last executing test programs: 11.092371718s ago: executing program 2 (id=1797): syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[], 0x0) (async) syz_emit_ethernet(0x61, &(0x7f0000000080)={@link_local, @remote, @void, {@ipv4={0x800, @tipc={{0xd, 0x4, 0x2, 0x8, 0x53, 0x64, 0x0, 0x7, 0x6, 0x0, @local, @remote, {[@rr={0x7, 0x1f, 0xa3, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, @rand_addr=0x64010100, @loopback, @multicast2]}]}}, @payload_conn={{{0x1f, 0x0, 0x1, 0x1, 0x1, 0x6, 0x0, 0x2, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8000, 0xfff9, 0x3, 0x4e24, 0x4e22}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) 10.456986909s ago: executing program 2 (id=1798): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x78f5, &(0x7f000000a9c0)={0x0, 0x36f4, 0x102}, &(0x7f000000aa40), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x2, &(0x7f0000000000)={0x5a, 0x0, 0x0, 0x0}, 0xfffffffffffffeb1) syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x78f5, &(0x7f000000a9c0)={0x0, 0x36f4, 0x102}, &(0x7f000000aa40), &(0x7f0000000040)) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x2, &(0x7f0000000000)={0x5a, 0x0, 0x0, 0x0}, 0xfffffffffffffeb1) (async) syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) 10.360814758s ago: executing program 2 (id=1799): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002000400baacfb276a25ebe4d93aac0d19979f7212adafdb410a3298736a09f57af39f8ec0f6606712e9c849dd3ea40ae50999d3270a627578f296ba8fc3aec66edce39d03acf3616afad8b06fa27ae8678a0564680caba2abe2d218e0af3ecda5e51b6ea66a8f"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0xa, 0xe2, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd0, 0x2, 0x1, 0x1, 0x0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xa0ec, 0x4655, 0x7}, {0x6, 0x24, 0x1a, 0x5, 0x2}, [@mdlm_detail={0x55, 0x24, 0x13, 0xd, "0cd8f6efcd4520c907ff56c15c95ff3feb059ce4fd9f018d25242d9361ff1db96523221e125a51d97459252c5bd3d33be6ed97769ee7e61cf4d13587b818609b2e3e3f5bd85fa48c43383be3c79c4a06db"}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0xf, 0x9, 0xb}, @network_terminal={0x7, 0x24, 0xa, 0xc, 0xa, 0x4, 0xf}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x7, 0x8, 0x6, 0xae1, 0x7}, @obex={0x5, 0x24, 0x15, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x4, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0x6, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7f, 0x3, 0xc}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x7, 0x6, 0x5, 0x8, 0x4}, 0x11, &(0x7f0000000740)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x7, 0xf000, 0x4}]}, 0x7, [{0xfd, &(0x7f0000000380)=@string={0xfd, 0x3, "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"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x3009}}, {0xec, &(0x7f0000000500)=@string={0xec, 0x3, "cf7c570c31c4141b8b27da1794c2fb82e80d0b6011215226b6301b61629fdebc6a966953d384e0627b4e885b6f4b3d07cfaf45d5cf8028273969241dfd3ce727b3cb0528e9b861b7228db837ede62466a99b87710d86fbc2ab407cb96915974ca6c34171d2b71456a1c836aaf439d35aebf570ec6ead0208e27f945fbaa3b8dd42fec8e88e2e734a6faa86d8c21ced5e9e577ac4fa4e67eaa87a284f6205604a23eee903f9c919c389158cbc2c89313e1efd930de547f47916ad53381c88a447b9dc36403066297a285e6b628328999c12c11cf7b067f5b28c8bdc66cfda1f89a8bb9aa8db8f0ebcdb59"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x411}}]}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0xc, @sdr={0x47524247, 0x7}}) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120110011837fb106d0481c2da5c01020301240212"], 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) 9.72539348s ago: executing program 2 (id=1800): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000440)=0x8) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10) r2 = syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414001824d0072413"], 0x0) syz_usb_ep_write(r2, 0x4, 0xfb, &(0x7f0000000080)="4ccf340851aaee720a2a7bc6fe0471e6696b00940b1f0fe3e9c8fa4dfb0d3c253e668b73dfd3e2f20a569a9ff4123863ad4152db8e47336f5d90312c3e7fb2b601daeafadafb132bf8c319d8ca5f54e40bd740e636a423c4c4cc0dbdeed17fe70a05e93130d90858697936fe7f6b79c4e822dd962a86e1d5ff48489558ea582e60e189af4ce2cc8772ffa2938a9e48f15da92507fcdfc5a86914287c1d03927324fbf05f35b943fc865cdb1ba80ef7856da62a09786f82718eb272f5bc965642e5a1b3871b5b38073ab77364c1da99bf621bf4db25af54c3d9b377af3b95ded04b2fe874e2a60a02392fb3b11b56235ba350587116f644ffc0bd3e") 9.147329287s ago: executing program 2 (id=1802): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYBLOB="0000000000000000b702000014000000b702"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000d00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 8.940912712s ago: executing program 2 (id=1804): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_setup(0x3, &(0x7f00000003c0)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd70000000000002"], 0x78}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x208) shutdown(r4, 0x1) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000180), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@deltclass={0x54, 0x29, 0x4, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xb}, {0xfff2, 0xf}, {0x6, 0xffe0}}, [@tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_clsact={0xb}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x90) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x6, &(0x7f0000000080)) fchdir(0xffffffffffffffff) io_submit(r1, 0x1, &(0x7f00000006c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x3, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 8.827797814s ago: executing program 3 (id=1806): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e000000100000000300000000000cbff000000000700000001441f07"], 0x50}, 0x200040c4) 8.679023713s ago: executing program 3 (id=1808): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001"]) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x6c) fcntl$notify(r3, 0x402, 0x8) preadv(r3, 0x0, 0x0, 0x0, 0x1000) syz_usb_connect(0x3, 0x58, &(0x7f0000000240)=ANY=[@ANYRES64=r1], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) 6.856963955s ago: executing program 1 (id=1818): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x1000001c}) write$UHID_INPUT(r1, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000000)=""/184, 0xb8}, {&(0x7f0000000380)=""/242, 0xf2}, {&(0x7f0000000480)=""/4085, 0xff5}], 0x3}}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) socket(0x10, 0x3, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) (async) epoll_create(0x7) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x1000001c}) (async) write$UHID_INPUT(r1, 0x0, 0x0) (async) recvmmsg$unix(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000000)=""/184, 0xb8}, {&(0x7f0000000380)=""/242, 0xf2}, {&(0x7f0000000480)=""/4085, 0xff5}], 0x3}}], 0x1, 0x0, 0x0) (async) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) 6.822489539s ago: executing program 1 (id=1819): r0 = dup(0xffffffffffffffff) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="b932060000b800000100ba000000000f3066ba2100b8d9000000ef66bad10466edc4c2cdbf5b020f22a42e0f73d506f30f00d3b9a2020000b888000000ba000000000f30440f20c03509000000440f22c0d2832c6b0000", 0x57}], 0x1, 0x0, &(0x7f0000000100)=[@cr0={0x0, 0x60000020}], 0x1) close_range(r0, r1, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)=@overlay={0x236e, 0x2, 0x4, 0x800, 0x0, {0x77359400}, {0x5, 0xc, 0x6, 0xd, 0xa2, 0x7, "51235b8b"}, 0xa, 0x3, {}, 0x1, 0x0, r0}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x527000, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000300)=@multiplanar_fd={0x1, 0x0, 0x4, 0x70000, 0x2, {r4, r5/1000+10000}, {0x1, 0x8, 0x3, 0x2, 0x6, 0xe, "8d5e3ec1"}, 0x80000001, 0x4, {&(0x7f0000000280)=[{0x80000000, 0x7, {r0}, 0x6}, {0x7, 0x8, {r1}, 0xd9}]}, 0x7}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000400)=@multiplanar_fd={0x0, 0x3, 0x4, 0x20, 0x8e, {}, {0x6ce775a45af29826, 0x0, 0x0, 0xff, 0xff, 0x6, "298a918c"}, 0x6, 0x4, {&(0x7f0000000380)=[{0x5, 0x4, {r6}, 0xfffffff9}, {0xd4, 0x3, {r1}, 0x3}]}, 0xc2cb}) timerfd_create(0x8, 0x80000) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000024c0)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f00000025c0)=0xe8) getresgid(&(0x7f0000002600)=0x0, &(0x7f0000002640)=0x0, &(0x7f0000002680)) write$FUSE_ATTR(r3, &(0x7f00000026c0)={0x78, 0xfffffffffffffffe, r7, {0x10, 0x9, 0x0, {0x0, 0x800, 0x6, 0x7, 0x5, 0x1, 0x9, 0x7, 0x1, 0x4000, 0x5, r10, r11, 0x10001, 0x2}}}, 0x78) r13 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r13, 0x0, 0x10, &(0x7f0000002740)={{{@in=@multicast1, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000002840)=0xe8) r14 = openat2(r0, &(0x7f0000002880)='./file0\x00', &(0x7f00000028c0)={0x4100, 0x95, 0x26}, 0x18) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000002900)={0x8000, 0x8, 0x5, 0x1, 0x6}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000004cc0)=[{&(0x7f0000002940)=""/171, 0xab}, {&(0x7f0000002a00)=""/127, 0x7f}, {&(0x7f0000002a80)=""/123, 0x7b}, {&(0x7f0000002b00)}, {&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000003b40)=""/42, 0x2a}, {&(0x7f0000003b80)=""/9, 0x9}, {&(0x7f0000003bc0)=""/242, 0xf2}, {&(0x7f0000003cc0)=""/4096, 0x1000}], 0x9) r15 = syz_clone(0x88100400, &(0x7f0000004d80)="b534ae4dcd20154ff16d0620c049f2218f16aada7f7253191e73ccea59d8fa1e2c651ef2592b3ce2eb8bd2c04a0d20e86b66b0c21937126fec6aadf0449e776650ad252d90791924d12441223b5a5f61edbe5e0df20c14243e0090bff9c4cec45b0a5beb7cf0c86b59e3a560dc495a37b0493ffd7ee3a499c0cc57007875d78b9f5a3c2845e8cd0f7b4c8d5ee977793c00cf7b08a4dca9f07a2d66b821e88ecf9b878c689ca4f4d9535294e2bba7521312140608ca81e18434782b5c9b160166c2d014e0d66a2f4ee7aa35e5ea72f4a4ef65900d0f", 0xd5, &(0x7f0000004e80), &(0x7f0000004ec0), &(0x7f0000004f00)="905e931aab521dfaa66fdaef9b150570ce96e13de221b4e0614da0ac5a3eace768b193f73edffbcd89d8961e") write$P9_RXATTRWALK(r14, &(0x7f0000004f40)={0xf, 0x1f, 0x2, 0x8}, 0xf) open$dir(&(0x7f0000004f80)='./file0\x00', 0x240480, 0xbb) capset(&(0x7f0000004fc0)={0x19980330, r9}, &(0x7f0000005000)={0x9, 0xef3, 0xd0e, 0x7, 0x8001, 0xfffffeff}) syz_mount_image$fuse(&(0x7f0000005040), &(0x7f0000005080)='./file0\x00', 0x28800, &(0x7f00000050c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r10}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x400}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x5}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}, {@default_permissions}], [{@obj_user={'obj_user', 0x3d, '\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@flag='nomand'}, {@appraise}, {@fsmagic={'fsmagic', 0x3d, 0x10}}, {@smackfshat={'smackfshat', 0x3d, '%/#^+\''}}]}}, 0x1, 0x0, &(0x7f0000005280)="225e6d2cd2a0cb8dabb74a6b703df31a7797854c6d16044eaf68de539c9105a632375047e1952ae6b1efb397b31584eb1e99a58cf351ea0530e37664ca35c1d5ec2b9cd921c30ba30512d80ed6412e8b816426cba7a27886b8104bf9b5056cf1f426927f1044ce62a037dd378ad43018dce5e1cd238cf7398f0127b94423925ea5d411724f6132d2cd066105896964c7e45efcb5daa30c178e2903f684d556f8eb9e76302a2c28dbfcfa2381d27163ba8a2c32232650e9f1") syz_fuse_handle_req(r14, &(0x7f0000005340)="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", 0x2000, &(0x7f0000007b40)={&(0x7f0000007340)={0x50, 0x0, 0x81, {0x7, 0x2b, 0x7, 0x100, 0x9, 0x0, 0x1, 0x100, 0x0, 0x0, 0x8, 0x9}}, &(0x7f00000073c0)={0x18, 0x0, 0x78651720, {0x7}}, &(0x7f0000007400)={0x18, 0xfffffffffffffffe, 0x9, {0x7}}, &(0x7f0000007440)={0x18, 0x0, 0x43b2, {0x8000}}, &(0x7f0000007480)={0x18, 0x0, 0x3, {0x6}}, &(0x7f00000074c0)={0x28, 0x0, 0x6, {{0x0, 0x101, 0x0, r15}}}, &(0x7f0000007500)={0x60, 0x0, 0xd, {{0x200, 0xa, 0xac, 0x6, 0xfffffffffffffffa, 0x7, 0x98, 0x5}}}, &(0x7f0000007580)={0x18, 0x0, 0xffffffffffffffc0, {0x2}}, &(0x7f00000075c0)={0x14, 0x0, 0x6, {'}*[\x00'}}, &(0x7f0000007600)={0x20, 0x7ffffffffffffffa, 0x8, {0x0, 0x8}}, &(0x7f0000007640)={0x78, 0x0, 0x8, {0x3, 0x4, 0x0, {0x2, 0x1, 0xffffffffffffffff, 0x9, 0x80000000, 0x587, 0x80000000, 0xffffffff, 0x5, 0x1000, 0x2, r10, r12, 0x5, 0x7f}}}, &(0x7f00000076c0)={0x90, 0xfffffffffffffffe, 0x3, {0x1, 0x0, 0x7, 0x9, 0x3, 0x0, {0x3, 0xd4da, 0x7, 0xff, 0xffffffffffffffff, 0x7, 0x7, 0x7, 0x1, 0x1000, 0x49, r10, r11, 0x2, 0x9}}}, &(0x7f0000007780)={0x108, 0x0, 0xe, [{0x3, 0x548, 0x1, 0x7, '.'}, {0x2, 0x2c8000000000, 0x6, 0x1, '#*{[.#'}, {0x0, 0x1ff, 0x4, 0x7ff, '#^{#'}, {0x63c1, 0x3, 0x11, 0x8, '/dev/dlm-monitor\x00'}, {0x3, 0x5, 0x4, 0x3, '&]}%'}, {0x0, 0xffffffff, 0x8, 0x7, 'appraise'}, {0x1, 0x0, 0xa, 0x1, 'smackfshat'}]}, &(0x7f00000078c0)={0x10, 0x0, 0x28000000000}, &(0x7f0000007900)={0xa0, 0x0, 0x10c, {{0x6, 0x1, 0x6, 0x6, 0x6, 0x6, {0x6, 0x200, 0xd6, 0x8, 0x5, 0x101, 0x8dc1, 0xfffeffff, 0x2, 0x8000, 0x6, r10, r8, 0x41e, 0x7}}, {0x0, 0x8}}}, &(0x7f00000079c0)={0x20, 0xfffffffffffffff5, 0x8, {0xfffffffe, 0x0, 0xffff0001, 0x7}}, &(0x7f0000007a00)={0x130, 0x0, 0x7, {0xfffffffffffffd24, 0xc, 0x0, '\x00', {0x10, 0x5, 0x1, 0xf9, r10, r8, 0x1000, '\x00', 0xba3e, 0x18, 0x7, 0x9, {0xa, 0x3}, {0x9, 0xff}, {0x2, 0x5}, {0x2, 0x3}, 0x10, 0x7, 0x4, 0x4}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000007c00)={r13}) r17 = syz_genetlink_get_family_id$devlink(&(0x7f0000007c80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r16, &(0x7f0000007dc0)={&(0x7f0000007c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000007d80)={&(0x7f0000007cc0)={0x8c, r17, 0x4, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x2f3}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xac}, {0x6, 0x16, 0x9}, {0x5}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40810}, 0x4010) futex_waitv(&(0x7f0000007ec0)=[{0x8, &(0x7f0000007e00)=0x5, 0x2}, {0x6, &(0x7f0000007e40)=0x5, 0x2}, {0xfffffffffffffffe, &(0x7f0000007e80)=0x1, 0x2}], 0x3, 0x0, &(0x7f0000007f80), 0x0) 6.716324375s ago: executing program 1 (id=1820): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) (async) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000240)={{0x4, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r1, &(0x7f0000000040)=[{0xf, 0x28, 0x0, 0xfd, @time={0x0, 0x80000001}, {}, {0xe}, @raw8={"749a2dd6f809cd5d37deda88"}}], 0x1c) (async) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/160, 0xa0}], 0x1, 0x863, 0x0, 0x10) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xb, 0xf, 0x9, '\x00', 0x5}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) close(r3) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'ip6gre0\x00'}) (async) write$P9_RSTATu(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/548, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x230) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r8, 0x80044dfe, &(0x7f0000000240)) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x141000, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000001a40)}) (async) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000ae9b714001222c01d96001024279d2f119e1030109021b0001000000000904ef0001043a1e00090502020000000000b24d537d82fbc64822a5e66ce6b843de142c0c620faa55fe9bf844b55d93734182f79d1892d5a10d6704693d7bf9e73f98ed29869b0100000000000000253f6d790b79b3dcb2ff76aa284e8aa77293a304d4e1224a490cfa0a30707ffb669929ae9efcce0d202d8f12800ff53735741f962826146f02bb9b68f7d4d42d3cb412ae1a05"], 0x0) 6.224873738s ago: executing program 1 (id=1822): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0083, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000bc0)={0x0, 0x0}) prlimit64(r1, 0x2, &(0x7f0000000c00)={0x81, 0x81}, &(0x7f0000000c40)) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000f, 0x11011, r2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_dev$vivid(&(0x7f0000000b40), 0x1, 0x2) ioctl$VIDIOC_G_STD(r3, 0x80085617, &(0x7f0000000b80)) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, 0x0, r4, &(0x7f0000000240)='./file0\x00', 0x46) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r7 = socket$inet6(0xa, 0x3, 0x86) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000d00)={'ip6_vti0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x4, 0x9, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, @local, 0x8000, 0x8000, 0x2, 0x8}}) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@private2, @in6=@private1, 0x0, 0x8000, 0x0, 0x0, 0x2, 0x80, 0x0, 0x0, r8}, {0x0, 0x7, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x12, 0x0, 0x40000000000000}, {0x0, 0x1000000001, 0x53e5, 0x1f}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2}, {{@in6=@private2, 0x1, 0x32}, 0x2, @in=@local, 0x1502, 0x4, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12015002000000106d041bc74015008003010902390001010008050904007f020301020809210f0081012272050905810300062707c40baee042a39b9dd348720b67d5d600c997c890c2c1db1a383df414559ffe208b79af448fd047a17d2e57bf59b59a0e1c94abcd7fbf639c06642a491638befd031c8fde2175401f8f01789197747ffd00e3ecaac70bfc1fecdfa14f63ba8e1b4c62de9a5c926a0a8160b21c26fbf5712ba24a29277836538b70d069d0feee286a16738764094788e3a06d636ab5b36a3e3d254f1abe897e5fce0c19a0ac5dc108537dcaa478fad5464cf05caa12dfb0b11f548f0a52"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) socket(0x5, 0x6, 0x7fffffff) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r11, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r12 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r12, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 5.588608557s ago: executing program 3 (id=1823): r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0xa, @vbi={0x958a, 0x9, 0x7, 0x43564548, [0x36, 0x1326], [0x3, 0x4], 0x1}}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000800)=ANY=[@ANYBLOB="12010000965d06403e131508667e0102030109021b0001000000000904000001ff87280009050500"], 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setns(0xffffffffffffffff, 0x24020000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005040000000000000000", @ANYBLOB="ebffffffffffffff28"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.095127852s ago: executing program 0 (id=1826): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000380)={0x1, "5c7487be8b7cf34bcb4953faddcc0bffed9589de04d625422e0eb21dfadaa3f2b7bb10bd3c893c2971d57f6fe944c83e466d69336036e6af4846b767cd20e8c2f885ae80d769953e5f13151f6777ec72fda3a5953a9f1f27bf064669f9cea00dcf974635049180b07533f3510014b676aa80af49811f33fba13376b74a083d9523b5ef830c5327a26f9f97678dbf3bcb4c3a52f96a1a431a30871336f78108212fab587373fe3593eeb4f8ecfec34e47cc7147c9cd3556e31dc4efeea8cdde95c7c73159ea228b425088acf3429cfd3c79d85f467810adf633758f35a0927fd69723ede5ec28d6f2f9b42ced56df7fb3ec5ce32d96e789ebe7a0d0de26f967e7"}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x20200) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0xd1, &(0x7f0000000540)={0x0, 0xffffffff, 0x800, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x14, 0x4, 0x4, 0x12, 0x914, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f00000000c0)) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x8, 0x8440000000000000}) getsockname(r1, 0x0, &(0x7f0000000000)) close_range(r6, 0xffffffffffffffff, 0x0) 5.008337212s ago: executing program 0 (id=1827): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x10300, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) ioprio_set$uid(0x3, 0x0, 0x4007) ioctl$PTP_PIN_SETFUNC2(r0, 0x541b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xc7996000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r5 = dup(r4) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_SET_IRQCHIP(r3, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0x10000, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0xf0, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0xc, '\x00', 0x11}, {0x7, 0x8, 0x3, '\x00', 0x8f}, {0xfe, 0x80, 0xb1, '\x00', 0xa}, {0xf, 0x2, 0x8, '\x00', 0xaa}, {0x7, 0x8, 0x4, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xf, 0x8, 0x4, '\x00', 0x7}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xf, '\x00', 0x3}, {0x5e, 0x6, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0x92, '\x00', 0x8}]}}) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000240)='#mS\xb2jQ\x80\xb7\x94\x9c\xad=\xc8\xa0A4Z1\xcb\xa18:.)\xa5\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd2\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T\x05\x00&\xf0z\xde\xc0\xf3\xcf\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ_\x16\xecRo\xb2\f\x14Z7\xe5\xf4\x0ea\b\x8f\x1cI\xc6\xc4P\x965lWZ|\xde\x00\xd0\x8d\xfaG\xb0fDP\x83\xa1\xd4%\x93\x99P\xa4hG\x15D\xdf\xd8\x90\x02\xe3Y\x06}\"3\xa8\xb3m\xf3\xbeb?\xbd\xd87]]j)Mp\xb4\x98\xd4tu\x8f<\x04Ph!A\xd8\xc6\xc6V\x02\x15\xd5\x7fx\xbc\xc2\x9bb$\x9bJ\xd3\xe2t\x13\xc7]\xd0\xdb\xf3\x9e\xe3\x03\x91\xf3\x17\xfed[\xd9\b0\x9c\xfde^\x95b\xff\xda3\x90\xdb\xe7L\x0foR\n\xa9\xe4\xb4)hh\xcb\x93\x02\az\xa2d+z\xd2`\x84>eZ\x8a\xc6\xcd\xbb\xce=\xc9\r\x8b\xcf\x83[\xe3\xc8\xb7*\x1c\xa7\x98g\x1f\x8bu\x19\xd2\xbd\xc2\'\xcb}\x03}\xc1\xa8>\xd6K\x84\xf8\x90\x11=6\xe9\xa9\x1f\r\x95\x90\xcf,\x0f\xdbk\x04\x14\xd5I\x00\xc8p\x11\xc1#\xca\xf7\x1b\b&\x82\xea0N\xed:\xe5\x9e\xb3\x94\x87\x9d\xa6el\x8d\v\xd3\x17\xb7.6\xf6\xb1\x823\x88\xe1\x1a\xf6\xce\xebm \xda\x1d\xa3STVN& *\xe1hjC~\xb7\x1e;0,\xeb\xbc\x9e}3\xd7\xe8\x8a\x19\xa0\xdd\x15\xc9+\xd8\xb2\xab~(\xa4\xc6\x001\x89\x9eW\xe2\xc1\x92\xfc\xb82\xe9', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x101840) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x7ffffffc}}) socket$inet6(0xa, 0x5, 0x4) ioctl$SNDRV_TIMER_IOCTL_INFO(r7, 0x80e85411, &(0x7f0000002340)=""/4105) 4.021551705s ago: executing program 0 (id=1828): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r2 = gettid() r3 = syz_open_dev$radio(&(0x7f0000000240), 0x2, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000003c0)={0x9, 0x73, 0x4, {0x3, @vbi={0x2, 0x3ff, 0x200, 0x71740f69, [0xfffff31a, 0x1], [0x6, 0x6], 0x108}}, 0xffffff77}) sched_getattr(r2, &(0x7f00000004c0)={0x38}, 0x38, 0x0) (async) membarrier(0x10, 0x0) (async, rerun: 32) poll(0x0, 0x0, 0x1) (async, rerun: 32) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) (async) prctl$PR_MCE_KILL_GET(0x22) (async) socket(0x10, 0x80002, 0x0) (async) syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async) add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) (async) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) (async, rerun: 64) r5 = syz_open_dev$hiddev(0x0, 0x0, 0x0) (rerun: 64) ioctl$HIDIOCGREPORTINFO(r5, 0xc00c4809, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000010000d0425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="9000000000000000140012800b0001087a256964676500000400028022a1401970c769320e910e75e38c3a5f8fcbd629fe230a2ce24d1ed13b8c3282c72ee052308ec684a530adca5079b96c05cc8e22f93f0f85a886e28a63a11c24525b7709330943583455f93440a901f1c94e63db41c3436a3588f2c4f8e2c2c5cfd9f80af2721a584547c683f5a2"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x840) (async, rerun: 32) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 32) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 3.644670867s ago: executing program 4 (id=1833): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r3 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x29cc, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0}, 0x18) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) r6 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast2, @dev}, &(0x7f0000000100)=0xc) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000140)={r7, 0x1, 0x6, @remote}, 0x10) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x7, 0x10, 0x1009, 0x5, 0xc, 0x1, 0x3, 0x1}}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c002bbd7000ffdbdf251d01040015bcbb70ec0000600602000084706809e9c195440200000090380095806999bb244fc21fbd5748ea45dbc4b82efddd15b9afb4b7c7ed9e67cd04864a5f10493048754885b10113fe14aacae64cbc99fa486715993627"], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0], 0x2, 0x80000}) r10 = syz_open_dev$vcsn(0x0, 0x3f0b, 0x117001) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r10, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x54, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000380), 0x8, 0xa7, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000020200)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r11, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='com.apple.system.Security\x00') 3.488396804s ago: executing program 3 (id=1834): syz_usb_connect(0x0, 0xe6, &(0x7f0000000280)=ANY=[], 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x40, 0x13, 0x6, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b1e7"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x44, &(0x7f0000000300)={0x0, 0x14, 0x1d, "a8a8292419ad1ae01979c7e1d2e0550a9ef9039db15500152b71859106"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x280, 0x18) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000040), 0x4) 3.453253542s ago: executing program 4 (id=1835): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x2b, 0x40000) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000280)={0x0, 0x3, 0xb2, 0x4, 0xfffffffffffffffd, 0xe, 0x3c84, 0x71d6ba8c, 0x535c, 0x4, 0xb, 0x3}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_virt_wifi\x00'}) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x9833bf88d1b218f5, 0x3}, {{@in=@empty, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x4, 0x8}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$inet6(0xa, 0x1, 0x0) (async) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x2b, 0x40000) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000280)={0x0, 0x3, 0xb2, 0x4, 0xfffffffffffffffd, 0xe, 0x3c84, 0x71d6ba8c, 0x535c, 0x4, 0xb, 0x3}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_virt_wifi\x00'}) (async) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x9833bf88d1b218f5, 0x3}, {{@in=@empty, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x4, 0x8}}, 0xe8) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) 3.256975864s ago: executing program 0 (id=1836): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000440)='./file0\x00', 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x80796, 0x0, 0x0, 0x318f}) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x100) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1a47}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x0, 0x801) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x2, r6, 0x3}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x4, 0x2, r6, 0xb}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000100)={0xc58, 0x0, 0x2, r6, 0x6}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_GETMODE(r7, 0x5601, &(0x7f0000002000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000612030000000000096"], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000140)='source', &(0x7f0000000000)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000440)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x101000, 0x81, 0x11}, &(0x7f0000000200)='./file0\x00', 0x18, 0x0, 0x23456}) io_uring_enter(r2, 0x488, 0x0, 0x60, 0x0, 0x0) fsmount(r8, 0x1, 0xa) 3.216842789s ago: executing program 4 (id=1837): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c00028008000500010000001400070000000000000000050000000000000001"], 0x74}, 0x1, 0x0, 0x2000000}, 0x0) 3.114170355s ago: executing program 4 (id=1838): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xc7996000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x7ffffffc}}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1cd1, 0x10000) flock(r1, 0x1) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x0, 0xf, 0x31, 0x7ca, 0x0, 0x0, 0x0}) ioctl$SNDRV_PCM_IOCTL_INFO(r1, 0x81204101, &(0x7f0000000100)) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000002340)=""/4105) 3.036927471s ago: executing program 1 (id=1839): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x0, 0x9b, 0x1e, 0x2a}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405feffff7f0008000240000000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 2.82249004s ago: executing program 4 (id=1840): socket$netlink(0x10, 0x3, 0x5) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) write(r0, &(0x7f0000000280), 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x7, @win={{0xaf, 0x5, 0x10000, 0x10002}, 0x8, 0x9, &(0x7f00000001c0)={{0x7ff, 0x1ff, 0x0, 0x2}}, 0x4, &(0x7f0000000340)="3957c3cb8f7ca2634b88d8a06c51dd662c94ee8db20d92119bdf15cdb592b7e73d540b89b61adfd67ab854e3ecd3d0bab0571a12224cfe594f40328b9be649a689940b1b4973252908429e3e0215ca718c67d5a9681e4548c5effbed71491747d8ede657974d2fb639d7d628c54f106c2a14f0a1db61cb12cdd1363ecac0476f691030ff44021a2b23d34724bf9fba8957cf1e7e809538a7500faec72dab86ad", 0xd}}) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x7, @win={{0xaf, 0x5, 0x10000, 0x10002}, 0x8, 0x9, &(0x7f00000001c0)={{0x7ff, 0x1ff, 0x0, 0x2}}, 0x4, &(0x7f0000000340)="3957c3cb8f7ca2634b88d8a06c51dd662c94ee8db20d92119bdf15cdb592b7e73d540b89b61adfd67ab854e3ecd3d0bab0571a12224cfe594f40328b9be649a689940b1b4973252908429e3e0215ca718c67d5a9681e4548c5effbed71491747d8ede657974d2fb639d7d628c54f106c2a14f0a1db61cb12cdd1363ecac0476f691030ff44021a2b23d34724bf9fba8957cf1e7e809538a7500faec72dab86ad", 0xd}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$tipc(0x1e, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x5, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x9, 0x8, 0x58565559, 0x2, 0x6, 0x2, 0x5, 0xa6e, 0x0, 0x4, 0x0, 0x5}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000300)="96", 0x83f, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r1, &(0x7f0000000300), &(0x7f0000000200)=""/35}, 0x20) gettid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x4c181, 0x0) (async) r3 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x4c181, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socket$key(0xf, 0x3, 0x2) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x2, 0x1, 0x0, 0x2, 0x2, 0x0, 0x70bd2d}, 0x10}, 0x19}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102cab4c508720c14008a570102030109022400010b00e0090904f405021df45208090503"], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102cab4c508720c14008a570102030109022400010b00e0090904f405021df45208090503"], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) r7 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f0000000080)={0x2d00000000000000, 0xeeee8000, 0x2, 0xa, 0x2}) (async) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f0000000080)={0x2d00000000000000, 0xeeee8000, 0x2, 0xa, 0x2}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r7, &(0x7f0000000300)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000c80)=ANY=[@ANYBLOB="010000000000003100010040"]) 1.693694325s ago: executing program 1 (id=1841): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x4, 0x20}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0)={r3, @in6={{0xa, 0x4e23, 0x7, @empty, 0x3}}}, &(0x7f0000000380)=0x84) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000012c0)={0x0, 0x1b, 0x4, "55baed73"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000f80)={0x44, &(0x7f0000000d80)={0x0, 0x11, 0x4, "86e0acad"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="5542c2ecc253e5b10000532541dda74d2ed8ba7b4b4cc8cd512d8d1c6d62d8ff7456a5f6c3d10d53a4a604696b6023fd85439393a4d2d4e1cf4f6efcfc6f40c3994b56b248c5ef8d6159d910b8cbca06cb656a55e7c6b6f873feb95671ea8d704c67bbfc68"], 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty, 0x80ad}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x0) 1.432982293s ago: executing program 4 (id=1842): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc513, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0xff, 0x81) syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x15, 0x4, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast2, @local, {[@timestamp_prespec={0x44, 0x34, 0x3b, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@remote, 0x1000}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x7}, {@multicast1, 0x31c8}, {@broadcast, 0x2}, {@multicast2, 0x9}]}, @generic={0x7, 0x9}]}}, {{0x0, 0x0, r1, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) 341.308948ms ago: executing program 3 (id=1843): syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x20, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@nop, @generic={0x5, 0xb, "f4311553073bb9b05c"}]}}}}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x21}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r1, 0x2285, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r2, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r2, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r2, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r2, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r2, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r2, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r2, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) write$sndseq(r2, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc) write$sndseq(r2, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0xe7}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc) write$sndseq(r2, &(0x7f0000000d00)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"49cbee45cad57a0372831665"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}], 0x8c) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffc}, {}, {}, @control}], 0x38) write$sndseq(r2, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r2, &(0x7f0000000400)=[{0x5, 0x39, 0x6, 0xba, @time={0xd, 0xd}, {0x4, 0x2}, {0x6, 0xfb}, @note={0x2, 0x81, 0x5, 0x9, 0x2}}, {0x0, 0xa5, 0xff, 0x4, @time={0xffffc09f, 0x7}, {0x9, 0x3}, {0xfb, 0x7}, @control={0x1, 0x1, 0xb0}}], 0x38) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x141000, 0x14, 0x18}, 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @aes256, 0x10, @desc1}) 260.809322ms ago: executing program 3 (id=1844): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0), 0x4) r2 = syz_open_procfs(r0, &(0x7f0000000040)='maps\x00') socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/protocols\x00') syz_usb_control_io$printer(r5, &(0x7f0000000240)={0x14, &(0x7f0000000180)={0x0, 0x7, 0x11, {0x11, 0x7, "5f9b55acff57cb641312a3bff0bb86"}}, &(0x7f0000000300)=ANY=[@ANYBLOB="00030600000000000000e6f8b0d50f46421053453503b09a4199ddb01c4b8ff89afd6ba14c911c9dd25c1cfa7652bbd7b1e4a8a80fe66b3dec4eae112c6f2cf1fbab3165ef022523dcb092c463fef229a77d1a27dc6a29fa237988b18f144f59b16c906b0ebffe1e20d24af032814a"]}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r8 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x400001ff, 0x400, 0x0, 0x3a6, 0x0, r6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r7, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001000000"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r8, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, 0x0) 104.904149ms ago: executing program 0 (id=1845): r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0xa, @vbi={0x958a, 0x9, 0x7, 0x43564548, [0x36, 0x1326], [0x3, 0x4], 0x1}}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000800)=ANY=[@ANYBLOB="12010000965d06403e131508667e0102030109021b0001000000000904000001ff87280009050500"], 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setns(0xffffffffffffffff, 0x24020000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005040000000000000000", @ANYBLOB="ebffffffffffffff28"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 0s ago: executing program 0 (id=1846): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002700), 0x2081) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000002740)={0x0, 0x4, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x3f, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x565) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8042, 0x1ff) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e23, @local}, 0x10) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r7], 0x48}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x2, {0xa, 0x4e20, 0xd06, @remote}, r8}}, 0x38) kernel console output (not intermixed with test programs): 76][ T5890] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 451.670521][ T5890] usb 1-1: device descriptor read/64, error -71 [ 451.752638][T11135] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 451.770314][T11135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.779828][T11135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.798097][T11135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.807067][T11135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.107626][ T5890] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 452.339430][ T5890] usb 1-1: device descriptor read/64, error -71 [ 452.410310][T11140] xt_CT: You must specify a L4 protocol and not use inversions on it [ 452.483900][ T5890] usb usb1-port1: attempt power cycle [ 453.001215][T11142] FAULT_INJECTION: forcing a failure. [ 453.001215][T11142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.014401][T11142] CPU: 0 UID: 0 PID: 11142 Comm: syz.1.1407 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 453.014427][T11142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 453.014439][T11142] Call Trace: [ 453.014448][T11142] [ 453.014457][T11142] dump_stack_lvl+0x189/0x250 [ 453.014494][T11142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.014524][T11142] ? __pfx__printk+0x10/0x10 [ 453.014547][T11142] ? __pfx_copy_data+0x10/0x10 [ 453.014582][T11142] should_fail_ex+0x414/0x560 [ 453.014609][T11142] _copy_to_user+0x31/0xb0 [ 453.014639][T11142] ? __pfx_virtio_read+0x10/0x10 [ 453.014671][T11142] rng_dev_read+0x3f2/0x770 [ 453.014702][T11142] ? __pfx_rng_dev_read+0x10/0x10 [ 453.014732][T11142] ? bpf_lsm_file_permission+0x9/0x20 [ 453.014758][T11142] ? security_file_permission+0x75/0x290 [ 453.014779][T11142] ? rw_verify_area+0x258/0x650 [ 453.014807][T11142] vfs_readv+0x5a2/0x840 [ 453.014833][T11142] ? __pfx_rng_dev_read+0x10/0x10 [ 453.014864][T11142] ? __pfx_vfs_readv+0x10/0x10 [ 453.014906][T11142] ? __fget_files+0x2a/0x420 [ 453.014938][T11142] ? __fget_files+0x3a0/0x420 [ 453.014962][T11142] ? __fget_files+0x2a/0x420 [ 453.014998][T11142] __x64_sys_preadv+0x197/0x2a0 [ 453.015030][T11142] ? rcu_is_watching+0x15/0xb0 [ 453.015050][T11142] ? __pfx___x64_sys_preadv+0x10/0x10 [ 453.015079][T11142] ? do_syscall_64+0xba/0x210 [ 453.015112][T11142] do_syscall_64+0xf6/0x210 [ 453.015139][T11142] ? clear_bhb_loop+0x60/0xb0 [ 453.015164][T11142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.015183][T11142] RIP: 0033:0x7f4a25b8e969 [ 453.015202][T11142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.015219][T11142] RSP: 002b:00007f4a26a7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 453.015240][T11142] RAX: ffffffffffffffda RBX: 00007f4a25db5fa0 RCX: 00007f4a25b8e969 [ 453.015260][T11142] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 453.015273][T11142] RBP: 00007f4a26a7e090 R08: 0000000000000000 R09: 0000000000000000 [ 453.015286][T11142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.015298][T11142] R13: 0000000000000000 R14: 00007f4a25db5fa0 R15: 00007f4a25edfa28 [ 453.015329][T11142] [ 453.497683][ T5890] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 453.532012][ T5890] usb 1-1: device descriptor read/8, error -71 [ 453.570892][T11145] xt_hashlimit: max too large, truncated to 1048576 [ 453.812618][ T6640] usb 4-1: USB disconnect, device number 76 [ 453.822035][ T5890] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 453.868289][ T5890] usb 1-1: device descriptor read/8, error -71 [ 453.964308][T11152] Cannot find map_set index 0 as target [ 453.998203][ T5890] usb usb1-port1: unable to enumerate USB device [ 454.068072][ T120] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 454.248366][ T6642] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 454.280368][ T120] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.290977][ T120] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 454.368184][ T120] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 454.377692][ T120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 454.377773][ T6640] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 454.385708][ T120] usb 2-1: SerialNumber: syz [ 454.702300][ T6642] usb 5-1: config 0 has no interfaces? [ 454.715655][ T6642] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 454.735728][ T6642] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.744716][ T6642] usb 5-1: Product: syz [ 454.779537][ T6640] usb 4-1: Using ep0 maxpacket: 32 [ 454.779587][ T6642] usb 5-1: Manufacturer: syz [ 454.791885][ T6642] usb 5-1: SerialNumber: syz [ 454.801942][ T6640] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 454.803518][ T6642] usb 5-1: config 0 descriptor?? [ 454.944920][ T6640] usb 4-1: config 0 has no interface number 0 [ 455.029225][ T6640] usb 4-1: config 0 interface 89 has no altsetting 0 [ 455.121213][ T120] usb 2-1: 0:2 : does not exist [ 455.131259][ T6640] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 455.152319][ T6640] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.170301][ T6640] usb 4-1: Product: syz [ 455.174644][ T6640] usb 4-1: Manufacturer: syz [ 455.207618][ T6640] usb 4-1: SerialNumber: syz [ 455.216213][T11165] ip6t_srh: unknown srh match flags B153 [ 455.264500][T11164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.273536][ T6640] usb 4-1: config 0 descriptor?? [ 455.312490][T11164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.392462][ T120] usb 2-1: USB disconnect, device number 61 [ 455.612728][T11155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.758687][T11155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.029819][ T6642] usb 4-1: USB disconnect, device number 77 [ 456.043475][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 456.081938][T11170] vlan3: entered promiscuous mode [ 457.161195][T11177] veth0_to_bond: entered allmulticast mode [ 457.554862][T11187] xt_CT: You must specify a L4 protocol and not use inversions on it [ 457.797573][ T6650] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 458.080370][ T6650] usb 1-1: config 0 has no interfaces? [ 458.091765][ T6650] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 458.108429][ T6650] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.134765][ T6650] usb 1-1: Product: syz [ 458.167101][ T6650] usb 1-1: Manufacturer: syz [ 458.177730][ T6650] usb 1-1: SerialNumber: syz [ 458.243614][ T6650] usb 1-1: config 0 descriptor?? [ 458.610626][ T6650] usb 5-1: USB disconnect, device number 85 [ 459.167743][ T6642] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 459.271269][T11195] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1422'. [ 459.288418][T11195] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1422'. [ 459.330271][ T6642] usb 5-1: Using ep0 maxpacket: 8 [ 459.355097][ T6642] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 459.466776][ T6642] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.514248][ T6642] usb 5-1: Product: syz [ 459.545396][ T6642] usb 5-1: Manufacturer: syz [ 459.576169][ T6642] usb 5-1: SerialNumber: syz [ 459.637762][ T6642] usb 5-1: config 0 descriptor?? [ 459.899711][ T6642] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 460.529545][T11193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.555072][T11209] loop2: detected capacity change from 0 to 7 [ 460.564361][T11193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.582165][ T5841] Dev loop2: unable to read RDB block 7 [ 460.590596][ T5841] loop2: unable to read partition table [ 460.597367][ T5841] loop2: partition table beyond EOD, truncated [ 460.606148][T11209] Dev loop2: unable to read RDB block 7 [ 460.615212][T11209] loop2: unable to read partition table [ 460.632815][T11209] loop2: partition table beyond EOD, truncated [ 460.642843][T11209] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 460.938064][ T6650] usb 1-1: USB disconnect, device number 102 [ 461.097394][T11216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.133034][T11216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.201896][ T6642] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 461.233599][ T6642] usb 5-1: USB disconnect, device number 86 [ 461.389310][ T5892] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 461.478492][T11221] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 461.549624][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 461.557908][ T5892] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 461.571462][ T5892] usb 4-1: config 0 has no interface number 0 [ 461.588560][ T5892] usb 4-1: config 0 interface 89 has no altsetting 0 [ 461.604348][ T5892] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 461.615508][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.625356][ T5892] usb 4-1: Product: syz [ 461.631138][ T5892] usb 4-1: Manufacturer: syz [ 461.640826][ T5892] usb 4-1: SerialNumber: syz [ 461.653962][ T5892] usb 4-1: config 0 descriptor?? [ 461.882534][T11217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.899516][T11217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.964511][ T5892] usb 4-1: USB disconnect, device number 78 [ 462.267622][ T6642] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 462.488345][ T6642] usb 5-1: config 0 has no interfaces? [ 462.561600][ T6642] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 462.588707][ T6642] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.620861][ T6642] usb 5-1: Product: syz [ 462.629933][ T6642] usb 5-1: Manufacturer: syz [ 462.640212][ T6642] usb 5-1: SerialNumber: syz [ 462.659840][ T6642] usb 5-1: config 0 descriptor?? [ 462.673570][T11243] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1438'. [ 463.127628][ T5892] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 463.297724][ T5892] usb 4-1: Using ep0 maxpacket: 8 [ 463.316468][ T5892] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 463.341632][ T5892] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 463.352703][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.369624][ T5892] usb 4-1: Product: syz [ 463.374302][T11248] bridge_slave_0: left allmulticast mode [ 463.380978][ T5892] usb 4-1: Manufacturer: syz [ 463.386218][T11248] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.393701][ T5892] usb 4-1: SerialNumber: syz [ 463.403919][T11248] bridge_slave_1: left allmulticast mode [ 463.419045][T11248] bridge_slave_1: left promiscuous mode [ 463.425298][ T5892] usb 4-1: config 0 descriptor?? [ 463.439228][ T5892] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 463.440950][T11248] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.485060][T11248] bond0: (slave bond_slave_0): Releasing backup interface [ 463.495015][T11248] bond_slave_0: left promiscuous mode [ 463.507046][T11248] bond0: (slave bond_slave_1): Releasing backup interface [ 463.516639][T11248] bond_slave_1: left promiscuous mode [ 463.532904][T11248] team0: Port device team_slave_0 removed [ 463.545983][T11248] team0: Port device team_slave_1 removed [ 463.554957][T11248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.564135][T11248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.657284][T11249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.727365][T11249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.462508][T11264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.515058][T11264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.558146][ T6650] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 464.616733][T11268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1447'. [ 464.631074][T11268] netlink: 'syz.0.1447': attribute type 5 has an invalid length. [ 464.639153][T11268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1447'. [ 464.707626][ T6650] usb 2-1: Using ep0 maxpacket: 8 [ 464.727124][ T6650] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 464.743558][ T6650] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.760468][ T6650] usb 2-1: Product: syz [ 464.766127][ T6650] usb 2-1: Manufacturer: syz [ 464.775123][ T6650] usb 2-1: SerialNumber: syz [ 464.789524][ T6650] usb 2-1: config 0 descriptor?? [ 465.009825][ T6650] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 465.401056][ T6640] usb 5-1: USB disconnect, device number 87 [ 465.652887][T11262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.663159][T11262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.887920][ T6640] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 466.059709][ T6640] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 466.071414][ T6640] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.097563][ T6640] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.127758][ T6640] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 466.147590][ T6640] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 466.167097][ T6640] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.199415][ T6640] usb 5-1: config 0 descriptor?? [ 466.277071][ T5892] gspca_zc3xx: reg_r err -71 [ 466.310634][ T6650] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 466.345228][ T6650] usb 2-1: USB disconnect, device number 62 [ 466.867663][ T5892] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 466.874226][ T5892] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 466.910899][ T5892] usb 4-1: USB disconnect, device number 79 [ 467.016801][ T6640] usbhid 5-1:0.0: can't add hid device: -71 [ 467.024090][ T6640] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 467.082399][T11308] netlink: 'syz.3.1456': attribute type 39 has an invalid length. [ 467.104151][ T6640] usb 5-1: USB disconnect, device number 88 [ 467.282867][T11317] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1459'. [ 467.505835][T11326] netlink: 'syz.1.1464': attribute type 10 has an invalid length. [ 467.517194][T11326] netlink: 'syz.1.1464': attribute type 10 has an invalid length. [ 467.557838][T11326] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1464'. [ 467.604605][T11327] netlink: 'syz.1.1464': attribute type 10 has an invalid length. [ 467.706014][T11333] xt_CT: You must specify a L4 protocol and not use inversions on it [ 467.777942][T11327] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1464'. [ 467.868008][ T6650] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 467.892895][T11327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1464'. [ 468.039063][ T6650] usb 5-1: Using ep0 maxpacket: 32 [ 468.046757][ T6650] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 468.060937][ T6650] usb 5-1: config 0 has no interface number 0 [ 468.069773][ T6650] usb 5-1: config 0 interface 89 has no altsetting 0 [ 468.126970][ T6650] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 468.151719][ T6650] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.174105][ T6650] usb 5-1: Product: syz [ 468.184606][ T6650] usb 5-1: Manufacturer: syz [ 468.192898][ T6650] usb 5-1: SerialNumber: syz [ 468.446899][ T6650] usb 5-1: config 0 descriptor?? [ 468.663285][T11329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.703597][T11329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.740857][ T6640] usb 5-1: USB disconnect, device number 89 [ 468.884048][T11339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.897093][T11339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.915434][T11339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.935499][T11339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.989589][ T6650] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 469.182074][ T6650] usb 2-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 469.207013][ T6650] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.225377][ T6650] usb 2-1: config 0 descriptor?? [ 469.236326][ T6650] gspca_main: xirlink-cit-2.14.0 probing 0545:800d [ 469.251851][ T6650] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input32 [ 469.336548][T11357] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.528197][ T6650] usb 2-1: USB disconnect, device number 63 [ 469.677676][ T6642] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 469.924956][ T6642] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 469.938941][ T6642] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 469.966916][ T6642] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 469.978797][ T6642] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.008618][ T6642] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 470.039331][ T6642] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 470.093232][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.305499][T11357] netlink: 'syz.3.1471': attribute type 1 has an invalid length. [ 470.322757][T11357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.449762][T11357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.833166][ T6642] hid-generic 0000:0000:0000.0011: unknown main item tag 0x7 [ 470.997022][ T6642] hid-generic 0000:0000:0000.0011: ignoring exceeding usage max [ 471.037340][T11383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.045085][ T6642] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 471.074661][T11383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.113079][ T6642] hid-generic 0000:0000:0000.0011: unknown main item tag 0x6 [ 471.150762][ T6642] hid-generic 0000:0000:0000.0011: reserved main item tag 0xd [ 471.189864][ T6642] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz0 [ 471.550002][T11384] fido_id[11384]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 471.717659][ T6642] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 471.804036][T11398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.823460][T11398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.837690][ T6650] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 471.843315][T11398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.865943][T11398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.940328][ T6642] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 471.958346][ T6642] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 471.974469][ T6642] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.982669][ T6642] usb 2-1: Product: syz [ 471.987062][ T6642] usb 2-1: Manufacturer: syz [ 471.992519][ T6642] usb 2-1: SerialNumber: syz [ 472.000486][ T6642] usb 2-1: config 0 descriptor?? [ 472.010619][ T6642] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 472.026588][ T6650] usb 1-1: config index 0 descriptor too short (expected 65535, got 77) [ 472.046024][ T6650] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 472.058752][ T6650] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 472.073133][ T6650] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 472.083586][ T6650] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.130900][ T6650] usb 1-1: Product: syz [ 472.137924][ T6650] usb 1-1: Manufacturer: syz [ 472.142561][ T6650] usb 1-1: SerialNumber: syz [ 472.158648][ T6650] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 472.179838][ T6650] usb 1-1: no configuration chosen from 1 choice [ 472.306324][ T6640] usb 2-1: USB disconnect, device number 64 [ 472.560244][T11408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.577067][T11408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.616135][T11408] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 472.626452][T11408] ptrace attach of "./syz-executor exec"[5849] was attempted by "\x09   Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ …*bs\x0b   /dev/snd/controlC#  E\x09$   \x09!ÿÿ \x22 \x09 ý    /dev/infiniband/rdma_cm syz0   syz1 [ 473.198069][T11421] netlink: 'syz.1.1488': attribute type 27 has an invalid length. [ 473.333464][T11421] veth0_to_bond: left allmulticast mode [ 473.354182][T11421] geneve2: left promiscuous mode [ 473.359563][T11421] geneve2: left allmulticast mode [ 473.417932][T11422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.426599][T11422] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.479852][T11422] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 473.495374][ T6640] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 473.541074][ T5889] usb 4-1: USB disconnect, device number 80 [ 473.625022][T11424] bridge0: port 1(gretap0) entered blocking state [ 473.640306][ T6640] usb 5-1: unable to get BOS descriptor or descriptor too short [ 473.651008][ T6640] usb 5-1: not running at top speed; connect to a high speed hub [ 473.663411][ T6640] usb 5-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 473.684798][T11424] bridge0: port 1(gretap0) entered disabled state [ 473.696488][ T6640] usb 5-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=f4.4a [ 473.710970][T11424] gretap0: entered allmulticast mode [ 473.720704][ T6640] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.733682][T11424] gretap0: entered promiscuous mode [ 473.738072][ T6640] usb 5-1: Product: syz [ 473.791382][T11427] gretap0: left allmulticast mode [ 473.796545][T11427] gretap0: left promiscuous mode [ 473.817897][ T6640] usb 5-1: Manufacturer: syz [ 473.822582][ T6640] usb 5-1: SerialNumber: syz [ 473.840858][T11427] bridge0: port 1(gretap0) entered disabled state [ 473.997734][ T5889] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 474.057288][T11418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.070455][T11418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.087426][ T6640] usbsevseg 5-1:129.0: USB 7 Segment device now attached [ 474.103568][ T6640] usb 5-1: USB disconnect, device number 90 [ 474.112372][ T6640] usbsevseg 5-1:129.0: USB 7 Segment now disconnected [ 474.172060][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 474.222921][ T5889] usb 4-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01 [ 474.243181][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.257891][ T5889] usb 4-1: Product: syz [ 474.262136][ T5889] usb 4-1: Manufacturer: syz [ 474.270426][ T5889] usb 4-1: SerialNumber: syz [ 474.280923][ T5889] usb 4-1: config 0 descriptor?? [ 474.307974][ T5889] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 474.491421][ T6650] usb 4-1: USB disconnect, device number 81 [ 474.546375][ T6642] usb 1-1: USB disconnect, device number 103 [ 474.601374][ T5889] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 474.634714][T11437] vlan0: entered promiscuous mode [ 474.762284][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 474.777332][ T5889] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 474.791413][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.802733][ T5889] usb 2-1: Product: syz [ 474.809280][ T5889] usb 2-1: Manufacturer: syz [ 474.815838][ T5889] usb 2-1: SerialNumber: syz [ 474.826022][ T5889] usb 2-1: config 0 descriptor?? [ 474.827828][T11442] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1498'. [ 474.840200][ T5889] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 474.926303][T11446] binder: 11445:11446 ioctl c018620c 200000000040 returned -1 [ 475.201422][T11455] tipc: Enabling of bearer rejected, failed to enable media [ 475.246426][T11455] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 475.594683][T11467] batadv_slave_1: entered promiscuous mode [ 475.633199][T11467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.898374][T11464] veth0_to_bond: entered allmulticast mode [ 475.904601][T11472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.925786][T11472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.979317][T11464] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 476.047429][ T6642] usb 2-1: USB disconnect, device number 65 [ 476.350221][T11480] input: syz1 as /devices/virtual/input/input33 [ 476.467154][T11482] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1508'. [ 476.577695][ T6643] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 476.720112][T11484] program syz.1.1510 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 476.737744][ T6643] usb 4-1: Using ep0 maxpacket: 8 [ 476.770329][ T6643] usb 4-1: unable to get BOS descriptor or descriptor too short [ 476.803043][ T6643] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 476.817734][ T6643] usb 4-1: config 0 has no interface number 0 [ 476.823957][ T6643] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 476.835027][ T6643] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 476.844956][ T6643] usb 4-1: config 0 interface 88 has no altsetting 0 [ 476.855874][ T6643] usb 4-1: string descriptor 0 read error: -22 [ 476.862504][ T6643] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 476.871931][ T6643] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 476.889013][ T6643] usb 4-1: config 0 descriptor?? [ 476.907369][ T6643] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input34 [ 476.956629][T11486] loop2: detected capacity change from 0 to 7 [ 476.971108][T11486] Dev loop2: unable to read RDB block 7 [ 477.000387][T11486] loop2: unable to read partition table [ 477.034174][T11486] loop2: partition table beyond EOD, truncated [ 477.068997][T11486] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 477.359880][ T5941] udevd[5941]: Error opening device "/dev/input/event5": Input/output error [ 477.381241][T11490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.398866][ T5941] udevd[5941]: Unable to EVIOCGABS device "/dev/input/event5" [ 477.406602][ T5941] udevd[5941]: Unable to EVIOCGABS device "/dev/input/event5" [ 477.425690][T11490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.617130][T11496] netlink: 'syz.3.1509': attribute type 27 has an invalid length. [ 477.665191][T11492] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967291 (274877906624 ns) > initial count (30400 ns). Using initial count to start timer. [ 477.690782][T11496] bridge0: left allmulticast mode [ 477.709268][T11496] vcan0: left promiscuous mode [ 477.714561][T11496] vcan0: left allmulticast mode [ 477.755113][T11496] geneve2: left promiscuous mode [ 477.760305][T11496] geneve2: left allmulticast mode [ 477.765679][T11496] geneve3: left promiscuous mode [ 477.771459][T11496] geneve3: left allmulticast mode [ 477.779178][T11496] geneve4: left promiscuous mode [ 477.785085][T11496] geneve4: left allmulticast mode [ 478.101321][T11513] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 478.634863][T11521] xt_CT: You must specify a L4 protocol and not use inversions on it [ 479.152371][T11527] loop2: detected capacity change from 0 to 7 [ 479.160630][T11527] Dev loop2: unable to read RDB block 7 [ 479.217708][ T6640] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 479.217708][ T6643] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 479.242192][T11527] loop2: unable to read partition table [ 479.251347][T11527] loop2: partition table beyond EOD, truncated [ 479.313562][T11527] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 479.368807][ T6643] usb 2-1: Using ep0 maxpacket: 32 [ 479.381962][ T6643] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 479.415156][ T6643] usb 2-1: config 0 has no interface number 0 [ 479.436208][ T6640] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 479.449812][ T6643] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 479.473046][ T6640] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 479.491302][ T6640] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.516096][ T6642] usb 4-1: USB disconnect, device number 82 [ 479.524688][ T6643] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 479.525005][ T6640] usb 5-1: Product: syz [ 479.559130][ T6643] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.577624][ T6643] usb 2-1: Product: syz [ 479.581976][ T6643] usb 2-1: Manufacturer: syz [ 479.593543][ T6643] usb 2-1: SerialNumber: syz [ 479.598461][ T6640] usb 5-1: Manufacturer: syz [ 479.598487][ T6640] usb 5-1: SerialNumber: syz [ 479.620469][ T6640] usb 5-1: config 0 descriptor?? [ 479.632932][ T6643] usb 2-1: config 0 descriptor?? [ 479.675088][ T6643] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 479.688303][ T6640] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 479.727602][ T6643] em28xx 2-1:0.132: Video interface 132 found: [ 479.829373][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 479.829420][ T30] audit: type=1326 audit(1747851225.394:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11530 comm="syz.3.1527" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b8c38e969 code=0x0 [ 479.842696][T11533] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 479.914354][T11525] netlink: 'syz.1.1523': attribute type 1 has an invalid length. [ 480.012747][T11525] bond1: entered promiscuous mode [ 480.030129][T11525] bond1: entered allmulticast mode [ 480.173200][ T6643] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 480.230989][T11542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1530'. [ 480.598336][ T6643] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 480.616936][T11548] ptrace attach of "./syz-executor exec"[5849] was attempted by "./syz-executor exec"[11548] [ 480.666736][ T6643] em28xx 2-1:0.132: board has no eeprom [ 480.777704][ T6643] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 480.801376][ T6643] em28xx 2-1:0.132: analog set to bulk mode. [ 480.813432][ T6642] em28xx 2-1:0.132: Registering V4L2 extension [ 480.833855][ T6640] usb 5-1: USB disconnect, device number 91 [ 480.845642][ T6643] usb 2-1: USB disconnect, device number 66 [ 480.936338][ T6643] em28xx 2-1:0.132: Disconnecting em28xx [ 481.045884][T11560] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 481.337714][ T5889] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 481.540664][ T6642] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 481.583660][ T6642] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 481.602295][ T6642] em28xx 2-1:0.132: No AC97 audio processor [ 481.636388][ T6642] usb 2-1: Decoder not found [ 481.651224][ T6642] em28xx 2-1:0.132: failed to create media graph [ 481.663386][T11568] loop2: detected capacity change from 0 to 7 [ 481.669901][ T6642] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 481.678222][T11568] Dev loop2: unable to read RDB block 7 [ 481.690101][T11568] loop2: unable to read partition table [ 481.712766][ T5889] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 481.713898][ T6642] em28xx 2-1:0.132: Remote control support is not available for this card. [ 481.740586][T11568] loop2: partition table beyond EOD, truncated [ 481.747123][ T5889] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 481.761914][ T6643] em28xx 2-1:0.132: Closing input extension [ 481.767733][T11568] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 481.855137][ T6643] em28xx 2-1:0.132: Freeing device [ 481.876075][ T5889] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 481.939286][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.003427][ T5889] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 482.152260][ T5889] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 482.376325][ T5911] udevd[5911]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 482.581651][T11585] Cannot find map_set index 0 as target [ 482.664332][T11587] xt_CT: You must specify a L4 protocol and not use inversions on it [ 483.105282][T11591] input: syz1 as /devices/virtual/input/input35 [ 483.112322][T11591] input: failed to attach handler leds to device input35, error: -6 [ 483.277711][ T6650] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 483.444771][ T6650] usb 2-1: config 0 has no interfaces? [ 483.458767][ T6650] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 483.468232][ T6650] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.561566][ T6650] usb 2-1: Product: syz [ 483.624157][ T6650] usb 2-1: Manufacturer: syz [ 483.664893][ T6650] usb 2-1: SerialNumber: syz [ 483.696275][ T6650] usb 2-1: config 0 descriptor?? [ 484.007715][ T6650] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 484.173763][ T6650] usb 1-1: config 1 interface 0 has no altsetting 0 [ 484.185289][ T6650] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 484.282811][ T6650] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.294025][ T6650] usb 1-1: Product: syz [ 484.298818][ T6650] usb 1-1: Manufacturer: syz [ 484.303808][ T6650] usb 1-1: SerialNumber: syz [ 484.386367][ T5889] usb 4-1: USB disconnect, device number 83 [ 484.612906][T11609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1547'. [ 484.623842][T11609] netlink: 'syz.3.1547': attribute type 5 has an invalid length. [ 484.678982][T11609] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1547'. [ 484.843485][T11609] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 484.856395][T11609] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 484.880096][T11609] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 484.901492][T11609] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 484.934488][T11609] geneve5: entered promiscuous mode [ 484.954420][T11609] geneve5: entered allmulticast mode [ 485.025513][ T6650] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 104 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 485.500992][T11601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.530275][T11601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.640102][T11621] Cannot find map_set index 0 as target [ 486.457612][ T5889] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 486.705715][T11638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.715094][T11638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.941172][ T5889] usb 4-1: config 0 has no interfaces? [ 486.978990][T11641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.047058][T11641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.055818][ T5889] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 487.065222][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.079584][ T5889] usb 4-1: Product: syz [ 487.084020][ T5889] usb 4-1: Manufacturer: syz [ 487.090003][ T5889] usb 4-1: SerialNumber: syz [ 487.115149][ T5889] usb 4-1: config 0 descriptor?? [ 487.167900][ T6650] usb 2-1: USB disconnect, device number 67 [ 487.247860][ T6640] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 487.526025][T11649] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1559'. [ 487.535297][T11649] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1559'. [ 487.545351][ T6640] usb 5-1: Using ep0 maxpacket: 16 [ 487.562590][T11649] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 487.574153][T11649] syz_tun: entered promiscuous mode [ 487.582383][T11649] hsr1: Slave A (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 487.657029][ T6640] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 487.748605][ T6640] usb 5-1: config 0 has no interface number 0 [ 487.759045][ T6640] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.870799][T11650] ip6t_srh: unknown srh match flags B153 [ 487.930113][ T6640] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.940091][ T6640] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 487.953628][ T6640] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.996811][ T6640] usb 5-1: config 0 descriptor?? [ 488.465769][ T6640] hid (null): nested delimiters [ 488.471803][ T6640] hid (null): nested delimiters [ 488.476926][ T6640] hid (null): nested delimiters [ 488.483314][ T6640] hid (null): report_id 24797 is invalid [ 488.673364][ T6640] usb 5-1: USB disconnect, device number 92 [ 489.040310][T11653] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1560'. [ 489.544470][ T30] audit: type=1326 audit(1747851235.104:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11659 comm="syz.4.1562" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabd3b8e969 code=0x0 [ 490.297071][T11666] netlink: 'syz.2.1564': attribute type 4 has an invalid length. [ 490.305179][T11666] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1564'. [ 490.320077][T11666] netlink: 'syz.2.1564': attribute type 4 has an invalid length. [ 490.329999][T11666] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1564'. [ 490.344938][T11666] netlink: 'syz.2.1564': attribute type 4 has an invalid length. [ 490.358413][T11666] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1564'. [ 490.437241][T11666] netlink: 'syz.2.1564': attribute type 4 has an invalid length. [ 490.494154][T11666] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1564'. [ 490.525304][T11666] netlink: 'syz.2.1564': attribute type 4 has an invalid length. [ 490.543684][T11666] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1564'. [ 490.553571][T11666] netlink: 'syz.2.1564': attribute type 4 has an invalid length. [ 490.571933][ T6640] usb 4-1: USB disconnect, device number 84 [ 490.610654][T11666] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1564'. [ 490.647881][T11666] netlink: 'syz.2.1564': attribute type 4 has an invalid length. [ 490.662150][T11666] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1564'. [ 490.914764][T11666] netlink: 'syz.2.1564': attribute type 4 has an invalid length. [ 490.928636][T11666] netlink: 'syz.2.1564': attribute type 4 has an invalid length. [ 490.936877][T11666] netlink: 'syz.2.1564': attribute type 4 has an invalid length. [ 491.211388][T11678] Cannot find map_set index 0 as target [ 491.489845][T11685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.518107][T11685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.547202][T11685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.573150][T11685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.593798][T11687] loop2: detected capacity change from 0 to 7 [ 491.618823][T11687] Dev loop2: unable to read RDB block 7 [ 491.624507][T11687] loop2: unable to read partition table [ 491.646315][T11687] loop2: partition table beyond EOD, truncated [ 491.660110][T11687] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 492.268602][ T5889] usb 1-1: USB disconnect, device number 104 [ 492.276757][ T5889] usblp0: removed [ 492.317669][ T6640] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 492.410280][T11689] pim6reg: entered allmulticast mode [ 492.458684][T11689] pim6reg: left allmulticast mode [ 492.468103][ T6640] usb 2-1: device descriptor read/64, error -71 [ 492.831021][ T6640] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 493.121349][ T6650] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 493.337883][ T6640] usb 2-1: device descriptor read/64, error -71 [ 493.448860][ T6640] usb usb2-port1: attempt power cycle [ 493.743697][ T6650] usb 1-1: config 0 has no interfaces? [ 493.857661][ T5889] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 493.866233][ T6640] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 493.910637][ T6640] usb 2-1: device descriptor read/8, error -71 [ 493.983251][ T6650] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 494.018156][ T6650] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.023933][ T5889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.068072][ T6650] usb 1-1: Product: syz [ 494.073553][ T6650] usb 1-1: Manufacturer: syz [ 494.078997][ T6650] usb 1-1: SerialNumber: syz [ 494.085780][ T5889] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.087051][ T6650] usb 1-1: config 0 descriptor?? [ 494.192990][ T6640] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 494.245159][ T5889] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.270679][ T5889] usb 4-1: config 0 interface 0 has no altsetting 0 [ 494.289952][ T5889] usb 4-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 494.312783][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.354287][ T6640] usb 2-1: device descriptor read/8, error -71 [ 494.375025][ T5889] usb 4-1: config 0 descriptor?? [ 494.467990][ T6640] usb usb2-port1: unable to enumerate USB device [ 494.477291][T11722] ip6t_srh: unknown srh match flags B153 [ 494.578307][ T5892] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 494.742020][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.753824][ T5892] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 494.766370][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.802454][ T5889] kye 0003:0458:5015.0013: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 494.866219][ T5889] kye 0003:0458:5015.0013: unbalanced collection at end of report description [ 494.950985][ T5892] usb 5-1: config 0 descriptor?? [ 494.983785][ T5889] kye 0003:0458:5015.0013: parse failed [ 494.990536][T11715] sctp: [Deprecated]: syz.3.1579 (pid 11715) Use of struct sctp_assoc_value in delayed_ack socket option. [ 494.990536][T11715] Use struct sctp_sack_info instead [ 495.036839][ T5889] kye 0003:0458:5015.0013: probe with driver kye failed with error -22 [ 495.045904][T11715] __nla_validate_parse: 29 callbacks suppressed [ 495.045919][T11715] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1579'. [ 495.102337][ T6640] usb 4-1: USB disconnect, device number 85 [ 495.428000][ T5892] hid-steam 0003:28DE:1142.0014: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 495.507648][ T5892] hid-steam 0003:28DE:1142.0014: Steam wireless receiver connected [ 495.529081][ T5892] hid-steam 0003:28DE:1142.0015: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 495.849220][ T5892] usb 1-1: USB disconnect, device number 105 [ 496.464355][T11742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1586'. [ 496.491823][T11742] validate_nla: 25 callbacks suppressed [ 496.491846][T11742] netlink: 'syz.3.1586': attribute type 5 has an invalid length. [ 496.517283][T11742] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1586'. [ 496.637806][ T5892] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 496.809430][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 496.859100][ T5892] usb 2-1: config 253 has an invalid descriptor of length 255, skipping remainder of the config [ 496.952256][ T5892] usb 2-1: config 253 has 0 interfaces, different from the descriptor's value: 1 [ 496.969221][ T5892] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 496.997730][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.008848][ T5892] usb 2-1: Product: syz [ 497.013141][ T5892] usb 2-1: Manufacturer: syz [ 497.026558][ T5892] usb 2-1: SerialNumber: syz [ 497.061559][T11730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.298919][ T5892] usb 2-1: USB disconnect, device number 72 [ 497.307608][ T6643] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 497.385848][ T6650] usb 5-1: USB disconnect, device number 93 [ 497.427253][ T6650] hid-steam 0003:28DE:1142.0014: Steam wireless receiver disconnected [ 497.457776][ T6643] usb 1-1: Using ep0 maxpacket: 8 [ 497.465182][ T6643] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 497.480422][ T6643] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 497.495691][ T6643] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.510017][ T6643] usb 1-1: Product: syz [ 497.517876][ T6643] usb 1-1: Manufacturer: syz [ 497.527628][ T6643] usb 1-1: SerialNumber: syz [ 497.537253][ T6643] usb 1-1: config 0 descriptor?? [ 497.746771][T11730] syz.0.1584(11730): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 498.828260][T11730] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 499.361419][T11783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1597'. [ 499.417864][T11783] netlink: 'syz.2.1597': attribute type 5 has an invalid length. [ 499.417894][ T6643] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 499.426816][T11783] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1597'. [ 499.487002][T11783] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 499.498857][T11783] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 499.511617][T11783] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 499.524985][T11783] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 499.562290][T11783] geneve13: entered promiscuous mode [ 499.571057][T11783] geneve13: entered allmulticast mode [ 499.630071][ T6643] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.657727][ T6643] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 499.666953][ T6643] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.711481][ T6643] usb 4-1: config 0 descriptor?? [ 499.740378][ T6643] pwc: Askey VC010 type 2 USB webcam detected. [ 499.889523][T11795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 499.925411][ T6643] pwc: send_video_command error -71 [ 499.937582][ T6643] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 499.945247][ T6643] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 500.002094][ T6643] usb 4-1: USB disconnect, device number 86 [ 500.095035][ T6642] usb 1-1: USB disconnect, device number 106 [ 500.158121][ T6650] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 500.327657][ T6650] usb 5-1: Using ep0 maxpacket: 8 [ 500.348573][ T6650] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.374453][ T6650] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 500.394757][ T6650] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.424759][ T6650] usb 5-1: config 0 descriptor?? [ 500.443822][ T6650] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 500.450548][ T6643] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 500.619693][ T6643] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.637951][ T6643] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 500.652443][T11796] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 500.660294][ T6643] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.680502][T11805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1603'. [ 500.693305][ T6643] usb 4-1: config 0 descriptor?? [ 500.728778][ T6643] pwc: Askey VC010 type 2 USB webcam detected. [ 500.742917][ T6650] gspca_vc032x: reg_w err -71 [ 500.760899][ T6650] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 500.788993][ T6650] usb 5-1: USB disconnect, device number 94 [ 500.956242][T11814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.966951][T11814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.998435][ T6642] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 501.119067][ T6643] pwc: recv_control_msg error -32 req 02 val 2b00 [ 501.132502][ T6643] pwc: recv_control_msg error -32 req 02 val 2700 [ 501.141858][ T6643] pwc: recv_control_msg error -32 req 02 val 2c00 [ 501.149959][ T6643] pwc: recv_control_msg error -32 req 04 val 1000 [ 501.159571][ T6643] pwc: recv_control_msg error -32 req 04 val 1300 [ 501.166739][ T6643] pwc: recv_control_msg error -32 req 04 val 1400 [ 501.174353][ T6643] pwc: recv_control_msg error -32 req 02 val 2000 [ 501.183063][ T6643] pwc: recv_control_msg error -32 req 02 val 2100 [ 501.189693][ T6642] usb 2-1: Using ep0 maxpacket: 16 [ 501.195829][ T6643] pwc: recv_control_msg error -32 req 04 val 1500 [ 501.204380][ T6643] pwc: recv_control_msg error -32 req 02 val 2500 [ 501.211621][ T6642] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 501.222518][ T6642] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 501.290383][ T6643] pwc: recv_control_msg error -32 req 02 val 2400 [ 501.306726][ T6642] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 501.322581][ T6642] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.344560][ T6642] usb 2-1: Product: syz [ 501.348932][ T6642] usb 2-1: Manufacturer: syz [ 501.359857][ T6642] usb 2-1: SerialNumber: syz [ 501.431087][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.437701][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.557642][ T6650] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 501.599437][ T6642] usb 2-1: 0:2 : does not exist [ 501.764662][ T6642] usb 2-1: USB disconnect, device number 73 [ 501.777272][ T6650] usb 1-1: Using ep0 maxpacket: 32 [ 501.817032][ T6650] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 501.825621][ T6650] usb 1-1: config 0 has no interface number 0 [ 501.836320][T11827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.847336][T11827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.862516][ T6650] usb 1-1: config 0 interface 184 has no altsetting 0 [ 501.928940][ T6650] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 501.943506][ T6650] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.952167][ T6650] usb 1-1: Product: syz [ 501.959909][ T6650] usb 1-1: Manufacturer: syz [ 501.964974][ T6650] usb 1-1: SerialNumber: syz [ 501.981386][ T6650] usb 1-1: config 0 descriptor?? [ 501.993018][ T6650] smsc75xx v1.0.0 [ 501.997127][ T6650] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 502.008924][ T6650] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 502.282095][T11833] overlayfs: missing 'lowerdir' [ 502.917853][ T6643] pwc: recv_control_msg error -71 req 02 val 2600 [ 502.937696][ T6643] pwc: recv_control_msg error -71 req 02 val 2900 [ 503.110308][ T6643] pwc: recv_control_msg error -71 req 02 val 2800 [ 503.143460][ T6643] pwc: recv_control_msg error -71 req 04 val 1100 [ 503.162179][ T6643] pwc: recv_control_msg error -71 req 04 val 1200 [ 503.177356][ T6643] pwc: Registered as video103. [ 503.196040][T11843] vlan3: entered promiscuous mode [ 503.208059][ T5892] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 503.218229][ T6643] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input37 [ 503.259192][ T6643] usb 4-1: USB disconnect, device number 87 [ 503.434424][ T5892] usb 2-1: config 0 has no interfaces? [ 503.578642][ T5892] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 503.646993][T11849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.663872][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.701242][T11849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.864147][ T5892] usb 2-1: Product: syz [ 503.879833][ T5892] usb 2-1: Manufacturer: syz [ 503.980276][ T5892] usb 2-1: SerialNumber: syz [ 504.280440][ T5892] usb 2-1: config 0 descriptor?? [ 504.447371][ T5892] usb 1-1: USB disconnect, device number 107 [ 504.563765][T11838] ip6t_srh: unknown srh match flags B153 [ 504.728286][T11856] netlink: 'syz.3.1620': attribute type 11 has an invalid length. [ 505.912425][T11873] netlink: 'syz.4.1625': attribute type 39 has an invalid length. [ 506.315793][ T5892] usb 2-1: USB disconnect, device number 74 [ 506.499321][ T30] audit: type=1326 audit(1747851252.044:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11877 comm="syz.1.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a25b8e969 code=0x7ffc0000 [ 506.631481][ T30] audit: type=1326 audit(1747851252.044:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11877 comm="syz.1.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a25b8e969 code=0x7ffc0000 [ 506.707849][ T30] audit: type=1326 audit(1747851252.044:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11877 comm="syz.1.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f4a25b8e969 code=0x7ffc0000 [ 506.797667][ T6640] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 506.837748][ T30] audit: type=1326 audit(1747851252.044:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11877 comm="syz.1.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a25b8e969 code=0x7ffc0000 [ 506.905359][ T30] audit: type=1326 audit(1747851252.044:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11877 comm="syz.1.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a25b8e969 code=0x7ffc0000 [ 506.997940][ T6640] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.038856][ T6640] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.048894][ T30] audit: type=1326 audit(1747851252.044:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11877 comm="syz.1.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a25b8e969 code=0x7ffc0000 [ 507.082835][ T6640] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 507.546151][ T6640] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 507.556653][ T30] audit: type=1326 audit(1747851252.044:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11877 comm="syz.1.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a25b90887 code=0x7ffc0000 [ 507.588493][ T6640] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.613854][ T6640] usb 5-1: config 0 descriptor?? [ 507.655890][ T30] audit: type=1326 audit(1747851252.044:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11877 comm="syz.1.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f4a25b907fc code=0x7ffc0000 [ 507.703626][ T30] audit: type=1326 audit(1747851252.044:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11877 comm="syz.1.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f4a25b90734 code=0x7ffc0000 [ 507.790527][ T30] audit: type=1326 audit(1747851252.044:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11877 comm="syz.1.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f4a25b90734 code=0x7ffc0000 [ 508.092613][ T6640] plantronics 0003:047F:FFFF.0016: item 0 4 0 9 parsing failed [ 508.109749][ T6640] plantronics 0003:047F:FFFF.0016: parse failed [ 508.126411][ T6640] plantronics 0003:047F:FFFF.0016: probe with driver plantronics failed with error -22 [ 508.314254][ T5889] usb 5-1: USB disconnect, device number 95 [ 508.375730][T11919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1637'. [ 508.385047][ T6643] usb 4-1: new low-speed USB device number 88 using dummy_hcd [ 508.393420][T11919] netlink: 'syz.1.1637': attribute type 5 has an invalid length. [ 508.403613][T11919] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1637'. [ 508.423591][T11920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.433320][T11920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.461955][T11919] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 508.470887][T11919] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 508.480145][T11919] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 508.489200][T11919] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 508.498547][T11919] geneve3: entered promiscuous mode [ 508.503917][T11919] geneve3: entered allmulticast mode [ 508.517655][ T6640] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 508.570731][ T6643] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 508.586427][ T6643] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.618616][T11920] ip6t_srh: unknown srh match flags B153 [ 508.704241][ T6643] usb 4-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.00 [ 508.714809][ T6643] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.795817][ T6643] usb 4-1: config 0 descriptor?? [ 508.808098][ T6640] usb 1-1: Using ep0 maxpacket: 8 [ 508.821906][ T6640] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 508.834844][ T6640] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 508.851270][ T6640] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 508.874047][ T6640] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 508.889880][ T6640] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.909672][ T6640] usb 1-1: Product: syz [ 508.922690][ T6640] usb 1-1: Manufacturer: syz [ 508.934690][ T6640] usb 1-1: SerialNumber: syz [ 508.979875][ T6640] usb 1-1: config 0 descriptor?? [ 509.006599][ T6640] streamzap 1-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 509.037818][ T6642] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 509.197760][ T6642] usb 2-1: Using ep0 maxpacket: 32 [ 509.208130][ T6640] usb 1-1: USB disconnect, device number 108 [ 509.243831][ T6642] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.268895][ T6643] logitech-hidpp-device 0003:046D:C090.0017: unbalanced collection at end of report description [ 509.282602][ T6642] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.294463][ T6650] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 509.305216][ T6643] logitech-hidpp-device 0003:046D:C090.0017: hidpp_probe:parse failed [ 509.313861][ T6642] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 509.324716][ T6643] logitech-hidpp-device 0003:046D:C090.0017: probe with driver logitech-hidpp-device failed with error -22 [ 509.336607][ T6642] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.368055][ T6642] usb 2-1: config 0 descriptor?? [ 509.381346][ T6642] hub 2-1:0.0: USB hub found [ 509.434580][ T5892] usb 4-1: USB disconnect, device number 88 [ 509.467616][ T6650] usb 5-1: Using ep0 maxpacket: 16 [ 509.475228][ T6650] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 509.485781][ T6650] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 509.509491][ T6650] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 509.519080][ T6650] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.529347][ T6650] usb 5-1: Product: syz [ 509.535447][ T6650] usb 5-1: Manufacturer: syz [ 509.543088][ T6650] usb 5-1: SerialNumber: syz [ 509.581438][ T6642] hub 2-1:0.0: 1 port detected [ 509.758849][ T6650] usb 5-1: 0:2 : does not exist [ 509.784356][ T6650] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 509.833381][ T6650] usb 5-1: USB disconnect, device number 96 [ 509.890888][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 510.196057][ T6650] hub 2-1:0.0: activate --> -90 [ 510.267866][ T5892] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 510.409706][ T5892] usb 4-1: device descriptor read/64, error -71 [ 510.601753][ T6640] usb 2-1: USB disconnect, device number 75 [ 510.648403][ T5892] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 510.787856][ T5892] usb 4-1: device descriptor read/64, error -71 [ 510.827918][ T6650] usb 2-1-port1: config error [ 510.898129][ T5892] usb usb4-port1: attempt power cycle [ 511.277766][ T5892] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 511.325767][ T5892] usb 4-1: device descriptor read/8, error -71 [ 511.597689][ T5892] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 511.628371][ T5892] usb 4-1: device descriptor read/8, error -71 [ 511.753827][ T5892] usb usb4-port1: unable to enumerate USB device [ 512.283967][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 512.283987][ T30] audit: type=1326 audit(1747851257.844:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.0.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870c18e969 code=0x7ffc0000 [ 512.420688][ T30] audit: type=1326 audit(1747851257.844:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.0.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870c18e969 code=0x7ffc0000 [ 512.451799][ T30] audit: type=1326 audit(1747851257.874:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.0.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f870c18e969 code=0x7ffc0000 [ 512.480292][ T30] audit: type=1326 audit(1747851257.874:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.0.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870c18e969 code=0x7ffc0000 [ 512.502744][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.516740][ T30] audit: type=1326 audit(1747851257.874:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.0.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870c18e969 code=0x7ffc0000 [ 512.544220][ T30] audit: type=1326 audit(1747851257.944:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.0.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f870c18e969 code=0x7ffc0000 [ 512.566859][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.577439][ T30] audit: type=1326 audit(1747851257.944:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.0.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870c18e969 code=0x7ffc0000 [ 512.599988][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.672976][ T30] audit: type=1326 audit(1747851257.944:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.0.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870c18e969 code=0x7ffc0000 [ 512.696118][ T30] audit: type=1326 audit(1747851257.944:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.0.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f870c18e969 code=0x7ffc0000 [ 512.718686][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.726831][ T30] audit: type=1326 audit(1747851257.944:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.0.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870c18e969 code=0x7ffc0000 [ 512.749351][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.877759][ T6650] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 513.028829][ T6650] usb 5-1: Using ep0 maxpacket: 32 [ 513.195047][ T6650] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.211638][ T6650] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.221702][ T6650] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 513.237622][ T5892] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 513.245415][ T6650] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.295609][ T6650] usb 5-1: config 0 descriptor?? [ 513.314747][ T6650] hub 5-1:0.0: USB hub found [ 513.387608][ T5892] usb 1-1: Using ep0 maxpacket: 32 [ 513.433302][ T5892] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 513.462106][ T5892] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 513.488338][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 513.502790][ T5892] usb 1-1: Product: syz [ 513.514196][ T5892] usb 1-1: Manufacturer: syz [ 513.514272][ T6650] hub 5-1:0.0: 1 port detected [ 513.532666][ T5892] usb 1-1: SerialNumber: syz [ 513.550562][ T5892] usb 1-1: config 0 descriptor?? [ 513.556450][T11989] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 513.599061][ T5892] hub 1-1:0.0: bad descriptor, ignoring hub [ 513.625466][ T5892] hub 1-1:0.0: probe with driver hub failed with error -5 [ 513.887903][ T5892] usb 1-1: USB disconnect, device number 109 [ 513.967742][ T6643] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 514.120193][ T6650] hub 5-1:0.0: activate --> -90 [ 514.130691][ T6643] usb 4-1: config 0 has no interfaces? [ 514.140126][ T6643] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 514.149557][ T6643] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.157743][ T6643] usb 4-1: Product: syz [ 514.167850][ T6643] usb 4-1: Manufacturer: syz [ 514.186017][ T6643] usb 4-1: SerialNumber: syz [ 514.208006][ T6643] usb 4-1: config 0 descriptor?? [ 514.521661][ T6640] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 514.531408][ T6643] usb 5-1: USB disconnect, device number 97 [ 514.749972][ T6640] usb 2-1: Using ep0 maxpacket: 8 [ 514.756695][ T6640] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 514.756739][ T6640] usb 2-1: can't read configurations, error -61 [ 514.759601][ T6650] usb 5-1-port1: config error [ 514.889600][ T6640] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 515.207632][ T6640] usb 2-1: Using ep0 maxpacket: 8 [ 515.219217][ T6640] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 515.227053][ T6640] usb 2-1: can't read configurations, error -61 [ 515.242263][ T6640] usb usb2-port1: attempt power cycle [ 515.697642][ T6640] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 515.791401][ T6640] usb 2-1: Using ep0 maxpacket: 8 [ 515.799419][ T6640] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 515.807142][ T6640] usb 2-1: can't read configurations, error -61 [ 515.823838][T12033] binder: BC_ACQUIRE_RESULT not supported [ 515.861475][T12033] binder: 12032:12033 ioctl c0306201 2000000001c0 returned -22 [ 515.977818][ T6640] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 515.998315][ T6640] usb 2-1: Using ep0 maxpacket: 8 [ 516.006463][ T6640] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 516.014440][ T6640] usb 2-1: can't read configurations, error -61 [ 516.021235][ T6640] usb usb2-port1: unable to enumerate USB device [ 516.117620][ T6643] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 516.278119][ T6643] usb 5-1: Using ep0 maxpacket: 16 [ 516.296936][ T6643] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 516.306539][ T6643] usb 5-1: config 0 has no interface number 0 [ 516.314983][ T6643] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 516.334733][ T6643] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 516.365506][ T6643] usb 5-1: config 0 interface 41 has no altsetting 0 [ 516.403152][ T6643] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 516.415487][ T6643] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.453561][ T6643] usb 5-1: Product: syz [ 516.460356][ T6643] usb 5-1: Manufacturer: syz [ 516.465077][ T6643] usb 5-1: SerialNumber: syz [ 516.481134][ T6643] usb 5-1: config 0 descriptor?? [ 516.487032][T12034] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 516.495778][T12034] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 516.628853][T12038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.669025][T12038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.706867][T12033] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 516.735047][T12033] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 517.081822][ T6650] usb 4-1: USB disconnect, device number 93 [ 517.151879][ T6643] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 517.380933][T12046] loop2: detected capacity change from 0 to 7 [ 517.422930][ T5979] Dev loop2: unable to read RDB block 7 [ 517.447802][ T5979] loop2: unable to read partition table [ 517.466438][ T5979] loop2: partition table beyond EOD, truncated [ 517.517891][T12046] Dev loop2: unable to read RDB block 7 [ 517.525597][T12046] loop2: unable to read partition table [ 517.537818][T12046] loop2: partition table beyond EOD, truncated [ 517.545781][T12046] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 517.556397][ T6643] dm9601 5-1:0.41 (unnamed net_device) (uninitialized): Error reading chip ID [ 517.572064][ T6643] sr9700 5-1:0.41: probe with driver sr9700 failed with error -71 [ 517.606669][ T6643] usb 5-1: USB disconnect, device number 98 [ 518.267663][ T6640] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 518.427599][ T6640] usb 1-1: Using ep0 maxpacket: 32 [ 518.445693][ T6640] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.483781][ T6640] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.503155][ T6640] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 518.527680][ T6640] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.561618][ T6640] usb 1-1: config 0 descriptor?? [ 518.579954][ T6640] hub 1-1:0.0: USB hub found [ 518.660321][T12067] FAULT_INJECTION: forcing a failure. [ 518.660321][T12067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.674642][T12067] CPU: 0 UID: 0 PID: 12067 Comm: syz.4.1681 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 518.674672][T12067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 518.674686][T12067] Call Trace: [ 518.674696][T12067] [ 518.674707][T12067] dump_stack_lvl+0x189/0x250 [ 518.674751][T12067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 518.674782][T12067] ? __pfx__printk+0x10/0x10 [ 518.674806][T12067] ? __pfx_copy_data+0x10/0x10 [ 518.674842][T12067] should_fail_ex+0x414/0x560 [ 518.674871][T12067] _copy_to_user+0x31/0xb0 [ 518.674902][T12067] ? __pfx_virtio_read+0x10/0x10 [ 518.674927][T12067] rng_dev_read+0x3f2/0x770 [ 518.674959][T12067] ? __pfx_rng_dev_read+0x10/0x10 [ 518.674991][T12067] ? bpf_lsm_file_permission+0x9/0x20 [ 518.675018][T12067] ? security_file_permission+0x75/0x290 [ 518.675040][T12067] ? rw_verify_area+0x258/0x650 [ 518.675068][T12067] vfs_readv+0x5a2/0x840 [ 518.675096][T12067] ? __pfx_rng_dev_read+0x10/0x10 [ 518.675127][T12067] ? __pfx_vfs_readv+0x10/0x10 [ 518.675174][T12067] ? __fget_files+0x2a/0x420 [ 518.675214][T12067] ? __fget_files+0x3a0/0x420 [ 518.675241][T12067] ? __fget_files+0x2a/0x420 [ 518.675281][T12067] __x64_sys_preadv+0x197/0x2a0 [ 518.675311][T12067] ? __pfx___x64_sys_preadv+0x10/0x10 [ 518.675342][T12067] ? do_syscall_64+0xba/0x210 [ 518.675375][T12067] do_syscall_64+0xf6/0x210 [ 518.675404][T12067] ? clear_bhb_loop+0x60/0xb0 [ 518.675430][T12067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.675451][T12067] RIP: 0033:0x7fabd3b8e969 [ 518.675470][T12067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.675489][T12067] RSP: 002b:00007fabd4a68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 518.675511][T12067] RAX: ffffffffffffffda RBX: 00007fabd3db5fa0 RCX: 00007fabd3b8e969 [ 518.675527][T12067] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 518.675540][T12067] RBP: 00007fabd4a68090 R08: 0000000000000000 R09: 0000000000000000 [ 518.675554][T12067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 518.675566][T12067] R13: 0000000000000000 R14: 00007fabd3db5fa0 R15: 00007fabd3edfa28 [ 518.675598][T12067] [ 518.931961][ T6640] hub 1-1:0.0: 1 port detected [ 519.142948][T12075] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 519.160722][T12075] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 519.173328][T12075] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 519.182618][T12075] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 519.210974][T12080] vlan3: entered promiscuous mode [ 519.367734][ T6643] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 519.531470][ T6643] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 519.546792][ T6643] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 519.559250][ T6643] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.567985][ T6643] usb 5-1: Product: syz [ 519.568922][ T6640] hub 1-1:0.0: activate --> -90 [ 519.572324][ T6643] usb 5-1: Manufacturer: syz [ 519.581887][ T6643] usb 5-1: SerialNumber: syz [ 519.598312][ T6643] usb 5-1: config 0 descriptor?? [ 519.607287][ T6643] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 519.986563][ T5892] usb 1-1: USB disconnect, device number 110 [ 520.197671][ T6640] usb 1-1-port1: config error [ 520.406836][ T5889] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 520.635247][ T5889] usb 2-1: config 0 has no interfaces? [ 520.662307][ T5889] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 520.671567][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.679932][ T5889] usb 2-1: Product: syz [ 520.687590][ T5889] usb 2-1: Manufacturer: syz [ 520.692237][ T5889] usb 2-1: SerialNumber: syz [ 520.734652][ T5889] usb 2-1: config 0 descriptor?? [ 521.283913][ T6643] usb 5-1: USB disconnect, device number 99 [ 521.344910][ T5889] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 521.617735][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 521.624524][ T5889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.634888][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 521.656216][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 521.700535][ T5889] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 521.747544][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 521.775634][ T5889] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 521.785288][ T5889] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 521.800406][ T5889] usb 4-1: Manufacturer: syz [ 521.820879][ T5889] usb 4-1: config 0 descriptor?? [ 522.206736][T12122] netlink: 368 bytes leftover after parsing attributes in process `syz.2.1696'. [ 522.246349][T12122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1696'. [ 522.268943][ T5889] rc_core: IR keymap rc-hauppauge not found [ 522.285640][ T5892] usb 2-1: USB disconnect, device number 80 [ 522.294538][T12124] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 522.297968][ T5889] Registered IR keymap rc-empty [ 522.346630][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 522.387284][T12127] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 522.399045][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 522.415847][T12127] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 522.441066][ T5889] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 522.472023][T12127] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 522.488094][ T5889] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input39 [ 522.508866][T12127] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 522.525741][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 522.588185][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 522.642123][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 522.677835][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 522.697731][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 522.727900][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 522.758111][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 522.787848][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 522.828920][ T6643] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 522.839319][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 522.878122][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 522.900090][ T5889] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 522.910343][ T5889] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 522.931965][ T5889] usb 4-1: USB disconnect, device number 94 [ 523.001865][ T6643] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 523.018446][ T5892] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 523.031127][ T6643] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 523.057634][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 523.057655][ T30] audit: type=1326 audit(1747851268.604:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12148 comm="syz.2.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aafd8e969 code=0x7ffc0000 [ 523.086729][ C1] vkms_vblank_simulate: vblank timer overrun [ 523.086987][ T6643] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 523.124008][ T6643] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 523.137162][ T30] audit: type=1326 audit(1747851268.604:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12148 comm="syz.2.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aafd8e969 code=0x7ffc0000 [ 523.156602][ T6643] usb 2-1: SerialNumber: syz [ 523.174867][ T30] audit: type=1326 audit(1747851268.674:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12148 comm="syz.2.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f3aafd8e969 code=0x7ffc0000 [ 523.207428][ T30] audit: type=1326 audit(1747851268.674:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12148 comm="syz.2.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aafd8e969 code=0x7ffc0000 [ 523.235084][ T5892] usb 1-1: Using ep0 maxpacket: 32 [ 523.257310][ T5892] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 523.267725][ T5892] usb 1-1: config 0 has no interface number 0 [ 523.274803][ T5892] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 21760, setting to 1024 [ 523.287372][ T30] audit: type=1326 audit(1747851268.674:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12148 comm="syz.2.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aafd8e969 code=0x7ffc0000 [ 523.310326][ T5892] usb 1-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 523.321305][ T30] audit: type=1326 audit(1747851268.674:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12148 comm="syz.2.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3aafd8e969 code=0x7ffc0000 [ 523.346388][ T30] audit: type=1326 audit(1747851268.674:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12148 comm="syz.2.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aafd8e969 code=0x7ffc0000 [ 523.347782][ T5892] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 523.370236][ C1] vkms_vblank_simulate: vblank timer overrun [ 523.426889][ T30] audit: type=1326 audit(1747851268.674:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12148 comm="syz.2.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aafd8e969 code=0x7ffc0000 [ 523.430439][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.489965][ T6643] usb 2-1: 0:2 : does not exist [ 523.490729][ T5892] usb 1-1: Product: syz [ 523.513689][ T5892] usb 1-1: Manufacturer: syz [ 523.518532][ T5889] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 523.530891][T12155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.540679][T12155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.549133][ T5892] usb 1-1: SerialNumber: syz [ 523.554220][ T6643] usb 2-1: USB disconnect, device number 81 [ 523.557827][ T5892] usb 1-1: config 0 descriptor?? [ 523.566924][T12142] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 523.582594][ T5892] smsc95xx v2.0.0 [ 523.641802][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 523.710434][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 523.724651][ T5889] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 523.735961][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.746934][ T5889] usb 5-1: Product: syz [ 523.751608][ T5889] usb 5-1: Manufacturer: syz [ 523.756643][ T5889] usb 5-1: SerialNumber: syz [ 523.769330][ T5889] usb 5-1: config 0 descriptor?? [ 523.783177][T12142] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 523.804132][ T5889] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 524.230156][T12168] FAULT_INJECTION: forcing a failure. [ 524.230156][T12168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.293203][T12168] CPU: 1 UID: 0 PID: 12168 Comm: syz.3.1714 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 524.293242][T12168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 524.293257][T12168] Call Trace: [ 524.293267][T12168] [ 524.293276][T12168] dump_stack_lvl+0x189/0x250 [ 524.293315][T12168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 524.293345][T12168] ? __pfx__printk+0x10/0x10 [ 524.293369][T12168] ? __pfx_copy_data+0x10/0x10 [ 524.293404][T12168] should_fail_ex+0x414/0x560 [ 524.293432][T12168] _copy_to_user+0x31/0xb0 [ 524.293463][T12168] ? __pfx_virtio_read+0x10/0x10 [ 524.293487][T12168] rng_dev_read+0x3f2/0x770 [ 524.293518][T12168] ? __pfx_rng_dev_read+0x10/0x10 [ 524.293547][T12168] ? bpf_lsm_file_permission+0x9/0x20 [ 524.293574][T12168] ? security_file_permission+0x75/0x290 [ 524.293597][T12168] ? rw_verify_area+0x258/0x650 [ 524.293635][T12168] vfs_readv+0x5a2/0x840 [ 524.293663][T12168] ? __pfx_rng_dev_read+0x10/0x10 [ 524.293695][T12168] ? __pfx_vfs_readv+0x10/0x10 [ 524.293740][T12168] ? __fget_files+0x2a/0x420 [ 524.293774][T12168] ? __fget_files+0x3a0/0x420 [ 524.293800][T12168] ? __fget_files+0x2a/0x420 [ 524.293838][T12168] __x64_sys_preadv+0x197/0x2a0 [ 524.293863][T12168] ? rcu_is_watching+0x15/0xb0 [ 524.293885][T12168] ? __pfx___x64_sys_preadv+0x10/0x10 [ 524.293915][T12168] ? do_syscall_64+0xba/0x210 [ 524.293953][T12168] do_syscall_64+0xf6/0x210 [ 524.293984][T12168] ? clear_bhb_loop+0x60/0xb0 [ 524.294012][T12168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.294031][T12168] RIP: 0033:0x7f4b8c38e969 [ 524.294050][T12168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.294069][T12168] RSP: 002b:00007f4b8d219038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 524.294092][T12168] RAX: ffffffffffffffda RBX: 00007f4b8c5b5fa0 RCX: 00007f4b8c38e969 [ 524.294107][T12168] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 524.294120][T12168] RBP: 00007f4b8d219090 R08: 0000000000000000 R09: 0000000000000000 [ 524.294133][T12168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 524.294144][T12168] R13: 0000000000000000 R14: 00007f4b8c5b5fa0 R15: 00007f4b8c6dfa28 [ 524.294173][T12168] [ 524.523593][ C1] vkms_vblank_simulate: vblank timer overrun [ 524.655657][ T5892] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 524.666573][ T5892] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 524.677032][ T5892] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 524.688982][ T5892] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 524.713991][ T5892] usb 1-1: USB disconnect, device number 111 [ 524.957884][ T6643] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 524.990342][T12189] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1720'. [ 525.076664][T12195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.091664][ T5892] usb 5-1: USB disconnect, device number 100 [ 525.103458][T12195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.121404][ T6643] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 525.131848][ T6643] usb 4-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 525.142151][ T6643] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.212825][ T6643] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 525.226139][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 525.639537][ T6643] usb 4-1: USB disconnect, device number 95 [ 525.937946][ T30] audit: type=1326 audit(1747851271.494:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12220 comm="syz.4.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd3b8e969 code=0x7ffc0000 [ 525.986480][ T30] audit: type=1326 audit(1747851271.524:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12220 comm="syz.4.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd3b8e969 code=0x7ffc0000 [ 526.470150][ T5892] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 526.660121][ T5892] usb 1-1: not running at top speed; connect to a high speed hub [ 526.672676][ T5892] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 526.687632][ T5889] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 526.687666][ T6643] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 526.746750][ T5892] usb 1-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 8 [ 526.828004][ T5892] usb 1-1: config 1 interface 0 has no altsetting 0 [ 526.871869][ T6643] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 526.889582][ T6643] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 526.898865][ T6643] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.906903][ T6643] usb 5-1: Product: syz [ 526.931683][ T6643] usb 5-1: Manufacturer: syz [ 526.936378][ T6643] usb 5-1: SerialNumber: syz [ 526.936996][ T5892] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 526.958107][ T5889] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 526.967227][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.005569][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.073151][ T5889] usb 4-1: Product: syz [ 527.093916][ T5892] usb 1-1: Product: syz [ 527.105897][ T5889] usb 4-1: Manufacturer: syz [ 527.121596][ T5892] usb 1-1: Manufacturer: syz [ 527.126282][ T5892] usb 1-1: SerialNumber: syz [ 527.146680][ T5889] usb 4-1: SerialNumber: syz [ 527.202103][ T6643] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 101 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 527.205652][ T5889] usb 4-1: config 0 descriptor?? [ 527.231459][T12223] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 527.543493][ T5889] usb 4-1: USB disconnect, device number 96 [ 527.549940][T12245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.613920][T12245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.636822][T12245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.664049][T12245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.702009][ T5911] udevd[5911]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 527.727936][ T5892] usblp 1-1:1.0: usblp1: USB Bidirectional printer dev 112 if 0 alt 2 proto 2 vid 0x0525 pid 0xA4A8 [ 527.770625][ T5892] usb 1-1: USB disconnect, device number 112 [ 527.802168][ T5892] usblp1: removed [ 528.017669][ T6643] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 528.067717][ T5889] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 528.201892][ T6643] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 528.212088][ T6643] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 528.227694][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 528.234236][ T6643] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 528.243791][ T6643] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.306378][ T5889] usb 4-1: config 0 has an invalid interface number: 108 but max is 0 [ 528.326985][ T5889] usb 4-1: config 0 has no interface number 0 [ 528.484748][ T6643] usb 2-1: usb_control_msg returned -32 [ 528.492929][ T6643] usbtmc 2-1:16.0: can't read capabilities [ 528.502250][ T5889] usb 4-1: config 0 interface 108 has no altsetting 0 [ 528.603690][ T5889] usb 4-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=65.cd [ 528.623656][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.656847][ T5889] usb 4-1: Product: syz [ 528.667571][ T5889] usb 4-1: Manufacturer: syz [ 528.676445][ T5889] usb 4-1: SerialNumber: syz [ 528.740710][ T5889] usb 4-1: config 0 descriptor?? [ 528.753374][ T5889] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 528.949049][T12229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.972439][T12229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.117428][ T5889] usb 4-1: USB disconnect, device number 97 [ 529.593179][T12261] openvswitch: netlink: IP tunnel TTL not specified. [ 530.088147][ T6643] usb 5-1: USB disconnect, device number 101 [ 530.303001][T12241] usblp0: removed [ 530.312455][ T5889] usb 2-1: USB disconnect, device number 82 [ 530.710480][ T6642] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 531.052312][T12290] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1746'. [ 531.080953][ T6642] usb 5-1: Using ep0 maxpacket: 32 [ 531.178486][T12287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1742'. [ 531.296171][T12287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1742'. [ 531.319335][ T6642] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 531.333439][ T6642] usb 5-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 531.353554][ T6642] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=b7.98 [ 531.363096][ T6642] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.373258][ T6642] usb 5-1: Product: syz [ 531.403167][ T6642] usb 5-1: Manufacturer: syz [ 531.414718][ T6642] usb 5-1: SerialNumber: syz [ 532.167703][ T6643] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 532.380574][ T6643] usb 1-1: Using ep0 maxpacket: 16 [ 532.397229][ T6643] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 532.416654][ T6643] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 50959, setting to 64 [ 532.438612][ T6643] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 532.449941][ T6643] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.459800][ T6643] usb 1-1: Product: syz [ 532.465825][ T6643] usb 1-1: Manufacturer: syz [ 532.476236][ T6643] usb 1-1: SerialNumber: syz [ 532.520277][ T6643] usb 1-1: config 0 descriptor?? [ 533.070169][ T6643] pegasus_notetaker 1-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 533.219592][ T6643] usb 1-1: USB disconnect, device number 113 [ 533.673466][ T6642] usb 5-1: USB disconnect, device number 102 [ 533.946082][T12315] x_tables: duplicate underflow at hook 3 [ 534.004873][T12323] vlan3: entered promiscuous mode [ 534.280635][T12339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.315961][T12339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.325768][T12338] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1760'. [ 534.590501][ T6642] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 534.749425][ T6642] usb 1-1: device descriptor read/64, error -71 [ 534.867694][ T5889] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 535.000566][ T6642] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 535.067690][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 535.084515][ T5889] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 234, using maximum allowed: 30 [ 535.109791][ T5889] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 234 [ 535.123300][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1767'. [ 535.137660][ T6642] usb 1-1: device descriptor read/64, error -71 [ 535.160869][ T5889] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 535.191876][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.207776][ T6643] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 535.255392][ T5889] usb 2-1: config 0 descriptor?? [ 535.258496][ T6642] usb usb1-port1: attempt power cycle [ 535.370351][ T6643] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 535.497903][T12371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.508159][T12371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.737730][ T6642] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 535.746929][ T5889] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 535.759205][ T5889] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 535.818576][ T5889] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 535.837272][ T6642] usb 1-1: device descriptor read/8, error -71 [ 535.846147][ T5889] usb 2-1: media controller created [ 535.851777][ T6643] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 12335, setting to 1024 [ 535.866375][ T6643] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 535.880552][ T6643] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 535.889753][ T6643] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.014522][T12360] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 536.031053][ T6643] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 536.031443][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 536.077866][ T6642] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 536.095535][ T5889] az6027: usb out operation failed. (-71) [ 536.102174][ T5889] az6027: usb out operation failed. (-71) [ 536.113835][ T5889] stb0899_attach: Driver disabled by Kconfig [ 536.119293][ T6642] usb 1-1: device descriptor read/8, error -71 [ 536.243363][ T5889] az6027: no front-end attached [ 536.243363][ T5889] [ 536.258421][ T6642] usb usb1-port1: unable to enumerate USB device [ 536.336441][ T5889] az6027: usb out operation failed. (-71) [ 536.359183][ T5889] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 536.469951][ T5889] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input42 [ 536.530517][ T5889] dvb-usb: schedule remote query interval to 400 msecs. [ 536.557674][ T5889] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 536.607894][ T5889] usb 2-1: USB disconnect, device number 83 [ 536.771946][ T5889] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 537.539660][ T5892] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 537.710321][ T5892] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 537.721077][ T5892] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 537.740265][ T5892] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 537.766202][ T5892] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 537.778053][ T6643] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 537.786405][ T5892] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 537.818655][ T5892] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 537.856172][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 537.876846][ T5889] usb 5-1: USB disconnect, device number 103 [ 537.966737][ T5892] usb 4-1: Product: syz [ 537.967845][ T6643] usb 1-1: config 0 has no interfaces? [ 537.976807][ T5892] usb 4-1: Manufacturer: syz [ 537.991707][ T6643] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 538.004473][ T6643] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.041089][ T6643] usb 1-1: Product: syz [ 538.059719][ T5892] cdc_wdm 4-1:1.0: skipping garbage [ 538.063303][ T6643] usb 1-1: Manufacturer: syz [ 538.105125][ T5892] cdc_wdm 4-1:1.0: skipping garbage [ 538.123606][ T5892] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 538.130121][ T5892] cdc_wdm 4-1:1.0: Unknown control protocol [ 538.140740][ T6643] usb 1-1: SerialNumber: syz [ 538.162261][ T6643] usb 1-1: config 0 descriptor?? [ 538.851381][T12404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.857638][T12404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.875725][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -EPIPE [ 538.886439][T12403] loop2: detected capacity change from 0 to 7 [ 538.890027][T12403] Dev loop2: unable to read RDB block 7 [ 538.890104][T12403] loop2: unable to read partition table [ 538.890385][T12403] loop2: partition table beyond EOD, truncated [ 538.890408][T12403] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 539.015542][ T6643] usb 1-1: USB disconnect, device number 118 [ 539.027599][ T5892] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 539.167734][ T5892] usb 2-1: device descriptor read/64, error -71 [ 539.409317][ T5892] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 539.557713][ T5892] usb 2-1: device descriptor read/64, error -71 [ 539.614823][T12417] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 539.629401][T12417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.667976][ T5892] usb usb2-port1: attempt power cycle [ 539.676450][T12417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.717256][T12417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.726638][T12417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.854428][T12426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.870256][T12426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.057593][ T5892] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 540.077606][ T6643] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 540.099118][ T5892] usb 2-1: device descriptor read/8, error -71 [ 540.232546][ T6643] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 540.243608][ T6643] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.258441][ T6643] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 540.270460][ T6643] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 540.297603][ T6643] usb 1-1: Manufacturer: syz [ 540.343142][ T6643] usb 1-1: config 0 descriptor?? [ 540.387961][ T5892] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 540.430475][ T5892] usb 2-1: device descriptor read/8, error -71 [ 540.480645][ T6643] rc_core: IR keymap rc-hauppauge not found [ 540.504580][ T6643] Registered IR keymap rc-empty [ 540.533313][ T6643] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 540.582314][ T5892] usb usb2-port1: unable to enumerate USB device [ 540.586810][ T6643] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input43 [ 540.608449][ T6643] usb 1-1: USB disconnect, device number 119 [ 540.993706][T12418] delete_channel: no stack [ 541.417832][ T5892] usb 4-1: USB disconnect, device number 98 [ 542.246633][T12446] loop2: detected capacity change from 0 to 7 [ 542.254326][T12446] Dev loop2: unable to read RDB block 7 [ 542.289134][T12446] loop2: unable to read partition table [ 542.295066][T12446] loop2: partition table beyond EOD, truncated [ 542.379787][T12446] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 542.467202][T12450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.496972][T12450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.510017][ T5202] Dev loop2: unable to read RDB block 7 [ 542.519285][ T5202] loop2: unable to read partition table [ 542.532201][ T5202] loop2: partition table beyond EOD, truncated [ 542.647679][ T6643] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 542.790523][ T6643] usb 4-1: device descriptor read/64, error -71 [ 542.911696][T12465] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1793'. [ 543.047947][ T6643] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 543.113227][ T5892] usb 2-1: new low-speed USB device number 88 using dummy_hcd [ 543.197714][ T6643] usb 4-1: device descriptor read/64, error -71 [ 543.274745][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.311126][ T5892] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 543.320520][ T5892] usb 2-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 543.330586][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.337839][ T6642] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 543.348237][ T6643] usb usb4-port1: attempt power cycle [ 543.348823][ T5892] usb 2-1: config 0 descriptor?? [ 543.425188][T12478] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 543.434945][T12478] PKCS7: Only support pkcs7_signedData type [ 543.497712][ T6642] usb 5-1: device descriptor read/64, error -71 [ 543.574101][T12480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.585652][T12480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.709085][ T5892] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 543.723310][T12483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.733631][T12483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.752781][ T6643] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 543.761558][ T6642] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 543.789366][ T6643] usb 4-1: device descriptor read/8, error -71 [ 543.867959][ T5892] usb 1-1: device descriptor read/64, error -71 [ 543.897713][ T6642] usb 5-1: device descriptor read/64, error -71 [ 544.008041][ T6642] usb usb5-port1: attempt power cycle [ 544.027603][ T6643] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 544.048346][ T6643] usb 4-1: device descriptor read/8, error -71 [ 544.107648][ T5892] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 544.158029][ T6643] usb usb4-port1: unable to enumerate USB device [ 544.247808][ T5892] usb 1-1: device descriptor read/64, error -71 [ 544.297192][T12492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.312998][T12493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.324055][T12492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.334675][T12493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.351739][T12493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.362437][ T6642] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 544.373069][T12493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.381703][ T5892] usb usb1-port1: attempt power cycle [ 544.393971][ T6642] usb 5-1: device descriptor read/8, error -71 [ 544.637591][ T6642] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 544.658534][ T6642] usb 5-1: device descriptor read/8, error -71 [ 544.727604][ T5892] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 544.748328][ T5892] usb 1-1: device descriptor read/8, error -71 [ 544.769235][ T6642] usb usb5-port1: unable to enumerate USB device [ 544.944608][T12496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.954631][T12496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.988196][ T5892] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 545.018685][ T5892] usb 1-1: device descriptor read/8, error -71 [ 545.138400][ T5892] usb usb1-port1: unable to enumerate USB device [ 545.515074][T12501] loop2: detected capacity change from 0 to 7 [ 545.523765][T12501] Dev loop2: unable to read RDB block 7 [ 545.540113][T12501] loop2: unable to read partition table [ 545.552833][T12501] loop2: partition table beyond EOD, truncated [ 545.573956][T12501] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 545.625579][T12503] x_tables: duplicate underflow at hook 2 [ 545.715788][T12505] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1804'. [ 545.894498][T12477] usb 2-1: USB disconnect, device number 88 [ 546.247861][ T5890] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 546.457827][ T5890] usb 4-1: device descriptor read/64, error -71 [ 546.697755][ T5890] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 546.818294][ T5892] usb 1-1: new low-speed USB device number 124 using dummy_hcd [ 546.849243][ T5890] usb 4-1: device descriptor read/64, error -71 [ 547.087722][ T5892] usb 1-1: device descriptor read/64, error -71 [ 547.089821][ T5890] usb usb4-port1: attempt power cycle [ 547.338384][ T5892] usb 1-1: new low-speed USB device number 125 using dummy_hcd [ 547.358461][T12534] SET target dimension over the limit! [ 547.477642][ T5892] usb 1-1: device descriptor read/64, error -71 [ 547.507779][ T5890] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 547.538973][ T5890] usb 4-1: device descriptor read/8, error -71 [ 547.562105][T12542] loop2: detected capacity change from 0 to 7 [ 547.570819][ T5979] Dev loop2: unable to read RDB block 7 [ 547.576563][ T5979] loop2: unable to read partition table [ 547.584069][ T5979] loop2: partition table beyond EOD, truncated [ 547.590962][ T5892] usb usb1-port1: attempt power cycle [ 547.600733][T12542] Dev loop2: unable to read RDB block 7 [ 547.606374][T12542] loop2: unable to read partition table [ 547.614972][T12542] loop2: partition table beyond EOD, truncated [ 547.633663][T12542] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 547.777650][ T5890] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 547.808279][ T5890] usb 4-1: device descriptor read/8, error -71 [ 547.927642][ T5890] usb usb4-port1: unable to enumerate USB device [ 547.938483][ T5892] usb 1-1: new low-speed USB device number 126 using dummy_hcd [ 547.970047][ T5892] usb 1-1: device descriptor read/8, error -71 [ 548.208239][ T5892] usb 1-1: new low-speed USB device number 127 using dummy_hcd [ 548.238962][ T5892] usb 1-1: device descriptor read/8, error -71 [ 548.348423][ T5892] usb usb1-port1: unable to enumerate USB device [ 548.377214][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 548.377235][ T30] audit: type=1326 audit(1747851293.934:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12560 comm="syz.4.1821" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fabd3b8e969 code=0x0 [ 548.698275][ T5890] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 548.827642][ T5890] usb 2-1: device descriptor read/64, error -71 [ 549.087981][ T5890] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 549.217665][ T5890] usb 2-1: device descriptor read/64, error -71 [ 549.328197][ T5890] usb usb2-port1: attempt power cycle [ 549.387639][ T120] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 549.507655][ T5892] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 549.539680][ T120] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 549.552664][ T120] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 549.562172][ T120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.573054][ T120] usb 4-1: Product: syz [ 549.577295][ T120] usb 4-1: Manufacturer: syz [ 549.582098][ T120] usb 4-1: SerialNumber: syz [ 549.590060][ T120] usb 4-1: config 0 descriptor?? [ 549.601983][ T120] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 549.667885][ T5890] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 549.687667][ T5892] usb 5-1: Using ep0 maxpacket: 32 [ 549.694790][ T5892] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 549.703252][ T5892] usb 5-1: config 0 has no interface number 0 [ 549.703770][ T5890] usb 2-1: device descriptor read/8, error -71 [ 549.709566][ T5892] usb 5-1: config 0 interface 89 has no altsetting 0 [ 549.730761][ T5892] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 549.742336][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.757624][ T5892] usb 5-1: Product: syz [ 549.763409][ T5892] usb 5-1: Manufacturer: syz [ 549.772083][ T5892] usb 5-1: SerialNumber: syz [ 549.783218][ T5892] usb 5-1: config 0 descriptor?? [ 549.957652][ T5890] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 549.991937][ T5890] usb 2-1: device descriptor read/8, error -71 [ 549.998309][T12569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.998750][T12569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.047024][ T5892] usb 5-1: USB disconnect, device number 108 [ 550.130603][ T5890] usb usb2-port1: unable to enumerate USB device [ 550.237102][T12576] kAFS: unable to lookup cell 'mS²jQ€·”œ­=È A4Z1Ë¡8' [ 550.502237][ T5890] usb 4-1: USB disconnect, device number 107 [ 551.498075][ T5890] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 551.647580][ T5890] usb 4-1: device descriptor read/64, error -71 [ 551.697629][ T120] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 551.847799][ T120] usb 1-1: Invalid ep0 maxpacket: 32 [ 551.876280][T12615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.887857][ T5890] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 551.895469][T12615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.908002][ T5889] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 551.977832][ T120] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 552.027614][ T5890] usb 4-1: device descriptor read/64, error -71 [ 552.057728][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 552.064997][ T5889] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 552.073578][ T5889] usb 2-1: config 0 has no interface number 0 [ 552.080106][ T5889] usb 2-1: config 0 interface 89 has no altsetting 0 [ 552.089570][ T5889] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 552.098719][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.106729][ T5889] usb 2-1: Product: syz [ 552.111029][ T5892] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 552.118831][ T5889] usb 2-1: Manufacturer: syz [ 552.123450][ T5889] usb 2-1: SerialNumber: syz [ 552.127652][ T120] usb 1-1: Invalid ep0 maxpacket: 32 [ 552.134306][ T120] usb usb1-port1: attempt power cycle [ 552.135010][ T5889] usb 2-1: config 0 descriptor?? [ 552.140695][ T5890] usb usb4-port1: attempt power cycle [ 552.277768][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 552.284805][ T5892] usb 5-1: unable to get BOS descriptor or descriptor too short [ 552.293850][ T5892] usb 5-1: config 11 has an invalid interface number: 244 but max is 0 [ 552.302309][ T5892] usb 5-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 552.312705][ T5892] usb 5-1: config 11 has no interface number 0 [ 552.319159][ T5892] usb 5-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 552.329232][ T5892] usb 5-1: config 11 interface 244 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 552.342383][ T5892] usb 5-1: config 11 interface 244 has no altsetting 0 [ 552.351406][ T5892] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 552.360542][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.366763][T12612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.369942][ T5892] usb 5-1: Product: syz [ 552.381392][ T5892] usb 5-1: Manufacturer: syz [ 552.382395][T12612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.386776][ T5892] usb 5-1: SerialNumber: syz [ 552.403111][T12520] usb 2-1: USB disconnect, device number 93 [ 552.487911][ T120] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 552.495579][ T5890] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 552.518387][ T5890] usb 4-1: device descriptor read/8, error -71 [ 552.524900][ T120] usb 1-1: Invalid ep0 maxpacket: 32 [ 552.658643][ T120] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 552.678414][ T120] usb 1-1: Invalid ep0 maxpacket: 32 [ 552.684242][ T120] usb usb1-port1: unable to enumerate USB device [ 552.757719][ T5890] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 552.780008][ T5890] usb 4-1: device descriptor read/8, error -71 [ 552.888235][ T5890] usb usb4-port1: unable to enumerate USB device [ 553.157741][ T5892] peak_usb 5-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 553.166350][ T5892] peak_usb 5-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 553.219229][ T5892] peak_usb 5-1:11.244: probe with driver peak_usb failed with error -71 [ 553.227722][ T5889] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 553.242359][ T5892] usb 5-1: USB disconnect, device number 109 [ 553.387601][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 553.394509][ T5889] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 553.404731][ T5889] usb 2-1: config 0 has no interface number 0 [ 553.414207][ T5889] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 553.423523][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.431612][ T5889] usb 2-1: Product: syz [ 553.435784][ T5889] usb 2-1: Manufacturer: syz [ 553.440471][ T5889] usb 2-1: SerialNumber: syz [ 553.447362][ T5889] usb 2-1: config 0 descriptor?? [ 553.456352][ T5889] smsc95xx v2.0.0 [ 553.537696][ T5892] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 553.687831][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 553.695426][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.706658][ T5892] usb 5-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 553.715828][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.727617][ T5892] usb 5-1: config 0 descriptor?? [ 553.859778][ T5889] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 553.870722][ T5889] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 554.158108][ T5892] logitech-djreceiver 0003:046D:C513.0018: hidraw0: USB HID v0.05 Device [HID 046d:c513] on usb-dummy_hcd.4-1/input0 [ 554.348507][ T120] usb 5-1: USB disconnect, device number 110 [ 554.642382][T11991] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 554.932067][T11991] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 554.959744][ T5892] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 555.030609][T11991] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 555.150085][T11991] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 555.214127][ T5889] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 555.236119][ T5889] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 555.260548][ T5892] usb 4-1: config 0 has no interfaces? [ 555.333640][ T5892] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 555.367176][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.385404][ T5892] usb 4-1: Product: syz [ 555.389846][ T5892] usb 4-1: Manufacturer: syz [ 555.397843][ T5892] usb 4-1: SerialNumber: syz [ 555.410922][ T5892] usb 4-1: config 0 descriptor?? [ 555.432483][ T120] usb 2-1: USB disconnect, device number 94 [ 555.506594][T11991] bridge_slave_0: left allmulticast mode [ 555.530044][T11991] bridge_slave_0: left promiscuous mode [ 555.562533][T11991] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.843581][T11991] bond1 (unregistering): (slave ip6gre2): Releasing backup interface [ 555.913998][T11991] ip6gre2 (unregistering): left promiscuous mode [ 556.705059][T11991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.714188][T11991] bond_slave_0: left promiscuous mode [ 556.722411][T11991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.731707][T11991] bond_slave_1: left promiscuous mode [ 556.737817][T11991] bond0 (unregistering): Released all slaves [ 556.853323][T11991] bond1 (unregistering): Released all slaves [ 556.868293][T11991] bond2 (unregistering): Released all slaves [ 556.993825][T11991] IPVS: stopping backup sync thread 10610 ... [ 557.475027][ T5892] usb 4-1: USB disconnect, device number 112 [ 562.873736][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.880304][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.314513][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.321067][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.751723][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.758287][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 697.267793][ T31] INFO: task kworker/0:9:6642 blocked for more than 143 seconds. [ 697.275603][ T31] Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 [ 697.283783][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 697.292578][ T31] task:kworker/0:9 state:D stack:19976 pid:6642 tgid:6642 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 697.304758][ T31] Workqueue: events rfkill_sync_work [ 697.310174][ T31] Call Trace: [ 697.313460][ T31] [ 697.316399][ T31] __schedule+0x16e2/0x4cd0 [ 697.321561][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 697.327023][ T31] ? schedule+0x165/0x360 [ 697.331484][ T31] ? __pfx___schedule+0x10/0x10 [ 697.336399][ T31] ? schedule+0x91/0x360 [ 697.340862][ T31] schedule+0x165/0x360 [ 697.345068][ T31] schedule_preempt_disabled+0x13/0x30 [ 697.350620][ T31] __mutex_lock+0x724/0xe80 [ 697.355163][ T31] ? __mutex_lock+0x51b/0xe80 [ 697.359979][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 697.365326][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 697.370918][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 697.376216][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 697.382229][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 697.388943][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 697.394703][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 697.399872][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 697.405633][ T31] rfkill_set_block+0x1d2/0x440 [ 697.410605][ T31] rfkill_sync_work+0x114/0x200 [ 697.415492][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 697.421316][ T31] process_scheduled_works+0xadb/0x17a0 [ 697.426918][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 697.433062][ T31] worker_thread+0x8a0/0xda0 [ 697.437742][ T31] kthread+0x70e/0x8a0 [ 697.441917][ T31] ? __pfx_worker_thread+0x10/0x10 [ 697.447029][ T31] ? __pfx_kthread+0x10/0x10 [ 697.451709][ T31] ? __pfx_kthread+0x10/0x10 [ 697.456338][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 697.461680][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 697.466914][ T31] ? __pfx_kthread+0x10/0x10 [ 697.471697][ T31] ret_from_fork+0x4b/0x80 [ 697.476150][ T31] ? __pfx_kthread+0x10/0x10 [ 697.481024][ T31] ret_from_fork_asm+0x1a/0x30 [ 697.485837][ T31] [ 697.488981][ T31] INFO: task kworker/0:10:6643 blocked for more than 143 seconds. [ 697.496904][ T31] Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 [ 697.504703][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 697.513506][ T31] task:kworker/0:10 state:D stack:21400 pid:6643 tgid:6643 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 697.525776][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 697.532658][ T31] Call Trace: [ 697.535960][ T31] [ 697.538960][ T31] __schedule+0x16e2/0x4cd0 [ 697.543729][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 697.549390][ T31] ? schedule+0x165/0x360 [ 697.554013][ T31] ? __pfx___schedule+0x10/0x10 [ 697.559053][ T31] ? schedule+0x91/0x360 [ 697.563332][ T31] schedule+0x165/0x360 [ 697.567789][ T31] schedule_preempt_disabled+0x13/0x30 [ 697.573370][ T31] __mutex_lock+0x724/0xe80 [ 697.577973][ T31] ? __mutex_lock+0x51b/0xe80 [ 697.582698][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 697.589295][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 697.594400][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 697.600397][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 697.606270][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 697.612611][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 697.618538][ T31] process_scheduled_works+0xadb/0x17a0 [ 697.624169][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 697.630584][ T31] worker_thread+0x8a0/0xda0 [ 697.635231][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 697.641670][ T31] ? __kthread_parkme+0x7b/0x200 [ 697.646666][ T31] kthread+0x70e/0x8a0 [ 697.650845][ T31] ? __pfx_worker_thread+0x10/0x10 [ 697.656145][ T31] ? __pfx_kthread+0x10/0x10 [ 697.660844][ T31] ? __pfx_kthread+0x10/0x10 [ 697.665478][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 697.671062][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 697.676310][ T31] ? __pfx_kthread+0x10/0x10 [ 697.681089][ T31] ret_from_fork+0x4b/0x80 [ 697.685629][ T31] ? __pfx_kthread+0x10/0x10 [ 697.690380][ T31] ret_from_fork_asm+0x1a/0x30 [ 697.695187][ T31] [ 697.698518][ T31] INFO: task syz.2.1804:12504 blocked for more than 143 seconds. [ 697.706356][ T31] Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 [ 697.714238][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 697.723071][ T31] task:syz.2.1804 state:D stack:25272 pid:12504 tgid:12504 ppid:5849 task_flags:0x400040 flags:0x00004004 [ 697.735128][ T31] Call Trace: [ 697.738478][ T31] [ 697.741545][ T31] __schedule+0x16e2/0x4cd0 [ 697.746129][ T31] ? validate_chain+0x811/0x2140 [ 697.751406][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 697.756745][ T31] ? schedule+0x165/0x360 [ 697.761232][ T31] ? __pfx___schedule+0x10/0x10 [ 697.766160][ T31] ? schedule+0x91/0x360 [ 697.770546][ T31] schedule+0x165/0x360 [ 697.774744][ T31] schedule_timeout+0x9a/0x270 [ 697.779571][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 697.785010][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 697.790330][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 697.795569][ T31] ? wait_for_completion+0x267/0x5d0 [ 697.800952][ T31] wait_for_completion+0x2bf/0x5d0 [ 697.806116][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 697.812069][ T31] ? __flush_work+0xd2/0xbc0 [ 697.816717][ T31] ? __flush_work+0xd2/0xbc0 [ 697.821409][ T31] __flush_work+0x9b9/0xbc0 [ 697.825959][ T31] ? __flush_work+0xd2/0xbc0 [ 697.830765][ T31] ? __pfx___flush_work+0x10/0x10 [ 697.835850][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 697.841248][ T31] ? __pfx___cancel_work+0x10/0x10 [ 697.846396][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 697.852130][ T31] __cancel_work_sync+0xbe/0x110 [ 697.857132][ T31] rfkill_unregister+0x92/0x220 [ 697.862086][ T31] nfc_unregister_device+0x96/0x2a0 [ 697.867340][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 697.873160][ T31] virtual_ncidev_close+0x56/0x90 [ 697.878281][ T31] __fput+0x44c/0xa70 [ 697.882297][ T31] task_work_run+0x1d1/0x260 [ 697.886903][ T31] ? __pfx_task_work_run+0x10/0x10 [ 697.892154][ T31] resume_user_mode_work+0x5e/0x80 [ 697.897309][ T31] syscall_exit_to_user_mode+0x9a/0x120 [ 697.903031][ T31] do_syscall_64+0x103/0x210 [ 697.907839][ T31] ? clear_bhb_loop+0x60/0xb0 [ 697.912566][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.918753][ T31] RIP: 0033:0x7f3aafd8e969 [ 697.923201][ T31] RSP: 002b:00007f3ab00dfb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 697.931814][ T31] RAX: 0000000000000000 RBX: 000000000008538b RCX: 00007f3aafd8e969 [ 697.939867][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 697.948121][ T31] RBP: 00007f3aaffb7ba0 R08: 0000000000000001 R09: 0000000fb00dfe7f [ 697.956116][ T31] R10: 00007f3aafc00000 R11: 0000000000000246 R12: 00007f3aaffb5fac [ 697.964158][ T31] R13: 00007f3aaffb5fa0 R14: ffffffffffffffff R15: 00007f3ab00dfca0 [ 697.972229][ T31] [ 697.975310][ T31] [ 697.975310][ T31] Showing all locks held in the system: [ 697.983123][ T31] 1 lock held by khungtaskd/31: [ 697.988080][ T31] #0: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 697.998082][ T31] 2 locks held by getty/5591: [ 698.002781][ T31] #0: ffff8880345ba0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 698.012646][ T31] #1: ffffc90002ffe2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 698.022844][ T31] 1 lock held by syz-executor/5824: [ 698.028298][ T31] #0: ffffffff8f5ce888 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 698.038623][ T31] 4 locks held by kworker/0:9/6642: [ 698.043861][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 698.055075][ T31] #1: ffffc9000f357c60 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 698.067654][ T31] #2: ffffffff8f5ce888 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 698.077762][ T31] #3: ffff88807cb20100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 698.087799][ T31] 3 locks held by kworker/0:10/6643: [ 698.093084][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 698.104210][ T31] #1: ffffc9000f347c60 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 698.117839][ T31] #2: ffffffff8f5ce888 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 698.129278][ T31] 4 locks held by kworker/u8:4/11991: [ 698.134666][ T31] #0: ffff88801aef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 698.146022][ T31] #1: ffffc9000485fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 698.157185][ T31] #2: ffffffff8f2edd10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x145/0xbd0 [ 698.166768][ T31] #3: ffffffff8f5ce888 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 698.177128][ T31] 5 locks held by kworker/u8:8/11992: [ 698.182634][ T31] 1 lock held by syz.2.1804/12504: [ 698.187890][ T31] #0: ffff88807cb20100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 698.197834][ T31] [ 698.200185][ T31] ============================================= [ 698.200185][ T31] [ 698.208690][ T31] NMI backtrace for cpu 0 [ 698.208709][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 698.208748][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 698.208763][ T31] Call Trace: [ 698.208771][ T31] [ 698.208780][ T31] dump_stack_lvl+0x189/0x250 [ 698.208812][ T31] ? __wake_up_klogd+0xd9/0x110 [ 698.208839][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 698.208868][ T31] ? __pfx__printk+0x10/0x10 [ 698.208900][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 698.208926][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 698.208946][ T31] ? _printk+0xcf/0x120 [ 698.208979][ T31] ? __pfx__printk+0x10/0x10 [ 698.209003][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 698.209028][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 698.209055][ T31] watchdog+0xfee/0x1030 [ 698.209084][ T31] ? watchdog+0x1de/0x1030 [ 698.209120][ T31] kthread+0x70e/0x8a0 [ 698.209149][ T31] ? __pfx_watchdog+0x10/0x10 [ 698.209175][ T31] ? __pfx_kthread+0x10/0x10 [ 698.209202][ T31] ? __pfx_kthread+0x10/0x10 [ 698.209227][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 698.209252][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 698.209280][ T31] ? __pfx_kthread+0x10/0x10 [ 698.209304][ T31] ret_from_fork+0x4b/0x80 [ 698.209326][ T31] ? __pfx_kthread+0x10/0x10 [ 698.209351][ T31] ret_from_fork_asm+0x1a/0x30 [ 698.209387][ T31] [ 698.209396][ T31] Sending NMI from CPU 0 to CPUs 1: [ 698.356703][ C1] NMI backtrace for cpu 1 [ 698.356723][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 698.356745][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 698.356756][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 698.356785][ C1] Code: c3 d4 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 8f 11 00 f3 0f 1e fa fb f4 98 d4 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 698.356800][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 698.356816][ C1] RAX: 8067e00f418fa500 RBX: ffffffff81977108 RCX: 8067e00f418fa500 [ 698.356831][ C1] RDX: 0000000000000001 RSI: ffffffff8d74e0ce RDI: ffffffff8bc1f3c0 [ 698.356843][ C1] RBP: ffffc90000197f20 R08: ffff8880b8932b5b R09: 1ffff1101712656b [ 698.356856][ C1] R10: dffffc0000000000 R11: ffffed101712656c R12: ffffffff8f7f3370 [ 698.356870][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110038deb40 [ 698.356882][ C1] FS: 0000000000000000(0000) GS:ffff8881261c2000(0000) knlGS:0000000000000000 [ 698.356897][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 698.356909][ C1] CR2: 000055eeaa39c660 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 698.356927][ C1] Call Trace: [ 698.356935][ C1] [ 698.356943][ C1] default_idle+0x13/0x20 [ 698.356968][ C1] default_idle_call+0x74/0xb0 [ 698.356994][ C1] do_idle+0x1e8/0x510 [ 698.357015][ C1] ? __pfx_do_idle+0x10/0x10 [ 698.357041][ C1] cpu_startup_entry+0x44/0x60 [ 698.357058][ C1] start_secondary+0x101/0x110 [ 698.357075][ C1] common_startup_64+0x13e/0x147 [ 698.357110][ C1] [ 698.357802][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 698.357822][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 698.357850][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 698.357866][ T31] Call Trace: [ 698.357877][ T31] [ 698.357888][ T31] dump_stack_lvl+0x99/0x250 [ 698.357924][ T31] ? __asan_memcpy+0x40/0x70 [ 698.357959][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 698.357992][ T31] ? __pfx__printk+0x10/0x10 [ 698.358030][ T31] panic+0x2db/0x790 [ 698.358067][ T31] ? __pfx_panic+0x10/0x10 [ 698.358096][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 698.358127][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 698.358155][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 698.358189][ T31] watchdog+0x102d/0x1030 [ 698.358222][ T31] ? watchdog+0x1de/0x1030 [ 698.358261][ T31] kthread+0x70e/0x8a0 [ 698.358295][ T31] ? __pfx_watchdog+0x10/0x10 [ 698.358323][ T31] ? __pfx_kthread+0x10/0x10 [ 698.358353][ T31] ? __pfx_kthread+0x10/0x10 [ 698.358380][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 698.358407][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 698.358437][ T31] ? __pfx_kthread+0x10/0x10 [ 698.358464][ T31] ret_from_fork+0x4b/0x80 [ 698.358489][ T31] ? __pfx_kthread+0x10/0x10 [ 698.358517][ T31] ret_from_fork_asm+0x1a/0x30 [ 698.358557][ T31] [ 698.661982][ T31] Kernel Offset: disabled [ 698.666412][ T31] Rebooting in 86400 seconds..