last executing test programs: 10.996936562s ago: executing program 1 (id=3592): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x18c6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441805"], 0x30}, 0x7e8166965e22236a) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x602, 0x0) writev(r5, &(0x7f00000015c0)=[{&(0x7f0000000400)="39ad7915", 0x4}], 0x1) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r4, 0x40084149, &(0x7f0000000080)=0xfd8) ioctl$SNDRV_PCM_IOCTL_START(r4, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r4, 0x40044145, &(0x7f0000001540)=0x2) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1000, 0x8000002, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r10, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2001, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x5f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x4000, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x8200, 0x3, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e21, 0xff, @loopback, 0x10}}, 0x2, 0x0, 0x9690, 0x6, 0x2, 0x4, 0x8}, &(0x7f00000005c0)=0x9c) r11 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x25dfdbfc, {0x2, 0x10, 0x10, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x20002200}}, 0x1c}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r13 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x48f, 0x0, 0x7fffff00036dfb}]}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 9.107213351s ago: executing program 2 (id=3601): inotify_init1(0x80000) r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6, 0x3, "e971ec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_INPUT(r2, &(0x7f0000000c00)={0x8, {"dfd3d96e60efac2a394daff07216e54179f103ab71d6e6610dd68634b6b9c2b8695ab107de8c66cc2dfcd0913540acf01009b8e0221165fcbeebcad26e5690c8af073a78c416bdd7bba027f6635c2879e72640a63c3b2cd761b68db69598e4cbfcfd8abd1eae1d408a62b4f025661bd0544952474bb2aeea430d4fbdab0eb7cd34c3e0b6bdc8c1676c76dea469140629cbad0c773927af126ecdc6e7596c3d7d786ebfaf9efd855d0ea569a2af2554001c358a3934e13b7934c150edabf53bfdaee077943b0e36cd32d6afa11bf7d1ae5c6c0a9dae9c722045cb0bdcd34962987c0874c9e4d6948c8f2e3751f60cc6e89aa13ce8ef7a7936d9db9cbf3c1d9d8e4478d232451da5dbf84f06e672e305786f327a1a44546534ab58506997ec5ea29efe0d42bfd46a1448ab74265c328c5c4913c6ef4cfd3ad5f1ac52c23f561440c5420b76f3a7fe0ba5a984c1dab8ad7436a7b3edbe261bb412e1aff63460a38b1b6495e6b56e10b7dbbb046ed733670dfe8b5aa48883786bcf7fb38466ec5f94665af9ba93b8b43ff066841799f72e6c62070fdc0cd24d8ed3b3555344bb3fe24c558cbe7222cfd756c105f1ba7e1fbbd2334ad5dcc9f4ff1f0d9fc499927a5e97b4c5fddb54485371bc4c74f0742fcf6fe30713b6ee1317a881c226c052e8524998bc6190527643b2a34ecef08669124105c649386086b232b9e42c9d5772707f6deb3936d0b3b2a37a3438bad908767627bb9b48ea02b0cc720a1be9b973a2a331641e90f8a583300712007675bbe19e3172f50f1966d75d14419a847c41c88189fc32c47ed55cca009ed03b52dbb56fe814cad6924e3dd4b471ea1519ac8c47101513dc6b505502c2d2210c1aa21c7d1e0f07bc9bd01e8d62efbb279aebd068af923831ee4fa5679f11e9c413dc709d1e3b1ccbf8b4732abb38f36e29bfdd739c80d3f3c9aa092efaa9b9b06c3527098dfbc9fa9efa308ee4779b899e4a1bb85df16983f9097f62d3fdc52ab562cfa8eafb11b0893f8b60c07af883a84264934f99c5db7856808d87252c3ac67bb300550ff6883f65e510788ba83b2e04e18100b56547bdbe95579b5b9451f2578ea50aa61f1a714ae774f467df2ef5d7b756eebbf6aa7fb735877b132612ba68cf0eaece13ba0318eb4f3ce4e649d90e38ea12fb57cca4a6f505956638a74a64dc6abe72ebac3eb5af3867c0dbedd9e1202d421b5ae77c6e478cdb9be3ce1a921bbfc12a5a67429ffcad532b6a0e6bbc401b8a61cfdb27af18c902884cedb4f635e42e9fdf366cc44151b961503fd953a1b2a9952fc4ca03591cae7d12ab1b9ef684278a3efa0e7ebcebdef1de1953f7508b9e73b1370a56d6ec92534fcff0ac48a6130279ecfc64d9fe165864b18a4ac82aa1a48ec965c830f2e5d713f0b114a56ca22ca59829062933e3da69e87aa9c8098d1482195716bca7166a45275ae9d715cbd6912e3cbddda2f760f526cc51ee426a08817463c5bba4c06958545ec4469a5e0172e5bd9660b649a2d478fa0db267cb0f5e653046ca8f9e0ad56db2ec4f3db15c33b75356d8afe9c1048f19bae34a55f8a8bc60f1582a6c9f7bb4f64f5848e9de6345ea2c3ab997f6849c41bc354c24dfba520dc6d004c053a2e0c94c5a728d8070e941fe0d2d0a9d0dc82f7c78bee061645e0cc88e42f0899da31b8ec389c7736bc11307d80e8e99922b57a8e6069a3a67a94b63807ebdfffdf8bb70746f9ba6304c0729e338dc4e7be9bbc114f8394b34683ca1cb780fff1c788efae7e765bd70877dd8f2eb2ad8463db08e8842ec76206f42323424dd9c8ad61da1b25605560e201388a5a01eb1f3e47175a23506355a8b38bb20b0a0bd8aab889bf9d83e7cb80bb3ef267c1eb9ec0097c258963423dcea3b3e23e7dc76dc9bf4ae0d0876c1979eca1657431a46460372946d50f316a3f175e8ae740b7d13f6e6a860eef075131a0747654d924ccd708bada54604df88e2fc20b3b6cdbd083f0511cbe31b379abe6bf9150ce8a69d7bee01366d6de44c148f3703a3934344572d0be73631cc0da213bb01f603cb7776853cbc05a4225be8305a94b3aa7168adbe7367a830f4a2a9494711d3aa270d69b5fb8bffd06a8157fc20f2e6c1293b2fe0f0a643981982a02c7df385da603ff6cb2fad917c94813a8ad7f5a1693c8461dca613afcc2b702eedff1e1215bbb5decd6e2d51c9b78e1976e97438f36e81e490b91cb5387f2156ef11ba3709046e15f551c59a7dcc451dd4e3e10b5432a99e143c2efac3dabc05f0657107c1465f5744bcb89b1df9daefb586bd6dad606da0ec4aa939268445dfaf528aa5d401a3df47d5eacaf672e977e0c2ec26b6eaa12b35d248034776c546785cd7fd58a236034cb77996f37a9ccb053588b417bd1450673d3fe7c9a19ca06b68e6ed6597d25e1210553d2fda886e946ce56e957e806dc5dd84a5e3086745156b142caa2f0ea969f3c08b88eb47b06f1a4bd1274d07d7b50f6e197f4053c3560a4dfd84cef16bac58af87a4fc778e69bbc0e40f77035a848eb97505e856944263e5833afb68db0ac2acadea33d5bb926e7ddb1212b4714e42ddc9f7fa0495425a2251866e573ca5a5b256016ce75ef8bb8aca36257dfc10dd392b58ed53c3f6c7cf0ce49a6f592d9d7f1a70e349fe3825894ea34c1c7cf9f712bef12b19ee775a27dc1fa044de168e7faf6e800f7d9bcf032a625fac2c7a40ad2847af7e9d66063f0be0a3ea39ee8e687d27246101849c44b374353d2ab15abff0578b1867e15c79a3fa5dc186e5d58e33fe6c93118819dcf26a788eb90672ff46b242f58fb5f9ba77bb63ef0c1b6a2489856ceb6366c821e2e9b26e13bb34d7dbc222aab2a985263478c4c8f5d9ec7ddbfecc55e3fa59aee140c9261e77938fe053b29f8b4a6ab1c3b087ed889641945d9760d087efd6168ff4a2a8274f726bdda28cdc1f03a4422802207c696dda42ad34795200b53541e37ac29e382c4be84a6f830c14dbeb41642a761c482cbd6eb5c0da28de9beb68384968fc4b00404c4b46e11237fe56389e0a592aeaeb2749dc757f4590d8eb921b4aa085d5983344b82f90d7ff8f55060c2fd174a17e40db2bf58dcc52814812933d8a42ff751c882b57e3295166f6a305fad38d82e669f5dce9327acdee9ec9260368fdadd08e0eb4b7444c426413beb1f30e58d58ef13df5b99cb9d552a22070615d8f25de646e6bff4ab264c03dc67a851fb6bbcb35cacb555fedafe832393df28c15303318d4467d9a6dc04be14713791327382fcdd0bebadc2033f82fd9474230f5b2661be77866fea6e5f20402c0be034c121a0ffdf3c9e93c4b394f7569750af73179dbf3c2ee873ca80b0332c5b16b2d4a90dbd38d47e71275cf9bd051dc2dd0a1d7e533739e166f6a41806fa334b144060eacee377e1b9da5a57b314ab1bfca782dc8f041d6791588ebfa3c188aa2dc2a7b4b89452417eecfbb191f3d32acce847fb76b34194951c2195054f62eade36f9cf437f90fa1e26277f04547511750867af928e6080320f128157be9c74847143c503e7d35c7c1e712683e21109f3bd2163c1a85a4373920dc92ad00144c967db347e19690604c370104f13bb0c24967158a2522566ec6ce0b61d5339ab312fa06c14bd3b310acf5d928d3b28c07cc2eab2e138301af6cd62db2a794aa313c101d8aa46de451620cae14e7ec732d170847f2ebc016739ce6d16083ee2e3e00d01ef6b7f18e436b3602b9e4738fd78aa4dd20bc263fe6725de0805f80d8c9b666e26b43cad46e9e5e4158106446ddd89378798a90c35b3ba049e8a3346b2d2838526f7624ba297acabe2ddeb7da28da09766396f8c9312bcabafc7d49b34ff5fa42ed6c2b0e4127ecae82889d5f2af9e3afe9407ddb21d8e0b8af8f50a07c013badc3d59d664e94f9ddbb31c5894c1edf4780096e0e0cc7503c19756df28541b913f2670f127189bb68ee26eb8a564b0c9a3c73397ab9b2b22da40aeb0e3d4530d10a670e54d03bb46dd587d99b9861e389147603170052110998dac6c0e4dd5a20e924cc1fbb85bf784d2309f13a571b758cf6a3b897b62249758f6c0c2ae8e23d12bd4020032384180a9d767a446e33e9f33d348cfb03b71749cd5d86b610ba71aede76035f1a6a8db9c7a1b1cd7c1c81cae3aac87a5490634419cf6793eff3a3766d537a00a674efbf51193f635fa213463164acf6d185cef1f3902208736be549f0dddfdba6fb668b4d5a7784f0cce075610b427dac696d1d26bd4fa33007909e21be9978c67e5ceafa400f6af42f049d04ac167bd780f41ad3bb686677992bd0c62d85fddb826a5c56a81ac10ac1707f2680596334a30bbde554996ec5e800d13682da5c1c2aa273ec5c035fc3bf29f9f1701275c264cae9be4f21e2ac9e34c792abcbd9e7647947b9eb66fcb7f3963a6ec90459db6151264e375588b70b625722860404cfb7273bb03f2f5691fd6c623414aee6d22ee5ee3d382a8d3e74f535c6f14538f1dddfebfb596452e5bce88531e0266f35471c344e72d2edde9aa62537c8fb2a8703a44a308dfd7e9b37e68e3783c716e677d473ad80573f337e99ca38c0a7172dd43fb2648268adac518ba17030c35239877bc50b25232eebd338243f3579e0dcedc17d816c9a2837a9811a2ee519d4181066001f666e38a2479e7ac2bfd5914695add2d1aee44270eefdc1c88f5eb1c8967fe8a60af70fbb4cafddaa34c2804fe225945b457e925275d2414f11a3b33dd4da31c38cd8059a7183ff9758bea66e9f1ffcae489c40c2f31f3d35a0b8922a247defb4ac70a8b5cae6fd4a803a8e1444507712d98ea0945147d5909c40b7b6fc5c3126bf7c74866308d47189e4ea9b40046dc7d9d08b71c8896b39def1974afa75bab2bc3d41ac05a50d52509bab2eae953f3d40ac2a0953279dc9ef5fb14dd17833b63db7e560d949a4cf5787ea9bff8272ea27c4c5731d71d6ffc5bcabcf451d0c10ea3979671eff6a18738fdebdc6404366bcf3a04a6c9d1bce08b0ce713f31da4de8ff891cda20ef6ea9e5c04908cfb8195fc9cedab68dd0de6eb6a7171486a163f4b757ae5538ed9ea86b05ac2e21cc421d8fe8db9cc210e8edb26eeabc004b51abe8af9ae313f3ffe9896a3299bfd472d2f7cc349e0f88acaed3952662b9f3b716af13d9eec3e56bbb9e93159480d497cf6d7b6926490c7ea3e46f31200236cbab47548895237d586bf95ce15970488e291e4034b05df94484fea64f6629c3bde9bc7d2aa58f1c1704b7d8fcc3422ea519b8f435423f14d656aa770d7fd5e47792c864356baa4923cef32e69740c2873e59349e2cd3c7eb87e3e591980edc0aa14b5033a695338c844fdae88ae301966743c1e3550a3314b3ee3c525d9fa8eb639aad13bf192d5e3ca3338d1158962674a679bc10368577236c0cc381d7b7c39709efd4c7381c6908586e37b56c7ea23cba163a83af7a81e62fba48c28f32cf2664c7abb14c0014662ce8e5cab3a81b8ebd41f591cfe42d819bda17a989adf3ae10a9a14d318d147813f1a2bd4358ba29c591f01d6af8c74ca6c662a947c26df8fde29c71903f4414024335157b45e7b4a3d9ac95ad6728ffc1f3631bb8b33d4662eb8b2b8b0f551032a6c466e62d80b59297f7049e3c5bccf97e1fd7ab3f6da16c16ebf1b40899511e4bfbb5ef7e7bd05335cb67d413be66385aa2bc5a633e8f05a1aaceba2ae079c69da9a1deeb5997ba026cbc4d48c16b9dc48a8fd69e2d6a3b6e924db5df581", 0x1000}}, 0x1006) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000280)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000140)={0x0, 0x10, 0x1, "9a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xf1f, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0xfffc, 0xa, 0x10, 0x0, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x100, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) close(0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write(r4, &(0x7f0000000380)='100000', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r5, &(0x7f0000000200)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r6, &(0x7f0000000280)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x21}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) 9.01706076s ago: executing program 1 (id=3603): r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/191, 0xbf}], 0x1, 0x55, 0xfffffffc) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000b40)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_disconnect(r0) syz_usb_control_io(r1, 0x0, 0x0) sync() sync() sync() r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000240)=0x4038, 0x4) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b}) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r5, &(0x7f0000000bc0)=ANY=[@ANYBLOB], 0x40) unshare(0x22020600) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200048c1}, 0x2000009c) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil) getsockopt$inet_mptcp_buf(r6, 0x11c, 0x2, &(0x7f0000000040)=""/170, &(0x7f0000000140)=0xaa) ioctl$KVM_GET_NR_MMU_PAGES(r5, 0xae45, 0xe43) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) 6.838401788s ago: executing program 1 (id=3611): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000200)={0x5, 0x0, [{0x80000008, 0xffffffff, 0x5, 0x2, 0x0, 0x7fe}, {0x0, 0x6, 0x2, 0x5}, {0x1, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0x8}, {0xa, 0x1, 0x1, 0x7, 0x2961074e, 0x80008, 0x6}, {0x40000006, 0x5, 0x4, 0x8, 0x2, 0x8, 0x100}]}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e06, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}, 0x9}, 0x1c) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') getdents(r5, &(0x7f00000001c0)=""/35, 0x23) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xac, 0x14, 0x14, 0x2d}, 0xf, 0x7}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0xc6b22000) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r8) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r10, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x8e2ef89e051818bb, 0x8000}) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 6.651013594s ago: executing program 2 (id=3612): socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) (async) syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) semget$private(0x0, 0x4, 0x20c) (async) semget$private(0x0, 0x4, 0x20c) r0 = io_uring_setup(0x1195, &(0x7f0000000100)={0x0, 0x2150, 0xc000, 0x3, 0x312}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) (async) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) socket$inet(0x2, 0x80001, 0x84) (async) socket$inet(0x2, 0x80001, 0x84) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) write$binfmt_script(0xffffffffffffffff, &(0x7f00000122c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r2, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) (async) readv(r2, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) 5.950610984s ago: executing program 0 (id=3617): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000700ffffff", @ANYRES8], 0x4}}, 0x0) sendfile(r2, r0, 0x0, 0x100000000) 5.840987909s ago: executing program 0 (id=3618): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) write(r0, &(0x7f0000000640)="074e999a808280c9258607c474973e7c060008f30700eb22cddc7984e8c28d37622242e8a6e7f815d5c3e2ceb85a4ec98b914f553f688628c0ede39f1cc2a00f6dcab8a5e0eed342027ac1aa7cc7155347fe", 0x52) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x160, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x12}}}}, [@NL80211_ATTR_TX_RATES={0x138, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x100, 0x1, 0x1, 0x5, 0x0, 0x6, 0x200]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0xd8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0xd20, 0x5, 0x4, 0x7fff, 0x3, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x4, 0x3, 0x1, 0xffff, 0x7, 0x5a26]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x16, 0x30, 0x24, 0xc, 0x48, 0xc, 0x30, 0x48, 0x18, 0x48, 0x6c, 0x30, 0x3, 0x2, 0xb, 0x2, 0x1, 0x24, 0x5, 0x9, 0x6, 0x4, 0x3, 0x60, 0xb, 0x3, 0x36, 0x18, 0x12, 0x36, 0x26]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x16, 0x2e, 0x9, 0x1, 0xb, 0x42, 0xb, 0x4, 0x5, 0x1a, 0x16, 0xb, 0x3, 0x60, 0x36, 0xc, 0x6, 0x3, 0x2, 0x9, 0x2, 0x36, 0x12, 0x9, 0x51, 0x16, 0x9, 0x16, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x4, 0x4, 0xec, 0x9, 0x4b79, 0x6, 0x800]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x4, 0x6c, 0xf49241bd405e1e19, 0x2, 0x9, 0x6, 0x30, 0x4, 0x3, 0x60, 0x3, 0x60, 0x30, 0xc, 0x6c, 0xb, 0x30, 0x6, 0x5, 0x6c, 0x48, 0x60, 0x1, 0x3, 0x4, 0x1, 0x9, 0x6c, 0x36, 0x12, 0x36]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x36, 0x24, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x5f, 0x8, 0x4, 0xb7ac, 0x4, 0x7c, 0x9]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0xb, 0x60, 0x2, 0xc, 0x12, 0x60, 0x6, 0x9, 0x18, 0x5, 0x48]}]}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.682045658s ago: executing program 2 (id=3619): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r1 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000001240)={0x6, 0x2, 0x10, "186a3f4e22e2b284e8dec44b29aadd28b3700fba026367b70bacda8ce82bd75e", 0x56595559}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000240), 0x1, 0x2603) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='freezer.self_freezing\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000009, 0x13, r4, 0xdf127000) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1beb}) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000007c0)={0x6, 0x0, 0x9}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x65, &(0x7f0000000280)=[{}], 0x8, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x1b, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, r3, 0x3, 0x4, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9a}, [@jmp={0x5, 0x0, 0x1, 0x7, 0x7, 0x8, 0x8}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xca}, @call={0x85, 0x0, 0x0, 0x46}]}, &(0x7f0000000100)='GPL\x00', 0x3, 0x1a, &(0x7f0000000140)=""/26, 0x41100, 0x24, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000000500)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0xd, 0x7, 0xb}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000680)=[r7, r8, r3], &(0x7f00000006c0)=[{0x1, 0x5, 0x4, 0xb}], 0x10, 0x1}, 0x94) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000240), &(0x7f00000002c0)=@v3={0x1000000, [{0x1, 0x9}, {0x2, 0xffffffc0}]}, 0x18, 0x0) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000000c0)={&(0x7f0000000000)=[{0x0, 0x811, 0x0, 0x0}], 0x1}) 5.637243593s ago: executing program 0 (id=3620): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4008840) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1000, 0x1, 0x400, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xe, &(0x7f0000000200)=@raw=[@generic={0x62, 0xa, 0x0, 0xfffc}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @generic={0x15, 0x0, 0x0, 0x6, 0x2000}, @generic={0x7, 0x0, 0x0, 0x0, 0xfcc}, @generic={0xbf, 0x1}, @generic={0xb7, 0x2, 0x0, 0x0, 0x4}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0xb7}, @exit], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x110, 0x4, 0x0, 0x4) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl(r2, 0x3b8e, &(0x7f0000000140)="10") r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0xc) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000040)={0xc, r5}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0xffa4, 0x0}, &(0x7f0000000140)=0x10) 5.634698434s ago: executing program 1 (id=3621): r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/191, 0xbf}], 0x1, 0x55, 0xfffffffc) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000b40)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_disconnect(r0) syz_usb_control_io(r1, 0x0, 0x0) sync() sync() sync() r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000240)=0x4038, 0x4) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b}) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r5, &(0x7f0000000bc0)=ANY=[@ANYBLOB], 0x40) unshare(0x22020600) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200048c1}, 0x2000009c) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil) getsockopt$inet_mptcp_buf(r6, 0x11c, 0x2, &(0x7f0000000040)=""/170, &(0x7f0000000140)=0xaa) ioctl$KVM_GET_NR_MMU_PAGES(r5, 0xae45, 0xe43) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) 5.540225384s ago: executing program 0 (id=3622): inotify_init1(0x80000) r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6, 0x3, "e971ec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_INPUT(r2, &(0x7f0000000c00)={0x8, {"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", 0x1000}}, 0x1006) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000280)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000140)={0x0, 0x10, 0x1, "9a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xf1f, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0xfffc, 0xa, 0x10, 0x0, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x100, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) close(0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write(r4, &(0x7f0000000380)='100000', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r5, &(0x7f0000000200)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r6, &(0x7f0000000280)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x21}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) 5.016152499s ago: executing program 4 (id=3625): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000640)=@ethtool_eeprom={0xb, 0x8000, 0xa41, 0x1, 'x'}}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b80)=ANY=[@ANYBLOB="54000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="01010200000000002400128009000100766c616e000000001400028006000100000000000600050088a8000008000500", @ANYRES32=r3], 0x54}, 0x1, 0xba01}, 0x810) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x1200}, {0xfffffffe, 0x80003}]}}) r5 = dup(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000044) connect$inet(0xffffffffffffffff, 0x0, 0x23) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r5, 0xc0207511, &(0x7f0000000080)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) r8 = getpgrp(0x0) kcmp(r7, r8, 0x3, r2, r1) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602ffa100000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0) 4.397950214s ago: executing program 4 (id=3626): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x14, 0x0, &(0x7f0000000180)=[@free_buffer={0x400c6313, r4}, @release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 4.306782914s ago: executing program 4 (id=3627): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a0001000200000000000000022000000000000000000000080001000a141e28"], 0x24}}, 0x0) (fail_nth: 1) 3.921142692s ago: executing program 4 (id=3628): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x8, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x2, 0x0, 0x8, "008c"}, @global=@item_012={0x1, 0x1, 0x0, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x2, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="200111"], 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000180), 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$kcm(0xa, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x41, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.844668888s ago: executing program 2 (id=3629): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r1, 0x0, 0x4000) socket$inet(0xa, 0x801, 0x84) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x8031, 0xffffffffffffffff, 0xb5f15000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="39000000130003470fbb65e1c3e4ffff060060001600000056000000250000001900b3c0b6d20300070a0000000084db26b9e4e20000000000", 0x39}], 0x1) (fail_nth: 1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x50, 0x2, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x80000000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 3.098493957s ago: executing program 0 (id=3632): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') unshare(0x24060400) sendmmsg$unix(r2, 0x0, 0x0, 0x10) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "e37a1d08ad1a777f", "01e6eb8e29b66e2ca1421d3facf1cf9f2b8ac7da138c80874b6e97ef2aed3f2f", "821da034", "82cbe7288bbbe32e"}, 0x38) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) r9 = syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r11 = dup(r4) syz_ublk_setup_queues(r11, r10, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r5}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r5}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UBLK_U_CMD_START_DEV(r11, 0xc0207506, &(0x7f0000000400)={r9, 0xffff, 0x0, 0x0, 0x0}) ioctl$UBLK_U_CMD_START_DEV(r11, 0xc0207506, &(0x7f00000005c0)={r9, 0xffff, 0x0, 0x0, r13}) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, r14, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008805}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 2.195506605s ago: executing program 3 (id=3633): unshare(0x22020600) r0 = fsopen(&(0x7f0000000640)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) getsockname$packet(r1, 0x0, 0x0) 2.103905599s ago: executing program 3 (id=3634): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0xe, @local, 0xe42}, @in={0x2, 0x4e21, @remote}], 0x2c) sendmsg$inet(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r0, &(0x7f0000000280)=']', 0x1, 0x4000000, 0x0, 0x0) 1.949883912s ago: executing program 3 (id=3635): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x3c, r2, 0x1, 0xffffffff, 0x0, {0x2f}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071109f000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xba, &(0x7f0000000080)=""/186, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x24, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 1.88716936s ago: executing program 1 (id=3636): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f00000002c0)={0x1, 0x0, [{0xb, 0x8, 0x5, 0xe03, 0x5, 0x81, 0xc}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@arm64={0x6, 0xd8, 0x1, '\x00', 0xcc95}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000840)={0x2, 0x0, @ioapic={0x8000000, 0x11, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x85, '\x00', 0x8}, {0x8, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x60, 0xd, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xff}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x1, 0x54, '\x00', 0xff}, {0x9, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0x5}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26, '\x00', 0x1}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x7, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x9}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x6, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 1.883917515s ago: executing program 4 (id=3637): r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x5726, 0xc000, 0x3, 0xce}) io_uring_enter(r0, 0x2219, 0xcf74, 0x52, 0x0, 0x0) 1.699847804s ago: executing program 3 (id=3638): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f00000002c0)={0x1, 0x0, [{0xb, 0x8, 0x5, 0xe03, 0x5, 0x81, 0xc}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@arm64={0x6, 0xd8, 0x1, '\x00', 0xcc95}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000840)={0x2, 0x0, @ioapic={0x8000000, 0x11, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x85, '\x00', 0x8}, {0x8, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x60, 0xd, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xff}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x1, 0x54, '\x00', 0xff}, {0x9, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0x5}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26, '\x00', 0x1}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x7, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x9}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x6, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 1.663922229s ago: executing program 4 (id=3639): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000000), 0x301) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x60242, 0x0) write$vga_arbiter(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="013ced820ab78ed6d8b01400000020"], 0x8) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000500)=ANY=[]) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) 1.22119944s ago: executing program 2 (id=3640): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x9d, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000008877fbac141516e0000001440404feb180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0103461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006a00831300000000000000ffa60000000000000008000e00"], 0x28}, 0x1, 0x0, 0x0, 0x4009050}, 0x2400800c) (fail_nth: 1) 1.134245593s ago: executing program 3 (id=3641): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) write(r0, &(0x7f0000000640)="074e999a808280c9258607c474973e7c060008f30700eb22cddc7984e8c28d37622242e8a6e7f815d5c3e2ceb85a4ec98b914f553f688628c0ede39f1cc2a00f6dcab8a5e0eed342027ac1aa7cc7155347fe", 0x52) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x160, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x12}}}}, [@NL80211_ATTR_TX_RATES={0x138, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x100, 0x1, 0x1, 0x5, 0x0, 0x6, 0x200]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0xd8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0xd20, 0x5, 0x4, 0x7fff, 0x3, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x4, 0x3, 0x1, 0xffff, 0x7, 0x5a26]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x16, 0x30, 0x24, 0xc, 0x48, 0xc, 0x30, 0x48, 0x18, 0x48, 0x6c, 0x30, 0x3, 0x2, 0xb, 0x2, 0x1, 0x24, 0x5, 0x9, 0x6, 0x4, 0x3, 0x60, 0xb, 0x3, 0x36, 0x18, 0x12, 0x36, 0x26]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x16, 0x2e, 0x9, 0x1, 0xb, 0x42, 0xb, 0x4, 0x5, 0x1a, 0x16, 0xb, 0x3, 0x60, 0x36, 0xc, 0x6, 0x3, 0x2, 0x9, 0x2, 0x36, 0x12, 0x9, 0x51, 0x16, 0x9, 0x16, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x4, 0x4, 0xec, 0x9, 0x4b79, 0x6, 0x800]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x4, 0x6c, 0xf49241bd405e1e19, 0x2, 0x9, 0x6, 0x30, 0x4, 0x3, 0x60, 0x3, 0x60, 0x30, 0xc, 0x6c, 0xb, 0x30, 0x6, 0x5, 0x6c, 0x48, 0x60, 0x1, 0x3, 0x4, 0x1, 0x9, 0x6c, 0x36, 0x12, 0x36]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x36, 0x24, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x5f, 0x8, 0x4, 0xb7ac, 0x4, 0x7c, 0x9]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0xb, 0x60, 0x2, 0xc, 0x12, 0x60, 0x6, 0x9, 0x18, 0x5, 0x48]}]}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 858.551156ms ago: executing program 2 (id=3642): inotify_init1(0x80000) r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6, 0x3, "e971ec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_INPUT(r2, &(0x7f0000000c00)={0x8, {"dfd3d96e60efac2a394daff07216e54179f103ab71d6e6610dd68634b6b9c2b8695ab107de8c66cc2dfcd0913540acf01009b8e0221165fcbeebcad26e5690c8af073a78c416bdd7bba027f6635c2879e72640a63c3b2cd761b68db69598e4cbfcfd8abd1eae1d408a62b4f025661bd0544952474bb2aeea430d4fbdab0eb7cd34c3e0b6bdc8c1676c76dea469140629cbad0c773927af126ecdc6e7596c3d7d786ebfaf9efd855d0ea569a2af2554001c358a3934e13b7934c150edabf53bfdaee077943b0e36cd32d6afa11bf7d1ae5c6c0a9dae9c722045cb0bdcd34962987c0874c9e4d6948c8f2e3751f60cc6e89aa13ce8ef7a7936d9db9cbf3c1d9d8e4478d232451da5dbf84f06e672e305786f327a1a44546534ab58506997ec5ea29efe0d42bfd46a1448ab74265c328c5c4913c6ef4cfd3ad5f1ac52c23f561440c5420b76f3a7fe0ba5a984c1dab8ad7436a7b3edbe261bb412e1aff63460a38b1b6495e6b56e10b7dbbb046ed733670dfe8b5aa48883786bcf7fb38466ec5f94665af9ba93b8b43ff066841799f72e6c62070fdc0cd24d8ed3b3555344bb3fe24c558cbe7222cfd756c105f1ba7e1fbbd2334ad5dcc9f4ff1f0d9fc499927a5e97b4c5fddb54485371bc4c74f0742fcf6fe30713b6ee1317a881c226c052e8524998bc6190527643b2a34ecef08669124105c649386086b232b9e42c9d5772707f6deb3936d0b3b2a37a3438bad908767627bb9b48ea02b0cc720a1be9b973a2a331641e90f8a583300712007675bbe19e3172f50f1966d75d14419a847c41c88189fc32c47ed55cca009ed03b52dbb56fe814cad6924e3dd4b471ea1519ac8c47101513dc6b505502c2d2210c1aa21c7d1e0f07bc9bd01e8d62efbb279aebd068af923831ee4fa5679f11e9c413dc709d1e3b1ccbf8b4732abb38f36e29bfdd739c80d3f3c9aa092efaa9b9b06c3527098dfbc9fa9efa308ee4779b899e4a1bb85df16983f9097f62d3fdc52ab562cfa8eafb11b0893f8b60c07af883a84264934f99c5db7856808d87252c3ac67bb300550ff6883f65e510788ba83b2e04e18100b56547bdbe95579b5b9451f2578ea50aa61f1a714ae774f467df2ef5d7b756eebbf6aa7fb735877b132612ba68cf0eaece13ba0318eb4f3ce4e649d90e38ea12fb57cca4a6f505956638a74a64dc6abe72ebac3eb5af3867c0dbedd9e1202d421b5ae77c6e478cdb9be3ce1a921bbfc12a5a67429ffcad532b6a0e6bbc401b8a61cfdb27af18c902884cedb4f635e42e9fdf366cc44151b961503fd953a1b2a9952fc4ca03591cae7d12ab1b9ef684278a3efa0e7ebcebdef1de1953f7508b9e73b1370a56d6ec92534fcff0ac48a6130279ecfc64d9fe165864b18a4ac82aa1a48ec965c830f2e5d713f0b114a56ca22ca59829062933e3da69e87aa9c8098d1482195716bca7166a45275ae9d715cbd6912e3cbddda2f760f526cc51ee426a08817463c5bba4c06958545ec4469a5e0172e5bd9660b649a2d478fa0db267cb0f5e653046ca8f9e0ad56db2ec4f3db15c33b75356d8afe9c1048f19bae34a55f8a8bc60f1582a6c9f7bb4f64f5848e9de6345ea2c3ab997f6849c41bc354c24dfba520dc6d004c053a2e0c94c5a728d8070e941fe0d2d0a9d0dc82f7c78bee061645e0cc88e42f0899da31b8ec389c7736bc11307d80e8e99922b57a8e6069a3a67a94b63807ebdfffdf8bb70746f9ba6304c0729e338dc4e7be9bbc114f8394b34683ca1cb780fff1c788efae7e765bd70877dd8f2eb2ad8463db08e8842ec76206f42323424dd9c8ad61da1b25605560e201388a5a01eb1f3e47175a23506355a8b38bb20b0a0bd8aab889bf9d83e7cb80bb3ef267c1eb9ec0097c258963423dcea3b3e23e7dc76dc9bf4ae0d0876c1979eca1657431a46460372946d50f316a3f175e8ae740b7d13f6e6a860eef075131a0747654d924ccd708bada54604df88e2fc20b3b6cdbd083f0511cbe31b379abe6bf9150ce8a69d7bee01366d6de44c148f3703a3934344572d0be73631cc0da213bb01f603cb7776853cbc05a4225be8305a94b3aa7168adbe7367a830f4a2a9494711d3aa270d69b5fb8bffd06a8157fc20f2e6c1293b2fe0f0a643981982a02c7df385da603ff6cb2fad917c94813a8ad7f5a1693c8461dca613afcc2b702eedff1e1215bbb5decd6e2d51c9b78e1976e97438f36e81e490b91cb5387f2156ef11ba3709046e15f551c59a7dcc451dd4e3e10b5432a99e143c2efac3dabc05f0657107c1465f5744bcb89b1df9daefb586bd6dad606da0ec4aa939268445dfaf528aa5d401a3df47d5eacaf672e977e0c2ec26b6eaa12b35d248034776c546785cd7fd58a236034cb77996f37a9ccb053588b417bd1450673d3fe7c9a19ca06b68e6ed6597d25e1210553d2fda886e946ce56e957e806dc5dd84a5e3086745156b142caa2f0ea969f3c08b88eb47b06f1a4bd1274d07d7b50f6e197f4053c3560a4dfd84cef16bac58af87a4fc778e69bbc0e40f77035a848eb97505e856944263e5833afb68db0ac2acadea33d5bb926e7ddb1212b4714e42ddc9f7fa0495425a2251866e573ca5a5b256016ce75ef8bb8aca36257dfc10dd392b58ed53c3f6c7cf0ce49a6f592d9d7f1a70e349fe3825894ea34c1c7cf9f712bef12b19ee775a27dc1fa044de168e7faf6e800f7d9bcf032a625fac2c7a40ad2847af7e9d66063f0be0a3ea39ee8e687d27246101849c44b374353d2ab15abff0578b1867e15c79a3fa5dc186e5d58e33fe6c93118819dcf26a788eb90672ff46b242f58fb5f9ba77bb63ef0c1b6a2489856ceb6366c821e2e9b26e13bb34d7dbc222aab2a985263478c4c8f5d9ec7ddbfecc55e3fa59aee140c9261e77938fe053b29f8b4a6ab1c3b087ed889641945d9760d087efd6168ff4a2a8274f726bdda28cdc1f03a4422802207c696dda42ad34795200b53541e37ac29e382c4be84a6f830c14dbeb41642a761c482cbd6eb5c0da28de9beb68384968fc4b00404c4b46e11237fe56389e0a592aeaeb2749dc757f4590d8eb921b4aa085d5983344b82f90d7ff8f55060c2fd174a17e40db2bf58dcc52814812933d8a42ff751c882b57e3295166f6a305fad38d82e669f5dce9327acdee9ec9260368fdadd08e0eb4b7444c426413beb1f30e58d58ef13df5b99cb9d552a22070615d8f25de646e6bff4ab264c03dc67a851fb6bbcb35cacb555fedafe832393df28c15303318d4467d9a6dc04be14713791327382fcdd0bebadc2033f82fd9474230f5b2661be77866fea6e5f20402c0be034c121a0ffdf3c9e93c4b394f7569750af73179dbf3c2ee873ca80b0332c5b16b2d4a90dbd38d47e71275cf9bd051dc2dd0a1d7e533739e166f6a41806fa334b144060eacee377e1b9da5a57b314ab1bfca782dc8f041d6791588ebfa3c188aa2dc2a7b4b89452417eecfbb191f3d32acce847fb76b34194951c2195054f62eade36f9cf437f90fa1e26277f04547511750867af928e6080320f128157be9c74847143c503e7d35c7c1e712683e21109f3bd2163c1a85a4373920dc92ad00144c967db347e19690604c370104f13bb0c24967158a2522566ec6ce0b61d5339ab312fa06c14bd3b310acf5d928d3b28c07cc2eab2e138301af6cd62db2a794aa313c101d8aa46de451620cae14e7ec732d170847f2ebc016739ce6d16083ee2e3e00d01ef6b7f18e436b3602b9e4738fd78aa4dd20bc263fe6725de0805f80d8c9b666e26b43cad46e9e5e4158106446ddd89378798a90c35b3ba049e8a3346b2d2838526f7624ba297acabe2ddeb7da28da09766396f8c9312bcabafc7d49b34ff5fa42ed6c2b0e4127ecae82889d5f2af9e3afe9407ddb21d8e0b8af8f50a07c013badc3d59d664e94f9ddbb31c5894c1edf4780096e0e0cc7503c19756df28541b913f2670f127189bb68ee26eb8a564b0c9a3c73397ab9b2b22da40aeb0e3d4530d10a670e54d03bb46dd587d99b9861e389147603170052110998dac6c0e4dd5a20e924cc1fbb85bf784d2309f13a571b758cf6a3b897b62249758f6c0c2ae8e23d12bd4020032384180a9d767a446e33e9f33d348cfb03b71749cd5d86b610ba71aede76035f1a6a8db9c7a1b1cd7c1c81cae3aac87a5490634419cf6793eff3a3766d537a00a674efbf51193f635fa213463164acf6d185cef1f3902208736be549f0dddfdba6fb668b4d5a7784f0cce075610b427dac696d1d26bd4fa33007909e21be9978c67e5ceafa400f6af42f049d04ac167bd780f41ad3bb686677992bd0c62d85fddb826a5c56a81ac10ac1707f2680596334a30bbde554996ec5e800d13682da5c1c2aa273ec5c035fc3bf29f9f1701275c264cae9be4f21e2ac9e34c792abcbd9e7647947b9eb66fcb7f3963a6ec90459db6151264e375588b70b625722860404cfb7273bb03f2f5691fd6c623414aee6d22ee5ee3d382a8d3e74f535c6f14538f1dddfebfb596452e5bce88531e0266f35471c344e72d2edde9aa62537c8fb2a8703a44a308dfd7e9b37e68e3783c716e677d473ad80573f337e99ca38c0a7172dd43fb2648268adac518ba17030c35239877bc50b25232eebd338243f3579e0dcedc17d816c9a2837a9811a2ee519d4181066001f666e38a2479e7ac2bfd5914695add2d1aee44270eefdc1c88f5eb1c8967fe8a60af70fbb4cafddaa34c2804fe225945b457e925275d2414f11a3b33dd4da31c38cd8059a7183ff9758bea66e9f1ffcae489c40c2f31f3d35a0b8922a247defb4ac70a8b5cae6fd4a803a8e1444507712d98ea0945147d5909c40b7b6fc5c3126bf7c74866308d47189e4ea9b40046dc7d9d08b71c8896b39def1974afa75bab2bc3d41ac05a50d52509bab2eae953f3d40ac2a0953279dc9ef5fb14dd17833b63db7e560d949a4cf5787ea9bff8272ea27c4c5731d71d6ffc5bcabcf451d0c10ea3979671eff6a18738fdebdc6404366bcf3a04a6c9d1bce08b0ce713f31da4de8ff891cda20ef6ea9e5c04908cfb8195fc9cedab68dd0de6eb6a7171486a163f4b757ae5538ed9ea86b05ac2e21cc421d8fe8db9cc210e8edb26eeabc004b51abe8af9ae313f3ffe9896a3299bfd472d2f7cc349e0f88acaed3952662b9f3b716af13d9eec3e56bbb9e93159480d497cf6d7b6926490c7ea3e46f31200236cbab47548895237d586bf95ce15970488e291e4034b05df94484fea64f6629c3bde9bc7d2aa58f1c1704b7d8fcc3422ea519b8f435423f14d656aa770d7fd5e47792c864356baa4923cef32e69740c2873e59349e2cd3c7eb87e3e591980edc0aa14b5033a695338c844fdae88ae301966743c1e3550a3314b3ee3c525d9fa8eb639aad13bf192d5e3ca3338d1158962674a679bc10368577236c0cc381d7b7c39709efd4c7381c6908586e37b56c7ea23cba163a83af7a81e62fba48c28f32cf2664c7abb14c0014662ce8e5cab3a81b8ebd41f591cfe42d819bda17a989adf3ae10a9a14d318d147813f1a2bd4358ba29c591f01d6af8c74ca6c662a947c26df8fde29c71903f4414024335157b45e7b4a3d9ac95ad6728ffc1f3631bb8b33d4662eb8b2b8b0f551032a6c466e62d80b59297f7049e3c5bccf97e1fd7ab3f6da16c16ebf1b40899511e4bfbb5ef7e7bd05335cb67d413be66385aa2bc5a633e8f05a1aaceba2ae079c69da9a1deeb5997ba026cbc4d48c16b9dc48a8fd69e2d6a3b6e924db5df581", 0x1000}}, 0x1006) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000280)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000140)={0x0, 0x10, 0x1, "9a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xf1f, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0xfffc, 0xa, 0x10, 0x0, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x100, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) close(0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write(r4, &(0x7f0000000380)='100000', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r5, &(0x7f0000000200)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r6, &(0x7f0000000280)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x21}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) 755.302435ms ago: executing program 3 (id=3643): r0 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fsmount(0xffffffffffffffff, 0x1, 0x14) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000780)={0x0, {{0xa, 0x4e24, 0x6589e3, @mcast1, 0x8}}, {{0xa, 0x4e21, 0x4, @private1, 0xfffffff8}}}, 0x108) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x3, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) unshare(0x100000) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents64(r3, &(0x7f00000001c0)=""/58, 0x3a) getdents64(r3, 0xfffffffffffffffe, 0x29) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x30, r5, 0x7, 0x0, 0xfffffffe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x30}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 721.663556ms ago: executing program 1 (id=3644): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f00000000c0)={0xc0000006}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r4 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402f0700220001000000010902200001010080320904000002ffffff0007058102000200070502020002"], 0x0) syz_usb_ep_read(r4, 0x2, 0x0, 0x0) close(0x3) r5 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) unshare(0x22020600) syz_open_dev$ndb(&(0x7f0000000440), 0x0, 0x2201) open(0x0, 0x108943, 0x148) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r6 = fsopen(&(0x7f0000000580)='debugfs\x00', 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) vmsplice(0xffffffffffffffff, &(0x7f0000e79000), 0x0, 0x8) mremap(&(0x7f0000dfd000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req={0x2, 0x4, 0x1, 0xfffffffb}, 0x10) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) 0s ago: executing program 0 (id=3645): r0 = socket$igmp6(0xa, 0x3, 0x2) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000100000000000078cdc8179a6200000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20802, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x286}]}) r4 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='root/proc/sys\x00', 0x8, &(0x7f0000000740)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x200}}, {@blksize={'blksize', 0x3d, 0x1a00}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x9}}, {@max_read={'max_read', 0x3d, 0x3}}, {@allow_other}, {@default_permissions}, {@allow_other}], [{@dont_hash}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'hashlimit\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@fowner_gt={'fowner>', 0xee01}}, {@obj_role={'obj_role', 0x3d, '#$,'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '(-\x94%'}}, {@pcr={'pcr', 0x3d, 0x1f}}]}}, 0x6, 0x0, &(0x7f0000000640)="3a0e5748e83b67d70655dac8b2799178d5f3b4f99c99cbc356d78fe5f2f1297e7d44882b36b60bfddb0b7d0f52bae7d5bd075092ad522d8744f999c4bee4e5a775f3bd309d1dda840a9a9f1757300bfa9500357986") ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f00000001c0)) r5 = openat(r4, &(0x7f0000000140)='root/proc/sys\x00', 0x10040, 0x82) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1d8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0xffffff00], [], 'veth0_macvtap\x00', 'veth0_to_team\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@loopback, [0xff, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xff000000, 0xff, 0xffffff00], 0x80, 0x7, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x7}}}, {{@ipv6={@remote, @empty, [0x0, 0x0, 0xff], [0x0, 0xff, 0x0, 0xff], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x9, 'system_u:object_r:lirc_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d8) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000600)={0x2, @pix={0x80000000, 0xa709, 0x3432564e, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}) syz_usb_control_io$hid(r7, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222300000096231b26e53f07010000002a900683"], 0x0}, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r9, 0x4b4c, &(0x7f00000000c0)={0x400, 0x5}) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)=',', 0x1}, {&(0x7f00000002c0)='jOA', 0x3}], 0x2, 0x0, 0x0, 0x2c}, 0x20044050) kernel console output (not intermixed with test programs): .900361][ T833] input: syz Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.005A/input/input110 [ 638.942094][ T6374] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 638.944059][ T6374] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.998205][T15883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.999025][ T6374] usb 4-1: config 0 descriptor?? [ 639.048405][ T833] input: syz Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.005A/input/input111 [ 639.113861][T15883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.172422][ T833] input: syz Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.005A/input/input112 [ 639.203883][T15883] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3450'. [ 639.203943][T15883] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3450'. [ 639.231945][ T6374] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 639.297648][ T833] uclogic 0003:256C:006D.005A: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.0-1/input0 [ 639.334618][ T833] usb 1-1: USB disconnect, device number 39 [ 639.524970][ T6374] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 639.524987][ T6374] [drm] Initialized udl on minor 1 [ 639.578982][T15890] fido_id[15890]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 639.637331][ T6374] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 639.637745][ T6374] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 640.036885][ T10] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 640.037824][ T10] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 640.037937][ T10] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 640.038105][ T6374] usb 4-1: USB disconnect, device number 55 [ 640.051762][ T5610] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 640.203354][ T5610] usb 3-1: Using ep0 maxpacket: 16 [ 640.204304][ T5610] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 640.204452][T15908] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3462'. [ 640.208425][ T5610] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 640.208443][ T5610] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 640.209873][T15908] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3462'. [ 640.213913][ T5610] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.213936][ T5610] usb 3-1: Product: syz [ 640.213950][ T5610] usb 3-1: Manufacturer: syz [ 640.213964][ T5610] usb 3-1: SerialNumber: syz [ 640.238089][ T5610] usb 3-1: config 0 descriptor?? [ 640.254110][ T5610] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 640.254140][ T5610] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 640.750752][T13959] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 640.912938][T13959] usb 2-1: Using ep0 maxpacket: 16 [ 640.916795][T13959] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 640.944886][T13959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.944915][T13959] usb 2-1: Product: syz [ 640.944961][T13959] usb 2-1: Manufacturer: syz [ 640.944977][T13959] usb 2-1: SerialNumber: syz [ 641.152508][ T5610] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 641.152895][ T5610] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 641.160808][ T5610] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 641.160826][ T5610] em28xx 3-1:0.0: No AC97 audio processor [ 641.209423][ T5610] usb 3-1: USB disconnect, device number 61 [ 641.210451][ T5610] em28xx 3-1:0.0: Disconnecting em28xx [ 641.249264][ T5610] em28xx: Freeing device [ 641.251691][ T25] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 641.308676][T13959] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 641.308695][T13959] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 641.309299][T13959] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 641.401243][ T25] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 641.402064][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 641.402081][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.402101][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.405540][ T25] usb 5-1: config 0 descriptor?? [ 641.481873][T13959] usb 2-1: USB disconnect, device number 56 [ 641.560840][ T6151] udevd[6151]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 641.671149][ T5702] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 641.789720][T15923] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3467'. [ 641.821637][ T5702] usb 4-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 641.822727][ T5702] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 641.822745][ T5702] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 641.822756][ T5702] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 641.822793][ T5702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.834537][T15920] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 642.112631][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 642.112728][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 642.150135][ T25] usb 5-1: USB disconnect, device number 43 [ 642.172055][T15920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3466'. [ 642.440536][ T5611] Bluetooth: hci0: Reading Intel version command failed (-71) [ 642.441611][ T25] usb 4-1: USB disconnect, device number 56 [ 642.724534][T15928] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3469'. [ 642.763662][T15928] binder: 15927:15928 ioctl d000941e 200000000b00 returned -22 [ 642.764082][T15928] binder: 15927:15928 ioctl c0306201 200000000240 returned -14 [ 642.764190][T15928] binder: 15927:15928 ioctl 4b46 200000000000 returned -22 [ 642.830081][T15928] ip6tnl1: entered promiscuous mode [ 643.050912][ T25] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 643.161028][ T5702] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 643.186514][ T25] usb 5-1: device descriptor read/64, error -71 [ 643.321222][ T5702] usb 1-1: Using ep0 maxpacket: 32 [ 643.338120][ T5702] usb 1-1: unable to get BOS descriptor or descriptor too short [ 643.338172][ T5702] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 643.359921][ T5702] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 643.359949][ T5702] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 643.359970][ T5702] usb 1-1: config 14 has no interface number 0 [ 643.359986][ T5702] usb 1-1: config 14 has no interface number 1 [ 643.360047][ T5702] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 643.360072][ T5702] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 643.360098][ T5702] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 643.360125][ T5702] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 643.360151][ T5702] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 643.360177][ T5702] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 643.360202][ T5702] usb 1-1: config 14 interface 57 has no altsetting 0 [ 643.360219][ T5702] usb 1-1: config 14 interface 228 has no altsetting 0 [ 643.406372][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.406400][ T5702] usb 1-1: Product: syz [ 643.406415][ T5702] usb 1-1: Manufacturer: syz [ 643.406430][ T5702] usb 1-1: SerialNumber: syz [ 643.430788][ T25] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 643.536878][T15940] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3473'. [ 643.537376][ T30] audit: type=1326 audit(1791024888.640:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15938 comm="syz.2.3474" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88ad9e159 code=0x7ffc0000 [ 643.537666][ T30] audit: type=1326 audit(1791024888.640:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15938 comm="syz.2.3474" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88ad9e159 code=0x7ffc0000 [ 643.537799][ T30] audit: type=1326 audit(1791024888.640:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15938 comm="syz.2.3474" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88ad9e159 code=0x7ffc0000 [ 643.538231][ T30] audit: type=1326 audit(1791024888.640:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15938 comm="syz.2.3474" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7ff88ad9e159 code=0x7ffc0000 [ 643.538605][ T30] audit: type=1326 audit(1791024888.640:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15938 comm="syz.2.3474" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88ad9e159 code=0x7ffc0000 [ 643.560794][ T25] usb 5-1: device descriptor read/64, error -71 [ 643.574714][ T30] audit: type=1326 audit(1791024888.680:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15938 comm="syz.2.3474" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88ad9e159 code=0x7ffc0000 [ 643.599386][ T30] audit: type=1326 audit(1791024888.680:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15938 comm="syz.2.3474" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88ad9e159 code=0x7ffc0000 [ 643.624812][ T30] audit: type=1326 audit(1791024888.730:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15938 comm="syz.2.3474" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7ff88ad9e159 code=0x7ffc0000 [ 643.634283][ T30] audit: type=1326 audit(1791024888.740:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15938 comm="syz.2.3474" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88ad9e159 code=0x7ffc0000 [ 643.652711][ T30] audit: type=1326 audit(1791024888.760:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15938 comm="syz.2.3474" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88ad9e159 code=0x7ffc0000 [ 643.681574][ T25] usb usb5-port1: attempt power cycle [ 643.814692][T15940] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3473'. [ 644.094310][ T25] usb 5-1: new low-speed USB device number 46 using dummy_hcd [ 644.120478][ T25] usb 5-1: device descriptor read/8, error -71 [ 644.150771][ T6374] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 644.300757][ T6374] usb 4-1: Using ep0 maxpacket: 8 [ 644.301544][ T6374] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 644.303259][ T6374] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 644.303284][ T6374] usb 4-1: config 0 has no interface number 0 [ 644.303323][ T6374] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 644.303366][ T6374] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.367120][ T6374] usb 4-1: config 0 descriptor?? [ 644.376417][ T25] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 644.393051][ T25] usb 5-1: device descriptor read/8, error -71 [ 644.436482][ T6374] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 644.502769][ T25] usb usb5-port1: unable to enumerate USB device [ 644.714424][ T5702] legousbtower 1-1:14.57: interrupt endpoints not found [ 644.866480][T15960] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3477'. [ 644.868201][T15960] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3477'. [ 644.922451][T15960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3477'. [ 645.122772][ T5702] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 645.127245][ T5702] legousbtower 1-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 645.639754][ T6374] usb 4-1: USB disconnect, device number 57 [ 646.223307][ T5702] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 646.372150][ T5702] usb 4-1: Using ep0 maxpacket: 16 [ 646.374282][ T5702] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 646.400915][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.400942][ T5702] usb 4-1: Product: syz [ 646.400956][ T5702] usb 4-1: Manufacturer: syz [ 646.400972][ T5702] usb 4-1: SerialNumber: syz [ 646.490972][ T6374] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 646.601549][ T10] usb 3-1: new low-speed USB device number 62 using dummy_hcd [ 646.653894][ T6374] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 646.675692][ T6374] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.675713][ T6374] usb 5-1: Product: syz [ 646.675728][ T6374] usb 5-1: Manufacturer: syz [ 646.675743][ T6374] usb 5-1: SerialNumber: syz [ 646.731109][ T833] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 646.751136][ T5702] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 646.751166][ T5702] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 646.757339][ T5702] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 646.802029][ T10] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 646.803263][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 646.803282][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.803302][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.806632][ T10] usb 3-1: config 0 descriptor?? [ 647.077211][ T5610] usb 1-1: USB disconnect, device number 40 [ 647.144502][ T5610] legousbtower 1-1:14.228: LEGO USB Tower #-159 now disconnected [ 647.144845][ T5702] usb 4-1: USB disconnect, device number 58 [ 647.267713][ T6151] udevd[6151]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 647.661335][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 647.661471][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 647.707393][ T10] usb 3-1: USB disconnect, device number 62 [ 647.894504][ T6374] rtl8150 5-1:1.0: couldn't reset the device [ 647.895026][ T6374] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 648.008362][ T833] usb 2-1: unable to get BOS descriptor or descriptor too short [ 648.008397][ T833] usb 2-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 648.008420][ T833] usb 2-1: no configurations [ 648.008427][ T833] usb 2-1: can't read configurations, error -22 [ 648.332939][ T5702] usb 5-1: USB disconnect, device number 48 [ 648.460846][ T10] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 648.663787][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 648.667374][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 648.686018][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 648.686037][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 648.687794][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.687819][ T10] usb 4-1: Product: syz [ 648.687827][ T10] usb 4-1: Manufacturer: syz [ 648.687835][ T10] usb 4-1: SerialNumber: syz [ 648.737061][ T10] usb 4-1: config 0 descriptor?? [ 648.746427][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 648.748789][ T10] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 648.923188][T16003] FAULT_INJECTION: forcing a failure. [ 648.923188][T16003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.923224][T16003] CPU: 0 UID: 0 PID: 16003 Comm: syz.1.3489 Tainted: G L syzkaller #0 PREEMPT(full) [ 648.923254][T16003] Tainted: [L]=SOFTLOCKUP [ 648.923262][T16003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 648.923274][T16003] Call Trace: [ 648.923289][T16003] [ 648.923298][T16003] dump_stack_lvl+0xe8/0x150 [ 648.923332][T16003] should_fail_ex+0x410/0x560 [ 648.923362][T16003] strncpy_from_user+0x36/0x2c0 [ 648.923389][T16003] do_tcp_setsockopt+0x2eb/0x1f80 [ 648.923523][T16003] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 648.923549][T16003] ? kmem_cache_free+0x182/0x650 [ 648.923580][T16003] ? aa_sock_opt_perm+0xe8/0x1e0 [ 648.923610][T16003] ? sock_common_setsockopt+0x36/0xc0 [ 648.923633][T16003] ? tcp_setsockopt+0x3d/0xe0 [ 648.923660][T16003] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 648.923686][T16003] do_sock_setsockopt+0x17c/0x1b0 [ 648.923719][T16003] __x64_sys_setsockopt+0x13d/0x1b0 [ 648.923752][T16003] do_syscall_64+0x166/0x520 [ 648.923778][T16003] ? trace_irq_disable+0x3b/0x140 [ 648.923799][T16003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.923818][T16003] ? clear_bhb_loop+0x70/0xc0 [ 648.923841][T16003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.923860][T16003] RIP: 0033:0x7fd8db19e159 [ 648.923877][T16003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.923895][T16003] RSP: 002b:00007fd8dc008028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 648.923916][T16003] RAX: ffffffffffffffda RBX: 00007fd8db425fa0 RCX: 00007fd8db19e159 [ 648.923932][T16003] RDX: 000000000000001f RSI: 0000000000000006 RDI: 0000000000000004 [ 648.923943][T16003] RBP: 00007fd8dc008090 R08: 0000000000000002 R09: 0000000000000000 [ 648.923956][T16003] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 648.923968][T16003] R13: 00007fd8db426038 R14: 00007fd8db425fa0 R15: 00007fd8db54fa48 [ 648.923999][T16003] [ 648.966500][T15999] FAULT_INJECTION: forcing a failure. [ 648.966500][T15999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.966547][T15999] CPU: 1 UID: 0 PID: 15999 Comm: syz.0.3487 Tainted: G L syzkaller #0 PREEMPT(full) [ 648.966573][T15999] Tainted: [L]=SOFTLOCKUP [ 648.966580][T15999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 648.966592][T15999] Call Trace: [ 648.966600][T15999] [ 648.966608][T15999] dump_stack_lvl+0xe8/0x150 [ 648.966641][T15999] should_fail_ex+0x410/0x560 [ 648.966671][T15999] _copy_to_user+0x31/0xb0 [ 648.966701][T15999] simple_read_from_buffer+0xe1/0x170 [ 648.966735][T15999] proc_fail_nth_read+0x1bb/0x230 [ 648.966755][T15999] ? common_file_perm+0x20e/0x2b0 [ 648.966791][T15999] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 648.966815][T15999] ? rw_verify_area+0x24a/0x4c0 [ 648.966846][T15999] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 648.966867][T15999] vfs_read+0x213/0xa80 [ 648.966891][T15999] ? __pfx___mutex_lock+0x10/0x10 [ 648.966919][T15999] ? __pfx_vfs_read+0x10/0x10 [ 648.966940][T15999] ? __fget_files+0x2a/0x420 [ 648.966972][T15999] ? __fget_files+0x3a2/0x420 [ 648.966999][T15999] ? __fget_files+0x2a/0x420 [ 648.967034][T15999] ksys_read+0x150/0x270 [ 648.967055][T15999] ? __pfx_ksys_read+0x10/0x10 [ 648.967085][T15999] do_syscall_64+0x166/0x520 [ 648.967112][T15999] ? trace_irq_disable+0x3b/0x140 [ 648.967132][T15999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.967153][T15999] ? clear_bhb_loop+0x70/0xc0 [ 648.967176][T15999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.967196][T15999] RIP: 0033:0x7f440eb5e98e [ 648.967214][T15999] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 648.967230][T15999] RSP: 002b:00007f440f9d1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 648.967250][T15999] RAX: ffffffffffffffda RBX: 00007f440f9d26c0 RCX: 00007f440eb5e98e [ 648.967265][T15999] RDX: 000000000000000f RSI: 00007f440f9d20a0 RDI: 0000000000000005 [ 648.967277][T15999] RBP: 00007f440f9d2090 R08: 0000000000000000 R09: 0000000000000000 [ 648.967290][T15999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.967302][T15999] R13: 00007f440ee26038 R14: 00007f440ee25fa0 R15: 00007f440ef4fa48 [ 648.967331][T15999] [ 649.063361][ T6374] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 649.761694][T16012] FAULT_INJECTION: forcing a failure. [ 649.761694][T16012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 649.761730][T16012] CPU: 0 UID: 0 PID: 16012 Comm: syz.4.3490 Tainted: G L syzkaller #0 PREEMPT(full) [ 649.761757][T16012] Tainted: [L]=SOFTLOCKUP [ 649.761765][T16012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 649.761779][T16012] Call Trace: [ 649.761787][T16012] [ 649.761796][T16012] dump_stack_lvl+0xe8/0x150 [ 649.761829][T16012] should_fail_ex+0x410/0x560 [ 649.761860][T16012] _copy_from_user+0x2d/0xb0 [ 649.761889][T16012] ___sys_sendmsg+0x1c6/0x360 [ 649.761919][T16012] ? __lock_acquire+0x747/0x2de0 [ 649.761945][T16012] ? __pfx____sys_sendmsg+0x10/0x10 [ 649.762005][T16012] ? __fget_files+0x2a/0x420 [ 649.762032][T16012] ? __fget_files+0x3a2/0x420 [ 649.762067][T16012] __x64_sys_sendmsg+0x1b1/0x290 [ 649.762097][T16012] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 649.762145][T16012] do_syscall_64+0x166/0x520 [ 649.762171][T16012] ? trace_irq_disable+0x3b/0x140 [ 649.762192][T16012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.762211][T16012] ? clear_bhb_loop+0x70/0xc0 [ 649.762235][T16012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.762255][T16012] RIP: 0033:0x7f5d8cb9e159 [ 649.762281][T16012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.762299][T16012] RSP: 002b:00007f5d8da65028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 649.762321][T16012] RAX: ffffffffffffffda RBX: 00007f5d8ce25fa0 RCX: 00007f5d8cb9e159 [ 649.762336][T16012] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 649.762350][T16012] RBP: 00007f5d8da65090 R08: 0000000000000000 R09: 0000000000000000 [ 649.762363][T16012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.762376][T16012] R13: 00007f5d8ce26038 R14: 00007f5d8ce25fa0 R15: 00007f5d8cf4fa48 [ 649.762407][T16012] [ 649.799936][ T10] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 649.814822][ T10] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 649.840859][ T10] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 649.840872][ T10] em28xx 4-1:0.0: No AC97 audio processor [ 650.014303][ T10] usb 4-1: USB disconnect, device number 59 [ 650.017887][ T10] em28xx 4-1:0.0: Disconnecting em28xx [ 650.036738][ T10] em28xx: Freeing device [ 650.603559][ T25] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 650.720785][ T10] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 650.763201][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 650.770294][ T25] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 650.816073][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.816102][ T25] usb 2-1: Product: syz [ 650.816117][ T25] usb 2-1: Manufacturer: syz [ 650.816132][ T25] usb 2-1: SerialNumber: syz [ 650.891859][ T10] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 650.893195][ T10] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.893226][ T10] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 650.893279][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 650.893312][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.933823][ T833] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 650.940690][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 650.951018][ T10] usb 5-1: config 0 descriptor?? [ 651.091495][ T833] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 651.093940][ T833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 651.093970][ T833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.094008][ T833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.121981][ T833] usb 1-1: config 0 descriptor?? [ 651.281996][ T25] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 651.282016][ T25] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 651.285356][ T25] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 651.434408][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 651.434473][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 651.466499][ T10] usb 5-1: USB disconnect, device number 49 [ 651.671700][ T25] usb 2-1: USB disconnect, device number 59 [ 651.740555][ T6151] udevd[6151]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 651.824569][ T833] usbhid 1-1:0.0: can't add hid device: -71 [ 651.824751][ T833] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 651.862159][ T833] usb 1-1: USB disconnect, device number 41 [ 652.048297][T16032] FAULT_INJECTION: forcing a failure. [ 652.048297][T16032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 652.048321][T16032] CPU: 0 UID: 0 PID: 16032 Comm: syz.2.3496 Tainted: G L syzkaller #0 PREEMPT(full) [ 652.048337][T16032] Tainted: [L]=SOFTLOCKUP [ 652.048341][T16032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 652.048347][T16032] Call Trace: [ 652.048352][T16032] [ 652.048357][T16032] dump_stack_lvl+0xe8/0x150 [ 652.048377][T16032] should_fail_ex+0x410/0x560 [ 652.048394][T16032] _copy_from_user+0x2d/0xb0 [ 652.048409][T16032] ___sys_sendmsg+0x1c6/0x360 [ 652.048425][T16032] ? __lock_acquire+0x747/0x2de0 [ 652.048439][T16032] ? __pfx____sys_sendmsg+0x10/0x10 [ 652.048470][T16032] ? __fget_files+0x2a/0x420 [ 652.048486][T16032] ? __fget_files+0x3a2/0x420 [ 652.048505][T16032] __x64_sys_sendmsg+0x1b1/0x290 [ 652.048521][T16032] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 652.048546][T16032] do_syscall_64+0x166/0x520 [ 652.048564][T16032] ? trace_irq_disable+0x3b/0x140 [ 652.048576][T16032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.048587][T16032] ? clear_bhb_loop+0x70/0xc0 [ 652.048600][T16032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.048610][T16032] RIP: 0033:0x7ff88ad9e159 [ 652.048621][T16032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.048631][T16032] RSP: 002b:00007ff88bc06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 652.048643][T16032] RAX: ffffffffffffffda RBX: 00007ff88b025fa0 RCX: 00007ff88ad9e159 [ 652.048651][T16032] RDX: 00000000200000d0 RSI: 0000200000001200 RDI: 0000000000000003 [ 652.048659][T16032] RBP: 00007ff88bc06090 R08: 0000000000000000 R09: 0000000000000000 [ 652.048665][T16032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.048672][T16032] R13: 00007ff88b026038 R14: 00007ff88b025fa0 R15: 00007ff88b14fa48 [ 652.048688][T16032] [ 652.532319][ T833] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 652.656856][T16047] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3502'. [ 652.670742][ T5701] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 652.701080][ T833] usb 5-1: Using ep0 maxpacket: 32 [ 652.701769][ T833] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 652.702694][ T833] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 652.702712][ T833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 652.702726][ T833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 652.702738][ T833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 652.702751][ T833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 652.706354][ T833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.706380][ T833] usb 5-1: Product: syz [ 652.706395][ T833] usb 5-1: Manufacturer: syz [ 652.706409][ T833] usb 5-1: SerialNumber: syz [ 652.726670][ T833] usb 5-1: config 0 descriptor?? [ 652.840852][ T5701] usb 2-1: Invalid ep0 maxpacket: 32 [ 652.971621][ T5701] usb 2-1: new low-speed USB device number 61 using dummy_hcd [ 653.124610][ T5701] usb 2-1: Invalid ep0 maxpacket: 32 [ 653.126256][ T5701] usb usb2-port1: attempt power cycle [ 653.194818][ T833] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 653.194849][ T833] input input113: Device does not respond to id packet M [ 653.196502][ T833] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 653.196529][ T833] input input113: Device does not respond to id packet P [ 653.197048][ T833] input input113: Device does not respond to id packet B [ 653.398674][ T833] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 653.398708][ T833] input input113: Device does not respond to id packet N [ 653.399045][ T833] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 653.399757][ T833] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 653.400396][ T833] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 653.422352][ T833] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 653.449060][ T833] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input113 [ 653.488597][ T833] usb 5-1: USB disconnect, device number 50 [ 653.512464][ T5701] usb 2-1: new low-speed USB device number 62 using dummy_hcd [ 653.533446][ T5701] usb 2-1: Invalid ep0 maxpacket: 32 [ 653.589492][ T6151] udevd[6151]: setting mode of /dev/bus/usb/005/050 to 020664 failed: No such file or directory [ 653.589607][ T6151] udevd[6151]: setting owner of /dev/bus/usb/005/050 to uid=0, gid=0 failed: No such file or directory [ 653.662532][ T5701] usb 2-1: new low-speed USB device number 63 using dummy_hcd [ 653.685671][ T5701] usb 2-1: Invalid ep0 maxpacket: 32 [ 653.685953][ T5701] usb usb2-port1: unable to enumerate USB device [ 654.353527][T16065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 654.601572][ T833] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 654.775046][ T833] usb 5-1: Using ep0 maxpacket: 16 [ 654.775614][ T833] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 654.777338][ T833] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 654.777369][ T833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 654.779740][ T833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.779764][ T833] usb 5-1: Product: syz [ 654.779779][ T833] usb 5-1: Manufacturer: syz [ 654.779793][ T833] usb 5-1: SerialNumber: syz [ 654.844729][ T833] usb 5-1: config 0 descriptor?? [ 654.869108][ T833] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 654.869130][ T833] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 655.270569][T16071] FAULT_INJECTION: forcing a failure. [ 655.270569][T16071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 655.270602][T16071] CPU: 1 UID: 0 PID: 16071 Comm: syz.2.3509 Tainted: G L syzkaller #0 PREEMPT(full) [ 655.270629][T16071] Tainted: [L]=SOFTLOCKUP [ 655.270640][T16071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 655.270651][T16071] Call Trace: [ 655.270658][T16071] [ 655.270667][T16071] dump_stack_lvl+0xe8/0x150 [ 655.270698][T16071] should_fail_ex+0x410/0x560 [ 655.270727][T16071] _copy_from_user+0x2d/0xb0 [ 655.270756][T16071] core_sys_select+0x509/0xb40 [ 655.270782][T16071] ? get_pid_task+0x20/0x1f0 [ 655.270814][T16071] ? __pfx_core_sys_select+0x10/0x10 [ 655.270844][T16071] ? __pfx_set_user_sigmask+0x10/0x10 [ 655.270859][T16071] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 655.270878][T16071] __se_sys_pselect6+0x267/0x320 [ 655.270908][T16071] ? __pfx___se_sys_pselect6+0x10/0x10 [ 655.270955][T16071] ? __pfx_ksys_write+0x10/0x10 [ 655.270981][T16071] ? __x64_sys_pselect6+0x21/0xf0 [ 655.271017][T16071] do_syscall_64+0x166/0x520 [ 655.271033][T16071] ? trace_irq_disable+0x3b/0x140 [ 655.271053][T16071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.271074][T16071] ? clear_bhb_loop+0x70/0xc0 [ 655.271111][T16071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.271130][T16071] RIP: 0033:0x7ff88ad9e159 [ 655.271141][T16071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.271151][T16071] RSP: 002b:00007ff88bc06028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 655.271164][T16071] RAX: ffffffffffffffda RBX: 00007ff88b025fa0 RCX: 00007ff88ad9e159 [ 655.271172][T16071] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 655.271179][T16071] RBP: 00007ff88bc06090 R08: 0000000000000000 R09: 0000000000000000 [ 655.271187][T16071] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 655.271200][T16071] R13: 00007ff88b026038 R14: 00007ff88b025fa0 R15: 00007ff88b14fa48 [ 655.271230][T16071] [ 655.755701][ T833] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 655.756004][ T833] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 655.756334][ T833] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 655.756345][ T833] em28xx 5-1:0.0: No AC97 audio processor [ 655.792900][ T833] usb 5-1: USB disconnect, device number 51 [ 655.793808][ T833] em28xx 5-1:0.0: Disconnecting em28xx [ 655.797437][ T833] em28xx: Freeing device [ 656.080849][ T6374] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 656.232164][ T6374] usb 2-1: Using ep0 maxpacket: 32 [ 656.232882][ T6374] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 656.257381][ T6374] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 656.257405][ T6374] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.257425][ T6374] usb 2-1: config 0 has no interface number 0 [ 656.261392][ T6374] usb 2-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 656.304457][ T6374] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.304481][ T6374] usb 2-1: Product: syz [ 656.304496][ T6374] usb 2-1: Manufacturer: syz [ 656.304510][ T6374] usb 2-1: SerialNumber: syz [ 656.310054][ T6374] usb 2-1: config 0 descriptor?? [ 656.340426][ T6374] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 656.340553][ T6374] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 656.621410][T16086] binder: 16085:16086 ioctl 4018620d 0 returned -22 [ 656.627686][T16086] binder: 16085:16086 ioctl 4018620d 0 returned -22 [ 656.684550][T16086] binder: 16085:16086 ioctl c0306201 0 returned -14 [ 656.847896][T16084] netlink: Failed to add helper -22 [ 656.847951][T16084] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 657.027763][ T30] kauditd_printk_skb: 196 callbacks suppressed [ 657.027783][ T30] audit: type=1326 audit(1791024902.130:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16076 comm="syz.1.3511" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8db19e159 code=0x7ffc0000 [ 657.028535][ T30] audit: type=1326 audit(1791024902.130:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16076 comm="syz.1.3511" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8db19e159 code=0x7ffc0000 [ 657.039029][ T30] audit: type=1326 audit(1791024902.140:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16076 comm="syz.1.3511" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd8db15e98e code=0x7ffc0000 [ 657.040353][ T30] audit: type=1326 audit(1791024902.140:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16076 comm="syz.1.3511" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd8db15e98e code=0x7ffc0000 [ 657.045311][ T30] audit: type=1326 audit(1791024902.150:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16076 comm="syz.1.3511" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd8db15e98e code=0x7ffc0000 [ 657.046563][ T30] audit: type=1326 audit(1791024902.150:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16076 comm="syz.1.3511" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd8db15e98e code=0x7ffc0000 [ 657.052575][ T30] audit: type=1326 audit(1791024902.150:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16076 comm="syz.1.3511" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd8db15e98e code=0x7ffc0000 [ 657.054010][ T30] audit: type=1326 audit(1791024902.150:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16076 comm="syz.1.3511" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd8db15e98e code=0x7ffc0000 [ 657.058546][ T30] audit: type=1326 audit(1791024902.150:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16076 comm="syz.1.3511" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd8db15e98e code=0x7ffc0000 [ 657.065341][ T30] audit: type=1326 audit(1791024902.150:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16076 comm="syz.1.3511" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd8db15e98e code=0x7ffc0000 [ 657.220893][ T6374] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 657.421003][ T6374] usb 3-1: Using ep0 maxpacket: 32 [ 657.422140][ T6374] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 657.423915][ T6374] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 657.423945][ T6374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 657.423971][ T6374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 657.423994][ T6374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 657.424019][ T6374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 657.428225][ T6374] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.428249][ T6374] usb 3-1: Product: syz [ 657.428264][ T6374] usb 3-1: Manufacturer: syz [ 657.428279][ T6374] usb 3-1: SerialNumber: syz [ 657.474707][ T6374] usb 3-1: config 0 descriptor?? [ 657.751006][ T5702] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 657.882302][ T6374] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 657.882333][ T6374] input input115: Device does not respond to id packet M [ 657.882858][ T6374] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 657.882901][ T6374] input input115: Device does not respond to id packet P [ 657.883567][ T6374] input input115: Device does not respond to id packet B [ 657.900815][ T5702] usb 5-1: Using ep0 maxpacket: 16 [ 657.901435][ T5702] usb 5-1: New USB device found, idVendor=1199, idProduct=9007, bcdDevice=69.e0 [ 657.902822][ T5702] usb 5-1: config 5 has an invalid interface number: 208 but max is 3 [ 657.902845][ T5702] usb 5-1: config 5 has an invalid interface number: 191 but max is 3 [ 657.902864][ T5702] usb 5-1: config 5 has an invalid interface number: 152 but max is 3 [ 657.902883][ T5702] usb 5-1: config 5 has an invalid interface number: 114 but max is 3 [ 657.902901][ T5702] usb 5-1: config 5 has an invalid interface number: 197 but max is 3 [ 657.902920][ T5702] usb 5-1: config 5 has 5 interfaces, different from the descriptor's value: 4 [ 657.902940][ T5702] usb 5-1: config 5 has no interface number 0 [ 657.902955][ T5702] usb 5-1: config 5 has no interface number 1 [ 657.902971][ T5702] usb 5-1: config 5 has no interface number 2 [ 657.902986][ T5702] usb 5-1: config 5 has no interface number 3 [ 657.903001][ T5702] usb 5-1: config 5 has no interface number 4 [ 657.903075][ T5702] usb 5-1: too many endpoints for config 5 interface 152 altsetting 50: 202, using maximum allowed: 30 [ 657.903109][ T5702] usb 5-1: config 5 interface 152 altsetting 50 has 0 endpoint descriptors, different from the interface descriptor's value: 202 [ 657.903194][ T5702] usb 5-1: config 5 interface 208 has no altsetting 0 [ 657.903302][ T5702] usb 5-1: config 5 interface 191 has no altsetting 0 [ 657.903321][ T5702] usb 5-1: config 5 interface 152 has no altsetting 0 [ 657.903339][ T5702] usb 5-1: config 5 interface 114 has no altsetting 0 [ 657.903356][ T5702] usb 5-1: config 5 interface 197 has no altsetting 0 [ 657.906026][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.906241][ T5702] usb 5-1: Product: syz [ 657.906258][ T5702] usb 5-1: Manufacturer: syz [ 657.906273][ T5702] usb 5-1: SerialNumber: syz [ 658.093054][ T6374] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 658.093104][ T6374] input input115: Device does not respond to id packet N [ 658.112767][ T6374] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 658.126934][ T6374] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 658.127341][ T6374] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 658.127754][ T6374] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 658.130050][ T6374] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input115 [ 658.175775][ T6374] usb 3-1: USB disconnect, device number 64 [ 658.319648][ T5702] usb 5-1: unknown number of interfaces: 5 [ 658.334793][T16118] ip_tables: iptables: counters copy to user failed while replacing table [ 658.340948][ T5610] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 658.352492][ T5702] usb 5-1: USB disconnect, device number 52 [ 658.492318][ T5610] usb 4-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 658.493295][ T5610] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 658.493340][ T5610] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.495048][ T5610] usb 4-1: config 0 descriptor?? [ 658.496215][T16112] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 658.592708][T16122] input: syz1 as /devices/virtual/input/input116 [ 658.724260][ T10] usb 2-1: USB disconnect, device number 64 [ 658.880921][ T6374] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 658.900995][ T5610] hid_parser_main: 3 callbacks suppressed [ 658.901017][ T5610] elecom 0003:056E:00E6.005B: unknown main item tag 0x0 [ 658.901048][ T5610] elecom 0003:056E:00E6.005B: unknown main item tag 0x0 [ 658.901075][ T5610] elecom 0003:056E:00E6.005B: unknown main item tag 0x0 [ 658.901135][ T5610] elecom 0003:056E:00E6.005B: unknown main item tag 0x0 [ 658.901163][ T5610] elecom 0003:056E:00E6.005B: unknown main item tag 0x0 [ 658.901189][ T5610] elecom 0003:056E:00E6.005B: unknown main item tag 0x0 [ 658.901216][ T5610] elecom 0003:056E:00E6.005B: unknown main item tag 0x0 [ 658.901242][ T5610] elecom 0003:056E:00E6.005B: unknown main item tag 0x0 [ 658.901268][ T5610] elecom 0003:056E:00E6.005B: unknown main item tag 0x0 [ 658.901294][ T5610] elecom 0003:056E:00E6.005B: unknown main item tag 0x0 [ 658.901340][ T5610] elecom 0003:056E:00E6.005B: unknown global tag 0xc [ 658.901357][ T5610] elecom 0003:056E:00E6.005B: item 0 1 1 12 parsing failed [ 658.902161][ T5610] elecom 0003:056E:00E6.005B: probe with driver elecom failed with error -22 [ 658.945203][ T833] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 659.060800][ T6374] usb 1-1: Using ep0 maxpacket: 16 [ 659.062322][ T6374] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 659.064802][ T6374] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.064816][ T6374] usb 1-1: Product: syz [ 659.064825][ T6374] usb 1-1: Manufacturer: syz [ 659.064833][ T6374] usb 1-1: SerialNumber: syz [ 659.066750][ T6374] usb 1-1: config 0 descriptor?? [ 659.105723][ T5610] usb 4-1: USB disconnect, device number 60 [ 659.154940][ T833] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 659.156096][ T833] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.156125][ T833] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 659.156171][ T833] usb 3-1: config 0 interface 0 has no altsetting 0 [ 659.156203][ T833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.158895][ T833] usb 3-1: config 0 descriptor?? [ 659.194402][ T10] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 659.380752][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 659.381491][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 659.382406][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 659.382424][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 659.385074][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.385097][ T10] usb 2-1: Product: syz [ 659.385142][ T10] usb 2-1: Manufacturer: syz [ 659.385158][ T10] usb 2-1: SerialNumber: syz [ 659.387503][ T10] usb 2-1: config 0 descriptor?? [ 659.456155][ T10] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 659.456175][ T10] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 659.477214][ T6374] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 659.489192][ T6374] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 659.489986][ T6374] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 659.490022][ T6374] usb 1-1: media controller created [ 659.520602][ T6374] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 659.682250][ T6374] zl10353_read_register: readreg error (reg=127, ret==0) [ 659.682328][ T6374] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 659.682506][ T6374] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 659.694082][ T6374] usb 1-1: USB disconnect, device number 42 [ 659.747378][ T6374] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 659.974589][ T833] sony 0003:054C:0268.005C: can't set operational mode: step 1 [ 659.974656][ T833] sony 0003:054C:0268.005C: Failed to set controller into operational mode [ 659.981667][ T833] sony 0003:054C:0268.005C: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 054c:0268] on usb-dummy_hcd.2-1/input0 [ 659.981722][ T833] sony 0003:054C:0268.005C: failed to claim input [ 660.005058][ T833] usb 3-1: USB disconnect, device number 65 [ 660.061033][ T6095] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 660.073013][T16129] fido_id[16129]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 660.169709][T16126] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 660.190759][ T6095] usb 4-1: device descriptor read/64, error -71 [ 660.222386][ T10] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 660.224184][ T10] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 660.224481][ T10] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 660.224492][ T10] em28xx 2-1:0.0: No AC97 audio processor [ 660.231016][ T10] usb 2-1: USB disconnect, device number 65 [ 660.232684][ T10] em28xx 2-1:0.0: Disconnecting em28xx [ 660.236712][ T10] em28xx: Freeing device [ 660.452076][ T6095] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 660.580761][ T6095] usb 4-1: device descriptor read/64, error -71 [ 660.691233][ T6095] usb usb4-port1: attempt power cycle [ 660.701036][ T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 660.861565][ T10] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 660.862965][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.866240][ T10] usb 1-1: config 0 descriptor?? [ 661.040778][ T6095] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 661.064304][ T6095] usb 4-1: device descriptor read/8, error -71 [ 661.079707][ T10] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 661.326407][ T6095] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 661.335701][ T10] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 661.335727][ T10] [drm] Initialized udl on minor 1 [ 661.353141][ T6095] usb 4-1: device descriptor read/8, error -71 [ 661.451541][ T6095] usb usb4-port1: unable to enumerate USB device [ 661.488401][ T10] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 661.489347][ T10] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 661.530776][ T5610] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 661.710808][ T6095] usb 1-1: USB disconnect, device number 43 [ 661.757133][ T5610] usb 2-1: Using ep0 maxpacket: 16 [ 661.757976][ T5610] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 661.774049][ T5610] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.774073][ T5610] usb 2-1: Product: syz [ 661.774088][ T5610] usb 2-1: Manufacturer: syz [ 661.774102][ T5610] usb 2-1: SerialNumber: syz [ 661.792631][ T5610] usb 2-1: config 0 descriptor?? [ 661.860958][ T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 661.998924][ T5610] speedtch 2-1:0.0: speedtch_bind: data interface not found! [ 661.999001][ T5610] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 662.017942][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 662.017995][ T10] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 662.019142][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 662.019165][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 662.060319][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.060345][ T10] usb 5-1: Product: syz [ 662.060360][ T10] usb 5-1: Manufacturer: syz [ 662.060375][ T10] usb 5-1: SerialNumber: syz [ 662.094852][ T10] usb 5-1: selecting invalid altsetting 1 [ 662.095601][ T10] usb 5-1: unit 6 not found! [ 662.219503][T16149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.231203][T16149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.414106][T16166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.416523][T16166] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.424446][T16166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 662.485821][T16166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.488397][T16166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.507401][T16166] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 662.539672][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.539783][ T1015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.544212][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.544306][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.691223][T16176] AppArmor: change_hat: Invalid input '0x000000000000000%Z|J(v[' [ 662.931957][ T833] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 663.002141][ T10] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 663.033338][ T6151] udevd[6151]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 663.080806][ T833] usb 1-1: Using ep0 maxpacket: 16 [ 663.082083][ T833] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 663.083056][ T833] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 663.083080][ T833] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 663.084973][ T833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.084997][ T833] usb 1-1: Product: syz [ 663.085011][ T833] usb 1-1: Manufacturer: syz [ 663.085026][ T833] usb 1-1: SerialNumber: syz [ 663.094072][ T833] usb 1-1: 0:2 : does not exist [ 663.094142][ T833] usb 1-1: unit 255 not found! [ 663.224261][ T833] usb 5-1: USB disconnect, device number 53 [ 663.230801][ T6374] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 663.298254][T16176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.298689][T16176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.326825][ T5610] hid-generic 0000:0000:0000.005D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 663.387088][ T6374] usb 4-1: Using ep0 maxpacket: 16 [ 663.387840][ T6374] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 663.389558][ T6374] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 663.389588][ T6374] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 663.397756][ T6374] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.397780][ T6374] usb 4-1: Product: syz [ 663.397794][ T6374] usb 4-1: Manufacturer: syz [ 663.397809][ T6374] usb 4-1: SerialNumber: syz [ 663.403559][ T6374] usb 4-1: config 0 descriptor?? [ 663.414140][ T6374] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 663.414169][ T6374] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 663.594402][ T5610] usb 1-1: USB disconnect, device number 44 [ 664.223894][T16181] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 664.249010][ T833] usb 2-1: USB disconnect, device number 66 [ 664.264869][ T6374] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 664.265878][ T6374] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 664.266746][ T6374] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 664.266763][ T6374] em28xx 4-1:0.0: No AC97 audio processor [ 664.293259][ T6374] usb 4-1: USB disconnect, device number 65 [ 664.307611][ T6374] em28xx 4-1:0.0: Disconnecting em28xx [ 664.324450][ T6374] em28xx: Freeing device [ 664.347970][T16219] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 664.420880][ T10] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 664.572310][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 664.590901][ T10] usb 5-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 664.595550][ T10] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.595581][ T10] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 664.595608][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 664.595640][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.599189][ T10] usb 5-1: config 0 descriptor?? [ 664.670839][ T833] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 664.821074][ T833] usb 2-1: Using ep0 maxpacket: 16 [ 664.822221][ T5702] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 664.823389][ T833] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 664.827017][ T833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.827043][ T833] usb 2-1: Product: syz [ 664.827083][ T833] usb 2-1: Manufacturer: syz [ 664.827100][ T833] usb 2-1: SerialNumber: syz [ 664.991409][ T5702] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 664.992540][ T5702] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 664.992599][ T5702] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 664.994796][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.994821][ T5702] usb 1-1: Product: syz [ 664.994836][ T5702] usb 1-1: Manufacturer: syz [ 664.994851][ T5702] usb 1-1: SerialNumber: syz [ 665.126704][ T10] input: HID 0b05:18c6 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0B05:18C6.005E/input/input118 [ 665.203727][T16225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.210224][T16225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.273864][ T10] asus 0003:0B05:18C6.005E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0b05:18c6] on usb-dummy_hcd.4-1/input0 [ 665.425009][ T833] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 665.449802][ T833] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 665.450356][ T833] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 665.450405][ T833] usb 2-1: media controller created [ 665.495347][T16212] ALSA: mixer_oss: invalid OSS volume '9y' [ 665.499589][ T6095] usb 5-1: USB disconnect, device number 54 [ 665.547624][ T833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 665.636389][T16230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.650704][T16230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.666169][T16231] fido_id[16231]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 665.688536][ T833] zl10353_read_register: readreg error (reg=127, ret==-71) [ 665.708472][T16225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.714111][T16225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.763597][ C1] usb 1-1: received EP1 urb->status = -71 [ 665.763706][ T5702] usb 1-1: unable to init card! (ret=-71) [ 665.764110][ T5702] snd-usb-caiaq 1-1:1.0: probe with driver snd-usb-caiaq failed with error -71 [ 665.766253][ T5702] usb 1-1: USB disconnect, device number 45 [ 665.878733][ T833] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 665.891170][ T833] usb 2-1: USB disconnect, device number 67 [ 665.985821][T16236] binder: BINDER_SET_CONTEXT_MGR already set [ 665.985838][T16236] binder: 16235:16236 ioctl 4018620d 200000004a80 returned -16 [ 665.997215][T16236] binder: 16235:16236 ioctl c0306201 200000004a40 returned -22 [ 666.405662][T16254] FAULT_INJECTION: forcing a failure. [ 666.405662][T16254] name failslab, interval 1, probability 0, space 0, times 0 [ 666.405697][T16254] CPU: 0 UID: 0 PID: 16254 Comm: syz.3.3563 Tainted: G L syzkaller #0 PREEMPT(full) [ 666.405724][T16254] Tainted: [L]=SOFTLOCKUP [ 666.405732][T16254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 666.405744][T16254] Call Trace: [ 666.405752][T16254] [ 666.405762][T16254] dump_stack_lvl+0xe8/0x150 [ 666.405795][T16254] should_fail_ex+0x410/0x560 [ 666.405825][T16254] should_failslab+0xa8/0x100 [ 666.405853][T16254] __kmalloc_noprof+0xfe/0x720 [ 666.405874][T16254] ? rcu_is_watching+0x16/0xb0 [ 666.405898][T16254] ? tomoyo_realpath_from_path+0xef/0x640 [ 666.405928][T16254] ? tomoyo_realpath_from_path+0xef/0x640 [ 666.405970][T16254] tomoyo_realpath_from_path+0xef/0x640 [ 666.406010][T16254] ? tomoyo_path_number_perm+0x219/0x5f0 [ 666.406035][T16254] tomoyo_path_number_perm+0x246/0x5f0 [ 666.406063][T16254] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 666.406087][T16254] ? __lock_acquire+0x747/0x2de0 [ 666.406123][T16254] ? hook_file_ioctl+0x1f2/0x600 [ 666.406170][T16254] ? __fget_files+0x2a/0x420 [ 666.406202][T16254] ? __fget_files+0x2a/0x420 [ 666.406228][T16254] ? __fget_files+0x3a2/0x420 [ 666.406254][T16254] ? __fget_files+0x2a/0x420 [ 666.406285][T16254] security_file_ioctl+0xc3/0x2a0 [ 666.406310][T16254] __se_sys_ioctl+0x47/0x170 [ 666.406334][T16254] do_syscall_64+0x166/0x520 [ 666.406354][T16254] ? trace_irq_disable+0x3b/0x140 [ 666.406366][T16254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.406377][T16254] ? clear_bhb_loop+0x70/0xc0 [ 666.406390][T16254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.406401][T16254] RIP: 0033:0x7f3cfdb9e159 [ 666.406412][T16254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.406425][T16254] RSP: 002b:00007f3cfea20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 666.406445][T16254] RAX: ffffffffffffffda RBX: 00007f3cfde25fa0 RCX: 00007f3cfdb9e159 [ 666.406460][T16254] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 666.406473][T16254] RBP: 00007f3cfea20090 R08: 0000000000000000 R09: 0000000000000000 [ 666.406482][T16254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.406488][T16254] R13: 00007f3cfde26038 R14: 00007f3cfde25fa0 R15: 00007f3cfdf4fa48 [ 666.406505][T16254] [ 666.408149][T16254] ERROR: Out of memory at tomoyo_realpath_from_path. [ 666.452033][ T30] kauditd_printk_skb: 892 callbacks suppressed [ 666.452048][ T30] audit: type=1326 audit(1791024911.560:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16260 comm="syz.1.3565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8db19e159 code=0x7ffc0000 [ 666.452345][ T30] audit: type=1326 audit(1791024911.560:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16260 comm="syz.1.3565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8db19e159 code=0x7ffc0000 [ 666.452777][ T30] audit: type=1326 audit(1791024911.560:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16260 comm="syz.1.3565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd8db19e159 code=0x7ffc0000 [ 666.452998][ T30] audit: type=1326 audit(1791024911.560:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16260 comm="syz.1.3565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8db19e159 code=0x7ffc0000 [ 666.453186][ T30] audit: type=1326 audit(1791024911.560:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16260 comm="syz.1.3565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8db19e159 code=0x7ffc0000 [ 666.453982][ T30] audit: type=1326 audit(1791024911.560:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16260 comm="syz.1.3565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd8db19e159 code=0x7ffc0000 [ 666.454022][ T30] audit: type=1326 audit(1791024911.560:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16260 comm="syz.1.3565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8db19e159 code=0x7ffc0000 [ 666.454059][ T30] audit: type=1326 audit(1791024911.560:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16260 comm="syz.1.3565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8db19e159 code=0x7ffc0000 [ 666.454276][ T30] audit: type=1326 audit(1791024911.560:3174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16260 comm="syz.1.3565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd8db19e159 code=0x7ffc0000 [ 666.470851][ T833] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 666.476022][ T30] audit: type=1326 audit(1791024911.580:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16260 comm="syz.1.3565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8db19e159 code=0x7ffc0000 [ 666.488953][T16261] FAULT_INJECTION: forcing a failure. [ 666.488953][T16261] name failslab, interval 1, probability 0, space 0, times 0 [ 666.488984][T16261] CPU: 0 UID: 0 PID: 16261 Comm: syz.1.3565 Tainted: G L syzkaller #0 PREEMPT(full) [ 666.489010][T16261] Tainted: [L]=SOFTLOCKUP [ 666.489018][T16261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 666.489029][T16261] Call Trace: [ 666.489037][T16261] [ 666.489045][T16261] dump_stack_lvl+0xe8/0x150 [ 666.489077][T16261] should_fail_ex+0x410/0x560 [ 666.489108][T16261] should_failslab+0xa8/0x100 [ 666.489134][T16261] ? audit_log_start+0x103/0xa10 [ 666.489160][T16261] kmem_cache_alloc_noprof+0xa1/0x600 [ 666.489180][T16261] ? auditd_test_task+0x22/0x280 [ 666.489204][T16261] ? auditd_test_task+0x22/0x280 [ 666.489228][T16261] ? audit_log_start+0x103/0xa10 [ 666.489258][T16261] audit_log_start+0x103/0xa10 [ 666.489290][T16261] ? __pfx_audit_log_start+0x10/0x10 [ 666.489318][T16261] ? get_pid_task+0x20/0x1f0 [ 666.489337][T16261] ? get_pid_task+0x20/0x1f0 [ 666.489353][T16261] ? get_pid_task+0x20/0x1f0 [ 666.489380][T16261] audit_seccomp+0x63/0x190 [ 666.489402][T16261] ? clear_bhb_loop+0x70/0xc0 [ 666.489422][T16261] ? clear_bhb_loop+0xe/0xc0 [ 666.489445][T16261] __seccomp_filter+0xd14/0x1de0 [ 666.489484][T16261] ? __pfx___seccomp_filter+0x10/0x10 [ 666.489507][T16261] ? __mutex_unlock_slowpath+0x731/0x900 [ 666.489538][T16261] ? __fget_files+0x2a/0x420 [ 666.489567][T16261] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 666.489595][T16261] ? __fget_files+0x3a2/0x420 [ 666.489629][T16261] ? fput+0xa0/0xd0 [ 666.489657][T16261] ? __pfx_ksys_write+0x10/0x10 [ 666.489680][T16261] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 666.489709][T16261] do_syscall_64+0x11f/0x520 [ 666.489734][T16261] ? trace_irq_disable+0x3b/0x140 [ 666.489755][T16261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.489774][T16261] ? clear_bhb_loop+0x70/0xc0 [ 666.489797][T16261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.489816][T16261] RIP: 0033:0x7fd8db19e159 [ 666.489834][T16261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.489851][T16261] RSP: 002b:00007fd8dc008028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 666.489871][T16261] RAX: ffffffffffffffda RBX: 00007fd8db425fa0 RCX: 00007fd8db19e159 [ 666.489886][T16261] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 666.489898][T16261] RBP: 00007fd8dc008090 R08: 0000000000000000 R09: 0000000000000000 [ 666.489910][T16261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.489922][T16261] R13: 00007fd8db426038 R14: 00007fd8db425fa0 R15: 00007fd8db54fa48 [ 666.489958][T16261] [ 666.544649][ T5702] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 666.625663][ T833] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 666.626807][ T833] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.626836][ T833] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 666.626877][ T833] usb 5-1: config 0 interface 0 has no altsetting 0 [ 666.626909][ T833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.632252][ T833] usb 5-1: config 0 descriptor?? [ 666.850715][ T10] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 666.877345][ T5702] usb 3-1: unable to get BOS descriptor or descriptor too short [ 666.877393][ T5702] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 666.878304][ T5702] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 666.878326][ T5702] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 666.880738][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.880761][ T5702] usb 3-1: Product: syz [ 666.880775][ T5702] usb 3-1: Manufacturer: syz [ 666.880789][ T5702] usb 3-1: SerialNumber: syz [ 666.967928][ T5702] usb 3-1: selecting invalid altsetting 1 [ 666.968615][ T5702] usb 3-1: unit 6 not found! [ 667.031249][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 667.041743][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 667.066468][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 667.066496][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 667.073843][T16268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3567'. [ 667.200124][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.200152][ T10] usb 2-1: Product: syz [ 667.200167][ T10] usb 2-1: Manufacturer: syz [ 667.200182][ T10] usb 2-1: SerialNumber: syz [ 667.262357][ T10] usb 2-1: config 0 descriptor?? [ 667.272517][ T10] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 667.274155][ T10] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 667.543182][ T833] sony 0003:054C:0268.005F: can't set operational mode: step 1 [ 667.543249][ T833] sony 0003:054C:0268.005F: Failed to set controller into operational mode [ 667.561534][ T833] sony 0003:054C:0268.005F: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 054c:0268] on usb-dummy_hcd.4-1/input0 [ 667.561567][ T833] sony 0003:054C:0268.005F: failed to claim input [ 667.578994][ T833] usb 5-1: USB disconnect, device number 55 [ 667.603417][T16276] FAULT_INJECTION: forcing a failure. [ 667.603417][T16276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.603450][T16276] CPU: 0 UID: 0 PID: 16276 Comm: syz.0.3570 Tainted: G L syzkaller #0 PREEMPT(full) [ 667.603476][T16276] Tainted: [L]=SOFTLOCKUP [ 667.603484][T16276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 667.603496][T16276] Call Trace: [ 667.603505][T16276] [ 667.603514][T16276] dump_stack_lvl+0xe8/0x150 [ 667.603546][T16276] should_fail_ex+0x410/0x560 [ 667.603577][T16276] _copy_to_user+0x31/0xb0 [ 667.603607][T16276] store_msg+0x49/0x130 [ 667.603731][T16276] do_msg_fill+0xbd/0xf0 [ 667.603751][T16276] ? __pfx_do_msg_fill+0x10/0x10 [ 667.603771][T16276] do_msgrcv+0x1095/0x13f0 [ 667.603792][T16276] ? __pfx_do_msg_fill+0x10/0x10 [ 667.603814][T16276] ? do_msgrcv+0x344/0x13f0 [ 667.603841][T16276] ? __pfx_do_msgrcv+0x10/0x10 [ 667.603860][T16276] ? ksys_write+0x242/0x270 [ 667.603889][T16276] ? __x64_sys_msgrcv+0x20/0xd0 [ 667.603909][T16276] do_syscall_64+0x166/0x520 [ 667.603936][T16276] ? trace_irq_disable+0x3b/0x140 [ 667.603965][T16276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.603986][T16276] ? clear_bhb_loop+0x70/0xc0 [ 667.604012][T16276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.604032][T16276] RIP: 0033:0x7f440eb9e159 [ 667.604051][T16276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.604069][T16276] RSP: 002b:00007f440f9b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000046 [ 667.604091][T16276] RAX: ffffffffffffffda RBX: 00007f440ee26090 RCX: 00007f440eb9e159 [ 667.604106][T16276] RDX: 0000000000001008 RSI: 0000200000000380 RDI: 0000000000000000 [ 667.604120][T16276] RBP: 00007f440f9b1090 R08: 0000000000001000 R09: 0000000000000000 [ 667.604133][T16276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.604145][T16276] R13: 00007f440ee26128 R14: 00007f440ee26090 R15: 00007f440ef4fa48 [ 667.604176][T16276] [ 667.694299][T16277] fido_id[16277]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 667.760803][ T6374] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 667.911005][ T6374] usb 4-1: Using ep0 maxpacket: 32 [ 667.914673][ T6374] usb 4-1: unable to get BOS descriptor or descriptor too short [ 667.914720][ T6374] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 667.916429][ T6374] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 667.916455][ T6374] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 667.916475][ T6374] usb 4-1: config 14 has no interface number 0 [ 667.916492][ T6374] usb 4-1: config 14 has no interface number 1 [ 667.916575][ T6374] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 667.916599][ T6374] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 667.916625][ T6374] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 667.916652][ T6374] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 667.916702][ T6374] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 667.916727][ T6374] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 667.916753][ T6374] usb 4-1: config 14 interface 57 has no altsetting 0 [ 667.916772][ T6374] usb 4-1: config 14 interface 228 has no altsetting 0 [ 667.920366][ T6374] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.920390][ T6374] usb 4-1: Product: syz [ 667.920405][ T6374] usb 4-1: Manufacturer: syz [ 667.920420][ T6374] usb 4-1: SerialNumber: syz [ 668.048443][ T5702] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 668.104011][T16266] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 668.151767][ T10] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 668.152239][ T10] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 668.152690][ T10] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 668.152707][ T10] em28xx 2-1:0.0: No AC97 audio processor [ 668.199135][ T6151] udevd[6151]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 668.218956][ T10] usb 2-1: USB disconnect, device number 68 [ 668.238773][ T10] em28xx 2-1:0.0: Disconnecting em28xx [ 668.241596][ T10] em28xx: Freeing device [ 668.371822][ T6095] usb 3-1: USB disconnect, device number 66 [ 668.691529][ T6374] legousbtower 4-1:14.57: interrupt endpoints not found [ 668.780850][ T833] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 668.870763][ T6095] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 668.935692][ T833] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 668.938085][ T833] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.938119][ T833] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 668.938133][ T833] usb 1-1: config 0 interface 0 has no altsetting 0 [ 668.938152][ T833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.939961][ T833] usb 1-1: config 0 descriptor?? [ 669.051133][ T6095] usb 5-1: Using ep0 maxpacket: 16 [ 669.052129][ T6095] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 669.053148][T16293] FAULT_INJECTION: forcing a failure. [ 669.053148][T16293] name failslab, interval 1, probability 0, space 0, times 0 [ 669.053175][T16293] CPU: 0 UID: 0 PID: 16293 Comm: syz.2.3574 Tainted: G L syzkaller #0 PREEMPT(full) [ 669.053190][T16293] Tainted: [L]=SOFTLOCKUP [ 669.053195][T16293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 669.053202][T16293] Call Trace: [ 669.053209][T16293] [ 669.053214][T16293] dump_stack_lvl+0xe8/0x150 [ 669.053234][T16293] should_fail_ex+0x410/0x560 [ 669.053251][T16293] should_failslab+0xa8/0x100 [ 669.053265][T16293] ? fanotify_handle_event+0x1b7d/0x4080 [ 669.053282][T16293] kmem_cache_alloc_noprof+0xa1/0x600 [ 669.053295][T16293] ? fanotify_handle_event+0x1b7d/0x4080 [ 669.053313][T16293] fanotify_handle_event+0x1b7d/0x4080 [ 669.053334][T16293] ? fanotify_handle_event+0x1050/0x4080 [ 669.053353][T16293] ? __pfx_fanotify_handle_event+0x10/0x10 [ 669.053371][T16293] ? lock_acquire+0x115/0x350 [ 669.053389][T16293] ? __pfx_fanotify_handle_event+0x10/0x10 [ 669.053405][T16293] fsnotify+0x15d8/0x1e40 [ 669.053425][T16293] ? fsnotify+0x863/0x1e40 [ 669.053437][T16293] ? __pfx_fsnotify+0x10/0x10 [ 669.053450][T16293] ? _raw_spin_unlock_irqrestore+0x76/0x80 [ 669.053465][T16293] ? __wake_up_common_lock+0x195/0x1f0 [ 669.053480][T16293] ? kill_fasync+0xa8/0x4d0 [ 669.053493][T16293] do_tee+0xe9b/0x10e0 [ 669.053517][T16293] __se_sys_tee+0x93/0x130 [ 669.053529][T16293] do_syscall_64+0x166/0x520 [ 669.053544][T16293] ? trace_irq_disable+0x3b/0x140 [ 669.053555][T16293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.053566][T16293] ? clear_bhb_loop+0x70/0xc0 [ 669.053579][T16293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.053590][T16293] RIP: 0033:0x7ff88ad9e159 [ 669.053601][T16293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.053610][T16293] RSP: 002b:00007ff88bc06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000114 [ 669.053623][T16293] RAX: ffffffffffffffda RBX: 00007ff88b025fa0 RCX: 00007ff88ad9e159 [ 669.053632][T16293] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000005 [ 669.053638][T16293] RBP: 00007ff88bc06090 R08: 0000000000000000 R09: 0000000000000000 [ 669.053645][T16293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.053651][T16293] R13: 00007ff88b026038 R14: 00007ff88b025fa0 R15: 00007ff88b14fa48 [ 669.053670][T16293] [ 669.148046][ T6374] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 669.280867][ T6095] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.280895][ T6095] usb 5-1: Product: syz [ 669.280911][ T6095] usb 5-1: Manufacturer: syz [ 669.280926][ T6095] usb 5-1: SerialNumber: syz [ 669.371633][ T6374] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 669.639990][ T6095] usb 5-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 669.640010][ T6095] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 669.658177][ T6095] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 669.693785][ T833] usbhid 1-1:0.0: can't add hid device: -71 [ 669.693884][ T833] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 669.706422][T16281] usb 4-1: LEGO USB Tower reset control request failed [ 669.706914][ T833] usb 1-1: USB disconnect, device number 46 [ 669.806790][ T6095] usb 5-1: USB disconnect, device number 56 [ 669.856187][ T6151] udevd[6151]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 669.975713][ T833] usb 4-1: USB disconnect, device number 66 [ 670.007217][ T833] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 670.273657][T16308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3578'. [ 670.273721][T16308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3578'. [ 670.345995][T14321] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 670.399639][ T5702] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 670.472687][T14321] usb 3-1: device descriptor read/64, error -71 [ 670.551301][ T5702] usb 2-1: Using ep0 maxpacket: 16 [ 670.551816][ T5702] usb 2-1: New USB device found, idVendor=1199, idProduct=9007, bcdDevice=69.e0 [ 670.552820][ T5702] usb 2-1: config 5 has an invalid interface number: 208 but max is 3 [ 670.552844][ T5702] usb 2-1: config 5 has an invalid interface number: 191 but max is 3 [ 670.552865][ T5702] usb 2-1: config 5 has an invalid interface number: 152 but max is 3 [ 670.552883][ T5702] usb 2-1: config 5 has an invalid interface number: 114 but max is 3 [ 670.552902][ T5702] usb 2-1: config 5 has an invalid interface number: 197 but max is 3 [ 670.552921][ T5702] usb 2-1: config 5 has 5 interfaces, different from the descriptor's value: 4 [ 670.552942][ T5702] usb 2-1: config 5 has no interface number 0 [ 670.552958][ T5702] usb 2-1: config 5 has no interface number 1 [ 670.552974][ T5702] usb 2-1: config 5 has no interface number 2 [ 670.552990][ T5702] usb 2-1: config 5 has no interface number 3 [ 670.553006][ T5702] usb 2-1: config 5 has no interface number 4 [ 670.553082][ T5702] usb 2-1: too many endpoints for config 5 interface 152 altsetting 50: 202, using maximum allowed: 30 [ 670.553152][ T5702] usb 2-1: config 5 interface 152 altsetting 50 has 0 endpoint descriptors, different from the interface descriptor's value: 202 [ 670.553180][ T5702] usb 2-1: config 5 interface 208 has no altsetting 0 [ 670.553199][ T5702] usb 2-1: config 5 interface 191 has no altsetting 0 [ 670.553217][ T5702] usb 2-1: config 5 interface 152 has no altsetting 0 [ 670.553235][ T5702] usb 2-1: config 5 interface 114 has no altsetting 0 [ 670.553252][ T5702] usb 2-1: config 5 interface 197 has no altsetting 0 [ 670.555441][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.555464][ T5702] usb 2-1: Product: syz [ 670.555479][ T5702] usb 2-1: Manufacturer: syz [ 670.555494][ T5702] usb 2-1: SerialNumber: syz [ 670.743224][T14321] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 670.780791][ T833] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 670.785471][T16321] misc userio: No port type given on /dev/userio [ 670.899901][ T5702] usb 2-1: unknown number of interfaces: 5 [ 670.900248][T14321] usb 3-1: device descriptor read/64, error -71 [ 670.951468][ T833] usb 5-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 670.952661][ T833] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 670.952690][ T833] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 670.952712][ T833] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 670.952748][ T833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.960147][ T5702] usb 2-1: USB disconnect, device number 69 [ 671.011089][T14321] usb usb3-port1: attempt power cycle [ 671.026739][T16319] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 671.258875][T16319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3581'. [ 671.350954][T14321] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 671.371852][T14321] usb 3-1: device descriptor read/8, error -71 [ 671.450777][ T833] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 671.556179][T16319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.558377][T16319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.579612][ T5702] usb 5-1: USB disconnect, device number 57 [ 671.590482][ T5611] Bluetooth: hci0: Reading Intel version command failed (-71) [ 671.618975][T14321] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 671.635773][ T833] usb 4-1: unable to get BOS descriptor or descriptor too short [ 671.635819][ T833] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 671.638232][ T833] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 671.638256][ T833] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 671.645104][T14321] usb 3-1: device descriptor read/8, error -71 [ 671.688083][ T833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.688110][ T833] usb 4-1: Product: syz [ 671.688126][ T833] usb 4-1: Manufacturer: syz [ 671.688140][ T833] usb 4-1: SerialNumber: syz [ 671.722941][ T833] usb 4-1: selecting invalid altsetting 1 [ 671.723627][ T833] usb 4-1: unit 6 not found! [ 671.751493][T14321] usb usb3-port1: unable to enumerate USB device [ 672.120759][ T5702] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 672.270858][ T5702] usb 1-1: Using ep0 maxpacket: 16 [ 672.273040][ T5702] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 672.278134][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.278157][ T5702] usb 1-1: Product: syz [ 672.278169][ T5702] usb 1-1: Manufacturer: syz [ 672.278176][ T5702] usb 1-1: SerialNumber: syz [ 672.460775][ T25] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 672.610941][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 672.612709][ T25] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 672.613794][ T25] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 672.613824][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 672.616803][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.616826][ T25] usb 5-1: Product: syz [ 672.616837][ T25] usb 5-1: Manufacturer: syz [ 672.616845][ T25] usb 5-1: SerialNumber: syz [ 672.623043][ T25] usb 5-1: config 0 descriptor?? [ 672.629383][ T25] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 672.629413][ T25] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 672.778291][ T833] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 672.786245][ T5702] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 672.786273][ T5702] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 672.788238][ T5702] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 672.920092][ T6151] udevd[6151]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 672.971320][ T5702] usb 1-1: USB disconnect, device number 47 [ 673.027855][T14321] usb 4-1: USB disconnect, device number 67 [ 673.094982][ T6151] udevd[6151]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 673.141093][ T833] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 673.304734][ T833] usb 2-1: not running at top speed; connect to a high speed hub [ 673.304770][ T833] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 673.306692][ T833] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 673.306722][ T833] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 673.306742][ T833] usb 2-1: config 1 interface 0 has no altsetting 0 [ 673.310161][ T833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.310185][ T833] usb 2-1: Product: syz [ 673.310199][ T833] usb 2-1: Manufacturer: С [ 673.310213][ T833] usb 2-1: SerialNumber: syz [ 673.389363][T16336] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 673.454406][T16342] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 673.502472][ T25] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 673.504189][ T25] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 673.504525][ T25] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 673.504543][ T25] em28xx 5-1:0.0: No AC97 audio processor [ 673.513904][ T25] usb 5-1: USB disconnect, device number 58 [ 673.518839][ T25] em28xx 5-1:0.0: Disconnecting em28xx [ 673.565133][ T25] em28xx: Freeing device [ 673.606908][ T833] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 673.627157][ T833] usb 2-1: USB disconnect, device number 70 [ 673.960850][ T6095] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 673.970773][ T5610] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 673.988063][ T10] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 674.111000][ T6095] usb 4-1: Using ep0 maxpacket: 16 [ 674.112173][ T6095] usb 4-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 674.120716][ T5610] usb 1-1: Using ep0 maxpacket: 8 [ 674.122717][ T5610] usb 1-1: unable to get BOS descriptor or descriptor too short [ 674.122761][ T5610] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 674.123861][ T5610] usb 1-1: config index 0 descriptor too short (expected 109, got 80) [ 674.123884][ T5610] usb 1-1: config 1 has an invalid descriptor of length 65, skipping remainder of the config [ 674.123923][ T5610] usb 1-1: config 1 interface 0 altsetting 132 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 674.123950][ T5610] usb 1-1: config 1 interface 0 has no altsetting 0 [ 674.125820][ T5610] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.125843][ T5610] usb 1-1: Product: syz [ 674.125857][ T5610] usb 1-1: Manufacturer: syz [ 674.125871][ T5610] usb 1-1: SerialNumber: syz [ 674.137043][ T6095] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.137076][ T6095] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 674.137102][ T6095] usb 4-1: config 0 interface 0 has no altsetting 0 [ 674.137135][ T6095] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.143167][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 674.151325][ T10] usb 3-1: New USB device found, idVendor=1199, idProduct=9007, bcdDevice=69.e0 [ 674.179475][ T10] usb 3-1: config 5 has an invalid interface number: 208 but max is 3 [ 674.179502][ T10] usb 3-1: config 5 has an invalid interface number: 191 but max is 3 [ 674.179521][ T10] usb 3-1: config 5 has an invalid interface number: 152 but max is 3 [ 674.179541][ T10] usb 3-1: config 5 has an invalid interface number: 114 but max is 3 [ 674.179560][ T10] usb 3-1: config 5 has an invalid interface number: 197 but max is 3 [ 674.179579][ T10] usb 3-1: config 5 has 5 interfaces, different from the descriptor's value: 4 [ 674.179600][ T10] usb 3-1: config 5 has no interface number 0 [ 674.179616][ T10] usb 3-1: config 5 has no interface number 1 [ 674.179632][ T10] usb 3-1: config 5 has no interface number 2 [ 674.179643][ T10] usb 3-1: config 5 has no interface number 3 [ 674.179651][ T10] usb 3-1: config 5 has no interface number 4 [ 674.179705][ T10] usb 3-1: too many endpoints for config 5 interface 152 altsetting 50: 202, using maximum allowed: 30 [ 674.179742][ T10] usb 3-1: config 5 interface 152 altsetting 50 has 0 endpoint descriptors, different from the interface descriptor's value: 202 [ 674.179770][ T10] usb 3-1: config 5 interface 208 has no altsetting 0 [ 674.179787][ T10] usb 3-1: config 5 interface 191 has no altsetting 0 [ 674.179798][ T10] usb 3-1: config 5 interface 152 has no altsetting 0 [ 674.179809][ T10] usb 3-1: config 5 interface 114 has no altsetting 0 [ 674.179818][ T10] usb 3-1: config 5 interface 197 has no altsetting 0 [ 674.225362][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.225389][ T10] usb 3-1: Product: syz [ 674.225404][ T10] usb 3-1: Manufacturer: syz [ 674.225419][ T10] usb 3-1: SerialNumber: syz [ 674.395385][ T5610] cdc_ether 1-1:1.0: missing cdc header ether descriptor [ 674.409215][ T5610] usb 1-1: USB disconnect, device number 48 [ 674.418361][ T6095] usb 4-1: config 0 descriptor?? [ 674.651938][ T25] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 674.703206][T16356] misc userio: No port type given on /dev/userio [ 674.800758][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 674.808574][ T25] usb 2-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 674.813356][ T25] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.813387][ T25] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 674.813414][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 674.813448][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.819160][ T25] usb 2-1: config 0 descriptor?? [ 674.837958][T16361] program syz.4.3594 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 674.914865][ T10] usb 3-1: unknown number of interfaces: 5 [ 674.952661][ T10] usb 3-1: USB disconnect, device number 71 [ 674.997962][ T6095] input: HID 0b05:18c6 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0B05:18C6.0060/input/input120 [ 675.102907][ T6095] asus 0003:0B05:18C6.0060: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0b05:18c6] on usb-dummy_hcd.3-1/input0 [ 675.233405][T16349] ALSA: mixer_oss: invalid OSS volume '9y' [ 675.236616][ T5702] usb 4-1: USB disconnect, device number 68 [ 675.422163][ T25] input: HID 0b05:18c6 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0B05:18C6.0061/input/input121 [ 675.463923][T14321] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 675.509093][ T25] asus 0003:0B05:18C6.0061: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0b05:18c6] on usb-dummy_hcd.1-1/input0 [ 675.611901][T14321] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 675.615460][T14321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.627933][T14321] usb 1-1: config 0 descriptor?? [ 675.763972][T16353] ALSA: mixer_oss: invalid OSS volume '9y' [ 675.765170][ T25] usb 2-1: USB disconnect, device number 71 [ 675.866041][T14321] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 676.069176][T16376] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 676.102631][T14321] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 676.107821][T14321] [drm] Initialized udl on minor 1 [ 676.272290][T14321] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 676.272744][T14321] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 676.321882][T16382] binder: 16380:16382 ioctl c0306201 200000004a40 returned -22 [ 676.370749][ T10] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 676.479674][T14321] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 676.480009][ T6374] usb 1-1: USB disconnect, device number 49 [ 676.480037][T14321] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 676.480247][T14321] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 676.532497][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 676.532528][ T10] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 676.533295][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 676.533308][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 676.534884][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.534898][ T10] usb 4-1: Product: syz [ 676.534906][ T10] usb 4-1: Manufacturer: syz [ 676.534914][ T10] usb 4-1: SerialNumber: syz [ 676.560857][ T25] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 676.571139][ T10] usb 4-1: selecting invalid altsetting 1 [ 676.571834][ T10] usb 4-1: unit 6 not found! [ 676.650729][ T6095] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 676.650850][ T5701] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 676.712502][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 676.712553][ T25] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 676.713392][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 676.713414][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 676.715755][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.715770][ T25] usb 3-1: Product: syz [ 676.715778][ T25] usb 3-1: Manufacturer: syz [ 676.715786][ T25] usb 3-1: SerialNumber: syz [ 676.732719][ T25] usb 3-1: selecting invalid altsetting 1 [ 676.800990][ T6095] usb 2-1: Using ep0 maxpacket: 16 [ 676.801554][ T5701] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 676.801837][ T6095] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 676.802932][ T6095] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 676.802960][ T6095] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 676.803081][ T5701] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.803096][ T5701] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 676.803110][ T5701] usb 5-1: config 0 interface 0 has no altsetting 0 [ 676.803127][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.806214][ T6095] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.806238][ T6095] usb 2-1: Product: syz [ 676.806253][ T6095] usb 2-1: Manufacturer: syz [ 676.806288][ T6095] usb 2-1: SerialNumber: syz [ 676.808917][ T5701] usb 5-1: config 0 descriptor?? [ 676.858921][ T6095] usb 2-1: config 0 descriptor?? [ 676.865602][ T6095] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 676.865635][ T6095] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 677.419418][ T5701] usbhid 5-1:0.0: can't add hid device: -71 [ 677.419484][ T5701] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 677.438899][ T5701] usb 5-1: USB disconnect, device number 59 [ 677.470596][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 677.472654][ T25] usb 3-1: unit 6 not found! [ 677.521484][ T6151] udevd[6151]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 677.609605][T16385] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 677.651228][ T10] usb 4-1: USB disconnect, device number 69 [ 677.664472][ T6095] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 677.665059][ T6095] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 677.665414][ T6095] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 677.665430][ T6095] em28xx 2-1:0.0: No AC97 audio processor [ 677.687516][ T6095] usb 2-1: USB disconnect, device number 72 [ 677.690121][ T6095] em28xx 2-1:0.0: Disconnecting em28xx [ 677.709338][ T6095] em28xx: Freeing device [ 677.956507][ T25] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 677.998889][ T6151] udevd[6151]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 678.136163][ T25] usb 3-1: USB disconnect, device number 72 [ 678.960480][T16426] binder: 16425:16426 ioctl c0306201 200000004a40 returned -22 [ 679.166040][T16431] FAULT_INJECTION: forcing a failure. [ 679.166040][T16431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 679.166077][T16431] CPU: 1 UID: 0 PID: 16431 Comm: syz.0.3615 Tainted: G L syzkaller #0 PREEMPT(full) [ 679.166104][T16431] Tainted: [L]=SOFTLOCKUP [ 679.166112][T16431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 679.166123][T16431] Call Trace: [ 679.166132][T16431] [ 679.166141][T16431] dump_stack_lvl+0xe8/0x150 [ 679.166175][T16431] should_fail_ex+0x410/0x560 [ 679.166206][T16431] _copy_from_user+0x2d/0xb0 [ 679.166235][T16431] rawv6_setsockopt+0x221/0x5e0 [ 679.166380][T16431] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 679.166412][T16431] ? sock_common_setsockopt+0x36/0xc0 [ 679.166446][T16431] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 679.166472][T16431] do_sock_setsockopt+0x17c/0x1b0 [ 679.166505][T16431] __x64_sys_setsockopt+0x13d/0x1b0 [ 679.166539][T16431] do_syscall_64+0x166/0x520 [ 679.166568][T16431] ? trace_irq_disable+0x3b/0x140 [ 679.166589][T16431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.166611][T16431] ? clear_bhb_loop+0x70/0xc0 [ 679.166635][T16431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.166655][T16431] RIP: 0033:0x7f440eb9e159 [ 679.166674][T16431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.166692][T16431] RSP: 002b:00007f440f9d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 679.166717][T16431] RAX: ffffffffffffffda RBX: 00007f440ee25fa0 RCX: 00007f440eb9e159 [ 679.166732][T16431] RDX: 0000000000000005 RSI: 00000000000000ff RDI: 0000000000000003 [ 679.166744][T16431] RBP: 00007f440f9d2090 R08: 0000000000000004 R09: 0000000000000000 [ 679.166756][T16431] R10: 0000200000002d80 R11: 0000000000000246 R12: 0000000000000001 [ 679.166766][T16431] R13: 00007f440ee26038 R14: 00007f440ee25fa0 R15: 00007f440ef4fa48 [ 679.166791][T16431] [ 679.212037][T16427] batman_adv: batadv0: Adding interface: syzkaller0 [ 679.212055][T16427] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.212086][T16427] batman_adv: batadv0: Interface activated: syzkaller0 [ 679.593481][T16429] fuse: Unknown parameter '&7lgwޙUn7R f9;+xK¸AGf`0?Yo.a-$' M'zRv|ob9lT9`L:w9f `:ɒ [ 679.593481][T16429] &[[J2+1R' [ 679.816785][T16422] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 679.833677][T16422] batman_adv: batadv0: Removing interface: syzkaller0 [ 679.951268][ T5702] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 679.991261][T13959] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 680.030779][ T5701] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 680.100743][ T5702] usb 3-1: Using ep0 maxpacket: 8 [ 680.101453][ T5702] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 680.102405][ T5702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.108864][ T5702] pvrusb2: Hardware description: Terratec Grabster AV400 [ 680.108904][ T5702] pvrusb2: ********** [ 680.108912][ T5702] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 680.108923][ T5702] pvrusb2: Important functionality might not be entirely working. [ 680.108932][ T5702] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 680.108943][ T5702] pvrusb2: ********** [ 680.183395][ T5701] usb 1-1: unable to get BOS descriptor or descriptor too short [ 680.183444][ T5701] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 680.184569][ T5701] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 680.184594][ T5701] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 680.217945][T13959] usb 2-1: Using ep0 maxpacket: 16 [ 680.232578][ T25] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 680.241816][T13959] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 680.245377][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.245404][ T5701] usb 1-1: Product: syz [ 680.245419][ T5701] usb 1-1: Manufacturer: syz [ 680.245434][ T5701] usb 1-1: SerialNumber: syz [ 680.245473][T13959] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 680.245500][T13959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 680.268745][T13959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.268763][T13959] usb 2-1: Product: syz [ 680.268771][T13959] usb 2-1: Manufacturer: syz [ 680.268780][T13959] usb 2-1: SerialNumber: syz [ 680.341684][T13959] usb 2-1: config 0 descriptor?? [ 680.350235][T13959] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 680.350271][T13959] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 680.372406][ T5701] usb 1-1: selecting invalid altsetting 1 [ 680.372975][ T5701] usb 1-1: unit 6 not found! [ 680.410809][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 680.412208][ T25] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 680.413647][ T2347] pvrusb2: Invalid write control endpoint [ 680.455808][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.455838][ T25] usb 4-1: Product: syz [ 680.455854][ T25] usb 4-1: Manufacturer: syz [ 680.455870][ T25] usb 4-1: SerialNumber: syz [ 680.529687][T16454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3625'. [ 680.561554][T16454] vlan2: entered promiscuous mode [ 680.561578][T16454] bond0: entered promiscuous mode [ 680.606378][ T2347] pvrusb2: Invalid write control endpoint [ 680.606391][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 680.606397][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 680.606402][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 680.606426][ T2347] pvrusb2: Device being rendered inoperable [ 680.606568][ T2347] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 680.606659][ T2347] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 680.613852][ T2347] pvrusb2: Attached sub-driver cx25840 [ 680.613866][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 680.613876][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 680.772122][T16439] pvrusb2: Attempted to execute control transfer when device not ok [ 680.773686][T14321] usb 3-1: USB disconnect, device number 73 [ 680.809451][T16454] netlink: 'syz.4.3625': attribute type 10 has an invalid length. [ 680.854801][T16454] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 680.873623][T16454] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 680.874141][T16454] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 681.017579][T16459] binder: 16458:16459 ioctl c0306201 200000004a40 returned -22 [ 681.118315][T16463] FAULT_INJECTION: forcing a failure. [ 681.118315][T16463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.118352][T16463] CPU: 1 UID: 0 PID: 16463 Comm: syz.4.3627 Tainted: G L syzkaller #0 PREEMPT(full) [ 681.118379][T16463] Tainted: [L]=SOFTLOCKUP [ 681.118386][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 681.118398][T16463] Call Trace: [ 681.118409][T16463] [ 681.118418][T16463] dump_stack_lvl+0xe8/0x150 [ 681.118441][T16463] should_fail_ex+0x410/0x560 [ 681.118467][T16463] _copy_from_user+0x2d/0xb0 [ 681.118497][T16463] ___sys_sendmsg+0x1c6/0x360 [ 681.118526][T16463] ? __lock_acquire+0x747/0x2de0 [ 681.118545][T16463] ? __pfx____sys_sendmsg+0x10/0x10 [ 681.118576][T16463] ? __fget_files+0x2a/0x420 [ 681.118591][T16463] ? __fget_files+0x3a2/0x420 [ 681.118623][T16463] __x64_sys_sendmsg+0x1b1/0x290 [ 681.118655][T16463] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 681.118703][T16463] do_syscall_64+0x166/0x520 [ 681.118719][T16463] ? trace_irq_disable+0x3b/0x140 [ 681.118731][T16463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.118741][T16463] ? clear_bhb_loop+0x70/0xc0 [ 681.118758][T16463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.118778][T16463] RIP: 0033:0x7f5d8cb9e159 [ 681.118796][T16463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.118814][T16463] RSP: 002b:00007f5d8da65028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 681.118836][T16463] RAX: ffffffffffffffda RBX: 00007f5d8ce25fa0 RCX: 00007f5d8cb9e159 [ 681.118848][T16463] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 681.118856][T16463] RBP: 00007f5d8da65090 R08: 0000000000000000 R09: 0000000000000000 [ 681.118863][T16463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.118869][T16463] R13: 00007f5d8ce26038 R14: 00007f5d8ce25fa0 R15: 00007f5d8cf4fa48 [ 681.118886][T16463] [ 681.225452][ T5701] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 681.338183][ T25] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 681.338210][ T25] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 681.339032][ T25] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 681.407992][T16444] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 681.465269][ T8996] udevd[8996]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 681.497918][ T25] usb 4-1: USB disconnect, device number 70 [ 681.611955][ T6095] usb 1-1: USB disconnect, device number 50 [ 681.760782][ T5701] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 681.841115][T13959] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 681.842086][T13959] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 681.842470][T13959] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 681.842488][T13959] em28xx 2-1:0.0: No AC97 audio processor [ 681.913969][ T5701] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 681.914919][ T5701] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.914950][ T5701] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 681.914969][ T5701] usb 5-1: config 0 interface 0 has no altsetting 0 [ 681.914989][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.954745][ T5701] usb 5-1: config 0 descriptor?? [ 682.458295][T16478] FAULT_INJECTION: forcing a failure. [ 682.458295][T16478] name failslab, interval 1, probability 0, space 0, times 0 [ 682.458317][T16478] CPU: 0 UID: 0 PID: 16478 Comm: syz.2.3629 Tainted: G L syzkaller #0 PREEMPT(full) [ 682.458333][T16478] Tainted: [L]=SOFTLOCKUP [ 682.458337][T16478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 682.458344][T16478] Call Trace: [ 682.458351][T16478] [ 682.458356][T16478] dump_stack_lvl+0xe8/0x150 [ 682.458375][T16478] should_fail_ex+0x410/0x560 [ 682.458391][T16478] ? __alloc_skb+0x1db/0x7a0 [ 682.458405][T16478] should_failslab+0xa8/0x100 [ 682.458420][T16478] ? __alloc_skb+0x1db/0x7a0 [ 682.458433][T16478] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 682.458445][T16478] ? __alloc_skb+0x18d/0x7a0 [ 682.458458][T16478] ? __alloc_skb+0x1db/0x7a0 [ 682.458474][T16478] __alloc_skb+0x1db/0x7a0 [ 682.458490][T16478] netlink_sendmsg+0x5d4/0xb40 [ 682.458574][T16478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.458590][T16478] ? apparmor_socket_sendmsg+0x98/0x360 [ 682.458605][T16478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.458615][T16478] sock_sendmsg_nosec+0x13a/0x180 [ 682.458636][T16478] sock_write_iter+0x2de/0x3e0 [ 682.458667][T16478] ? __pfx_sock_write_iter+0x10/0x10 [ 682.458702][T16478] do_iter_readv_writev+0x612/0x8c0 [ 682.458728][T16478] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 682.458751][T16478] ? bpf_lsm_file_permission+0x9/0x20 [ 682.458778][T16478] ? security_file_permission+0x75/0x260 [ 682.458801][T16478] ? rw_verify_area+0x203/0x4c0 [ 682.458835][T16478] vfs_writev+0x343/0x990 [ 682.458866][T16478] ? __pfx_vfs_writev+0x10/0x10 [ 682.458887][T16478] ? __fget_files+0x2a/0x420 [ 682.458904][T16478] ? __fget_files+0x3a2/0x420 [ 682.458918][T16478] ? __fget_files+0x2a/0x420 [ 682.458936][T16478] do_writev+0x154/0x2e0 [ 682.458951][T16478] ? __pfx_do_writev+0x10/0x10 [ 682.458968][T16478] do_syscall_64+0x166/0x520 [ 682.458984][T16478] ? trace_irq_disable+0x3b/0x140 [ 682.458996][T16478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.459007][T16478] ? clear_bhb_loop+0x70/0xc0 [ 682.459019][T16478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.459030][T16478] RIP: 0033:0x7ff88ad9e159 [ 682.459041][T16478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.459051][T16478] RSP: 002b:00007ff88bbc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 682.459063][T16478] RAX: ffffffffffffffda RBX: 00007ff88b026180 RCX: 00007ff88ad9e159 [ 682.459071][T16478] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009 [ 682.459078][T16478] RBP: 00007ff88bbc4090 R08: 0000000000000000 R09: 0000000000000000 [ 682.459086][T16478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.459092][T16478] R13: 00007ff88b026218 R14: 00007ff88b026180 R15: 00007ff88b14fa48 [ 682.459108][T16478] [ 682.603125][ T6095] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 682.764692][ T6095] usb 1-1: Using ep0 maxpacket: 8 [ 682.766178][ T6095] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 682.770216][ T6095] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.795298][ T6095] usb 1-1: config 0 descriptor?? [ 682.809876][ T6095] usb 1-1: probing VID:PID(0424:012C) [ 682.824646][ T6095] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 682.824672][ T6095] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 682.824715][ T6095] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 682.824733][ T6095] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 682.824757][ T6095] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 682.904805][ T5701] sony 0003:054C:0268.0062: can't set operational mode: step 1 [ 682.904856][ T5701] sony 0003:054C:0268.0062: Failed to set controller into operational mode [ 682.927705][ T5701] sony 0003:054C:0268.0062: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 054c:0268] on usb-dummy_hcd.4-1/input0 [ 682.927726][ T5701] sony 0003:054C:0268.0062: failed to claim input [ 682.968561][ T10] usb 2-1: USB disconnect, device number 73 [ 682.981738][ T10] em28xx 2-1:0.0: Disconnecting em28xx [ 682.989667][ T10] em28xx: Freeing device [ 683.063210][ T5701] usb 5-1: USB disconnect, device number 60 [ 683.206791][ T6095] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 683.521080][ T6095] usb 1-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 683.759109][T16494] FAULT_INJECTION: forcing a failure. [ 683.759109][T16494] name failslab, interval 1, probability 0, space 0, times 0 [ 683.759146][T16494] CPU: 1 UID: 0 PID: 16494 Comm: syz.3.3638 Tainted: G L syzkaller #0 PREEMPT(full) [ 683.759173][T16494] Tainted: [L]=SOFTLOCKUP [ 683.759181][T16494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 683.759193][T16494] Call Trace: [ 683.759201][T16494] [ 683.759210][T16494] dump_stack_lvl+0xe8/0x150 [ 683.759244][T16494] should_fail_ex+0x410/0x560 [ 683.759273][T16494] should_failslab+0xa8/0x100 [ 683.759300][T16494] __kmalloc_noprof+0xfe/0x720 [ 683.759322][T16494] ? rcu_is_watching+0x16/0xb0 [ 683.759347][T16494] ? tomoyo_realpath_from_path+0xef/0x640 [ 683.759376][T16494] ? tomoyo_realpath_from_path+0xef/0x640 [ 683.759413][T16494] tomoyo_realpath_from_path+0xef/0x640 [ 683.759452][T16494] ? tomoyo_path_number_perm+0x219/0x5f0 [ 683.759477][T16494] tomoyo_path_number_perm+0x246/0x5f0 [ 683.759514][T16494] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 683.759538][T16494] ? __lock_acquire+0x747/0x2de0 [ 683.759573][T16494] ? hook_file_ioctl+0x1f2/0x600 [ 683.759618][T16494] ? __fget_files+0x2a/0x420 [ 683.759650][T16494] ? __fget_files+0x2a/0x420 [ 683.759678][T16494] ? __fget_files+0x3a2/0x420 [ 683.759706][T16494] ? __fget_files+0x2a/0x420 [ 683.759739][T16494] security_file_ioctl+0xc3/0x2a0 [ 683.759766][T16494] __se_sys_ioctl+0x47/0x170 [ 683.759792][T16494] do_syscall_64+0x166/0x520 [ 683.759821][T16494] ? trace_irq_disable+0x3b/0x140 [ 683.759840][T16494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.759859][T16494] ? clear_bhb_loop+0x70/0xc0 [ 683.759883][T16494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.759902][T16494] RIP: 0033:0x7f3cfdb9e159 [ 683.759921][T16494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.759939][T16494] RSP: 002b:00007f3cfea20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 683.759960][T16494] RAX: ffffffffffffffda RBX: 00007f3cfde25fa0 RCX: 00007f3cfdb9e159 [ 683.759976][T16494] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 683.759989][T16494] RBP: 00007f3cfea20090 R08: 0000000000000000 R09: 0000000000000000 [ 683.760001][T16494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.760013][T16494] R13: 00007f3cfde26038 R14: 00007f3cfde25fa0 R15: 00007f3cfdf4fa48 [ 683.760041][T16494] [ 683.830946][T16497] kvm: apic: phys broadcast and lowest prio [ 683.902506][T16494] ERROR: Out of memory at tomoyo_realpath_from_path. [ 684.174741][T16492] kvm: apic: phys broadcast and lowest prio [ 684.187156][ T25] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 684.198303][T16502] FAULT_INJECTION: forcing a failure. [ 684.198303][T16502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 684.198337][T16502] CPU: 1 UID: 0 PID: 16502 Comm: syz.2.3640 Tainted: G L syzkaller #0 PREEMPT(full) [ 684.198364][T16502] Tainted: [L]=SOFTLOCKUP [ 684.198371][T16502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 684.198382][T16502] Call Trace: [ 684.198391][T16502] [ 684.198399][T16502] dump_stack_lvl+0xe8/0x150 [ 684.198431][T16502] should_fail_ex+0x410/0x560 [ 684.198460][T16502] _copy_from_user+0x2d/0xb0 [ 684.198487][T16502] ___sys_sendmsg+0x1c6/0x360 [ 684.198515][T16502] ? __lock_acquire+0x747/0x2de0 [ 684.198542][T16502] ? __pfx____sys_sendmsg+0x10/0x10 [ 684.198601][T16502] ? __fget_files+0x2a/0x420 [ 684.198628][T16502] ? __fget_files+0x3a2/0x420 [ 684.198664][T16502] __x64_sys_sendmsg+0x1b1/0x290 [ 684.198695][T16502] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 684.198743][T16502] do_syscall_64+0x166/0x520 [ 684.198770][T16502] ? trace_irq_disable+0x3b/0x140 [ 684.198790][T16502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.198810][T16502] ? clear_bhb_loop+0x70/0xc0 [ 684.198834][T16502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.198853][T16502] RIP: 0033:0x7ff88ad9e159 [ 684.198871][T16502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.198891][T16502] RSP: 002b:00007ff88bc06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 684.198912][T16502] RAX: ffffffffffffffda RBX: 00007ff88b025fa0 RCX: 00007ff88ad9e159 [ 684.198928][T16502] RDX: 000000002400800c RSI: 00002000000002c0 RDI: 0000000000000003 [ 684.198941][T16502] RBP: 00007ff88bc06090 R08: 0000000000000000 R09: 0000000000000000 [ 684.198954][T16502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.198967][T16502] R13: 00007ff88b026038 R14: 00007ff88b025fa0 R15: 00007ff88b14fa48 [ 684.199003][T16502] [ 684.400394][ T25] usb 5-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 684.410540][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 684.410589][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 684.420839][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.802324][ T6095] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 684.930833][ T5701] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 684.950977][T13959] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 684.963246][ T6095] usb 3-1: unable to get BOS descriptor or descriptor too short [ 684.963292][ T6095] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 684.964498][ T6095] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 684.964542][ T6095] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 684.967552][ T6095] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.967575][ T6095] usb 3-1: Product: syz [ 684.967590][ T6095] usb 3-1: Manufacturer: syz [ 684.967626][ T6095] usb 3-1: SerialNumber: syz [ 685.017877][ T6095] usb 3-1: selecting invalid altsetting 1 [ 685.018700][ T6095] usb 3-1: unit 6 not found! [ 685.081829][ T5701] usb 2-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 685.084484][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.120711][T13959] usb 4-1: Using ep0 maxpacket: 8 [ 685.126459][T13959] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 685.127807][T13959] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.127852][T13959] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 685.127901][T13959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 685.127927][T13959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 685.127949][T13959] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 685.208048][T13959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 685.208077][T13959] usb 4-1: Product: syz [ 685.208092][T13959] usb 4-1: Manufacturer: syz [ 685.208106][T13959] usb 4-1: SerialNumber: syz [ 685.223850][T13959] usb 4-1: config 0 descriptor?? [ 685.270002][ T10] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 685.273998][ T10] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 685.275518][ T10] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 685.286760][ T5702] usb 1-1: USB disconnect, device number 51 [ 685.315059][ T5701] usb 2-1: NFC: Reader power on cmd error 0 [ 685.315105][ T5701] pn533_usb 2-1:1.0: NFC: Couldn't poweron the reader (error -22) [ 685.315249][ T5701] pn533_usb 2-1:1.0: probe with driver pn533_usb failed with error -22 [ 685.480012][T13959] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 685.480039][T13959] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 685.651237][T16508] syz.1.3644 (16508): drop_caches: 2 [ 685.684346][T13959] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 685.684390][T13959] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 685.684402][T13959] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 685.723724][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.723777][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.887584][T13959] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 685.887864][ T25] usb 5-1: USB disconnect, device number 61 [ 685.960300][ T5702] ------------[ cut here ]------------ [ 685.960311][ T5702] ODEBUG: free active (active state 0) object: ffff8880337fd270 object type: timer_list hint: vub300_inactivity_timer_expired+0x0/0x3f0 [ 685.960441][ T5702] WARNING: lib/debugobjects.c:632 at debug_print_object+0xec/0x230, CPU#1: kworker/1:7/5702 [ 685.990186][ T5702] Modules linked in: [ 685.994176][ T5702] CPU: 1 UID: 0 PID: 5702 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 686.005240][ T5702] Tainted: [L]=SOFTLOCKUP [ 686.010220][ T5702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 686.020890][ T5702] Workqueue: usb_hub_wq hub_event [ 686.027090][ T5702] RIP: 0010:debug_print_object+0x18a/0x230 [ 686.033015][ T5702] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 dd bc 4c fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 73 2f 8f 0b 48 83 c4 10 5b 41 5c [ 686.051105][ T6095] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 686.061825][ T5702] RSP: 0018:ffffc90004957218 EFLAGS: 00010246 [ 686.067934][ T5702] RAX: 1ffffffff181f074 RBX: dffffc0000000000 RCX: 0000000000000000 [ 686.076318][ T5702] RDX: ffffffff8c6db940 RSI: ffffffff8c6db3c0 RDI: ffffffff90858880 [ 686.084579][ T5702] RBP: ffffffff8c6db940 R08: ffff8880337fd270 R09: ffffffff8c0f9700 [ 686.087149][ T6151] udevd[6151]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 686.108894][ T5702] R10: dffffc0000000000 R11: ffffffff81b3f5d0 R12: 0000000000000000 [ 686.117037][ T5702] R13: ffffffff90858880 R14: ffff8880337fd270 R15: ffffffff8c0f83a0 [ 686.125732][ T5702] FS: 0000000000000000(0000) GS:ffff888124dc7000(0000) knlGS:0000000000000000 [ 686.135228][ T5702] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 686.141886][ T5702] CR2: 00007fd4dedd7e9c CR3: 000000007f658000 CR4: 00000000003526f0 [ 686.149906][ T5702] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000020 [ 686.157951][ T5702] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 686.166176][ T5702] Call Trace: [ 686.171198][ T5702] [ 686.174148][ T5702] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 686.182865][ T5702] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 686.189594][ T5702] debug_check_no_obj_freed+0x2e3/0x450 [ 686.195248][ T5702] kfree+0x13e/0x650 [ 686.199158][ T5702] ? device_release+0xc4/0x1f0 [ 686.203997][ T5702] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 686.210248][ T5702] device_release+0xc4/0x1f0 [ 686.215328][ T5702] kobject_put+0x222/0x550 [ 686.219760][ T5702] ? mmc_pwrseq_free+0x86/0xa0 [ 686.225066][ T5702] vub300_disconnect+0x280/0x2f0 [ 686.230038][ T5702] usb_unbind_interface+0x295/0x9f0 [ 686.235351][ T5702] ? kernfs_remove_by_name_ns+0x101/0x140 [ 686.241151][ T5702] ? kernfs_remove_by_name_ns+0x101/0x140 [ 686.246891][ T5702] ? __pfx_usb_unbind_interface+0x10/0x10 [ 686.252680][ T5702] device_release_driver_internal+0x4f5/0x880 [ 686.258838][ T5702] bus_remove_device+0x444/0x560 [ 686.263989][ T5702] ? __pfx_bus_remove_device+0x10/0x10 [ 686.269472][ T5702] ? kernfs_remove_by_name_ns+0x101/0x140 [ 686.275292][ T5702] device_del+0x524/0x8f0 [ 686.279662][ T5702] ? __pfx_device_del+0x10/0x10 [ 686.284584][ T5702] ? kobject_put+0x516/0x550 [ 686.289424][ T5702] usb_disable_device+0x3d4/0x8d0 [ 686.294610][ T5702] usb_disconnect+0x346/0x9a0 [ 686.299327][ T5702] hub_event+0x1bbb/0x4d30 [ 686.303767][ T5702] ? __lock_acquire+0x747/0x2de0 [ 686.308722][ T5702] ? register_lock_class+0x31/0x2e0 [ 686.313976][ T5702] ? __pfx_hub_event+0x10/0x10 [ 686.319234][ T5702] ? rcu_is_watching+0x16/0xb0 [ 686.324468][ T5702] ? process_scheduled_works+0x97a/0x1630 [ 686.330222][ T5702] process_scheduled_works+0xc3d/0x1630 [ 686.335869][ T5702] ? __pfx_process_scheduled_works+0x10/0x10 [ 686.342000][ T5702] ? assign_work+0x3cf/0x5d0 [ 686.346627][ T5702] worker_thread+0xa47/0xfb0 [ 686.351352][ T5702] ? __kthread_parkme+0x71/0x1f0 [ 686.356330][ T5702] kthread+0x38b/0x480 [ 686.360416][ T5702] ? __pfx_worker_thread+0x10/0x10 [ 686.365613][ T5702] ? __pfx_kthread+0x10/0x10 [ 686.370221][ T5702] ret_from_fork+0x514/0xb70 [ 686.374898][ T5702] ? __pfx_ret_from_fork+0x10/0x10 [ 686.380025][ T5702] ? __switch_to+0xc89/0x1420 [ 686.384791][ T5702] ? __pfx_kthread+0x10/0x10 [ 686.389401][ T5702] ret_from_fork_asm+0x1a/0x30 [ 686.394236][ T5702] [ 686.397299][ T5702] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 686.404568][ T5702] CPU: 1 UID: 0 PID: 5702 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 686.415485][ T5702] Tainted: [L]=SOFTLOCKUP [ 686.419792][ T5702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 686.429847][ T5702] Workqueue: usb_hub_wq hub_event [ 686.434907][ T5702] Call Trace: [ 686.438193][ T5702] [ 686.441128][ T5702] vpanic+0x56d/0xa60 [ 686.445130][ T5702] ? __pfx__printk+0x10/0x10 [ 686.449710][ T5702] ? __pfx_vpanic+0x10/0x10 [ 686.454203][ T5702] ? is_bpf_text_address+0x292/0x2b0 [ 686.459481][ T5702] ? is_bpf_text_address+0x26/0x2b0 [ 686.464688][ T5702] panic+0xc5/0xd0 [ 686.468402][ T5702] ? __pfx_panic+0x10/0x10 [ 686.472821][ T5702] ? ret_from_fork_asm+0x1a/0x30 [ 686.477780][ T5702] __warn+0x315/0x4c0 [ 686.481770][ T5702] ? debug_print_object+0xec/0x230 [ 686.486896][ T5702] ? debug_print_object+0xec/0x230 [ 686.492009][ T5702] __report_bug+0x276/0x570 [ 686.496668][ T5702] ? debug_print_object+0xec/0x230 [ 686.501797][ T5702] ? __pfx___report_bug+0x10/0x10 [ 686.506850][ T5702] ? xas_create+0x1941/0x1bd0 [ 686.511542][ T5702] report_bug_entry+0x19b/0x290 [ 686.516408][ T5702] ? debug_print_object+0x18a/0x230 [ 686.521609][ T5702] ? debug_print_object+0x18f/0x230 [ 686.526825][ T5702] handle_bug+0xce/0x200 [ 686.531076][ T5702] exc_invalid_op+0x1a/0x50 [ 686.535581][ T5702] asm_exc_invalid_op+0x1a/0x20 [ 686.540431][ T5702] RIP: 0010:debug_print_object+0x18a/0x230 [ 686.546246][ T5702] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 dd bc 4c fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 73 2f 8f 0b 48 83 c4 10 5b 41 5c [ 686.565859][ T5702] RSP: 0018:ffffc90004957218 EFLAGS: 00010246 [ 686.571929][ T5702] RAX: 1ffffffff181f074 RBX: dffffc0000000000 RCX: 0000000000000000 [ 686.579898][ T5702] RDX: ffffffff8c6db940 RSI: ffffffff8c6db3c0 RDI: ffffffff90858880 [ 686.587872][ T5702] RBP: ffffffff8c6db940 R08: ffff8880337fd270 R09: ffffffff8c0f9700 [ 686.595840][ T5702] R10: dffffc0000000000 R11: ffffffff81b3f5d0 R12: 0000000000000000 [ 686.603809][ T5702] R13: ffffffff90858880 R14: ffff8880337fd270 R15: ffffffff8c0f83a0 [ 686.611788][ T5702] ? __pfx_timer_debug_hint+0x10/0x10 [ 686.617173][ T5702] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 686.623850][ T5702] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 686.630530][ T5702] debug_check_no_obj_freed+0x2e3/0x450 [ 686.636096][ T5702] kfree+0x13e/0x650 [ 686.639990][ T5702] ? device_release+0xc4/0x1f0 [ 686.644765][ T5702] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 686.650926][ T5702] device_release+0xc4/0x1f0 [ 686.655536][ T5702] kobject_put+0x222/0x550 [ 686.659949][ T5702] ? mmc_pwrseq_free+0x86/0xa0 [ 686.664717][ T5702] vub300_disconnect+0x280/0x2f0 [ 686.669672][ T5702] usb_unbind_interface+0x295/0x9f0 [ 686.674878][ T5702] ? kernfs_remove_by_name_ns+0x101/0x140 [ 686.680605][ T5702] ? kernfs_remove_by_name_ns+0x101/0x140 [ 686.686330][ T5702] ? __pfx_usb_unbind_interface+0x10/0x10 [ 686.692056][ T5702] device_release_driver_internal+0x4f5/0x880 [ 686.698135][ T5702] bus_remove_device+0x444/0x560 [ 686.703075][ T5702] ? __pfx_bus_remove_device+0x10/0x10 [ 686.708542][ T5702] ? kernfs_remove_by_name_ns+0x101/0x140 [ 686.714272][ T5702] device_del+0x524/0x8f0 [ 686.718628][ T5702] ? __pfx_device_del+0x10/0x10 [ 686.723493][ T5702] ? kobject_put+0x516/0x550 [ 686.728101][ T5702] usb_disable_device+0x3d4/0x8d0 [ 686.733182][ T5702] usb_disconnect+0x346/0x9a0 [ 686.737890][ T5702] hub_event+0x1bbb/0x4d30 [ 686.742313][ T5702] ? __lock_acquire+0x747/0x2de0 [ 686.747278][ T5702] ? register_lock_class+0x31/0x2e0 [ 686.752505][ T5702] ? __pfx_hub_event+0x10/0x10 [ 686.757282][ T5702] ? rcu_is_watching+0x16/0xb0 [ 686.762055][ T5702] ? process_scheduled_works+0x97a/0x1630 [ 686.767783][ T5702] process_scheduled_works+0xc3d/0x1630 [ 686.773367][ T5702] ? __pfx_process_scheduled_works+0x10/0x10 [ 686.779358][ T5702] ? assign_work+0x3cf/0x5d0 [ 686.783961][ T5702] worker_thread+0xa47/0xfb0 [ 686.788568][ T5702] ? __kthread_parkme+0x71/0x1f0 [ 686.793518][ T5702] kthread+0x38b/0x480 [ 686.797586][ T5702] ? __pfx_worker_thread+0x10/0x10 [ 686.802697][ T5702] ? __pfx_kthread+0x10/0x10 [ 686.807289][ T5702] ret_from_fork+0x514/0xb70 [ 686.811881][ T5702] ? __pfx_ret_from_fork+0x10/0x10 [ 686.817000][ T5702] ? __switch_to+0xc89/0x1420 [ 686.821687][ T5702] ? __pfx_kthread+0x10/0x10 [ 686.826286][ T5702] ret_from_fork_asm+0x1a/0x30 [ 686.831080][ T5702] [ 686.834388][ T5702] Kernel Offset: disabled [ 686.838705][ T5702] Rebooting in 86400 seconds..