last executing test programs: 22m48.34639452s ago: executing program 32 (id=3890): r0 = syz_open_dev$usbfs(&(0x7f0000000700), 0x2000000000000, 0x141002) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0xc0185500, &(0x7f0000000040)={0x80, 0x100000, "aa2fe1a243fcd9abf29cc3391c06b86f68e7f73d4f0bff9669a8e82040ccb44d75131fb06cade553a6bdc314438ce0af11c38cd724980b087a7a16f9295be0a69db51576e7a06ef6bcabc67b52ba82e73504fa842ec2f0c06bf006f3e5bcdd5057997bf171c60d96a538b02ee9f4b573457498ca09cb417b1fbe6dc3b0c27ab0693ac57aff136748f7740dfc33f3a902b670f8933aec28869e637c18379d6d0b4d844b732cb1932733dfcec2f69f8b6df76ba84e1f001ad29105230471f466b6f9d7d2b05a57fe16e7363e5ecebc2c74539ca55c7ce3a175061adedd20532a9de97379f4dd5baeeae835946311e6e4e2361355c54b3bd500"}) 7m25.826847796s ago: executing program 33 (id=21998): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) munlock(&(0x7f0000280000/0x8000)=nil, 0x8000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 5m38.123387628s ago: executing program 7 (id=22718): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x10, 0x10}}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x10}}]}}}]}, 0x40}}, 0x0) 5m37.325614919s ago: executing program 7 (id=22721): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x21) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x20080, 0x0) 5m30.721262525s ago: executing program 7 (id=22742): r0 = syz_open_dev$video(&(0x7f0000000300), 0x202, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000340)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000440)=@mmap={0x1, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000500)=0x1) 5m30.296923465s ago: executing program 7 (id=22744): move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) unshare(0x60600) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f00000000c0)) 5m28.85113119s ago: executing program 7 (id=22745): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r2, 0x0, 0x38f9, 0x0) close_range(r1, r2, 0x0) write(r0, &(0x7f0000000040), 0xffffff4a) 5m28.149384306s ago: executing program 7 (id=22751): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x81) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)=0x5) close(r0) 5m23.245363115s ago: executing program 34 (id=22717): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000440)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x1, &(0x7f0000000140)={{}, {0x0, 0x989680}}, 0x0) unshare(0x64000600) 5m12.715122493s ago: executing program 35 (id=22751): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x81) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)=0x5) close(r0) 5m4.340901463s ago: executing program 6 (id=22795): openat(0xffffffffffffff9c, 0x0, 0x40002, 0x16c) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4005, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r0, 0x0, 0x0) 5m3.057077139s ago: executing program 6 (id=22802): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') pread64(r1, &(0x7f0000000200)=""/87, 0x57, 0x8) 5m2.531667032s ago: executing program 6 (id=22807): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@private1, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) 5m2.094120142s ago: executing program 6 (id=22808): mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x8, 0x20132, 0xffffffffffffffff, 0xb2993000) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) close(r0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000010240)={0x0, 0x0, &(0x7f0000010200)={&(0x7f00000001c0)={0x10018, 0x3f7, 0x20, 0x0, 0x25dfdbff, {0xffff, 0x1, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', '.'}}, 0x10018}}, 0x4000) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)={[&(0x7f0000000200)='\x01']}) 5m1.478508989s ago: executing program 6 (id=22810): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{0xd, 0x1791, 0xe, 0x8, 0x80000000, 0x0, 0xe}]}) 4m58.66395471s ago: executing program 6 (id=22819): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) syz_clone(0x668c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 4m57.947969258s ago: executing program 8 (id=22820): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xf32, 0x101400) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) readv(r0, &(0x7f0000000080)=[{&(0x7f0000002480)=""/4110, 0x100e}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0xffffffff, 0x4, 'syz1\x00', 0x1f}, 0x2, 0x10000000, 0x5, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0}) 4m57.443604358s ago: executing program 8 (id=22822): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r0 = io_uring_setup(0x2e71, &(0x7f00000003c0)={0x0, 0x800000, 0x400, 0x2, 0x131}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3) 4m56.742202045s ago: executing program 8 (id=22827): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000001c0)="aa04005d", 0xfffffffffffffffb, 0x2400c030, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x80000) 4m55.637401445s ago: executing program 8 (id=22830): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x100005, 0xc000, 0x4, 0xff, 0x0, 0x8, 0x3, 0xa, 0x2, 0x6, 0x12, 0x5, 0x42}, {0x804, 0x2, 0x1, 0x45, 0x3, 0x0, 0x4, 0xff, 0xfc, 0x4, 0x6, 0x6f, 0x20c}, {0xffffffff, 0x3, 0x38, 0x3, 0x84, 0x3, 0x3, 0x50, 0xc, 0x2, 0x6f, 0x8, 0x9}], 0x2}) 4m53.086445494s ago: executing program 8 (id=22842): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)='9', 0x1}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008"], 0x48) syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) ioctl(r0, 0xc4c85513, &(0x7f0000000200)) 4m49.698125062s ago: executing program 8 (id=22855): unshare(0x64000600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0xcf) fcntl$setlease(r0, 0x400, 0x1) 4m43.405652939s ago: executing program 36 (id=22819): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) syz_clone(0x668c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 4m34.311476271s ago: executing program 37 (id=22855): unshare(0x64000600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0xcf) fcntl$setlease(r0, 0x400, 0x1) 2m13.363162779s ago: executing program 5 (id=24075): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x28, r1, 0x3, 0x70bd2b, 0x25dfdc00, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xe4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x8000) 2m13.218640825s ago: executing program 5 (id=24077): r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001"]) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) 2m13.09055146s ago: executing program 5 (id=24079): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="3fabf82df2c3"}) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x1, 0x20, 0x5}}}}, 0x36) 2m12.572610783s ago: executing program 5 (id=24087): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x270) 2m11.66069529s ago: executing program 5 (id=24097): clock_nanosleep(0x2, 0xfffffdfc, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r0 = gettid() timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m11.208067316s ago: executing program 5 (id=24098): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x1, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x2, r2}) close_range(r0, r1, 0x0) 2m10.770918373s ago: executing program 38 (id=24098): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x1, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x2, r2}) close_range(r0, r1, 0x0) 1m21.912535811s ago: executing program 3 (id=24555): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000018000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02"], 0x48) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 1m21.846009749s ago: executing program 3 (id=24556): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000040000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000082000000850000000e000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40058}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {}, 0x1}) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m21.720040523s ago: executing program 3 (id=24557): openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m21.670521785s ago: executing program 3 (id=24559): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) 1m21.580561693s ago: executing program 3 (id=24561): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 1m21.259268188s ago: executing program 3 (id=24564): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x65dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m20.786062577s ago: executing program 39 (id=24564): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x65dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.626176717s ago: executing program 9 (id=25386): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000100)={0x1, 0x1, 0x3, 0x6}) fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x1, 0x0, 0xfff, 0x59}) fcntl$lock(r1, 0x25, &(0x7f0000000140)={0x0, 0x1, 0x3, 0x8}) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x7, 0x7}) 3.377485599s ago: executing program 9 (id=25389): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40058}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {}, 0x1}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 3.250533155s ago: executing program 0 (id=25390): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)='/dev/mapper/control', 0x13) lseek(r0, 0x0, 0x0) read(r0, &(0x7f0000000100), 0x14) openat(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x7, 0x8, 0x4, 0x0, 0xa, 0x21, 0x10000000000}, &(0x7f0000000040)={0x1f, 0xfffffffffffffffd, 0x80000005, 0x0, 0xffffffffffffffe3, 0x7, 0x6}, 0x0, 0x0, 0x0) 3.201114262s ago: executing program 9 (id=25392): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80010040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000440)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0x40, 0xb, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x3, 0x80000001}, @window={0x3, 0x3, 0x3b}, @sack={0x5, 0x22, [0x81, 0x6, 0x8, 0x80000001, 0x0, 0x4, 0x0, 0xffffffff]}, @mss={0x2, 0x4, 0xe1d}, @exp_fastopen={0xfe, 0xa, 0xf989, "3630ca56b0d2"}, @sack_perm={0x4, 0x2}]}}}}}}}, 0x0) 3.084530812s ago: executing program 0 (id=25393): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x1, 0xffffffff, 0x20, 0x169}, {0x40000001, 0xfffffffc, 0x0, 0x31237645, 0x97d}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.058621507s ago: executing program 9 (id=25394): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x7c, &(0x7f0000000600)={0x40, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.869356963s ago: executing program 0 (id=25396): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000000000000, 0x100000001, &(0x7f0000006680)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) 2.087569083s ago: executing program 0 (id=25405): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x232) 2.081169908s ago: executing program 1 (id=25406): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x6d, 0xfffffffffffffb01, 0x2, 0x9e, 0x6, 0x7}}, @TCA_NETEM_RATE={0x14, 0xd, {0x0, 0x0, 0x0, 0x1}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x4040) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x8077, '\x00', r2, r3, 0x1, 0x4}, 0x50) 1.992047507s ago: executing program 1 (id=25408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 1.809522348s ago: executing program 1 (id=25411): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) close(0x3) 1.704252116s ago: executing program 2 (id=25413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000044c0), 0x4000000000001c0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000340)={0x41, 0x0, 0x3}, 0x10) 1.6750615s ago: executing program 1 (id=25414): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newchain={0x2a4, 0x64, 0x20, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x1}, {0x10, 0xf}, {0x5, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x78}, @TCA_RATE={0x6, 0x5, {0x2, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_cgroup={{0xb}, {0x25c, 0x2, [@TCA_CGROUP_ACT={0x258, 0x1, [@m_ife={0xe0, 0x1f, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xff}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xff}, @IFE_META_PRIO={0x8, 0x3, @val=0xf}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xff}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_IFE_TYPE={0x6}]}, {0x45, 0x6, "73d488fc0abba14c0d143ad2102e2230915f8596c3c491cda01a63f510549241999ef9c7dbce5ece506bd78f1aa4289ab7823cd79a4217b18e9fb28e0475c213ab"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x174, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x146, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000ac0)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x2000c040}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40800) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x26}], 0xf}, 0x4) 1.567631061s ago: executing program 1 (id=25415): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e33, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000dc0)="33ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa73c0db4093532513a76eaae51091a099121e7c3d05ec1071773c2a79f81d090a0ecbe218d4154c07f1ac883f5238bb7ce771f57672f2da3c8efda6acd3f0ffdc9c8f46cbcd656822e32c4d95502e1e57c64f01b3721157d2c18fa885c3e52b9884f36fed6a4fae15e7517f1baef9462cc33e52d58dd171", 0x353}, {&(0x7f0000000a00)="46b179971d5d3440bd08ecbdbf3838fd130f6438a5daf746b3a443371163ed18fe11e63233d2df82593e47bd501c195459d573df1e9a061b1a19ab087226ae4b6f39a25213a50f59d5589e9e333f0fc7d692c6672200baa2adfba880add28d0bfd980ccb9a26652db96cdbb2074131b7b7e00912678bf7d92bdb32b02606f842a321b612bc7939834e1ed1fad14aeac70b65ae6c19ff13c749763ad318af18fc31d98c551e84ec0269458e051c0dd727c10872505100cef828f6c6d0b4ee17d9f5a65cced7820aad44130bff17cc25809ecb89dc3d399eefdb12510da9d6c210e151faa5ffef5d2626a45a1259609de87c188127e4ec31c2388fbd582c5f83e766b7c0c710672ca3f77f89323d619bc22c1c80d5ff714d805bb39b54c3e0472c6a23a3b11633ff16705f23744caa5b6820a21f91ee89e8828f356f43f238c668c9bbd96c62ba5ef928ccf6560b94c14b0f7234b7", 0x154}, {&(0x7f0000000700)="dd8ad35a05f68247883f33637734e01a1ea22d623005c50c3ff46bbed74a12cf717914cb4a307931a5fe143b9a14445961406bdbadf61009fde24fccf2021d7aeae1d6425bb23c6303", 0x49}, {&(0x7f0000000780)="cef630eda921cbed97adbad453556e05899dd1984423a16217f977b0af37470370048991ae14603d70eaa8f41e4863a52c13bacf4e0330e321cb87d66d3e2f0aa47fdd9dede1b5852a39188358e6d77e3ad6bbecbf31b457a2bb1ef2b7ff421ffd0e1f75516a9b7eb795bc91fde42169ad5c0c4d393e3d8e4ac81db2580a9684683ffafa1209c65c27014aa0d967f4940dbee8b607", 0x95}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) 1.551520903s ago: executing program 4 (id=25416): r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f00000001c0), 0x4) 1.45625185s ago: executing program 4 (id=25417): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x0) pread64(r0, &(0x7f0000000600)=""/4091, 0xffb, 0x12c) 1.285869625s ago: executing program 4 (id=25418): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x100, @multicast, 'wg2\x00'}}, 0x1e) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c80)=ANY=[], 0x38f}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4890) 1.261674649s ago: executing program 1 (id=25419): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c02124085010203010902240001000010000904"], 0x0) syz_usb_connect$cdc_ncm(0x3, 0x123, &(0x7f0000000000)=ANY=[@ANYRES64], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) 1.20405667s ago: executing program 2 (id=25420): readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)=""/85, 0x55}], 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) name_to_handle_at(r2, &(0x7f0000000080)='./file7/file0/file0\x00', &(0x7f0000000300)=ANY=[], 0x0, 0x1000) 1.185035432s ago: executing program 4 (id=25421): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xfffffffd, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f0000000240)=0x4) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r0, 0x4122, 0x0) 1.167810546s ago: executing program 2 (id=25422): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x47c7, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x8, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x10, @multicast2}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x2) 1.08818911s ago: executing program 0 (id=25423): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @local}, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x4, 0x81, 0xffffffff, 0xffffffff}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, 0x0, 0x0) 1.005865727s ago: executing program 4 (id=25424): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x4000004, 0x4, 0x20000000, 0x2}, 0x1, r2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x4}}]}, 0x90}}, 0x0) 968.203625ms ago: executing program 2 (id=25425): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x0, 0x2, 0x3}) fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x1, 0x0, 0xfff, 0x59}) fcntl$lock(r1, 0x25, &(0x7f0000000140)={0x0, 0x1, 0x3, 0x8}) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x7, 0x7}) 796.503111ms ago: executing program 0 (id=25426): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, 0x0, 0x0) 795.61358ms ago: executing program 2 (id=25427): r0 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0x1b6c, 0x10, 0x1024002, 0x804d}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffb, &(0x7f00000000c0), 0x1, 0x40}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000800)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x412, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1e0}}}, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xf60, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x180}}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r5, &(0x7f0000000280), 0x33) 510.872945ms ago: executing program 40 (id=25426): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, 0x0, 0x0) 505.304932ms ago: executing program 2 (id=25429): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x0, [[0xff7ffffe, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffffe, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x7, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}], '\x00', 0x4}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 504.490268ms ago: executing program 4 (id=25430): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x510, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 266.164241ms ago: executing program 9 (id=25431): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000098082eba000000000700000085200fd8010000009500000000000000"], &(0x7f0000000680)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x1000) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) 0s ago: executing program 9 (id=25432): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x40) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000100)={0x6, 0x8, 0x3, 0xf0, "2a00000000000000441d220fe0bd40edb4b62483d1c87e95d93f18520c4f24b3"}) kernel console output (not intermixed with test programs): found [ 1615.115933][T27364] bond1: entered promiscuous mode [ 1615.121325][T27364] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1615.239682][T27368] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1615.240109][T27368] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1615.251406][T27368] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 1616.348705][T27424] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1616.435937][T27422] fuse: root generation should be zero [ 1616.733500][T24570] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1616.884217][T24570] usb 10-1: Using ep0 maxpacket: 16 [ 1616.886498][T24570] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1616.889648][T24570] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1616.889678][T24570] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1616.889700][T24570] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1616.889740][T24570] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.915712][T24570] usb 10-1: config 0 descriptor?? [ 1617.232692][T13164] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1617.382214][T13164] usb 3-1: Using ep0 maxpacket: 16 [ 1617.383033][T13164] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1617.385816][T24570] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.00A8/input/input230 [ 1617.429491][T13164] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1617.429518][T13164] usb 3-1: Product: syz [ 1617.429532][T13164] usb 3-1: Manufacturer: syz [ 1617.429545][T13164] usb 3-1: SerialNumber: syz [ 1617.457723][T13164] usb 3-1: config 0 descriptor?? [ 1617.478176][T13164] usb 3-1: selecting invalid altsetting 1 [ 1617.478196][T13164] technisat-usb2: could not set alternate setting to 0 [ 1617.480408][T24570] microsoft 0003:045E:07DA.00A8: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 1617.675206][T13164] technisat-usb2: firmware version: 0.0 [ 1617.675250][T13164] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 1617.992781][ T2257] usb 10-1: USB disconnect, device number 15 [ 1618.105196][T13164] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1618.108472][T13164] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 1618.108525][T13164] usb 3-1: media controller created [ 1618.109042][T13164] technisat-usb2: i2c-error: out failed 53 = -22 [ 1618.109094][T13164] dvb-usb: MAC address reading failed. [ 1618.210280][T13164] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1618.411937][T13164] DVB: Unable to find symbol stv090x_attach() [ 1618.414043][T13164] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 1618.457551][T27483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24330'. [ 1618.581161][T13164] rc_core: IR keymap rc-technisat-usb2 not found [ 1618.581180][T13164] Registered IR keymap rc-empty [ 1618.582438][T13164] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 1618.588028][T13164] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input231 [ 1618.633663][T13164] dvb-usb: schedule remote query interval to 100 msecs. [ 1618.635196][T13164] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 1618.677276][T13164] usb 3-1: USB disconnect, device number 41 [ 1618.803502][T13164] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 1619.194824][ T2257] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1619.351128][ T2257] usb 4-1: Using ep0 maxpacket: 32 [ 1619.352694][ T2257] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1619.354691][ T2257] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1619.354719][ T2257] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1619.354742][ T2257] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1619.354764][ T2257] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1619.354787][ T2257] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1619.356960][ T2257] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.356982][ T2257] usb 4-1: Product: syz [ 1619.356996][ T2257] usb 4-1: Manufacturer: syz [ 1619.357010][ T2257] usb 4-1: SerialNumber: syz [ 1619.363648][ T2257] usb 4-1: config 0 descriptor?? [ 1619.750468][T27538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24352'. [ 1619.759836][T27538] xfrm1: entered promiscuous mode [ 1619.759857][T27538] xfrm1: entered allmulticast mode [ 1619.760274][T27538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24352'. [ 1619.788512][ T2257] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1619.788561][ T2257] input input232: Device does not respond to id packet M [ 1619.789428][ T2257] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1619.789709][ T2257] input input232: Device does not respond to id packet P [ 1619.792362][ T2257] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1619.792407][ T2257] input input232: Device does not respond to id packet B [ 1619.792999][ T2257] input input232: Device does not respond to id packet N [ 1619.976753][T27550] input: syz1 as /devices/virtual/input/input233 [ 1619.996375][ T2257] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1619.998670][ T2257] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1620.000686][ T2257] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1620.008358][ T2257] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1620.021614][ T2257] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input232 [ 1620.095660][ T2257] usb 4-1: USB disconnect, device number 81 [ 1620.745182][T22537] hid_parser_main: 5 callbacks suppressed [ 1620.745204][T22537] hid-generic 0000:0000:0000.00A9: unknown main item tag 0x0 [ 1620.750413][T27573] batadv_slave_0: entered promiscuous mode [ 1620.765474][T22537] hid-generic 0000:0000:0000.00A9: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1620.791841][T27573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24365'. [ 1620.796024][T27572] ip6gre3: entered promiscuous mode [ 1620.796046][T27572] ip6gre3: entered allmulticast mode [ 1620.815713][T27573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1620.863551][T27572] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1620.946304][T27573] batadv_slave_0 (unregistering): left promiscuous mode [ 1620.946371][T27573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1621.303416][T27583] syzkaller1: entered promiscuous mode [ 1621.303438][T27583] syzkaller1: entered allmulticast mode [ 1621.511103][ T2257] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1621.607259][T16350] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1621.607486][T16350] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1621.631064][T24570] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1621.685103][ T2257] usb 4-1: Using ep0 maxpacket: 8 [ 1621.689333][ T2257] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1621.693227][ T2257] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1621.693274][ T2257] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1621.693295][ T2257] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1621.693317][ T2257] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1621.693338][ T2257] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1621.693376][ T2257] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.797648][ T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1621.891147][ T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1621.917161][ T2257] usb 4-1: usb_control_msg returned -32 [ 1621.917210][ T2257] usbtmc 4-1:16.0: can't read capabilities [ 1621.993155][T27604] netlink: 36 bytes leftover after parsing attributes in process `syz.2.24380'. [ 1622.647548][T27631] usbtmc 4-1:16.0: usb_clear_halt returned -32 [ 1622.850633][T13164] usb 4-1: USB disconnect, device number 82 [ 1623.246733][ T10] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1623.271738][T27643] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1623.401878][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1623.402910][ T10] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 1623.402933][ T10] usb 5-1: config 0 has no interface number 0 [ 1623.402960][ T10] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1623.402995][ T10] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1623.403020][ T10] usb 5-1: config 0 interface 255 has no altsetting 0 [ 1623.403051][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.406962][ T10] usb 5-1: config 0 descriptor?? [ 1623.482900][ T10] cp210x 5-1:0.255: cp210x converter detected [ 1623.770911][T13164] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1623.814378][T27662] netlink: 'syz.0.24401': attribute type 4 has an invalid length. [ 1623.816516][ T10] cp210x 5-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 1623.922639][T13164] usb 4-1: Using ep0 maxpacket: 8 [ 1623.924339][T13164] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1623.928345][T13164] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1623.928389][T13164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.958184][T13164] usb 4-1: config 0 descriptor?? [ 1623.972440][T27670] ªªªªª#: renamed from vlan0 (while UP) [ 1624.031707][ T10] cp210x 5-1:0.255: GPIO initialisation failed: -19 [ 1624.036370][ T10] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1624.188251][T13164] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1624.239637][ T10] usb 5-1: USB disconnect, device number 81 [ 1624.273982][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1624.274543][ T10] cp210x 5-1:0.255: device disconnected [ 1624.713684][T22537] usb 4-1: USB disconnect, device number 83 [ 1625.441245][ T9] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 1625.608199][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1625.624416][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1625.624443][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1625.624482][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1625.834592][ T9] usb 3-1: usb_control_msg returned -32 [ 1625.834640][ T9] usbtmc 3-1:16.0: can't read capabilities [ 1625.931036][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1626.207173][ T31] kauditd_printk_skb: 67 callbacks suppressed [ 1626.207192][ T31] audit: type=1326 audit(1790368042.125:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27749 comm="syz.0.24423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8459e159 code=0x7ffc0000 [ 1626.207237][ T31] audit: type=1326 audit(1790368042.125:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27749 comm="syz.0.24423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8459e159 code=0x7ffc0000 [ 1626.217471][ T31] audit: type=1326 audit(1790368042.125:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27749 comm="syz.0.24423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8e8459e159 code=0x7ffc0000 [ 1626.217519][ T31] audit: type=1326 audit(1790368042.125:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27749 comm="syz.0.24423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8459e159 code=0x7ffc0000 [ 1626.217558][ T31] audit: type=1326 audit(1790368042.125:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27749 comm="syz.0.24423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e8459e159 code=0x7ffc0000 [ 1626.217597][ T31] audit: type=1326 audit(1790368042.125:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27749 comm="syz.0.24423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8459e159 code=0x7ffc0000 [ 1626.217641][ T31] audit: type=1326 audit(1790368042.135:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27749 comm="syz.0.24423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8459e159 code=0x7ffc0000 [ 1626.217682][ T31] audit: type=1326 audit(1790368042.135:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27749 comm="syz.0.24423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e8455e98e code=0x7ffc0000 [ 1626.217720][ T31] audit: type=1326 audit(1790368042.135:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27749 comm="syz.0.24423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e8455e98e code=0x7ffc0000 [ 1626.217765][ T31] audit: type=1326 audit(1790368042.135:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27749 comm="syz.0.24423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8459e159 code=0x7ffc0000 [ 1626.436027][T22537] usb 3-1: USB disconnect, device number 42 [ 1626.449791][T27755] netlink: 24 bytes leftover after parsing attributes in process `syz.0.24424'. [ 1626.850867][ T10] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1627.001612][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1627.002861][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1627.002888][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1627.002908][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1627.002946][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1627.067499][ T10] usb 5-1: config 0 descriptor?? [ 1627.373799][T27788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24436'. [ 1627.516740][ T10] plantronics 0003:047F:FFFF.00AA: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1628.794826][ C1] plantronics 0003:047F:FFFF.00AA: usb_submit_urb(ctrl) failed: -1 [ 1629.717773][T13164] usb 5-1: USB disconnect, device number 82 [ 1630.204521][T13164] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1630.355312][T13164] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 1630.359656][T13164] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1630.364702][T13164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1630.364726][T13164] usb 5-1: Product: syz [ 1630.364738][T13164] usb 5-1: Manufacturer: syz [ 1630.391842][T13164] usb 5-1: selecting invalid altsetting 1 [ 1630.392000][T13164] dvb_ttusb_budget: ttusb_init_controller: error [ 1630.392013][T13164] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1630.484301][T13164] DVB: Unable to find symbol cx22700_attach() [ 1630.654319][T13164] DVB: Unable to find symbol tda10046_attach() [ 1630.654335][T13164] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1630.698098][T13164] usb 5-1: USB disconnect, device number 83 [ 1630.931066][T26901] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1631.131047][T26901] usb 1-1: Using ep0 maxpacket: 8 [ 1631.137034][T26901] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1631.138382][T26901] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 1631.138427][T26901] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1631.138450][T26901] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1631.138472][T26901] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1631.138494][T26901] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1631.138515][T26901] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1631.138553][T26901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.383817][T26901] usb 1-1: usb_control_msg returned -32 [ 1631.383866][T26901] usbtmc 1-1:16.0: can't read capabilities [ 1631.583438][T27921] loop9: detected capacity change from 0 to 7 [ 1631.593632][T27921] Dev loop9: unable to read RDB block 7 [ 1631.593683][T27921] loop9: unable to read partition table [ 1631.593892][T27921] loop9: partition table beyond EOD, truncated [ 1631.593908][T27921] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1631.617233][ T4986] Dev loop9: unable to read RDB block 7 [ 1631.617276][ T4986] loop9: unable to read partition table [ 1631.617483][ T4986] loop9: partition table beyond EOD, truncated [ 1631.750884][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1631.753066][T27929] usbtmc 1-1:16.0: Unable to send data, error -71 [ 1631.753679][T27929] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 1631.755260][ T9] usb 1-1: USB disconnect, device number 19 [ 1632.300883][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1632.460878][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1632.461589][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1632.462823][ T9] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 1632.462868][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1632.462891][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1632.462912][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1632.462935][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1632.462956][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1632.462992][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.695966][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 1632.696016][ T9] usbtmc 3-1:16.0: can't read capabilities [ 1632.935927][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1632.936008][T27943] usbtmc 3-1:16.0: Unable to send data, error -71 [ 1632.937271][T13164] usb 3-1: USB disconnect, device number 43 [ 1633.052737][T27963] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1633.681173][T13164] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1633.720638][ T31] kauditd_printk_skb: 59 callbacks suppressed [ 1633.720656][ T31] audit: type=1326 audit(1790368049.635:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27978 comm="syz.9.24512" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbcba99e159 code=0x0 [ 1633.831728][T13164] usb 4-1: Using ep0 maxpacket: 8 [ 1633.835636][T13164] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1633.837029][T13164] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1633.837075][T13164] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1633.837096][T13164] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1633.837118][T13164] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1633.837139][T13164] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1633.837175][T13164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1633.960438][ T31] audit: type=1326 audit(1790368049.875:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27981 comm="syz.4.24513" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3aa999e159 code=0x0 [ 1634.059183][T13164] usb 4-1: usb_control_msg returned -32 [ 1634.059246][T13164] usbtmc 4-1:16.0: can't read capabilities [ 1634.692254][T28018] all: renamed from bridge_slave_0 (while UP) [ 1634.800970][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1634.846917][T28021] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 1634.993993][T13164] usb 4-1: USB disconnect, device number 84 [ 1635.276390][T28038] netlink: 144 bytes leftover after parsing attributes in process `syz.9.24534'. [ 1635.651065][T14683] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1635.801706][T14683] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1635.802705][T14683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.806893][T14683] usb 5-1: config 0 descriptor?? [ 1636.023320][T14683] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1636.255118][T14683] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 1636.255460][T14683] [drm] Initialized udl on minor 1 [ 1636.537249][ T31] audit: type=1326 audit(1790368052.455:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28067 comm="syz.0.24547" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e8459e159 code=0x0 [ 1636.790594][T28077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24551'. [ 1636.921053][T22989] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1637.071617][T22989] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1637.072792][T22989] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1637.072835][T22989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.077052][T22989] usb 3-1: config 0 descriptor?? [ 1637.293843][T22989] usbhid 3-1:0.0: can't add hid device: -71 [ 1637.293948][T22989] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1637.302199][T22989] usb 3-1: USB disconnect, device number 44 [ 1637.750906][T22989] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1637.761697][T26901] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1637.904469][T22989] usb 3-1: Using ep0 maxpacket: 32 [ 1637.905277][T22989] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1637.907852][T22989] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1637.907892][T22989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.910679][T22989] usb 3-1: config 0 descriptor?? [ 1637.919502][T22989] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1637.925113][T26901] usb 1-1: Using ep0 maxpacket: 16 [ 1637.931183][T22989] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1637.948634][T26901] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1637.948682][T26901] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1637.952313][T26901] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1637.980433][T26901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.980458][T26901] usb 1-1: Product: syz [ 1637.980472][T26901] usb 1-1: Manufacturer: syz [ 1637.980485][T26901] usb 1-1: SerialNumber: syz [ 1638.048141][T22648] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 1638.063144][T22648] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.158627][T13164] usb 3-1: USB disconnect, device number 45 [ 1638.168922][T13164] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1638.231562][T26901] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 1638.231944][T26901] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1638.278964][T22648] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.435956][T22648] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.553771][T22648] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.604645][ T4935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1638.617890][ T4935] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1638.619173][ T4935] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1638.621315][ T4935] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1638.622715][ T4935] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1638.635177][T26901] usb 1-1: 2:1 : bogus bTerminalLink 6 [ 1638.932499][T26901] usb 1-1: USB disconnect, device number 20 [ 1638.994856][T12981] udevd[12981]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1639.192267][T28121] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1639.400374][T22648] pim6reg: left allmulticast mode [ 1639.997572][T22648] bond0 (unregistering): Released all slaves [ 1640.017306][T22648] bond1 (unregistering): Released all slaves [ 1640.043932][T22648] bond2 (unregistering): Released all slaves [ 1640.084301][T22648] bond3 (unregistering): Released all slaves [ 1640.119009][T22648] bond4 (unregistering): Released all slaves [ 1640.154939][T22648] bond5 (unregistering): Released all slaves [ 1640.177215][T22648] bond6 (unregistering): Released all slaves [ 1640.216709][T22648] bond7 (unregistering): Released all slaves [ 1640.439086][T22648] Uý: left promiscuous mode [ 1640.588535][T22648] ovs-dp0: left promiscuous mode [ 1640.699555][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880577f1000: rx timeout, send abort [ 1640.712354][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880577f1000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 1640.728931][ T4935] Bluetooth: hci1: command tx timeout [ 1640.958785][T28108] bridge0: port 1(bridge_slave_0) entered blocking state [ 1640.975840][T28108] bridge0: port 1(bridge_slave_0) entered disabled state [ 1640.976003][T28108] bridge_slave_0: entered allmulticast mode [ 1640.982791][T28108] bridge_slave_0: entered promiscuous mode [ 1640.987702][T28108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1641.022660][T28108] bridge0: port 2(bridge_slave_1) entered disabled state [ 1641.022829][T28108] bridge_slave_1: entered allmulticast mode [ 1641.037603][T28108] bridge_slave_1: entered promiscuous mode [ 1641.161087][T22648] IPVS: stopping backup sync thread 24215 ... [ 1641.166046][T28168] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 1641.262921][T28108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1641.284092][T28108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1641.287826][T14683] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1641.288354][T14683] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1641.290960][T14683] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1641.300583][T14683] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1641.300946][T14683] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1641.384862][T22989] usb 5-1: USB disconnect, device number 84 [ 1641.451240][T26901] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1641.544747][T28108] team0: Port device team_slave_0 added [ 1641.547424][T28108] team0: Port device team_slave_1 added [ 1641.600957][T26901] usb 10-1: Using ep0 maxpacket: 8 [ 1641.601675][T26901] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1641.604232][T26901] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1641.604261][T26901] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1641.604297][T26901] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 23840, setting to 1024 [ 1641.604321][T26901] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1641.604341][T26901] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1641.604378][T26901] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.825940][T26901] usb 10-1: GET_CAPABILITIES returned 0 [ 1641.825970][T26901] usbtmc 10-1:16.0: can't read capabilities [ 1642.045785][T28108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1642.045804][T28108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1642.045827][T28108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1642.053069][T28108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1642.053085][T28108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1642.053108][T28108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1642.333933][T28108] hsr_slave_0: entered promiscuous mode [ 1642.336629][T28108] hsr_slave_1: entered promiscuous mode [ 1642.337495][T28108] debugfs: 'hsr0' already exists in 'hsr' [ 1642.337513][T28108] Cannot create hsr debugfs directory [ 1642.349718][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1642.618208][T28191] kvm: emulating exchange as write [ 1642.636508][T22989] usb 10-1: USB disconnect, device number 16 [ 1642.680902][T13164] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1642.801861][ T4935] Bluetooth: hci1: command tx timeout [ 1642.833341][T13164] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1642.834323][T13164] usb 5-1: config 0 has no interfaces? [ 1642.839806][T13164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.839830][T13164] usb 5-1: Product: syz [ 1642.839844][T13164] usb 5-1: Manufacturer: syz [ 1642.839858][T13164] usb 5-1: SerialNumber: syz [ 1642.852810][T13164] usb 5-1: config 0 descriptor?? [ 1643.188686][T28206] usb usb7: usbfs: process 28206 (syz.2.24597) did not claim interface 0 before use [ 1643.686108][ T9] usb 5-1: USB disconnect, device number 85 [ 1643.895945][T28224] vivid-000: disconnect [ 1644.020220][T13164] vivid-000: reconnect [ 1644.474449][ T5281] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1644.565307][T28245] loop3: detected capacity change from 0 to 7 [ 1644.618842][T28245] Dev loop3: unable to read RDB block 7 [ 1644.618887][T28245] loop3: unable to read partition table [ 1644.619096][T28245] loop3: partition table beyond EOD, truncated [ 1644.619131][T28245] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1644.889210][ T4935] Bluetooth: hci1: command tx timeout [ 1645.681705][ T31] audit: type=1326 audit(1790368061.585:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28275 comm="syz.0.24617" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8459e159 code=0x7ffc0000 [ 1645.682009][ T31] audit: type=1326 audit(1790368061.605:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28275 comm="syz.0.24617" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8459e159 code=0x7ffc0000 [ 1645.741277][ T31] audit: type=1326 audit(1790368061.635:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28275 comm="syz.0.24617" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8459e159 code=0x7ffc0000 [ 1645.741339][ T31] audit: type=1326 audit(1790368061.635:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28275 comm="syz.0.24617" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8459e159 code=0x7ffc0000 [ 1645.741378][ T31] audit: type=1326 audit(1790368061.655:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28275 comm="syz.0.24617" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f8e8459e159 code=0x7ffc0000 [ 1645.741418][ T31] audit: type=1326 audit(1790368061.655:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28275 comm="syz.0.24617" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8459e159 code=0x7ffc0000 [ 1645.741453][ T31] audit: type=1326 audit(1790368061.655:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28275 comm="syz.0.24617" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8459e159 code=0x7ffc0000 [ 1645.741491][ T31] audit: type=1326 audit(1790368061.655:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28275 comm="syz.0.24617" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8459e159 code=0x7ffc0000 [ 1645.741528][ T31] audit: type=1326 audit(1790368061.655:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28275 comm="syz.0.24617" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8459e159 code=0x7ffc0000 [ 1645.762423][ T31] audit: type=1326 audit(1790368061.665:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28275 comm="syz.0.24617" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f8e8459e159 code=0x7ffc0000 [ 1646.565150][ T5281] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1646.664210][T28306] xt_hashlimit: size too large, truncated to 1048576 [ 1646.880084][T22648] veth1_macvtap: left promiscuous mode [ 1646.880118][T22648] veth0_macvtap: left promiscuous mode [ 1646.880234][T22648] veth1_vlan: left promiscuous mode [ 1646.880298][T22648] veth0_vlan: left promiscuous mode [ 1646.974689][ T4935] Bluetooth: hci1: command tx timeout [ 1647.935755][ T10] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1648.128772][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 1648.129446][ T10] usb 10-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1648.129902][T22648] dummy0 (unregistering): left allmulticast mode [ 1648.151612][ T10] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1648.151650][ T10] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1648.151663][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1648.151676][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1648.152397][T22648] team0 (unregistering): Port device dummy0 removed [ 1648.154041][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.154063][ T10] usb 10-1: Product: syz [ 1648.154077][ T10] usb 10-1: Manufacturer: syz [ 1648.154090][ T10] usb 10-1: SerialNumber: syz [ 1648.156240][ T10] usb 10-1: config 0 descriptor?? [ 1648.157248][T28323] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1648.389779][ T10] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1648.416260][ T10] input: Griffin SoundKnob as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input234 [ 1648.489223][T28331] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24633'. [ 1648.685601][ C0] powermate: config urb returned -71 [ 1648.686096][ C0] powermate: config urb returned -71 [ 1648.686294][ C0] powermate: config urb returned -71 [ 1648.686504][ C0] powermate: config urb returned -71 [ 1648.686797][ C0] powermate: config urb returned -71 [ 1648.687269][T14615] usb 10-1: USB disconnect, device number 17 [ 1648.687326][ C0] powermate 10-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1648.704240][T28108] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1648.756525][T28108] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1648.768956][T28108] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1648.798912][T28108] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1648.887621][T28108] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1648.927476][T28108] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1648.968730][T28108] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1648.983198][T28108] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1649.091368][ T10] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 1649.219947][T22648] IPVS: stop unused estimator thread 0... [ 1649.243977][ T10] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1649.245156][ T10] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1649.245188][ T10] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 1649.245213][ T10] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1649.245233][ T10] usb 3-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1649.245271][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.285546][T28341] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1649.501641][ T10] usbhid 3-1:2.0: can't add hid device: -71 [ 1649.501743][ T10] usbhid 3-1:2.0: probe with driver usbhid failed with error -71 [ 1649.535004][ T10] usb 3-1: USB disconnect, device number 46 [ 1649.682672][ T5281] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1649.784697][T28371] loop5: detected capacity change from 0 to 6 [ 1649.805358][T28371] Dev loop5: unable to read RDB block 6 [ 1649.805402][T28371] loop5: unable to read partition table [ 1649.805619][T28371] loop5: partition table beyond EOD, truncated [ 1649.805636][T28371] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1649.910490][T28108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1649.957476][T28108] 8021q: adding VLAN 0 to HW filter on device team0 [ 1649.975463][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1649.975588][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1649.997241][T22648] bridge0: port 2(bridge_slave_1) entered blocking state [ 1649.997360][T22648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1650.051188][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1650.211296][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1650.212645][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 1650.226877][ T10] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1650.226907][ T10] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1650.226928][ T10] usb 3-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1650.226964][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.285933][T28108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1650.321531][ T10] ldusb 3-1:2.0: LD USB Device #0 now attached to major 180 minor 0 [ 1650.513267][T28341] ldusb 3-1:2.0: Write buffer overflow, 2 bytes dropped [ 1650.513322][T28341] ldusb 3-1:2.0: Couldn't submit interrupt_out_urb -90 [ 1650.520274][ T10] usb 3-1: USB disconnect, device number 47 [ 1650.559176][ T10] ldusb 3-1:2.0: LD USB Device #0 now disconnected [ 1650.797535][T28108] veth0_vlan: entered promiscuous mode [ 1650.827771][T28108] veth1_vlan: entered promiscuous mode [ 1650.945253][T28108] veth0_macvtap: entered promiscuous mode [ 1651.102123][T28108] veth1_macvtap: entered promiscuous mode [ 1651.330582][T28108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1651.395495][T28108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1651.482143][ T1152] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.482508][ T1152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.482657][ T1152] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.482936][ T1152] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.762520][ T31] kauditd_printk_skb: 196 callbacks suppressed [ 1651.762537][ T31] audit: type=1326 audit(1790368067.685:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28425 comm="syz.2.24654" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e8899e159 code=0x0 [ 1651.983959][T12922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1651.983980][T12922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1652.221434][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1652.221456][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1652.661075][T28472] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1652.976355][T28485] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1653.816887][T28522] macsec1: entered promiscuous mode [ 1653.816909][T28522] macsec1: entered allmulticast mode [ 1654.080612][T13164] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1654.112234][T24570] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1654.252878][T13164] usb 10-1: Using ep0 maxpacket: 32 [ 1654.253949][T13164] usb 10-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1654.254934][T13164] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1654.254979][T13164] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1654.255004][T13164] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1654.255025][T13164] usb 10-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1654.255048][T13164] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1654.255079][T13164] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1654.257913][T13164] usb 10-1: config 0 descriptor?? [ 1654.339975][T24570] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1654.346440][T24570] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1654.346466][T24570] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1654.346488][T24570] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1654.392278][T24570] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1654.392304][T24570] usb 5-1: Product: syz [ 1654.392318][T24570] usb 5-1: Manufacturer: syz [ 1654.392331][T24570] usb 5-1: SerialNumber: syz [ 1654.608185][T24570] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 86 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1654.705160][T13164] corsair-cpro 0003:1B1C:0C10.00AB: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.9-1/input0 [ 1654.766388][T13164] corsair-cpro 0003:1B1C:0C10.00AB: probe with driver corsair-cpro failed with error -38 [ 1654.830093][T24570] usb 5-1: USB disconnect, device number 86 [ 1654.845969][T24570] usblp0: removed [ 1654.920906][T13164] usb 10-1: USB disconnect, device number 18 [ 1654.969942][T28557] fido_id[28557]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 1655.120849][T14683] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1655.149481][T28567] syz.1.24683 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1655.149521][T28567] CPU: 1 UID: 0 PID: 28567 Comm: syz.1.24683 Tainted: G L syzkaller #0 PREEMPT(full) [ 1655.149547][T28567] Tainted: [L]=SOFTLOCKUP [ 1655.149555][T28567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1655.149568][T28567] Call Trace: [ 1655.149577][T28567] [ 1655.149586][T28567] dump_stack_lvl+0xe8/0x150 [ 1655.149618][T28567] dump_header+0xd3/0x4b0 [ 1655.149647][T28567] oom_kill_process+0x3ab/0x9e0 [ 1655.149681][T28567] out_of_memory+0x1064/0x1480 [ 1655.149706][T28567] ? try_charge_memcg+0xc32/0x15e0 [ 1655.149744][T28567] ? __pfx_out_of_memory+0x10/0x10 [ 1655.149767][T28567] ? do_raw_spin_unlock+0xf5/0x200 [ 1655.149805][T28567] try_charge_memcg+0xcdf/0x15e0 [ 1655.149849][T28567] ? __pfx_try_charge_memcg+0x10/0x10 [ 1655.149881][T28567] ? percpu_ref_tryget+0x15/0x180 [ 1655.149918][T28567] ? __obj_cgroup_charge+0x36/0x2c0 [ 1655.149943][T28567] __obj_cgroup_charge+0x1fd/0x2c0 [ 1655.149961][T28567] ? __obj_cgroup_charge+0x36/0x2c0 [ 1655.149982][T28567] __memcg_slab_post_alloc_hook+0x766/0xd90 [ 1655.150030][T28567] kmem_cache_alloc_lru_noprof+0x351/0x5f0 [ 1655.150062][T28567] ? kmem_cache_alloc_lru_noprof+0x153/0x5f0 [ 1655.150091][T28567] ? alloc_inode+0xb8/0x1b0 [ 1655.150114][T28567] ? alloc_inode+0xb8/0x1b0 [ 1655.150145][T28567] alloc_inode+0xb8/0x1b0 [ 1655.150171][T28567] alloc_anon_inode+0x1e/0x340 [ 1655.150203][T28567] anon_inode_make_secure_inode+0x7b/0x180 [ 1655.150232][T28567] ? __pfx_anon_inode_make_secure_inode+0x10/0x10 [ 1655.150258][T28567] ? _raw_spin_unlock+0x28/0x50 [ 1655.150279][T28567] ? alloc_fd+0x651/0x6c0 [ 1655.150309][T28567] __anon_inode_getfile+0xce/0x200 [ 1655.150337][T28567] new_userfaultfd+0x1f4/0x3d0 [ 1655.150367][T28567] __x64_sys_userfaultfd+0x81/0xa0 [ 1655.150394][T28567] do_syscall_64+0x166/0x520 [ 1655.150418][T28567] ? trace_irq_disable+0x3b/0x140 [ 1655.150438][T28567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1655.150459][T28567] ? clear_bhb_loop+0x70/0xc0 [ 1655.150483][T28567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1655.150502][T28567] RIP: 0033:0x7f540979e159 [ 1655.150522][T28567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1655.150539][T28567] RSP: 002b:00007f54079f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 1655.150559][T28567] RAX: ffffffffffffffda RBX: 00007f5409a25fa0 RCX: 00007f540979e159 [ 1655.150574][T28567] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1655.150585][T28567] RBP: 00007f540983506b R08: 0000000000000000 R09: 0000000000000000 [ 1655.150598][T28567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1655.150610][T28567] R13: 00007f5409a26038 R14: 00007f5409a25fa0 R15: 00007f5409b4fa48 [ 1655.150643][T28567] [ 1655.194199][T28567] memory: usage 0kB, limit 0kB, failcnt 40 [ 1655.194222][T28567] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1655.194235][T28567] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1655.194247][T28567] Memory cgroup stats for /syz1/test: [ 1655.194371][T28567] cache 0 [ 1655.194380][T28567] rss 0 [ 1655.194387][T28567] rss_huge 0 [ 1655.194393][T28567] shmem 0 [ 1655.194400][T28567] mapped_file 0 [ 1655.194407][T28567] dirty 0 [ 1655.194414][T28567] writeback 0 [ 1655.194421][T28567] workingset_refault_anon 0 [ 1655.194429][T28567] workingset_refault_file 0 [ 1655.194436][T28567] swap 0 [ 1655.194444][T28567] swapcached 0 [ 1655.194451][T28567] pgpgin 0 [ 1655.194459][T28567] pgpgout 0 [ 1655.194465][T28567] pgfault 0 [ 1655.194473][T28567] pgmajfault 0 [ 1655.194480][T28567] inactive_anon 0 [ 1655.194487][T28567] active_anon 0 [ 1655.194495][T28567] inactive_file 0 [ 1655.194501][T28567] active_file 0 [ 1655.194508][T28567] unevictable 0 [ 1655.194515][T28567] hierarchical_memory_limit 0 [ 1655.194523][T28567] hierarchical_memsw_limit 9223372036854771712 [ 1655.194532][T28567] total_cache 0 [ 1655.194539][T28567] total_rss 0 [ 1655.194545][T28567] total_rss_huge 0 [ 1655.194553][T28567] total_shmem 0 [ 1655.194560][T28567] total_mapped_file 0 [ 1655.194567][T28567] total_dirty 0 [ 1655.194574][T28567] total_writeback 0 [ 1655.194581][T28567] total_workingset_refault_anon 0 [ 1655.194589][T28567] total_workingset_refault_file 0 [ 1655.194597][T28567] total_swap 0 [ 1655.194604][T28567] total_swapcached 0 [ 1655.194610][T28567] total_pgpgin 0 [ 1655.194617][T28567] total_pgpgout 0 [ 1655.194624][T28567] total_pgfault 0 [ 1655.194632][T28567] total_pgmajfault 0 [ 1655.194639][T28567] total_inactive_anon 0 [ 1655.194646][T28567] total_active_anon 0 [ 1655.194654][T28567] total_inactive_file 0 [ 1655.194661][T28567] total_active_file 0 [ 1655.194669][T28567] total_unevictable 0 [ 1655.194676][T28567] anon_cost 0 [ 1655.194683][T28567] file_cost 0 [ 1655.194690][T28567] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.24683,pid=28566,uid=0 [ 1655.195434][T28567] Memory cgroup out of memory: Killed process 28566 (syz.1.24683) total-vm:102384kB, anon-rss:1436kB, file-rss:22292kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1655.297015][ T31] audit: type=1800 audit(1790368071.215:2117): pid=28570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.24684" name="nullb0" dev="devtmpfs" ino=7733 res=0 errno=0 [ 1655.315543][T14683] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1655.341938][T14683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1655.341970][T14683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1655.342005][T14683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.580674][T14683] usb 1-1: config 0 descriptor?? [ 1656.045005][T14683] cm6533_jd 0003:0D8C:0022.00AC: unknown main item tag 0x0 [ 1656.045127][T14683] cm6533_jd 0003:0D8C:0022.00AC: unknown main item tag 0x0 [ 1656.082531][T14683] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.00AC/input/input236 [ 1656.110332][T14683] cm6533_jd 0003:0D8C:0022.00AC: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 1656.338901][T14615] usb 1-1: USB disconnect, device number 21 [ 1656.710496][T28616] tipc: Started in network mode [ 1656.710525][T28616] tipc: Node identity ac1414aa, cluster identity 4711 [ 1656.757210][T28616] tipc: New replicast peer: 172.20.20.187 [ 1656.772554][T28616] tipc: Enabled bearer , priority 0 [ 1657.116307][T28637] bridge0: port 2(bridge_slave_1) entered blocking state [ 1657.116633][T28637] bridge0: port 2(bridge_slave_1) entered listening state [ 1657.116920][T28637] bridge0: port 1(bridge_slave_0) entered blocking state [ 1657.117080][T28637] bridge0: port 1(bridge_slave_0) entered listening state [ 1657.119521][T28637] bridge0: entered promiscuous mode [ 1657.119561][T28637] bridge0: entered allmulticast mode [ 1657.300310][T28643] netlink: 'syz.2.24708': attribute type 30 has an invalid length. [ 1657.533983][T28643] netlink: 'syz.2.24708': attribute type 30 has an invalid length. [ 1657.660918][T24570] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 1657.814050][T24570] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1657.815005][T24570] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1657.815030][T24570] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1657.815062][T24570] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.881229][ T6184] tipc: Node number set to 2886997162 [ 1658.040694][T24570] usb 1-1: usb_control_msg returned -32 [ 1658.041110][T24570] usbtmc 1-1:16.0: can't read capabilities [ 1658.347317][ T31] audit: type=1326 audit(1790368074.265:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28683 comm="syz.4.24719" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa999e159 code=0x7ffc0000 [ 1658.347481][ T31] audit: type=1326 audit(1790368074.265:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28683 comm="syz.4.24719" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa999e159 code=0x7ffc0000 [ 1658.397712][ T31] audit: type=1326 audit(1790368074.315:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28683 comm="syz.4.24719" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3aa999e159 code=0x7ffc0000 [ 1658.397764][ T31] audit: type=1326 audit(1790368074.315:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28683 comm="syz.4.24719" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa999e159 code=0x7ffc0000 [ 1658.397803][ T31] audit: type=1326 audit(1790368074.315:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28683 comm="syz.4.24719" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa999e159 code=0x7ffc0000 [ 1658.409809][ T31] audit: type=1326 audit(1790368074.325:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28683 comm="syz.4.24719" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3aa999e159 code=0x7ffc0000 [ 1658.409859][ T31] audit: type=1326 audit(1790368074.325:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28683 comm="syz.4.24719" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa999e159 code=0x7ffc0000 [ 1658.409911][ T31] audit: type=1326 audit(1790368074.325:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28683 comm="syz.4.24719" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa999e159 code=0x7ffc0000 [ 1658.419382][ T31] audit: type=1326 audit(1790368074.335:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28683 comm="syz.4.24719" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f3aa999e159 code=0x7ffc0000 [ 1658.419432][ T31] audit: type=1326 audit(1790368074.335:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28683 comm="syz.4.24719" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa999e159 code=0x7ffc0000 [ 1658.837866][T28700] kvm: apic: phys broadcast and lowest prio [ 1659.251843][T24570] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1659.418847][T24570] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1659.431006][T24570] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1659.431032][T24570] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1659.453276][T24570] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1659.453300][T24570] usb 5-1: SerialNumber: syz [ 1659.510943][T13164] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 1659.581179][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1659.661759][T13164] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1659.662910][T13164] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1659.662932][T13164] usb 2-1: config 0 has no interface number 0 [ 1659.662970][T13164] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1659.662990][T13164] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1659.663012][T13164] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1659.664656][T13164] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1659.664678][T13164] usb 2-1: Product: syz [ 1659.664691][T13164] usb 2-1: SerialNumber: syz [ 1659.681792][T13164] usb 2-1: config 0 descriptor?? [ 1659.699437][T13164] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 1659.709608][T13164] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input237 [ 1659.776437][T24570] usb 5-1: 0:2 : does not exist [ 1659.790892][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1659.791636][ T9] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1659.795254][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1659.795288][ T9] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1659.795323][ T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1659.795347][ T9] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1659.795370][ T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1659.795393][ T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1659.795417][ T9] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1659.795439][ T9] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1659.798576][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1659.798606][ T9] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1659.798638][ T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1659.798660][ T9] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1659.798680][ T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1659.798701][ T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1659.798722][ T9] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1659.798743][ T9] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1659.848621][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1659.848661][ T9] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1659.848702][ T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1659.848727][ T9] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1659.848749][ T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1659.848772][ T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1659.848795][ T9] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1659.848818][ T9] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1659.987254][ T9] usb 3-1: string descriptor 0 read error: -22 [ 1659.987390][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.112602][ T9] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 1660.127661][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1660.155253][T24570] usb 5-1: USB disconnect, device number 87 [ 1660.213159][T17983] udevd[17983]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1660.418648][T28734] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1660.426744][T28734] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1660.428194][T13164] usb 3-1: USB disconnect, device number 48 [ 1660.585091][T14615] usb 1-1: USB disconnect, device number 22 [ 1660.739398][ C1] cm109_urb_ctl_callback: 1 callbacks suppressed [ 1660.739424][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1660.739636][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1660.739845][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1660.740064][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1660.740278][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1660.740479][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1660.740682][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1660.740902][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1660.741108][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1660.741312][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1660.777925][T24570] usb 2-1: USB disconnect, device number 35 [ 1660.777942][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1660.853849][T24570] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1661.324234][T28778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24745'. [ 1661.454175][T20599] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1661.466664][T20599] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1661.476817][T20599] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1661.493938][T20599] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1661.494665][T20599] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1661.934488][T28796] veth0: entered promiscuous mode [ 1661.967106][T28796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24751'. [ 1662.054028][T28796] veth0 (unregistering): left promiscuous mode [ 1662.470503][T28819] ip6gre2: entered promiscuous mode [ 1662.470530][T28819] ip6gre2: entered allmulticast mode [ 1662.684991][T28827] kvm: MONITOR instruction emulated as NOP! [ 1663.086473][T28789] bridge0: port 1(bridge_slave_0) entered blocking state [ 1663.086646][T28789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.086795][T28789] bridge_slave_0: entered allmulticast mode [ 1663.088618][T28789] bridge_slave_0: entered promiscuous mode [ 1663.097473][T28789] bridge0: port 2(bridge_slave_1) entered blocking state [ 1663.097604][T28789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1663.097731][T28789] bridge_slave_1: entered allmulticast mode [ 1663.101539][T28789] bridge_slave_1: entered promiscuous mode [ 1663.161158][T28789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1663.175808][T28789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1663.383317][T28789] team0: Port device team_slave_0 added [ 1663.386281][T28789] team0: Port device team_slave_1 added [ 1663.461471][T24570] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1663.486060][T28789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1663.486078][T28789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1663.486107][T28789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1663.493405][T28789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1663.493422][T28789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1663.493445][T28789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1663.521494][T20599] Bluetooth: hci4: command tx timeout [ 1663.680847][T24570] usb 3-1: Using ep0 maxpacket: 8 [ 1663.682850][T24570] usb 3-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 1663.684990][T24570] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1663.685011][T24570] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1663.686960][T24570] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.686981][T24570] usb 3-1: Product: syz [ 1663.686995][T24570] usb 3-1: Manufacturer: syz [ 1663.687008][T24570] usb 3-1: SerialNumber: syz [ 1663.695761][T28789] hsr_slave_0: entered promiscuous mode [ 1663.706912][T28789] hsr_slave_1: entered promiscuous mode [ 1663.710054][T28789] debugfs: 'hsr0' already exists in 'hsr' [ 1663.710074][T28789] Cannot create hsr debugfs directory [ 1663.725339][ T9] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 1663.921833][ T9] usb 10-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1663.924374][ T9] usb 10-1: config index 0 descriptor too short (expected 6427, got 27) [ 1663.924399][ T9] usb 10-1: config 0 has an invalid interface number: 21 but max is 0 [ 1663.924416][ T9] usb 10-1: config 0 has no interface number 0 [ 1663.924480][ T9] usb 10-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1663.924504][ T9] usb 10-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1663.924528][ T9] usb 10-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1663.924571][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.013359][ T9] usb 10-1: config 0 descriptor?? [ 1664.014356][T28856] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1664.118569][T24570] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1664.147352][T24570] usb 3-1: USB disconnect, device number 49 [ 1664.197395][T17983] udevd[17983]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1664.631230][ T9] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.21/input/input238 [ 1664.832858][ T9] usb 10-1: USB disconnect, device number 19 [ 1664.832960][ C0] keyspan_remote 10-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 1664.878268][T28897] input: syz0 as /devices/virtual/input/input239 [ 1665.601142][T20599] Bluetooth: hci4: command tx timeout [ 1665.786873][T28789] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1665.800501][T28789] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1665.808810][T28789] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1665.820451][T28789] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1665.828581][T28789] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1665.841562][T28789] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1665.842495][T28789] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1665.846170][T28789] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1665.962382][T28789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1665.996937][T28789] 8021q: adding VLAN 0 to HW filter on device team0 [ 1666.016080][T22648] bridge0: port 1(bridge_slave_0) entered blocking state [ 1666.016216][T22648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1666.046983][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1666.047089][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1666.152611][T28789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1666.213814][T28789] veth0_vlan: entered promiscuous mode [ 1666.244770][T28789] veth1_vlan: entered promiscuous mode [ 1666.278874][T28789] veth0_macvtap: entered promiscuous mode [ 1666.294686][T28789] veth1_macvtap: entered promiscuous mode [ 1666.323051][T28789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1666.340149][T28789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1666.377962][T22648] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.501568][T12922] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.538108][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1666.538129][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1666.577319][T16350] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.577368][T16350] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.766779][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1666.766800][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1667.681351][T20599] Bluetooth: hci4: command tx timeout [ 1668.177323][T28986] input: syz1 as /devices/virtual/input/input240 [ 1668.535956][T28998] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1668.723786][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.723845][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.762666][T20599] Bluetooth: hci4: command tx timeout [ 1669.856337][T29043] netlink: 12 bytes leftover after parsing attributes in process `syz.9.24827'. [ 1670.081295][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 1670.081315][ T31] audit: type=1800 audit(1790368085.995:2136): pid=29047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.24829" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1670.310981][ T9] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1670.429298][T29056] binder: 29055:29056 ioctl 4018620d 0 returned -22 [ 1670.460936][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 1670.461658][ T9] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1670.462954][ T9] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 1670.462977][ T9] usb 10-1: config 0 has no interface number 0 [ 1670.463024][ T9] usb 10-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1670.465590][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.465614][ T9] usb 10-1: Product: syz [ 1670.465627][ T9] usb 10-1: Manufacturer: syz [ 1670.465641][ T9] usb 10-1: SerialNumber: syz [ 1670.470492][ T9] usb 10-1: config 0 descriptor?? [ 1670.487259][T29048] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1670.719613][T29048] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1670.800307][T29072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24838'. [ 1671.290890][T13164] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1671.333101][ T9] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1671.333336][ T9] asix 10-1:0.188: probe with driver asix failed with error -71 [ 1671.336754][ T9] usb 10-1: USB disconnect, device number 20 [ 1671.451538][T13164] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1671.454126][T13164] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1671.454150][T13164] usb 1-1: Product: syz [ 1671.454163][T13164] usb 1-1: SerialNumber: syz [ 1671.456228][T13164] usb 1-1: config 0 descriptor?? [ 1671.665732][T13164] hso 1-1:0.0: Can't find BULK endpoints [ 1671.689748][T29101] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1671.886087][T13164] usb 1-1: USB disconnect, device number 23 [ 1672.560858][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1672.561042][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1672.911111][T29151] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1673.601055][T13164] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1673.743111][T29187] netlink: 27 bytes leftover after parsing attributes in process `syz.2.24889'. [ 1673.751090][T13164] usb 5-1: Using ep0 maxpacket: 32 [ 1673.751916][T13164] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1673.753284][T13164] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1673.753306][T13164] usb 5-1: config 0 has no interface number 0 [ 1673.753345][T13164] usb 5-1: config 0 interface 12 has no altsetting 0 [ 1673.759404][T13164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.759427][T13164] usb 5-1: Product: syz [ 1673.759441][T13164] usb 5-1: Manufacturer: syz [ 1673.759454][T13164] usb 5-1: SerialNumber: syz [ 1673.761320][T22989] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 1673.777368][T13164] usb 5-1: config 0 descriptor?? [ 1673.877112][T29189] vcan0: tx address claim with dlc 0 [ 1673.926582][T22989] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1673.927814][T22989] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1673.927843][T22989] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1673.927904][T22989] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1673.927945][T22989] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1673.932234][T22989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.932256][T22989] usb 1-1: Product: syz [ 1673.932270][T22989] usb 1-1: Manufacturer: syz [ 1673.932307][T22989] usb 1-1: SerialNumber: syz [ 1673.956259][T29176] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1673.978132][T29193] syzkaller1: entered promiscuous mode [ 1673.978153][T29193] syzkaller1: entered allmulticast mode [ 1674.185040][T29176] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1674.799760][T29176] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1675.009316][T22989] cdc_ncm 1-1:1.0: failed to get mac address [ 1675.009813][T22989] cdc_ncm 1-1:1.0: bind() failure [ 1675.037093][T22989] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1675.046348][T22989] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1675.049268][T22989] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 1675.080306][T13164] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 1675.080360][T13164] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 1675.080377][T13164] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1675.080453][T13164] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 1675.095688][T13164] usb 5-1: USB disconnect, device number 88 [ 1675.120146][T22989] usb 1-1: USB disconnect, device number 24 [ 1675.625472][T29247] input: syz0 as /devices/virtual/input/input241 [ 1677.090958][T14615] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1677.241190][T14615] usb 3-1: Using ep0 maxpacket: 8 [ 1677.245775][T14615] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1677.249190][T14615] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1677.249238][T14615] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1677.249259][T14615] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1677.249280][T14615] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1677.249302][T14615] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1677.249341][T14615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.486159][T14615] usb 3-1: GET_CAPABILITIES returned 0 [ 1677.486206][T14615] usbtmc 3-1:16.0: can't read capabilities [ 1677.731029][T13164] usb 3-1: USB disconnect, device number 50 [ 1678.020936][T14615] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1678.170902][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1678.171026][T14615] usb 10-1: Using ep0 maxpacket: 32 [ 1678.173519][T14615] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1678.174927][T14615] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1678.174971][T14615] usb 10-1: config 0 has no interface number 0 [ 1678.178148][T14615] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.178169][T14615] usb 10-1: Product: syz [ 1678.178178][T14615] usb 10-1: Manufacturer: syz [ 1678.178185][T14615] usb 10-1: SerialNumber: syz [ 1678.182471][T14615] usb 10-1: config 0 descriptor?? [ 1678.197962][T29357] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1678.248812][T14683] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1678.341046][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1678.341855][ T10] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1678.343292][ T10] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 1678.343314][ T10] usb 2-1: config 1 has no interface number 0 [ 1678.343347][ T10] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1678.343360][ T10] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1678.343372][ T10] usb 2-1: config 1 interface 105 has no altsetting 0 [ 1678.345486][ T10] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1678.345499][ T10] usb 2-1: Product: syz [ 1678.345506][ T10] usb 2-1: Manufacturer: syz [ 1678.345514][ T10] usb 2-1: SerialNumber: syz [ 1678.349114][T29350] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1678.349247][T29350] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1678.447833][T14683] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1678.458003][T14683] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1678.458027][T14683] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1678.458045][T14683] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1678.458087][T14683] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1678.458109][T14683] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1678.460453][T14683] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1678.460476][T14683] usb 1-1: Product: syz [ 1678.460490][T14683] usb 1-1: Manufacturer: syz [ 1678.535453][T14683] cdc_wdm 1-1:1.0: skipping garbage [ 1678.535473][T14683] cdc_wdm 1-1:1.0: skipping garbage [ 1678.552006][T14683] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1678.552026][T14683] cdc_wdm 1-1:1.0: Unknown control protocol [ 1678.790120][T29350] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1678.790238][T29350] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1678.793065][T22989] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1678.950816][T22989] usb 5-1: Using ep0 maxpacket: 8 [ 1678.951572][T22989] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1678.952754][T22989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1678.952797][T22989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1678.955529][T22989] usb 5-1: config 0 descriptor?? [ 1679.168685][T22989] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 1679.204330][ T10] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1679.212017][T14615] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1679.212044][T14615] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1679.213093][T14615] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1679.213342][T14615] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 1679.223028][T14615] usb 10-1: USB disconnect, device number 21 [ 1679.288329][T29366] input: syz0 as /devices/virtual/input/input242 [ 1679.304349][T29367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1679.304772][T29367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1679.407076][ T10] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1679.440150][ T10] aqc111 2-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 2a:9e:c6:16:03:a6 [ 1679.450698][T29371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24944'. [ 1679.452162][T29371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24944'. [ 1679.468393][T29371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24944'. [ 1679.468414][T29371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24944'. [ 1679.481958][T22648] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1679.487702][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1679.487750][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1679.487804][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1679.530387][ T10] usb 2-1: USB disconnect, device number 36 [ 1679.533927][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1679.534099][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1679.534317][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1679.534336][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1679.534539][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1679.534557][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1679.534758][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1679.534775][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1679.535008][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1679.535026][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1679.535229][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1679.535248][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1679.535531][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1679.535550][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1679.535763][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1679.535781][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1679.535857][T14615] usb 1-1: USB disconnect, device number 25 [ 1679.535980][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1679.535998][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1679.536014][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1679.633654][T13164] usb 5-1: USB disconnect, device number 89 [ 1679.686100][ T10] aqc111 2-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1679.753314][ T10] aqc111 2-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1679.753448][ T10] aqc111 2-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1679.753568][ T10] aqc111 2-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1680.179549][T29384] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1680.179576][T29384] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1680.180631][T29384] vhci_hcd vhci_hcd.0: Device attached [ 1680.207388][T29390] vhci_hcd: connection closed [ 1680.207888][T16350] vhci_hcd vhci_hcd.2: stop threads [ 1680.207910][T16350] vhci_hcd vhci_hcd.2: release socket [ 1680.207929][T16350] vhci_hcd vhci_hcd.2: disconnect device [ 1680.242499][ T10] hid-generic 0000:0000:0000.00AD: unknown main item tag 0x0 [ 1680.248091][ T10] hid-generic 0000:0000:0000.00AD: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1680.631870][T29410] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1680.984397][T29417] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1681.264064][T29431] netlink: 'syz.2.24967': attribute type 15 has an invalid length. [ 1681.317274][T29429] syzkaller1: entered promiscuous mode [ 1681.317401][T29429] syzkaller1: entered allmulticast mode [ 1681.354135][T29431] netlink: 'syz.2.24967': attribute type 15 has an invalid length. [ 1681.522702][T16350] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 1681.524542][T22648] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 1681.524678][T22648] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 1681.531004][T16350] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 1682.030608][ T31] audit: type=1326 audit(1790368097.945:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29452 comm="syz.0.24976" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e8459e159 code=0x0 [ 1682.540891][ T6184] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 1682.701736][ T6184] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice=34.15 [ 1682.703306][ T6184] usb 3-1: config 9 interface 0 has no altsetting 0 [ 1682.731293][ T6184] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1682.731318][ T6184] usb 3-1: Product: syz [ 1682.731331][ T6184] usb 3-1: Manufacturer: syz [ 1682.731344][ T6184] usb 3-1: SerialNumber: syz [ 1682.922703][T13164] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1683.070853][T13164] usb 10-1: Using ep0 maxpacket: 16 [ 1683.071284][ T6184] snd-usb-caiaq 3-1:9.0: can't set alt interface. [ 1683.071303][ T6184] usb 3-1: unable to init card! (ret=-5) [ 1683.071551][T13164] usb 10-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1683.072796][ T6184] snd-usb-caiaq 3-1:9.0: probe with driver snd-usb-caiaq failed with error -5 [ 1683.074606][T13164] usb 10-1: config 0 has an invalid interface number: 34 but max is 0 [ 1683.074628][T13164] usb 10-1: config 0 has no interface number 0 [ 1683.074666][T13164] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1683.074689][T13164] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1683.078892][ T6184] usb 3-1: USB disconnect, device number 51 [ 1683.086718][T13164] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.086741][T13164] usb 10-1: Product: syz [ 1683.086755][T13164] usb 10-1: Manufacturer: syz [ 1683.086768][T13164] usb 10-1: SerialNumber: syz [ 1683.208937][T13164] usb 10-1: config 0 descriptor?? [ 1683.211477][T29479] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1683.211637][T29479] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1683.295990][T29499] xt_hashlimit: size too large, truncated to 1048576 [ 1683.454014][T29479] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1683.454152][T29479] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1683.663636][T13164] asix 10-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1684.045067][T29513] batman_adv: batadv0: Adding interface: macsec1 [ 1684.045086][T29513] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1684.045111][T29513] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 1684.312628][T14615] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1684.463395][T14615] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1684.464822][T14615] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1684.464850][T14615] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1684.464913][T14615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1684.477604][T13164] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1684.477837][T13164] asix 10-1:0.34: probe with driver asix failed with error -71 [ 1684.478864][T14615] usb 3-1: config 0 descriptor?? [ 1684.523922][T13164] usb 10-1: USB disconnect, device number 22 [ 1684.638471][T29534] bridge0: port 3(syz_tun) entered blocking state [ 1684.639535][T29534] bridge0: port 3(syz_tun) entered disabled state [ 1684.639760][T29534] syz_tun: entered allmulticast mode [ 1684.649000][T29534] syz_tun: entered promiscuous mode [ 1684.653755][T29534] bridge0: port 3(syz_tun) entered blocking state [ 1684.653870][T29534] bridge0: port 3(syz_tun) entered listening state [ 1684.902877][T14615] cm6533_jd 0003:0D8C:0022.00AE: unknown main item tag 0x0 [ 1684.902997][T14615] cm6533_jd 0003:0D8C:0022.00AE: unknown main item tag 0x0 [ 1684.923726][T14615] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.00AE/input/input243 [ 1684.982536][T14615] cm6533_jd 0003:0D8C:0022.00AE: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 1685.137125][ T2257] usb 3-1: USB disconnect, device number 52 [ 1686.603391][ T10] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1686.760844][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1686.761664][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1686.762789][ T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1686.762812][ T10] usb 5-1: config 0 has no interface number 0 [ 1686.762861][ T10] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1686.765015][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1686.765037][ T10] usb 5-1: Product: syz [ 1686.765050][ T10] usb 5-1: Manufacturer: syz [ 1686.765064][ T10] usb 5-1: SerialNumber: syz [ 1686.768101][ T10] usb 5-1: config 0 descriptor?? [ 1687.167043][T29613] xt_hashlimit: size too large, truncated to 1048576 [ 1687.332195][ T6184] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 1687.397234][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1687.397263][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1687.495061][ T6184] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1687.497731][ T6184] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1687.497762][ T6184] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1687.497797][ T6184] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1687.497830][ T6184] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1687.497853][ T6184] usb 1-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x72, changing to 0x2 [ 1687.497875][ T6184] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 1687.497896][ T6184] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid maxpacket 118, setting to 64 [ 1687.500443][ T6184] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.500465][ T6184] usb 1-1: Product: syz [ 1687.500479][ T6184] usb 1-1: Manufacturer: syz [ 1687.500517][ T6184] usb 1-1: SerialNumber: syz [ 1687.625628][T29608] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1687.813464][T29628] loop8: detected capacity change from 0 to 8 [ 1687.815428][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 1687.815460][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 1687.815478][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1687.815770][ T10] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1687.817512][T29628] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 1687.817536][T29628] loop8: partition table partially beyond EOD, truncated [ 1687.817690][T29628] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 1687.858144][T29608] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1687.858294][T29608] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1687.903904][ T10] usb 5-1: USB disconnect, device number 90 [ 1687.921069][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1687.921093][ C1] bridge0: topology change detected, propagating [ 1687.921415][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1687.921432][ C1] bridge0: topology change detected, propagating [ 1688.027733][T17983] udevd[17983]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1688.295851][T29630] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1688.466197][T29608] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1688.466308][T29608] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1688.701866][ T6184] cdc_ncm 1-1:1.0: bind() failure [ 1688.767530][ T6184] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1688.768275][ T6184] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1688.787638][ T6184] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 1688.805510][ T6184] usb 1-1: USB disconnect, device number 26 [ 1689.112004][ T31] audit: type=1326 audit(1790368105.035:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29655 comm="syz.2.25050" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e8899e159 code=0x0 [ 1689.310843][ T6184] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1689.471647][ T6184] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1689.475475][ T6184] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.550171][T29672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25056'. [ 1689.672248][T29678] kernel read not supported for file /zero (pid: 29678 comm: syz.1.25058) [ 1689.814879][T29684] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1690.110899][T29699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25068'. [ 1690.544540][ T6184] usb 10-1: Firmware version (0.0) predates our first public release. [ 1690.544565][ T6184] usb 10-1: Please update to version 0.2 or newer [ 1690.641456][ T6184] usb 10-1: USB disconnect, device number 23 [ 1691.638774][ T31] audit: type=1326 audit(1790368107.555:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29742 comm="syz.2.25085" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8899e159 code=0x7ffc0000 [ 1691.638902][ T31] audit: type=1326 audit(1790368107.555:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29742 comm="syz.2.25085" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8899e159 code=0x7ffc0000 [ 1691.639620][ T31] audit: type=1326 audit(1790368107.555:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29742 comm="syz.2.25085" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8899e159 code=0x7ffc0000 [ 1691.692243][ T31] audit: type=1326 audit(1790368107.555:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29742 comm="syz.2.25085" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8899e159 code=0x7ffc0000 [ 1691.692295][ T31] audit: type=1326 audit(1790368107.615:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29742 comm="syz.2.25085" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8899e159 code=0x7ffc0000 [ 1691.701282][ T31] audit: type=1326 audit(1790368107.615:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29742 comm="syz.2.25085" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8e8899e159 code=0x7ffc0000 [ 1691.746456][ T31] audit: type=1326 audit(1790368107.665:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29742 comm="syz.2.25085" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e8895e98e code=0x7ffc0000 [ 1691.754216][ T31] audit: type=1326 audit(1790368107.675:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29742 comm="syz.2.25085" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e8895e98e code=0x7ffc0000 [ 1691.760532][ T31] audit: type=1326 audit(1790368107.675:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29742 comm="syz.2.25085" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e8895e98e code=0x7ffc0000 [ 1692.742862][T29759] batman_adv: batadv0: Adding interface: syzkaller0 [ 1692.742890][T29759] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1692.742920][T29759] batman_adv: batadv0: Interface activated: syzkaller0 [ 1692.797638][T29758] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1692.898179][T29758] batman_adv: batadv0: Removing interface: syzkaller0 [ 1693.640935][ T10] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 1693.671255][ T6184] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1693.792387][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1693.793791][ T10] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1693.793820][ T10] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1693.793841][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1693.796093][ T10] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1693.796116][ T10] usb 3-1: Product: syz [ 1693.796130][ T10] usb 3-1: Manufacturer: syz [ 1693.796144][ T10] usb 3-1: SerialNumber: syz [ 1693.800277][ T10] usb 3-1: config 0 descriptor?? [ 1693.833392][ T6184] usb 2-1: New USB device found, idVendor=12ba, idProduct=074b, bcdDevice= 0.00 [ 1693.865308][ T6184] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1693.865338][ T6184] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1693.865359][ T6184] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1693.865390][ T6184] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.919881][ T6184] usb 2-1: config 0 descriptor?? [ 1693.928944][ T10] usb 3-1: selecting invalid altsetting 0 [ 1694.038967][T29799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25106'. [ 1694.038991][T29799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25106'. [ 1694.083815][ T10] usb 3-1: USB disconnect, device number 53 [ 1694.134211][T17983] udevd[17983]: setting mode of /dev/bus/usb/003/053 to 020664 failed: No such file or directory [ 1694.134336][T17983] udevd[17983]: setting owner of /dev/bus/usb/003/053 to uid=0, gid=0 failed: No such file or directory [ 1694.198893][T29801] netlink: 24 bytes leftover after parsing attributes in process `syz.0.25107'. [ 1694.198932][T29801] netlink: 16 bytes leftover after parsing attributes in process `syz.0.25107'. [ 1694.219735][T12998] udevd[12998]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1694.362559][ T6184] input: HID 12ba:074b as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:12BA:074B.00AF/input/input244 [ 1694.438616][ T6184] sony 0003:12BA:074B.00AF: input,hidraw0: USB HID v80.00 Joystick [HID 12ba:074b] on usb-dummy_hcd.1-1/input0 [ 1694.586614][T13164] usb 2-1: USB disconnect, device number 37 [ 1694.617175][T29815] fido_id[29815]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1694.903429][T19163] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 1695.051412][T19163] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice=34.15 [ 1695.052365][T19163] usb 1-1: config 9 interface 0 has no altsetting 0 [ 1695.054263][T19163] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.054285][T19163] usb 1-1: Product: syz [ 1695.054299][T19163] usb 1-1: Manufacturer: syz [ 1695.054312][T19163] usb 1-1: SerialNumber: syz [ 1695.210845][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1695.376521][ T10] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1695.379942][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1695.379971][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1695.380006][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.431697][ T10] usb 3-1: config 0 descriptor?? [ 1695.437153][T19163] snd-usb-caiaq 1-1:9.0: can't set alt interface. [ 1695.437177][T19163] usb 1-1: unable to init card! (ret=-5) [ 1695.437558][T19163] snd-usb-caiaq 1-1:9.0: probe with driver snd-usb-caiaq failed with error -5 [ 1695.463658][T19163] usb 1-1: USB disconnect, device number 27 [ 1695.845541][ T10] cm6533_jd 0003:0D8C:0022.00B0: unknown main item tag 0x0 [ 1695.845613][ T10] cm6533_jd 0003:0D8C:0022.00B0: unknown main item tag 0x0 [ 1695.865731][ T10] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.00B0/input/input245 [ 1695.895935][ T10] cm6533_jd 0003:0D8C:0022.00B0: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 1696.068273][ T10] usb 3-1: USB disconnect, device number 54 [ 1696.225117][T29860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25131'. [ 1696.604957][ T31] kauditd_printk_skb: 58 callbacks suppressed [ 1696.604976][ T31] audit: type=1800 audit(1790368112.525:2206): pid=29875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.25137" name="nullb0" dev="devtmpfs" ino=7733 res=0 errno=0 [ 1697.731580][T29924] netlink: 36 bytes leftover after parsing attributes in process `syz.1.25160'. [ 1697.841087][T14615] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 1697.886612][ T31] audit: type=1326 audit(1790368113.805:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29925 comm="syz.4.25161" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f19e1f9e159 code=0x0 [ 1697.993307][T14615] usb 3-1: New USB device found, idVendor=0ace, idProduct=1602, bcdDevice=8c.d0 [ 1697.996039][T14615] usb 3-1: config 4 has an invalid interface number: 12 but max is 0 [ 1697.996063][T14615] usb 3-1: config 4 has no interface number 0 [ 1697.996090][T14615] usb 3-1: config 4 interface 12 has no altsetting 0 [ 1697.999259][T14615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.999282][T14615] usb 3-1: Product: syz [ 1697.999296][T14615] usb 3-1: Manufacturer: syz [ 1697.999309][T14615] usb 3-1: SerialNumber: syz [ 1698.080357][T29938] input: syz0 as /devices/virtual/input/input246 [ 1698.235155][T29922] sg_write: data in/out 503296/136 bytes for SCSI command 0x0-- guessing data in; [ 1698.235155][T29922] program syz.2.25159 not setting count and/or reply_len properly [ 1698.284163][T14615] cdc_acm 3-1:4.12: Zero length descriptor references [ 1698.284197][T14615] cdc_acm 3-1:4.12: probe with driver cdc_acm failed with error -22 [ 1698.308090][T14615] usb 3-1: USB disconnect, device number 55 [ 1699.085237][ T10] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1699.143317][T13164] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1699.241880][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1699.243880][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1699.243907][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1699.243927][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1699.243965][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1699.248944][ T10] usb 2-1: config 0 descriptor?? [ 1699.296761][T13164] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1699.299178][T13164] usb 1-1: config 0 has no interfaces? [ 1699.304893][T13164] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.304942][T13164] usb 1-1: Product: syz [ 1699.304955][T13164] usb 1-1: Manufacturer: syz [ 1699.304969][T13164] usb 1-1: SerialNumber: syz [ 1699.348584][T13164] usb 1-1: config 0 descriptor?? [ 1699.579505][ T2257] usb 1-1: USB disconnect, device number 28 [ 1699.736551][ T10] plantronics 0003:047F:FFFF.00B1: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1700.083321][ C1] bridge0: port 3(syz_tun) entered learning state [ 1700.500946][T19163] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1700.570887][ T6184] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 1700.652460][T19163] usb 3-1: Using ep0 maxpacket: 8 [ 1700.653246][T19163] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1700.660479][T19163] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.660505][T19163] usb 3-1: Product: syz [ 1700.660519][T19163] usb 3-1: Manufacturer: syz [ 1700.660565][T19163] usb 3-1: SerialNumber: syz [ 1700.670697][T19163] usb 3-1: config 0 descriptor?? [ 1700.683148][T19163] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1700.733058][ T6184] usb 1-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 1700.734281][ T6184] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1700.734328][ T6184] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1700.734352][ T6184] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1700.734372][ T6184] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1700.734395][ T6184] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1700.734428][ T6184] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.736882][ T6184] usb 1-1: config 0 descriptor?? [ 1701.045763][T30022] syz_tun: entered allmulticast mode [ 1701.050458][T30021] syz_tun: left allmulticast mode [ 1701.084328][T30023] vivid-003: disconnect [ 1701.138065][T30019] vivid-003: reconnect [ 1701.164368][ T6184] logitech-djreceiver 0003:046D:C53A.00B2: hiddev1,hidraw1: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.0-1/input0 [ 1701.413227][T13164] usb 1-1: USB disconnect, device number 29 [ 1701.520834][ T6184] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 1701.671680][ T6184] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1701.672683][ T6184] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1701.672721][ T6184] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1701.672741][ T6184] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1701.672779][ T6184] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.675511][ T6184] usb 5-1: config 0 descriptor?? [ 1701.795156][ T2257] usb 2-1: USB disconnect, device number 38 [ 1701.893053][T19163] gspca_sonixj: reg_w1 err -71 [ 1701.931019][T19163] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 1701.945390][T19163] usb 3-1: USB disconnect, device number 56 [ 1702.116196][ T6184] plantronics 0003:047F:FFFF.00B3: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1702.568280][T30063] netlink: 'syz.2.25212': attribute type 16 has an invalid length. [ 1702.568304][T30063] netlink: 'syz.2.25212': attribute type 17 has an invalid length. [ 1702.733518][T30063] veth0_to_team: entered promiscuous mode [ 1702.767072][T30065] tap0: tun_chr_ioctl cmd 1074025677 [ 1702.767097][T30065] tap0: Linktype set failed because interface is up [ 1702.801270][T19163] tap0: tun_net_xmit 90 [ 1703.232622][ T31] audit: type=1326 audit(1790368119.155:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30072 comm="syz.2.25217" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e8899e159 code=0x0 [ 1703.543845][T14615] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1703.691837][T14615] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1703.698414][T14615] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1703.698441][T14615] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1703.706187][T14615] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.706211][T14615] usb 1-1: Product: syz [ 1703.706225][T14615] usb 1-1: Manufacturer: syz [ 1703.706238][T14615] usb 1-1: SerialNumber: syz [ 1704.214937][ T10] usb 5-1: USB disconnect, device number 91 [ 1704.326498][ T31] audit: type=1326 audit(1790368120.245:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30108 comm="syz.2.25232" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8899e159 code=0x7ffc0000 [ 1704.326645][ T31] audit: type=1326 audit(1790368120.245:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30108 comm="syz.2.25232" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8899e159 code=0x7ffc0000 [ 1704.328772][ T31] audit: type=1326 audit(1790368120.245:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30108 comm="syz.2.25232" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8899e159 code=0x7ffc0000 [ 1704.329106][ T31] audit: type=1326 audit(1790368120.245:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30108 comm="syz.2.25232" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8899e159 code=0x7ffc0000 [ 1704.329147][ T31] audit: type=1326 audit(1790368120.245:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30108 comm="syz.2.25232" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8e8899e159 code=0x7ffc0000 [ 1704.329215][ T31] audit: type=1326 audit(1790368120.245:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30108 comm="syz.2.25232" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8899e159 code=0x7ffc0000 [ 1704.329446][ T31] audit: type=1326 audit(1790368120.245:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30108 comm="syz.2.25232" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8899e159 code=0x7ffc0000 [ 1704.329643][ T31] audit: type=1326 audit(1790368120.245:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30108 comm="syz.2.25232" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8899e159 code=0x7ffc0000 [ 1704.329794][ T31] audit: type=1326 audit(1790368120.245:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30108 comm="syz.2.25232" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8e8899e159 code=0x7ffc0000 [ 1704.851461][T14615] usb 1-1: failed to execute ARPC: -110 [ 1704.851647][T14615] usb 1-1: failed to set connected state for cport 0: -110 [ 1704.851666][T14615] greybus greybus1: 0/0:0: failed to set connected state: -110 [ 1704.856548][T14615] usb 1-1: failed to send ARPC request 3: -71 [ 1704.857171][T14615] usb 1-1: failed to execute ARPC: -71 [ 1704.857188][T14615] usb 1-1: failed to clear cport 0: -71 [ 1704.857204][T14615] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 1704.888952][T14615] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 1704.897245][T14615] usb 1-1: USB disconnect, device number 30 [ 1705.853245][T30151] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1706.106300][T30160] netlink: 'syz.0.25252': attribute type 1 has an invalid length. [ 1706.225698][T30162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25253'. [ 1707.170863][ T6184] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1707.330954][ T6184] usb 1-1: Using ep0 maxpacket: 16 [ 1707.333080][ T6184] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1707.335884][ T6184] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1707.335927][ T6184] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1707.335948][ T6184] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1707.335966][ T6184] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1707.335986][ T6184] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1707.339071][ T6184] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1707.339094][ T6184] usb 1-1: Manufacturer: syz [ 1707.437542][ T6184] usb 1-1: config 0 descriptor?? [ 1707.563856][T30209] netlink: 'syz.1.25274': attribute type 1 has an invalid length. [ 1707.694191][T30209] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1707.741076][ T6184] rc_core: IR keymap rc-hauppauge not found [ 1707.741094][ T6184] Registered IR keymap rc-empty [ 1707.741266][ T6184] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1707.769973][ T6184] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1707.784262][ T6184] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1707.786756][ T6184] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input247 [ 1707.816422][ T6184] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1707.832527][ T6184] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1707.855016][ T6184] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1707.872770][ T6184] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1707.921158][ T6184] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1707.938243][ T6184] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1707.964023][ T6184] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1708.001247][ T6184] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1708.020960][ T6184] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1708.040936][ T6184] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1708.075005][ T6184] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1708.075052][ T6184] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1708.225613][T22989] usb 1-1: USB disconnect, device number 31 [ 1708.787397][T30243] netlink: 12 bytes leftover after parsing attributes in process `syz.9.25286'. [ 1709.768009][T30288] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1710.397029][T30313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25313'. [ 1711.119534][T30347] netlink: 148 bytes leftover after parsing attributes in process `syz.9.25327'. [ 1711.164441][T30350] netlink: 2068 bytes leftover after parsing attributes in process `syz.4.25328'. [ 1711.758256][T14615] hid-generic 0000:0000:0000.00B4: unknown main item tag 0x0 [ 1711.772866][T20599] Bluetooth: hci2: command 0x0406 tx timeout [ 1711.786642][T14615] hid-generic 0000:0000:0000.00B4: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1713.429193][T30432] vivid-000: disconnect [ 1713.429714][T30431] vivid-000: reconnect [ 1713.568279][T30440] input: syz0 as /devices/virtual/input/input248 [ 1713.886031][T30455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25371'. [ 1713.886066][T30455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25371'. [ 1713.930922][T19163] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1714.006377][T30460] netlink: 48 bytes leftover after parsing attributes in process `syz.2.25374'. [ 1714.081336][T19163] usb 2-1: Using ep0 maxpacket: 32 [ 1714.082515][T19163] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1714.083948][T19163] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1714.087101][T19163] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1714.087126][T19163] usb 2-1: Product: syz [ 1714.087139][T19163] usb 2-1: Manufacturer: syz [ 1714.087151][T19163] usb 2-1: SerialNumber: syz [ 1714.099644][T19163] usb 2-1: config 0 descriptor?? [ 1714.101579][T30444] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1714.103116][T19163] hub 2-1:0.0: bad descriptor, ignoring hub [ 1714.103137][T19163] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1714.982135][T22989] usb 2-1: USB disconnect, device number 39 [ 1715.210914][T22989] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 1715.364928][T22989] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1715.368572][T22989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 1715.377564][T22989] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1715.377588][T22989] usb 2-1: Product: syz [ 1715.377601][T22989] usb 2-1: Manufacturer: syz [ 1715.377628][T22989] usb 2-1: SerialNumber: syz [ 1715.384923][T22989] usb 2-1: config 0 descriptor?? [ 1715.385889][T30481] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1715.390193][T22989] hub 2-1:0.0: bad descriptor, ignoring hub [ 1715.390215][T22989] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1715.442085][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 1715.442108][ C1] bridge0: topology change detected, propagating [ 1715.741653][T30502] gretap0: entered promiscuous mode [ 1715.791073][ T6184] usb 2-1: USB disconnect, device number 40 [ 1716.304313][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 1716.304332][ T31] audit: type=1800 audit(1790368132.225:2237): pid=30523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.25397" name="nullb0" dev="devtmpfs" ino=7733 res=0 errno=0 [ 1716.360849][T22989] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1716.511146][T22989] usb 10-1: Using ep0 maxpacket: 8 [ 1716.514946][T22989] usb 10-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 1716.516022][T22989] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1716.523339][T22989] usb 10-1: config 0 descriptor?? [ 1716.530040][T22989] usb 10-1: probing VID:PID(0424:012C) [ 1716.552814][T22989] usb 10-1: vub300 testing BULK IN EndPoint(0) 81 [ 1716.552839][T22989] usb 10-1: vub300 testing BULK OUT EndPoint(1) 02 [ 1716.552856][T22989] usb 10-1: vub300 testing BULK IN EndPoint(2) 83 [ 1716.552872][T22989] usb 10-1: vub300 testing BULK OUT EndPoint(3) 04 [ 1716.552889][T22989] usb 10-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 1716.889852][ T4935] Bluetooth: hci3: command 0x0406 tx timeout [ 1716.903765][T30536] batadv_slave_0: entered promiscuous mode [ 1716.904836][T30536] batadv_slave_0: left promiscuous mode [ 1716.959738][T22989] usb 10-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 1717.132893][ T31] audit: type=1800 audit(1790368133.045:2238): pid=30543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.25404" name="bus" dev="tmpfs" ino=1402 res=0 errno=0 [ 1717.198236][T22989] usb 10-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 1717.235908][T30548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25408'. [ 1717.250333][T30548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25408'. [ 1717.313907][T30551] netlink: 52 bytes leftover after parsing attributes in process `syz.2.25409'. [ 1717.327493][T30551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1717.327792][T30551] bridge0: port 1(bridge_slave_0) entered disabled state [ 1717.361247][T30551] netlink: 52 bytes leftover after parsing attributes in process `syz.2.25409'. [ 1717.634941][ T31] audit: type=1326 audit(1790368133.555:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30567 comm="syz.4.25417" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e1f9e159 code=0x7ffc0000 [ 1717.635413][ T31] audit: type=1326 audit(1790368133.555:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30567 comm="syz.4.25417" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e1f9e159 code=0x7ffc0000 [ 1717.635589][ T31] audit: type=1326 audit(1790368133.555:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30567 comm="syz.4.25417" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f19e1f9e159 code=0x7ffc0000 [ 1717.635874][ T31] audit: type=1326 audit(1790368133.555:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30567 comm="syz.4.25417" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e1f9e159 code=0x7ffc0000 [ 1717.636053][ T31] audit: type=1326 audit(1790368133.555:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30567 comm="syz.4.25417" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f19e1f9e159 code=0x7ffc0000 [ 1717.636190][ T31] audit: type=1326 audit(1790368133.555:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30567 comm="syz.4.25417" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e1f9e159 code=0x7ffc0000 [ 1717.636409][ T31] audit: type=1326 audit(1790368133.555:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30567 comm="syz.4.25417" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e1f9e159 code=0x7ffc0000 [ 1717.636633][ T31] audit: type=1326 audit(1790368133.555:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30567 comm="syz.4.25417" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f19e1f9e159 code=0x7ffc0000 [ 1718.154702][T14683] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1718.201155][T24078] bridge0: port 3(syz_tun) entered disabled state [ 1718.241371][T24078] syz_tun (unregistering): left allmulticast mode [ 1718.241395][T24078] syz_tun (unregistering): left promiscuous mode [ 1718.241492][T24078] bridge0: port 3(syz_tun) entered disabled state [ 1718.265139][T14615] usb 10-1: USB disconnect, device number 24 [ 1718.276431][T22989] usb 10-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 1718.320810][T14683] usb 2-1: Using ep0 maxpacket: 32 [ 1718.321982][T14683] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1718.323876][T14683] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1718.327865][T14683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.327887][T14683] usb 2-1: Product: syz [ 1718.327901][T14683] usb 2-1: Manufacturer: syz [ 1718.327914][T14683] usb 2-1: SerialNumber: syz [ 1718.369279][T14615] USB vub300 remote SDIO host controller[0] now disconnected [ 1718.382704][T14683] usb 2-1: config 0 descriptor?? [ 1718.389190][T14683] f81534 2-1:0.0: required endpoints missing [ 1718.619664][T30570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1718.620994][T30570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1718.668830][ T10] usb 2-1: USB disconnect, device number 41 [ 1718.969735][ T4935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1718.982814][ T4935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1718.989770][ T4935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1718.990966][ T4935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1719.013835][ T4935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1719.124162][ C1] [ 1719.126550][ C1] ============================= [ 1719.133139][ C1] WARNING: suspicious RCU usage [ 1719.138033][ C1] syzkaller #0 Tainted: G L [ 1719.144073][ C1] ----------------------------- [ 1719.148928][ C1] kernel/sched/core.c:9226 Illegal context switch in RCU-sched read-side critical section! [ 1719.158969][ C1] [ 1719.158969][ C1] other info that might help us debug this: [ 1719.158969][ C1] [ 1719.169265][ C1] [ 1719.169265][ C1] rcu_scheduler_active = 2, debug_locks = 1 [ 1719.177408][ C1] locks held by syz-executor/26665: 9, last CPU#1: [ 1719.184006][ C1] #0: ffffffff8ee36730 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 1719.192819][ C1] #1: ffff8880771703b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 1719.201996][ C1] #2: ffff88804ff503b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 1719.211370][ C1] #3: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1719.220976][ C1] #4: ffff888074383a98 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 1719.231551][ C1] #5: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1719.241133][ C1] #6: ffff888035716c78 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 1719.251536][ C1] #7: ffffffff8ed5c9e0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 1719.261041][ C1] #8: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 1719.271597][ C1] [ 1719.271597][ C1] stack backtrace: [ 1719.277516][ C1] CPU: 1 UID: 0 PID: 26665 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1719.288650][ C1] Tainted: [L]=SOFTLOCKUP [ 1719.292985][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1719.303063][ C1] Call Trace: [ 1719.306362][ C1] [ 1719.309218][ C1] dump_stack_lvl+0xe8/0x150 [ 1719.313844][ C1] lockdep_rcu_suspicious+0x140/0x1d0 [ 1719.319251][ C1] __might_resched+0xbb/0x4c0 [ 1719.323961][ C1] ? __cancel_work_sync+0x5c/0x110 [ 1719.329107][ C1] __cancel_work_sync+0x6d/0x110 [ 1719.334077][ C1] mmc_free_host+0x19/0x40 [ 1719.338614][ C1] call_timer_fn+0x18d/0x5f0 [ 1719.343246][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1719.350050][ C1] ? call_timer_fn+0xd5/0x5f0 [ 1719.354748][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1719.359891][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1719.365178][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1719.371905][ C1] __run_timer_base+0x652/0x8b0 [ 1719.376797][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1719.382208][ C1] ? ktime_get+0x1f5/0x220 [ 1719.386645][ C1] ? lapic_next_event+0x11/0x20 [ 1719.391506][ C1] run_timer_softirq+0xb7/0x170 [ 1719.396359][ C1] handle_softirqs+0x226/0x860 [ 1719.401124][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 1719.405894][ C1] __irq_exit_rcu+0xcb/0x220 [ 1719.410484][ C1] irq_exit_rcu+0x9/0x30 [ 1719.414722][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1719.420357][ C1] [ 1719.423279][ C1] [ 1719.426200][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1719.432179][ C1] RIP: 0010:rcu_is_watching+0x2f/0xb0 [ 1719.437557][ C1] Code: 57 41 56 53 65 48 ff 05 0f f4 e8 11 e8 4a 26 3a 0a 89 c3 83 f8 08 73 66 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd d0 97 6e 8e <4c> 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 2b 74 8b 00 [ 1719.457158][ C1] RSP: 0018:ffffc9000693f230 EFLAGS: 00000297 [ 1719.463227][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 8000000000000004 [ 1719.471195][ C1] RDX: 0000000000000000 RSI: ffffffff8c6dac60 RDI: ffffffff8c6dac20 [ 1719.479156][ C1] RBP: 0000000000000001 R08: ffffffff8243da5a R09: 0000000000000000 [ 1719.487123][ C1] R10: dffffc0000000000 R11: ffffed1008bfbf1d R12: dffffc0000000000 [ 1719.495089][ C1] R13: 0000000000000008 R14: ffffffff8e6e97d8 R15: dffffc0000000000 [ 1719.503060][ C1] ? pfn_valid+0xba/0x490 [ 1719.507395][ C1] ? pfn_valid+0xba/0x490 [ 1719.511721][ C1] pfn_valid+0x34b/0x490 [ 1719.515964][ C1] page_table_check_set+0x25/0x530 [ 1719.521075][ C1] copy_pmd_range+0x4adc/0x5c10 [ 1719.525942][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 1719.531486][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 1719.536690][ C1] ? do_syscall_64+0x166/0x520 [ 1719.541458][ C1] ? __lock_acquire+0x747/0x2de0 [ 1719.546401][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 1719.551604][ C1] copy_page_range+0xc82/0x1290 [ 1719.556466][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 1719.561748][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 1719.568691][ C1] dup_mmap+0xf17/0x1dc0 [ 1719.572950][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 1719.577626][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1719.582661][ C1] ? lock_acquire+0x115/0x350 [ 1719.587351][ C1] copy_mm+0x11a/0x480 [ 1719.591423][ C1] copy_process+0x1e79/0x4400 [ 1719.596096][ C1] ? __lock_acquire+0x747/0x2de0 [ 1719.601031][ C1] ? copy_process+0xd16/0x4400 [ 1719.605802][ C1] ? __pfx_copy_process+0x10/0x10 [ 1719.610841][ C1] kernel_clone+0x2d7/0x940 [ 1719.615345][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1719.620377][ C1] __x64_sys_clone+0x1b6/0x230 [ 1719.625139][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 1719.630433][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 1719.635722][ C1] do_syscall_64+0x166/0x520 [ 1719.640315][ C1] ? trace_irq_disable+0x3b/0x140 [ 1719.645337][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1719.651399][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1719.656077][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1719.661961][ C1] RIP: 0033:0x7fbcba9c6bd2 [ 1719.666368][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1719.685964][ C1] RSP: 002b:00007fbcbad4fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1719.694374][ C1] RAX: ffffffffffffffda RBX: 00007fbcbad4fc60 RCX: 00007fbcba9c6bd2 [ 1719.702338][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1719.710296][ C1] RBP: 00007fbcbad4fdec R08: 0000000000000000 R09: 0000000000000001 [ 1719.718257][ C1] R10: 00005555653cd7d0 R11: 0000000000000246 R12: 0000000000000001 [ 1719.726217][ C1] R13: 00000000000927c0 R14: 00000000001a3aa5 R15: 00007fbcbad4fe40 [ 1719.734204][ C1] [ 1719.737366][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 [ 1719.737382][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 26665, name: syz-executor [ 1719.737398][ C1] preempt_count: 104, expected: 0 [ 1719.737409][ C1] RCU nest depth: 2, expected: 0 [ 1719.737420][ C1] locks held by syz-executor/26665: 9, last CPU#1: [ 1719.737443][ C1] #0: ffffffff8ee36730 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 1719.737506][ C1] #1: ffff8880771703b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 1719.737593][ C1] #2: ffff88804ff503b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 1719.737655][ C1] #3: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1719.737715][ C1] #4: ffff888074383a98 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 1719.737793][ C1] #5: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1719.737861][ C1] #6: ffff888035716c78 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 1719.737936][ C1] #7: ffffffff8ed5c9e0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 1719.737992][ C1] #8: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 1719.738052][ C1] Preemption disabled at: [ 1719.738059][ C1] [<0000000000000000>] 0x0 [ 1719.738088][ C1] CPU: 1 UID: 0 PID: 26665 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1719.738118][ C1] Tainted: [L]=SOFTLOCKUP [ 1719.738126][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1719.738140][ C1] Call Trace: [ 1719.738149][ C1] [ 1719.738159][ C1] dump_stack_lvl+0xe8/0x150 [ 1719.738193][ C1] __might_resched+0x36a/0x4c0 [ 1719.738233][ C1] __cancel_work_sync+0x6d/0x110 [ 1719.738266][ C1] mmc_free_host+0x19/0x40 [ 1719.738289][ C1] call_timer_fn+0x18d/0x5f0 [ 1719.738311][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1719.738342][ C1] ? call_timer_fn+0xd5/0x5f0 [ 1719.738368][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1719.738406][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1719.738434][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1719.738473][ C1] __run_timer_base+0x652/0x8b0 [ 1719.738516][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1719.738546][ C1] ? ktime_get+0x1f5/0x220 [ 1719.738570][ C1] ? lapic_next_event+0x11/0x20 [ 1719.738602][ C1] run_timer_softirq+0xb7/0x170 [ 1719.738629][ C1] handle_softirqs+0x226/0x860 [ 1719.738663][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 1719.738698][ C1] __irq_exit_rcu+0xcb/0x220 [ 1719.738729][ C1] irq_exit_rcu+0x9/0x30 [ 1719.738764][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1719.738791][ C1] [ 1719.738799][ C1] [ 1719.738808][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1719.738830][ C1] RIP: 0010:rcu_is_watching+0x2f/0xb0 [ 1719.738855][ C1] Code: 57 41 56 53 65 48 ff 05 0f f4 e8 11 e8 4a 26 3a 0a 89 c3 83 f8 08 73 66 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd d0 97 6e 8e <4c> 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 2b 74 8b 00 [ 1719.738873][ C1] RSP: 0018:ffffc9000693f230 EFLAGS: 00000297 [ 1719.738890][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 8000000000000004 [ 1719.738905][ C1] RDX: 0000000000000000 RSI: ffffffff8c6dac60 RDI: ffffffff8c6dac20 [ 1719.738920][ C1] RBP: 0000000000000001 R08: ffffffff8243da5a R09: 0000000000000000 [ 1719.738934][ C1] R10: dffffc0000000000 R11: ffffed1008bfbf1d R12: dffffc0000000000 [ 1719.738950][ C1] R13: 0000000000000008 R14: ffffffff8e6e97d8 R15: dffffc0000000000 [ 1719.738971][ C1] ? pfn_valid+0xba/0x490 [ 1719.739002][ C1] ? pfn_valid+0xba/0x490 [ 1719.739026][ C1] pfn_valid+0x34b/0x490 [ 1719.739050][ C1] page_table_check_set+0x25/0x530 [ 1719.739081][ C1] copy_pmd_range+0x4adc/0x5c10 [ 1719.739133][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 1719.739175][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 1719.739207][ C1] ? do_syscall_64+0x166/0x520 [ 1719.739243][ C1] ? __lock_acquire+0x747/0x2de0 [ 1719.739273][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 1719.739311][ C1] copy_page_range+0xc82/0x1290 [ 1719.739358][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 1719.739393][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 1719.739437][ C1] dup_mmap+0xf17/0x1dc0 [ 1719.739491][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 1719.739524][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1719.739567][ C1] ? lock_acquire+0x115/0x350 [ 1719.739608][ C1] copy_mm+0x11a/0x480 [ 1719.739640][ C1] copy_process+0x1e79/0x4400 [ 1719.739668][ C1] ? __lock_acquire+0x747/0x2de0 [ 1719.739701][ C1] ? copy_process+0xd16/0x4400 [ 1719.739755][ C1] ? __pfx_copy_process+0x10/0x10 [ 1719.739798][ C1] kernel_clone+0x2d7/0x940 [ 1719.739836][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1719.739888][ C1] __x64_sys_clone+0x1b6/0x230 [ 1719.739925][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 1719.739976][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 1719.740012][ C1] do_syscall_64+0x166/0x520 [ 1719.740040][ C1] ? trace_irq_disable+0x3b/0x140 [ 1719.740064][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1719.740087][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1719.740115][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1719.740138][ C1] RIP: 0033:0x7fbcba9c6bd2 [ 1719.740159][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1719.740178][ C1] RSP: 002b:00007fbcbad4fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1719.740201][ C1] RAX: ffffffffffffffda RBX: 00007fbcbad4fc60 RCX: 00007fbcba9c6bd2 [ 1719.740219][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1719.740233][ C1] RBP: 00007fbcbad4fdec R08: 0000000000000000 R09: 0000000000000001 [ 1719.740247][ C1] R10: 00005555653cd7d0 R11: 0000000000000246 R12: 0000000000000001 [ 1719.740261][ C1] R13: 00000000000927c0 R14: 00000000001a3aa5 R15: 00007fbcbad4fe40 [ 1719.740294][ C1] [ 1719.740589][ C1] [ 1720.181365][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1720.326523][ C1] ================================ [ 1720.331634][ C1] WARNING: inconsistent lock state [ 1720.336751][ C1] syzkaller #0 Tainted: G W L [ 1720.342722][ C1] -------------------------------- [ 1720.347820][ C1] inconsistent {SOFTIRQ-ON-R} -> {IN-SOFTIRQ-W} usage. [ 1720.354653][ C1] syz-executor/26665 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 1720.361237][ C1] ffffffff8f817d78 (wakeup_srcu){.+-+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0 [ 1720.370315][ C1] {SOFTIRQ-ON-R} state was registered at: [ 1720.376020][ C1] lock_acquire+0x115/0x350 [ 1720.380607][ C1] pm_print_active_wakeup_sources+0x60/0x370 [ 1720.386768][ C1] wakeup_count_store+0xcc/0x120 [ 1720.391791][ C1] kernfs_fop_write_iter+0x3a4/0x540 [ 1720.397160][ C1] aio_write+0x5d0/0x870 [ 1720.401481][ C1] io_submit_one+0x798/0x13d0 [ 1720.406238][ C1] __se_sys_io_submit+0x195/0x340 [ 1720.411336][ C1] do_syscall_64+0x166/0x520 [ 1720.416009][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1720.421978][ C1] irq event stamp: 1245494 [ 1720.426374][ C1] hardirqs last enabled at (1245494): [] _raw_spin_unlock_irqrestore+0x30/0x80 [ 1720.431427][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1720.442064][ C1] hardirqs last disabled at (1245493): [] _raw_spin_lock_irqsave+0x1a/0x60 [ 1720.452237][ C1] softirqs last enabled at (1244832): [] __irq_exit_rcu+0xcb/0x220 [ 1720.461787][ C1] softirqs last disabled at (1244871): [] __irq_exit_rcu+0xcb/0x220 [ 1720.471341][ C1] [ 1720.471341][ C1] other info that might help us debug this: [ 1720.479394][ C1] Possible unsafe locking scenario: [ 1720.479394][ C1] [ 1720.486881][ C1] CPU0 [ 1720.490170][ C1] ---- [ 1720.493442][ C1] lock(wakeup_srcu); [ 1720.497505][ C1] [ 1720.500945][ C1] lock(wakeup_srcu); [ 1720.505184][ C1] [ 1720.505184][ C1] *** DEADLOCK *** [ 1720.505184][ C1] [ 1720.513341][ C1] locks held by syz-executor/26665: 9, last CPU#1: [ 1720.519830][ C1] #0: ffffffff8ee36730 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 1720.528533][ C1] #1: ffff8880771703b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 1720.537596][ C1] #2: ffff88804ff503b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 1720.546831][ C1] #3: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1720.556319][ C1] #4: ffff888074383a98 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 1720.566772][ C1] #5: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1720.576275][ C1] #6: ffff888035716c78 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 1720.586570][ C1] #7: ffffffff8ed5c9e0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 1720.596020][ C1] #8: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 1720.606511][ C1] [ 1720.606511][ C1] stack backtrace: [ 1720.609965][T30595] bridge0: port 1(bridge_slave_0) entered blocking state [ 1720.610092][T30595] bridge0: port 1(bridge_slave_0) entered disabled state [ 1720.610373][T30595] bridge_slave_0: entered allmulticast mode [ 1720.611632][T30595] bridge_slave_0: entered promiscuous mode [ 1720.616998][T30595] bridge0: port 2(bridge_slave_1) entered blocking state [ 1720.617120][T30595] bridge0: port 2(bridge_slave_1) entered disabled state [ 1720.617225][T30595] bridge_slave_1: entered allmulticast mode [ 1720.618316][T30595] bridge_slave_1: entered promiscuous mode [ 1720.661107][T30595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1720.665972][T30595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1720.681755][ C1] CPU: 1 UID: 0 PID: 26665 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 1720.692880][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1720.698073][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1720.707629][T30595] team0: Port device team_slave_0 added [ 1720.712945][T30595] team0: Port device team_slave_1 added [ 1720.719189][ C1] Call Trace: [ 1720.722469][ C1] [ 1720.725318][ C1] dump_stack_lvl+0xe8/0x150 [ 1720.730101][ C1] print_usage_bug+0x28c/0x2e0 [ 1720.734900][ C1] valid_state+0xbe/0xf0 [ 1720.739168][ C1] mark_lock_irq+0x58/0x380 [ 1720.743682][ C1] ? arch_stack_walk+0xfb/0x150 [ 1720.748549][ C1] mark_lock+0x117/0x190 [ 1720.752811][ C1] __lock_acquire+0x71e/0x2de0 [ 1720.752949][T30595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1720.752963][T30595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1720.752985][T30595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1720.756258][T30595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1720.756272][T30595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1720.756295][T30595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1720.823495][T30595] hsr_slave_0: entered promiscuous mode [ 1720.824345][T30595] hsr_slave_1: entered promiscuous mode [ 1720.825400][T30595] debugfs: 'hsr0' already exists in 'hsr' [ 1720.825416][T30595] Cannot create hsr debugfs directory [ 1720.866259][ C1] ? check_path+0x21/0x40 [ 1720.870600][ C1] ? add_lock_to_list+0xc7/0x100 [ 1720.875541][ C1] ? lockdep_unlock+0x5c/0xd0 [ 1720.880241][ C1] ? __lock_acquire+0x1511/0x2de0 [ 1720.885294][ C1] lock_sync+0xb3/0x130 [ 1720.889456][ C1] ? __synchronize_srcu+0xb5/0x2f0 [ 1720.894565][ C1] ? __synchronize_srcu+0xb5/0x2f0 [ 1720.899680][ C1] __synchronize_srcu+0xc9/0x2f0 [ 1720.904621][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 1720.910165][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1720.915201][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1720.921005][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 1720.926547][ C1] ? synchronize_srcu+0x20a/0x260 [ 1720.931573][ C1] wakeup_source_unregister+0x129/0x3f0 [ 1720.937122][ C1] mmc_host_classdev_release+0x47/0x100 [ 1720.942675][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 1720.948862][ C1] device_release+0xc4/0x1f0 [ 1720.953606][ C1] kobject_put+0x222/0x550 [ 1720.958083][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 1720.962851][ C1] call_timer_fn+0x18d/0x5f0 [ 1720.967441][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1720.974120][ C1] ? call_timer_fn+0xd5/0x5f0 [ 1720.978800][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1720.983920][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1720.989119][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1720.995808][ C1] __run_timer_base+0x652/0x8b0 [ 1721.000666][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1721.006043][ C1] ? ktime_get+0x1f5/0x220 [ 1721.010461][ C1] ? lapic_next_event+0x11/0x20 [ 1721.015322][ C1] run_timer_softirq+0xb7/0x170 [ 1721.020181][ C1] handle_softirqs+0x226/0x860 [ 1721.024952][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 1721.029720][ C1] __irq_exit_rcu+0xcb/0x220 [ 1721.034314][ C1] irq_exit_rcu+0x9/0x30 [ 1721.038570][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1721.044207][ C1] [ 1721.047131][ C1] [ 1721.050055][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1721.056031][ C1] RIP: 0010:rcu_is_watching+0x2f/0xb0 [ 1721.061403][ C1] Code: 57 41 56 53 65 48 ff 05 0f f4 e8 11 e8 4a 26 3a 0a 89 c3 83 f8 08 73 66 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd d0 97 6e 8e <4c> 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 2b 74 8b 00 [ 1721.081009][ C1] RSP: 0018:ffffc9000693f230 EFLAGS: 00000297 [ 1721.087086][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 8000000000000004 [ 1721.095051][ C1] RDX: 0000000000000000 RSI: ffffffff8c6dac60 RDI: ffffffff8c6dac20 [ 1721.103019][ C1] RBP: 0000000000000001 R08: ffffffff8243da5a R09: 0000000000000000 [ 1721.110982][ C1] R10: dffffc0000000000 R11: ffffed1008bfbf1d R12: dffffc0000000000 [ 1721.118950][ C1] R13: 0000000000000008 R14: ffffffff8e6e97d8 R15: dffffc0000000000 [ 1721.126917][ C1] ? pfn_valid+0xba/0x490 [ 1721.131253][ C1] ? pfn_valid+0xba/0x490 [ 1721.131419][ T4935] Bluetooth: hci0: command tx timeout [ 1721.140940][ C1] pfn_valid+0x34b/0x490 [ 1721.145193][ C1] page_table_check_set+0x25/0x530 [ 1721.150319][ C1] copy_pmd_range+0x4adc/0x5c10 [ 1721.155176][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 1721.160638][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 1721.165836][ C1] ? do_syscall_64+0x166/0x520 [ 1721.170614][ C1] ? __lock_acquire+0x747/0x2de0 [ 1721.175544][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 1721.180751][ C1] copy_page_range+0xc82/0x1290 [ 1721.185615][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 1721.190904][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 1721.197841][ C1] dup_mmap+0xf17/0x1dc0 [ 1721.202097][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 1721.206773][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1721.211798][ C1] ? lock_acquire+0x115/0x350 [ 1721.216506][ C1] copy_mm+0x11a/0x480 [ 1721.220582][ C1] copy_process+0x1e79/0x4400 [ 1721.225258][ C1] ? __lock_acquire+0x747/0x2de0 [ 1721.230199][ C1] ? copy_process+0xd16/0x4400 [ 1721.234973][ C1] ? __pfx_copy_process+0x10/0x10 [ 1721.240009][ C1] kernel_clone+0x2d7/0x940 [ 1721.244512][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1721.249549][ C1] __x64_sys_clone+0x1b6/0x230 [ 1721.254315][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 1721.259607][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 1721.264893][ C1] do_syscall_64+0x166/0x520 [ 1721.269482][ C1] ? trace_irq_disable+0x3b/0x140 [ 1721.274498][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.280558][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1721.285236][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.291144][ C1] RIP: 0033:0x7fbcba9c6bd2 [ 1721.295555][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1721.315156][ C1] RSP: 002b:00007fbcbad4fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1721.323568][ C1] RAX: ffffffffffffffda RBX: 00007fbcbad4fc60 RCX: 00007fbcba9c6bd2 [ 1721.331534][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1721.339502][ C1] RBP: 00007fbcbad4fdec R08: 0000000000000000 R09: 0000000000000001 [ 1721.347465][ C1] R10: 00005555653cd7d0 R11: 0000000000000246 R12: 0000000000000001 [ 1721.355427][ C1] R13: 00000000000927c0 R14: 00000000001a3aa5 R15: 00007fbcbad4fe40 [ 1721.363393][ C1] [ 1721.366525][ C1] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1472 [ 1721.366544][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 26665, name: syz-executor [ 1721.366564][ C1] preempt_count: 104, expected: 0 [ 1721.366576][ C1] RCU nest depth: 2, expected: 0 [ 1721.366587][ C1] INFO: lockdep is turned off. [ 1721.366594][ C1] Preemption disabled at: [ 1721.366600][ C1] [<0000000000000000>] 0x0 [ 1721.366637][ C1] CPU: 1 UID: 0 PID: 26665 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 1721.366668][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1721.366674][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1721.366683][ C1] Call Trace: [ 1721.366689][ C1] [ 1721.366696][ C1] dump_stack_lvl+0xe8/0x150 [ 1721.366724][ C1] __might_resched+0x36a/0x4c0 [ 1721.366758][ C1] __synchronize_srcu+0x1a1/0x2f0 [ 1721.366777][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 1721.366796][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1721.366823][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1721.366847][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 1721.366869][ C1] ? synchronize_srcu+0x20a/0x260 [ 1721.366890][ C1] wakeup_source_unregister+0x129/0x3f0 [ 1721.366915][ C1] mmc_host_classdev_release+0x47/0x100 [ 1721.366940][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 1721.366963][ C1] device_release+0xc4/0x1f0 [ 1721.366991][ C1] kobject_put+0x222/0x550 [ 1721.367017][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 1721.367044][ C1] call_timer_fn+0x18d/0x5f0 [ 1721.367070][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1721.367102][ C1] ? call_timer_fn+0xd5/0x5f0 [ 1721.367124][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1721.367148][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1721.367170][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1721.367198][ C1] __run_timer_base+0x652/0x8b0 [ 1721.367222][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1721.367243][ C1] ? ktime_get+0x1f5/0x220 [ 1721.367260][ C1] ? lapic_next_event+0x11/0x20 [ 1721.367283][ C1] run_timer_softirq+0xb7/0x170 [ 1721.367305][ C1] handle_softirqs+0x226/0x860 [ 1721.367332][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 1721.367361][ C1] __irq_exit_rcu+0xcb/0x220 [ 1721.367387][ C1] irq_exit_rcu+0x9/0x30 [ 1721.367409][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1721.367432][ C1] [ 1721.367439][ C1] [ 1721.367448][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1721.367469][ C1] RIP: 0010:rcu_is_watching+0x2f/0xb0 [ 1721.367493][ C1] Code: 57 41 56 53 65 48 ff 05 0f f4 e8 11 e8 4a 26 3a 0a 89 c3 83 f8 08 73 66 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd d0 97 6e 8e <4c> 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 2b 74 8b 00 [ 1721.367511][ C1] RSP: 0018:ffffc9000693f230 EFLAGS: 00000297 [ 1721.367529][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 8000000000000004 [ 1721.367544][ C1] RDX: 0000000000000000 RSI: ffffffff8c6dac60 RDI: ffffffff8c6dac20 [ 1721.367559][ C1] RBP: 0000000000000001 R08: ffffffff8243da5a R09: 0000000000000000 [ 1721.367572][ C1] R10: dffffc0000000000 R11: ffffed1008bfbf1d R12: dffffc0000000000 [ 1721.367588][ C1] R13: 0000000000000008 R14: ffffffff8e6e97d8 R15: dffffc0000000000 [ 1721.367607][ C1] ? pfn_valid+0xba/0x490 [ 1721.367646][ C1] ? pfn_valid+0xba/0x490 [ 1721.367669][ C1] pfn_valid+0x34b/0x490 [ 1721.367692][ C1] page_table_check_set+0x25/0x530 [ 1721.367718][ C1] copy_pmd_range+0x4adc/0x5c10 [ 1721.367755][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 1721.367784][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 1721.367810][ C1] ? do_syscall_64+0x166/0x520 [ 1721.367836][ C1] ? __lock_acquire+0x747/0x2de0 [ 1721.367858][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 1721.367884][ C1] copy_page_range+0xc82/0x1290 [ 1721.367913][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 1721.367936][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 1721.367974][ C1] dup_mmap+0xf17/0x1dc0 [ 1721.368012][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 1721.368043][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1721.368077][ C1] ? lock_acquire+0x115/0x350 [ 1721.368105][ C1] copy_mm+0x11a/0x480 [ 1721.368132][ C1] copy_process+0x1e79/0x4400 [ 1721.368157][ C1] ? __lock_acquire+0x747/0x2de0 [ 1721.368183][ C1] ? copy_process+0xd16/0x4400 [ 1721.368216][ C1] ? __pfx_copy_process+0x10/0x10 [ 1721.368246][ C1] kernel_clone+0x2d7/0x940 [ 1721.368277][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1721.368313][ C1] __x64_sys_clone+0x1b6/0x230 [ 1721.368344][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 1721.368380][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 1721.368402][ C1] do_syscall_64+0x166/0x520 [ 1721.368427][ C1] ? trace_irq_disable+0x3b/0x140 [ 1721.368447][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.368468][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1721.368491][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.368512][ C1] RIP: 0033:0x7fbcba9c6bd2 [ 1721.368531][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1721.368548][ C1] RSP: 002b:00007fbcbad4fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1721.368570][ C1] RAX: ffffffffffffffda RBX: 00007fbcbad4fc60 RCX: 00007fbcba9c6bd2 [ 1721.368587][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1721.368600][ C1] RBP: 00007fbcbad4fdec R08: 0000000000000000 R09: 0000000000000001 [ 1721.368612][ C1] R10: 00005555653cd7d0 R11: 0000000000000246 R12: 0000000000000001 [ 1721.368623][ C1] R13: 00000000000927c0 R14: 00000000001a3aa5 R15: 00007fbcbad4fe40 [ 1721.368652][ C1] [ 1721.368662][ C1] ODEBUG: object ffffc90000a18a80 is NOT on stack ffffc90006938000, but annotated. [ 1721.369257][ C1] ------------[ cut here ]------------ [ 1721.369268][ C1] 1 [ 1721.369280][ C1] WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0, CPU#1: syz-executor/26665 [ 1721.939578][ C1] Modules linked in: [ 1721.943470][ C1] CPU: 1 UID: 0 PID: 26665 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 1721.954593][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1721.959775][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1721.969827][ C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 1721.975726][ C1] Code: cc cc cc 41 ff c7 44 89 3d 09 2a e8 15 48 c7 c1 80 b5 6d 8c 48 c7 c7 e0 b5 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 4d bc 3c fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 a1 c5 6d 0a 3b 05 9f [ 1721.995327][ C1] RSP: 0018:ffffc90000a189b8 EFLAGS: 00010046 [ 1722.001397][ C1] RAX: 0000000000000050 RBX: ffffc90000a18a80 RCX: 9c34dabcef33a600 [ 1722.009366][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 1722.017325][ C1] RBP: ffff8880322b9f60 R08: 0000000000000100 R09: 1ffffffff1ed22fc [ 1722.025288][ C1] R10: dffffc0000000000 R11: fffffbfff1ed22fd R12: 1ffff9200014314c [ 1722.033251][ C1] R13: ffff8880468873f0 R14: dffffc0000000000 R15: 0000000000000001 [ 1722.041221][ C1] FS: 00005555653cd500(0000) GS:ffff888124dca000(0000) knlGS:0000000000000000 [ 1722.050156][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1722.056738][ C1] CR2: 0000200000016038 CR3: 000000007418c000 CR4: 00000000003526f0 [ 1722.064711][ C1] DR0: 0000000000000000 DR1: 0000000000800400 DR2: 0000000000000000 [ 1722.072676][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1722.080641][ C1] Call Trace: [ 1722.083912][ C1] [ 1722.086748][ C1] ? __init_swait_queue_head+0xa8/0x150 [ 1722.092295][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 1722.097327][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 1722.102878][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1722.107911][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1722.113716][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 1722.119263][ C1] ? synchronize_srcu+0x20a/0x260 [ 1722.124290][ C1] wakeup_source_unregister+0x129/0x3f0 [ 1722.129833][ C1] mmc_host_classdev_release+0x47/0x100 [ 1722.135374][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 1722.141526][ C1] device_release+0xc4/0x1f0 [ 1722.146117][ C1] kobject_put+0x222/0x550 [ 1722.150532][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 1722.155291][ C1] call_timer_fn+0x18d/0x5f0 [ 1722.159875][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1722.166546][ C1] ? call_timer_fn+0xd5/0x5f0 [ 1722.171222][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1722.176333][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1722.181521][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1722.188199][ C1] __run_timer_base+0x652/0x8b0 [ 1722.193049][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1722.198415][ C1] ? ktime_get+0x1f5/0x220 [ 1722.202822][ C1] ? lapic_next_event+0x11/0x20 [ 1722.207664][ C1] run_timer_softirq+0xb7/0x170 [ 1722.212507][ C1] handle_softirqs+0x226/0x860 [ 1722.217275][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 1722.222045][ C1] __irq_exit_rcu+0xcb/0x220 [ 1722.226629][ C1] irq_exit_rcu+0x9/0x30 [ 1722.230865][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1722.236496][ C1] [ 1722.239417][ C1] [ 1722.242335][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1722.248309][ C1] RIP: 0010:rcu_is_watching+0x2f/0xb0 [ 1722.253679][ C1] Code: 57 41 56 53 65 48 ff 05 0f f4 e8 11 e8 4a 26 3a 0a 89 c3 83 f8 08 73 66 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd d0 97 6e 8e <4c> 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 2b 74 8b 00 [ 1722.273279][ C1] RSP: 0018:ffffc9000693f230 EFLAGS: 00000297 [ 1722.279343][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 8000000000000004 [ 1722.287306][ C1] RDX: 0000000000000000 RSI: ffffffff8c6dac60 RDI: ffffffff8c6dac20 [ 1722.295270][ C1] RBP: 0000000000000001 R08: ffffffff8243da5a R09: 0000000000000000 [ 1722.303229][ C1] R10: dffffc0000000000 R11: ffffed1008bfbf1d R12: dffffc0000000000 [ 1722.311193][ C1] R13: 0000000000000008 R14: ffffffff8e6e97d8 R15: dffffc0000000000 [ 1722.319161][ C1] ? pfn_valid+0xba/0x490 [ 1722.323487][ C1] ? pfn_valid+0xba/0x490 [ 1722.327806][ C1] pfn_valid+0x34b/0x490 [ 1722.332040][ C1] page_table_check_set+0x25/0x530 [ 1722.337146][ C1] copy_pmd_range+0x4adc/0x5c10 [ 1722.341998][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 1722.347456][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 1722.352654][ C1] ? do_syscall_64+0x166/0x520 [ 1722.357414][ C1] ? __lock_acquire+0x747/0x2de0 [ 1722.362344][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 1722.367542][ C1] copy_page_range+0xc82/0x1290 [ 1722.372392][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 1722.377672][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 1722.384612][ C1] dup_mmap+0xf17/0x1dc0 [ 1722.388858][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 1722.393533][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1722.398555][ C1] ? lock_acquire+0x115/0x350 [ 1722.403228][ C1] copy_mm+0x11a/0x480 [ 1722.407294][ C1] copy_process+0x1e79/0x4400 [ 1722.411966][ C1] ? __lock_acquire+0x747/0x2de0 [ 1722.416908][ C1] ? copy_process+0xd16/0x4400 [ 1722.421674][ C1] ? __pfx_copy_process+0x10/0x10 [ 1722.426700][ C1] kernel_clone+0x2d7/0x940 [ 1722.431200][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1722.436231][ C1] __x64_sys_clone+0x1b6/0x230 [ 1722.440992][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 1722.446294][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 1722.451573][ C1] do_syscall_64+0x166/0x520 [ 1722.456160][ C1] ? trace_irq_disable+0x3b/0x140 [ 1722.461175][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1722.467233][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1722.471905][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1722.477791][ C1] RIP: 0033:0x7fbcba9c6bd2 [ 1722.482195][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1722.501795][ C1] RSP: 002b:00007fbcbad4fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1722.510229][ C1] RAX: ffffffffffffffda RBX: 00007fbcbad4fc60 RCX: 00007fbcba9c6bd2 [ 1722.518191][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1722.526158][ C1] RBP: 00007fbcbad4fdec R08: 0000000000000000 R09: 0000000000000001 [ 1722.534123][ C1] R10: 00005555653cd7d0 R11: 0000000000000246 R12: 0000000000000001 [ 1722.542086][ C1] R13: 00000000000927c0 R14: 00000000001a3aa5 R15: 00007fbcbad4fe40 [ 1722.550061][ C1] [ 1722.553086][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1722.560357][ C1] CPU: 1 UID: 0 PID: 26665 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 1722.571458][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1722.576642][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1722.586707][ C1] Call Trace: [ 1722.589989][ C1] [ 1722.592827][ C1] vpanic+0x56d/0xa60 [ 1722.596810][ C1] ? __pfx__printk+0x10/0x10 [ 1722.601389][ C1] ? __pfx_vpanic+0x10/0x10 [ 1722.605888][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 1722.611172][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1722.616365][ C1] panic+0xc5/0xd0 [ 1722.620107][ C1] ? __pfx_panic+0x10/0x10 [ 1722.624531][ C1] __warn+0x315/0x4c0 [ 1722.628514][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 1722.633792][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 1722.639069][ C1] __report_bug+0x276/0x570 [ 1722.643650][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 1722.648929][ C1] ? __pfx___report_bug+0x10/0x10 [ 1722.653946][ C1] ? __wake_up_klogd+0xf0/0x130 [ 1722.658803][ C1] ? vprintk_emit+0x4ee/0x560 [ 1722.663497][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1722.668519][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 1722.673806][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 1722.679090][ C1] report_bug+0x16b/0x220 [ 1722.683414][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 1722.688703][ C1] ? __debug_object_init+0x2c6/0x3c0 [ 1722.693986][ C1] handle_bug+0x9c/0x200 [ 1722.698228][ C1] exc_invalid_op+0x1a/0x50 [ 1722.702729][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1722.707575][ C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 1722.713462][ C1] Code: cc cc cc 41 ff c7 44 89 3d 09 2a e8 15 48 c7 c1 80 b5 6d 8c 48 c7 c7 e0 b5 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 4d bc 3c fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 a1 c5 6d 0a 3b 05 9f [ 1722.733066][ C1] RSP: 0018:ffffc90000a189b8 EFLAGS: 00010046 [ 1722.739138][ C1] RAX: 0000000000000050 RBX: ffffc90000a18a80 RCX: 9c34dabcef33a600 [ 1722.747102][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 1722.755068][ C1] RBP: ffff8880322b9f60 R08: 0000000000000100 R09: 1ffffffff1ed22fc [ 1722.763036][ C1] R10: dffffc0000000000 R11: fffffbfff1ed22fd R12: 1ffff9200014314c [ 1722.771004][ C1] R13: ffff8880468873f0 R14: dffffc0000000000 R15: 0000000000000001 [ 1722.779022][ C1] ? __debug_object_init+0x2c3/0x3c0 [ 1722.784317][ C1] ? __init_swait_queue_head+0xa8/0x150 [ 1722.789860][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 1722.794875][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 1722.800410][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1722.805436][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1722.811234][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 1722.816771][ C1] ? synchronize_srcu+0x20a/0x260 [ 1722.821787][ C1] wakeup_source_unregister+0x129/0x3f0 [ 1722.827336][ C1] mmc_host_classdev_release+0x47/0x100 [ 1722.832876][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 1722.839025][ C1] device_release+0xc4/0x1f0 [ 1722.843610][ C1] kobject_put+0x222/0x550 [ 1722.848027][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 1722.852784][ C1] call_timer_fn+0x18d/0x5f0 [ 1722.857371][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1722.864046][ C1] ? call_timer_fn+0xd5/0x5f0 [ 1722.868717][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1722.873824][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1722.879023][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1722.885696][ C1] __run_timer_base+0x652/0x8b0 [ 1722.890545][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1722.895909][ C1] ? ktime_get+0x1f5/0x220 [ 1722.900317][ C1] ? lapic_next_event+0x11/0x20 [ 1722.905170][ C1] run_timer_softirq+0xb7/0x170 [ 1722.910014][ C1] handle_softirqs+0x226/0x860 [ 1722.914776][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 1722.919541][ C1] __irq_exit_rcu+0xcb/0x220 [ 1722.924127][ C1] irq_exit_rcu+0x9/0x30 [ 1722.928372][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1722.934000][ C1] [ 1722.936925][ C1] [ 1722.939845][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1722.945816][ C1] RIP: 0010:rcu_is_watching+0x2f/0xb0 [ 1722.951185][ C1] Code: 57 41 56 53 65 48 ff 05 0f f4 e8 11 e8 4a 26 3a 0a 89 c3 83 f8 08 73 66 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd d0 97 6e 8e <4c> 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 2b 74 8b 00 [ 1722.970783][ C1] RSP: 0018:ffffc9000693f230 EFLAGS: 00000297 [ 1722.976843][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 8000000000000004 [ 1722.984803][ C1] RDX: 0000000000000000 RSI: ffffffff8c6dac60 RDI: ffffffff8c6dac20 [ 1722.992776][ C1] RBP: 0000000000000001 R08: ffffffff8243da5a R09: 0000000000000000 [ 1723.000751][ C1] R10: dffffc0000000000 R11: ffffed1008bfbf1d R12: dffffc0000000000 [ 1723.008721][ C1] R13: 0000000000000008 R14: ffffffff8e6e97d8 R15: dffffc0000000000 [ 1723.016699][ C1] ? pfn_valid+0xba/0x490 [ 1723.021042][ C1] ? pfn_valid+0xba/0x490 [ 1723.025364][ C1] pfn_valid+0x34b/0x490 [ 1723.029599][ C1] page_table_check_set+0x25/0x530 [ 1723.034705][ C1] copy_pmd_range+0x4adc/0x5c10 [ 1723.039592][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 1723.045050][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 1723.050250][ C1] ? do_syscall_64+0x166/0x520 [ 1723.055014][ C1] ? __lock_acquire+0x747/0x2de0 [ 1723.059945][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 1723.065148][ C1] copy_page_range+0xc82/0x1290 [ 1723.070000][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 1723.075281][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 1723.082224][ C1] dup_mmap+0xf17/0x1dc0 [ 1723.086476][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 1723.091152][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1723.096180][ C1] ? lock_acquire+0x115/0x350 [ 1723.100852][ C1] copy_mm+0x11a/0x480 [ 1723.104924][ C1] copy_process+0x1e79/0x4400 [ 1723.109600][ C1] ? __lock_acquire+0x747/0x2de0 [ 1723.114540][ C1] ? copy_process+0xd16/0x4400 [ 1723.119313][ C1] ? __pfx_copy_process+0x10/0x10 [ 1723.124364][ C1] kernel_clone+0x2d7/0x940 [ 1723.128886][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1723.133925][ C1] __x64_sys_clone+0x1b6/0x230 [ 1723.138698][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 1723.143993][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 1723.149279][ C1] do_syscall_64+0x166/0x520 [ 1723.153870][ C1] ? trace_irq_disable+0x3b/0x140 [ 1723.158894][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1723.164955][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1723.169630][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1723.175513][ C1] RIP: 0033:0x7fbcba9c6bd2 [ 1723.179920][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1723.199518][ C1] RSP: 002b:00007fbcbad4fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1723.207929][ C1] RAX: ffffffffffffffda RBX: 00007fbcbad4fc60 RCX: 00007fbcba9c6bd2 [ 1723.215892][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1723.223858][ C1] RBP: 00007fbcbad4fdec R08: 0000000000000000 R09: 0000000000000001 [ 1723.231829][ C1] R10: 00005555653cd7d0 R11: 0000000000000246 R12: 0000000000000001 [ 1723.239804][ C1] R13: 00000000000927c0 R14: 00000000001a3aa5 R15: 00007fbcbad4fe40 [ 1723.247780][ C1] [ 1723.251068][ C1] Kernel Offset: disabled [ 1723.255395][ C1] Rebooting in 86400 seconds..