last executing test programs: 54.830224246s ago: executing program 1 (id=478): accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{}, [@remote, @bcast, @null, @null, @netrom, @default, @null, @netrom]}, &(0x7f0000000080)=0x48) (async) r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{}, [@remote, @bcast, @null, @null, @netrom, @default, @null, @netrom]}, &(0x7f0000000080)=0x48) bind$ax25(r0, &(0x7f0000000100)={{0x3, @bcast, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 54.484542192s ago: executing program 1 (id=479): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r1 = syz_clone(0x80200000, &(0x7f0000000000)="0d6fe328530a995f5c4911fa47d80e5b482b6ec942cbd647a973", 0x1a, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)="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") r2 = dup(0xffffffffffffffff) listen(r2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001180)={r1, r2, 0x0, 0x1, &(0x7f0000001140)='\x00'}, 0x30) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) 53.999730235s ago: executing program 1 (id=482): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(0x0, r1, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) getpid() socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r7, &(0x7f0000000000)={0x10002013}) 47.762092709s ago: executing program 1 (id=490): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd04, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x0, 0x0, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) syz_open_procfs$pagemap(0x0, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000002c0)={'fscrypt:', @desc1}, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x40000300, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) 41.468098117s ago: executing program 1 (id=499): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000010480)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x82, &(0x7f0000000080)={0x0, 0x20}, &(0x7f0000000100)=0x8) 39.676433984s ago: executing program 1 (id=503): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x2002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) getpgid(0xffffffffffffffff) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000001200), &(0x7f0000001240), 0x2, 0x3) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a14e5f40700426e2400000000ff000000", 0x18) futex(0x0, 0x5, 0x40000002, 0x0, &(0x7f0000048000), 0xffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x5, @loopback, 0x9}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r5 = epoll_create1(0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000001000800000000000000006efe9f0c692d3eb6d5f38981f1bf1a2d7cc708ef737186006138cc2d5770273f6f5ef7"], 0x48) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000006c00011c8500"/20, @ANYRES32, @ANYBLOB="000000000000000018003480"], 0x38}}, 0x0) 32.463571787s ago: executing program 3 (id=515): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="0180", @ANYRES16=r6, @ANYBLOB="330300000000000000001c00000004000180180001801400020069705f76746930000000000000000000", @ANYRESHEX=r0], 0x30}}, 0x90) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000080e0000010001000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) syz_io_uring_setup(0x7964, &(0x7f00000002c0)={0x0, 0x33f1, 0x2, 0x0, 0x0, 0x0, r7}, &(0x7f0000000340), &(0x7f0000000140)) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000240)={0xc}) 29.471953505s ago: executing program 3 (id=523): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) getpgrp(r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r4, @ANYRES32, @ANYBLOB="0007000000000000087ad2291e569f3ed1b0dd93", @ANYRES32=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x8, 0x0, &(0x7f00000002c0)="b800000502000000", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffad) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x57) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030023000b63d25a80648c2594f90124fc60100c030000040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="03000000070000000c0000002200000000000000", @ANYRESOCT=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8=r0, @ANYBLOB="02000000000000000000000000000000000000a20000000000000000"], 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="11002bbd7000fedbdf251b000000100002800600018008000100080000001800018014000200776c616e30"], 0x3c}}, 0x4000) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) 25.841032835s ago: executing program 3 (id=526): r0 = socket(0x10, 0x803, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f00004fb000/0x3000)=nil, 0x3000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@func_proto={0x2, 0x0, 0x0, 0x4, 0x2}, @var={0x2, 0x0, 0x0, 0x11, 0x3}]}, {0x0, [0x2e, 0x5f]}}, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0xb4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/ipc\x00') setns(r6, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) socket$netlink(0x10, 0x3, 0x0) 24.405070435s ago: executing program 3 (id=529): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 20.021192654s ago: executing program 0 (id=537): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0xff80}], 0x1, 0x0, 0x0, 0x2c}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19.067943284s ago: executing program 3 (id=539): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) socket(0x2a, 0x2, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000380)={0x6, 0x5ac}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) 16.376087286s ago: executing program 0 (id=544): sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0xffffffffffff5a38, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_pgetevents(r1, 0x3, 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x100]}, 0x8}) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r0, 0x0, 0x0) gettid() r2 = timerfd_create(0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)) timerfd_settime(r2, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_io_uring_setup(0x5c2, &(0x7f0000000480)={0x0, 0x40, 0x4, 0x0, 0x260}, &(0x7f0000000000), &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r7, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) 15.895206281s ago: executing program 0 (id=547): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) openat(0xffffffffffffff9c, 0x0, 0x242, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000902, 0x0, &(0x7f0000000280)) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000080)=[@window, @mss, @window, @window, @sack_perm, @timestamp, @mss, @sack_perm], 0x8) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[], 0x440) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f00000004c0), 0x0, 0x805, 0x0, 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) 14.829691029s ago: executing program 0 (id=548): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 12.535021726s ago: executing program 3 (id=550): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mount(0x0, 0x0, 0x0, 0x2010001, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchown(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r4) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x8e}]}}, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) write(r5, &(0x7f0000000600)="1c00000016009b8a140000003b9b301fd6df191cdc826569f2a3000000006752a10000005bc0ebbfff0768a84fe46e6e0b793da68cf4489fcfde557647cf24e362623aa9b0fa73485894224ac5c4c8fb78c1711416fb0775d3c3a977314d970dfc6623a48633a458cdebc4aa9ef8446c6f470487313afb16aaebb592cd52fc511b816a2ca68257731145687e6b537cab482ae646b28521a9e8460470a2ba2f68808fcbd3f2575eae548c5c4183155a40708722ed655d37acf9133c090f4a5dbfd470d65cda2a191945a6c3584cea4e8baeb0c6a241b7663a74b1b6e55c5dcd07ba2bcea3e83489cb41e000483298fdc1d1c0ce89d8a3aea4905aa875c8b614e2c403ce9c439e8057423e3c00"/279, 0x5195656059eb066d) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 12.452975406s ago: executing program 4 (id=551): r0 = socket(0x10, 0x803, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f00004fb000/0x3000)=nil, 0x3000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@func_proto={0x2, 0x0, 0x0, 0x4, 0x2}, @var={0x2, 0x0, 0x0, 0x11, 0x3}]}, {0x0, [0x2e, 0x5f]}}, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0xb4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) dup2(0xffffffffffffffff, 0xffffffffffffffff) setns(r6, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) socket$netlink(0x10, 0x3, 0x0) 11.49283885s ago: executing program 4 (id=553): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) getpgrp(r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r4, @ANYRES32, @ANYBLOB="0007000000000000087ad2291e569f3ed1b0dd93", @ANYRES32=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x8, 0x0, &(0x7f00000002c0)="b800000502000000", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffad) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x57) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030023000b63d25a80648c2594f90124fc60100c030000040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="03000000070000000c0000002200000000000000", @ANYRESOCT=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8=r0, @ANYBLOB="02000000000000000000000000000000000000a20000000000000000"], 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="11002bbd7000fedbdf251b000000100002800600018008000100080000001800018014000200776c616e30"], 0x3c}}, 0x4000) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) 11.305320997s ago: executing program 0 (id=555): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000080)={0x10001, r4}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a01de00000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000000c0a09030000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002140000001100"], 0xc0}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 8.929914621s ago: executing program 0 (id=558): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) futex(&(0x7f000000cffc), 0x4, 0x0, 0x0, &(0x7f0000000000), 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000a80"], 0x3c}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x202, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007ed, &(0x7f0000008400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000002c0)='highspeed\x00', 0xa) write$binfmt_elf64(r5, &(0x7f0000000040)=ANY=[], 0xa89) sendto$inet(r5, &(0x7f0000000300)="a3", 0x1, 0x2c091, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000800)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 6.797042312s ago: executing program 4 (id=561): socket$kcm(0x10, 0x2, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000ffa000/0x3000)=nil], 0x0, &(0x7f0000000080), 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='attr/keycreate\x00') move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000001180), 0xfffffffffffffffe, 0x300) 6.543646747s ago: executing program 4 (id=563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) sched_setaffinity(0x0, 0xffffffffffffff25, &(0x7f0000000200)=0x400000bce) socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f00002a3000/0x3000)=nil, 0x3000, 0xb635773f07ebbee1, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x0) r2 = socket(0x18, 0xa, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000"/51], 0x0) recvfrom(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000)) recvfrom$inet_nvme(r2, &(0x7f0000000340)=""/236, 0xec, 0x101c2, &(0x7f0000000440)=@l2tp6={0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x2c, 0x6, 0x6, 0x407, 0x0, 0x0, {0x4, 0x0, 0x5}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x3, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x88}, 0x4000) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=ANY=[@ANYBLOB="1400000004000000040000000700000084000000", @ANYRES32, @ANYBLOB="0000000000000000caaae9fede4de65af78043d4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100"/28], 0x48) r6 = syz_open_procfs$userns(0x0, &(0x7f00000002c0)) ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) 5.37637359s ago: executing program 2 (id=564): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000902, 0x0, &(0x7f0000000280)) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000080)=[@window, @mss, @window, @window, @sack_perm, @timestamp, @mss, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 4.154497117s ago: executing program 2 (id=565): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 3.611157652s ago: executing program 2 (id=566): r0 = socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x6, r2, 0x1, 0x0, 0x6, @remote}, 0x14) getsockname$packet(r0, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x58, r6, 0x1, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0x1c, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4c0d0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/158, 0x9e}, {&(0x7f00000000c0)="68c32a7de6a2395800"/18, 0x12}], 0x2}, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r11, 0x84, 0x70, &(0x7f0000000240)={r10, @in6={{0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, [0x3, 0x6, 0x1, 0x6, 0x4, 0x8, 0x6, 0x1, 0x5, 0xd, 0x7, 0x0, 0x1ff, 0x4, 0x5]}, &(0x7f00000001c0)=0x100) setresuid(0xee01, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000580)='rxrpc\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000001fee)='R\trust\xe3c*swO\x00\x00\xee\x02\x00\x00', 0x0) 3.313169297s ago: executing program 2 (id=567): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x16, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) socket$inet(0x2, 0x3, 0x8d) socket$kcm(0xa, 0x922000000003, 0x11) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="480000001000"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028ea1680240001801000020000000000000000000040b36797000400fcffffff0200010004"], 0x48}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000040)={0x3fb}, 0x0, 0x0) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r7, 0x4004743a, &(0x7f0000000300)) ppoll(&(0x7f0000000100)=[{r4, 0x280}, {r6, 0x2004}], 0x2, &(0x7f0000000280), 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, '\b\x00'}]}}, 0x0}, 0x0) 2.385493946s ago: executing program 4 (id=569): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "0000000108653904030405ffffff09c56a3000", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0) (fail_nth: 5) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfff}, 0x0, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) syz_emit_vhci(0x0, 0xd) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) 1.35986477s ago: executing program 4 (id=570): socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000240)='./file0\x00', 0x145142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001580), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) syz_init_net_socket$netrom(0x6, 0x5, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1cb7bba2007eb2b81402000000", @ANYRES16=r3, @ANYBLOB="010000000000000000001f0000000800010000000000"], 0x1c}}, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000180), 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000300)={'wg2\x00', &(0x7f0000000000)=@ethtool_gstrings={0x42}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) unshare(0x8040480) r5 = epoll_create(0x2) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x20, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000140)) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000380)="9a9ad4e2d29d2555fca60a69e355ea8ca41d0de13467f2ccc61f484a5f894b56decae99d5bc0f2c0b675ad4423191f6ab6a0a6c1c0575fd052eb4110eec5eb346a99e0b22173405733deffeb0d777f59581cf2ae682c173d769d504555e0c6689e04846b5b98c1a632a436c38a2b244f471eb9fc55bb7e2af5fbe0c8b8421eec20288da5155ec2ac36462b5c9421ed0d2f8c428ecc4e310b429288e111da09fcadaea200828196ba7ec56504559d212c703d9ad8351f9fee9b119549fe1a23150f004db9d83d1499b8d6cd899c1ca6a2b8d198604029cc3f5b8faacb48fab51a3b8b646e7448aec55d72b38faf875978bfe3018d446910", 0xf7}, {&(0x7f0000004200)="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", 0x1062}, {&(0x7f0000001480)="018b0dd08438148d122b008de6db076734ce700f215fdc5a68b2baea61e9e53a5568af95135ae31033ef05a22713e24dc244e51700d3620e46e4e76a077b126f205af5e535ecf33afd08e511789fba157ab6ad1dbc2f8a2b1c3a920b5a214a0ad1504c1cf67b388619e35f3c3c6ad374251a7493f18e41df75efd3c9e7c37eded080ace8f572480b0a68897bf7ff570285a585f31300d444a312a413ef2fbc9253a12c9dcd2403218123cd20cfd3e0f34aa5dbedccc6c704b3b143bc62f20960745d93a82c94d596872934b8c14381d9cf8e4a9f533683063a8bbb33d8b522e92a", 0xe1}, {&(0x7f0000001940)="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", 0x169}, {&(0x7f0000001680)="ceeeca6b95efee9b7e15aaa45fde430dc36bb35a53d124e5cb1209edf478247b1c8311e8928050ee8abe3b321d7fafd08904b99cbb1b353f880d3ea4ba4cb6c42ae18760964d0d672b96098d8737900777716d1feec5e7f4256c3772d4eda3748d7cca3249269a4a68a4e6018ab31f66d142d25bd964116124851c93c3726bbf846985d14747ac2a4d6a9f4f56a247802443737bff9b50525e279f7be014befb27263d7f8d204829", 0xa8}, {&(0x7f0000000180)}], 0x6, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006340)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x0, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, 0xee00) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r7, 0x0, 0x0) 117.040982ms ago: executing program 2 (id=571): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010b00000000000000000e000000080003003a29"], 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) ioperm(0x0, 0x9, 0x7) getdents64(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipmr_delroute={0x4c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x14, 0x0, 0xfe, 0x0, 0x0, 0x5}, [@RTA_ENCAP={0x50, 0x16, 0x0, 0x1, @LWT_BPF_IN={0x18, 0x1, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x13, 0x2, 'batadv_slave_0\x00'}}}, @RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_MULTIPATH={0xc}]}, 0x4c}}, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000300)='./file0/../file0\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x200008}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 0s ago: executing program 2 (id=572): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000840)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) socket(0x2a, 0x2, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000380)={0x6, 0x5ac}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) kernel console output (not intermixed with test programs): tmpfs_t tclass=blk_file permissive=1 [ 256.173184][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.174525][ T30] audit: type=1400 audit(1729701472.486:422): avc: denied { write } for pid=6725 comm="syz.3.265" path="socket:[13956]" dev="sockfs" ino=13956 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 256.192407][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.224145][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.339763][ T6732] UBIFS error (pid: 6732): cannot open "./file0", error -22 [ 256.419553][ T30] audit: type=1400 audit(1729701472.756:423): avc: denied { mounton } for pid=6723 comm="syz.2.264" path="/45/file0" dev="tmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 256.461480][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.515686][ T6272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.893330][ T5235] Bluetooth: hci4: unexpected event for opcode 0x2016 [ 256.962429][ T6272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.988458][ T6272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.001726][ T6272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.030128][ T6272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.106370][ T6737] fuse: Bad value for 'fd' [ 257.127355][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.170708][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.349405][ T30] audit: type=1400 audit(1729701473.756:424): avc: denied { unlink } for pid=5222 comm="syz-executor" name="file0" dev="tmpfs" ino=527 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 257.875976][ T30] audit: type=1400 audit(1729701474.296:425): avc: denied { connect } for pid=6746 comm="syz.3.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 258.084986][ T6449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.092873][ T6449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.133452][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.141617][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.362427][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.370667][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.731369][ T6612] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 259.038790][ T6612] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 259.089541][ T6761] netlink: 36 bytes leftover after parsing attributes in process `syz.2.269'. [ 259.098618][ T6761] netlink: 16 bytes leftover after parsing attributes in process `syz.2.269'. [ 259.108205][ T6761] netlink: 36 bytes leftover after parsing attributes in process `syz.2.269'. [ 259.117235][ T6761] netlink: 36 bytes leftover after parsing attributes in process `syz.2.269'. [ 259.132916][ T6612] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 259.143647][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 259.162935][ T6612] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 260.234274][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 260.245101][ T9] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 260.255543][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.268611][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 260.277736][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.291185][ T9] usbtmc 1-1:16.0: bulk endpoints not found [ 260.345004][ T6612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.655140][ T30] audit: type=1400 audit(1729701476.796:426): avc: denied { module_load } for pid=6779 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 261.246058][ T5235] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 261.254771][ T5235] Bluetooth: hci4: Injecting HCI hardware error event [ 261.263846][ T5229] Bluetooth: hci4: hardware error 0x00 [ 261.334113][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.340594][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.345571][ T6612] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.496407][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.503720][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.524267][ T6788] FAULT_INJECTION: forcing a failure. [ 261.524267][ T6788] name failslab, interval 1, probability 0, space 0, times 0 [ 261.525556][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.544560][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.573897][ T6788] CPU: 1 UID: 0 PID: 6788 Comm: syz.2.274 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 261.584654][ T6788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 261.594748][ T6788] Call Trace: [ 261.598057][ T6788] [ 261.601017][ T6788] dump_stack_lvl+0x16c/0x1f0 [ 261.605743][ T6788] should_fail_ex+0x497/0x5b0 [ 261.610448][ T6788] ? fs_reclaim_acquire+0xae/0x150 [ 261.615595][ T6788] should_failslab+0xc2/0x120 [ 261.620307][ T6788] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 261.625718][ T6788] ? mas_alloc_nodes+0x176/0x860 [ 261.630712][ T6788] mas_alloc_nodes+0x176/0x860 [ 261.635520][ T6788] mas_node_count_gfp+0x105/0x130 [ 261.640582][ T6788] mas_preallocate+0x53b/0xcd0 [ 261.645383][ T6788] ? __pfx_mas_preallocate+0x10/0x10 [ 261.650716][ T6788] ? anon_vma_name+0x75/0x100 [ 261.655431][ T6788] __split_vma+0x474/0x1160 [ 261.659961][ T6788] ? __pfx___split_vma+0x10/0x10 [ 261.664933][ T6788] vms_gather_munmap_vmas+0x1c7/0x1750 [ 261.670437][ T6788] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 261.676368][ T6788] ? __pfx___lock_acquire+0x10/0x10 [ 261.681587][ T6788] ? vma_iter_store+0x9bf/0xe30 [ 261.686464][ T6788] ? find_held_lock+0x2d/0x110 [ 261.691256][ T6788] do_vmi_align_munmap+0x281/0x890 [ 261.696431][ T6788] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 261.702124][ T6788] do_vmi_munmap+0x20b/0x3e0 [ 261.706745][ T6788] move_vma+0x8ff/0x1c60 [ 261.711027][ T6788] ? __pfx_move_vma+0x10/0x10 [ 261.715745][ T6788] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 261.721694][ T6788] ? selinux_mmap_addr+0x2b/0x110 [ 261.726746][ T6788] ? bpf_lsm_mmap_addr+0x9/0x10 [ 261.731612][ T6788] ? security_mmap_addr+0x6c/0x1e0 [ 261.736756][ T6788] __do_sys_mremap+0xf8c/0x15b0 [ 261.741643][ T6788] ? __pfx___do_sys_mremap+0x10/0x10 [ 261.746957][ T6788] ? bpf_trace_run2+0x2a6/0x590 [ 261.751832][ T6788] ? __pfx_bpf_trace_run2+0x10/0x10 [ 261.757070][ T6788] ? fput+0x30/0x390 [ 261.760999][ T6788] ? __pfx_ksys_write+0x10/0x10 [ 261.765895][ T6788] ? rcu_is_watching+0x12/0xc0 [ 261.770694][ T6788] do_syscall_64+0xcd/0x250 [ 261.775244][ T6788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.781172][ T6788] RIP: 0033:0x7fd96fd7dff9 [ 261.785612][ T6788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.805257][ T6788] RSP: 002b:00007fd970c00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 261.813696][ T6788] RAX: ffffffffffffffda RBX: 00007fd96ff35f80 RCX: 00007fd96fd7dff9 [ 261.821683][ T6788] RDX: 0000000000800000 RSI: 0000000000001000 RDI: 0000000020a96000 [ 261.829668][ T6788] RBP: 00007fd970c00090 R08: 0000000020130000 R09: 0000000000000000 [ 261.837663][ T6788] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 261.845652][ T6788] R13: 0000000000000000 R14: 00007fd96ff35f80 R15: 00007ffd0e1165a8 [ 261.853667][ T6788] [ 261.913695][ T5274] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 262.002178][ T6612] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 262.053655][ T5274] usb 4-1: device descriptor read/64, error -71 [ 262.295520][ T6795] Bluetooth: MGMT ver 1.23 [ 262.493597][ T6612] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.955124][ T5274] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 263.100536][ T5274] usb 4-1: device descriptor read/64, error -71 [ 263.439617][ T5229] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 263.983067][ T5274] usb usb4-port1: attempt power cycle [ 264.412406][ T5274] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 264.460711][ T6612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.477191][ T5274] usb 4-1: device descriptor read/8, error -71 [ 264.585651][ T30] audit: type=1400 audit(1729701481.006:427): avc: denied { shutdown } for pid=6822 comm="syz.2.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 265.086504][ T30] audit: type=1400 audit(1729701481.486:428): avc: denied { create } for pid=6826 comm="syz.3.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 265.123740][ T30] audit: type=1400 audit(1729701481.536:429): avc: denied { connect } for pid=6826 comm="syz.3.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 265.190668][ T6834] FAULT_INJECTION: forcing a failure. [ 265.190668][ T6834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.194508][ T30] audit: type=1400 audit(1729701481.606:430): avc: denied { write } for pid=6826 comm="syz.3.281" laddr=fe80::e8b7:38ff:fee2:ea25 lport=1 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 265.290440][ T6834] CPU: 0 UID: 0 PID: 6834 Comm: syz.3.281 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 265.301132][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 265.311245][ T6834] Call Trace: [ 265.314574][ T6834] [ 265.317532][ T6834] dump_stack_lvl+0x16c/0x1f0 [ 265.322269][ T6834] should_fail_ex+0x497/0x5b0 [ 265.326989][ T6834] _copy_from_user+0x30/0xf0 [ 265.331638][ T6834] copy_msghdr_from_user+0x99/0x160 [ 265.336880][ T6834] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 265.342744][ T6834] ? find_held_lock+0x2d/0x110 [ 265.347568][ T6834] ___sys_recvmsg+0xdc/0x1a0 [ 265.352215][ T6834] ? __pfx____sys_recvmsg+0x10/0x10 [ 265.357467][ T6834] ? lock_acquire+0x2f/0xb0 [ 265.362034][ T6834] ? fdget+0x176/0x210 [ 265.366164][ T6834] do_recvmmsg+0x2ba/0x750 [ 265.370633][ T6834] ? __pfx_do_recvmmsg+0x10/0x10 [ 265.375618][ T6834] ? vfs_write+0x14d/0x1140 [ 265.380199][ T6834] ? __mutex_unlock_slowpath+0x164/0x650 [ 265.385912][ T6834] ? __fget_files+0x244/0x3f0 [ 265.390656][ T6834] __x64_sys_recvmmsg+0x239/0x290 [ 265.395736][ T6834] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 265.401341][ T6834] do_syscall_64+0xcd/0x250 [ 265.405912][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.411850][ T6834] RIP: 0033:0x7f18fd57dff9 [ 265.416292][ T6834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.435939][ T6834] RSP: 002b:00007f18fcfbd038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 265.444417][ T6834] RAX: ffffffffffffffda RBX: 00007f18fd736130 RCX: 00007f18fd57dff9 [ 265.452431][ T6834] RDX: 0400000000000094 RSI: 0000000020006280 RDI: 0000000000000008 [ 265.460437][ T6834] RBP: 00007f18fcfbd090 R08: 0000000000000000 R09: 0000000000000000 [ 265.468448][ T6834] R10: 0000000000000042 R11: 0000000000000246 R12: 0000000000000001 [ 265.476450][ T6834] R13: 0000000000000000 R14: 00007f18fd736130 R15: 00007ffdee140af8 [ 265.484473][ T6834] [ 265.696580][ T6612] veth0_vlan: entered promiscuous mode [ 265.708196][ T6612] veth1_vlan: entered promiscuous mode [ 265.736642][ T6612] veth0_macvtap: entered promiscuous mode [ 265.746036][ T6612] veth1_macvtap: entered promiscuous mode [ 265.764021][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.774677][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.931593][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.553242][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.653330][ T6850] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 266.673847][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.121531][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.160907][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.212282][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.258685][ T6612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.390446][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.448817][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.463508][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.484665][ T5274] usb 1-1: USB disconnect, device number 11 [ 267.506847][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.527458][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.538172][ T6863] netlink: 28 bytes leftover after parsing attributes in process `syz.2.285'. [ 267.574770][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.777809][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.896478][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.030972][ T6612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.221861][ T6612] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.240849][ T6612] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.274058][ T6612] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.293835][ T6612] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.664138][ T5747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.709109][ T5747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.846571][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.883552][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.232262][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 270.257251][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 270.270206][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 270.720040][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 270.751378][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 270.762434][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 270.858943][ T30] audit: type=1400 audit(1729701487.276:431): avc: denied { bind } for pid=6893 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 270.929795][ T6894] cgroup2: Unknown parameter 'usrquota' [ 270.981479][ T30] audit: type=1400 audit(1729701487.326:432): avc: denied { listen } for pid=6893 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 271.443705][ T941] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 271.604557][ T941] usb 4-1: Using ep0 maxpacket: 16 [ 271.618429][ T941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 271.637332][ T941] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 271.660712][ T941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.726266][ T6886] chnl_net:caif_netlink_parms(): no params data found [ 271.757572][ T941] usb 4-1: config 0 descriptor?? [ 271.838853][ T6912] fuse: Bad value for 'fd' [ 272.564559][ T6904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.790340][ T6904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.988241][ T5226] Bluetooth: hci1: command tx timeout [ 273.225307][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.334765][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.417699][ T941] usbhid 4-1:0.0: can't add hid device: -71 [ 273.423979][ T941] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 273.445294][ T941] usb 4-1: USB disconnect, device number 14 [ 273.586604][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.589518][ T6929] netlink: 548 bytes leftover after parsing attributes in process `syz.4.296'. [ 273.714831][ T6886] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.722899][ T6886] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.730317][ T6886] bridge_slave_0: entered allmulticast mode [ 273.758411][ T6886] bridge_slave_0: entered promiscuous mode [ 273.887958][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.902847][ T6886] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.912431][ T6886] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.922817][ T6886] bridge_slave_1: entered allmulticast mode [ 273.948844][ T6886] bridge_slave_1: entered promiscuous mode [ 274.594379][ T6886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.603689][ T6935] futex_wake_op: syz.4.299 tries to shift op by -1; fix this program [ 274.705924][ T6886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.874314][ T941] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 274.905657][ T6886] team0: Port device team_slave_0 added [ 274.915585][ T6886] team0: Port device team_slave_1 added [ 275.050317][ T941] usb 5-1: config 0 interface 0 has no altsetting 0 [ 275.057997][ T5226] Bluetooth: hci1: command tx timeout [ 275.078018][ T6886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.085232][ T941] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 275.085273][ T941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 275.085305][ T941] usb 5-1: SerialNumber: syz [ 275.088683][ T941] usb 5-1: config 0 descriptor?? [ 275.130791][ T941] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input18 [ 275.131025][ T6886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.167381][ T6886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.181084][ T6886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.188837][ T6886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.215464][ T6886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.368280][ T941] usb 5-1: USB disconnect, device number 3 [ 275.371854][ T6886] hsr_slave_0: entered promiscuous mode [ 275.404127][ T6886] hsr_slave_1: entered promiscuous mode [ 275.412437][ T6952] netlink: 52 bytes leftover after parsing attributes in process `syz.3.305'. [ 275.512708][ T6886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.548661][ T6886] Cannot create hsr debugfs directory [ 275.584448][ T11] bridge_slave_1: left allmulticast mode [ 275.590342][ T11] bridge_slave_1: left promiscuous mode [ 275.610147][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.642737][ T11] bridge_slave_0: left allmulticast mode [ 275.662115][ T11] bridge_slave_0: left promiscuous mode [ 275.684186][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.698870][ T6956] capability: warning: `syz.3.306' uses 32-bit capabilities (legacy support in use) [ 276.034756][ T6960] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 276.042772][ T6960] audit: out of memory in audit_log_start [ 276.223188][ T30] audit: type=1400 audit(1729701492.636:433): avc: denied { ioctl } for pid=6963 comm="syz.4.309" path="socket:[16196]" dev="sockfs" ino=16196 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 276.253833][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.275168][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.291785][ T11] bond0 (unregistering): Released all slaves [ 276.308865][ T6953] netlink: 'syz.2.304': attribute type 3 has an invalid length. [ 276.317094][ T6953] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.304'. [ 276.390583][ T6967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.309'. [ 276.733727][ T5271] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 276.913661][ T5271] usb 2-1: Using ep0 maxpacket: 16 [ 276.927529][ T5271] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 276.953498][ T5271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 276.991980][ T5271] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 277.001189][ T5271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.009731][ T5271] usb 2-1: Product: syz [ 277.023766][ T5271] usb 2-1: Manufacturer: syz [ 277.029086][ T5271] usb 2-1: SerialNumber: syz [ 277.046008][ T5271] usb 2-1: config 0 descriptor?? [ 277.057073][ T5271] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 277.083553][ T5271] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 277.134391][ T5226] Bluetooth: hci1: command tx timeout [ 277.927846][ T11] hsr_slave_0: left promiscuous mode [ 277.942812][ T30] audit: type=1400 audit(1729701494.336:434): avc: denied { listen } for pid=6993 comm="syz.4.314" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 277.974668][ T5271] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 277.982252][ T11] hsr_slave_1: left promiscuous mode [ 277.984764][ T5271] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 278.010624][ T5271] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 278.018795][ T5271] em28xx 2-1:0.0: No AC97 audio processor [ 278.043962][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.052423][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.071045][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.081439][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.138361][ T11] veth1_macvtap: left promiscuous mode [ 278.161922][ T11] veth0_macvtap: left promiscuous mode [ 278.176854][ T11] veth1_vlan: left promiscuous mode [ 278.187821][ T11] veth0_vlan: left promiscuous mode [ 278.273633][ T5271] usb 2-1: USB disconnect, device number 6 [ 278.280357][ T5271] em28xx 2-1:0.0: Disconnecting em28xx [ 278.291152][ T5271] em28xx 2-1:0.0: Freeing device [ 278.677153][ T30] audit: type=1400 audit(1729701494.896:435): avc: denied { nlmsg_write } for pid=6995 comm="syz.1.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 279.131302][ T30] audit: type=1400 audit(1729701494.916:436): avc: denied { name_connect } for pid=6995 comm="syz.1.315" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 279.214089][ T5226] Bluetooth: hci1: command tx timeout [ 281.097682][ T11] team0 (unregistering): Port device team_slave_1 removed [ 281.136781][ T5271] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 281.147649][ T11] team0 (unregistering): Port device team_slave_0 removed [ 281.301329][ T5271] usb 2-1: Using ep0 maxpacket: 16 [ 281.308329][ T5271] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 281.331169][ T5271] usb 2-1: config 0 has no interface number 0 [ 281.359075][ T5271] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 281.371828][ T5271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.380343][ T5271] usb 2-1: Product: syz [ 281.385881][ T5271] usb 2-1: Manufacturer: syz [ 281.390544][ T5271] usb 2-1: SerialNumber: syz [ 281.407284][ T5271] usb 2-1: config 0 descriptor?? [ 281.425812][ T5271] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 281.781955][ T7017] netlink: 'syz.4.319': attribute type 3 has an invalid length. [ 281.794136][ T7017] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.319'. [ 282.343051][ T30] audit: type=1400 audit(1729701498.756:437): avc: denied { append } for pid=7030 comm="syz.4.325" name="dlm-monitor" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 282.455653][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 282.537599][ T30] audit: type=1326 audit(1729701498.896:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7030 comm="syz.4.325" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f66ca57dff9 code=0x0 [ 282.725437][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 282.813903][ T5271] gspca_spca1528: reg_w err -110 [ 282.824070][ T5271] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 283.025035][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 283.048283][ T9] usb 4-1: config 0 has no interface number 0 [ 283.266179][ T5271] usb 2-1: USB disconnect, device number 7 [ 283.644129][ T9] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 283.653331][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.671672][ T9] usb 4-1: Product: syz [ 283.676175][ T9] usb 4-1: Manufacturer: syz [ 283.680839][ T9] usb 4-1: SerialNumber: syz [ 283.699244][ T9] usb 4-1: config 0 descriptor?? [ 283.707615][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 284.108745][ T6886] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 284.177461][ T6886] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 284.257523][ T6886] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 285.278054][ T9] gspca_spca1528: reg_w err -110 [ 285.296284][ T9] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 285.419848][ T6886] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 285.621282][ T6886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.713925][ T25] usb 4-1: USB disconnect, device number 15 [ 285.786188][ T7062] ptrace attach of "./syz-executor exec"[6612] was attempted by ""[7062] [ 285.816769][ T6886] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.860314][ T6407] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.867517][ T6407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.923338][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.930726][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.188931][ T7076] netlink: 24 bytes leftover after parsing attributes in process `syz.1.335'. [ 287.640263][ T6886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.843753][ T5271] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 287.852292][ T25] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 288.033258][ T6886] veth0_vlan: entered promiscuous mode [ 288.133743][ T5271] usb 5-1: device descriptor read/64, error -71 [ 288.421545][ T6886] veth1_vlan: entered promiscuous mode [ 288.484159][ T5271] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 288.491963][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 288.555560][ T25] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 288.583645][ T25] usb 4-1: config 0 has no interface number 0 [ 288.599696][ T25] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 288.612791][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.714114][ T6886] veth0_macvtap: entered promiscuous mode [ 288.736203][ T25] usb 4-1: Product: syz [ 288.740451][ T25] usb 4-1: Manufacturer: syz [ 288.745217][ T25] usb 4-1: SerialNumber: syz [ 288.782564][ T6886] veth1_macvtap: entered promiscuous mode [ 288.782704][ T25] usb 4-1: config 0 descriptor?? [ 288.794921][ T5271] usb 5-1: device descriptor read/64, error -71 [ 288.823350][ T25] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 288.835171][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.857789][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.874287][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.885070][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.895128][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.906249][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.916836][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.927400][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.938945][ T6886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.948666][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.959184][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.969104][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.979616][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.989517][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.000009][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.010555][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.021719][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.032978][ T6886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.043709][ T6886] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.052463][ T6886] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.061295][ T6886] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.070182][ T6886] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.178118][ T5271] usb usb5-port1: attempt power cycle [ 289.533979][ T5271] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 289.936347][ T25] gspca_spca1528: reg_w err -110 [ 289.953842][ T25] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 290.039427][ T5271] usb 5-1: device descriptor read/8, error -71 [ 290.285377][ T6449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.293287][ T6449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.353254][ T25] usb 4-1: USB disconnect, device number 16 [ 290.407667][ T5747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.426453][ T5747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.258680][ T7163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.352'. [ 293.973184][ T5274] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 294.515706][ T30] audit: type=1326 audit(1729701510.686:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7183 comm="syz.0.357" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff558b7dff9 code=0x0 [ 294.590533][ T30] audit: type=1400 audit(1729701510.976:440): avc: denied { write } for pid=7183 comm="syz.0.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 294.622000][ T7192] FAULT_INJECTION: forcing a failure. [ 294.622000][ T7192] name failslab, interval 1, probability 0, space 0, times 0 [ 294.634710][ T5274] usb 4-1: Using ep0 maxpacket: 16 [ 294.645429][ T5274] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 294.663516][ T5274] usb 4-1: config 0 has no interface number 0 [ 294.682537][ T5274] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 294.699320][ T5274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.707664][ T7192] CPU: 0 UID: 0 PID: 7192 Comm: syz.4.358 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 294.718295][ T7192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 294.728399][ T7192] Call Trace: [ 294.731704][ T7192] [ 294.734669][ T7192] dump_stack_lvl+0x16c/0x1f0 [ 294.739415][ T7192] should_fail_ex+0x497/0x5b0 [ 294.744144][ T7192] should_failslab+0xc2/0x120 [ 294.748872][ T7192] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 294.754298][ T7192] ? skb_clone+0x190/0x3f0 [ 294.758776][ T7192] skb_clone+0x190/0x3f0 [ 294.763077][ T7192] netlink_deliver_tap+0xab3/0xd90 [ 294.768255][ T7192] netlink_unicast+0x5e1/0x7f0 [ 294.773082][ T7192] ? __pfx_netlink_unicast+0x10/0x10 [ 294.778449][ T7192] netlink_sendmsg+0x8b8/0xd70 [ 294.783268][ T7192] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.788598][ T7192] ? __import_iovec+0x1fd/0x6e0 [ 294.793501][ T7192] ____sys_sendmsg+0xaaf/0xc90 [ 294.798310][ T7192] ? copy_msghdr_from_user+0x10b/0x160 [ 294.803817][ T7192] ? __pfx_____sys_sendmsg+0x10/0x10 [ 294.809162][ T7192] ? __pfx___lock_acquire+0x10/0x10 [ 294.814405][ T7192] ___sys_sendmsg+0x135/0x1e0 [ 294.819125][ T7192] ? __pfx____sys_sendmsg+0x10/0x10 [ 294.824395][ T7192] ? lock_acquire+0x2f/0xb0 [ 294.828929][ T7192] ? __fget_files+0x40/0x3f0 [ 294.833585][ T7192] ? fdget+0x176/0x210 [ 294.837712][ T7192] __sys_sendmsg+0x117/0x1f0 [ 294.842342][ T7192] ? __pfx___sys_sendmsg+0x10/0x10 [ 294.847493][ T7192] ? __fget_files+0x244/0x3f0 [ 294.852252][ T7192] do_syscall_64+0xcd/0x250 [ 294.856815][ T7192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.862758][ T7192] RIP: 0033:0x7f66ca57dff9 [ 294.867210][ T7192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.886856][ T7192] RSP: 002b:00007f66cb3d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.895307][ T7192] RAX: ffffffffffffffda RBX: 00007f66ca735f80 RCX: 00007f66ca57dff9 [ 294.903314][ T7192] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 294.911348][ T7192] RBP: 00007f66cb3d5090 R08: 0000000000000000 R09: 0000000000000000 [ 294.919371][ T7192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.927378][ T7192] R13: 0000000000000000 R14: 00007f66ca735f80 R15: 00007ffff7065188 [ 294.935418][ T7192] [ 294.963602][ T5274] usb 4-1: Product: syz [ 294.968822][ T5274] usb 4-1: Manufacturer: syz [ 295.112877][ T5274] usb 4-1: SerialNumber: syz [ 295.390615][ T5274] usb 4-1: config 0 descriptor?? [ 295.587542][ T5274] usb 4-1: can't set config #0, error -71 [ 295.595624][ T5274] usb 4-1: USB disconnect, device number 17 [ 296.193886][ T5274] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 296.863303][ T7218] ip6gretap0 speed is unknown, defaulting to 1000 [ 296.984011][ T7218] ip6gretap0 speed is unknown, defaulting to 1000 [ 296.992950][ T7218] ip6gretap0 speed is unknown, defaulting to 1000 [ 297.010484][ T7218] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 297.026875][ T7218] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 297.063946][ T5274] usb 4-1: Using ep0 maxpacket: 16 [ 297.071463][ T5274] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 297.080106][ T5274] usb 4-1: config 0 has no interface number 0 [ 297.115942][ T5274] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 297.129113][ T5274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.142577][ T7218] ip6gretap0 speed is unknown, defaulting to 1000 [ 297.144617][ T5274] usb 4-1: Product: syz [ 297.162798][ T5274] usb 4-1: Manufacturer: syz [ 297.170303][ T7229] netlink: 24 bytes leftover after parsing attributes in process `syz.1.367'. [ 297.171428][ T5274] usb 4-1: SerialNumber: syz [ 297.182432][ T7218] ip6gretap0 speed is unknown, defaulting to 1000 [ 297.314304][ T7232] netlink: 'syz.0.368': attribute type 3 has an invalid length. [ 297.322406][ T7232] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.368'. [ 297.335108][ T7218] ip6gretap0 speed is unknown, defaulting to 1000 [ 297.337973][ T5274] usb 4-1: config 0 descriptor?? [ 297.454944][ T7232] netlink: 'syz.0.368': attribute type 1 has an invalid length. [ 297.544048][ T7218] ip6gretap0 speed is unknown, defaulting to 1000 [ 297.753787][ T5274] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 297.796157][ T7218] ip6gretap0 speed is unknown, defaulting to 1000 [ 298.789733][ T5274] gspca_spca1528: reg_w err -110 [ 298.813714][ T5274] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 298.984114][ T5272] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 298.991948][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 299.133780][ T5272] usb 2-1: device descriptor read/64, error -32 [ 299.249178][ T5274] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 299.305363][ T8] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 299.374026][ T5272] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 299.443876][ T8] usb 5-1: device descriptor read/64, error -71 [ 299.513704][ T5274] usb 1-1: Using ep0 maxpacket: 16 [ 299.569796][ T5272] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.617057][ T5274] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 299.657187][ T5272] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 299.683721][ T8] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 299.705452][ T5274] usb 1-1: config 0 has no interface number 0 [ 299.782983][ T5274] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 299.798139][ T5272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.846620][ T5274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.908826][ T5272] usb 2-1: config 0 descriptor?? [ 299.947541][ T8] usb 5-1: device descriptor read/64, error -71 [ 299.976686][ T5274] usb 1-1: Product: syz [ 299.999532][ T5272] pwc: Askey VC010 type 2 USB webcam detected. [ 300.017872][ T5274] usb 1-1: Manufacturer: syz [ 300.022523][ T5274] usb 1-1: SerialNumber: syz [ 300.055063][ T5274] usb 1-1: config 0 descriptor?? [ 300.083411][ T5274] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 300.124055][ T8] usb usb5-port1: attempt power cycle [ 300.473629][ T8] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 300.494832][ T5272] pwc: recv_control_msg error -32 req 02 val 2b00 [ 300.531838][ T5272] pwc: recv_control_msg error -32 req 02 val 2700 [ 300.546769][ T8] usb 5-1: device descriptor read/8, error -71 [ 300.625478][ T5271] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 300.794870][ T5271] usb 3-1: device descriptor read/64, error -71 [ 300.802921][ T8] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 300.836471][ T8] usb 5-1: device descriptor read/8, error -71 [ 300.844820][ T941] usb 4-1: USB disconnect, device number 18 [ 300.954333][ T8] usb usb5-port1: unable to enumerate USB device [ 302.030490][ T5274] gspca_spca1528: reg_w err -110 [ 302.042091][ T5271] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 302.050933][ T5274] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 302.516952][ T5274] usb 1-1: USB disconnect, device number 12 [ 302.656541][ T5272] pwc: recv_control_msg error -71 req 02 val 2c00 [ 302.703739][ T5272] pwc: recv_control_msg error -71 req 04 val 1000 [ 302.713656][ T5271] usb 3-1: device descriptor read/64, error -71 [ 302.724868][ T5272] pwc: recv_control_msg error -71 req 04 val 1300 [ 302.733067][ T5272] pwc: recv_control_msg error -71 req 04 val 1400 [ 302.740191][ T5272] pwc: recv_control_msg error -71 req 02 val 2000 [ 302.750937][ T5272] pwc: recv_control_msg error -71 req 02 val 2100 [ 302.766861][ T5272] pwc: recv_control_msg error -71 req 04 val 1500 [ 302.774137][ T5272] pwc: recv_control_msg error -71 req 02 val 2500 [ 302.791070][ T5272] pwc: recv_control_msg error -71 req 02 val 2400 [ 302.799168][ T5272] pwc: recv_control_msg error -71 req 02 val 2600 [ 302.807175][ T5272] pwc: recv_control_msg error -71 req 02 val 2900 [ 302.823622][ T5272] pwc: recv_control_msg error -71 req 02 val 2800 [ 302.829781][ T5271] usb usb3-port1: attempt power cycle [ 302.840680][ T5272] pwc: recv_control_msg error -71 req 04 val 1100 [ 302.857604][ T5272] pwc: recv_control_msg error -71 req 04 val 1200 [ 303.083756][ T5272] pwc: Registered as video71. [ 303.809472][ T5272] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input19 [ 303.840254][ T7276] netlink: 20 bytes leftover after parsing attributes in process `syz.4.381'. [ 303.862102][ T5272] usb 2-1: USB disconnect, device number 9 [ 303.897663][ T7276] openvswitch: netlink: Flow key attr not present in new flow. [ 303.933648][ T5271] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 305.060477][ T5271] usb 3-1: device not accepting address 9, error -71 [ 305.105233][ T941] IPVS: starting estimator thread 0... [ 305.129774][ T30] audit: type=1400 audit(1729701520.776:441): avc: denied { shutdown } for pid=7278 comm="syz.3.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 305.149831][ T30] audit: type=1400 audit(1729701520.776:442): avc: denied { create } for pid=7278 comm="syz.3.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 305.173321][ T30] audit: type=1400 audit(1729701520.776:443): avc: denied { setopt } for pid=7278 comm="syz.3.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 305.500053][ T7288] IPVS: using max 16 ests per chain, 38400 per kthread [ 306.090994][ T5305] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 307.524154][ T7304] FAULT_INJECTION: forcing a failure. [ 307.524154][ T7304] name failslab, interval 1, probability 0, space 0, times 0 [ 307.583508][ T30] audit: type=1400 audit(1729701523.996:444): avc: denied { ioctl } for pid=7305 comm="syz.3.389" path="socket:[17066]" dev="sockfs" ino=17066 ioctlcmd=0x8953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 307.623693][ T7304] CPU: 1 UID: 0 PID: 7304 Comm: syz.4.390 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 307.634353][ T7304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 307.644459][ T7304] Call Trace: [ 307.647768][ T7304] [ 307.650735][ T7304] dump_stack_lvl+0x16c/0x1f0 [ 307.655487][ T7304] should_fail_ex+0x497/0x5b0 [ 307.660224][ T7304] ? fs_reclaim_acquire+0xae/0x150 [ 307.665394][ T7304] should_failslab+0xc2/0x120 [ 307.670119][ T7304] kmem_cache_alloc_node_noprof+0x71/0x310 [ 307.676011][ T7304] ? __alloc_skb+0x2b1/0x380 [ 307.680670][ T7304] __alloc_skb+0x2b1/0x380 [ 307.685155][ T7304] ? __pfx___alloc_skb+0x10/0x10 [ 307.690159][ T7304] netlink_ack+0x164/0xb90 [ 307.694658][ T7304] ? __pfx___lock_acquire+0x10/0x10 [ 307.699891][ T7304] ? hlock_class+0x4e/0x130 [ 307.704452][ T7304] rdma_nl_rcv_skb.constprop.0.isra.0+0x346/0x450 [ 307.710929][ T7304] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 307.717963][ T7304] ? netlink_deliver_tap+0x1ae/0xd90 [ 307.723301][ T7304] ? selinux_nlmsg_lookup+0x265/0x4b0 [ 307.728760][ T7304] netlink_unicast+0x53c/0x7f0 [ 307.733583][ T7304] ? __pfx_netlink_unicast+0x10/0x10 [ 307.738939][ T7304] netlink_sendmsg+0x8b8/0xd70 [ 307.743741][ T7304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.749053][ T7304] ? __import_iovec+0x1fd/0x6e0 [ 307.753942][ T7304] ____sys_sendmsg+0xaaf/0xc90 [ 307.758737][ T7304] ? copy_msghdr_from_user+0x10b/0x160 [ 307.764211][ T7304] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.769526][ T7304] ? __pfx___lock_acquire+0x10/0x10 [ 307.774743][ T7304] ___sys_sendmsg+0x135/0x1e0 [ 307.779454][ T7304] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.784685][ T7304] ? lock_acquire+0x2f/0xb0 [ 307.789201][ T7304] ? __fget_files+0x40/0x3f0 [ 307.793837][ T7304] ? fdget+0x176/0x210 [ 307.797939][ T7304] __sys_sendmsg+0x117/0x1f0 [ 307.802544][ T7304] ? __pfx___sys_sendmsg+0x10/0x10 [ 307.807667][ T7304] ? __fget_files+0x244/0x3f0 [ 307.812401][ T7304] do_syscall_64+0xcd/0x250 [ 307.816957][ T7304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.822872][ T7304] RIP: 0033:0x7f66ca57dff9 [ 307.827300][ T7304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.846922][ T7304] RSP: 002b:00007f66cb3d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.855356][ T7304] RAX: ffffffffffffffda RBX: 00007f66ca735f80 RCX: 00007f66ca57dff9 [ 307.863361][ T7304] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 307.871356][ T7304] RBP: 00007f66cb3d5090 R08: 0000000000000000 R09: 0000000000000000 [ 307.879339][ T7304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.887341][ T7304] R13: 0000000000000000 R14: 00007f66ca735f80 R15: 00007ffff7065188 [ 307.895343][ T7304] [ 308.126853][ T30] audit: type=1400 audit(1729701524.546:445): avc: denied { bind } for pid=7316 comm="syz.4.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 308.137846][ T7318] syz.2.395: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 308.169186][ T30] audit: type=1400 audit(1729701524.566:446): avc: denied { listen } for pid=7316 comm="syz.4.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 308.174467][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 308.203111][ T7318] CPU: 1 UID: 0 PID: 7318 Comm: syz.2.395 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 308.213756][ T7318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 308.223850][ T7318] Call Trace: [ 308.227155][ T7318] [ 308.230115][ T7318] dump_stack_lvl+0x16c/0x1f0 [ 308.234876][ T7318] warn_alloc+0x24d/0x3a0 [ 308.239251][ T7318] ? __pfx_warn_alloc+0x10/0x10 [ 308.244155][ T7318] ? __get_vm_area_node+0x190/0x2d0 [ 308.249405][ T7318] ? __get_vm_area_node+0x1bc/0x2d0 [ 308.254671][ T7318] __vmalloc_node_range_noprof+0x114a/0x15a0 [ 308.260700][ T7318] ? kasan_save_stack+0x42/0x60 [ 308.265620][ T7318] ? xt_alloc_entry_offsets+0x3a/0x60 [ 308.271056][ T7318] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 308.277447][ T7318] ? trace_kmalloc+0x2d/0xe0 [ 308.282088][ T7318] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 308.287863][ T7318] ? xt_alloc_entry_offsets+0x3a/0x60 [ 308.293291][ T7318] __kvmalloc_node_noprof+0x14f/0x1a0 [ 308.298711][ T7318] ? xt_alloc_entry_offsets+0x3a/0x60 [ 308.304138][ T7318] xt_alloc_entry_offsets+0x3a/0x60 [ 308.309383][ T7318] translate_table+0x22e/0x17b0 [ 308.314282][ T7318] ? __pfx_lock_release+0x10/0x10 [ 308.319348][ T7318] ? trace_lock_acquire+0x14a/0x1d0 [ 308.324615][ T7318] ? __pfx_translate_table+0x10/0x10 [ 308.329964][ T7318] do_ip6t_set_ctl+0x605/0xc40 [ 308.334787][ T7318] ? trace_contention_end+0xea/0x140 [ 308.340126][ T7318] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 308.345495][ T7318] ? __pfx___mutex_lock+0x10/0x10 [ 308.350584][ T7318] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 308.356649][ T7318] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 308.362688][ T7318] nf_setsockopt+0x8a/0xf0 [ 308.367159][ T7318] ipv6_setsockopt+0x135/0x170 [ 308.371975][ T7318] udpv6_setsockopt+0x7d/0xd0 [ 308.376708][ T7318] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 308.382648][ T7318] do_sock_setsockopt+0x222/0x480 [ 308.387718][ T7318] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 308.393339][ T7318] ? fdget+0x176/0x210 [ 308.397474][ T7318] __sys_setsockopt+0x1a4/0x270 [ 308.402397][ T7318] ? __pfx___sys_setsockopt+0x10/0x10 [ 308.407838][ T7318] ? rcu_is_watching+0x12/0xc0 [ 308.412659][ T7318] __x64_sys_setsockopt+0xbd/0x160 [ 308.417828][ T7318] ? do_syscall_64+0x91/0x250 [ 308.422560][ T7318] ? lockdep_hardirqs_on+0x7c/0x110 [ 308.427822][ T7318] do_syscall_64+0xcd/0x250 [ 308.432385][ T7318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.438348][ T7318] RIP: 0033:0x7fd96fd7dff9 [ 308.442799][ T7318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.462469][ T7318] RSP: 002b:00007fd970c00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 308.470946][ T7318] RAX: ffffffffffffffda RBX: 00007fd96ff35f80 RCX: 00007fd96fd7dff9 [ 308.478974][ T7318] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 308.486985][ T7318] RBP: 00007fd96fdf0296 R08: 00000000000002e8 R09: 0000000000000000 [ 308.495011][ T7318] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.503026][ T7318] R13: 0000000000000000 R14: 00007fd96ff35f80 R15: 00007ffd0e1165a8 [ 308.511059][ T7318] [ 308.516909][ T5303] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 308.554577][ T7318] Mem-Info: [ 308.584377][ T7318] active_anon:7987 inactive_anon:0 isolated_anon:0 [ 308.584377][ T7318] active_file:11296 inactive_file:38535 isolated_file:0 [ 308.584377][ T7318] unevictable:768 dirty:203 writeback:0 [ 308.584377][ T7318] slab_reclaimable:9988 slab_unreclaimable:97255 [ 308.584377][ T7318] mapped:25483 shmem:4125 pagetables:887 [ 308.584377][ T7318] sec_pagetables:0 bounce:0 [ 308.584377][ T7318] kernel_misc_reclaimable:0 [ 308.584377][ T7318] free:1347341 free_pcp:351 free_cma:0 [ 308.637701][ T7318] Node 0 active_anon:32048kB inactive_anon:0kB active_file:45184kB inactive_file:154068kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101932kB dirty:808kB writeback:0kB shmem:14964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10720kB pagetables:3548kB sec_pagetables:0kB all_unreclaimable? no [ 308.703915][ T5303] usb 4-1: Using ep0 maxpacket: 16 [ 308.717100][ T5303] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 308.720738][ T7318] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 308.732741][ T5303] usb 4-1: config 0 has no interface number 0 [ 308.966762][ T7318] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 309.506922][ T7318] lowmem_reserve[]: 0 2461 2461 0 0 [ 309.507708][ T5303] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 309.512238][ T7318] Node 0 DMA32 free:1437428kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:36240kB inactive_anon:0kB active_file:45184kB inactive_file:153748kB unevictable:1536kB writepending:828kB present:3129332kB managed:2549168kB mlocked:0kB bounce:0kB free_pcp:812kB local_pcp:812kB free_cma:0kB [ 309.583523][ T5303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.595040][ T5303] usb 4-1: Product: syz [ 309.599277][ T5303] usb 4-1: Manufacturer: syz [ 309.604528][ T5303] usb 4-1: SerialNumber: syz [ 309.610464][ T7318] lowmem_reserve[]: 0 0 0 0 0 [ 309.618033][ T5303] usb 4-1: config 0 descriptor?? [ 309.630799][ T7318] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:32kB inactive_anon:0kB active_file:0kB inactive_file:320kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 309.661327][ T5303] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 309.724551][ T7318] lowmem_reserve[]: 0 0 0 0 0 [ 309.729541][ T7318] Node 1 Normal free:3928284kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 309.889459][ T7318] lowmem_reserve[]: 0 0 0 0 0 [ 309.896740][ T7318] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 310.009621][ T7318] Node 0 DMA32: 44*4kB (UM) 5*8kB (UE) 11*16kB (UE) 314*32kB (UME) 333*64kB (UME) 111*128kB (UME) 50*256kB (UME) 34*512kB (UM) 21*1024kB (UME) 7*2048kB (UME) 325*4096kB (UM) = 1443208kB [ 310.249419][ T7318] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 310.428675][ T7318] Node 1 Normal: 201*4kB (UME) 55*8kB (UME) 40*16kB (UME) 198*32kB (UME) 101*64kB (UME) 25*128kB (UME) 15*256kB (UM) 8*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 950*4096kB (M) = 3928284kB [ 310.603928][ T7318] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 310.683626][ T7318] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 310.693026][ T7318] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 310.734801][ T7318] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 310.753620][ T7318] 53998 total pagecache pages [ 310.758345][ T7318] 0 pages in swap cache [ 310.774568][ T7318] Free swap = 124984kB [ 310.778769][ T7318] Total swap = 124996kB [ 310.820000][ T7318] 2097051 pages RAM [ 310.840299][ T7318] 0 pages HighMem/MovableOnly [ 310.853471][ T7318] 428037 pages reserved [ 310.870638][ T7318] 0 pages cma reserved [ 310.907362][ T30] audit: type=1400 audit(1729701527.326:447): avc: denied { write } for pid=4656 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 311.083654][ T30] audit: type=1400 audit(1729701527.326:448): avc: denied { remove_name } for pid=4656 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 311.149992][ T30] audit: type=1400 audit(1729701527.326:449): avc: denied { add_name } for pid=4656 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 311.633601][ T5303] gspca_spca1528: reg_w err -71 [ 311.639640][ T5303] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 312.682153][ T5303] usb 4-1: USB disconnect, device number 19 [ 313.485433][ T7373] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 314.747693][ T7389] process 'syz.3.409' launched './file0' with NULL argv: empty string added [ 314.899792][ T30] audit: type=1400 audit(1729701531.176:450): avc: denied { execute_no_trans } for pid=7386 comm="syz.3.409" path="/127/file0" dev="tmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 318.427091][ T5272] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 318.585921][ T5272] usb 4-1: Using ep0 maxpacket: 16 [ 318.593388][ T5272] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 318.607733][ T5272] usb 4-1: config 0 has no interface number 0 [ 318.625752][ T5272] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 318.641046][ T5272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.683673][ T8] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 318.706982][ T5272] usb 4-1: Product: syz [ 318.711215][ T5272] usb 4-1: Manufacturer: syz [ 318.740778][ T5272] usb 4-1: SerialNumber: syz [ 318.839209][ T5272] usb 4-1: config 0 descriptor?? [ 318.870712][ T5272] usb 4-1: can't set config #0, error -71 [ 318.916169][ T5272] usb 4-1: USB disconnect, device number 20 [ 318.969755][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 319.036248][ T8] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 319.046368][ T8] usb 1-1: config 0 has no interface number 0 [ 319.767682][ T8] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 319.939818][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.947954][ T8] usb 1-1: Product: syz [ 319.952157][ T8] usb 1-1: Manufacturer: syz [ 319.956849][ T8] usb 1-1: SerialNumber: syz [ 319.984488][ T8] usb 1-1: config 0 descriptor?? [ 320.102753][ T8] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 320.581123][ T30] audit: type=1400 audit(1729701536.996:451): avc: denied { connect } for pid=7435 comm="syz.1.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 321.420791][ T8] gspca_spca1528: reg_w err -110 [ 321.453534][ T8] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 321.485202][ T8] usb 1-1: USB disconnect, device number 13 [ 322.550392][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.557727][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.189703][ T7460] FAULT_INJECTION: forcing a failure. [ 323.189703][ T7460] name fail_futex, interval 1, probability 0, space 0, times 1 [ 323.202657][ T7460] CPU: 0 UID: 0 PID: 7460 Comm: syz.2.427 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 323.213296][ T7460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 323.223393][ T7460] Call Trace: [ 323.226698][ T7460] [ 323.229656][ T7460] dump_stack_lvl+0x16c/0x1f0 [ 323.234388][ T7460] should_fail_ex+0x497/0x5b0 [ 323.239106][ T7460] get_futex_key+0x1b1/0x1090 [ 323.243832][ T7460] ? __pfx_get_futex_key+0x10/0x10 [ 323.248985][ T7460] ? kasan_save_track+0x14/0x30 [ 323.253871][ T7460] ? __kasan_kmalloc+0xaa/0xb0 [ 323.258675][ T7460] futex_requeue+0x1c7/0x1cf0 [ 323.263415][ T7460] ? __pfx_futex_requeue+0x10/0x10 [ 323.268577][ T7460] ? ksys_write+0x12f/0x260 [ 323.273136][ T7460] ? find_held_lock+0x2d/0x110 [ 323.278007][ T7460] ? ksys_write+0x21e/0x260 [ 323.282578][ T7460] ? __pfx_lock_release+0x10/0x10 [ 323.287649][ T7460] ? vfs_write+0x14d/0x1140 [ 323.292229][ T7460] do_futex+0x1af/0x350 [ 323.296458][ T7460] ? __pfx_do_futex+0x10/0x10 [ 323.301217][ T7460] __x64_sys_futex+0x1e1/0x4c0 [ 323.306077][ T7460] ? fput+0x30/0x390 [ 323.310031][ T7460] ? __pfx___x64_sys_futex+0x10/0x10 [ 323.315394][ T7460] ? ksys_write+0x1ad/0x260 [ 323.319961][ T7460] ? __pfx_ksys_write+0x10/0x10 [ 323.324895][ T7460] do_syscall_64+0xcd/0x250 [ 323.329463][ T7460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.335410][ T7460] RIP: 0033:0x7fd96fd7dff9 [ 323.339884][ T7460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.359537][ T7460] RSP: 002b:00007fd970bdf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 323.367994][ T7460] RAX: ffffffffffffffda RBX: 00007fd96ff36058 RCX: 00007fd96fd7dff9 [ 323.376006][ T7460] RDX: 0000000000000001 RSI: 000000000000000c RDI: 000000002000cffc [ 323.384016][ T7460] RBP: 00007fd970bdf090 R08: 0000000020048000 R09: 0000000000000000 [ 323.392045][ T7460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.400055][ T7460] R13: 0000000000000001 R14: 00007fd96ff36058 R15: 00007ffd0e1165a8 [ 323.408088][ T7460] [ 323.411220][ C0] vkms_vblank_simulate: vblank timer overrun [ 324.064358][ T7464] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 324.525464][ T7475] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 325.484506][ T5305] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 325.643676][ T5305] usb 2-1: Using ep0 maxpacket: 16 [ 325.671010][ T5305] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 325.680851][ T5305] usb 2-1: config 0 has no interface number 0 [ 325.713988][ T7476] block device autoloading is deprecated and will be removed. [ 325.722620][ T5305] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 325.723214][ T7476] syz.0.431: attempt to access beyond end of device [ 325.723214][ T7476] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 326.067894][ T5305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.078173][ T5305] usb 2-1: Product: syz [ 326.082488][ T5305] usb 2-1: Manufacturer: syz [ 326.087620][ T5305] usb 2-1: SerialNumber: syz [ 326.476647][ T5305] usb 2-1: config 0 descriptor?? [ 326.489038][ T5305] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 326.667195][ T7490] fuse: Bad value for 'fd' [ 327.176246][ T5272] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 328.493482][ T5272] usb 1-1: Using ep0 maxpacket: 8 [ 328.502200][ T5272] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 328.511560][ T5272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.522176][ T5272] usb 1-1: Product: syz [ 328.533496][ T5272] usb 1-1: Manufacturer: syz [ 328.539127][ T5272] usb 1-1: SerialNumber: syz [ 328.624831][ T5272] usb 1-1: config 0 descriptor?? [ 328.643628][ T5272] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 328.925754][ T5305] gspca_spca1528: reg_w err -110 [ 328.930824][ T5305] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 329.059026][ T5305] usb 2-1: USB disconnect, device number 10 [ 329.121488][ T5272] gspca_sonixj: reg_r err -71 [ 329.126778][ T5272] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 329.204871][ T5272] usb 1-1: USB disconnect, device number 14 [ 329.974212][ T7518] vivid-000: kernel_thread() failed [ 329.980558][ T7519] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 330.216900][ T30] audit: type=1400 audit(1729701546.636:452): avc: denied { read } for pid=7522 comm="syz.2.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 330.246529][ T938] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 330.264159][ T7511] warning: `syz.4.442' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 331.233513][ T938] usb 4-1: Using ep0 maxpacket: 8 [ 331.240639][ T938] usb 4-1: config 0 has an invalid interface number: 95 but max is 0 [ 331.249609][ T938] usb 4-1: config 0 has no interface number 0 [ 331.255831][ T938] usb 4-1: config 0 interface 95 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 331.279310][ T938] usb 4-1: config 0 interface 95 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 331.302915][ T938] usb 4-1: config 0 interface 95 altsetting 0 endpoint 0x5 has an invalid bInterval 255, changing to 11 [ 331.340520][ T938] usb 4-1: config 0 interface 95 altsetting 0 endpoint 0x5 has invalid maxpacket 59391, setting to 1024 [ 331.376089][ T938] usb 4-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=10.15 [ 331.389090][ T938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.398070][ T938] usb 4-1: Product: syz [ 331.409488][ T938] usb 4-1: Manufacturer: syz [ 331.414569][ T938] usb 4-1: SerialNumber: syz [ 331.420256][ T7535] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7535 comm=syz.1.447 [ 331.454549][ T938] usb 4-1: config 0 descriptor?? [ 331.474272][ T938] keyspan 4-1:0.95: Keyspan 1 port adapter converter detected [ 331.483407][ T938] keyspan 4-1:0.95: found no endpoint descriptor for endpoint 87 [ 331.513653][ T938] keyspan 4-1:0.95: found no endpoint descriptor for endpoint 7 [ 331.521492][ T30] audit: type=1400 audit(1729701547.936:453): avc: denied { getopt } for pid=7534 comm="syz.1.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 331.545099][ T938] keyspan 4-1:0.95: found no endpoint descriptor for endpoint 81 [ 331.553608][ T938] keyspan 4-1:0.95: found no endpoint descriptor for endpoint 1 [ 331.562748][ T938] keyspan 4-1:0.95: found no endpoint descriptor for endpoint 2 [ 331.573106][ T938] keyspan 4-1:0.95: found no endpoint descriptor for endpoint 85 [ 331.586371][ T938] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 332.559946][ T5272] usb 4-1: USB disconnect, device number 21 [ 332.575597][ T5272] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 332.694066][ T5272] keyspan 4-1:0.95: device disconnected [ 332.914883][ T5271] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 333.205708][ T5271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.323680][ T938] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 333.831027][ T5271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.888791][ T5271] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 334.148736][ T5271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.020246][ T5229] Bluetooth: hci6: command 0x0406 tx timeout [ 335.214165][ T30] audit: type=1400 audit(1729701551.626:454): avc: denied { setopt } for pid=7558 comm="syz.1.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 335.478434][ T5271] usb 5-1: config 0 descriptor?? [ 335.709673][ T30] audit: type=1400 audit(1729701551.626:455): avc: denied { connect } for pid=7558 comm="syz.1.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 336.163321][ T7566] vivid-004: kernel_thread() failed [ 336.169864][ T7567] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 336.359815][ T5271] usb 5-1: can't set config #0, error -71 [ 336.425511][ T30] audit: type=1400 audit(1729701552.846:456): avc: denied { create } for pid=7568 comm="syz.3.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 336.521982][ T5271] usb 5-1: USB disconnect, device number 13 [ 336.566513][ T30] audit: type=1400 audit(1729701552.886:457): avc: denied { setopt } for pid=7568 comm="syz.3.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 339.458412][ T938] usb 1-1: unable to get BOS descriptor or descriptor too short [ 339.466223][ T938] usb 1-1: no configurations [ 339.470874][ T938] usb 1-1: can't read configurations, error -22 [ 339.477318][ T5274] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 339.585735][ T5271] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 339.683553][ T938] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 339.703538][ T5274] usb 4-1: Using ep0 maxpacket: 32 [ 339.711083][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.724521][ T7588] FAULT_INJECTION: forcing a failure. [ 339.724521][ T7588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.774203][ T7588] CPU: 0 UID: 0 PID: 7588 Comm: syz.4.461 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 339.784859][ T7588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 339.794947][ T7588] Call Trace: [ 339.798254][ T7588] [ 339.801226][ T7588] dump_stack_lvl+0x16c/0x1f0 [ 339.805989][ T7588] should_fail_ex+0x497/0x5b0 [ 339.810697][ T7588] _copy_from_user+0x30/0xf0 [ 339.815316][ T7588] copy_msghdr_from_user+0x99/0x160 [ 339.820541][ T7588] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 339.826378][ T7588] ? kfree+0x274/0x4b0 [ 339.830468][ T7588] ? __pfx___lock_acquire+0x10/0x10 [ 339.835696][ T7588] ___sys_recvmsg+0xdc/0x1a0 [ 339.840310][ T7588] ? __pfx____sys_recvmsg+0x10/0x10 [ 339.845541][ T7588] ? find_held_lock+0x2d/0x110 [ 339.850355][ T7588] ? lock_acquire+0x2f/0xb0 [ 339.854885][ T7588] ? __pfx___might_resched+0x10/0x10 [ 339.860224][ T7588] ? __might_fault+0xe3/0x190 [ 339.864944][ T7588] do_recvmmsg+0x2ba/0x750 [ 339.869381][ T7588] ? __pfx_do_recvmmsg+0x10/0x10 [ 339.874341][ T7588] ? vfs_write+0x14d/0x1140 [ 339.878880][ T7588] ? __mutex_unlock_slowpath+0x164/0x650 [ 339.884548][ T7588] ? __fget_files+0x244/0x3f0 [ 339.889274][ T7588] __x64_sys_recvmmsg+0x239/0x290 [ 339.894330][ T7588] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 339.899905][ T7588] do_syscall_64+0xcd/0x250 [ 339.904442][ T7588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.910373][ T7588] RIP: 0033:0x7f66ca57dff9 [ 339.914810][ T7588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.934440][ T7588] RSP: 002b:00007f66cb3b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 339.942871][ T7588] RAX: ffffffffffffffda RBX: 00007f66ca736058 RCX: 00007f66ca57dff9 [ 339.950861][ T7588] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 339.958852][ T7588] RBP: 00007f66cb3b4090 R08: 0000000000000000 R09: 0000000000000000 [ 339.966833][ T7588] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 339.974815][ T7588] R13: 0000000000000001 R14: 00007f66ca736058 R15: 00007ffff7065188 [ 339.982810][ T7588] [ 339.987133][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.003648][ T5274] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 340.027089][ T5274] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 340.036632][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.051488][ T938] usb 1-1: device descriptor read/64, error -32 [ 340.087769][ T5274] usb 4-1: config 0 descriptor?? [ 340.995076][ T5274] usb 4-1: can't set config #0, error -71 [ 341.034264][ T938] usb usb1-port1: attempt power cycle [ 341.104330][ T5274] usb 4-1: USB disconnect, device number 22 [ 341.542196][ T7600] netlink: 'syz.1.464': attribute type 3 has an invalid length. [ 341.550284][ T7600] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.464'. [ 341.790106][ T938] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 341.827289][ T938] usb 1-1: device descriptor read/8, error -32 [ 342.008297][ T5274] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 342.048252][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 342.063934][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 342.072171][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 342.091860][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 342.099016][ T938] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 342.108011][ T5235] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 342.115523][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 342.146797][ T938] usb 1-1: device descriptor read/8, error -32 [ 342.162927][ T7602] ip6gretap0 speed is unknown, defaulting to 1000 [ 342.193598][ T5274] usb 4-1: Using ep0 maxpacket: 16 [ 342.200551][ T5274] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.214959][ T5274] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.224852][ T5274] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 342.244533][ T5274] usb 4-1: config 0 interface 0 has no altsetting 0 [ 342.251387][ T5274] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 342.267366][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.279319][ T5274] usb 4-1: config 0 descriptor?? [ 342.284622][ T938] usb usb1-port1: unable to enumerate USB device [ 342.418038][ T7602] chnl_net:caif_netlink_parms(): no params data found [ 342.538744][ T7602] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.557149][ T7602] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.565259][ T7602] bridge_slave_0: entered allmulticast mode [ 342.581210][ T7602] bridge_slave_0: entered promiscuous mode [ 342.591226][ T7602] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.605046][ T7602] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.612302][ T7602] bridge_slave_1: entered allmulticast mode [ 342.629168][ T7602] bridge_slave_1: entered promiscuous mode [ 342.693510][ T7602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.706589][ T7602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.717380][ T7598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.728065][ T7598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.007772][ T7602] team0: Port device team_slave_0 added [ 344.173797][ T5235] Bluetooth: hci2: command tx timeout [ 344.221113][ T7602] team0: Port device team_slave_1 added [ 344.254013][ T5274] usbhid 4-1:0.0: can't add hid device: -71 [ 344.260007][ T5274] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 344.329789][ T5274] usb 4-1: USB disconnect, device number 23 [ 344.415815][ T7602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.430195][ T7602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.462329][ T7602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.481222][ T7602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.488387][ T7602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.521458][ T7602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.562480][ T7602] hsr_slave_0: entered promiscuous mode [ 344.569707][ T7602] hsr_slave_1: entered promiscuous mode [ 344.580093][ T7602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.590646][ T7602] Cannot create hsr debugfs directory [ 344.704528][ T7602] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.899519][ T7602] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.075877][ T7602] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.262172][ T7602] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.519352][ T7602] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 345.529274][ T7602] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 345.546057][ T7602] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 345.558688][ T7602] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 345.570372][ T6407] bridge_slave_1: left allmulticast mode [ 345.576382][ T6407] bridge_slave_1: left promiscuous mode [ 345.582192][ T6407] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.596172][ T6407] bridge_slave_0: left allmulticast mode [ 345.601868][ T6407] bridge_slave_0: left promiscuous mode [ 345.608065][ T6407] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.973833][ T6407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.986118][ T6407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.997456][ T6407] bond0 (unregistering): Released all slaves [ 346.008997][ T5303] ip6gretap0 speed is unknown, defaulting to 1000 [ 346.136854][ T7602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.159880][ T7602] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.194402][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.201550][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.211455][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.218625][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.253993][ T5235] Bluetooth: hci2: command tx timeout [ 346.340805][ T6407] hsr_slave_0: left promiscuous mode [ 346.365930][ T6407] hsr_slave_1: left promiscuous mode [ 346.380379][ T6407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.387984][ T6407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.396306][ T6407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.403980][ T6407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.422116][ T6407] veth1_macvtap: left promiscuous mode [ 346.427838][ T6407] veth0_macvtap: left promiscuous mode [ 346.433451][ T6407] veth1_vlan: left promiscuous mode [ 346.439023][ T6407] veth0_vlan: left promiscuous mode [ 346.848703][ T6407] team0 (unregistering): Port device team_slave_1 removed [ 346.890725][ T6407] team0 (unregistering): Port device team_slave_0 removed [ 347.385701][ T7602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.442747][ T7602] veth0_vlan: entered promiscuous mode [ 347.455017][ T7602] veth1_vlan: entered promiscuous mode [ 347.497850][ T7602] veth0_macvtap: entered promiscuous mode [ 347.511543][ T7602] veth1_macvtap: entered promiscuous mode [ 347.536984][ T7602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.547774][ T7602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.557711][ T7602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.568254][ T7602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.578144][ T7602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.589261][ T7602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.599219][ T7602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.609918][ T7602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.621453][ T7602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.638292][ T7602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.649145][ T7602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.661634][ T7602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.672444][ T7602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.682645][ T7602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.694019][ T7602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.703947][ T7602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.714554][ T7602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.725852][ T7602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.741590][ T7602] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.750580][ T7602] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.759702][ T7602] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.768516][ T7602] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.872917][ T6407] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.897060][ T6449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.909496][ T6449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.938752][ T5747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.948099][ T5747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.996876][ T6407] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.126891][ T6407] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.287231][ T6407] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.334964][ T5235] Bluetooth: hci2: command tx timeout [ 348.465285][ T6407] bridge_slave_1: left allmulticast mode [ 348.476451][ T6407] bridge_slave_1: left promiscuous mode [ 348.501298][ T6407] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.535418][ T6407] bridge_slave_0: left allmulticast mode [ 348.548644][ T6407] bridge_slave_0: left promiscuous mode [ 348.568986][ T6407] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.273153][ T6407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.307709][ T6407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.328798][ T6407] bond0 (unregistering): Released all slaves [ 349.650718][ T6407] hsr_slave_0: left promiscuous mode [ 349.662381][ T6407] hsr_slave_1: left promiscuous mode [ 349.670556][ T6407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.686320][ T6407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.699532][ T6407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.707563][ T6407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.730442][ T6407] veth1_macvtap: left promiscuous mode [ 349.742010][ T6407] veth0_macvtap: left promiscuous mode [ 349.752998][ T6407] veth1_vlan: left promiscuous mode [ 349.759815][ T6407] veth0_vlan: left promiscuous mode [ 350.232744][ T6407] team0 (unregistering): Port device team_slave_1 removed [ 350.272654][ T6407] team0 (unregistering): Port device team_slave_0 removed [ 350.413609][ T5235] Bluetooth: hci2: command tx timeout [ 352.075148][ T30] audit: type=1400 audit(1729701568.486:458): avc: denied { setrlimit } for pid=7707 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 353.395263][ T8] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 353.511996][ T938] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 353.696937][ T8] usb 5-1: device descriptor read/64, error -71 [ 354.013852][ T8] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 354.254270][ T8] usb 5-1: device descriptor read/64, error -71 [ 354.516613][ T8] usb usb5-port1: attempt power cycle [ 354.842597][ T5226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 354.872158][ T5226] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 354.883097][ T5226] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 354.893918][ T5226] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 354.929438][ T5226] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 354.937611][ T5226] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 355.263559][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 355.313495][ T8] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 355.415778][ T8] usb 5-1: device descriptor read/8, error -71 [ 355.543568][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 355.561708][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 355.607456][ T9] usb 2-1: config 0 has no interface number 0 [ 355.647999][ T9] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 355.664746][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.674032][ T8] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 355.703092][ T9] usb 2-1: Product: syz [ 355.712499][ T9] usb 2-1: Manufacturer: syz [ 355.723555][ T8] usb 5-1: device descriptor read/8, error -71 [ 355.730553][ T9] usb 2-1: SerialNumber: syz [ 355.753344][ T9] usb 2-1: config 0 descriptor?? [ 355.770792][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 355.807484][ T7764] chnl_net:caif_netlink_parms(): no params data found [ 355.833846][ T8] usb usb5-port1: unable to enumerate USB device [ 355.978945][ T7764] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.191337][ T7764] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.309721][ T7788] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 356.317884][ T7788] vhci_hcd: invalid port number 9 [ 356.323184][ T7788] vhci_hcd: invalid port number 9 [ 356.445687][ T7764] bridge_slave_0: entered allmulticast mode [ 356.455577][ T7764] bridge_slave_0: entered promiscuous mode [ 356.475678][ T7764] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.483760][ T7764] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.496346][ T7764] bridge_slave_1: entered allmulticast mode [ 356.510345][ T7764] bridge_slave_1: entered promiscuous mode [ 356.689994][ T9] gspca_spca1528: reg_w err -110 [ 356.723960][ T9] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 356.748955][ T30] audit: type=1400 audit(1729701572.756:459): avc: denied { read write } for pid=7785 comm="syz.3.474" name="nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 356.955294][ T7764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.977176][ T5226] Bluetooth: hci1: command tx timeout [ 356.993593][ T30] audit: type=1400 audit(1729701572.766:460): avc: denied { open } for pid=7785 comm="syz.3.474" path="/dev/nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 357.036527][ T7764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.240785][ T7764] team0: Port device team_slave_0 added [ 357.257135][ T7764] team0: Port device team_slave_1 added [ 357.451500][ T7764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.539745][ T7764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.565773][ C1] vkms_vblank_simulate: vblank timer overrun [ 357.859733][ T7764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.331201][ T7764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.399779][ T7764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.790558][ T7764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.964174][ T7764] hsr_slave_0: entered promiscuous mode [ 358.971811][ T7764] hsr_slave_1: entered promiscuous mode [ 358.985339][ T7764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.992960][ T7764] Cannot create hsr debugfs directory [ 359.053885][ T5226] Bluetooth: hci1: command tx timeout [ 359.178208][ T25] usb 2-1: USB disconnect, device number 11 [ 359.695199][ T7828] FAULT_INJECTION: forcing a failure. [ 359.695199][ T7828] name failslab, interval 1, probability 0, space 0, times 0 [ 359.750112][ T7828] CPU: 0 UID: 0 PID: 7828 Comm: syz.3.480 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 359.760820][ T7828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 359.770934][ T7828] Call Trace: [ 359.774254][ T7828] [ 359.777209][ T7828] dump_stack_lvl+0x16c/0x1f0 [ 359.781947][ T7828] should_fail_ex+0x497/0x5b0 [ 359.786685][ T7828] should_failslab+0xc2/0x120 [ 359.791406][ T7828] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 359.796816][ T7828] ? skb_clone+0x190/0x3f0 [ 359.801268][ T7828] skb_clone+0x190/0x3f0 [ 359.805550][ T7828] netlink_deliver_tap+0xab3/0xd90 [ 359.810706][ T7828] netlink_unicast+0x5e1/0x7f0 [ 359.815521][ T7828] ? __pfx_netlink_unicast+0x10/0x10 [ 359.820870][ T7828] netlink_sendmsg+0x8b8/0xd70 [ 359.825707][ T7828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.831041][ T7828] ? __import_iovec+0x1fd/0x6e0 [ 359.835940][ T7828] ____sys_sendmsg+0xaaf/0xc90 [ 359.840743][ T7828] ? copy_msghdr_from_user+0x10b/0x160 [ 359.846231][ T7828] ? __pfx_____sys_sendmsg+0x10/0x10 [ 359.851578][ T7828] ? __pfx___lock_acquire+0x10/0x10 [ 359.856814][ T7828] ___sys_sendmsg+0x135/0x1e0 [ 359.861519][ T7828] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.866753][ T7828] ? lock_acquire+0x2f/0xb0 [ 359.871283][ T7828] ? __fget_files+0x40/0x3f0 [ 359.875938][ T7828] ? fdget+0x176/0x210 [ 359.880043][ T7828] __sys_sendmmsg+0x1a1/0x450 [ 359.884761][ T7828] ? __pfx___sys_sendmmsg+0x10/0x10 [ 359.889978][ T7828] ? vfs_write+0x14d/0x1140 [ 359.894532][ T7828] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 359.900575][ T7828] ? fput+0x30/0x390 [ 359.904507][ T7828] ? ksys_write+0x1ad/0x260 [ 359.909046][ T7828] ? __pfx_ksys_write+0x10/0x10 [ 359.913937][ T7828] __x64_sys_sendmmsg+0x9c/0x100 [ 359.918896][ T7828] ? lockdep_hardirqs_on+0x7c/0x110 [ 359.924126][ T7828] do_syscall_64+0xcd/0x250 [ 359.928668][ T7828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.934599][ T7828] RIP: 0033:0x7f18fd57dff9 [ 359.939031][ T7828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.958660][ T7828] RSP: 002b:00007f18fcfff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 359.967096][ T7828] RAX: ffffffffffffffda RBX: 00007f18fd735f80 RCX: 00007f18fd57dff9 [ 359.975084][ T7828] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 359.983087][ T7828] RBP: 00007f18fcfff090 R08: 0000000000000000 R09: 0000000000000000 [ 359.991079][ T7828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.999071][ T7828] R13: 0000000000000000 R14: 00007f18fd735f80 R15: 00007ffdee140af8 [ 360.007073][ T7828] [ 360.323593][ T5271] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 361.143629][ T5226] Bluetooth: hci1: command tx timeout [ 361.242479][ T5271] usb 2-1: device descriptor read/64, error -71 [ 361.487896][ T5271] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 361.553917][ T5305] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 361.650930][ T5271] usb 2-1: device descriptor read/64, error -71 [ 362.497846][ T5305] usb 4-1: device descriptor read/64, error -71 [ 362.504695][ T5271] usb usb2-port1: attempt power cycle [ 362.743525][ T5305] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 362.843566][ T5271] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 362.884505][ T5305] usb 4-1: device descriptor read/64, error -71 [ 362.939597][ T5271] usb 2-1: device descriptor read/8, error -71 [ 363.340162][ T5226] Bluetooth: hci1: command tx timeout [ 363.645500][ T7764] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 363.788204][ T5305] usb usb4-port1: attempt power cycle [ 363.806454][ T7764] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 363.889771][ T7764] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 363.913915][ T5271] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 363.933279][ T7764] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 364.186841][ T5271] usb 2-1: device descriptor read/8, error -71 [ 364.814930][ T5305] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 365.791326][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 365.797593][ T5271] usb usb2-port1: unable to enumerate USB device [ 366.078304][ T5305] usb 4-1: device not accepting address 27, error -71 [ 366.133652][ T7764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.153107][ T7764] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.188719][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.195954][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.281156][ T30] audit: type=1400 audit(1729701582.696:461): avc: denied { write } for pid=7877 comm="syz.2.488" name="task" dev="proc" ino=20580 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 366.302982][ T30] audit: type=1400 audit(1729701582.696:462): avc: denied { add_name } for pid=7877 comm="syz.2.488" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 366.311769][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.323823][ T30] audit: type=1400 audit(1729701582.696:463): avc: denied { create } for pid=7877 comm="syz.2.488" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 366.330355][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.351130][ T30] audit: type=1400 audit(1729701582.696:464): avc: denied { associate } for pid=7877 comm="syz.2.488" name="cpu.stat" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 366.525775][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 366.554549][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 366.562629][ T9] usb 5-1: config 0 has no interface number 0 [ 366.604503][ T9] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 366.615045][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.623094][ T9] usb 5-1: Product: syz [ 366.690663][ T9] usb 5-1: Manufacturer: syz [ 366.713753][ T9] usb 5-1: SerialNumber: syz [ 366.753596][ T938] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 366.822393][ T9] usb 5-1: config 0 descriptor?? [ 366.946156][ T7896] netlink: 'syz.3.491': attribute type 3 has an invalid length. [ 366.955277][ T7896] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.491'. [ 367.138967][ T7896] netlink: 'syz.3.491': attribute type 1 has an invalid length. [ 367.863783][ T9] usb 5-1: can't set config #0, error -71 [ 367.882245][ T9] usb 5-1: USB disconnect, device number 19 [ 367.922398][ T938] usb 3-1: config 0 has an invalid interface number: 62 but max is 0 [ 367.941575][ T938] usb 3-1: config 0 has no interface number 0 [ 367.952060][ T938] usb 3-1: config 0 interface 62 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 369.066529][ T938] usb 3-1: New USB device found, idVendor=951f, idProduct=a083, bcdDevice=31.b8 [ 369.143568][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 369.241321][ T938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.339438][ T938] usb 3-1: Product: syz [ 369.392592][ T938] usb 3-1: Manufacturer: syz [ 369.405551][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.457396][ T938] usb 3-1: SerialNumber: syz [ 369.552976][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.564985][ T938] usb 3-1: config 0 descriptor?? [ 369.572492][ T7764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.633911][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 369.643106][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.651479][ T938] usb 3-1: can't set config #0, error -71 [ 369.666327][ T938] usb 3-1: USB disconnect, device number 11 [ 370.582065][ T9] usb 5-1: config 0 descriptor?? [ 370.990756][ T7764] veth0_vlan: entered promiscuous mode [ 371.004401][ T9] magicmouse 0003:05AC:0265.0005: unknown main item tag 0x0 [ 371.013102][ T9] magicmouse 0003:05AC:0265.0005: unknown main item tag 0x0 [ 371.057962][ T9] magicmouse 0003:05AC:0265.0005: unknown main item tag 0x0 [ 371.070031][ T7764] veth1_vlan: entered promiscuous mode [ 371.107251][ T9] magicmouse 0003:05AC:0265.0005: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.4-1/input0 [ 371.167388][ T9] magicmouse 0003:05AC:0265.0005: magicmouse input not registered [ 371.207870][ T7764] veth0_macvtap: entered promiscuous mode [ 371.226239][ T9] magicmouse 0003:05AC:0265.0005: probe with driver magicmouse failed with error -12 [ 371.276881][ T7764] veth1_macvtap: entered promiscuous mode [ 371.355888][ T7989] fuse: Bad value for 'fd' [ 371.382578][ T7764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.402698][ T7764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.423489][ T7764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.442893][ T7764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.459760][ T7764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.471413][ T7764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.486474][ T7764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.498452][ T7764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.735257][ T7764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.802342][ T7764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.833649][ T7764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.859010][ T7764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.891946][ T7764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.909517][ T7764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.920814][ T7764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.056935][ T7764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.152665][ T7764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.312390][ T7764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.409283][ T7764] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.472571][ T7764] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.490358][ T7764] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.613679][ T7764] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.455743][ T9] usb 5-1: USB disconnect, device number 20 [ 373.715345][ T30] audit: type=1400 audit(1729701590.136:465): avc: denied { connect } for pid=8009 comm="syz.4.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 373.722125][ T6449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.777460][ T6449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.384997][ T5747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.491255][ T5747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.056594][ T30] audit: type=1400 audit(1729701591.456:466): avc: denied { read } for pid=8034 comm="syz.4.504" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 375.314899][ T30] audit: type=1400 audit(1729701591.456:467): avc: denied { open } for pid=8034 comm="syz.4.504" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 375.357407][ T30] audit: type=1400 audit(1729701591.466:468): avc: denied { ioctl } for pid=8034 comm="syz.4.504" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 376.866842][ T8045] fuse: Unknown parameter '0x0000000000000008' [ 377.375781][ T8037] netlink: 36 bytes leftover after parsing attributes in process `syz.1.503'. [ 377.385644][ T8037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.503'. [ 377.394582][ T8037] netlink: 36 bytes leftover after parsing attributes in process `syz.1.503'. [ 377.403537][ T8037] netlink: 36 bytes leftover after parsing attributes in process `syz.1.503'. [ 377.580296][ T30] audit: type=1400 audit(1729701593.996:469): avc: denied { ioctl } for pid=8052 comm="syz.4.508" path="socket:[21038]" dev="sockfs" ino=21038 ioctlcmd=0xaf20 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 379.755048][ T8074] syz.4.511 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 382.443645][ T8] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 382.653605][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 382.765178][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.965091][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.100036][ T8] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 383.160928][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.252746][ T8] usb 4-1: config 0 descriptor?? [ 383.263280][ T8100] fuse: Bad value for 'fd' [ 384.103838][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.111739][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.482576][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 384.488778][ T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 384.523794][ T8] usb 4-1: USB disconnect, device number 29 [ 385.790089][ T5271] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 385.790548][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 385.874371][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 385.956845][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 386.169379][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 386.177445][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 386.187314][ T5271] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.198196][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 386.232800][ T5271] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 386.330994][ T8131] netlink: 'syz.3.523': attribute type 3 has an invalid length. [ 386.351486][ T8131] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.523'. [ 386.369200][ T5271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.404026][ T5271] usb 5-1: config 0 descriptor?? [ 386.633495][ T8126] netlink: 'syz.3.523': attribute type 1 has an invalid length. [ 386.992209][ T30] audit: type=1400 audit(1729701603.176:470): avc: denied { connect } for pid=8135 comm="syz.0.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 388.165540][ T8124] chnl_net:caif_netlink_parms(): no params data found [ 388.253676][ T5226] Bluetooth: hci3: command tx timeout [ 389.328415][ T8162] netlink: 36 bytes leftover after parsing attributes in process `syz.0.525'. [ 389.337506][ T8162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.525'. [ 389.346692][ T8162] netlink: 36 bytes leftover after parsing attributes in process `syz.0.525'. [ 389.356219][ T8162] netlink: 36 bytes leftover after parsing attributes in process `syz.0.525'. [ 389.596075][ T5271] usb 5-1: USB disconnect, device number 21 [ 389.629248][ T8166] FAULT_INJECTION: forcing a failure. [ 389.629248][ T8166] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 389.663900][ T8166] CPU: 0 UID: 0 PID: 8166 Comm: syz.2.528 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 389.674563][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 389.684664][ T8166] Call Trace: [ 389.687980][ T8166] [ 389.690938][ T8166] dump_stack_lvl+0x16c/0x1f0 [ 389.695650][ T8166] should_fail_ex+0x497/0x5b0 [ 389.700367][ T8166] ? fs_reclaim_acquire+0xae/0x150 [ 389.705510][ T8166] should_fail_alloc_page+0xe7/0x130 [ 389.710841][ T8166] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 389.717022][ T8166] __alloc_pages_noprof+0x190/0x25a0 [ 389.722343][ T8166] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 389.728104][ T8166] ? rcu_is_watching+0x12/0xc0 [ 389.732882][ T8166] ? trace_kmalloc+0x2d/0xe0 [ 389.737503][ T8166] ? __kmalloc_node_track_caller_noprof+0x22d/0x430 [ 389.744137][ T8166] ? __alloc_skb+0x164/0x380 [ 389.748746][ T8166] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 389.754664][ T8166] ? policy_nodemask+0xea/0x4e0 [ 389.759536][ T8166] alloc_pages_mpol_noprof+0x2c9/0x610 [ 389.765049][ T8166] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 389.771091][ T8166] ? __pfx_lock_release+0x10/0x10 [ 389.776163][ T8166] ? trace_lock_acquire+0x14a/0x1d0 [ 389.781436][ T8166] ? hlock_class+0x4e/0x130 [ 389.785982][ T8166] ? mark_lock+0xb5/0xc60 [ 389.790357][ T8166] alloc_skb_with_frags+0x24b/0x850 [ 389.795607][ T8166] sock_alloc_send_pskb+0x7f1/0x980 [ 389.800846][ T8166] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 389.806594][ T8166] ? __lock_acquire+0xbdd/0x3ce0 [ 389.811545][ T8166] ? hlock_class+0x4e/0x130 [ 389.816061][ T8166] ? __lock_acquire+0xbdd/0x3ce0 [ 389.821015][ T8166] tun_get_user+0xd3d/0x3d80 [ 389.825638][ T8166] ? find_held_lock+0x2d/0x110 [ 389.830428][ T8166] ? __pfx_tun_get_user+0x10/0x10 [ 389.835476][ T8166] ? find_held_lock+0x2d/0x110 [ 389.840281][ T8166] ? __pfx_lock_release+0x10/0x10 [ 389.845355][ T8166] tun_chr_write_iter+0xdc/0x210 [ 389.850346][ T8166] vfs_write+0x6b5/0x1140 [ 389.854731][ T8166] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 389.860331][ T8166] ? trace_lock_acquire+0x14a/0x1d0 [ 389.865591][ T8166] ? __pfx_vfs_write+0x10/0x10 [ 389.870428][ T8166] ? __fget_files+0x40/0x3f0 [ 389.875088][ T8166] ksys_write+0x12f/0x260 [ 389.879450][ T8166] ? __pfx_ksys_write+0x10/0x10 [ 389.884339][ T8166] do_syscall_64+0xcd/0x250 [ 389.888868][ T8166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.894778][ T8166] RIP: 0033:0x7f614fd7cadf [ 389.899201][ T8166] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 389.918830][ T8166] RSP: 002b:00007f6150b7e000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 389.927262][ T8166] RAX: ffffffffffffffda RBX: 00007f614ff36058 RCX: 00007f614fd7cadf [ 389.935249][ T8166] RDX: 0000000000011dc0 RSI: 00000000200001c0 RDI: 00000000000000c8 [ 389.943225][ T8166] RBP: 00007f6150b7e090 R08: 0000000000000000 R09: 0000000000000000 [ 389.951206][ T8166] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000001 [ 389.959190][ T8166] R13: 0000000000000001 R14: 00007f614ff36058 R15: 00007fff8894f748 [ 389.967184][ T8166] [ 390.383680][ T5226] Bluetooth: hci3: command tx timeout [ 390.932166][ T8183] netlink: 36 bytes leftover after parsing attributes in process `syz.0.531'. [ 390.941735][ T8183] netlink: 16 bytes leftover after parsing attributes in process `syz.0.531'. [ 390.951180][ T8183] netlink: 36 bytes leftover after parsing attributes in process `syz.0.531'. [ 390.971870][ T8183] netlink: 36 bytes leftover after parsing attributes in process `syz.0.531'. [ 391.217963][ T8190] syz.2.532 (8190): /proc/8184/oom_adj is deprecated, please use /proc/8184/oom_score_adj instead. [ 391.799877][ T7958] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.902530][ T8124] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.920602][ T8124] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.957795][ T8124] bridge_slave_0: entered allmulticast mode [ 391.996195][ T8124] bridge_slave_0: entered promiscuous mode [ 392.081581][ T7958] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.127240][ T8124] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.150907][ T8124] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.204401][ T8124] bridge_slave_1: entered allmulticast mode [ 392.255880][ T8124] bridge_slave_1: entered promiscuous mode [ 392.414733][ T5226] Bluetooth: hci3: command tx timeout [ 392.508675][ T7958] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.660914][ T8124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.731977][ T8124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.849350][ T7958] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.182734][ T8124] team0: Port device team_slave_0 added [ 393.326323][ T8218] netlink: 'syz.0.536': attribute type 3 has an invalid length. [ 393.331230][ T8219] netlink: 'syz.0.536': attribute type 1 has an invalid length. [ 393.419444][ T8218] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.536'. [ 393.641063][ T8124] team0: Port device team_slave_1 added [ 394.040178][ T8124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.081326][ T8124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.147712][ T8124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.170731][ T8124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.188443][ T8124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.243455][ T8124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.665447][ T5226] Bluetooth: hci3: command tx timeout [ 396.777375][ T8124] hsr_slave_0: entered promiscuous mode [ 397.106792][ T9] libceph: connect (1)[c::]:6789 error -101 [ 397.353623][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 397.569666][ T8124] hsr_slave_1: entered promiscuous mode [ 397.631877][ T8255] ceph: No mds server is up or the cluster is laggy [ 397.701424][ T8124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 397.789534][ T8124] Cannot create hsr debugfs directory [ 397.857506][ T7958] bridge_slave_1: left allmulticast mode [ 397.876045][ T7958] bridge_slave_1: left promiscuous mode [ 397.883087][ T7958] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.941193][ T7958] bridge_slave_0: left allmulticast mode [ 397.960488][ T7958] bridge_slave_0: left promiscuous mode [ 397.977933][ T8264] netlink: 36 bytes leftover after parsing attributes in process `syz.2.543'. [ 397.987185][ T8264] netlink: 16 bytes leftover after parsing attributes in process `syz.2.543'. [ 397.996264][ T8264] netlink: 36 bytes leftover after parsing attributes in process `syz.2.543'. [ 398.005525][ T8264] netlink: 36 bytes leftover after parsing attributes in process `syz.2.543'. [ 398.102904][ T7958] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.157992][ T7958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.195427][ T7958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.227146][ T7958] bond0 (unregistering): Released all slaves [ 402.909464][ T7958] hsr_slave_0: left promiscuous mode [ 402.946744][ T7958] hsr_slave_1: left promiscuous mode [ 403.419954][ T8351] netlink: 'syz.4.553': attribute type 1 has an invalid length. [ 403.434621][ T7958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.455996][ T7958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.565047][ T7958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.689818][ T7958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.012781][ T7958] veth1_macvtap: left promiscuous mode [ 404.018961][ T30] audit: type=1400 audit(1863919348.438:471): avc: denied { write } for pid=8353 comm="syz.2.556" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 404.054714][ T8355] FAULT_INJECTION: forcing a failure. [ 404.054714][ T8355] name failslab, interval 1, probability 0, space 0, times 0 [ 404.074311][ T7958] veth0_macvtap: left promiscuous mode [ 404.083568][ T7958] veth1_vlan: left promiscuous mode [ 404.088922][ T7958] veth0_vlan: left promiscuous mode [ 404.093569][ T8355] CPU: 1 UID: 0 PID: 8355 Comm: syz.2.556 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 404.104764][ T8355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 404.114864][ T8355] Call Trace: [ 404.118193][ T8355] [ 404.121166][ T8355] dump_stack_lvl+0x16c/0x1f0 [ 404.125923][ T8355] should_fail_ex+0x497/0x5b0 [ 404.130646][ T8355] ? fs_reclaim_acquire+0xae/0x150 [ 404.135823][ T8355] should_failslab+0xc2/0x120 [ 404.140551][ T8355] __kmalloc_node_track_caller_noprof+0xcf/0x430 [ 404.146953][ T8355] ? __request_module+0x2e4/0x6c0 [ 404.152023][ T8355] kstrdup+0x3c/0x70 [ 404.155957][ T8355] __request_module+0x2e4/0x6c0 [ 404.160853][ T8355] ? fbcon_set_con2fb_map_ioctl+0x1c2/0x220 [ 404.166805][ T8355] ? __pfx___request_module+0x10/0x10 [ 404.172221][ T8355] ? __might_fault+0x13b/0x190 [ 404.177037][ T8355] ? __pfx_lock_release+0x10/0x10 [ 404.182106][ T8355] ? trace_lock_acquire+0x14a/0x1d0 [ 404.187378][ T8355] ? lock_acquire+0x2f/0xb0 [ 404.191918][ T8355] ? __might_fault+0xe3/0x190 [ 404.196651][ T8355] ? __might_fault+0xe3/0x190 [ 404.201395][ T8355] ? fbcon_set_con2fb_map_ioctl+0xc6/0x220 [ 404.207258][ T8355] fbcon_set_con2fb_map_ioctl+0x1c2/0x220 [ 404.213036][ T8355] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 404.219343][ T8355] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 404.225307][ T8355] do_fb_ioctl+0x32a/0x7d0 [ 404.229781][ T8355] ? __pfx_do_fb_ioctl+0x10/0x10 [ 404.234783][ T8355] ? do_vfs_ioctl+0x513/0x1990 [ 404.239640][ T8355] ? selinux_file_ioctl+0x180/0x270 [ 404.244898][ T8355] fb_ioctl+0xe5/0x150 [ 404.249014][ T8355] ? __pfx_fb_ioctl+0x10/0x10 [ 404.253744][ T8355] __x64_sys_ioctl+0x18f/0x220 [ 404.258560][ T8355] do_syscall_64+0xcd/0x250 [ 404.263117][ T8355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.269073][ T8355] RIP: 0033:0x7f614fd7dff9 [ 404.273522][ T8355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.293173][ T8355] RSP: 002b:00007f6150b9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 404.301648][ T8355] RAX: ffffffffffffffda RBX: 00007f614ff35f80 RCX: 00007f614fd7dff9 [ 404.309662][ T8355] RDX: 0000000020000140 RSI: 0000000000004610 RDI: 0000000000000003 [ 404.317688][ T8355] RBP: 00007f6150b9f090 R08: 0000000000000000 R09: 0000000000000000 [ 404.325701][ T8355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.333725][ T8355] R13: 0000000000000000 R14: 00007f614ff35f80 R15: 00007fff8894f748 [ 404.341768][ T8355] [ 406.580437][ T7958] team0 (unregistering): Port device team_slave_1 removed [ 406.625504][ T7958] team0 (unregistering): Port device team_slave_0 removed [ 407.081102][ T8348] netlink: 'syz.4.553': attribute type 3 has an invalid length. [ 407.089013][ T8348] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.553'. [ 407.672903][ T30] audit: type=1400 audit(1863919352.068:472): avc: denied { map } for pid=8385 comm="syz.2.562" path="/dev/nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 408.381163][ T30] audit: type=1400 audit(1863919352.068:473): avc: denied { execute } for pid=8385 comm="syz.2.562" path="/dev/nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 408.436073][ T30] audit: type=1400 audit(1863919352.088:474): avc: denied { setopt } for pid=8385 comm="syz.2.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 408.696956][ T30] audit: type=1400 audit(1863919353.118:475): avc: denied { create } for pid=8389 comm="syz.4.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 408.813903][ T30] audit: type=1400 audit(1863919353.168:476): avc: denied { getopt } for pid=8389 comm="syz.4.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 408.845807][ T30] audit: type=1400 audit(1863919353.228:477): avc: denied { ioctl } for pid=8389 comm="syz.4.563" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 408.879745][ T8366] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 409.082679][ T8366] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 410.029212][ T8366] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 410.046529][ T8366] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 410.199476][ T8124] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 410.203828][ T8366] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 410.239436][ T8124] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 410.246901][ T8366] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 410.285230][ T8124] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 410.331158][ T8124] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 410.539632][ T8413] netlink: 24 bytes leftover after parsing attributes in process `syz.2.566'. [ 410.649933][ T8124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.722125][ T8124] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.797990][ T5291] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.805183][ T5291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.845126][ T5291] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.852241][ T5291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.113773][ T5271] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 411.276056][ T5271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.290628][ T5271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.302851][ T5271] usb 3-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 411.312925][ T5271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.374753][ T5271] usb 3-1: config 0 descriptor?? [ 411.500406][ T8124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.591334][ T30] audit: type=1400 audit(1863919356.008:478): avc: denied { append } for pid=8419 comm="syz.2.567" name="event3" dev="devtmpfs" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 411.607035][ T8124] veth0_vlan: entered promiscuous mode [ 411.690601][ T30] audit: type=1400 audit(1863919356.008:479): avc: denied { read } for pid=8419 comm="syz.2.567" name="mice" dev="devtmpfs" ino=831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 411.706053][ T8124] veth1_vlan: entered promiscuous mode [ 411.742095][ T8441] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 411.763861][ T30] audit: type=1400 audit(1863919356.008:480): avc: denied { open } for pid=8419 comm="syz.2.567" path="/dev/input/mice" dev="devtmpfs" ino=831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 411.892426][ T8124] veth0_macvtap: entered promiscuous mode [ 411.913093][ T8124] veth1_macvtap: entered promiscuous mode [ 411.972270][ T8124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.993216][ T8124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.031173][ T8124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.077270][ T5271] wacom 0003:056A:0016.0006: Unknown device_type for 'HID 056a:0016'. Assuming pen. [ 412.098084][ T8124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.117834][ T8124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.134768][ T5271] wacom 0003:056A:0016.0006: hidraw0: USB HID v0.00 Device [HID 056a:0016] on usb-dummy_hcd.2-1/input0 [ 412.150297][ T8124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.183477][ T8124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.192451][ T5271] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0016.0006/input/input20 [ 412.210128][ T8124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.242980][ T8124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.281341][ T8124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.318031][ T8124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.345156][ T8124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.366595][ T8124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.382990][ T8124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.401183][ T8124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.421420][ T8124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.432301][ T8124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.452817][ T8124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.522049][ T8124] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.541078][ T8124] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.551320][ T8124] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.593627][ T8124] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.779997][ T8462] fuse: Bad value for 'fd' [ 413.513543][ T938] usb 3-1: reset high-speed USB device number 12 using dummy_hcd [ 413.967273][ T8485] netlink: 48 bytes leftover after parsing attributes in process `syz.2.571'. [ 414.022006][ T30] audit: type=1400 audit(1863919358.438:481): avc: denied { unmount } for pid=7602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 414.684821][ T8] usb 3-1: USB disconnect, device number 12 [ 445.295034][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.301423][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.736306][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.742795][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 561.773687][ T31] INFO: task syz-executor:5222 blocked for more than 143 seconds. [ 561.781791][ T31] Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 561.789678][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 561.798489][ T31] task:syz-executor state:D stack:22864 pid:5222 tgid:5222 ppid:1 flags:0x00004006 [ 561.808863][ T31] Call Trace: [ 561.812173][ T31] [ 561.815225][ T31] __schedule+0xe55/0x5730 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 561.819697][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 561.825619][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 561.830875][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 561.836206][ T31] ? __pfx___schedule+0x10/0x10 [ 561.841114][ T31] ? schedule+0x298/0x350 [ 561.845632][ T31] ? __pfx_lock_release+0x10/0x10 [ 561.850707][ T31] ? trace_lock_acquire+0x14a/0x1d0 [ 561.856153][ T31] ? lock_acquire+0x2f/0xb0 [ 561.860728][ T31] ? schedule+0x1fd/0x350 [ 561.865835][ T31] schedule+0xe7/0x350 [ 561.869955][ T31] schedule_preempt_disabled+0x13/0x30 [ 561.875695][ T31] __mutex_lock+0x5b8/0x9c0 [ 561.880249][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 561.885596][ T31] ? rfkill_unregister+0xde/0x2c0 [ 561.890719][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 561.943378][ T31] ? device_del+0x6b6/0x9f0 [ 561.947975][ T31] ? __pfx_device_del+0x10/0x10 [ 561.952876][ T31] ? _raw_read_unlock+0x28/0x50 [ 561.981541][ T31] ? rfkill_unregister+0xde/0x2c0 [ 561.987313][ T31] rfkill_unregister+0xde/0x2c0 [ 561.992218][ T31] hci_unregister_dev+0x323/0x620 [ 561.997346][ T31] ? __pfx_vhci_release+0x10/0x10 [ 562.002417][ T31] vhci_release+0x79/0xf0 [ 562.006810][ T31] __fput+0x3f6/0xb60 [ 562.010837][ T31] task_work_run+0x14e/0x250 [ 562.015687][ T31] ? __pfx_task_work_run+0x10/0x10 [ 562.020845][ T31] do_exit+0xadd/0x2d70 [ 562.025135][ T31] ? get_signal+0x8f2/0x2770 [ 562.029758][ T31] ? __pfx_do_exit+0x10/0x10 [ 562.034457][ T31] ? do_raw_spin_lock+0x12d/0x2c0 [ 562.039516][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 562.045000][ T31] do_group_exit+0xd3/0x2a0 [ 562.049548][ T31] get_signal+0x25fb/0x2770 [ 562.054157][ T31] ? __pfx_child_wait_callback+0x10/0x10 [ 562.059836][ T31] ? __pfx_get_signal+0x10/0x10 [ 562.064767][ T31] ? __do_sys_wait4+0xd2/0x170 [ 562.069578][ T31] arch_do_signal_or_restart+0x90/0x7e0 [ 562.075234][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 562.081489][ T31] ? rcu_is_watching+0x12/0xc0 [ 562.086436][ T31] syscall_exit_to_user_mode+0x150/0x2a0 [ 562.092118][ T31] do_syscall_64+0xda/0x250 [ 562.097040][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.102981][ T31] RIP: 0033:0x7f18fd574257 [ 562.107485][ T31] RSP: 002b:00007ffdee140e60 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 562.115987][ T31] RAX: fffffffffffffe00 RBX: 0000000000000251 RCX: 00007f18fd574257 [ 562.124017][ T31] RDX: 0000000040000000 RSI: 00007ffdee140ebc RDI: 00000000ffffffff [ 562.132008][ T31] RBP: 00007ffdee140ebc R08: 0000000000000000 R09: 00007f18fe284080 [ 562.140069][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558b97f5eb [ 562.148107][ T31] R13: 000055558b97f590 R14: 0000000000062078 R15: 00007ffdee140f10 [ 562.156203][ T31] [ 562.159272][ T31] INFO: task kworker/0:6:5274 blocked for more than 143 seconds. [ 562.167085][ T31] Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 562.174860][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 562.183845][ T31] task:kworker/0:6 state:D stack:24352 pid:5274 tgid:5274 ppid:2 flags:0x00004000 [ 562.194161][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 562.200881][ T31] Call Trace: [ 562.204440][ T31] [ 562.207417][ T31] __schedule+0xe55/0x5730 [ 562.211880][ T31] ? __pfx_mark_lock+0x10/0x10 [ 562.216741][ T31] ? lock_acquire.part.0+0x11b/0x380 [ 562.222065][ T31] ? find_held_lock+0x2d/0x110 [ 562.227002][ T31] ? __pfx___schedule+0x10/0x10 [ 562.231922][ T31] ? schedule+0x298/0x350 [ 562.236392][ T31] ? __pfx_lock_release+0x10/0x10 [ 562.241468][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 562.246820][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 562.252068][ T31] schedule+0xe7/0x350 [ 562.256256][ T31] schedule_preempt_disabled+0x13/0x30 [ 562.261752][ T31] __mutex_lock+0x5b8/0x9c0 [ 562.266438][ T31] ? lock_acquire+0x2f/0xb0 [ 562.270989][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 562.277404][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 562.282451][ T31] ? trace_lock_acquire+0x14a/0x1d0 [ 562.287777][ T31] ? process_one_work+0x921/0x1ba0 [ 562.292960][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 562.299397][ T31] rfkill_global_led_trigger_worker+0x1b/0x160 [ 562.305703][ T31] process_one_work+0x9c5/0x1ba0 [ 562.310701][ T31] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 562.316605][ T31] ? __pfx_process_one_work+0x10/0x10 [ 562.322023][ T31] ? assign_work+0x1a0/0x250 [ 562.326747][ T31] worker_thread+0x6c8/0xf00 [ 562.331386][ T31] ? __kthread_parkme+0x148/0x220 [ 562.336841][ T31] ? __pfx_worker_thread+0x10/0x10 [ 562.341991][ T31] kthread+0x2c1/0x3a0 [ 562.346224][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 562.351501][ T31] ? __pfx_kthread+0x10/0x10 [ 562.356262][ T31] ret_from_fork+0x45/0x80 [ 562.360712][ T31] ? __pfx_kthread+0x10/0x10 [ 562.365464][ T31] ret_from_fork_asm+0x1a/0x30 [ 562.370326][ T31] [ 562.373504][ T31] INFO: task syz-executor:8124 blocked for more than 143 seconds. [ 562.381332][ T31] Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 562.389075][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 562.397930][ T31] task:syz-executor state:D stack:23856 pid:8124 tgid:8124 ppid:1 flags:0x00000004 [ 562.408978][ T31] Call Trace: [ 562.412280][ T31] [ 562.415548][ T31] __schedule+0xe55/0x5730 [ 562.420016][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 562.425490][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 562.430737][ T31] ? __pfx___schedule+0x10/0x10 [ 562.435699][ T31] ? schedule+0x298/0x350 [ 562.440065][ T31] ? __pfx_lock_release+0x10/0x10 [ 562.445184][ T31] ? trace_lock_acquire+0x14a/0x1d0 [ 562.450430][ T31] ? lock_acquire+0x2f/0xb0 [ 562.455022][ T31] ? schedule+0x1fd/0x350 [ 562.459390][ T31] schedule+0xe7/0x350 [ 562.463567][ T31] schedule_preempt_disabled+0x13/0x30 [ 562.469066][ T31] __mutex_lock+0x5b8/0x9c0 [ 562.473685][ T31] ? rfkill_fop_open+0x13b/0x750 [ 562.478682][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 562.483822][ T31] ? lockdep_init_map_type+0x16d/0x7d0 [ 562.489332][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 562.494738][ T31] ? rfkill_fop_open+0x13b/0x750 [ 562.499707][ T31] rfkill_fop_open+0x13b/0x750 [ 562.504532][ T31] ? kobject_get_unless_zero+0x157/0x1e0 [ 562.510198][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 562.515599][ T31] misc_open+0x35a/0x420 [ 562.519877][ T31] ? __pfx_misc_open+0x10/0x10 [ 562.524722][ T31] chrdev_open+0x237/0x6a0 [ 562.529166][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 562.534372][ T31] ? security_file_open+0x62a/0x9d0 [ 562.539609][ T31] do_dentry_open+0x6ca/0x1530 [ 562.544482][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 562.549462][ T31] ? inode_permission+0xdd/0x5f0 [ 562.554524][ T31] vfs_open+0x82/0x3f0 [ 562.558626][ T31] ? may_open+0x1f2/0x400 [ 562.562968][ T31] path_openat+0x1e6a/0x2d60 [ 562.567660][ T31] ? __pfx_path_openat+0x10/0x10 [ 562.572643][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 562.577926][ T31] do_filp_open+0x1dc/0x430 [ 562.582456][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 562.587545][ T31] ? find_held_lock+0x2d/0x110 [ 562.592395][ T31] ? _raw_spin_unlock+0x28/0x50 [ 562.597379][ T31] ? alloc_fd+0x2d7/0x6c0 [ 562.601757][ T31] do_sys_openat2+0x17a/0x1e0 [ 562.606487][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 562.611724][ T31] ? kmem_cache_free+0x31d/0x4b0 [ 562.616769][ T31] __x64_sys_openat+0x175/0x210 [ 562.621670][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 562.627159][ T31] do_syscall_64+0xcd/0x250 [ 562.631723][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.637724][ T31] RIP: 0033:0x7f0b6e17c990 [ 562.642160][ T31] RSP: 002b:00007fff725f2690 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 562.650883][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f0b6e17c990 [ 562.658991][ T31] RDX: 0000000000000002 RSI: 00007f0b6e1f0be7 RDI: 00000000ffffff9c [ 562.667019][ T31] RBP: 00007f0b6e1f0be7 R08: 0000000000000000 R09: 0000000000000000 [ 562.675076][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000c [ 562.683073][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 562.691180][ T31] [ 562.694309][ T31] INFO: task syz.3.550:8321 blocked for more than 144 seconds. [ 562.701866][ T31] Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 562.709559][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 562.718324][ T31] task:syz.3.550 state:D stack:27472 pid:8321 tgid:8318 ppid:5222 flags:0x00004002 [ 562.728638][ T31] Call Trace: [ 562.731932][ T31] [ 562.735136][ T31] __schedule+0xe55/0x5730 [ 562.739596][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 562.745333][ T31] ? lockdep_hardirqs_on_prepare+0x371/0x420 [ 562.751386][ T31] ? __pfx___schedule+0x10/0x10 [ 562.756876][ T31] ? schedule+0x298/0x350 [ 562.761267][ T31] ? __pfx_lock_release+0x10/0x10 [ 562.766387][ T31] ? trace_lock_acquire+0x14a/0x1d0 [ 562.771629][ T31] ? lock_acquire+0x2f/0xb0 [ 562.776201][ T31] ? schedule+0x1fd/0x350 [ 562.780575][ T31] schedule+0xe7/0x350 [ 562.784726][ T31] schedule_preempt_disabled+0x13/0x30 [ 562.790223][ T31] __mutex_lock+0x5b8/0x9c0 [ 562.794863][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 562.800103][ T31] ? rfkill_unregister+0xde/0x2c0 [ 562.805204][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 562.810324][ T31] ? device_del+0x6b6/0x9f0 [ 562.814938][ T31] ? __pfx_device_del+0x10/0x10 [ 562.819834][ T31] ? rfkill_unregister+0xde/0x2c0 [ 562.824922][ T31] rfkill_unregister+0xde/0x2c0 [ 562.829831][ T31] nfc_unregister_device+0x94/0x330 [ 562.835153][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 562.840925][ T31] virtual_ncidev_close+0x4b/0xa0 [ 562.846018][ T31] __fput+0x3f6/0xb60 [ 562.850066][ T31] task_work_run+0x14e/0x250 [ 562.854744][ T31] ? __pfx_task_work_run+0x10/0x10 [ 562.859882][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 562.865360][ T31] do_exit+0xadd/0x2d70 [ 562.869566][ T31] ? get_signal+0x8f2/0x2770 [ 562.874253][ T31] ? __pfx_do_exit+0x10/0x10 [ 562.878900][ T31] ? do_raw_spin_lock+0x12d/0x2c0 [ 562.884007][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 562.889429][ T31] do_group_exit+0xd3/0x2a0 [ 562.894052][ T31] get_signal+0x25fb/0x2770 [ 562.898625][ T31] ? __pfx_get_signal+0x10/0x10 [ 562.903594][ T31] arch_do_signal_or_restart+0x90/0x7e0 [ 562.909191][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 562.915482][ T31] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 562.921088][ T31] syscall_exit_to_user_mode+0x150/0x2a0 [ 562.926825][ T31] do_syscall_64+0xda/0x250 [ 562.931383][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.937374][ T31] RIP: 0033:0x7f18fd57dff9 [ 562.941831][ T31] RSP: 002b:00007f18fcfde038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 562.950365][ T31] RAX: 0000000000010106 RBX: 00007f18fd736058 RCX: 00007f18fd57dff9 [ 562.958433][ T31] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 562.966485][ T31] RBP: 00007f18fd5f0296 R08: 0000000000000000 R09: 0000000000000000 [ 562.974694][ T31] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 562.982688][ T31] R13: 0000000000000000 R14: 00007f18fd736058 R15: 00007ffdee140af8 [ 562.990878][ T31] [ 562.994016][ T31] INFO: task syz.0.558:8366 blocked for more than 144 seconds. [ 563.001579][ T31] Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 563.009278][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 563.018020][ T31] task:syz.0.558 state:D stack:23984 pid:8366 tgid:8365 ppid:7764 flags:0x00004006 [ 563.028331][ T31] Call Trace: [ 563.031632][ T31] [ 563.034641][ T31] __schedule+0xe55/0x5730 [ 563.039109][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 563.044419][ T31] ? lockdep_hardirqs_on_prepare+0x371/0x420 [ 563.050446][ T31] ? __pfx___schedule+0x10/0x10 [ 563.056334][ T31] ? schedule+0x298/0x350 [ 563.060944][ T31] ? __pfx_lock_release+0x10/0x10 [ 563.066194][ T31] ? trace_lock_acquire+0x14a/0x1d0 [ 563.071450][ T31] ? lock_acquire+0x2f/0xb0 [ 563.076035][ T31] ? schedule+0x1fd/0x350 [ 563.080415][ T31] schedule+0xe7/0x350 [ 563.084586][ T31] schedule_preempt_disabled+0x13/0x30 [ 563.090089][ T31] __mutex_lock+0x5b8/0x9c0 [ 563.094844][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 563.099491][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 563.104605][ T31] ? find_held_lock+0x2d/0x110 [ 563.109435][ T31] ? rfkill_set_block+0x198/0x560 [ 563.114548][ T31] ? __pfx_lock_release+0x10/0x10 [ 563.119600][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 563.124248][ T31] nfc_dev_down+0x2d/0x2e0 [ 563.128695][ T31] nfc_rfkill_set_block+0x39/0xe0 [ 563.133942][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 563.139710][ T31] rfkill_set_block+0x203/0x560 [ 563.144647][ T31] rfkill_fop_write+0x2ce/0x570 [ 563.149541][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 563.155016][ T31] ? bpf_lsm_file_permission+0x9/0x10 [ 563.160442][ T31] ? security_file_permission+0x71/0x210 [ 563.166166][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 563.171580][ T31] vfs_write+0x28e/0x1140 [ 563.176397][ T31] ? __fget_files+0x23a/0x3f0 [ 563.181125][ T31] ? __pfx_lock_release+0x10/0x10 [ 563.186232][ T31] ? trace_lock_acquire+0x14a/0x1d0 [ 563.191511][ T31] ? __pfx_vfs_write+0x10/0x10 [ 563.196380][ T31] ? lock_acquire+0x2f/0xb0 [ 563.200915][ T31] ? __fget_files+0x40/0x3f0 [ 563.205748][ T31] ? __fget_files+0x244/0x3f0 [ 563.210475][ T31] ksys_write+0x1fa/0x260 [ 563.215315][ T31] ? __pfx_ksys_write+0x10/0x10 [ 563.220243][ T31] do_syscall_64+0xcd/0x250 [ 563.224834][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.230771][ T31] RIP: 0033:0x7f9da417dff9 [ 563.235297][ T31] RSP: 002b:00007f9da501c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 563.243805][ T31] RAX: ffffffffffffffda RBX: 00007f9da4335f80 RCX: 00007f9da417dff9 [ 563.251835][ T31] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000004 [ 563.259882][ T31] RBP: 00007f9da41f0296 R08: 0000000000000000 R09: 0000000000000000 [ 563.267923][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.276033][ T31] R13: 0000000000000000 R14: 00007f9da4335f80 R15: 00007ffe5b323fc8 [ 563.284098][ T31] [ 563.287187][ T31] INFO: task syz-executor:8449 blocked for more than 144 seconds. [ 563.295119][ T31] Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 563.302776][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 563.311769][ T31] task:syz-executor state:D stack:28384 pid:8449 tgid:8449 ppid:1 flags:0x00004004 [ 563.322188][ T31] Call Trace: [ 563.325543][ T31] [ 563.328498][ T31] __schedule+0xe55/0x5730 [ 563.332927][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 563.338216][ T31] ? __pfx_mark_lock+0x10/0x10 [ 563.343014][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 563.348283][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 563.353570][ T31] ? __pfx___schedule+0x10/0x10 [ 563.358467][ T31] ? schedule+0x298/0x350 [ 563.362828][ T31] ? __pfx_lock_release+0x10/0x10 [ 563.367943][ T31] ? trace_lock_acquire+0x14a/0x1d0 [ 563.373194][ T31] ? lock_acquire+0x2f/0xb0 [ 563.377859][ T31] ? schedule+0x1fd/0x350 [ 563.382366][ T31] schedule+0xe7/0x350 [ 563.386529][ T31] schedule_preempt_disabled+0x13/0x30 [ 563.392034][ T31] __mutex_lock+0x5b8/0x9c0 [ 563.396637][ T31] ? __pfx___debug_object_init+0x10/0x10 [ 563.402308][ T31] ? rfkill_register+0x3a/0xb40 [ 563.407258][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 563.412340][ T31] ? lockdep_init_map_type+0x16d/0x7d0 [ 563.417928][ T31] ? __init_waitqueue_head+0xca/0x150 [ 563.423572][ T31] ? rfkill_register+0x3a/0xb40 [ 563.428461][ T31] ? rfkill_alloc+0x25b/0x330 [ 563.433163][ T31] rfkill_register+0x3a/0xb40 [ 563.437928][ T31] hci_register_dev+0x3cc/0xc60 [ 563.442822][ T31] __vhci_create_device+0x344/0x7d0 [ 563.448116][ T31] vhci_write+0x2c3/0x470 [ 563.452491][ T31] vfs_write+0x6b5/0x1140 [ 563.456920][ T31] ? __pfx_vhci_write+0x10/0x10 [ 563.461821][ T31] ? __pfx_vfs_write+0x10/0x10 [ 563.466662][ T31] ? find_held_lock+0x2d/0x110 [ 563.471495][ T31] ? __pfx_lock_release+0x10/0x10 [ 563.476598][ T31] ? trace_lock_acquire+0x14a/0x1d0 [ 563.481838][ T31] ksys_write+0x12f/0x260 [ 563.486270][ T31] ? __pfx_ksys_write+0x10/0x10 [ 563.491178][ T31] ? do_user_addr_fault+0x83d/0x13f0 [ 563.496541][ T31] do_syscall_64+0xcd/0x250 [ 563.501097][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.507119][ T31] RIP: 0033:0x7f5e9fb7caa0 [ 563.511601][ T31] RSP: 002b:00007ffdfda74b78 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 563.520087][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f5e9fb7caa0 [ 563.528150][ T31] RDX: 0000000000000002 RSI: 00007ffdfda74b8a RDI: 00000000000000ca [ 563.536395][ T31] RBP: 00007f5e9fd36a38 R08: 0000000000000000 R09: 00007f5ea086d6c0 [ 563.544465][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 563.552475][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 563.560559][ T31] [ 563.563687][ T31] INFO: task syz.4.570:8458 blocked for more than 145 seconds. [ 563.571251][ T31] Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 563.579090][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 563.587809][ T31] task:syz.4.570 state:D stack:27952 pid:8458 tgid:8456 ppid:6612 flags:0x00000004 [ 563.598096][ T31] Call Trace: [ 563.601402][ T31] [ 563.604426][ T31] __schedule+0xe55/0x5730 [ 563.608882][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 563.614156][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 563.619381][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 563.624658][ T31] ? __pfx___schedule+0x10/0x10 [ 563.629547][ T31] ? schedule+0x298/0x350 [ 563.633980][ T31] ? __pfx_lock_release+0x10/0x10 [ 563.639038][ T31] ? trace_lock_acquire+0x14a/0x1d0 [ 563.644490][ T31] ? lock_acquire+0x2f/0xb0 [ 563.649029][ T31] ? schedule+0x1fd/0x350 [ 563.653439][ T31] schedule+0xe7/0x350 [ 563.657560][ T31] schedule_preempt_disabled+0x13/0x30 [ 563.663066][ T31] __mutex_lock+0x5b8/0x9c0 [ 563.667668][ T31] ? misc_open+0x63/0x420 [ 563.672062][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 563.677213][ T31] ? chrdev_open+0x10e/0x6a0 [ 563.681830][ T31] ? __pfx_lock_release+0x10/0x10 [ 563.686991][ T31] ? kobject_get_unless_zero+0x157/0x1e0 [ 563.692666][ T31] ? __pfx_misc_open+0x10/0x10 [ 563.697614][ T31] ? misc_open+0x63/0x420 [ 563.701987][ T31] misc_open+0x63/0x420 [ 563.706232][ T31] ? __pfx_misc_open+0x10/0x10 [ 563.711049][ T31] chrdev_open+0x237/0x6a0 [ 563.715578][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 563.720554][ T31] ? security_file_open+0x62a/0x9d0 [ 563.725830][ T31] do_dentry_open+0x6ca/0x1530 [ 563.730645][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 563.735657][ T31] ? inode_permission+0xdd/0x5f0 [ 563.740639][ T31] vfs_open+0x82/0x3f0 [ 563.744796][ T31] ? may_open+0x1f2/0x400 [ 563.749177][ T31] path_openat+0x1e6a/0x2d60 [ 563.753964][ T31] ? __pfx_path_openat+0x10/0x10 [ 563.758938][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 563.764219][ T31] do_filp_open+0x1dc/0x430 [ 563.768771][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 563.774121][ T31] ? find_held_lock+0x2d/0x110 [ 563.779109][ T31] ? _raw_spin_unlock+0x28/0x50 [ 563.784062][ T31] ? alloc_fd+0x2d7/0x6c0 [ 563.788454][ T31] do_sys_openat2+0x17a/0x1e0 [ 563.793172][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 563.798490][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 563.803855][ T31] __x64_sys_openat+0x175/0x210 [ 563.808757][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 563.814259][ T31] do_syscall_64+0xcd/0x250 [ 563.818820][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.824841][ T31] RIP: 0033:0x7f66ca57dff9 [ 563.829281][ T31] RSP: 002b:00007f66cb3d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 563.837777][ T31] RAX: ffffffffffffffda RBX: 00007f66ca735f80 RCX: 00007f66ca57dff9 [ 563.845812][ T31] RDX: 0000000000000042 RSI: 0000000020001580 RDI: ffffffffffffff9c [ 563.853901][ T31] RBP: 00007f66ca5f0296 R08: 0000000000000000 R09: 0000000000000000 [ 563.861906][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.870124][ T31] R13: 0000000000000000 R14: 00007f66ca735f80 R15: 00007ffff7065188 [ 563.878219][ T31] [ 563.881274][ T31] INFO: task syz.2.572:8492 blocked for more than 145 seconds. [ 563.888911][ T31] Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 563.896619][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 563.905344][ T31] task:syz.2.572 state:D stack:26912 pid:8492 tgid:8491 ppid:7602 flags:0x00000004 [ 563.915664][ T31] Call Trace: [ 563.918968][ T31] [ 563.921921][ T31] __schedule+0xe55/0x5730 [ 563.926407][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 563.931648][ T31] ? lockdep_hardirqs_on_prepare+0x370/0x420 [ 563.937828][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 563.943079][ T31] ? __pfx___schedule+0x10/0x10 [ 563.948005][ T31] ? schedule+0x298/0x350 [ 563.952370][ T31] ? __pfx_lock_release+0x10/0x10 [ 563.957514][ T31] ? trace_lock_acquire+0x14a/0x1d0 [ 563.962755][ T31] ? lock_acquire+0x2f/0xb0 [ 563.967310][ T31] ? schedule+0x1fd/0x350 [ 563.971680][ T31] schedule+0xe7/0x350 [ 563.976000][ T31] schedule_preempt_disabled+0x13/0x30 [ 563.981515][ T31] __mutex_lock+0x5b8/0x9c0 [ 563.986078][ T31] ? misc_open+0x63/0x420 [ 563.990454][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 563.995671][ T31] ? chrdev_open+0x10e/0x6a0 [ 564.000316][ T31] ? __pfx_lock_release+0x10/0x10 [ 564.005454][ T31] ? kobject_get_unless_zero+0x157/0x1e0 [ 564.011125][ T31] ? __pfx_misc_open+0x10/0x10 [ 564.016184][ T31] ? misc_open+0x63/0x420 [ 564.020579][ T31] misc_open+0x63/0x420 [ 564.024837][ T31] ? __pfx_misc_open+0x10/0x10 [ 564.029638][ T31] chrdev_open+0x237/0x6a0 [ 564.034138][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 564.039126][ T31] ? security_file_open+0x62a/0x9d0 [ 564.044418][ T31] do_dentry_open+0x6ca/0x1530 [ 564.049236][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 564.054290][ T31] vfs_open+0x82/0x3f0 [ 564.058390][ T31] ? may_open+0x1f2/0x400 [ 564.062733][ T31] path_openat+0x1e6a/0x2d60 [ 564.067429][ T31] ? __pfx_path_openat+0x10/0x10 [ 564.072412][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 564.077713][ T31] do_filp_open+0x1dc/0x430 [ 564.082244][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 564.087506][ T31] ? find_held_lock+0x2d/0x110 [ 564.092347][ T31] ? _raw_spin_unlock+0x28/0x50 [ 564.097277][ T31] ? alloc_fd+0x2d7/0x6c0 [ 564.101654][ T31] do_sys_openat2+0x17a/0x1e0 [ 564.106410][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 564.111649][ T31] __x64_sys_openat+0x175/0x210 [ 564.116621][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 564.122073][ T31] do_syscall_64+0xcd/0x250 [ 564.126652][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.132586][ T31] RIP: 0033:0x7f614fd7dff9 [ 564.137123][ T31] RSP: 002b:00007f6150b9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 564.145635][ T31] RAX: ffffffffffffffda RBX: 00007f614ff35f80 RCX: 00007f614fd7dff9 [ 564.153711][ T31] RDX: 0000000000048241 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 564.161709][ T31] RBP: 00007f614fdf0296 R08: 0000000000000000 R09: 0000000000000000 [ 564.169777][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.178056][ T31] R13: 0000000000000000 R14: 00007f614ff35f80 R15: 00007fff8894f748 [ 564.186150][ T31] [ 564.189197][ T31] INFO: task syz-executor:8562 blocked for more than 145 seconds. [ 564.198552][ T31] Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 564.206261][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 564.215005][ T31] task:syz-executor state:D stack:28360 pid:8562 tgid:8562 ppid:1 flags:0x00000004 [ 564.225333][ T31] Call Trace: [ 564.228637][ T31] [ 564.231585][ T31] __schedule+0xe55/0x5730 [ 564.236090][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 564.241323][ T31] ? lockdep_hardirqs_on_prepare+0x371/0x420 [ 564.247425][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 564.252669][ T31] ? __pfx___schedule+0x10/0x10 [ 564.257675][ T31] ? schedule+0x298/0x350 [ 564.262223][ T31] ? __pfx_lock_release+0x10/0x10 [ 564.267306][ T31] ? trace_lock_acquire+0x14a/0x1d0 [ 564.272574][ T31] ? lock_acquire+0x2f/0xb0 [ 564.277173][ T31] ? schedule+0x1fd/0x350 [ 564.281540][ T31] schedule+0xe7/0x350 [ 564.285743][ T31] schedule_preempt_disabled+0x13/0x30 [ 564.291250][ T31] __mutex_lock+0x5b8/0x9c0 [ 564.295876][ T31] ? misc_open+0x63/0x420 [ 564.300251][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 564.305615][ T31] ? chrdev_open+0x10e/0x6a0 [ 564.310242][ T31] ? __pfx_lock_release+0x10/0x10 [ 564.315409][ T31] ? kobject_get_unless_zero+0x157/0x1e0 [ 564.321098][ T31] ? __pfx_misc_open+0x10/0x10 [ 564.325978][ T31] ? misc_open+0x63/0x420 [ 564.330373][ T31] misc_open+0x63/0x420 [ 564.334668][ T31] ? __pfx_misc_open+0x10/0x10 [ 564.339471][ T31] chrdev_open+0x237/0x6a0 [ 564.344041][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 564.349028][ T31] ? security_file_open+0x62a/0x9d0 [ 564.354339][ T31] do_dentry_open+0x6ca/0x1530 [ 564.359152][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 564.364191][ T31] ? inode_permission+0xdd/0x5f0 [ 564.369175][ T31] vfs_open+0x82/0x3f0 [ 564.373255][ T31] ? may_open+0x1f2/0x400 [ 564.377666][ T31] path_openat+0x1e6a/0x2d60 [ 564.382312][ T31] ? __pfx_path_openat+0x10/0x10 [ 564.387338][ T31] ? handle_mm_fault+0x497/0xaa0 [ 564.392313][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 564.397587][ T31] do_filp_open+0x1dc/0x430 [ 564.402116][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 564.407268][ T31] ? find_held_lock+0x2d/0x110 [ 564.412093][ T31] ? _raw_spin_unlock+0x28/0x50 [ 564.417446][ T31] ? alloc_fd+0x2d7/0x6c0 [ 564.421811][ T31] do_sys_openat2+0x17a/0x1e0 [ 564.426577][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 564.431818][ T31] ? fd_install+0x242/0x750 [ 564.436424][ T31] __x64_sys_openat+0x175/0x210 [ 564.441321][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 564.446849][ T31] do_syscall_64+0xcd/0x250 [ 564.451428][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.457457][ T31] RIP: 0033:0x7f2cd517c911 [ 564.461910][ T31] RSP: 002b:00007fff3b01b300 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 564.470475][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f2cd517c911 [ 564.480225][ T31] RDX: 0000000000000002 RSI: 00007f2cd51f0b3c RDI: 00000000ffffff9c [ 564.488293][ T31] RBP: 00007f2cd51f0b3c R08: 0000000000000000 R09: 00007f2cd5e6d6c0 [ 564.496569][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 564.504717][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 564.512800][ T31] [ 564.515899][ T31] [ 564.515899][ T31] Showing all locks held in the system: [ 564.523865][ T31] 1 lock held by khungtaskd/31: [ 564.528730][ T31] #0: ffffffff8e1b8380 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390 [ 564.538734][ T31] 1 lock held by klogd/4663: [ 564.543411][ T31] #0: ffff8880b863ee98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 564.553432][ T31] 2 locks held by getty/4970: [ 564.558132][ T31] #0: ffff88814d1d80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 564.568026][ T31] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 [ 564.578270][ T31] 1 lock held by syz-executor/5222: [ 564.583556][ T31] #0: ffffffff9036f9e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xde/0x2c0 [ 564.593804][ T31] 3 locks held by kworker/0:6/5274: [ 564.599031][ T31] #0: ffff88801b080948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 564.609631][ T31] #1: ffffc9000453fd80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 564.623142][ T31] #2: ffffffff9036f9e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 564.634906][ T31] 2 locks held by kworker/u8:20/7958: [ 564.640346][ T31] 2 locks held by syz-executor/8124: [ 564.646611][ T31] #0: ffffffff8eea4c08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 [ 564.655202][ T31] #1: ffffffff9036f9e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_open+0x13b/0x750 [ 564.665392][ T31] 2 locks held by syz.3.550/8321: [ 564.670439][ T31] #0: ffff888065e03100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x60/0x330 [ 564.680351][ T31] #1: ffffffff9036f9e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xde/0x2c0 [ 564.690674][ T31] 2 locks held by syz.0.558/8366: [ 564.695795][ T31] #0: ffffffff9036f9e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x168/0x570 [ 564.706839][ T31] #1: ffff888065e03100 (&dev->mutex){....}-{3:3}, at: nfc_dev_down+0x2d/0x2e0 [ 564.715972][ T31] 2 locks held by syz-executor/8449: [ 564.721275][ T31] #0: ffff88806aa9d118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_write+0x2b7/0x470 [ 564.730891][ T31] #1: ffffffff9036f9e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x3a/0xb40 [ 564.740992][ T31] 1 lock held by syz.4.570/8458: [ 564.746021][ T31] #0: ffffffff8eea4c08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 [ 564.754629][ T31] 1 lock held by syz.2.572/8492: [ 564.759587][ T31] #0: ffffffff8eea4c08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 [ 564.768252][ T31] 1 lock held by syz-executor/8562: [ 564.773747][ T31] #0: ffffffff8eea4c08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 [ 564.782286][ T31] 1 lock held by syz-executor/8579: [ 564.787527][ T31] #0: ffffffff8eea4c08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 [ 564.796068][ T31] 1 lock held by syz-executor/8581: [ 564.801267][ T31] #0: ffffffff8eea4c08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 [ 564.809852][ T31] 1 lock held by syz-executor/8583: [ 564.815158][ T31] #0: ffffffff8eea4c08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 [ 564.823822][ T31] 1 lock held by syz-executor/8585: [ 564.829052][ T31] #0: ffffffff8eea4c08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 [ 564.837631][ T31] 1 lock held by syz-executor/8587: [ 564.842824][ T31] #0: ffffffff8eea4c08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 [ 564.851399][ T31] 1 lock held by syz-executor/8589: [ 564.856693][ T31] #0: ffffffff8eea4c08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 [ 564.865283][ T31] 1 lock held by syz-executor/8591: [ 564.870499][ T31] #0: ffffffff8eea4c08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 [ 564.879074][ T31] 1 lock held by syz-executor/8597: [ 564.884331][ T31] #0: ffffffff8eea4c08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 [ 564.892855][ T31] 1 lock held by syz-executor/8599: [ 564.898184][ T31] #0: ffffffff8eea4c08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 [ 564.906801][ T31] 1 lock held by syz-executor/8601: [ 564.912056][ T31] #0: ffffffff8eea4c08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 [ 564.920615][ T31] 1 lock held by syz-executor/8603: [ 564.925887][ T31] #0: ffffffff8eea4c08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 [ 564.934426][ T31] 1 lock held by syz-executor/8605: [ 564.939644][ T31] #0: ffffffff8eea4c08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 [ 564.948231][ T31] [ 564.950571][ T31] ============================================= [ 564.950571][ T31] [ 564.959059][ T31] NMI backtrace for cpu 0 [ 564.963408][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 564.973929][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 564.983983][ T31] Call Trace: [ 564.987260][ T31] [ 564.990191][ T31] dump_stack_lvl+0x116/0x1f0 [ 564.994887][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 564.999835][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 565.005835][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 565.011826][ T31] watchdog+0xf0c/0x1240 [ 565.016101][ T31] ? __pfx_watchdog+0x10/0x10 [ 565.020799][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 565.026039][ T31] ? __kthread_parkme+0x148/0x220 [ 565.031091][ T31] ? __pfx_watchdog+0x10/0x10 [ 565.035794][ T31] kthread+0x2c1/0x3a0 [ 565.039886][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 565.045107][ T31] ? __pfx_kthread+0x10/0x10 [ 565.049718][ T31] ret_from_fork+0x45/0x80 [ 565.054148][ T31] ? __pfx_kthread+0x10/0x10 [ 565.058759][ T31] ret_from_fork_asm+0x1a/0x30 [ 565.063562][ T31] [ 565.067140][ T31] Sending NMI from CPU 0 to CPUs 1: [ 565.072381][ C1] NMI backtrace for cpu 1 [ 565.072393][ C1] CPU: 1 UID: 0 PID: 7958 Comm: kworker/u8:20 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 565.072421][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 565.072435][ C1] Workqueue: bat_events batadv_nc_worker [ 565.072463][ C1] RIP: 0010:rcu_is_watching+0x60/0xc0 [ 565.072493][ C1] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 75 5c 48 03 1c ed 80 3b a6 8d 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 0f b6 14 02 <48> 89 d8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 24 8b 03 c1 e8 02 [ 565.072514][ C1] RSP: 0018:ffffc90003edfb78 EFLAGS: 00000a02 [ 565.072531][ C1] RAX: dffffc0000000000 RBX: ffff8880b8738128 RCX: ffffffff8ae6932b [ 565.072547][ C1] RDX: 0000000000000000 RSI: ffffffff8bd1aa00 RDI: ffffffff8da63b88 [ 565.072561][ C1] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 565.072575][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 565.072589][ C1] R13: 000000000003dbcc R14: 0000000000000000 R15: dffffc0000000000 [ 565.072603][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 565.072625][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 565.072640][ C1] CR2: 000055bf1a4aae30 CR3: 000000000df7c000 CR4: 00000000003526f0 [ 565.072655][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 565.072669][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 565.072682][ C1] Call Trace: [ 565.072688][ C1] [ 565.072696][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 565.072724][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 565.072759][ C1] ? nmi_handle+0x1a9/0x5c0 [ 565.072783][ C1] ? rcu_is_watching+0x60/0xc0 [ 565.072811][ C1] ? default_do_nmi+0x6a/0x160 [ 565.072835][ C1] ? exc_nmi+0x170/0x1e0 [ 565.072858][ C1] ? end_repeat_nmi+0xf/0x53 [ 565.072893][ C1] ? batadv_nc_worker+0x17b/0x1060 [ 565.072920][ C1] ? rcu_is_watching+0x60/0xc0 [ 565.072948][ C1] ? rcu_is_watching+0x60/0xc0 [ 565.072976][ C1] ? rcu_is_watching+0x60/0xc0 [ 565.073003][ C1] [ 565.073010][ C1] [ 565.073017][ C1] batadv_nc_worker+0xc02/0x1060 [ 565.073048][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 565.073075][ C1] ? rcu_is_watching+0x12/0xc0 [ 565.073106][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 565.073136][ C1] ? process_one_work+0x921/0x1ba0 [ 565.073159][ C1] ? lock_acquire+0x2f/0xb0 [ 565.073179][ C1] ? process_one_work+0x921/0x1ba0 [ 565.073202][ C1] process_one_work+0x9c5/0x1ba0 [ 565.073227][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 565.073254][ C1] ? __pfx_process_one_work+0x10/0x10 [ 565.073280][ C1] ? assign_work+0x1a0/0x250 [ 565.073322][ C1] worker_thread+0x6c8/0xf00 [ 565.073354][ C1] ? __pfx_worker_thread+0x10/0x10 [ 565.073380][ C1] kthread+0x2c1/0x3a0 [ 565.073411][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 565.073441][ C1] ? __pfx_kthread+0x10/0x10 [ 565.073469][ C1] ret_from_fork+0x45/0x80 [ 565.073489][ C1] ? __pfx_kthread+0x10/0x10 [ 565.073516][ C1] ret_from_fork_asm+0x1a/0x30 [ 565.073555][ C1] [ 565.077015][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 565.077034][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 565.077072][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 565.077092][ T31] Call Trace: [ 565.077102][ T31] [ 565.077114][ T31] dump_stack_lvl+0x3d/0x1f0 [ 565.077165][ T31] panic+0x71d/0x800 [ 565.077213][ T31] ? __pfx_panic+0x10/0x10 [ 565.077260][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 565.077298][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 565.077348][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 565.077384][ T31] ? watchdog+0xd76/0x1240 [ 565.077414][ T31] ? watchdog+0xd69/0x1240 [ 565.077448][ T31] watchdog+0xd87/0x1240 [ 565.077485][ T31] ? __pfx_watchdog+0x10/0x10 [ 565.077514][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 565.077560][ T31] ? __kthread_parkme+0x148/0x220 [ 565.077604][ T31] ? __pfx_watchdog+0x10/0x10 [ 565.077634][ T31] kthread+0x2c1/0x3a0 [ 565.077672][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 565.077712][ T31] ? __pfx_kthread+0x10/0x10 [ 565.077753][ T31] ret_from_fork+0x45/0x80 [ 565.077783][ T31] ? __pfx_kthread+0x10/0x10 [ 565.077823][ T31] ret_from_fork_asm+0x1a/0x30 [ 565.077891][ T31] [ 565.501453][ T31] Kernel Offset: disabled [ 565.505785][ T31] Rebooting in 86400 seconds..