604915fd6f7886e95eb6eb499d7649ef9b12885a46dbbbe6f60bab44fee8c69c993281f290aa1a8b20f42b57a2595b5f6b344431e0a1d0b23d81a4e1e6807edce7cffda1731497f9adc20e70d39eaf3d4a7a09ba8a7d9888c3195d2d0bd64550177ce861b3d01066a987f40ff6603b2d6bec2af42f14aaf52d77558a556ae"}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009b02"]) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) close_range(r0, 0xffffffffffffffff, 0x0) 35.285249ms ago: executing program 0 (id=1101): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x8}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000000)={0x6, 'lo\x00', {0x1}, 0x4}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@fd, @fd, @fda={0x66646185, 0xa, 0x2, 0x19}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 34.615899ms ago: executing program 0 (id=1102): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5500000020007f2fb72d13b2a4a271930200002000aab88bb5969e41789848a3c728f1afa823ff0000010100005ae583de0d32d6ed9098d100000042e718f94b02000000000000002ce9c95d92fb38675800000000", 0x55}], 0x1}, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @any, 0xfe}, 0xa) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) close_range(r5, 0xffffffffffffffff, 0x0) 32.878549ms ago: executing program 2 (id=1103): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@local, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x6, 0x1, 0x0, 0x8, 0x81, 0xfff9}, 0x20) bind$inet(r0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r3, 0x4}, {r0, 0xa603}], 0x2, &(0x7f0000000200)={0x77359400}, &(0x7f0000000300)={[0x5]}, 0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x1001, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/89, 0xfffffffffffffc96, 0x2, 0x2}, @fd, @flat=@binder={0x73622a85, 0x1000, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 32.015829ms ago: executing program 0 (id=1104): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) close(0x3) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000180)=0x2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff7) close_range(r1, 0xffffffffffffffff, 0x0) 17.998509ms ago: executing program 0 (id=1105): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c00170000000000000000657468cb595322e9b0985b56be3a"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x0, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=1106): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2) r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffe, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) r1 = syz_open_dev$loop(&(0x7f00000006c0), 0x10, 0x60000) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000700)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/warn_count', 0x8000, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="0f01c42e650f785700f3450f232bb93f0800000f32660f7f04100f07440f070f30c48371795c86fb45362e400fc779ff", 0x30}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) sendfile(r1, r4, &(0x7f00000000c0)=0x3ff, 0x3) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x490420, 0x9}}, 0x50) syz_fuse_handle_req(r8, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r11, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r10, 0x0}]) dup3(r7, r8, 0x6700000000000000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x210000, 0x0) r12 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x10000000000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) kernel console output (not intermixed with test programs): ure Err(EFAULT) in pid:208 [ 46.263061][ T65] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 46.403047][ T65] usb 3-1: device descriptor read/64, error -71 [ 46.643123][ T65] usb 3-1: device descriptor read/64, error -71 [ 46.743091][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 46.883171][ T65] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 46.905581][ T10] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.916697][ T10] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 1024 [ 46.927765][ T10] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 46.937922][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 46.946767][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.956906][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.965161][ T10] usb 1-1: Product: ခ [ 46.969418][ T10] usb 1-1: Manufacturer: 雦㗪ᑂ脚xﻀ䬐곍듇᧌楉將㷫ぎ䵦␿dž翕븺컖毐鶦실辱䚈㗿뷳䰏⳪疁现☐鰬ᯩ酞嗓㖹羏쓣䤊椇꛴瓒⣫➺㈒燹뺌姂ꇌ率ࠕ笢➻언ꬱ䒬繨﫟飼㢊엔윺ﰢ쵊㷅磜ꬤ퍬쀧뮐쑗ⴣ廏䳺钷䛜橛 [ 46.998579][ T10] usb 1-1: SerialNumber: ࠌ [ 47.004636][ T980] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 47.012735][ T980] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 47.020371][ T65] usb 3-1: device descriptor read/64, error -71 [ 47.231920][ T10] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 47.244745][ T10] usb 1-1: USB disconnect, device number 5 [ 47.263204][ T65] usb 3-1: device descriptor read/64, error -71 [ 47.373183][ T65] usb usb3-port1: attempt power cycle [ 47.567938][ T31] usb 4-1: USB disconnect, device number 9 [ 47.598672][ T986] binder: Unknown parameter 'context' [ 47.616423][ T988] netlink: 584 bytes leftover after parsing attributes in process `syz.3.210'. [ 47.628298][ T988] 9pnet_fd: Insufficient options for proto=fd [ 47.676621][ T990] rust_binder: Write failure EFAULT in pid:146 [ 47.713245][ T65] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 47.745432][ T65] usb 3-1: device descriptor read/8, error -71 [ 47.780801][ T999] netlink: 140 bytes leftover after parsing attributes in process `syz.0.214'. [ 47.884027][ T65] usb 3-1: device descriptor read/8, error -71 [ 48.133911][ T65] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 48.164052][ T65] usb 3-1: device descriptor read/8, error -71 [ 48.294056][ T65] usb 3-1: device descriptor read/8, error -71 [ 48.403133][ T65] usb usb3-port1: unable to enumerate USB device [ 48.521434][ T1009] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 48.521460][ T1009] rust_binder: Read failure Err(EFAULT) in pid:113 [ 49.003230][ T1036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.005223][ T1038] overlayfs: failed to resolve './file1': -2 [ 49.011584][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 49.011604][ T36] audit: type=1400 audit(48.969:306): avc: denied { associate } for pid=1035 comm="syz.1.226" name="hugetlb.2MB.rsvd.usage_in_bytes" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 49.053878][ T1036] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 49.084389][ T1044] rust_binder: 1044: no such ref 2051 [ 49.097888][ T1044] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:164 [ 49.098700][ T1045] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.099740][ T1046] rust_binder: 1046: no such ref 2051 [ 49.124868][ T1046] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:164 [ 49.255615][ T1054] binder: Unknown parameter 'context' [ 49.328785][ T1057] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 49.328815][ T1057] rust_binder: Read failure Err(EFAULT) in pid:224 [ 49.341861][ T1057] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:224 [ 49.497924][ T36] audit: type=1400 audit(49.459:307): avc: denied { write } for pid=1067 comm="syz.2.237" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 49.539649][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 49.548108][ T36] audit: type=1400 audit(49.459:308): avc: denied { open } for pid=1067 comm="syz.2.237" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 49.713073][ T31] usb 1-1: device descriptor read/64, error -71 [ 49.950024][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.950330][ T1076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.240'. [ 49.965826][ T31] usb 1-1: device descriptor read/64, error -71 [ 50.092310][ T36] audit: type=1400 audit(50.049:309): avc: denied { bind } for pid=1083 comm="syz.2.243" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.113568][ T36] audit: type=1400 audit(50.049:310): avc: denied { name_bind } for pid=1083 comm="syz.2.243" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 50.134454][ T36] audit: type=1400 audit(50.049:311): avc: denied { node_bind } for pid=1083 comm="syz.2.243" saddr=fc02::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 50.223147][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 50.243191][ T731] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 50.283114][ T65] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 50.333071][ T468] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 50.353087][ T31] usb 1-1: device descriptor read/64, error -71 [ 50.393128][ T731] usb 2-1: Using ep0 maxpacket: 32 [ 50.402545][ T731] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 50.411245][ T731] usb 2-1: config 0 has no interface number 0 [ 50.420011][ T731] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 50.430988][ T731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.439282][ T731] usb 2-1: Product: syz [ 50.443585][ T731] usb 2-1: Manufacturer: syz [ 50.444619][ T65] usb 4-1: config 0 has no interfaces? [ 50.448218][ T731] usb 2-1: SerialNumber: syz [ 50.454030][ T65] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 50.459489][ T731] usb 2-1: config 0 descriptor?? [ 50.473155][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.483317][ T731] smsc95xx v2.0.0 [ 50.487754][ T65] usb 4-1: config 0 descriptor?? [ 50.495436][ T468] usb 3-1: Using ep0 maxpacket: 16 [ 50.508574][ T468] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 50.522688][ T468] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 50.534990][ T468] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 50.555416][ T468] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 50.566892][ T468] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.575892][ T468] usb 3-1: Product: syz [ 50.580158][ T468] usb 3-1: Manufacturer: syz [ 50.585194][ T468] usb 3-1: SerialNumber: syz [ 50.613140][ T31] usb 1-1: device descriptor read/64, error -71 [ 50.710255][ T305] usb 4-1: USB disconnect, device number 10 [ 50.723413][ T31] usb usb1-port1: attempt power cycle [ 50.884607][ T731] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 50.896247][ T731] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 50.994696][ T468] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 51.063144][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 51.084937][ T31] usb 1-1: device descriptor read/8, error -71 [ 51.215229][ T31] usb 1-1: device descriptor read/8, error -71 [ 51.302143][ T1087] netlink: 'syz.3.244': attribute type 12 has an invalid length. [ 51.463054][ T31] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 51.484797][ T31] usb 1-1: device descriptor read/8, error -71 [ 51.543056][ T305] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 51.614385][ T31] usb 1-1: device descriptor read/8, error -71 [ 51.693023][ T305] usb 4-1: Using ep0 maxpacket: 16 [ 51.698908][ T305] usb 4-1: too many configurations: 183, using maximum allowed: 8 [ 51.707900][ T305] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.718439][ T305] usb 4-1: config 0 has no interfaces? [ 51.724222][ T31] usb usb1-port1: unable to enumerate USB device [ 51.731485][ T305] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.742544][ T305] usb 4-1: config 0 has no interfaces? [ 51.749359][ T305] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.759944][ T305] usb 4-1: config 0 has no interfaces? [ 51.766538][ T305] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.776956][ T305] usb 4-1: config 0 has no interfaces? [ 51.783325][ T305] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.793546][ T305] usb 4-1: config 0 has no interfaces? [ 51.799925][ T305] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.810358][ T305] usb 4-1: config 0 has no interfaces? [ 51.816896][ T305] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.828210][ T305] usb 4-1: config 0 has no interfaces? [ 51.834741][ T305] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.846088][ T305] usb 4-1: config 0 has no interfaces? [ 51.855058][ T305] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 51.867243][ T305] usb 4-1: New USB device strings: Mfr=10, Product=133, SerialNumber=39 [ 51.878433][ T305] usb 4-1: Product: syz [ 51.887101][ T305] usb 4-1: Manufacturer: syz [ 51.895341][ T305] usb 4-1: SerialNumber: syz [ 51.905776][ T305] usb 4-1: config 0 descriptor?? [ 52.001529][ T36] audit: type=1400 audit(51.959:312): avc: denied { accept } for pid=1083 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.027397][ T36] audit: type=1400 audit(51.989:313): avc: denied { read } for pid=1083 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.060265][ T468] usb 3-1: USB disconnect, device number 8 [ 52.077350][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.163937][ T1089] binder: Bad value for 'stats' [ 52.203017][ T36] audit: type=1400 audit(52.159:314): avc: denied { mount } for pid=1093 comm="syz.0.247" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 52.227258][ T36] audit: type=1400 audit(52.169:315): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 52.381161][ T1100] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 52.396461][ T1100] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 52.584170][ T1110] rust_binder: 1103 RLIMIT_NICE not set [ 52.589434][ T1112] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 53.043052][ T306] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 53.194530][ T306] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 53.207658][ T306] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 53.218666][ T306] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x2 has invalid maxpacket 1024, setting to 8 [ 53.230509][ T306] usb 3-1: config 0 interface 0 has no altsetting 0 [ 53.237914][ T306] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 53.247359][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.256799][ T306] usb 3-1: config 0 descriptor?? [ 53.265308][ T1123] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 53.273292][ T1123] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 53.526893][ T731] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 53.538196][ T731] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 53.548431][ T731] usb 2-1: USB disconnect, device number 11 [ 53.685443][ T306] hid-generic 0003:1B1C:1C0D.0003: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0d] on usb-dummy_hcd.2-1/input0 [ 53.708368][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 53.863112][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 53.871470][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.883034][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 53.894910][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 53.905521][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.915309][ T9] usb 1-1: Product: syz [ 53.920508][ T9] usb 1-1: Manufacturer: syz [ 53.925827][ T9] usb 1-1: SerialNumber: syz [ 54.070917][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 54.070935][ T36] audit: type=1400 audit(54.029:321): avc: denied { ioctl } for pid=1131 comm="syz.1.260" path="socket:[9018]" dev="sockfs" ino=9018 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 54.131124][ T36] audit: type=1400 audit(54.089:322): avc: denied { read } for pid=1131 comm="syz.1.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.155593][ T9] usb 1-1: skipping empty audio interface (v1) [ 54.164095][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 54.175994][ T9] usb 1-1: USB disconnect, device number 10 [ 54.186051][ T403] udevd[403]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.365944][ T9] usb 4-1: USB disconnect, device number 11 [ 54.401270][ T1135] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:177 [ 54.401932][ T1136] rust_binder: Error while translating object. [ 54.412796][ T1136] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 54.419574][ T1136] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:177 [ 54.443456][ T36] audit: type=1400 audit(54.409:323): avc: denied { mount } for pid=1138 comm="syz.3.262" name="/" dev="ramfs" ino=9938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 54.475491][ T36] audit: type=1400 audit(54.439:324): avc: denied { map } for pid=1138 comm="syz.3.262" path="socket:[9027]" dev="sockfs" ino=9027 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 54.679018][ T36] audit: type=1400 audit(54.639:325): avc: denied { accept } for pid=1142 comm="syz.0.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.846427][ T1152] rust_binder: Error while translating object. [ 54.846460][ T1152] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 54.853339][ T1152] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:213 [ 54.880119][ T1154] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 54.890709][ T1154] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:215 [ 55.226883][ T36] audit: type=1400 audit(55.189:326): avc: denied { create } for pid=1169 comm="syz.0.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 55.261887][ T1172] rust_binder: Write failure EINVAL in pid:227 [ 55.267041][ T36] audit: type=1400 audit(55.219:327): avc: denied { bind } for pid=1169 comm="syz.0.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 55.296272][ T36] audit: type=1400 audit(55.229:328): avc: denied { write } for pid=1173 comm="syz.3.274" name="file0" dev="tmpfs" ino=353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 55.322165][ T36] audit: type=1400 audit(55.229:329): avc: denied { open } for pid=1173 comm="syz.3.274" path="/62/file0" dev="tmpfs" ino=353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 55.337995][ T1177] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 89) [ 55.347680][ T36] audit: type=1400 audit(55.239:330): avc: denied { ioctl } for pid=1173 comm="syz.3.274" path="/62/file0" dev="tmpfs" ino=353 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 55.348012][ T1177] rust_binder: Error while translating object. [ 55.384284][ T1177] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 55.390688][ T1177] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:229 [ 55.502267][ T1187] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 55.515783][ T1187] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 55.526992][ T1187] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:197 [ 55.733276][ T31] usb 3-1: USB disconnect, device number 9 [ 55.754000][ T1200] 9pnet_fd: Insufficient options for proto=fd [ 55.893064][ T9] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 55.942640][ T1211] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.945343][ T1211] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:158 [ 55.990097][ T1213] kvm: vcpu 512: requested lapic timer restore with starting count register 0x390=1814518830 (232258410240 ns) > initial count (2458284544 ns). Using initial count to start timer. [ 56.065781][ T9] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 56.074603][ T9] usb 4-1: config 0 has no interface number 0 [ 56.081591][ T9] usb 4-1: config 0 interface 41 has no altsetting 0 [ 56.091000][ T9] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 56.100536][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.109758][ T9] usb 4-1: Product: syz [ 56.114614][ T9] usb 4-1: Manufacturer: syz [ 56.119856][ T9] usb 4-1: SerialNumber: syz [ 56.128127][ T9] usb 4-1: config 0 descriptor?? [ 56.131815][ T1215] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.140514][ T9] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 56.342244][ T305] usb 4-1: USB disconnect, device number 13 [ 56.373089][ T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 56.534296][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.546647][ T31] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 56.555891][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.563956][ T31] usb 2-1: Product: syz [ 56.568264][ T31] usb 2-1: Manufacturer: syz [ 56.572944][ T31] usb 2-1: SerialNumber: syz [ 56.573039][ T306] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 56.587458][ T31] usb 2-1: config 0 descriptor?? [ 56.595957][ T31] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 56.611841][ T403] udevd[403]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.733155][ T306] usb 1-1: Using ep0 maxpacket: 16 [ 56.740913][ T306] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.753256][ T306] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.766519][ T306] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 56.768437][ T1223] /dev/rnullb0: Can't open blockdev [ 56.777349][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.791479][ T306] usb 1-1: Product: syz [ 56.795436][ T1215] rust_binder: Write failure EINVAL in pid:162 [ 56.796733][ T306] usb 1-1: Manufacturer: syz [ 56.807989][ T306] usb 1-1: SerialNumber: syz [ 56.877248][ T1225] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:209 [ 56.878998][ T1225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.293'. [ 56.927745][ T1228] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.927778][ T1228] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.015825][ T1218] rust_binder: Failed to allocate buffer. len:16, is_oneway:true [ 57.190763][ T1235] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:162 [ 57.350748][ T1247] rust_binder: Write failure EINVAL in pid:230 [ 57.418646][ T1256] netlink: 328 bytes leftover after parsing attributes in process `syz.3.301'. [ 57.440590][ T1256] can0: slcan on ptm0. [ 57.483761][ T1256] can0 (unregistered): slcan off ptm0. [ 59.141674][ T31] usb 2-1: USB disconnect, device number 12 [ 59.214987][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 59.215027][ T36] audit: type=1400 audit(59.179:340): avc: denied { append } for pid=1282 comm="syz.1.311" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.312729][ T306] usb 1-1: USB disconnect, device number 11 [ 59.340922][ T36] audit: type=1400 audit(59.299:341): avc: denied { getopt } for pid=1287 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 59.372929][ T403] udevd[403]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.413199][ T36] audit: type=1400 audit(59.309:342): avc: denied { append } for pid=1288 comm="syz.1.314" name="pfkey" dev="proc" ino=4026532611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 59.481247][ T1299] binder: Bad value for 'defcontext' [ 59.554859][ T36] audit: type=1400 audit(59.519:343): avc: denied { listen } for pid=1305 comm="syz.1.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.578815][ T36] audit: type=1400 audit(59.519:344): avc: denied { ioctl } for pid=1305 comm="syz.1.321" path="socket:[11703]" dev="sockfs" ino=11703 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.672536][ T1320] /dev/rnullb0: Can't open blockdev [ 59.699197][ T1324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.738553][ T1327] tipc: Started in network mode [ 59.751071][ T1327] tipc: Node identity 9a53357148c8, cluster identity 4711 [ 59.759353][ T1327] tipc: Enabled bearer , priority 0 [ 59.769309][ T1327] tipc: Disabling bearer [ 59.773205][ T468] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 59.833042][ T306] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 59.844296][ T1329] /dev/rnullb0: Can't open blockdev [ 59.933018][ T468] usb 3-1: Using ep0 maxpacket: 32 [ 59.939673][ T468] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.951854][ T468] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.962796][ T468] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 59.976400][ T468] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 59.985727][ T468] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.995880][ T468] usb 3-1: config 0 descriptor?? [ 60.006540][ T306] usb 1-1: config 0 has no interfaces? [ 60.012318][ T306] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 60.022430][ T306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.034435][ T306] usb 1-1: config 0 descriptor?? [ 60.240984][ T9] usb 1-1: USB disconnect, device number 12 [ 60.380510][ T1350] batadv_slave_1: entered promiscuous mode [ 60.387104][ T1350] batadv_slave_1: left promiscuous mode [ 60.427075][ T468] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0004/input/input8 [ 60.454975][ T468] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0004/input/input9 [ 60.469321][ T468] kye 0003:0458:5011.0004: input,hiddev96,hidraw0: USB HID v9.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 60.715158][ T468] usb 3-1: USB disconnect, device number 10 [ 60.724710][ T1304] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 60.751171][ T1365] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.753114][ T1365] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 60.879980][ T1373] /dev/rnullb0: Can't open blockdev [ 60.980850][ T36] audit: type=1400 audit(60.929:345): avc: denied { write } for pid=1375 comm="syz.0.341" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 61.023142][ T36] audit: type=1400 audit(60.929:346): avc: denied { open } for pid=1375 comm="syz.0.341" path="/80/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 61.335258][ T36] audit: type=1400 audit(61.299:347): avc: denied { map } for pid=1385 comm="syz.2.345" path="socket:[11942]" dev="sockfs" ino=11942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.361357][ T36] audit: type=1400 audit(61.299:348): avc: denied { read } for pid=1385 comm="syz.2.345" path="socket:[11942]" dev="sockfs" ino=11942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.386354][ T36] audit: type=1400 audit(61.299:349): avc: denied { map } for pid=1385 comm="syz.2.345" path="socket:[11941]" dev="sockfs" ino=11941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 61.416797][ T1387] rust_binder: 1384 RLIMIT_NICE not set [ 61.442717][ T1391] netlink: 80 bytes leftover after parsing attributes in process `syz.2.347'. [ 61.484767][ T1393] TCP: TCP_TX_DELAY enabled [ 61.515348][ T1393] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:298 [ 61.530423][ T1398] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 61.752895][ T1408] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 61.780900][ T1410] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.807638][ T1413] netlink: 'syz.1.355': attribute type 12 has an invalid length. [ 61.835827][ T1413] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.864412][ T1415] /dev/rnullb0: Can't open blockdev [ 61.942030][ T1420] rust_binder: Failed to allocate buffer. len:16, is_oneway:true [ 61.975232][ T1423] rust_binder: 1423: no such ref 0 [ 61.993654][ T1423] rust_binder: Write failure EINVAL in pid:275 [ 62.033011][ T306] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 62.203069][ T306] usb 1-1: Using ep0 maxpacket: 16 [ 62.210421][ T306] usb 1-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.223232][ T306] usb 1-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 62.233075][ T10] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 62.234052][ T306] usb 1-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 62.253339][ T306] usb 1-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 62.267332][ T306] usb 1-1: config 1 interface 0 has no altsetting 0 [ 62.275414][ T306] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 62.287720][ T306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 62.299618][ T306] usb 1-1: SerialNumber: syz [ 62.306612][ T1408] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 62.328218][ T1408] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 62.345008][ T1433] rust_binder: Error while translating object. [ 62.345080][ T1433] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 62.352032][ T1433] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:311 [ 62.404870][ T10] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 62.427864][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.437621][ T10] usb 4-1: config 0 descriptor?? [ 62.459290][ T1437] /dev/rnullb0: Can't open blockdev [ 62.493324][ T1440] incfs: Error accessing: ./file0. [ 62.498769][ T1440] incfs: mount failed -20 [ 62.668989][ T1448] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.669809][ T1448] netlink: 392 bytes leftover after parsing attributes in process `syz.1.367'. [ 62.696027][ T1448] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.696989][ T1448] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.704567][ T1448] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:233 [ 62.711590][ T1448] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 62.861505][ T1454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.870371][ T1455] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.881506][ T1454] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 62.991183][ T1460] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 63.003168][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 63.253013][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 63.260342][ T9] usb 3-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 63.272597][ T9] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 63.284435][ T9] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 63.294462][ T9] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 63.302900][ T1466] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 63.304080][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.321793][ T1466] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 63.517462][ T1473] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.525468][ T1450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.368'. [ 63.563633][ T9] usb 3-1: string descriptor 0 read error: -71 [ 63.582065][ T9] usb 3-1: USB disconnect, device number 11 [ 64.410218][ T1487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.457480][ T1487] netlink: 16 bytes leftover after parsing attributes in process `syz.1.378'. [ 64.477018][ T1487] netlink: 'syz.1.378': attribute type 153 has an invalid length. [ 64.723075][ T468] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 64.751773][ T306] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 64.755771][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 64.755806][ T36] audit: type=1400 audit(64.719:360): avc: denied { unlink } for pid=289 comm="syz-executor" name="file0" dev="tmpfs" ino=489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 64.763723][ T306] usb 1-1: USB disconnect, device number 13 [ 64.873032][ T468] usb 2-1: Using ep0 maxpacket: 32 [ 64.885008][ T468] usb 2-1: config 1 interface 0 altsetting 179 bulk endpoint 0x1 has invalid maxpacket 1024 [ 64.897734][ T468] usb 2-1: config 1 interface 0 altsetting 179 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 64.913504][ T468] usb 2-1: config 1 interface 0 has no altsetting 0 [ 64.924820][ T468] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 64.935494][ T468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.945190][ T468] usb 2-1: Product: Ф [ 64.950070][ T468] usb 2-1: Manufacturer: 歝꒼䥟瘜峈᷺◆廧猜즙둖⠓亹⤘䆱鼼䲰䢵ࣩ次踸狧덍諃ࣱ℆잙냛ⴺ⯷쨴ደ풟搌쬋ꅾ팏읍턲קּ씼짏Ⴋ垅﵅痤䱖㭽ꅈ㰧そ⎾炔덖簓㡮ꮝ叴뱄ⶵᯪ≼〜헷똭掜䝓糽쥲㲑箓鏠즂ᾩ駴塺衪즗ꟿ᳽卸峍렽用䮏擦㜳ꏃ䦸驮杻绨ᒼㆼ嫡趬㇖㈀ᭌ됓웬세ᄁⵓ迕サ틮楷 [ 64.987421][ T468] usb 2-1: SerialNumber: ᧨琡㴔솴®篭啔嗢ի䃑顉ᒑ曔㽇Šᾛ䰩髭広ﻛ쪯훪鈇艄䏭腷鮂份ㅝ曍푣㲂㡭ⶫ䄆ꖽ묚☞Ϡ丸䉖厌㭢⓲닗ᧃ鵉뀑쉄证ጵय㣑괜传ᶴ訊帛姢敐怈얄㥳룓啪ᔐ䯎朙췭睮꘏齭뽾㽦콝縺̍ꙿヷꗦ轰঱䒍꬜䆶滲ፕ곸ﭫ䣂缀כֿ䴟ュ몾⽹㺢嵹 [ 65.029043][ T1487] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 65.193145][ T306] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 65.238957][ T1487] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 65.249390][ T468] usb 2-1: USB disconnect, device number 13 [ 65.353886][ T306] usb 1-1: unable to get BOS descriptor or descriptor too short [ 65.363148][ T306] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.374032][ T306] usb 1-1: config 0 has no interfaces? [ 65.381472][ T306] usb 1-1: New USB device found, idVendor=056a, idProduct=02ef, bcdDevice= 0.40 [ 65.390917][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.399077][ T306] usb 1-1: Product: syz [ 65.403592][ T306] usb 1-1: Manufacturer: syz [ 65.408312][ T306] usb 1-1: SerialNumber: syz [ 65.414141][ T306] usb 1-1: config 0 descriptor?? [ 65.483526][ T36] audit: type=1400 audit(65.449:361): avc: denied { getopt } for pid=1510 comm="syz.3.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 65.523260][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 65.531687][ T1513] binder: Unknown parameter 'fscontext?}1844674407370955161501777777777777777777777g^K혨' [ 65.622747][ T36] audit: type=1400 audit(65.579:362): avc: denied { getopt } for pid=1501 comm="syz.0.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 65.625471][ T1502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.653594][ T1502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.664984][ T468] usb 1-1: USB disconnect, device number 14 [ 65.694267][ T9] usb 3-1: config 0 has no interfaces? [ 65.702071][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 65.711974][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 65.720847][ T9] usb 3-1: Product: syz [ 65.725915][ T9] usb 3-1: Manufacturer: syz [ 65.730719][ T9] usb 3-1: SerialNumber: syz [ 65.736525][ T9] usb 3-1: config 0 descriptor?? [ 65.772281][ T1523] binder: Bad value for 'defcontext' [ 66.073033][ T468] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 66.202012][ T1535] support for the xor transformation has been removed. [ 66.224182][ T468] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.235672][ T468] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.245492][ T468] usb 2-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 66.254688][ T468] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.264201][ T468] usb 2-1: config 0 descriptor?? [ 66.453122][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 66.473874][ T468] logitech-djreceiver 0003:046D:C534.0005: unknown main item tag 0x0 [ 66.483108][ T468] logitech-djreceiver 0003:046D:C534.0005: unknown main item tag 0x0 [ 66.485471][ T1539] rust_binder: Error while translating object. [ 66.491507][ T1539] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 66.491618][ T468] logitech-djreceiver 0003:046D:C534.0005: unknown main item tag 0x0 [ 66.498158][ T1539] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:290 [ 66.507656][ T468] logitech-djreceiver 0003:046D:C534.0005: unknown main item tag 0x0 [ 66.533877][ T468] logitech-djreceiver 0003:046D:C534.0005: unknown main item tag 0x0 [ 66.614082][ T9] usb 1-1: config 0 has no interfaces? [ 66.619813][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 66.629210][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.642460][ T9] usb 1-1: config 0 descriptor?? [ 66.673167][ T9] usb 2-1: USB disconnect, device number 14 [ 66.906399][ T1567] tipc: Started in network mode [ 66.911467][ T1567] tipc: Node identity 92ed3ce8ff9f, cluster identity 4711 [ 66.918799][ T1567] tipc: Enabled bearer , priority 0 [ 66.955425][ T306] usb 1-1: USB disconnect, device number 15 [ 67.197595][ T36] audit: type=1400 audit(67.159:363): avc: denied { mounton } for pid=1579 comm="syz.1.402" path="/86/file0" dev="tmpfs" ino=470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 67.258981][ T36] audit: type=1400 audit(67.219:364): avc: denied { ioctl } for pid=1582 comm="syz.1.403" path="socket:[13605]" dev="sockfs" ino=13605 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.873223][ T1590] rust_binder: Write failure EFAULT in pid:281 [ 67.883093][ T36] audit: type=1400 audit(67.839:365): avc: denied { create } for pid=1589 comm="syz.1.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 67.998071][ T36] audit: type=1400 audit(67.959:366): avc: denied { setopt } for pid=1589 comm="syz.1.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 68.043032][ T9] tipc: Node number set to 1836203240 [ 68.076490][ T1597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.087689][ T1597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.144502][ T1602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=1602 comm=syz.1.410 [ 68.164124][ T36] audit: type=1400 audit(68.129:367): avc: denied { listen } for pid=1601 comm="syz.1.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.183456][ T36] audit: type=1400 audit(68.129:368): avc: denied { accept } for pid=1601 comm="syz.1.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.216724][ T36] audit: type=1400 audit(68.179:369): avc: denied { name_bind } for pid=1606 comm="syz.3.412" src=576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=udp_socket permissive=1 [ 68.286934][ T31] usb 3-1: USB disconnect, device number 12 [ 68.443023][ T761] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 68.504242][ T1622] binder: Bad value for 'defcontext' [ 68.511253][ T1622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.520098][ T1622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.604217][ T761] usb 2-1: config 0 has no interfaces? [ 68.611216][ T761] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 68.620370][ T761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 68.628941][ T761] usb 2-1: Product: syz [ 68.633922][ T761] usb 2-1: Manufacturer: syz [ 68.639117][ T761] usb 2-1: SerialNumber: syz [ 68.645136][ T761] usb 2-1: config 0 descriptor?? [ 68.663074][ T31] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 68.813073][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 68.820073][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 68.828732][ T31] usb 3-1: config 143 has an invalid interface number: 213 but max is 1 [ 68.837362][ T31] usb 3-1: config 143 has an invalid interface number: 2 but max is 1 [ 68.845767][ T31] usb 3-1: config 143 has an invalid descriptor of length 53, skipping remainder of the config [ 68.856313][ T31] usb 3-1: config 143 has no interface number 0 [ 68.862864][ T31] usb 3-1: config 143 has no interface number 1 [ 68.869453][ T31] usb 3-1: config 143 interface 213 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 68.882776][ T31] usb 3-1: config 143 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 68.896152][ T31] usb 3-1: config 143 interface 213 has no altsetting 0 [ 68.903172][ T31] usb 3-1: config 143 interface 2 has no altsetting 0 [ 68.911779][ T31] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=aa.f8 [ 68.920935][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.928992][ T31] usb 3-1: Product: syz [ 68.933219][ T31] usb 3-1: Manufacturer: syz [ 68.937836][ T31] usb 3-1: SerialNumber: syz [ 69.132218][ T1637] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:364 [ 69.139992][ T1637] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:364 [ 69.149693][ T1612] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 69.164096][ T1612] rust_binder: Read failure Err(EFAULT) in pid:347 [ 69.180472][ T31] asix 3-1:143.213 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 69.200697][ T31] asix 3-1:143.213: probe with driver asix failed with error -71 [ 69.209486][ T31] asix 3-1:143.2 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 69.219714][ T31] asix 3-1:143.2: probe with driver asix failed with error -71 [ 69.230968][ T31] usb 3-1: USB disconnect, device number 13 [ 69.286715][ T1643] random: crng reseeded on system resumption [ 69.423462][ T1650] rust_binder: Error while translating object. [ 69.423502][ T1650] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 69.430001][ T1650] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:371 [ 69.476772][ T1652] rtc_cmos 00:00: Alarms can be up to one day in the future [ 69.497637][ T1651] rtc_cmos 00:00: Alarms can be up to one day in the future [ 69.686387][ T1668] kvm: kvm [1667]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0x3 [ 69.720089][ T1668] rust_binder: 1668: no such ref 3 [ 69.753164][ T10] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -110 [ 69.767099][ T10] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffff92 [ 69.788743][ T10] asix 4-1:0.0: probe with driver asix failed with error -110 [ 69.830882][ T1675] input: syz0 as /devices/virtual/input/input11 [ 69.989972][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 69.989992][ T36] audit: type=1400 audit(69.949:377): avc: denied { accept } for pid=1689 comm="syz.3.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 70.047883][ T1692] batadv_slave_1: entered promiscuous mode [ 70.054383][ T1692] batadv_slave_1: left promiscuous mode [ 70.093108][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 70.103080][ T761] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 70.156969][ T36] audit: type=1400 audit(70.119:378): avc: denied { load_policy } for pid=1699 comm="syz.3.443" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 70.158836][ T1700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.443'. [ 70.185664][ T1700] bridge_slave_1: left allmulticast mode [ 70.191503][ T1700] bridge_slave_1: left promiscuous mode [ 70.197657][ T1700] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.205770][ T1700] bridge_slave_0: left allmulticast mode [ 70.211904][ T1700] bridge_slave_0: left promiscuous mode [ 70.217792][ T1700] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.223630][ T306] rtc_cmos 00:00: Alarms can be up to one day in the future [ 70.229249][ T1701] netlink: 16 bytes leftover after parsing attributes in process `syz.3.443'. [ 70.232873][ T306] rtc_cmos 00:00: Alarms can be up to one day in the future [ 70.249158][ T306] rtc_cmos 00:00: Alarms can be up to one day in the future [ 70.256999][ T306] rtc_cmos 00:00: Alarms can be up to one day in the future [ 70.264584][ T306] rtc rtc0: __rtc_set_alarm: err=-22 [ 70.273870][ T761] usb 3-1: unable to get BOS descriptor or descriptor too short [ 70.289381][ T10] usb 1-1: config index 0 descriptor too short (expected 12336, got 27) [ 70.297920][ T10] usb 1-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 70.308414][ T10] usb 1-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 70.320656][ T10] usb 1-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 70.330517][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 70.342882][ T761] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.354955][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.365988][ T761] usb 3-1: config 0 has no interfaces? [ 70.374099][ T761] usb 3-1: New USB device found, idVendor=056a, idProduct=02ef, bcdDevice= 0.40 [ 70.384407][ T761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.393663][ T761] usb 3-1: Product: syz [ 70.397909][ T761] usb 3-1: Manufacturer: syz [ 70.402907][ T761] usb 3-1: SerialNumber: syz [ 70.409352][ T761] usb 3-1: config 0 descriptor?? [ 70.572058][ T1705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.580703][ T1705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.589905][ T36] audit: type=1326 audit(70.549:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1704 comm="syz.3.444" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a05d8e929 code=0x0 [ 70.616164][ T10] usb 1-1: string descriptor 0 read error: -71 [ 70.626169][ T1682] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 70.626202][ T1682] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:355 [ 70.636919][ T10] usb 1-1: USB disconnect, device number 16 [ 70.655046][ T65] usb 3-1: USB disconnect, device number 14 [ 71.206105][ T1712] syz.0.446 (1712): attempted to duplicate a private mapping with mremap. This is not supported. [ 71.214791][ T65] usb 2-1: USB disconnect, device number 15 [ 71.221886][ T1713] rust_binder: 1710 RLIMIT_NICE not set [ 71.266422][ T1717] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:294 [ 71.280243][ T36] audit: type=1400 audit(71.239:380): avc: denied { setopt } for pid=1716 comm="syz.1.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 71.280691][ T1717] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 71.463100][ T306] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 71.624592][ T306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.633062][ T65] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 71.637623][ T306] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 71.654808][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.663644][ T306] usb 3-1: config 0 descriptor?? [ 71.793082][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 71.800756][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.813085][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.823138][ T65] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 71.832617][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.843264][ T65] usb 2-1: config 0 descriptor?? [ 71.870689][ T306] usbhid 3-1:0.0: can't add hid device: -71 [ 71.877503][ T306] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 71.889979][ T306] usb 3-1: USB disconnect, device number 15 [ 72.079957][ T1729] fuse: Bad value for 'fd' [ 72.087661][ T1729] tmpfs: Bad value for 'uid' [ 72.092712][ T1729] tmpfs: Bad value for 'uid' [ 72.119557][ T36] audit: type=1400 audit(72.079:381): avc: denied { sqpoll } for pid=1730 comm="syz.0.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 72.253479][ T1720] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.262675][ T1720] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 72.280102][ T1720] SELinux: failed to load policy [ 72.286217][ T1720] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 72.287779][ T65] usbhid 2-1:0.0: can't add hid device: -71 [ 72.302643][ T65] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 72.312874][ T65] usb 2-1: USB disconnect, device number 16 [ 72.323240][ T306] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 72.473031][ T306] usb 3-1: Using ep0 maxpacket: 16 [ 72.479577][ T306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.490712][ T306] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 72.500282][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.509466][ T306] usb 3-1: config 0 descriptor?? [ 72.829806][ T1746] 9pnet_fd: Insufficient options for proto=fd [ 72.850386][ T1748] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=45 sclass=netlink_xfrm_socket pid=1748 comm=syz.0.459 [ 72.863126][ T1748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.459'. [ 72.918015][ T306] kye 0003:0458:5016.0006: control desc unexpectedly large [ 72.926795][ T306] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0006/input/input13 [ 72.939963][ T306] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0006/input/input14 [ 72.962204][ T306] kye 0003:0458:5016.0006: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 73.577923][ T65] usb 3-1: USB disconnect, device number 16 [ 73.637699][ T1755] KVM: debugfs: duplicate directory 1755-5 [ 73.685739][ T1760] process 'syz.1.463' launched '/dev/fd/3' with NULL argv: empty string added [ 73.695456][ T36] audit: type=1400 audit(73.659:382): avc: denied { execute_no_trans } for pid=1759 comm="syz.1.463" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1037 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.710700][ T1761] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.733952][ T1761] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.733981][ T1761] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.763614][ T36] audit: type=1400 audit(73.729:383): avc: denied { getopt } for pid=1764 comm="syz.0.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.788926][ T1767] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.873540][ T1769] rust_binder: Write failure EFAULT in pid:422 [ 73.883911][ T1769] /dev/rnullb0: Can't open blockdev [ 74.874050][ T1804] netlink: 72 bytes leftover after parsing attributes in process `syz.0.479'. [ 74.930443][ T1814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.940603][ T1815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.940745][ T1814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.950015][ T1815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.045324][ T1819] netlink: 48 bytes leftover after parsing attributes in process `syz.2.484'. [ 75.055277][ T1822] netlink: 48 bytes leftover after parsing attributes in process `syz.2.484'. [ 75.133085][ T36] audit: type=1400 audit(75.089:384): avc: denied { checkpoint_restore } for pid=1817 comm="syz.2.484" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 75.627758][ T1838] tipc: Resetting bearer [ 75.635041][ T1838] syzkaller0: entered allmulticast mode [ 75.771520][ T36] audit: type=1326 audit(75.729:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1852 comm="syz.0.496" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65c818e929 code=0x0 [ 75.860157][ T1857] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 76.133013][ T65] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 76.303009][ T65] usb 3-1: Using ep0 maxpacket: 16 [ 76.309324][ T65] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 76.319137][ T65] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.329515][ T65] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.340484][ T65] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 76.349827][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.358118][ T65] usb 3-1: Product: syz [ 76.363367][ T65] usb 3-1: Manufacturer: syz [ 76.368544][ T65] usb 3-1: SerialNumber: syz [ 76.569288][ T1863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.579263][ T1863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.598605][ T36] audit: type=1400 audit(76.559:386): avc: denied { write } for pid=1858 comm="syz.2.499" path="socket:[14223]" dev="sockfs" ino=14223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 76.638288][ T36] audit: type=1400 audit(76.599:387): avc: denied { map } for pid=1864 comm="syz.0.502" path="socket:[14227]" dev="sockfs" ino=14227 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 76.825995][ T65] usb 3-1: 0:2 : does not exist [ 77.109853][ T1867] rust_binder: Failed copying remainder into alloc: EFAULT [ 77.109877][ T1867] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 77.117338][ T1867] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 77.126097][ T1867] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:464 [ 77.152728][ T1869] netlink: 68 bytes leftover after parsing attributes in process `syz.3.504'. [ 77.176680][ T1869] raw_sendmsg: syz.3.504 forgot to set AF_INET. Fix it! [ 77.190713][ T36] audit: type=1400 audit(77.149:388): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 77.286520][ T731] usb 4-1: USB disconnect, device number 14 [ 77.372909][ T36] audit: type=1326 audit(77.329:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1884 comm="syz.0.512" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65c818e929 code=0x0 [ 77.424076][ T1884] mmap: syz.0.512 (1884): VmData 29208576 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 77.451015][ T36] audit: type=1400 audit(77.409:390): avc: denied { mounton } for pid=1886 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 77.451712][ T65] usb 3-1: USB disconnect, device number 17 [ 77.537672][ T1886] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.546684][ T1886] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.554237][ T1886] bridge_slave_0: entered allmulticast mode [ 77.561255][ T1886] bridge_slave_0: entered promiscuous mode [ 77.569219][ T1886] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.576972][ T1886] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.584774][ T1886] bridge_slave_1: entered allmulticast mode [ 77.591587][ T1886] bridge_slave_1: entered promiscuous mode [ 77.688445][ T1886] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.695667][ T1886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.703146][ T1886] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.710316][ T1886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.726414][ T1906] usb usb9: usbfs: process 1906 (syz.1.517) did not claim interface 0 before use [ 77.757858][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.774392][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.797192][ T207] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.804512][ T207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.815967][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.823074][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.885311][ T1886] veth0_vlan: entered promiscuous mode [ 77.907453][ T1886] veth1_macvtap: entered promiscuous mode [ 77.913754][ T1913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.914070][ T1913] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 77.966522][ T36] audit: type=1400 audit(77.929:391): avc: denied { mounton } for pid=1886 comm="syz-executor" path="/root/syzkaller.64M1KC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 78.032637][ T36] audit: type=1400 audit(77.979:392): avc: denied { write } for pid=1916 comm="syz.2.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 78.098340][ T1924] binder: Unknown parameter '0x0000000000000003' [ 78.113767][ T1926] binder: Unknown parameter '0x0000000000000003' [ 78.319241][ T1934] 9pnet_fd: Insufficient options for proto=fd [ 78.382865][ T36] audit: type=1400 audit(78.339:393): avc: denied { ioctl } for pid=1936 comm="syz.4.528" path="socket:[15324]" dev="sockfs" ino=15324 ioctlcmd=0x8954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.734983][ T1951] tipc: Enabling of bearer rejected, media not registered [ 79.090367][ T1973] overlayfs: failed to clone lowerpath [ 79.103167][ T31] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 79.253050][ T731] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 79.261378][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 79.268643][ T31] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 79.280245][ T31] usb 3-1: config 0 has no interface number 0 [ 79.288072][ T31] usb 3-1: config 0 interface 67 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 79.301115][ T31] usb 3-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.317019][ T31] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 79.326614][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.336183][ T31] usb 3-1: Product: syz [ 79.340624][ T31] usb 3-1: Manufacturer: syz [ 79.345929][ T31] usb 3-1: SerialNumber: syz [ 79.351684][ T31] usb 3-1: config 0 descriptor?? [ 79.359905][ T31] smsc95xx v2.0.0 [ 79.363956][ T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 79.374553][ T31] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 79.413015][ T731] usb 2-1: Using ep0 maxpacket: 32 [ 79.419986][ T731] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 79.428635][ T731] usb 2-1: config 0 has no interface number 0 [ 79.437438][ T731] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 79.447061][ T731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.455750][ T731] usb 2-1: Product: syz [ 79.460738][ T731] usb 2-1: Manufacturer: syz [ 79.465777][ T731] usb 2-1: SerialNumber: syz [ 79.473154][ T731] usb 2-1: config 0 descriptor?? [ 79.479766][ T731] smsc95xx v2.0.0 [ 79.573300][ T31] usb 3-1: USB disconnect, device number 18 [ 79.728176][ T1994] rust_binder: Failed to allocate buffer. len:144, is_oneway:true [ 79.838838][ T2003] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 79.847351][ T2003] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:392 [ 79.877822][ T2005] syzkaller0: entered promiscuous mode [ 79.894446][ T2005] syzkaller0: entered allmulticast mode [ 79.900717][ T731] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 79.914545][ T731] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 80.111316][ T2012] netlink: 40 bytes leftover after parsing attributes in process `syz.0.553'. [ 80.273041][ T342] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.454423][ T342] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 80.468421][ T342] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 80.479220][ T342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 80.489790][ T342] usb 5-1: SerialNumber: syz [ 80.783510][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 80.783528][ T36] audit: type=1400 audit(80.749:396): avc: denied { name_bind } for pid=2032 comm="syz.0.559" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 80.959433][ T2042] fuse: Bad value for 'rootmode' [ 81.373109][ T2050] tmpfs: Unsupported parameter 'mpol' [ 81.455170][ T342] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 81.467777][ T342] usb 5-1: USB disconnect, device number 2 [ 82.063812][ T36] audit: type=1400 audit(82.029:397): avc: denied { append } for pid=2069 comm="syz.4.570" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 82.107156][ T2074] netlink: 112 bytes leftover after parsing attributes in process `syz.4.571'. [ 82.154436][ T36] audit: type=1400 audit(82.119:398): avc: denied { remount } for pid=2077 comm="syz.4.573" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 82.341843][ T731] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 82.354642][ T731] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 82.373749][ T731] usb 2-1: USB disconnect, device number 17 [ 82.433736][ T2080] rust_binder: Write failure EFAULT in pid:411 [ 82.683079][ T761] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 82.843069][ T761] usb 3-1: Using ep0 maxpacket: 32 [ 82.850768][ T761] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 82.859811][ T761] usb 3-1: config 0 has an invalid descriptor of length 67, skipping remainder of the config [ 82.871005][ T761] usb 3-1: config 0 has no interface number 0 [ 82.878461][ T761] usb 3-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.895775][ T761] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 82.905935][ T761] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=2 [ 82.915627][ T761] usb 3-1: Manufacturer: syz [ 82.921857][ T761] usb 3-1: SerialNumber: syz [ 82.928761][ T761] usb 3-1: config 0 descriptor?? [ 82.935334][ T761] smsc95xx v2.0.0 [ 82.939173][ T761] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 82.949867][ T761] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 82.960271][ T761] cdc_acm 3-1:0.67: Zero length descriptor references [ 82.968781][ T761] cdc_acm 3-1:0.67: probe with driver cdc_acm failed with error -22 [ 83.010548][ T2089] rust_binder: Write failure EINVAL in pid:45 [ 83.037281][ T36] audit: type=1400 audit(82.999:399): avc: denied { connect } for pid=2090 comm="syz.4.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 83.283060][ T731] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 83.363075][ T305] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 83.433395][ T731] usb 5-1: Using ep0 maxpacket: 16 [ 83.440494][ T731] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.451940][ T731] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.464192][ T731] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 83.473416][ T731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.482347][ T731] usb 5-1: Product: syz [ 83.486678][ T731] usb 5-1: Manufacturer: syz [ 83.492456][ T731] usb 5-1: SerialNumber: syz [ 83.514813][ T305] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 83.524977][ T305] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.536861][ T305] usb 2-1: config 0 has no interface number 0 [ 83.543705][ T305] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 83.551604][ T2082] rust_binder: Write failure EFAULT in pid:413 [ 83.559438][ T305] usb 2-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 83.577065][ T305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.588057][ T305] usb 2-1: config 0 descriptor?? [ 83.703329][ T731] usb 5-1: 0:2 : does not exist [ 83.711286][ T731] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 83.726690][ T731] usb 5-1: USB disconnect, device number 3 [ 83.743467][ T403] udevd[403]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 83.760449][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 83.797168][ T761] usb 2-1: USB disconnect, device number 18 [ 84.110453][ T2109] netlink: 172 bytes leftover after parsing attributes in process `syz.0.584'. [ 84.119924][ T2109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.584'. [ 84.312092][ T2113] sit0: entered promiscuous mode [ 84.322331][ T2113] netlink: 'syz.4.586': attribute type 1 has an invalid length. [ 84.343220][ T2113] netlink: 9 bytes leftover after parsing attributes in process `syz.4.586'. [ 84.354742][ T2120] overlayfs: workdir and upperdir must be separate subtrees [ 84.460268][ T2120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2120 comm=syz.1.588 [ 84.653029][ T305] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 84.672534][ T2128] /dev/loop0: Can't lookup blockdev [ 84.804350][ T305] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 84.815520][ T305] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 84.828857][ T305] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.839321][ T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.848117][ T305] usb 5-1: Product: ࠒ [ 84.852913][ T305] usb 5-1: Manufacturer: А [ 84.858169][ T305] usb 5-1: SerialNumber: 髅賐맚Ⓥ迕셍ҿ逡Ḍ詄꓆묁섀㉞嶘ㅛ否䠅ᚘ㝷睢⭉ᓷ✷⠧❫堔璞䥫봤綨 [ 84.874696][ T2122] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 85.253076][ T761] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 85.285600][ T305] cdc_ncm 5-1:1.0: bind() failure [ 85.291676][ T305] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 85.298524][ T305] cdc_ncm 5-1:1.1: bind() failure [ 85.304744][ T305] usb 5-1: USB disconnect, device number 4 [ 85.404382][ T761] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 85.413563][ T761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.422314][ T761] usb 2-1: config 0 descriptor?? [ 85.460586][ T65] usb 3-1: USB disconnect, device number 19 [ 85.803062][ T65] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 85.829903][ T761] appleir 0003:05AC:8241.0007: item fetching failed at offset 2/5 [ 85.838022][ T761] appleir 0003:05AC:8241.0007: parse failed [ 85.844048][ T761] appleir 0003:05AC:8241.0007: probe with driver appleir failed with error -22 [ 85.867848][ T36] audit: type=1400 audit(85.829:400): avc: denied { execute } for pid=2151 comm="syz.4.601" path="/bus" dev="ramfs" ino=17489 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 85.954411][ T65] usb 3-1: descriptor type invalid, skip [ 85.960622][ T65] usb 3-1: not running at top speed; connect to a high speed hub [ 85.969265][ T65] usb 3-1: config 0 has no interfaces? [ 85.976652][ T65] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 85.986225][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.994349][ T65] usb 3-1: Product: syz [ 85.998516][ T65] usb 3-1: Manufacturer: syz [ 86.003162][ T65] usb 3-1: SerialNumber: syz [ 86.008758][ T65] usb 3-1: config 0 descriptor?? [ 86.030387][ T731] usb 2-1: USB disconnect, device number 19 [ 86.266854][ T65] usb 3-1: USB disconnect, device number 20 [ 86.580568][ T2184] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.597602][ T2187] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.605060][ T2188] fuse: Bad value for 'user_id' [ 86.617104][ T2187] fuse: Bad value for 'user_id' [ 86.622225][ T2187] fuse: Bad value for 'user_id' [ 86.627597][ T2188] fuse: Bad value for 'user_id' [ 86.776367][ T2202] SELinux: security_context_str_to_sid () failed with errno=-22 [ 86.781517][ T36] audit: type=1326 audit(86.739:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2194 comm="syz.1.613" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2e4518e929 code=0x0 [ 87.072995][ T731] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 87.083098][ T761] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 87.224559][ T731] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 87.234619][ T761] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.235758][ T731] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 12408, setting to 64 [ 87.249719][ T761] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 87.260369][ T731] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.280382][ T761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.286630][ T731] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 87.296928][ T761] usb 3-1: Product: syz [ 87.306903][ T761] usb 3-1: Manufacturer: syz [ 87.312163][ T761] usb 3-1: SerialNumber: syz [ 87.315841][ T731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.325524][ T731] usb 5-1: Product: syz [ 87.329802][ T731] usb 5-1: Manufacturer: syz [ 87.334288][ T36] audit: type=1400 audit(87.299:402): avc: denied { getopt } for pid=2214 comm="syz.0.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 87.334749][ T731] usb 5-1: SerialNumber: syz [ 87.397443][ T2219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.622'. [ 87.561396][ T2208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.570660][ T2208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.580419][ T2208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.589341][ T2208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.599653][ T2208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.609213][ T2208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.617968][ T2208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.627599][ T2208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.636795][ T2208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.646360][ T2208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.823060][ T305] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 87.859092][ T731] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 87.865325][ T731] cdc_ncm 5-1:1.0: bind() failure [ 87.871588][ T731] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 87.878458][ T731] cdc_ncm 5-1:1.1: bind() failure [ 87.973012][ T305] usb 2-1: Using ep0 maxpacket: 32 [ 87.979439][ T305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.990702][ T305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.000896][ T305] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 88.010275][ T305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.019175][ T305] usb 2-1: config 0 descriptor?? [ 88.324825][ T761] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 88.331980][ T761] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 88.339648][ T761] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 88.431090][ T305] savu 0003:1E7D:2D5A.0008: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 88.486956][ T2239] overlayfs: failed to resolve './file1/file0': -2 [ 88.569716][ T65] usb 5-1: USB disconnect, device number 5 [ 88.687517][ T761] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 88.704178][ T761] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 88.730600][ T761] usb 3-1: USB disconnect, device number 21 [ 88.752365][ T761] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 88.775255][ T2275] vcan0: entered allmulticast mode [ 88.785496][ T2276] vcan0: left allmulticast mode [ 88.794396][ T2275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.642'. [ 88.805775][ T2273] netlink: 104 bytes leftover after parsing attributes in process `syz.4.641'. [ 88.886300][ T2289] binder: Unknown parameter '' [ 89.221852][ T2320] rust_binder: Error while translating object. [ 89.221884][ T2320] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 89.228244][ T2320] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:89 [ 89.334866][ T13] bridge_slave_1: left allmulticast mode [ 89.340965][ T13] bridge_slave_1: left promiscuous mode [ 89.347196][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.355235][ T13] bridge_slave_0: left allmulticast mode [ 89.361039][ T13] bridge_slave_0: left promiscuous mode [ 89.367212][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.497850][ T13] veth1_macvtap: left promiscuous mode [ 89.503800][ T13] veth0_vlan: left promiscuous mode [ 89.567957][ T2329] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.575189][ T2329] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.587784][ T2329] bridge_slave_0: entered allmulticast mode [ 89.594719][ T2329] bridge_slave_0: entered promiscuous mode [ 89.602130][ T2329] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.609256][ T2329] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.616411][ T2329] bridge_slave_1: entered allmulticast mode [ 89.622750][ T2329] bridge_slave_1: entered promiscuous mode [ 89.675071][ T2329] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.682141][ T2329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.689516][ T2329] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.696689][ T2329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.719732][ T207] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.728696][ T207] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.739883][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.747932][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.759708][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.766862][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.800841][ T2329] veth0_vlan: entered promiscuous mode [ 89.821318][ T2334] netlink: 92 bytes leftover after parsing attributes in process `syz.2.654'. [ 89.835444][ T2329] veth1_macvtap: entered promiscuous mode [ 89.853318][ T305] usb 2-1: reset high-speed USB device number 20 using dummy_hcd [ 89.879531][ T2328] 9pnet_fd: Insufficient options for proto=fd [ 89.888418][ T2327] 9pnet_fd: Insufficient options for proto=fd [ 89.988192][ T2342] rust_binder: 2342: no such ref 1 [ 89.993888][ T2342] rust_binder: Write failure EINVAL in pid:430 [ 90.039987][ T2346] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:432 [ 90.048513][ T2346] rust_binder: Error while translating object. [ 90.058360][ T2346] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 90.064218][ T36] audit: type=1400 audit(90.019:403): avc: denied { read } for pid=2347 comm="syz.5.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 90.065032][ T2346] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:432 [ 90.151156][ T2353] binder: Bad value for 'stats' [ 90.320304][ T2360] tipc: Enabled bearer , priority 0 [ 90.389267][ T2360] tipc: Resetting bearer [ 90.406112][ T2360] tipc: Disabling bearer [ 90.433983][ T2362] netlink: 104 bytes leftover after parsing attributes in process `syz.0.664'. [ 90.526730][ T2362] netlink: 56 bytes leftover after parsing attributes in process `syz.0.664'. [ 90.545197][ T2362] fuse: Unknown parameter 'dont_measure' [ 90.662979][ T36] audit: type=1400 audit(90.619:404): avc: denied { create } for pid=2372 comm="syz.0.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 90.869404][ T2401] overlayfs: failed to clone upperpath [ 90.887533][ T2403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.891263][ T2403] rust_binder: Write failure EINVAL in pid:394 [ 91.065582][ T36] audit: type=1400 audit(91.029:405): avc: denied { watch_reads } for pid=2429 comm="syz.0.686" path="/211/file0" dev="tmpfs" ino=1172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 91.098051][ T36] audit: type=1400 audit(91.059:406): avc: denied { ioctl } for pid=2426 comm="syz.1.685" path="socket:[18538]" dev="sockfs" ino=18538 ioctlcmd=0x942e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 91.259133][ T2453] tipc: Enabled bearer , priority 0 [ 91.272874][ T2453] tipc: Disabling bearer [ 91.383647][ T731] usb 2-1: USB disconnect, device number 20 [ 91.503067][ T342] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 91.654267][ T342] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 91.665637][ T342] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.676647][ T342] usb 6-1: config 0 interface 0 has no altsetting 0 [ 91.683825][ T342] usb 6-1: New USB device found, idVendor=056a, idProduct=00d1, bcdDevice= 0.00 [ 91.693822][ T342] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.706761][ T342] usb 6-1: config 0 descriptor?? [ 91.733730][ T36] audit: type=1400 audit(91.699:407): avc: denied { execute } for pid=2459 comm="syz.0.697" path="/dev/rnullb0" dev="tmpfs" ino=561 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.916958][ T342] wacom 0003:056A:00D1.0009: Unknown device_type for 'HID 056a:00d1'. Assuming pen. [ 91.937718][ T342] wacom 0003:056A:00D1.0009: hidraw0: USB HID v0.00 Device [HID 056a:00d1] on usb-dummy_hcd.5-1/input0 [ 91.978634][ T342] input: Wacom Bamboo 2FG 4x5 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:00D1.0009/input/input16 [ 92.003365][ T342] usb 6-1: USB disconnect, device number 2 [ 92.126793][ T2485] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 92.126819][ T2485] rust_binder: Read failure Err(EFAULT) in pid:33 [ 92.185294][ T2492] can: request_module (can-proto-0) failed. [ 92.223939][ T2498] netlink: 44 bytes leftover after parsing attributes in process `syz.2.708'. [ 92.233684][ T2498] netlink: 43 bytes leftover after parsing attributes in process `syz.2.708'. [ 92.243547][ T2498] netlink: 'syz.2.708': attribute type 6 has an invalid length. [ 92.259656][ T2498] netlink: 'syz.2.708': attribute type 5 has an invalid length. [ 92.267969][ T2498] netlink: 43 bytes leftover after parsing attributes in process `syz.2.708'. [ 92.802990][ T36] audit: type=1400 audit(92.759:408): avc: denied { read } for pid=2521 comm="syz.0.714" name="/" dev="configfs" ino=2546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 92.868584][ T36] audit: type=1400 audit(92.759:409): avc: denied { open } for pid=2521 comm="syz.0.714" path="/" dev="configfs" ino=2546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 92.891504][ T2528] SELinux: security_context_str_to_sid () failed with errno=-22 [ 92.913830][ T36] audit: type=1400 audit(92.799:410): avc: denied { ioctl } for pid=2521 comm="syz.0.714" path="/" dev="configfs" ino=2546 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 92.938549][ T2528] SELinux: security_context_str_to_sid () failed with errno=-22 [ 92.985181][ T2536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.003430][ T2536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.185547][ T2543] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.203681][ T2543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:417 [ 93.210933][ T2545] rust_binder: validate_parent_fixup: new_min_offset=14, sg_entry.length=0 [ 93.213342][ T2543] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 93.230246][ T2545] rust_binder: Error while translating object. [ 93.239411][ T2545] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 93.245878][ T2543] rust_binder: Read failure Err(EFAULT) in pid:417 [ 93.249598][ T2545] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:465 [ 93.296190][ T2549] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.323888][ T36] audit: type=1326 audit(93.289:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2552 comm="syz.1.722" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2e4518e929 code=0x0 [ 93.433446][ T36] audit: type=1400 audit(93.399:412): avc: denied { setattr } for pid=2562 comm="syz.2.725" name="UDPLITEv6" dev="sockfs" ino=18991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.923505][ T2580] netlink: 288 bytes leftover after parsing attributes in process `syz.0.731'. [ 94.452998][ T731] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 94.593040][ T731] usb 2-1: device descriptor read/64, error -71 [ 94.862996][ T731] usb 2-1: device descriptor read/64, error -71 [ 95.122997][ T731] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 95.283234][ T731] usb 2-1: device descriptor read/64, error -71 [ 95.546288][ T731] usb 2-1: device descriptor read/64, error -71 [ 95.653072][ T731] usb usb2-port1: attempt power cycle [ 96.003064][ T731] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 96.024583][ T731] usb 2-1: device descriptor read/8, error -71 [ 96.154682][ T731] usb 2-1: device descriptor read/8, error -71 [ 96.223078][ T65] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 96.373059][ T65] usb 6-1: Using ep0 maxpacket: 16 [ 96.375744][ T2631] netlink: 224 bytes leftover after parsing attributes in process `syz.2.747'. [ 96.384902][ T65] usb 6-1: config 0 has no interfaces? [ 96.396267][ T65] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 96.403305][ T731] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 96.405975][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.422639][ T65] usb 6-1: Product: syz [ 96.427242][ T65] usb 6-1: Manufacturer: syz [ 96.434362][ T731] usb 2-1: device descriptor read/8, error -71 [ 96.438474][ T65] usb 6-1: SerialNumber: syz [ 96.448875][ T65] usb 6-1: config 0 descriptor?? [ 96.564432][ T731] usb 2-1: device descriptor read/8, error -71 [ 96.683019][ T731] usb usb2-port1: unable to enumerate USB device [ 96.743018][ T305] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 96.802759][ T36] audit: type=1400 audit(96.759:413): avc: denied { mounton } for pid=2647 comm="syz.0.754" path="/245/file0" dev="tmpfs" ino=1352 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.904270][ T305] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.920642][ T305] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 96.932696][ T305] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 96.944285][ T305] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 96.953731][ T305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.964459][ T2641] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 97.245511][ T2655] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 97.396591][ T2662] binder: Bad value for 'max' [ 97.693430][ T2677] 9pnet_fd: Insufficient options for proto=fd [ 97.783641][ T305] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 97.795587][ T305] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input19 [ 97.914146][ T305] usb 6-1: USB disconnect, device number 3 [ 98.463811][ T2711] binder: Unknown parameter 'fscontext?}' [ 98.519524][ T2713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.550166][ T2725] batadv_slave_1: entered promiscuous mode [ 98.572072][ T2725] batadv_slave_1: left promiscuous mode [ 98.607526][ T2735] netlink: 112 bytes leftover after parsing attributes in process `syz.1.784'. [ 98.615660][ T2737] netlink: 104 bytes leftover after parsing attributes in process `syz.0.785'. [ 98.656954][ T36] audit: type=1400 audit(98.619:414): avc: denied { map } for pid=2745 comm="syz.1.786" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 98.661200][ T2748] usb usb6: check_ctrlrecip: process 2748 (syz.1.786) requesting ep 01 but needs 81 [ 98.698900][ T2748] usb usb6: usbfs: process 2748 (syz.1.786) did not claim interface 0 before use [ 98.941079][ T2770] tipc: Enabling of bearer rejected, failed to enable media [ 98.978641][ T36] audit: type=1400 audit(98.939:415): avc: denied { execute_no_trans } for pid=2774 comm="syz.0.799" path="/274/file1" dev="tmpfs" ino=1511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.009391][ T2776] rust_binder: Write failure EFAULT in pid:496 [ 99.013027][ T305] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 99.038105][ T36] audit: type=1400 audit(98.999:416): avc: denied { mount } for pid=2782 comm="syz.0.801" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 99.101485][ T36] audit: type=1400 audit(99.059:417): avc: denied { write } for pid=2787 comm="syz.0.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 99.174949][ T305] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 99.186119][ T305] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 99.197459][ T305] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 99.206689][ T305] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 99.214940][ T305] usb 6-1: SerialNumber: syz [ 99.221689][ T305] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 99.230482][ T305] usb-storage 6-1:1.0: USB Mass Storage device detected [ 99.239335][ T305] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 99.247718][ T305] scsi host1: usb-storage 6-1:1.0 [ 99.284366][ T2793] rust_binder: Write failure EFAULT in pid:461 [ 99.563250][ T305] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 99.690157][ T2802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.807'. [ 99.724251][ T305] usb 2-1: config 0 has no interfaces? [ 99.731663][ T305] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 99.741491][ T305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 99.750795][ T305] usb 2-1: Product: syz [ 99.755520][ T305] usb 2-1: Manufacturer: syz [ 99.760290][ T305] usb 2-1: SerialNumber: syz [ 99.766488][ T305] usb 2-1: config 0 descriptor?? [ 100.024802][ T65] usb 3-1: USB disconnect, device number 22 [ 100.030989][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 100.054600][ T2806] rust_binder: 2806: no such ref 0 [ 100.059917][ T2806] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 100.059942][ T2806] rust_binder: Read failure Err(EFAULT) in pid:501 [ 100.068990][ T2806] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 100.083188][ T2806] rust_binder: Write failure EINVAL in pid:501 [ 100.084209][ T2806] rust_binder: 2806: no such ref 0 [ 100.095994][ T2806] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 100.096013][ T2806] rust_binder: Read failure Err(EFAULT) in pid:501 [ 100.131623][ T2815] /dev/rnullb0: Can't open blockdev [ 100.157853][ T2817] mmap: syz.2.811 (2817) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 100.188918][ T2819] __vm_enough_memory: pid: 2819, comm: syz.2.812, bytes: 70373039144960 not enough memory for the allocation [ 100.255018][ T36] audit: type=1400 audit(100.219:418): avc: denied { map } for pid=2825 comm="syz.0.815" path="socket:[21599]" dev="sockfs" ino=21599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.280987][ T36] audit: type=1400 audit(100.219:419): avc: denied { read } for pid=2825 comm="syz.0.815" path="socket:[21599]" dev="sockfs" ino=21599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.380777][ T2850] netlink: 'syz.0.821': attribute type 11 has an invalid length. [ 100.396052][ T2850] netlink: 'syz.0.821': attribute type 11 has an invalid length. [ 100.505435][ T2871] netlink: 'syz.2.828': attribute type 6 has an invalid length. [ 100.513529][ T2871] netlink: 'syz.2.828': attribute type 4 has an invalid length. [ 100.521836][ T2871] netlink: 'syz.2.828': attribute type 6 has an invalid length. [ 100.531165][ T305] usb 6-1: USB disconnect, device number 4 [ 100.539286][ T2871] netlink: 'syz.2.828': attribute type 13 has an invalid length. [ 100.548360][ T2871] netlink: 'syz.2.828': attribute type 15 has an invalid length. [ 100.556458][ T2871] netlink: 'syz.2.828': attribute type 19 has an invalid length. [ 100.567150][ T2871] netlink: 3684 bytes leftover after parsing attributes in process `syz.2.828'. [ 100.817092][ T2900] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.824510][ T36] audit: type=1400 audit(100.789:420): avc: denied { lock } for pid=2898 comm="syz.2.835" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.847764][ T36] audit: type=1400 audit(100.789:421): avc: denied { connect } for pid=2898 comm="syz.2.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.867457][ T36] audit: type=1400 audit(100.799:422): avc: denied { read } for pid=2898 comm="syz.2.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 101.013316][ T2902] 9pnet_fd: Insufficient options for proto=fd [ 101.094194][ T2918] netlink: 104 bytes leftover after parsing attributes in process `syz.2.841'. [ 101.283392][ T2922] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25710 sclass=netlink_xfrm_socket pid=2922 comm=syz.0.843 [ 101.307435][ T2924] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 101.353312][ T305] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 101.504188][ T305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.515180][ T305] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 101.524385][ T305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.533363][ T305] usb 3-1: config 0 descriptor?? [ 101.854545][ T2943] tipc: Enabling of bearer rejected, failed to enable media [ 101.913005][ T761] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 102.077243][ T2956] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 102.083043][ T761] usb 6-1: Using ep0 maxpacket: 32 [ 102.095277][ T761] usb 6-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 102.106124][ T761] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.116979][ T761] usb 6-1: config 0 descriptor?? [ 102.330298][ T306] usb 2-1: USB disconnect, device number 25 [ 102.489354][ T3008] batadv_slave_1: entered promiscuous mode [ 102.499448][ T3007] batadv_slave_1: left promiscuous mode [ 102.501576][ T3010] fuse: Bad value for 'user_id' [ 102.511750][ T3010] fuse: Bad value for 'user_id' [ 102.534095][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 102.534114][ T36] audit: type=1400 audit(102.499:426): avc: denied { setopt } for pid=3012 comm="syz.0.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 102.560370][ T3013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.875'. [ 103.349015][ T36] audit: type=1400 audit(103.309:427): avc: denied { getopt } for pid=3026 comm="syz.1.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 103.350708][ T3027] usb usb8: usbfs: process 3027 (syz.1.878) did not claim interface 0 before use [ 103.424346][ T3034] netlink: 'syz.1.880': attribute type 15 has an invalid length. [ 103.432793][ T3034] netlink: 24 bytes leftover after parsing attributes in process `syz.1.880'. [ 103.473733][ T3036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.713027][ T468] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 103.873057][ T468] usb 2-1: Using ep0 maxpacket: 8 [ 103.879628][ T468] usb 2-1: unable to get BOS descriptor or descriptor too short [ 103.888548][ T468] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.903386][ T468] usb 2-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 103.912659][ T468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.921053][ T468] usb 2-1: Product: syz [ 103.925321][ T468] usb 2-1: Manufacturer: syz [ 103.929949][ T468] usb 2-1: SerialNumber: syz [ 104.128341][ T305] usbhid 3-1:0.0: can't add hid device: -71 [ 104.134563][ T305] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 104.147117][ T305] usb 3-1: USB disconnect, device number 23 [ 104.182070][ T3060] tipc: Enabled bearer , priority 0 [ 104.189192][ T3063] tipc: Enabling of bearer rejected, already enabled [ 104.204239][ T3060] tipc: Disabling bearer [ 104.279603][ T3076] rust_binder: Error while translating object. [ 104.279809][ T3076] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 104.287597][ T3076] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:579 [ 104.362424][ T468] usbhid 2-1:1.0: can't add hid device: -71 [ 104.379618][ T468] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 104.389142][ T468] usb 2-1: USB disconnect, device number 26 [ 104.402188][ T3090] 9pnet_fd: Insufficient options for proto=fd [ 104.439985][ T3096] tipc: Enabling of bearer rejected, failed to enable media [ 104.633130][ T305] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 104.714939][ T761] usb 6-1: string descriptor 0 read error: -71 [ 104.721672][ T761] uclogic 0003:256C:006E.000A: failed retrieving string descriptor #200: -71 [ 104.730872][ T761] uclogic 0003:256C:006E.000A: failed retrieving pen parameters: -71 [ 104.739304][ T761] uclogic 0003:256C:006E.000A: failed probing pen v2 parameters: -71 [ 104.747633][ T761] uclogic 0003:256C:006E.000A: failed probing parameters: -71 [ 104.755204][ T761] uclogic 0003:256C:006E.000A: probe with driver uclogic failed with error -71 [ 104.765598][ T761] usb 6-1: USB disconnect, device number 5 [ 104.773319][ T305] usb 3-1: device descriptor read/64, error -71 [ 105.013045][ T305] usb 3-1: device descriptor read/64, error -71 [ 105.102999][ T761] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 105.264112][ T761] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 105.279204][ T761] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 105.283073][ T305] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 105.296933][ T761] usb 6-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 105.321989][ T761] usb 6-1: config 0 interface 0 has no altsetting 0 [ 105.332064][ T761] usb 6-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 105.347980][ T761] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.361619][ T761] usb 6-1: config 0 descriptor?? [ 105.373933][ T3099] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 105.433298][ T305] usb 3-1: device descriptor read/64, error -71 [ 105.673614][ T305] usb 3-1: device descriptor read/64, error -71 [ 105.783142][ T305] usb usb3-port1: attempt power cycle [ 105.798456][ T761] input: HID 28bd:1903 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28BD:1903.000B/input/input21 [ 105.834185][ T761] uclogic 0003:28BD:1903.000B: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:1903] on usb-dummy_hcd.5-1/input0 [ 105.983993][ T3118] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 105.984450][ T3118] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 106.002649][ T761] usb 6-1: USB disconnect, device number 6 [ 106.019763][ T3120] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.027990][ T3121] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 106.153081][ T305] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 106.184741][ T305] usb 3-1: device descriptor read/8, error -71 [ 106.314396][ T305] usb 3-1: device descriptor read/8, error -71 [ 106.343036][ T468] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 106.493014][ T468] usb 2-1: Using ep0 maxpacket: 16 [ 106.500296][ T468] usb 2-1: config 0 has no interfaces? [ 106.507723][ T468] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 106.517331][ T468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.525478][ T468] usb 2-1: Product: syz [ 106.529830][ T468] usb 2-1: Manufacturer: syz [ 106.535062][ T468] usb 2-1: SerialNumber: syz [ 106.543910][ T468] usb 2-1: config 0 descriptor?? [ 106.553109][ T305] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 106.575109][ T305] usb 3-1: device descriptor read/8, error -71 [ 106.714518][ T305] usb 3-1: device descriptor read/8, error -71 [ 106.757483][ T342] usb 2-1: USB disconnect, device number 27 [ 106.823144][ T305] usb usb3-port1: unable to enumerate USB device [ 106.833058][ T468] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 106.984758][ T468] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.995839][ T468] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 107.005939][ T468] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.014591][ T468] usb 6-1: config 0 descriptor?? [ 107.330614][ T36] audit: type=1400 audit(107.289:428): avc: denied { watch watch_reads } for pid=3134 comm="syz.1.919" path="/164/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 107.423813][ T468] lenovo 0003:17EF:6047.000C: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.5-1/input0 [ 107.699019][ T3153] 9pnet_fd: Insufficient options for proto=fd [ 108.236173][ T3130] netlink: 6048 bytes leftover after parsing attributes in process `syz.5.917'. [ 108.249544][ T3130] fuse: Unknown parameter '000000000000000000000x000000000000000f' [ 108.316253][ T468] lenovo 0003:17EF:6047.000C: Sensitivity setting failed: -71 [ 108.335762][ T468] usb 6-1: USB disconnect, device number 7 [ 108.603059][ T761] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 108.763061][ T761] usb 3-1: Using ep0 maxpacket: 16 [ 108.769755][ T761] usb 3-1: config 0 has no interfaces? [ 108.776908][ T761] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.786137][ T761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.794532][ T761] usb 3-1: Product: syz [ 108.798896][ T761] usb 3-1: Manufacturer: syz [ 108.803613][ T761] usb 3-1: SerialNumber: syz [ 108.809073][ T761] usb 3-1: config 0 descriptor?? [ 108.913502][ T305] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 108.917320][ T36] audit: type=1400 audit(108.879:429): avc: denied { bind } for pid=3185 comm="syz.5.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.998095][ T3184] SELinux: Context system_u:object_r:dhcpd_state_t:s0 is not valid (left unmapped). [ 109.007933][ T36] audit: type=1400 audit(108.969:430): avc: denied { relabelto } for pid=3183 comm="syz.0.935" name="file0" dev="tmpfs" ino=1901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dhcpd_state_t:s0" [ 109.042714][ T342] usb 3-1: USB disconnect, device number 28 [ 109.049065][ T36] audit: type=1400 audit(108.969:431): avc: denied { associate } for pid=3183 comm="syz.0.935" name="file0" dev="tmpfs" ino=1901 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dhcpd_state_t:s0" [ 109.114459][ T305] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 29542, setting to 64 [ 109.125822][ T305] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 109.140085][ T305] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.149712][ T305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 109.158045][ T305] usb 2-1: SerialNumber: syz [ 109.171062][ T305] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 109.213014][ T761] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 109.364192][ T761] usb 6-1: config 0 has no interfaces? [ 109.372760][ T761] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 109.385618][ T761] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.396911][ T468] usb 2-1: USB disconnect, device number 28 [ 109.409117][ T761] usb 6-1: config 0 descriptor?? [ 109.621791][ T761] usb 6-1: USB disconnect, device number 8 [ 109.693066][ T468] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 109.843054][ T468] usb 2-1: Using ep0 maxpacket: 8 [ 109.850456][ T468] usb 2-1: config 72 has an invalid interface number: 117 but max is 1 [ 109.858813][ T468] usb 2-1: config 72 has an invalid interface number: 90 but max is 1 [ 109.867627][ T468] usb 2-1: config 72 has an invalid interface number: 16 but max is 1 [ 109.877178][ T468] usb 2-1: config 72 has 3 interfaces, different from the descriptor's value: 2 [ 109.887423][ T468] usb 2-1: config 72 has no interface number 0 [ 109.894106][ T468] usb 2-1: config 72 has no interface number 1 [ 109.900481][ T468] usb 2-1: config 72 has no interface number 2 [ 109.907028][ T468] usb 2-1: config 72 interface 117 altsetting 6 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 109.918625][ T468] usb 2-1: config 72 interface 117 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 109.920432][ T3222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.946'. [ 109.933867][ T468] usb 2-1: too many endpoints for config 72 interface 90 altsetting 22: 55, using maximum allowed: 30 [ 109.953204][ T468] usb 2-1: config 72 interface 90 altsetting 22 has an invalid descriptor for endpoint zero, skipping [ 109.969510][ T3225] overlay: Unknown parameter 'mask' [ 109.972015][ T468] usb 2-1: config 72 interface 90 altsetting 22 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 109.988793][ T468] usb 2-1: config 72 interface 90 altsetting 22 has an invalid descriptor for endpoint zero, skipping [ 110.001323][ T468] usb 2-1: config 72 interface 90 altsetting 22 has a duplicate endpoint with address 0xE, skipping [ 110.001560][ T3225] overlayfs: failed to clone upperpath [ 110.012628][ T468] usb 2-1: config 72 interface 90 altsetting 22 has 8 endpoint descriptors, different from the interface descriptor's value: 55 [ 110.012682][ T468] usb 2-1: config 72 interface 16 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 110.043905][ T468] usb 2-1: config 72 interface 16 altsetting 4 endpoint 0x1 has invalid maxpacket 479, setting to 64 [ 110.055555][ T468] usb 2-1: config 72 interface 16 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 110.066315][ T468] usb 2-1: config 72 interface 16 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 110.077724][ T468] usb 2-1: config 72 interface 16 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 110.088727][ T468] usb 2-1: config 72 interface 16 altsetting 4 has a duplicate endpoint with address 0x8D, skipping [ 110.100566][ T468] usb 2-1: config 72 interface 117 has no altsetting 0 [ 110.107669][ T468] usb 2-1: config 72 interface 90 has no altsetting 0 [ 110.114855][ T468] usb 2-1: config 72 interface 16 has no altsetting 0 [ 110.126779][ T468] usb 2-1: New USB device found, idVendor=0733, idProduct=3261, bcdDevice=58.56 [ 110.136305][ T468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.145201][ T468] usb 2-1: Product: syz [ 110.149501][ T468] usb 2-1: Manufacturer: syz [ 110.154338][ T468] usb 2-1: SerialNumber: syz [ 110.159715][ T468] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 110.169791][ T468] usb 2-1: no configuration chosen from 1 choice [ 110.175872][ T3229] netlink: 100 bytes leftover after parsing attributes in process `syz.2.948'. [ 110.371376][ T3243] rust_binder: validate_parent_fixup: new_min_offset=14, sg_entry.length=0 [ 110.371398][ T3243] rust_binder: Error while translating object. [ 110.380096][ T3243] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 110.386396][ T3243] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:603 [ 110.501636][ T3253] netlink: 20 bytes leftover after parsing attributes in process `syz.2.955'. [ 110.533313][ T305] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 110.543324][ T36] audit: type=1400 audit(110.499:432): avc: denied { mounton } for pid=3254 comm="syz.2.956" path="/proc/614/task" dev="proc" ino=23145 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 110.693045][ T305] usb 6-1: Using ep0 maxpacket: 16 [ 110.699491][ T305] usb 6-1: config 0 has no interfaces? [ 110.707529][ T305] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 110.717070][ T305] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.725136][ T305] usb 6-1: Product: syz [ 110.729412][ T305] usb 6-1: Manufacturer: syz [ 110.734388][ T305] usb 6-1: SerialNumber: syz [ 110.740218][ T305] usb 6-1: config 0 descriptor?? [ 110.793029][ T342] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 110.943034][ T342] usb 3-1: Invalid ep0 maxpacket: 32 [ 110.952268][ T468] usb 6-1: USB disconnect, device number 9 [ 111.026091][ T3262] 9p: Unknown Cache mode or invalid value 딊 [ 111.068084][ T3262] netlink: 5308 bytes leftover after parsing attributes in process `syz.0.959'. [ 111.083062][ T342] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 111.134170][ T3271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3271 comm=syz.0.963 [ 111.149009][ T36] audit: type=1400 audit(111.109:433): avc: denied { map } for pid=3270 comm="syz.0.963" path="socket:[23177]" dev="sockfs" ino=23177 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 111.172745][ T36] audit: type=1400 audit(111.109:434): avc: denied { read } for pid=3270 comm="syz.0.963" path="socket:[23177]" dev="sockfs" ino=23177 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 111.243131][ T342] usb 3-1: Invalid ep0 maxpacket: 32 [ 111.248808][ T342] usb usb3-port1: attempt power cycle [ 111.372399][ T36] audit: type=1326 audit(111.329:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3305 comm="syz.0.976" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f65c818e929 code=0x0 [ 111.394772][ T36] audit: type=1326 audit(111.329:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3305 comm="syz.0.976" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f65c818e929 code=0x0 [ 111.502823][ T3323] fuse: Bad value for 'group_id' [ 111.507964][ T3323] fuse: Bad value for 'group_id' [ 111.588377][ T468] usb 2-1: USB disconnect, device number 29 [ 111.603038][ T342] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 111.634671][ T342] usb 3-1: Invalid ep0 maxpacket: 32 [ 111.644234][ T36] audit: type=1400 audit(111.599:437): avc: denied { read } for pid=3335 comm="syz.1.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 111.664746][ T3340] overlay: ./file0 is not a directory [ 111.675055][ T3346] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.687617][ T3349] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 111.707379][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 111.707391][ T3351] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.707602][ T3351] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:539 [ 111.793021][ T342] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 111.823554][ T342] usb 3-1: Invalid ep0 maxpacket: 32 [ 111.830629][ T342] usb usb3-port1: unable to enumerate USB device [ 112.243111][ T342] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 112.371114][ T3370] 9pnet_fd: Insufficient options for proto=fd [ 112.404623][ T342] usb 6-1: config 0 has no interfaces? [ 112.412864][ T342] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 112.422542][ T342] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 112.430837][ T342] usb 6-1: Product: syz [ 112.435057][ T342] usb 6-1: Manufacturer: syz [ 112.439694][ T342] usb 6-1: SerialNumber: syz [ 112.445642][ T342] usb 6-1: config 0 descriptor?? [ 113.569459][ T3389] 9pnet_fd: Insufficient options for proto=fd [ 113.591518][ T3392] pim6reg1: entered promiscuous mode [ 113.597245][ T3392] pim6reg1: entered allmulticast mode [ 113.753129][ T3352] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 113.754233][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 113.992919][ T3413] binfmt_misc: register: failed to install interpreter file ./file0 [ 114.193103][ T342] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 114.283029][ T36] audit: type=1400 audit(114.229:438): avc: denied { map } for pid=3414 comm="syz.2.1012" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 114.309073][ T36] audit: type=1400 audit(114.229:439): avc: denied { execute } for pid=3414 comm="syz.2.1012" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 114.354149][ T342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.373943][ T342] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 114.401011][ T342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.423088][ T342] usb 2-1: config 0 descriptor?? [ 114.446318][ T342] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 114.545044][ T3426] rust_binder: 3425 RLIMIT_NICE not set [ 115.005724][ T761] usb 6-1: USB disconnect, device number 10 [ 115.044961][ T3432] SELinux: Context is not valid (left unmapped). [ 115.052745][ T36] audit: type=1400 audit(115.009:440): avc: denied { create } for pid=3431 comm="syz.5.1017" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=C0B2 [ 115.075703][ T36] audit: type=1400 audit(115.009:441): avc: denied { associate } for pid=3431 comm="syz.5.1017" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=C0B2 [ 115.100384][ T36] audit: type=1400 audit(115.019:442): avc: denied { write open } for pid=3431 comm="syz.5.1017" path="/37/bus/file0" dev="overlay" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=C0B2 [ 115.128103][ T36] audit: type=1400 audit(115.089:443): avc: denied { unlink } for pid=2329 comm="syz-executor" name="file0" dev="tmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=C0B2 [ 115.238718][ T3443] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1021'. [ 115.272855][ T3450] /dev/rnullb0: Can't open blockdev [ 115.322046][ T3462] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:152 [ 115.470100][ T36] audit: type=1326 audit(115.429:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3471 comm="syz.2.1030" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe60bd8e929 code=0x0 [ 115.793065][ T342] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 115.943061][ T342] usb 6-1: Using ep0 maxpacket: 16 [ 115.949841][ T342] usb 6-1: unable to get BOS descriptor or descriptor too short [ 115.958438][ T342] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 115.967809][ T342] usb 6-1: config 1 has no interface number 1 [ 115.974422][ T342] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 115.989198][ T342] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 115.998335][ T342] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.006574][ T342] usb 6-1: Product: syz [ 116.010807][ T342] usb 6-1: Manufacturer: syz [ 116.015483][ T342] usb 6-1: SerialNumber: syz [ 116.225302][ T342] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 116.234343][ T342] usb 6-1: USB disconnect, device number 11 [ 116.244262][ T403] udevd[403]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 116.288642][ T3482] rust_binder: Write failure EFAULT in pid:656 [ 116.304806][ T3484] /dev/rnullb0: Can't open blockdev [ 116.910466][ T468] usb 2-1: USB disconnect, device number 30 [ 117.265810][ T3512] tipc: Enabling of bearer rejected, failed to enable media [ 117.277986][ T3512] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 117.278028][ T3512] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:560 [ 117.295982][ T3514] fuse: Unknown parameter 'fd-0x000000000000000d' [ 117.346629][ T3521] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:562 [ 117.347112][ T3521] syzkaller0: entered allmulticast mode [ 117.367739][ T3521] syzkaller0: entered promiscuous mode [ 117.376727][ T3515] syzkaller0: left promiscuous mode [ 117.383607][ T3515] syzkaller0: left allmulticast mode [ 117.691864][ T3539] rust_binder: Write failure EFAULT in pid:174 [ 117.737667][ T3545] rust_binder: Failed to allocate buffer. len:152, is_oneway:true [ 117.849561][ T3559] can0: slcan on ptm0. [ 117.904585][ T3559] can0 (unregistered): slcan off ptm0. [ 118.008571][ T3587] rust_binder: 3587: no such ref 1 [ 118.014963][ T3587] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:207 [ 118.304198][ T3639] bpf: Bad value for 'gid' [ 118.330098][ T3639] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1074'. [ 118.340120][ T36] audit: type=1400 audit(118.299:445): avc: denied { create } for pid=3638 comm="syz.0.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 118.416913][ T3656] incfs: Options parsing error. -22 [ 118.423511][ T3656] incfs: mount failed -22 [ 118.429714][ T36] audit: type=1400 audit(118.389:446): avc: denied { map } for pid=3655 comm="syz.0.1079" path="socket:[25057]" dev="sockfs" ino=25057 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 118.453924][ T36] audit: type=1400 audit(118.389:447): avc: denied { accept } for pid=3655 comm="syz.0.1079" path="socket:[25057]" dev="sockfs" ino=25057 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 118.963151][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 119.003817][ T3677] can: request_module (can-proto-6) failed. [ 119.034390][ T3683] overlayfs: failed to clone lowerpath [ 119.124484][ T9] usb 2-1: config 0 has no interfaces? [ 119.130276][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 119.140188][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.155666][ T9] usb 2-1: config 0 descriptor?? [ 119.208585][ T3711] incfs: Options parsing error. -22 [ 119.213945][ T3711] incfs: mount failed -22 [ 119.303066][ T468] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 119.364311][ T9] usb 2-1: USB disconnect, device number 31 [ 119.453226][ T468] usb 6-1: Using ep0 maxpacket: 16 [ 119.461515][ T468] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 119.471020][ T468] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.479264][ T468] usb 6-1: Product: syz [ 119.483666][ T468] usb 6-1: Manufacturer: syz [ 119.488589][ T468] usb 6-1: SerialNumber: syz [ 119.495802][ T468] usb 6-1: config 0 descriptor?? [ 119.504719][ T468] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 119.513755][ T468] usb 6-1: Detected FT232H [ 119.713241][ T468] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 119.752999][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 119.923056][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 119.932191][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.943963][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.956911][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 119.971384][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 119.981925][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.001614][ T9] usb 2-1: config 0 descriptor?? [ 120.043061][ T3723] netlink: 57 bytes leftover after parsing attributes in process `syz.0.1102'. [ 120.122142][ T468] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 120.131561][ T468] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 120.144748][ T468] usb 6-1: USB disconnect, device number 12 [ 120.162079][ T468] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 120.172138][ T468] ftdi_sio 6-1:0.0: device disconnected [ 120.411821][ T9] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 120.419939][ T9] microsoft 0003:045E:07DA.000D: ignoring exceeding usage max [ 120.430473][ T9] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 120.438123][ T9] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 120.445394][ T9] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 120.452642][ T9] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 120.459914][ T9] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 120.467547][ T9] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 120.474826][ T9] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 120.482338][ T9] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 120.489859][ T9] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 120.497239][ T9] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 120.506558][ T9] ================================================================== [ 120.515361][ T9] BUG: KASAN: slab-out-of-bounds in mon_bin_event+0x12c1/0x23e0 [ 120.523951][ T9] Read of size 64 at addr ffff88812f997001 by task kworker/0:0/9 [ 120.531976][ T9] [ 120.534532][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.12.30-syzkaller-g06ca12d7d229 #0 9aba5d3c529198ed3462d1d46215a794785d0dd5 [ 120.534559][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.534699][ T9] Workqueue: usb_hub_wq hub_event [ 120.534741][ T9] Call Trace: [ 120.534748][ T9] [ 120.534757][ T9] __dump_stack+0x21/0x30 [ 120.534780][ T9] dump_stack_lvl+0x10c/0x190 [ 120.534799][ T9] ? __cfi_dump_stack_lvl+0x10/0x10 [ 120.534819][ T9] ? __cfi__printk+0x10/0x10 [ 120.534843][ T9] print_address_description+0x71/0x220 [ 120.534859][ T9] print_report+0x4a/0x70 [ 120.534874][ T9] kasan_report+0x163/0x1a0 [ 120.534898][ T9] ? mon_bin_event+0x12c1/0x23e0 [ 120.534923][ T9] ? mon_bin_event+0x12c1/0x23e0 [ 120.534946][ T9] kasan_check_range+0x299/0x2a0 [ 120.534974][ T9] ? mon_bin_event+0x12c1/0x23e0 [ 120.534993][ T9] __asan_memcpy+0x31/0x80 [ 120.535013][ T9] mon_bin_event+0x12c1/0x23e0 [ 120.535045][ T9] ? mon_bin_complete+0x50/0x50 [ 120.535065][ T9] ? __kmalloc_noprof+0x1b1/0x450 [ 120.535086][ T9] ? __hid_request+0x1e5/0x410 [ 120.535107][ T9] ? hid_connect+0x49a/0x1a20 [ 120.535128][ T9] ? hid_hw_start+0xcb/0x160 [ 120.535148][ T9] ? ms_probe+0x194/0x460 [ 120.535166][ T9] ? __cfi_mon_bin_submit+0x10/0x10 [ 120.535186][ T9] mon_bin_submit+0x2b/0x40 [ 120.535205][ T9] mon_submit+0x1b9/0x230 [ 120.535222][ T9] usb_hcd_submit_urb+0x12d/0x1a20 [ 120.535252][ T9] ? bus_probe_device+0x18b/0x270 [ 120.535282][ T9] ? usb_probe_device+0x1d4/0x380 [ 120.535314][ T9] ? really_probe+0x2d3/0x890 [ 120.535346][ T9] ? __driver_probe_device+0x198/0x280 [ 120.535375][ T9] ? driver_probe_device+0x54/0x3f0 [ 120.535399][ T9] ? __device_attach_driver+0x2f1/0x4b0 [ 120.535425][ T9] usb_submit_urb+0x111b/0x1800 [ 120.535445][ T9] usb_start_wait_urb+0x11b/0x2f0 [ 120.535465][ T9] ? usb_api_blocking_completion+0xd0/0xd0 [ 120.535485][ T9] ? __kasan_kmalloc+0x96/0xb0 [ 120.535509][ T9] ? __kasan_check_write+0x18/0x20 [ 120.535528][ T9] ? usb_alloc_urb+0x9b/0x200 [ 120.535545][ T9] usb_control_msg+0x25a/0x490 [ 120.535565][ T9] usbhid_raw_request+0x457/0x590 [ 120.535584][ T9] __hid_request+0x1e5/0x410 [ 120.535605][ T9] hidinput_connect+0x241b/0x3340 [ 120.535633][ T9] hid_connect+0x49a/0x1a20 [ 120.535663][ T9] ? usbhid_start+0x1a67/0x2530 [ 120.535682][ T9] ? __cfi_hid_connect+0x10/0x10 [ 120.535705][ T9] hid_hw_start+0xcb/0x160 [ 120.535728][ T9] ms_probe+0x194/0x460 [ 120.535747][ T9] hid_device_probe+0x2c1/0x5d0 [ 120.535772][ T9] ? __cfi_hid_device_probe+0x10/0x10 [ 120.535795][ T9] really_probe+0x2d3/0x890 [ 120.535820][ T9] __driver_probe_device+0x198/0x280 [ 120.535844][ T9] driver_probe_device+0x54/0x3f0 [ 120.535869][ T9] ? __device_attach_driver+0x2db/0x4b0 [ 120.535894][ T9] __device_attach_driver+0x2f1/0x4b0 [ 120.535921][ T9] bus_for_each_drv+0x260/0x2f0 [ 120.535939][ T9] ? __cfi___device_attach_driver+0x10/0x10 [ 120.535964][ T9] ? __cfi_bus_for_each_drv+0x10/0x10 [ 120.535984][ T9] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 120.536001][ T9] __device_attach+0x2bd/0x3a0 [ 120.536025][ T9] ? device_attach+0x40/0x40 [ 120.536049][ T9] ? _raw_spin_lock+0x8c/0x120 [ 120.536064][ T9] ? __cfi__raw_spin_lock+0x10/0x10 [ 120.536121][ T9] device_initial_probe+0x1e/0x30 [ 120.536145][ T9] bus_probe_device+0x18b/0x270 [ 120.536164][ T9] device_add+0x80c/0xc00 [ 120.536188][ T9] hid_add_device+0x39b/0x560 [ 120.536211][ T9] usbhid_probe+0xde3/0x12b0 [ 120.536233][ T9] usb_probe_interface+0x696/0xc00 [ 120.536259][ T9] ? __cfi_usb_probe_interface+0x10/0x10 [ 120.536284][ T9] really_probe+0x2d3/0x890 [ 120.536309][ T9] __driver_probe_device+0x198/0x280 [ 120.536333][ T9] driver_probe_device+0x54/0x3f0 [ 120.536357][ T9] ? __device_attach_driver+0x2db/0x4b0 [ 120.536404][ T9] __device_attach_driver+0x2f1/0x4b0 [ 120.536440][ T9] bus_for_each_drv+0x260/0x2f0 [ 120.536466][ T9] ? __cfi___device_attach_driver+0x10/0x10 [ 120.536495][ T9] ? __cfi_bus_for_each_drv+0x10/0x10 [ 120.536514][ T9] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 120.536531][ T9] __device_attach+0x2bd/0x3a0 [ 120.536563][ T9] ? device_attach+0x40/0x40 [ 120.536586][ T9] ? _raw_spin_lock+0x8c/0x120 [ 120.536601][ T9] ? __cfi__raw_spin_lock+0x10/0x10 [ 120.536617][ T9] device_initial_probe+0x1e/0x30 [ 120.536642][ T9] bus_probe_device+0x18b/0x270 [ 120.536663][ T9] device_add+0x80c/0xc00 [ 120.536696][ T9] usb_set_configuration+0x1ad4/0x20b0 [ 120.536724][ T9] usb_generic_driver_probe+0x95/0x160 [ 120.536744][ T9] usb_probe_device+0x1d4/0x380 [ 120.536768][ T9] ? __cfi_usb_probe_device+0x10/0x10 [ 120.536808][ T9] really_probe+0x2d3/0x890 [ 120.536837][ T9] __driver_probe_device+0x198/0x280 [ 120.536861][ T9] driver_probe_device+0x54/0x3f0 [ 120.536890][ T9] ? __device_attach_driver+0x2db/0x4b0 [ 120.536926][ T9] __device_attach_driver+0x2f1/0x4b0 [ 120.536963][ T9] bus_for_each_drv+0x260/0x2f0 [ 120.536981][ T9] ? __cfi___device_attach_driver+0x10/0x10 [ 120.537007][ T9] ? __cfi_bus_for_each_drv+0x10/0x10 [ 120.537026][ T9] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 120.537043][ T9] __device_attach+0x2bd/0x3a0 [ 120.537067][ T9] ? device_attach+0x40/0x40 [ 120.537089][ T9] ? _raw_spin_lock+0x8c/0x120 [ 120.537109][ T9] ? __cfi__raw_spin_lock+0x10/0x10 [ 120.537143][ T9] device_initial_probe+0x1e/0x30 [ 120.537166][ T9] bus_probe_device+0x18b/0x270 [ 120.537185][ T9] device_add+0x80c/0xc00 [ 120.537208][ T9] usb_new_device+0x9ed/0x1590 [ 120.537229][ T9] ? __cfi_usb_new_device+0x10/0x10 [ 120.537251][ T9] hub_event+0x265b/0x41a0 [ 120.537281][ T9] ? __cfi_hub_event+0x10/0x10 [ 120.537304][ T9] ? __schedule+0x1463/0x1f10 [ 120.537322][ T9] ? kick_pool+0xb9/0x550 [ 120.537338][ T9] process_scheduled_works+0x7d5/0x1020 [ 120.537364][ T9] worker_thread+0xc58/0x1250 [ 120.537390][ T9] kthread+0x2c7/0x370 [ 120.537414][ T9] ? __cfi_worker_thread+0x10/0x10 [ 120.537437][ T9] ? __cfi_kthread+0x10/0x10 [ 120.537462][ T9] ret_from_fork+0x64/0xa0 [ 120.537481][ T9] ? __cfi_kthread+0x10/0x10 [ 120.537511][ T9] ret_from_fork_asm+0x1a/0x30 [ 120.537542][ T9] [ 120.537551][ T9] [ 121.184885][ T9] Allocated by task 9: [ 121.188965][ T9] kasan_save_track+0x3e/0x80 [ 121.193749][ T9] kasan_save_alloc_info+0x40/0x50 [ 121.198876][ T9] __kasan_kmalloc+0x96/0xb0 [ 121.203495][ T9] __kmalloc_noprof+0x1b1/0x450 [ 121.208495][ T9] __hid_request+0xa9/0x410 [ 121.213015][ T9] hidinput_connect+0x241b/0x3340 [ 121.218069][ T9] hid_connect+0x49a/0x1a20 [ 121.222583][ T9] hid_hw_start+0xcb/0x160 [ 121.227108][ T9] ms_probe+0x194/0x460 [ 121.231281][ T9] hid_device_probe+0x2c1/0x5d0 [ 121.236161][ T9] really_probe+0x2d3/0x890 [ 121.240845][ T9] __driver_probe_device+0x198/0x280 [ 121.246475][ T9] driver_probe_device+0x54/0x3f0 [ 121.251524][ T9] __device_attach_driver+0x2f1/0x4b0 [ 121.256914][ T9] bus_for_each_drv+0x260/0x2f0 [ 121.261807][ T9] __device_attach+0x2bd/0x3a0 [ 121.266677][ T9] device_initial_probe+0x1e/0x30 [ 121.272249][ T9] bus_probe_device+0x18b/0x270 [ 121.277686][ T9] device_add+0x80c/0xc00 [ 121.282663][ T9] hid_add_device+0x39b/0x560 [ 121.287663][ T9] usbhid_probe+0xde3/0x12b0 [ 121.292301][ T9] usb_probe_interface+0x696/0xc00 [ 121.297784][ T9] really_probe+0x2d3/0x890 [ 121.302613][ T9] __driver_probe_device+0x198/0x280 [ 121.308740][ T9] driver_probe_device+0x54/0x3f0 [ 121.313996][ T9] __device_attach_driver+0x2f1/0x4b0 [ 121.319410][ T9] bus_for_each_drv+0x260/0x2f0 [ 121.324726][ T9] __device_attach+0x2bd/0x3a0 [ 121.330037][ T9] device_initial_probe+0x1e/0x30 [ 121.335709][ T9] bus_probe_device+0x18b/0x270 [ 121.340579][ T9] device_add+0x80c/0xc00 [ 121.345358][ T9] usb_set_configuration+0x1ad4/0x20b0 [ 121.351014][ T9] usb_generic_driver_probe+0x95/0x160 [ 121.356557][ T9] usb_probe_device+0x1d4/0x380 [ 121.361450][ T9] really_probe+0x2d3/0x890 [ 121.366459][ T9] __driver_probe_device+0x198/0x280 [ 121.371767][ T9] driver_probe_device+0x54/0x3f0 [ 121.376901][ T9] __device_attach_driver+0x2f1/0x4b0 [ 121.382570][ T9] bus_for_each_drv+0x260/0x2f0 [ 121.388075][ T9] __device_attach+0x2bd/0x3a0 [ 121.392948][ T9] device_initial_probe+0x1e/0x30 [ 121.398169][ T9] bus_probe_device+0x18b/0x270 [ 121.403044][ T9] device_add+0x80c/0xc00 [ 121.407481][ T9] usb_new_device+0x9ed/0x1590 [ 121.412274][ T9] hub_event+0x265b/0x41a0 [ 121.416744][ T9] process_scheduled_works+0x7d5/0x1020 [ 121.422423][ T9] worker_thread+0xc58/0x1250 [ 121.427623][ T9] kthread+0x2c7/0x370 [ 121.431858][ T9] ret_from_fork+0x64/0xa0 [ 121.436436][ T9] ret_from_fork_asm+0x1a/0x30 [ 121.441360][ T9] [ 121.443741][ T9] The buggy address belongs to the object at ffff88812f997000 [ 121.443741][ T9] which belongs to the cache kmalloc-8 of size 8 [ 121.459744][ T9] The buggy address is located 1 bytes inside of [ 121.459744][ T9] allocated 7-byte region [ffff88812f997000, ffff88812f997007) [ 121.476002][ T9] [ 121.478350][ T9] The buggy address belongs to the physical page: [ 121.484906][ T9] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12f997 [ 121.493874][ T9] anon flags: 0x4000000000000000(zone=1) [ 121.499545][ T9] page_type: f5(slab) [ 121.503667][ T9] raw: 4000000000000000 ffff888100041500 0000000000000000 0000000000000001 [ 121.512716][ T9] raw: 0000000000000000 0000000080800080 00000001f5000000 0000000000000000 [ 121.521549][ T9] page dumped because: kasan: bad access detected [ 121.528419][ T9] page_owner tracks the page as allocated [ 121.534614][ T9] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 289, tgid 289 (syz-executor), ts 98772307172, free_ts 98772117077 [ 121.554809][ T9] post_alloc_hook+0x3b9/0x3f0 [ 121.559765][ T9] prep_new_page+0x1c/0x120 [ 121.564293][ T9] get_page_from_freelist+0x46bb/0x4750 [ 121.569987][ T9] __alloc_pages_noprof+0x30d/0x6c0 [ 121.575304][ T9] alloc_slab_page+0x6b/0x1f0 [ 121.581604][ T9] allocate_slab+0x69/0x440 [ 121.586592][ T9] ___slab_alloc+0x59a/0x8b0 [ 121.591242][ T9] __kmalloc_node_noprof+0x23e/0x450 [ 121.596761][ T9] __vmalloc_node_range_noprof+0x544/0x1420 [ 121.603310][ T9] vzalloc_noprof+0xfd/0x1d0 [ 121.608028][ T9] do_ip6t_get_ctl+0x777/0x1180 [ 121.613060][ T9] nf_getsockopt+0x288/0x2b0 [ 121.617664][ T9] ipv6_getsockopt+0x1dd/0x280 [ 121.622595][ T9] tcp_getsockopt+0x106/0x130 [ 121.627420][ T9] sock_common_getsockopt+0xb2/0xd0 [ 121.632917][ T9] do_sock_getsockopt+0x3a3/0x6d0 [ 121.638678][ T9] page last free pid 289 tgid 289 stack trace: [ 121.645114][ T9] free_unref_page+0xae5/0xdd0 [ 121.650263][ T9] __free_pages+0x6b/0x3b0 [ 121.655505][ T9] vfree+0x3bf/0x580 [ 121.659434][ T9] do_ip6t_get_ctl+0xe86/0x1180 [ 121.665539][ T9] nf_getsockopt+0x288/0x2b0 [ 121.670339][ T9] ipv6_getsockopt+0x1dd/0x280 [ 121.675493][ T9] tcp_getsockopt+0x106/0x130 [ 121.680699][ T9] sock_common_getsockopt+0xb2/0xd0 [ 121.686564][ T9] do_sock_getsockopt+0x3a3/0x6d0 [ 121.691632][ T9] __x64_sys_getsockopt+0x1d5/0x280 [ 121.696886][ T9] x64_sys_call+0x10db/0x2ee0 [ 121.701691][ T9] do_syscall_64+0x58/0xf0 [ 121.706361][ T9] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 121.712300][ T9] [ 121.715093][ T9] Memory state around the buggy address: [ 121.721025][ T9] ffff88812f996f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 121.729485][ T9] ffff88812f996f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 121.737918][ T9] >ffff88812f997000: 07 fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 121.746418][ T9] ^ [ 121.750545][ T9] ffff88812f997080: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 121.758831][ T9] ffff88812f997100: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 121.767356][ T9] ================================================================== [ 121.775644][ T9] Disabling lock debugging due to kernel taint [ 121.792692][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 121.792712][ T36] audit: type=1400 audit(121.749:450): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 121.822227][ T36] audit: type=1400 audit(121.749:451): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.843373][ T36] audit: type=1400 audit(121.749:452): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.864114][ T36] audit: type=1400 audit(121.749:453): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.884243][ T36] audit: type=1400 audit(121.749:454): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 121.905469][ T36] audit: type=1400 audit(121.749:455): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 121.906545][ T9] microsoft 0003:045E:07DA.000D: No inputs registered, leaving [ 121.928199][ T36] audit: type=1400 audit(121.749:456): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 121.938235][ T9] microsoft 0003:045E:07DA.000D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 121.971134][ T9] microsoft 0003:045E:07DA.000D: no inputs found [ 121.974973][ T36] audit: type=1400 audit(121.829:457): avc: denied { remount } for pid=3715 comm="syz.1.1099" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 121.982227][ T9] microsoft 0003:045E:07DA.000D: could not initialize ff, continuing anyway [ 122.979216][ T9] usb 2-1: USB disconnect, device number 32