last executing test programs: 4.25142289s ago: executing program 4 (id=1366): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="20050000", @ANYBLOB="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"], 0x520}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x40, 0x5, 0x6, 0x21, @loopback, @mcast1, 0x700, 0x10, 0x5d, 0xd}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="7a0a00ff0000000071104e000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r5, 0x0, 0x0) r6 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r6, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, 0x5a, r7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r9 = socket(0xa, 0x1, 0x0) ioctl(r9, 0x8916, &(0x7f0000000000)) ioctl(r9, 0x8936, &(0x7f0000000000)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000480)={'gretap0\x00', r4, 0x40, 0x7800, 0x0, 0xc000, {{0x39, 0x4, 0x3, 0x4, 0xe4, 0x66, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @dev={0xac, 0x14, 0x14, 0x24}, {[@noop, @timestamp_addr={0x44, 0x4c, 0x63, 0x1, 0x1, [{@broadcast, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x35}, 0xeb7a}, {@multicast1, 0x785d}, {@broadcast, 0xf}, {@multicast1, 0x1}]}, @end, @generic={0x86, 0x3, 'E'}, @lsrr={0x83, 0x7, 0xd, [@dev={0xac, 0x14, 0x14, 0x1f}]}, @timestamp={0x44, 0x20, 0xcf, 0x0, 0xf, [0x6, 0x8, 0x2, 0x5, 0xd7d4, 0x9, 0x1]}, @noop, @cipso={0x86, 0x55, 0x2, [{0x2, 0x6, "91219c8f"}, {0x1, 0x6, "ce94099a"}, {0x5, 0xc, "6c25970c84d22aae63d5"}, {0x7, 0x8, "572760c766f1"}, {0x1, 0x4, 'z\"'}, {0x1, 0xb, "2395d7eb14c9b6eea4"}, {0x6, 0x9, "35ef9bd878d3af"}, {0x0, 0x7, "5f6eb8d62b"}, {0x1, 0x10, "9dc2377ef41e313c1c109a88aa92"}]}, @end]}}}}}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) getsockopt$TIPC_DEST_DROPPABLE(r10, 0x10f, 0x81, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r2, @ANYBLOB="010065bd7000fcdbdf254f00000008000300", @ANYRES32=r1, @ANYBLOB="48007a8014000100c396d979a8f802a09c5d7bfaeb3575f21c0002002c8b2ddcc0a3a020196b852ff1e5776edd2fed6a243a33220c000300b38b3e2d8514cc07080004000500000030007a800800040007000000240001006b367eca9776d5c92ac3b99cce28c8dbdebd62217f9c5f46d4b1a11c682b40d61c007a800c000300e028aa46e44ee6830c0003009cf7debf7cdf5a207c007a80080004003465e91c0c0003004a159160a275d9fa08000400ff0f0000080004000700000014000100"], 0x12c}}, 0x0) 3.756656054s ago: executing program 0 (id=1373): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRES8], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @mcast2, 0x4}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000040)="05000000010000", 0x7) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) 2.833536776s ago: executing program 4 (id=1379): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfff4, 0x0, 0x0) 2.779366276s ago: executing program 1 (id=1381): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x10}}], 0x10}, 0x24040010) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000400)="fa", 0x1) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0xb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000001740)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @loopback}, 0x10) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) 2.680693528s ago: executing program 2 (id=1382): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) write$binfmt_script(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) pipe(0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'gcm-aes-ce\x00'}, 0x58) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x5, 0x0) shutdown(r1, 0x0) unshare(0x8040480) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0xf000000000, 0x0) (fail_nth: 22) 2.19211068s ago: executing program 1 (id=1384): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f000000850000009e00000095"], &(0x7f0000000200)='GPL\x00'}, 0x90) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec0500000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='jbd2_handle_stats\x00', r0}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000002f00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) (async) close(r1) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x5, 0x4, 0xef, 0x400, r3}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r5}, 0x9) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000003980)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x58) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) socket$inet_icmp(0x2, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@typedef={0x2}]}, {0x0, [0x0, 0x2e, 0x2e, 0x3e]}}, 0x0, 0x2a}, 0x20) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r9, 0x65, 0x2, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) (async) close(r8) socket$inet6_sctp(0xa, 0x0, 0x84) (async) socket(0x10, 0x3, 0x0) 2.119674097s ago: executing program 2 (id=1385): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f00000007c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@cgroup, 0xffffffffffffffff, 0x37, 0x204c}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 2.015602239s ago: executing program 3 (id=1386): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x13, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000ba2ccf06000000000000000018010000786c6c2500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000340)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x90) 1.902414831s ago: executing program 2 (id=1387): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x24c}}, 0x0) 1.828553397s ago: executing program 3 (id=1388): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0xf, 0x4, 0x1, 0x2, 0x50, 0x68, 0x0, 0x6, 0x1, 0x0, @local, @multicast2, {[@lsrr={0x83, 0xb, 0x63, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x1b, 0x77, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @private=0xa010101, @broadcast, @multicast1]}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x3, 0xe148, 0xd, 0x4, 0x4}}}}}, 0x0) 1.828152425s ago: executing program 1 (id=1389): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000006c0)={'#! ', './file0'}, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="050000000000000000000600"], 0x24}, 0x1, 0x0, 0x0, 0x24000804}, 0x24008890) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB="2800013c000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000a000200aaaaaaaaaa000000"], 0x28}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x110) connect$netrom(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000000180)="10000000000000000100000024000000", 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x81764109abc7f5ce, {0x2, 0xfffd, @initdev={0xac, 0x1e, 0x10, 0x0}}, 'pimreg0\x00'}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xcd, 0x8}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r7, 0x58, &(0x7f0000000280)}, 0x10) sendmsg$nl_xfrm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffff60000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0}], 0x1) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) ioctl$sock_netdev_private(r4, 0x9914, &(0x7f00000000c0)="6113dfd56a45f6944473cbfca256ca11dc") 1.743139509s ago: executing program 0 (id=1390): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_mreq(r2, 0x29, 0x1d, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) recvmmsg(r4, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/80, 0x50}], 0x1}}], 0x1, 0x0, 0x0) shutdown(r4, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000600)={0x6, [0x3, 0x8], 0x3}, 0x10) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="bbd28ddcfbbbaaaaaaaaaa0086dd60003a0400043a00f58000000000000000000000000000bbff020000000000000000000000000001"], 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x7, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x1000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r6, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffff07000000ffe7ee000000deff0000000200000000", 0x58}], 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000900)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x6, 0x2}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002680)=@ipv6_newroute={0xbc, 0x18, 0x105, 0x0, 0x0, {0xa, 0x0, 0x20}, [@RTA_OIF={0x8, 0x4, r5}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_METRICS={0x8d, 0x8, 0x0, 0x1, "ae63f2f599f269cb33766fcfee9163f07835a5b582f9398894465f88de42e6f55c1cf8e247783688dc1b80e6ea9ef77c8bfffe4d6a6627beda49e619ce159164d600e212843529329b70cd210e52194cae66b05be49d242d96dbf1a32bdf704b616369f9860e41e0cc43b1eb93ee2b40192a49c3fb226e212273fb8a7c2877bfb8fd3f657a36aea30e"}]}, 0xbc}}, 0x20000000) 1.720613127s ago: executing program 4 (id=1391): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet(0x2, 0x5, 0x0) socket$kcm(0x29, 0x0, 0x0) (async) accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) (async) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000002380), 0x806, r1}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x19}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x2}}]}]}, 0x38}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x0, @private0}], 0x1c) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340), 0xfe07) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) (async, rerun: 64) listen(r4, 0xfff) accept$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000080)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000800)={r1, &(0x7f0000000a00), 0x20000000, 0x2}, 0x20) (async, rerun: 64) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) (rerun: 64) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00080045000030000000000002907800000000e000000114009078e0000001a9598e73e3fb5f1f5ee64ce2d59477c9ecc1c22b"], 0x0) (async) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x2, 0x13, 0xb1, 0x2, 0x16, 0x0, 0x70bd2d, 0x25dfdbfb, [@sadb_ident={0x2, 0xa, 0x5, 0x0, 0x834}, @sadb_ident={0x2, 0xb, 0x935, 0x0, 0x5}, @sadb_lifetime={0x4, 0x2, 0xb63, 0x7, 0x1, 0x9}, @sadb_x_nat_t_type={0x1, 0x14, 0x6}, @sadb_address={0x3, 0x5, 0x6c, 0x40, 0x0, @in={0x2, 0x4e24, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x6e6bbe, 0xfffffff7, {0x6, 0x32, 0x5, 0x7, 0x0, 0x9, 0x0, @in=@rand_addr=0x64010100, @in=@remote}}]}, 0xb0}}, 0xc001) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x6}, 0x48) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000004c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500430057000000950000000000"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0}, 0x90) 1.628561156s ago: executing program 1 (id=1392): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='freezer.parent_freezing\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0xb3fa1000) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1600001a98000088"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmmsg$inet6(r1, &(0x7f0000001500)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, &(0x7f0000001440)=[{&(0x7f0000000680)="76fa9a15ffea7e5ac0fa3695e7cec66aaa2fb260d7b3c40152c6996362239c73153bde7787419b0ebd47666a2e18ad7f77f0fd4fbe633f6c5565eb092132e3fede87d4bf72e9ed867a0054f6d29f65227832ba9acdd36329a004f3aa5017fc2e6ce0a1cc", 0x64}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000005480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000940)=""/99, 0x63}, {&(0x7f0000002540)=""/4096, 0x1000}], 0x2}}], 0x2, 0x203, 0x0) (async) recvmmsg(r1, &(0x7f0000005480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000940)=""/99, 0x63}, {&(0x7f0000002540)=""/4096, 0x1000}], 0x2}}], 0x2, 0x203, 0x0) 1.628054316s ago: executing program 2 (id=1393): pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x7, 0x2, 0x4, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$rds(0x15, 0x5, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000440)={@empty, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0xc4, 0x2f, 0x0, @rand_addr, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}}}}}, 0x0) socket(0x1d, 0x0, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x6a, 0x5, 0x0, 0x20000071) bind$rds(r2, &(0x7f00000000c0)={0xa}, 0x1c) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r4, r0, 0x4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x104, 0x4, 0x3f8, 0x100, 0x100, 0x100, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@dev, @rand_addr, @broadcast, 0x8, 0xb5b340b72a191b47}}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="0100000000000000000001000000040003000400028004000180"], 0x20}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80001, 0x0) 1.595292714s ago: executing program 3 (id=1394): socket$key(0xf, 0x3, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x9, 0x4) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2, 0x0, 0x0, 0x2000}}], 0x2, 0x8004) 1.479544597s ago: executing program 1 (id=1395): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[], 0x3c}}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c}, 0x38) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000002c00)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000300000000020000000200000001000000000000000000000105da73a2400000000000000000000009"], 0x0, 0x4e}, 0x20) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r2, 0x0, 0x1, &(0x7f00000009c0)=0x1234, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f000000e0c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r4, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) 1.398949043s ago: executing program 4 (id=1396): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001800)=[{0x0, 0x0, &(0x7f0000000340), 0x4c, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES32=r6, @ANYRESHEX=r1], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_sfq={{}, {0x0, 0x2, {{0xfffffff7, 0x6, 0x9, 0x7, 0x8}, 0x6, 0x0, 0x1000, 0xff7f610c, 0x180, 0x1a, 0xf, 0x8, 0x4, 0x2, {0xfff, 0x40000000, 0x0, 0x3fbd, 0x7, 0x9}}}}]}, 0xfffffffffffffffd}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@delchain={0x3c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x126}, @filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r8 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r8, 0x1, 0x1c, 0x0, 0x0) recvmmsg(r7, &(0x7f0000006340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10080, 0x0) write$binfmt_misc(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000007"], 0xd) r9 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r9, 0x11, 0xb, &(0x7f0000000080)=0x2, 0x4) recvfrom(r0, 0x0, 0x0, 0x40002161, 0x0, 0x33) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) sendmmsg$inet(r4, &(0x7f0000001880), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xd, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018b2f330ae4a110000118bca8615c6c7c7982740734f8a3fc36ddfcb6a49066c0969c5018a1d8c257bda0731bb319faabaae43cf0000000000000000000000f93352087429966b66f27f0c23742ceb3ae7bb67b10b2a9e6f979f0d1c75e7c6c33d124213dcb9878ef17ab01dab52651fb7921d0dedc277555307ce4974141ce5e6199fc65ff8639db98d5fc3a4514ffe36ef69b6543a8f4a56a2a89361226d6c7828ef9e869ec61100eba64a85c60256d53ca8da172f2aee3fdc6c3912d19934d9b0551e9d91f19d", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000006100c0ff00000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x6, 0xfc, &(0x7f0000000880)=""/252}, 0x90) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/2, 0x2}], 0x1}}], 0x1, 0x0, 0x0) 1.38814704s ago: executing program 0 (id=1397): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f00000007c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@cgroup, 0xffffffffffffffff, 0x37, 0x204c}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 1.301770622s ago: executing program 2 (id=1398): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x13, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000ba2ccf06000000000000000018010000786c6c2500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000340)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x90) 1.257909213s ago: executing program 0 (id=1399): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0b00000000000200000b030000000800010000000040"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=@framed, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000200)={r4, 0xfff, 0xda, 0x9}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000019c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32], 0x74}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="6b6297efd61cc5f0d1b8981fe86df729148851fb6cb0e8", @ANYBLOB="6f0036ff", @ANYRES32, @ANYRESHEX=r3], 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0), &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x302) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r9 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000000)="ff45679b012420893ba2a1fd1ee01ebc00000000a1a037b8f6bf96abd096b48908b61cb527072453f698f34d", 0xfffffc63}], 0x1}, 0x4000000) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x5452, &(0x7f0000000080)) sendmsg$kcm(r9, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x400c1) 1.123169555s ago: executing program 2 (id=1400): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRES8], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, 0x0, 0x0) bind$inet6(r5, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="05000000010000", 0x7) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) 619.36927ms ago: executing program 3 (id=1401): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000440)={'bridge0\x00', &(0x7f0000000040)=@ethtool_rxfh={0x0, 0x0, 0x0, 0x0, 0x0, "7f6a1c"}}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x81, 0x20, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x402, r0}, 0x38) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, &(0x7f00000004c0)=""/233, &(0x7f00000002c0), &(0x7f0000000240), 0x5, r0}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x4, 0x2}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) 417.127815ms ago: executing program 1 (id=1402): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x1a000, 0x0, 0x0) 271.776343ms ago: executing program 4 (id=1403): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000006c0)={'#! ', './file0'}, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="050000000000000000000600"], 0x24}, 0x1, 0x0, 0x0, 0x24000804}, 0x24008890) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x110) connect$netrom(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x81764109abc7f5ce, {0x2, 0xfffd, @initdev={0xac, 0x1e, 0x10, 0x0}}, 'pimreg0\x00'}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0}], 0x1) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) 271.455152ms ago: executing program 3 (id=1404): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0xf, 0x4, 0x1, 0x2, 0x50, 0x68, 0x0, 0x6, 0x1, 0x0, @local, @multicast2, {[@lsrr={0x83, 0xb, 0x63, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x1b, 0x77, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @private=0xa010101, @broadcast, @multicast1]}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x3, 0xe148, 0xd, 0x4, 0x4}}}}}, 0x0) 227.371543ms ago: executing program 0 (id=1405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000adc000000000a0101000000000000000002fd00000900010073797a3000000000bb00060079e7b7eceea68f6099fc83cd0c8b373bdc9c6e78c075643c2a5dc89eb0188b6e3c512219635880d31407b1bea8b51c012324ad64e902a795dd7d36f1a712ec4c42012093d8a49a7c757ae492a9d523299810795e47f54226d5e82b6b8c072dbc09ea01b308a7258f6f57d4e098a3c69594a4b34ce080de2f8d466218e1a7c0c892555bed25b878d04ec6a9ea5449f4c16154128d3ac145d1994aa1e97eb08fb911a7cbba3d617a7e2b6ed10aea8c35ca397a88f327ee2e0034010000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000001400048008000140000000000800024000000000f300030091abc12404cf378042f26c43f91f68d8a90767c0bc71f60877974475de3d78ef670efff3f7311209fb8cc158fa18f18591bb90dd1e0464d31ff30a7e5b227e08a2ee0643e735c3cd21b6e743176c8eefd41693bc94e6a273643642d61840a5f275333bb1afbbd583fe318f4f9fede53e5b2e5362948561f9a734f912471f65300a734ab4fc76055ae03eceec7311bea9d533e58fd544db5f584430966667bc251a3fe19a389fae635a5a60ec0e28d8e428677abc89542a33cba0f155d8e6aafc2e55efab5e5d3b471b046e01625e968c3c4e6dbbcd9a34ba87f518b418399816b344ac1b87384cf1b1ffe4109e6a8d0014000000020a010200000000000000000000010014000000110001"], 0x24c}}, 0x0) 132.649925ms ago: executing program 3 (id=1406): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00&\x00', @ANYRES32, @ANYRES64=0x0, @ANYRES32, @ANYBLOB="0c005a800800018004000200"], 0x28}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000e1ff000000009500000007000000bfc2d9689750026e9b8d3520956d499314594a36cff4c3f00ffd9f6b25cd733fc9801a21751de94bef34656ec995d5234ce9e849d877938d2c2aeeacee3887e590b3afddf275d33b4bc97d1c1cfe7a14f0fbb4d8570d38af5a0968f23a9a2d09c3cee74f964dbe2d06e7977c8436c1697a19325e11b88c29ff91eb5d831df33e53a5006b49f6c04c07286bf513f1a8a81f94618d5e544bf77706b018c684ea322739d115b311b7c02c"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 32) getsockopt$bt_hci(r0, 0x84, 0x83, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0xfde) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x20000000) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async, rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r3) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000001fc0)={'wpan0\x00'}) (rerun: 32) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async, rerun: 32) connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x6, @broadcast}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x90) (async, rerun: 64) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x1a, 0x36, 0x0, 0x0, 0x45, '\x00', 0x0, 0x2}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r7}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) (async) close(r8) (async) close(0xffffffffffffffff) 453.145µs ago: executing program 0 (id=1407): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x2, 'ip_vti0\x00'}, 0x18) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r1) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100c700f800000000000100000005000100e7"], 0x1c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/675], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xfffffe94, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) sendto$inet6(r4, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x18, &(0x7f0000000140)={0x0, 0xfffffffffffffd15, "02008a"}, &(0x7f0000000180)=0x8) (async, rerun: 32) r5 = epoll_create1(0x80000) (rerun: 32) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r3, &(0x7f0000000040)={0x4000201e}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1800000078000106000000000000000007000000"], 0x18}], 0x1}, 0x0) (async) ioctl$F2FS_IOC_DEFRAGMENT(r6, 0xc010f508, &(0x7f00000000c0)={0x4, 0x33}) 0s ago: executing program 4 (id=1408): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r3) sendmsg$NET_DM_CMD_START(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200), 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x14, r4, 0x200, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc055}, 0x4008814) r5 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', 0x0}) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000140)=0x431c, 0x4) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r5, &(0x7f00000002c0)="913dcf3296db5d6d52d2f3b42d66", 0xe, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r8, 0x6, 0x8, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) setsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, &(0x7f0000000240)=0x5, 0x4) kernel console output (not intermixed with test programs): AN 0 to HW filter on device team0 [ 83.461978][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.481250][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.488563][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.588823][ T2957] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.596068][ T2957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.651878][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.701509][ T128] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.708853][ T128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.768473][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.775761][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.818771][ T5233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.852307][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.932477][ T5234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.133395][ T5233] veth0_vlan: entered promiscuous mode [ 84.151556][ T5232] veth0_vlan: entered promiscuous mode [ 84.199585][ T5233] veth1_vlan: entered promiscuous mode [ 84.232897][ T5232] veth1_vlan: entered promiscuous mode [ 84.326928][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.352611][ T5233] veth0_macvtap: entered promiscuous mode [ 84.399231][ T5233] veth1_macvtap: entered promiscuous mode [ 84.410743][ T5232] veth0_macvtap: entered promiscuous mode [ 84.439023][ T5243] Bluetooth: hci4: command tx timeout [ 84.460675][ T5232] veth1_macvtap: entered promiscuous mode [ 84.491077][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.520913][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.584231][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.595638][ T5243] Bluetooth: hci0: command tx timeout [ 84.596477][ T54] Bluetooth: hci1: command tx timeout [ 84.601068][ T5243] Bluetooth: hci2: command tx timeout [ 84.607011][ T5248] Bluetooth: hci3: command tx timeout [ 84.618990][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.631067][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.644573][ T5233] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.653918][ T5233] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.663212][ T5233] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.672351][ T5233] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.693931][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.707739][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.719339][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.731886][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.772809][ T5230] veth0_vlan: entered promiscuous mode [ 84.788093][ T5232] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.797122][ T5232] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.806900][ T5232] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.816226][ T5232] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.873192][ T5230] veth1_vlan: entered promiscuous mode [ 84.967476][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.981209][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.047323][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.066620][ T5234] veth0_vlan: entered promiscuous mode [ 85.080400][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.132232][ T5234] veth1_vlan: entered promiscuous mode [ 85.157252][ T5227] veth0_vlan: entered promiscuous mode [ 85.199870][ T5230] veth0_macvtap: entered promiscuous mode [ 85.280832][ T5230] veth1_macvtap: entered promiscuous mode [ 85.293899][ T2957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.308472][ T5234] veth0_macvtap: entered promiscuous mode [ 85.315608][ T2957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.352636][ T5227] veth1_vlan: entered promiscuous mode [ 85.403070][ T5234] veth1_macvtap: entered promiscuous mode [ 85.432445][ T5312] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'. [ 85.436068][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.453343][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.466442][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.477591][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.490035][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.523498][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.537523][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.550560][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.562695][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.573287][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.584250][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.608458][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.627141][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.639705][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.652267][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.666899][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.679687][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.689412][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.702351][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.712414][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.724248][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.734567][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.746067][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.759602][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.774497][ T128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.796108][ T5230] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.807430][ T128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.820723][ T5230] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.831840][ T5230] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.846053][ T5230] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.864500][ T5316] Zero length message leads to an empty skb [ 85.882736][ T5234] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.898872][ T5234] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.909122][ T5234] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.920084][ T5234] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.963351][ T5227] veth0_macvtap: entered promiscuous mode [ 85.990944][ T5227] veth1_macvtap: entered promiscuous mode [ 86.114512][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.153617][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.164235][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.181340][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.191264][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.213817][ T5321] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 86.214631][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.237496][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.250355][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.268497][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.302439][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.323626][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.336050][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.346617][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.358775][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.372710][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.383852][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.394581][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.406537][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.419162][ T5227] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.430444][ T5227] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.442796][ T5227] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.452940][ T5227] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.515536][ T54] Bluetooth: hci4: command tx timeout [ 86.594365][ T5327] netlink: 'syz.3.8': attribute type 3 has an invalid length. [ 86.605939][ T5327] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.8'. [ 86.615523][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.629138][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.652884][ T5326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7'. [ 86.676027][ T54] Bluetooth: hci1: command tx timeout [ 86.681554][ T5248] Bluetooth: hci3: command tx timeout [ 86.681586][ T5231] Bluetooth: hci2: command tx timeout [ 86.689311][ T54] Bluetooth: hci0: command tx timeout [ 86.731462][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.751092][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.752826][ T5327] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8'. [ 86.851346][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.873251][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.978800][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.005289][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.134646][ T128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.162456][ T128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.192110][ T5336] netlink: 'syz.2.10': attribute type 29 has an invalid length. [ 87.393083][ T5348] netlink: 'syz.2.12': attribute type 1 has an invalid length. [ 87.461784][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.500197][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.536361][ T5349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11'. [ 87.563771][ T5353] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.617394][ T5349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 87.690604][ T5353] vlan2: entered promiscuous mode [ 87.711998][ T5353] batadv0: entered promiscuous mode [ 87.743449][ T5353] team0: Port device vlan2 added [ 88.211344][ T5373] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.243391][ T5372] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 88.326279][ T5377] netlink: 'syz.4.20': attribute type 10 has an invalid length. [ 88.379651][ T5378] netlink: 576 bytes leftover after parsing attributes in process `syz.4.20'. [ 88.526573][ T5393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22'. [ 88.715076][ T5393] netlink: 56 bytes leftover after parsing attributes in process `syz.3.22'. [ 88.869476][ T5398] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 89.123566][ T5404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'. [ 89.230533][ T5408] tipc: Started in network mode [ 89.238889][ T5408] tipc: Node identity 1, cluster identity 4711 [ 89.253305][ T5408] tipc: Node number set to 1 [ 89.972391][ T5435] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.056461][ T5435] lo speed is unknown, defaulting to 1000 [ 90.070585][ T5435] lo speed is unknown, defaulting to 1000 [ 90.123876][ T5444] netlink: 'syz.2.36': attribute type 10 has an invalid length. [ 90.258353][ T5444] lo: entered promiscuous mode [ 90.281982][ T5444] lo: entered allmulticast mode [ 90.305334][ T5444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 90.364329][ T5435] lo speed is unknown, defaulting to 1000 [ 90.416559][ T5443] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.425400][ T5443] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.535714][ T5459] __nla_validate_parse: 3 callbacks suppressed [ 90.538137][ T5459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.43'. [ 90.907361][ T5471] Bluetooth: MGMT ver 1.23 [ 90.989380][ T5473] sctp: failed to load transform for md5: -4 [ 91.143225][ T5435] infiniband syz0: set down [ 91.150432][ T9] lo speed is unknown, defaulting to 1000 [ 91.167176][ T5435] infiniband syz0: added lo [ 91.346013][ T5435] RDS/IB: syz0: added [ 91.362114][ T5435] smc: adding ib device syz0 with port count 1 [ 91.404343][ T5435] smc: ib device syz0 port 1 has pnetid [ 91.416430][ T5241] lo speed is unknown, defaulting to 1000 [ 91.428764][ T5435] lo speed is unknown, defaulting to 1000 [ 91.477187][ T5433] syz.2.36 (5433) used greatest stack depth: 18928 bytes left [ 91.949354][ T5495] ip6gre0: entered promiscuous mode [ 91.977182][ T5495] vlan2: entered promiscuous mode [ 91.987191][ T5495] vlan2: entered allmulticast mode [ 92.006599][ T5495] ip6gre0: entered allmulticast mode [ 92.083097][ T5495] ip6gre0: left allmulticast mode [ 92.109391][ T5495] ip6gre0: left promiscuous mode [ 92.110086][ T5503] ieee802154 phy0 wpan0: encryption failed: -22 [ 92.157167][ T5503] netlink: 36 bytes leftover after parsing attributes in process `syz.1.55'. [ 92.263451][ T5435] lo speed is unknown, defaulting to 1000 [ 92.289828][ T25] cfg80211: failed to load regulatory.db [ 92.754533][ T5532] bridge0: port 3(team0) entered blocking state [ 92.801335][ T5532] bridge0: port 3(team0) entered disabled state [ 92.822422][ T5532] team0: entered allmulticast mode [ 92.843500][ T5532] team_slave_0: entered allmulticast mode [ 92.869553][ T5532] team_slave_1: entered allmulticast mode [ 92.892178][ T5532] vlan2: entered allmulticast mode [ 92.907337][ T5532] batadv0: entered allmulticast mode [ 92.951134][ T5532] team0: entered promiscuous mode [ 92.961541][ T5532] team_slave_0: entered promiscuous mode [ 92.968503][ T5532] team_slave_1: entered promiscuous mode [ 92.979928][ T5532] bridge0: port 3(team0) entered blocking state [ 92.987095][ T5532] bridge0: port 3(team0) entered forwarding state [ 93.181511][ T5435] lo speed is unknown, defaulting to 1000 [ 93.818589][ T5569] ieee802154 phy0 wpan0: encryption failed: -22 [ 93.867755][ T5569] netlink: 36 bytes leftover after parsing attributes in process `syz.1.68'. [ 93.916980][ T5435] lo speed is unknown, defaulting to 1000 [ 94.160031][ T5579] netlink: 76 bytes leftover after parsing attributes in process `syz.3.70'. [ 94.241959][ T5579] netlink: 'syz.3.70': attribute type 64 has an invalid length. [ 94.281729][ T5579] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 94.315226][ T5582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.71'. [ 94.486069][ T5594] Driver unsupported XDP return value 0 on prog (id 28) dev N/A, expect packet loss! [ 94.592430][ T5435] lo speed is unknown, defaulting to 1000 [ 94.643871][ T5601] netlink: 'syz.3.74': attribute type 4 has an invalid length. [ 94.725769][ T5605] netlink: 20 bytes leftover after parsing attributes in process `syz.4.76'. [ 95.553490][ T5633] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.588370][ T5638] netlink: 'syz.1.84': attribute type 3 has an invalid length. [ 95.643485][ T5633] netlink: 36 bytes leftover after parsing attributes in process `syz.3.82'. [ 95.685486][ T5645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.85'. [ 95.729679][ T5638] netlink: 'syz.1.84': attribute type 1 has an invalid length. [ 96.003464][ T5649] netlink: 36 bytes leftover after parsing attributes in process `syz.4.86'. [ 96.038300][ T5651] pim6reg1: entered promiscuous mode [ 96.060075][ T5658] nbd: socks must be embedded in a SOCK_ITEM attr [ 96.066579][ T5651] pim6reg1: entered allmulticast mode [ 96.403175][ T5671] netlink: 80 bytes leftover after parsing attributes in process `syz.4.90'. [ 96.449523][ T5671] netlink: 'syz.4.90': attribute type 3 has an invalid length. [ 96.851264][ T5683] pimreg: entered allmulticast mode [ 96.870947][ T5685] pimreg: entered allmulticast mode [ 96.881487][ T5683] pimreg: left allmulticast mode [ 96.957651][ T5685] pimreg: left allmulticast mode [ 97.214294][ T5692] FAULT_INJECTION: forcing a failure. [ 97.214294][ T5692] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 97.242201][ T5691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.97'. [ 97.255072][ T5692] CPU: 0 UID: 0 PID: 5692 Comm: syz.1.96 Not tainted 6.11.0-rc2-syzkaller-00326-gf547e956dd84 #0 [ 97.265653][ T5692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 97.275846][ T5692] Call Trace: [ 97.279165][ T5692] [ 97.282124][ T5692] dump_stack_lvl+0x241/0x360 [ 97.286881][ T5692] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.292133][ T5692] ? __pfx__printk+0x10/0x10 [ 97.296790][ T5692] ? __pfx_lock_release+0x10/0x10 [ 97.301904][ T5692] should_fail_ex+0x3b0/0x4e0 [ 97.306645][ T5692] _copy_from_user+0x2f/0xe0 [ 97.311339][ T5692] get_user_ifreq+0xc3/0x200 [ 97.315989][ T5692] sock_do_ioctl+0x1a5/0x460 [ 97.320642][ T5692] ? __pfx_sock_do_ioctl+0x10/0x10 [ 97.325831][ T5692] sock_ioctl+0x629/0x8e0 [ 97.330305][ T5692] ? __pfx_sock_ioctl+0x10/0x10 [ 97.335213][ T5692] ? __fget_files+0x29/0x470 [ 97.339862][ T5692] ? __fget_files+0x3f6/0x470 [ 97.344609][ T5692] ? __fget_files+0x29/0x470 [ 97.349297][ T5692] ? bpf_lsm_file_ioctl+0x9/0x10 [ 97.354301][ T5692] ? security_file_ioctl+0x87/0xb0 [ 97.359463][ T5692] ? __pfx_sock_ioctl+0x10/0x10 [ 97.364364][ T5692] __se_sys_ioctl+0xfc/0x170 [ 97.369012][ T5692] do_syscall_64+0xf3/0x230 [ 97.373585][ T5692] ? clear_bhb_loop+0x35/0x90 [ 97.378324][ T5692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.384283][ T5692] RIP: 0033:0x7fa8f2f799f9 [ 97.388744][ T5692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.408494][ T5692] RSP: 002b:00007fa8f3d6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.416962][ T5692] RAX: ffffffffffffffda RBX: 00007fa8f3115f80 RCX: 00007fa8f2f799f9 [ 97.424982][ T5692] RDX: 0000000020000000 RSI: 0000000000008924 RDI: 0000000000000005 [ 97.432332][ T5691] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 97.433010][ T5692] RBP: 00007fa8f3d6e090 R08: 0000000000000000 R09: 0000000000000000 [ 97.449671][ T5691] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 97.450304][ T5692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.467802][ T5692] R13: 0000000000000000 R14: 00007fa8f3115f80 R15: 00007fff493e5a48 [ 97.475834][ T5692] [ 97.479088][ T5701] dccp_invalid_packet: P.Data Offset(0) too small [ 97.506257][ T5691] netlink: 'syz.2.97': attribute type 12 has an invalid length. [ 97.536164][ T5691] netlink: 132 bytes leftover after parsing attributes in process `syz.2.97'. [ 97.678936][ T5694] lo speed is unknown, defaulting to 1000 [ 98.076658][ T5728] pimreg: entered allmulticast mode [ 98.107608][ T5728] pimreg: left allmulticast mode [ 98.477425][ T5737] pimreg: entered allmulticast mode [ 98.618789][ T5737] pimreg: left allmulticast mode [ 98.689924][ T5744] veth1_macvtap: left promiscuous mode [ 98.697298][ T5744] macsec0: entered promiscuous mode [ 98.755483][ T5749] veth1_macvtap: entered promiscuous mode [ 98.783352][ T5749] macsec0: left promiscuous mode [ 98.793384][ T5749] macsec0: entered allmulticast mode [ 98.800947][ T5749] veth1_macvtap: entered allmulticast mode [ 98.832366][ T5748] netlink: 'syz.1.111': attribute type 10 has an invalid length. [ 98.866875][ T5748] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 98.883255][ T5748] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 98.892783][ T5748] team0: Port device netdevsim0 added [ 98.900993][ T5750] netlink: 'syz.1.111': attribute type 10 has an invalid length. [ 98.940455][ T5750] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 98.990025][ T5750] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 99.020880][ T5750] team0: Port device netdevsim0 removed [ 99.106816][ T5750] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 99.157486][ T5752] FAULT_INJECTION: forcing a failure. [ 99.157486][ T5752] name failslab, interval 1, probability 0, space 0, times 1 [ 99.194968][ T5752] CPU: 1 UID: 0 PID: 5752 Comm: syz.2.112 Not tainted 6.11.0-rc2-syzkaller-00326-gf547e956dd84 #0 [ 99.205724][ T5752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 99.216023][ T5752] Call Trace: [ 99.219605][ T5752] [ 99.222572][ T5752] dump_stack_lvl+0x241/0x360 [ 99.227320][ T5752] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.232666][ T5752] ? __pfx__printk+0x10/0x10 [ 99.237319][ T5752] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 99.243367][ T5752] ? __pfx___might_resched+0x10/0x10 [ 99.248722][ T5752] should_fail_ex+0x3b0/0x4e0 [ 99.253447][ T5752] should_failslab+0xac/0x100 [ 99.258178][ T5752] ? __alloc_skb+0x1c3/0x440 [ 99.262811][ T5752] kmem_cache_alloc_node_noprof+0x71/0x320 [ 99.268663][ T5752] ? br_get_link_af_size_filtered+0xdb/0xd30 [ 99.274698][ T5752] __alloc_skb+0x1c3/0x440 [ 99.279157][ T5752] ? __pfx___alloc_skb+0x10/0x10 [ 99.284135][ T5752] ? if_nlmsg_size+0x53a/0x7a0 [ 99.288932][ T5752] rtmsg_ifinfo_build_skb+0x84/0x260 [ 99.294273][ T5752] ? dev_addr_mod+0xbd/0x330 [ 99.298890][ T5752] rtnetlink_event+0x1b1/0x260 [ 99.303677][ T5752] notifier_call_chain+0x19f/0x3e0 [ 99.308905][ T5752] dev_set_mac_address+0x3d9/0x510 [ 99.314038][ T5752] ? __pfx_dev_set_mac_address+0x10/0x10 [ 99.319691][ T5752] ? down_write+0x18c/0x220 [ 99.324214][ T5752] ? __mutex_lock+0x9a5/0xd70 [ 99.328916][ T5752] ? full_name_hash+0x93/0xe0 [ 99.333619][ T5752] dev_set_mac_address_user+0x31/0x50 [ 99.339095][ T5752] dev_ifsioc+0xbd9/0xe70 [ 99.343452][ T5752] ? __pfx_dev_ifsioc+0x10/0x10 [ 99.348410][ T5752] ? dev_load+0x21/0x1f0 [ 99.352669][ T5752] dev_ioctl+0x719/0x1340 [ 99.357022][ T5752] sock_do_ioctl+0x240/0x460 [ 99.361639][ T5752] ? __pfx_sock_do_ioctl+0x10/0x10 [ 99.366787][ T5752] sock_ioctl+0x629/0x8e0 [ 99.371138][ T5752] ? __pfx_sock_ioctl+0x10/0x10 [ 99.376039][ T5752] ? __fget_files+0x29/0x470 [ 99.380678][ T5752] ? __fget_files+0x3f6/0x470 [ 99.385388][ T5752] ? __fget_files+0x29/0x470 [ 99.390033][ T5752] ? bpf_lsm_file_ioctl+0x9/0x10 [ 99.395009][ T5752] ? security_file_ioctl+0x87/0xb0 [ 99.400132][ T5752] ? __pfx_sock_ioctl+0x10/0x10 [ 99.405006][ T5752] __se_sys_ioctl+0xfc/0x170 [ 99.409643][ T5752] do_syscall_64+0xf3/0x230 [ 99.414179][ T5752] ? clear_bhb_loop+0x35/0x90 [ 99.418887][ T5752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.424800][ T5752] RIP: 0033:0x7fdc2c9799f9 [ 99.429231][ T5752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.448850][ T5752] RSP: 002b:00007fdc2d82f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.457281][ T5752] RAX: ffffffffffffffda RBX: 00007fdc2cb15f80 RCX: 00007fdc2c9799f9 [ 99.465263][ T5752] RDX: 0000000020000000 RSI: 0000000000008924 RDI: 0000000000000005 [ 99.473256][ T5752] RBP: 00007fdc2d82f090 R08: 0000000000000000 R09: 0000000000000000 [ 99.481248][ T5752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.489233][ T5752] R13: 0000000000000000 R14: 00007fdc2cb15f80 R15: 00007ffd4a464168 [ 99.497246][ T5752] [ 99.715583][ T5763] pimreg: entered allmulticast mode [ 99.822953][ T5763] pimreg: left allmulticast mode [ 99.974291][ T5776] syzkaller1: entered promiscuous mode [ 99.990602][ T5776] syzkaller1: entered allmulticast mode [ 100.343041][ T5792] pimreg: entered allmulticast mode [ 100.373200][ T5789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.122'. [ 100.373228][ T5792] pimreg: left allmulticast mode [ 100.929022][ T5803] netlink: 84 bytes leftover after parsing attributes in process `syz.2.126'. [ 101.521505][ T5833] netlink: 32 bytes leftover after parsing attributes in process `syz.1.132'. [ 101.620080][ T5835] IPVS: Error connecting to the multicast addr [ 102.067835][ T5853] netlink: 24 bytes leftover after parsing attributes in process `syz.4.138'. [ 102.186193][ T5855] pimreg: entered allmulticast mode [ 102.209355][ T5860] pimreg: left allmulticast mode [ 102.572927][ T5874] netlink: 40 bytes leftover after parsing attributes in process `syz.0.145'. [ 102.611603][ T5877] syz.0.145 uses old SIOCAX25GETINFO [ 102.624621][ T5875] netlink: 48 bytes leftover after parsing attributes in process `syz.4.144'. [ 102.791936][ T5875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.144'. [ 102.795468][ T5892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.147'. [ 102.850649][ T5892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.147'. [ 102.955710][ T54] block nbd1: Receive control failed (result -107) [ 103.036169][ T5892] nbd1: detected capacity change from 0 to 256 [ 103.100824][ T5238] block nbd1: Dead connection, failed to find a fallback [ 103.163214][ T5238] block nbd1: shutting down sockets [ 103.198509][ T5238] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.265198][ T5238] Buffer I/O error on dev nbd1, logical block 0, async page read [ 103.288387][ T5238] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.322677][ T5238] Buffer I/O error on dev nbd1, logical block 0, async page read [ 103.375862][ T5238] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.416263][ T5238] Buffer I/O error on dev nbd1, logical block 0, async page read [ 103.463645][ T5238] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.466431][ T5920] netlink: 72 bytes leftover after parsing attributes in process `syz.1.151'. [ 103.505099][ T5238] Buffer I/O error on dev nbd1, logical block 0, async page read [ 103.557117][ T5238] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.591768][ T5238] Buffer I/O error on dev nbd1, logical block 0, async page read [ 103.655487][ T5238] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.664598][ T5238] Buffer I/O error on dev nbd1, logical block 0, async page read [ 103.676385][ T5238] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.686994][ T5238] Buffer I/O error on dev nbd1, logical block 0, async page read [ 103.696308][ T5238] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.724792][ T5238] Buffer I/O error on dev nbd1, logical block 0, async page read [ 103.732624][ T5238] ldm_validate_partition_table(): Disk read failed. [ 103.765586][ T5238] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.784971][ T5238] Buffer I/O error on dev nbd1, logical block 0, async page read [ 103.804968][ T5238] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.814080][ T5238] Buffer I/O error on dev nbd1, logical block 0, async page read [ 103.840054][ T5928] pimreg: entered allmulticast mode [ 103.855460][ T5238] Dev nbd1: unable to read RDB block 0 [ 103.861574][ T5238] nbd1: unable to read partition table [ 103.888817][ T5931] pimreg: left allmulticast mode [ 103.906118][ T5238] ldm_validate_partition_table(): Disk read failed. [ 103.913114][ T5238] Dev nbd1: unable to read RDB block 0 [ 103.971424][ T5238] nbd1: unable to read partition table [ 104.247699][ T5949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.157'. [ 104.792478][ T5975] openvswitch: netlink: Actions may not be safe on all matching packets [ 105.635100][ T5248] Bluetooth: hci3: command 0x0405 tx timeout [ 105.708681][ T6019] bond1: entered promiscuous mode [ 105.763453][ T6019] veth3: entered promiscuous mode [ 105.769511][ T6019] bond1: (slave veth3): Enslaving as an active interface with an up link [ 105.816240][ T6019] bond1 (unregistering): (slave veth3): Releasing backup interface [ 105.857377][ T6019] veth3: left promiscuous mode [ 105.880804][ T6019] bond1 (unregistering): Released all slaves [ 105.974208][ T6029] netlink: 'syz.2.176': attribute type 27 has an invalid length. [ 106.252065][ T6038] __nla_validate_parse: 8 callbacks suppressed [ 106.252086][ T6038] netlink: 44 bytes leftover after parsing attributes in process `syz.2.180'. [ 106.358010][ T6043] Cannot find set identified by id 0 to match [ 106.381433][ T6042] ieee802154 phy0 wpan0: encryption failed: -22 [ 106.412193][ T6042] netlink: 36 bytes leftover after parsing attributes in process `syz.0.182'. [ 106.731645][ T6050] lo speed is unknown, defaulting to 1000 [ 106.850459][ T6066] ieee802154 phy0 wpan0: encryption failed: -22 [ 106.885405][ T6066] netlink: 36 bytes leftover after parsing attributes in process `syz.0.189'. [ 107.026550][ T6071] xt_l2tp: wrong L2TP version: 0 [ 107.084189][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.190'. [ 107.111757][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.190'. [ 107.456356][ T6080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.195'. [ 107.489855][ T6082] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.196'. [ 107.527177][ T6080] netlink: 68 bytes leftover after parsing attributes in process `syz.1.195'. [ 107.726212][ T6086] ieee802154 phy0 wpan0: encryption failed: -22 [ 107.759318][ T6086] netlink: 36 bytes leftover after parsing attributes in process `syz.4.197'. [ 108.066360][ T6099] netlink: 20 bytes leftover after parsing attributes in process `syz.0.202'. [ 108.096329][ T6099] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 108.803701][ T6123] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.826764][ T6125] ieee802154 phy0 wpan0: encryption failed: -22 [ 108.835067][ T6123] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 108.866279][ T6123] bridge_slave_0: default FDB implementation only supports local addresses [ 109.267250][ T6160] tipc: Started in network mode [ 109.272396][ T6160] tipc: Node identity 6a33ceaa7aed, cluster identity 4711 [ 109.297181][ T6160] tipc: Enabled bearer , priority 0 [ 109.331425][ T6160] : renamed from syzkaller0 [ 109.345586][ T6160] tipc: Disabling bearer [ 109.596064][ T6175] ieee802154 phy0 wpan0: encryption failed: -22 [ 109.912142][ T6190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.280261][ T6206] netlink: 'syz.2.236': attribute type 2 has an invalid length. [ 110.462695][ T6216] ieee802154 phy0 wpan0: encryption failed: -22 [ 110.735422][ T6234] netlink: 'syz.3.245': attribute type 1 has an invalid length. [ 111.024509][ T6250] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.034112][ T6250] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.043604][ T6250] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.052819][ T6250] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.278970][ T6261] ieee802154 phy0 wpan0: encryption failed: -22 [ 111.288391][ T6261] __nla_validate_parse: 10 callbacks suppressed [ 111.288410][ T6261] netlink: 36 bytes leftover after parsing attributes in process `syz.4.254'. [ 111.745415][ T6275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.935143][ T6286] hsr0: entered promiscuous mode [ 111.951732][ T6286] netlink: 20 bytes leftover after parsing attributes in process `syz.2.262'. [ 111.964280][ T6286] netlink: 24 bytes leftover after parsing attributes in process `syz.2.262'. [ 112.315755][ T6301] netlink: 'syz.3.268': attribute type 1 has an invalid length. [ 112.323649][ T6301] netlink: 'syz.3.268': attribute type 2 has an invalid length. [ 112.337540][ T6301] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 112.694344][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.274'. [ 112.716223][ T6320] lo speed is unknown, defaulting to 1000 [ 112.745615][ T6324] netlink: 'syz.1.275': attribute type 10 has an invalid length. [ 112.783241][ T6324] bridge0: port 3(team0) entered disabled state [ 112.796334][ T6330] Cannot find set identified by id 0 to match [ 112.825321][ T6324] team0: left allmulticast mode [ 112.830257][ T6324] team_slave_0: left allmulticast mode [ 112.852569][ T6324] team_slave_1: left allmulticast mode [ 112.864169][ T6324] vlan2: left allmulticast mode [ 112.878753][ T6324] batadv0: left allmulticast mode [ 112.894500][ T6324] team0: left promiscuous mode [ 112.909009][ T6324] team_slave_0: left promiscuous mode [ 112.922936][ T6324] team_slave_1: left promiscuous mode [ 112.938027][ T6324] bridge0: port 3(team0) entered disabled state [ 112.961458][ T6328] netlink: 'syz.1.275': attribute type 10 has an invalid length. [ 112.974970][ T6328] netlink: 2 bytes leftover after parsing attributes in process `syz.1.275'. [ 112.990881][ T6328] team0: entered promiscuous mode [ 112.998693][ T6328] team_slave_0: entered promiscuous mode [ 113.015126][ T6328] team_slave_1: entered promiscuous mode [ 113.023152][ T6328] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.046212][ T6328] bridge0: port 3(team0) entered blocking state [ 113.052591][ T6328] bridge0: port 3(team0) entered disabled state [ 113.064320][ T6328] team0: entered allmulticast mode [ 113.069913][ T6328] team_slave_0: entered allmulticast mode [ 113.077299][ T6328] team_slave_1: entered allmulticast mode [ 113.083073][ T6328] vlan2: entered allmulticast mode [ 113.089560][ T6328] batadv0: entered allmulticast mode [ 113.097790][ T6328] bridge0: port 3(team0) entered blocking state [ 113.104204][ T6328] bridge0: port 3(team0) entered forwarding state [ 113.222729][ T6345] netlink: 'syz.2.279': attribute type 4 has an invalid length. [ 113.246263][ T6345] netlink: 'syz.2.279': attribute type 4 has an invalid length. [ 113.276375][ T6345] infiniband syz0: set active [ 113.288077][ T5241] lo speed is unknown, defaulting to 1000 [ 113.294463][ T5241] lo speed is unknown, defaulting to 1000 [ 113.303122][ T6354] netlink: 20 bytes leftover after parsing attributes in process `syz.2.279'. [ 113.460255][ T6357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'. [ 113.729723][ T6371] netlink: 52 bytes leftover after parsing attributes in process `syz.3.289'. [ 114.083308][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.295'. [ 114.243860][ T6406] netlink: 20 bytes leftover after parsing attributes in process `syz.2.300'. [ 114.606787][ T6424] Bluetooth: hci3: unsupported parameter 64512 [ 114.643044][ T6424] Bluetooth: hci3: invalid length 0, exp 2 for type 8 [ 114.992976][ T6442] ieee802154 phy0 wpan0: encryption failed: -22 [ 115.036503][ T6447] pimreg: entered allmulticast mode [ 115.048820][ T6447] pimreg: left allmulticast mode [ 115.092921][ T6450] netlink: 'syz.2.316': attribute type 2 has an invalid length. [ 115.102273][ T6450] netlink: 'syz.2.316': attribute type 1 has an invalid length. [ 115.599000][ T6470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.765332][ T6477] ieee802154 phy0 wpan0: encryption failed: -22 [ 116.755501][ T6527] netlink: 'syz.2.337': attribute type 9 has an invalid length. [ 116.772957][ T6527] __nla_validate_parse: 4 callbacks suppressed [ 116.772981][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.337'. [ 116.817319][ T6535] Cannot find set identified by id 0 to match [ 116.911452][ T6537] ieee802154 phy0 wpan0: encryption failed: -22 [ 116.928184][ T6537] netlink: 36 bytes leftover after parsing attributes in process `syz.4.340'. [ 117.147820][ T6543] xt_CT: You must specify a L4 protocol and not use inversions on it [ 117.754951][ T6570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.351'. [ 118.007431][ T6576] Cannot find set identified by id 0 to match [ 118.041590][ T6578] ieee802154 phy0 wpan0: encryption failed: -22 [ 118.057469][ T6578] netlink: 36 bytes leftover after parsing attributes in process `syz.2.353'. [ 118.350806][ T6591] netlink: 32 bytes leftover after parsing attributes in process `syz.3.358'. [ 118.363845][ T6591] netlink: 32 bytes leftover after parsing attributes in process `syz.3.358'. [ 118.797978][ T6610] vlan3: entered promiscuous mode [ 118.804940][ T6610] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 118.824625][ T6610] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 118.893229][ T6615] lo speed is unknown, defaulting to 1000 [ 119.254161][ T6619] ieee802154 phy0 wpan0: encryption failed: -22 [ 119.274447][ T6619] netlink: 36 bytes leftover after parsing attributes in process `syz.4.367'. [ 119.481944][ T6623] netlink: 44 bytes leftover after parsing attributes in process `syz.4.369'. [ 119.521758][ T6623] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 119.765958][ T6628] pimreg: entered allmulticast mode [ 119.823276][ T6628] pimreg: left allmulticast mode [ 119.867240][ T6639] netlink: 20 bytes leftover after parsing attributes in process `syz.4.376'. [ 119.889821][ T6639] netlink: 'syz.4.376': attribute type 2 has an invalid length. [ 119.902805][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.375'. [ 120.166523][ T6645] netlink: 'syz.2.377': attribute type 5 has an invalid length. [ 120.254960][ T6656] ieee802154 phy0 wpan0: encryption failed: -22 [ 120.387797][ T6661] dvmrp0: entered allmulticast mode [ 120.610470][ T6671] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 120.733369][ T6678] netlink: 'syz.2.390': attribute type 2 has an invalid length. [ 120.848494][ T6685] netlink: 'syz.4.393': attribute type 1 has an invalid length. [ 120.905161][ T6685] bond1: entered promiscuous mode [ 120.950683][ T6685] bond1: entered allmulticast mode [ 120.956677][ T6685] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.163418][ T6694] ɶƣ0GC: entered promiscuous mode [ 121.844007][ T6732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.162133][ T6749] __nla_validate_parse: 10 callbacks suppressed [ 122.162159][ T6749] netlink: 16 bytes leftover after parsing attributes in process `syz.0.406'. [ 122.193654][ T6753] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 122.234323][ T6749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.406'. [ 122.254943][ T6749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.406'. [ 122.587179][ T6777] netlink: 'syz.1.410': attribute type 1 has an invalid length. [ 122.612110][ T6777] netlink: 9320 bytes leftover after parsing attributes in process `syz.1.410'. [ 122.629773][ T6777] netlink: 'syz.1.410': attribute type 1 has an invalid length. [ 122.642739][ T6777] netlink: 'syz.1.410': attribute type 2 has an invalid length. [ 122.877299][ T6792] netlink: 20 bytes leftover after parsing attributes in process `syz.3.417'. [ 122.930323][ T6790] pim6reg1: entered promiscuous mode [ 122.958466][ T6790] pim6reg1: entered allmulticast mode [ 122.984457][ T6794] netlink: 20 bytes leftover after parsing attributes in process `syz.4.418'. [ 123.074687][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.421'. [ 123.241765][ T6812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.424'. [ 123.462314][ T6825] netlink: 'syz.2.428': attribute type 1 has an invalid length. [ 123.605073][ T6835] netlink: 'syz.3.431': attribute type 4 has an invalid length. [ 123.627291][ T6835] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 124.250450][ T6871] netlink: 20 bytes leftover after parsing attributes in process `syz.2.441'. [ 124.260333][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'. [ 124.381852][ T6874] syzkaller0: entered promiscuous mode [ 124.408172][ T6874] syzkaller0: entered allmulticast mode [ 126.203592][ T6894] pimreg: entered allmulticast mode [ 126.209155][ T6901] pimreg: left allmulticast mode [ 126.262455][ T6905] lo speed is unknown, defaulting to 1000 [ 126.545384][ T6917] xt_CT: You must specify a L4 protocol and not use inversions on it [ 127.921500][ T6960] pimreg: entered allmulticast mode [ 127.958933][ T6960] pimreg: left allmulticast mode [ 128.019184][ T6962] __nla_validate_parse: 9 callbacks suppressed [ 128.019206][ T6962] netlink: 224 bytes leftover after parsing attributes in process `syz.4.466'. [ 128.331422][ T6968] Bluetooth: MGMT ver 1.23 [ 128.339543][ T6968] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 129.021352][ T6993] netlink: 16 bytes leftover after parsing attributes in process `syz.4.477'. [ 129.060979][ T6993] netlink: 16 bytes leftover after parsing attributes in process `syz.4.477'. [ 129.098010][ T6993] netlink: 5 bytes leftover after parsing attributes in process `syz.4.477'. [ 129.146871][ T6999] lo speed is unknown, defaulting to 1000 [ 129.184550][ T7007] netlink: 'syz.1.478': attribute type 3 has an invalid length. [ 129.218230][ T7007] netlink: 'syz.1.478': attribute type 3 has an invalid length. [ 129.246827][ T7004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.680312][ T5248] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.687688][ T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 130.784645][ T7042] netlink: 64 bytes leftover after parsing attributes in process `syz.2.488'. [ 131.452179][ T7061] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.477513][ T7061] netlink: 36 bytes leftover after parsing attributes in process `syz.3.494'. [ 131.641676][ T7072] netlink: 'syz.3.498': attribute type 15 has an invalid length. [ 131.976205][ T7090] netlink: 28 bytes leftover after parsing attributes in process `syz.4.502'. [ 132.079795][ T7092] netlink: 88 bytes leftover after parsing attributes in process `syz.3.503'. [ 132.627307][ T7109] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.655010][ T7109] netlink: 36 bytes leftover after parsing attributes in process `syz.0.508'. [ 133.250888][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.259310][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.923766][ T7153] tipc: Started in network mode [ 133.930148][ T7153] tipc: Node identity , cluster identity 4711 [ 133.941576][ T7153] tipc: Failed to set node id, please configure manually [ 133.961712][ T7153] tipc: Enabling of bearer rejected, failed to enable media [ 134.080611][ T7157] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.111118][ T7157] netlink: 36 bytes leftover after parsing attributes in process `syz.0.522'. [ 134.246242][ T7164] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 134.293832][ T7162] netlink: 24 bytes leftover after parsing attributes in process `syz.4.524'. [ 134.713433][ T7184] netlink: 'syz.4.530': attribute type 1 has an invalid length. [ 134.998756][ T7201] netlink: 'syz.1.534': attribute type 1 has an invalid length. [ 135.035202][ T7202] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.062030][ T7202] netlink: 36 bytes leftover after parsing attributes in process `syz.3.535'. [ 135.449676][ T7221] Cannot find add_set index 0 as target [ 135.599595][ T7220] delete_channel: no stack [ 135.937128][ T7239] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 136.009280][ T7242] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.031412][ T7242] netlink: 36 bytes leftover after parsing attributes in process `syz.0.550'. [ 136.515178][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.554'. [ 136.993121][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.560'. [ 137.012352][ T7275] netlink: 40 bytes leftover after parsing attributes in process `syz.3.560'. [ 137.052189][ T7275] lo speed is unknown, defaulting to 1000 [ 137.096632][ T7275] netlink: 'syz.3.560': attribute type 5 has an invalid length. [ 137.220519][ T7281] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.261449][ T7281] netlink: 36 bytes leftover after parsing attributes in process `syz.1.563'. [ 137.613409][ T7301] xt_recent: hitcount (33554432) is larger than allowed maximum (65535) [ 137.866886][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 137.892944][ T7311] RDS: rds_bind could not find a transport for fe88::3, load rds_tcp or rds_rdma? [ 138.088796][ T7315] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.122725][ T7315] netlink: 36 bytes leftover after parsing attributes in process `syz.0.577'. [ 138.240113][ T7324] ip6gretap0: entered promiscuous mode [ 138.251091][ T7324] bridge0: entered promiscuous mode [ 138.860703][ T7355] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.082863][ T7359] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 139.196518][ T7363] lo speed is unknown, defaulting to 1000 [ 139.481502][ T7376] FAULT_INJECTION: forcing a failure. [ 139.481502][ T7376] name failslab, interval 1, probability 0, space 0, times 0 [ 139.535309][ T7376] CPU: 1 UID: 0 PID: 7376 Comm: syz.4.596 Not tainted 6.11.0-rc2-syzkaller-00326-gf547e956dd84 #0 [ 139.546007][ T7376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 139.556101][ T7376] Call Trace: [ 139.559411][ T7376] [ 139.562372][ T7376] dump_stack_lvl+0x241/0x360 [ 139.567107][ T7376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.572356][ T7376] ? __pfx__printk+0x10/0x10 [ 139.577001][ T7376] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 139.583022][ T7376] ? __pfx___might_resched+0x10/0x10 [ 139.588361][ T7376] should_fail_ex+0x3b0/0x4e0 [ 139.593085][ T7376] should_failslab+0xac/0x100 [ 139.597820][ T7376] ? __alloc_skb+0x1c3/0x440 [ 139.602450][ T7376] kmem_cache_alloc_node_noprof+0x71/0x320 [ 139.608386][ T7376] __alloc_skb+0x1c3/0x440 [ 139.612830][ T7376] ? __pfx___alloc_skb+0x10/0x10 [ 139.617782][ T7376] ? netlink_autobind+0xd6/0x2f0 [ 139.622734][ T7376] ? netlink_autobind+0x2b0/0x2f0 [ 139.627773][ T7376] netlink_sendmsg+0x638/0xcb0 [ 139.632583][ T7376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.637894][ T7376] ? __import_iovec+0x536/0x820 [ 139.642761][ T7376] ? aa_sock_msg_perm+0x91/0x160 [ 139.647716][ T7376] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 139.653014][ T7376] ? security_socket_sendmsg+0x87/0xb0 [ 139.658497][ T7376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.663805][ T7376] __sock_sendmsg+0x221/0x270 [ 139.668508][ T7376] ____sys_sendmsg+0x525/0x7d0 [ 139.673295][ T7376] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.678609][ T7376] __sys_sendmsg+0x2b0/0x3a0 [ 139.683217][ T7376] ? __pfx___sys_sendmsg+0x10/0x10 [ 139.688365][ T7376] ? arch_irq_work_raise+0x6f/0x80 [ 139.693501][ T7376] ? bpf_trace_run2+0x1fc/0x540 [ 139.698390][ T7376] ? bpf_trace_run2+0x36e/0x540 [ 139.703264][ T7376] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 139.709616][ T7376] ? rcu_is_watching+0x15/0xb0 [ 139.714398][ T7376] ? trace_sys_enter+0x1f/0xd0 [ 139.719180][ T7376] do_syscall_64+0xf3/0x230 [ 139.723702][ T7376] ? clear_bhb_loop+0x35/0x90 [ 139.728395][ T7376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.734305][ T7376] RIP: 0033:0x7f4b3f1799f9 [ 139.738765][ T7376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.758611][ T7376] RSP: 002b:00007f4b3ffbc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.767075][ T7376] RAX: ffffffffffffffda RBX: 00007f4b3f315f80 RCX: 00007f4b3f1799f9 [ 139.775061][ T7376] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 139.783047][ T7376] RBP: 00007f4b3ffbc090 R08: 0000000000000000 R09: 0000000000000000 [ 139.791210][ T7376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.799190][ T7376] R13: 0000000000000000 R14: 00007f4b3f315f80 R15: 00007ffd66a1f6f8 [ 139.807189][ T7376] [ 140.130193][ T7389] netlink: 'syz.2.600': attribute type 4 has an invalid length. [ 140.156695][ T7389] infiniband syz0: set down [ 140.172900][ T25] lo speed is unknown, defaulting to 1000 [ 140.199912][ T7389] netlink: 'syz.2.600': attribute type 4 has an invalid length. [ 140.221428][ T7389] infiniband syz0: set active [ 140.231916][ T5241] lo speed is unknown, defaulting to 1000 [ 140.260391][ T5361] lo speed is unknown, defaulting to 1000 [ 140.304525][ T5361] lo speed is unknown, defaulting to 1000 [ 140.399959][ T7394] __nla_validate_parse: 1 callbacks suppressed [ 140.399981][ T7394] netlink: 16 bytes leftover after parsing attributes in process `syz.0.593'. [ 141.098533][ T7410] sock: sock_timestamping_bind_phc: sock not bind to device [ 141.527719][ T7430] netlink: 20 bytes leftover after parsing attributes in process `syz.4.614'. [ 141.875057][ T7451] FAULT_INJECTION: forcing a failure. [ 141.875057][ T7451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.907278][ T7451] CPU: 1 UID: 0 PID: 7451 Comm: syz.4.622 Not tainted 6.11.0-rc2-syzkaller-00326-gf547e956dd84 #0 [ 141.917940][ T7451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 141.928024][ T7451] Call Trace: [ 141.931337][ T7451] [ 141.934284][ T7451] dump_stack_lvl+0x241/0x360 [ 141.938993][ T7451] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.944215][ T7451] ? __pfx__printk+0x10/0x10 [ 141.948833][ T7451] ? __pfx_lock_release+0x10/0x10 [ 141.953898][ T7451] should_fail_ex+0x3b0/0x4e0 [ 141.958592][ T7451] _copy_from_iter+0x1f6/0x1960 [ 141.963457][ T7451] ? __virt_addr_valid+0x183/0x530 [ 141.968579][ T7451] ? __pfx_lock_release+0x10/0x10 [ 141.973633][ T7451] ? __alloc_skb+0x28f/0x440 [ 141.978233][ T7451] ? __pfx__copy_from_iter+0x10/0x10 [ 141.983539][ T7451] ? __virt_addr_valid+0x183/0x530 [ 141.988675][ T7451] ? __virt_addr_valid+0x183/0x530 [ 141.993888][ T7451] ? __virt_addr_valid+0x45f/0x530 [ 141.999011][ T7451] ? __check_object_size+0x49c/0x900 [ 142.004310][ T7451] netlink_sendmsg+0x73d/0xcb0 [ 142.009104][ T7451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.014416][ T7451] ? __import_iovec+0x536/0x820 [ 142.019281][ T7451] ? aa_sock_msg_perm+0x91/0x160 [ 142.024233][ T7451] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 142.029534][ T7451] ? security_socket_sendmsg+0x87/0xb0 [ 142.035013][ T7451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.040317][ T7451] __sock_sendmsg+0x221/0x270 [ 142.045019][ T7451] ____sys_sendmsg+0x525/0x7d0 [ 142.049805][ T7451] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.055128][ T7451] __sys_sendmsg+0x2b0/0x3a0 [ 142.059755][ T7451] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.064899][ T7451] ? vfs_write+0x7c4/0xc90 [ 142.069380][ T7451] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 142.075735][ T7451] ? do_syscall_64+0x100/0x230 [ 142.080527][ T7451] ? do_syscall_64+0xb6/0x230 [ 142.085230][ T7451] do_syscall_64+0xf3/0x230 [ 142.089752][ T7451] ? clear_bhb_loop+0x35/0x90 [ 142.094442][ T7451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.100437][ T7451] RIP: 0033:0x7f4b3f1799f9 [ 142.104867][ T7451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.124518][ T7451] RSP: 002b:00007f4b3ffbc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.132955][ T7451] RAX: ffffffffffffffda RBX: 00007f4b3f315f80 RCX: 00007f4b3f1799f9 [ 142.141181][ T7451] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 142.149191][ T7451] RBP: 00007f4b3ffbc090 R08: 0000000000000000 R09: 0000000000000000 [ 142.157192][ T7451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.165186][ T7451] R13: 0000000000000000 R14: 00007f4b3f315f80 R15: 00007ffd66a1f6f8 [ 142.173192][ T7451] [ 142.182246][ T7453] netlink: 24 bytes leftover after parsing attributes in process `syz.2.623'. [ 142.674692][ T7471] netlink: 'syz.2.630': attribute type 29 has an invalid length. [ 142.691079][ T7471] netlink: 'syz.2.630': attribute type 29 has an invalid length. [ 142.753661][ T7473] netlink: 'syz.4.631': attribute type 10 has an invalid length. [ 142.798608][ T7473] team0: Device ipvlan1 failed to register rx_handler [ 142.906956][ T7479] netlink: 28 bytes leftover after parsing attributes in process `syz.2.634'. [ 143.233852][ T7501] netlink: 40 bytes leftover after parsing attributes in process `syz.3.638'. [ 143.394448][ T7508] @: renamed from veth0_vlan (while UP) [ 143.558222][ T7515] netlink: 36 bytes leftover after parsing attributes in process `syz.0.644'. [ 143.588543][ T7515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.644'. [ 143.605974][ T7518] raw_sendmsg: syz.1.646 forgot to set AF_INET. Fix it! [ 143.630070][ T7522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.645'. [ 144.162731][ T7536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.649'. [ 144.330339][ T7535] lo speed is unknown, defaulting to 1000 [ 144.603021][ T7556] netlink: 'syz.1.657': attribute type 1 has an invalid length. [ 144.707019][ T7556] bond2: entered promiscuous mode [ 144.742122][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.657'. [ 144.821189][ T7558] bond2 (unregistering): Released all slaves [ 144.869430][ T7561] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1 [ 145.535017][ T7594] netlink: 'syz.1.665': attribute type 1 has an invalid length. [ 145.560703][ T7594] __nla_validate_parse: 1 callbacks suppressed [ 145.560722][ T7594] netlink: 224 bytes leftover after parsing attributes in process `syz.1.665'. [ 145.593201][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.665'. [ 145.613950][ T7532] infiniband syz1: set active [ 145.648786][ T7532] infiniband syz1: added bond_slave_1 [ 145.668521][ T7532] syz1: rxe_create_cq: returned err = -12 [ 145.680079][ T7532] infiniband syz1: Couldn't create ib_mad CQ [ 145.693219][ T7532] infiniband syz1: Couldn't open port 1 [ 145.824020][ T7532] RDS/IB: syz1: added [ 145.839950][ T7532] smc: adding ib device syz1 with port count 1 [ 145.865791][ T7532] smc: ib device syz1 port 1 has pnetid [ 146.100271][ T7608] netlink: 76 bytes leftover after parsing attributes in process `syz.1.667'. [ 146.234173][ T7614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.671'. [ 146.387427][ T7626] Cannot find set identified by id 768 to match [ 146.508014][ T7628] netlink: 'syz.2.674': attribute type 7 has an invalid length. [ 146.766031][ T7635] IPv6: sit1: Disabled Multicast RS [ 147.145779][ T7646] IPVS: length: 215 != 24 [ 147.497316][ T7659] netlink: 'syz.1.683': attribute type 1 has an invalid length. [ 147.503028][ T7664] ieee802154 phy0 wpan0: encryption failed: -22 [ 147.535370][ T7659] netlink: 9348 bytes leftover after parsing attributes in process `syz.1.683'. [ 147.535630][ T7664] netlink: 36 bytes leftover after parsing attributes in process `syz.3.684'. [ 147.575755][ T7659] netlink: 20 bytes leftover after parsing attributes in process `syz.1.683'. [ 147.596743][ T7667] vlan0: entered promiscuous mode [ 147.611849][ T7667] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 147.645523][ T7667] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 147.910600][ T7683] FAULT_INJECTION: forcing a failure. [ 147.910600][ T7683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.928925][ T7678] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 147.962084][ T7683] CPU: 0 UID: 0 PID: 7683 Comm: syz.3.691 Not tainted 6.11.0-rc2-syzkaller-00326-gf547e956dd84 #0 [ 147.972750][ T7683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 147.982843][ T7683] Call Trace: [ 147.986160][ T7683] [ 147.989118][ T7683] dump_stack_lvl+0x241/0x360 [ 147.993852][ T7683] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.999187][ T7683] ? __pfx__printk+0x10/0x10 [ 148.003827][ T7683] ? vfs_write+0x7c4/0xc90 [ 148.008293][ T7683] should_fail_ex+0x3b0/0x4e0 [ 148.013018][ T7683] _copy_from_user+0x2f/0xe0 [ 148.015182][ T7678] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 148.017638][ T7683] move_addr_to_kernel+0x82/0x150 [ 148.033035][ T7683] __sys_connect+0xc1/0x310 [ 148.037583][ T7683] ? __pfx___sys_connect+0x10/0x10 [ 148.042762][ T7683] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 148.049242][ T7683] ? do_syscall_64+0x100/0x230 [ 148.054079][ T7683] __x64_sys_connect+0x7a/0x90 [ 148.058903][ T7683] do_syscall_64+0xf3/0x230 [ 148.063522][ T7683] ? clear_bhb_loop+0x35/0x90 [ 148.068253][ T7683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.074201][ T7683] RIP: 0033:0x7eff429799f9 [ 148.078659][ T7683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.098311][ T7683] RSP: 002b:00007eff436f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 148.106768][ T7683] RAX: ffffffffffffffda RBX: 00007eff42b15f80 RCX: 00007eff429799f9 [ 148.114779][ T7683] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000003 [ 148.122807][ T7683] RBP: 00007eff436f3090 R08: 0000000000000000 R09: 0000000000000000 [ 148.130817][ T7683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.138856][ T7683] R13: 0000000000000000 R14: 00007eff42b15f80 R15: 00007ffcce473ea8 [ 148.146890][ T7683] [ 148.474444][ T7695] netlink: 24 bytes leftover after parsing attributes in process `syz.2.695'. [ 148.611129][ T7700] netlink: 20 bytes leftover after parsing attributes in process `syz.3.696'. [ 148.679996][ T7700] lo speed is unknown, defaulting to 1000 [ 149.102542][ T7705] ieee802154 phy0 wpan0: encryption failed: -22 [ 149.132130][ T7705] netlink: 36 bytes leftover after parsing attributes in process `syz.2.698'. [ 149.205526][ T7707] team_slave_0: entered promiscuous mode [ 149.211538][ T7707] team_slave_1: entered promiscuous mode [ 149.244567][ T7707] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 149.331655][ T7710] team_slave_0: left promiscuous mode [ 149.337245][ T7710] team_slave_1: left promiscuous mode [ 149.587891][ T7724] netlink: 'syz.0.704': attribute type 7 has an invalid length. [ 149.749019][ T7732] netlink: 'syz.1.706': attribute type 2 has an invalid length. [ 149.969493][ T7740] geneve2: entered promiscuous mode [ 149.982180][ T7740] geneve2: entered allmulticast mode [ 150.287717][ T7752] ieee802154 phy0 wpan0: encryption failed: -22 [ 151.108828][ T1119] tipc: Subscription rejected, illegal request [ 151.166213][ T7775] netlink: 'syz.4.717': attribute type 10 has an invalid length. [ 151.242962][ T7775] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.250901][ T7775] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.655846][ T7788] Can't find ip_set type hash:net,h [ 151.975059][ T7798] netlink: 'syz.2.724': attribute type 11 has an invalid length. [ 151.982852][ T7798] __nla_validate_parse: 7 callbacks suppressed [ 151.982877][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.724'. [ 153.022092][ T7847] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 153.668211][ T7864] lo speed is unknown, defaulting to 1000 [ 153.854333][ T7882] netlink: 16 bytes leftover after parsing attributes in process `syz.2.753'. [ 153.878118][ T7886] netlink: 'syz.1.754': attribute type 10 has an invalid length. [ 153.893673][ T7882] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.753'. [ 153.952470][ T7886] bond0: (slave netdevsim0): Releasing backup interface [ 153.989931][ T7886] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 154.021485][ T7886] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 154.041761][ T7886] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 154.069016][ T7886] team0: Failed to send options change via netlink (err -105) [ 154.089604][ T7886] team0: Port device netdevsim0 added [ 154.735370][ T8] IPVS: starting estimator thread 0... [ 154.827356][ T7903] netlink: 'syz.4.759': attribute type 3 has an invalid length. [ 154.835452][ T7901] IPVS: using max 19 ests per chain, 45600 per kthread [ 154.851032][ T7903] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.759'. [ 155.667339][ T7941] lo speed is unknown, defaulting to 1000 [ 155.816744][ T7949] netlink: 28 bytes leftover after parsing attributes in process `syz.4.770'. [ 155.845608][ T7950] pimreg: entered allmulticast mode [ 155.863110][ T7950] pimreg: left allmulticast mode [ 157.290713][ T7976] netlink: 'syz.2.777': attribute type 29 has an invalid length. [ 157.317175][ T7976] netlink: 'syz.2.777': attribute type 29 has an invalid length. [ 157.626921][ T7986] netlink: 20 bytes leftover after parsing attributes in process `syz.4.780'. [ 157.667630][ T7986] netlink: 'syz.4.780': attribute type 4 has an invalid length. [ 157.747828][ T7987] netlink: 'syz.4.780': attribute type 4 has an invalid length. [ 158.091682][ T7993] pimreg: entered allmulticast mode [ 158.115099][ T7993] pimreg: left allmulticast mode [ 158.171063][ T7997] ip6t_srh: unknown srh invflags 4000 [ 158.295679][ T8001] ieee802154 phy0 wpan0: encryption failed: -22 [ 158.327469][ T8001] netlink: 36 bytes leftover after parsing attributes in process `syz.0.786'. [ 158.504223][ T8007] ip6t_srh: unknown srh match flags 5294 [ 159.082892][ T8032] dvmrp0: left allmulticast mode [ 159.268532][ T8041] ieee802154 phy0 wpan0: encryption failed: -22 [ 159.287641][ T8041] netlink: 36 bytes leftover after parsing attributes in process `syz.2.799'. [ 159.946206][ T8065] bridge0: entered promiscuous mode [ 160.033904][ T8067] xt_TCPMSS: Only works on TCP SYN packets [ 160.153318][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.809'. [ 160.223707][ T8071] ieee802154 phy0 wpan0: encryption failed: -22 [ 160.240184][ T8071] netlink: 36 bytes leftover after parsing attributes in process `syz.0.812'. [ 160.338966][ T8046] syz.1.800 (8046) used greatest stack depth: 17552 bytes left [ 160.442065][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.813'. [ 160.481556][ T8079] FAULT_INJECTION: forcing a failure. [ 160.481556][ T8079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.498835][ T8079] CPU: 0 UID: 0 PID: 8079 Comm: syz.0.815 Not tainted 6.11.0-rc2-syzkaller-00326-gf547e956dd84 #0 [ 160.509552][ T8079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 160.519644][ T8079] Call Trace: [ 160.522965][ T8079] [ 160.525932][ T8079] dump_stack_lvl+0x241/0x360 [ 160.530419][ T8081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.814'. [ 160.530731][ T8079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.540050][ T8081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.814'. [ 160.544755][ T8079] ? __pfx__printk+0x10/0x10 [ 160.544803][ T8079] ? snprintf+0xda/0x120 [ 160.544832][ T8079] should_fail_ex+0x3b0/0x4e0 [ 160.567180][ T8079] _copy_to_user+0x2f/0xb0 [ 160.571653][ T8079] simple_read_from_buffer+0xca/0x150 [ 160.577082][ T8079] proc_fail_nth_read+0x1e9/0x250 [ 160.582161][ T8079] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.587760][ T8079] ? rw_verify_area+0x520/0x6b0 [ 160.592661][ T8079] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.598261][ T8079] vfs_read+0x204/0xbc0 [ 160.602566][ T8079] ? __pfx_lock_release+0x10/0x10 [ 160.607656][ T8079] ? __pfx_vfs_read+0x10/0x10 [ 160.609395][ T8063] bridge0: left promiscuous mode [ 160.612360][ T8079] ? __fget_files+0x29/0x470 [ 160.612401][ T8079] ? __fget_files+0x3f6/0x470 [ 160.626857][ T8079] ksys_read+0x1a0/0x2c0 [ 160.631156][ T8079] ? __pfx_ksys_read+0x10/0x10 [ 160.635969][ T8079] ? do_syscall_64+0x100/0x230 [ 160.640794][ T8079] ? do_syscall_64+0xb6/0x230 [ 160.645533][ T8079] do_syscall_64+0xf3/0x230 [ 160.650094][ T8079] ? clear_bhb_loop+0x35/0x90 [ 160.654839][ T8079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.660791][ T8079] RIP: 0033:0x7f680497843c [ 160.665252][ T8079] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 160.684903][ T8079] RSP: 002b:00007f68056b3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 160.693331][ T8079] RAX: ffffffffffffffda RBX: 00007f6804b16058 RCX: 00007f680497843c [ 160.701323][ T8079] RDX: 000000000000000f RSI: 00007f68056b30a0 RDI: 0000000000000004 [ 160.709328][ T8079] RBP: 00007f68056b3090 R08: 0000000000000000 R09: 0000000000000000 [ 160.717327][ T8079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.725321][ T8079] R13: 0000000000000001 R14: 00007f6804b16058 R15: 00007fff9da79ac8 [ 160.733358][ T8079] [ 160.959218][ T8093] nbd: socks must be embedded in a SOCK_ITEM attr [ 161.025449][ T8093] netlink: 60 bytes leftover after parsing attributes in process `syz.2.819'. [ 161.058281][ T8094] netlink: 60 bytes leftover after parsing attributes in process `syz.2.819'. [ 161.436754][ T8119] netlink: 'syz.4.826': attribute type 12 has an invalid length. [ 161.542778][ T8127] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 161.613332][ T8127] tipc: Started in network mode [ 161.633002][ T8127] tipc: Node identity , cluster identity 4711 [ 161.661674][ T8127] tipc: Failed to set node id, please configure manually [ 161.673671][ T8127] tipc: Enabling of bearer rejected, failed to enable media [ 162.005549][ T8156] FAULT_INJECTION: forcing a failure. [ 162.005549][ T8156] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 162.024558][ T8156] CPU: 1 UID: 0 PID: 8156 Comm: syz.0.838 Not tainted 6.11.0-rc2-syzkaller-00326-gf547e956dd84 #0 [ 162.035221][ T8156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 162.045309][ T8156] Call Trace: [ 162.048600][ T8156] [ 162.051541][ T8156] dump_stack_lvl+0x241/0x360 [ 162.056254][ T8156] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.061480][ T8156] ? __pfx__printk+0x10/0x10 [ 162.066098][ T8156] ? validate_chain+0x11e/0x5900 [ 162.071058][ T8156] should_fail_ex+0x3b0/0x4e0 [ 162.075766][ T8156] prepare_alloc_pages+0x1da/0x5d0 [ 162.080906][ T8156] __alloc_pages_noprof+0x166/0x6c0 [ 162.086129][ T8156] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 162.091875][ T8156] ? __lock_acquire+0x137a/0x2040 [ 162.096954][ T8156] alloc_pages_mpol_noprof+0x3e8/0x680 [ 162.102444][ T8156] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 162.108456][ T8156] vma_alloc_folio_noprof+0x12e/0x230 [ 162.113941][ T8156] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 162.119863][ T8156] ? do_raw_spin_unlock+0x13c/0x8b0 [ 162.125082][ T8156] folio_prealloc+0x31/0x170 [ 162.129697][ T8156] do_wp_page+0x11cc/0x52f0 [ 162.134255][ T8156] ? __pfx_do_wp_page+0x10/0x10 [ 162.139132][ T8156] ? __pfx_lock_acquire+0x10/0x10 [ 162.144261][ T8156] ? validate_chain+0x11e/0x5900 [ 162.149215][ T8156] ? do_raw_spin_lock+0x14f/0x370 [ 162.154358][ T8156] handle_pte_fault+0x1147/0x6eb0 [ 162.159528][ T8156] ? __pfx_validate_chain+0x10/0x10 [ 162.164759][ T8156] ? cgroup_rstat_updated+0x13b/0xc60 [ 162.170185][ T8156] ? mark_lock+0x9a/0x350 [ 162.174539][ T8156] ? __pfx_handle_pte_fault+0x10/0x10 [ 162.179921][ T8156] ? __lock_acquire+0x137a/0x2040 [ 162.184993][ T8156] ? mt_find+0x226/0x850 [ 162.189255][ T8156] ? __pfx_lock_release+0x10/0x10 [ 162.194390][ T8156] handle_mm_fault+0x1029/0x1980 [ 162.199386][ T8156] ? __pfx_handle_mm_fault+0x10/0x10 [ 162.204711][ T8156] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 162.211100][ T8156] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 162.216492][ T8156] exc_page_fault+0x2b9/0x8c0 [ 162.221231][ T8156] asm_exc_page_fault+0x26/0x30 [ 162.226097][ T8156] RIP: 0010:__put_user_nocheck_4+0x7/0x20 [ 162.231834][ T8156] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 [ 162.251566][ T8156] RSP: 0018:ffffc9001639f8f8 EFLAGS: 00050246 [ 162.257653][ T8156] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000000200066f0 [ 162.265758][ T8156] RDX: ffff888028091e00 RSI: 0000000000000000 RDI: 00000000ffffffff [ 162.273739][ T8156] RBP: ffffc9001639fa70 R08: ffffffff8979adc3 R09: 1ffffffff202f9c5 [ 162.281737][ T8156] R10: dffffc0000000000 R11: fffffbfff202f9c6 R12: dffffc0000000000 [ 162.289743][ T8156] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000200066c0 [ 162.297744][ T8156] ? ____sys_recvmsg+0x2a3/0x470 [ 162.302709][ T8156] ____sys_recvmsg+0x2b9/0x470 [ 162.307496][ T8156] ? __pfx_____sys_recvmsg+0x10/0x10 [ 162.312812][ T8156] do_recvmmsg+0x474/0xae0 [ 162.317252][ T8156] ? __pfx_lock_release+0x10/0x10 [ 162.322299][ T8156] ? __pfx_do_recvmmsg+0x10/0x10 [ 162.327263][ T8156] ? rcu_read_lock_any_held+0xb7/0x160 [ 162.332751][ T8156] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 162.338661][ T8156] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 162.344326][ T8156] ? sb_end_write+0xe9/0x1c0 [ 162.348931][ T8156] ? vfs_write+0x7c4/0xc90 [ 162.353379][ T8156] ? __pfx_do_sys_openat2+0x10/0x10 [ 162.358609][ T8156] __x64_sys_recvmmsg+0x199/0x250 [ 162.363654][ T8156] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 162.369221][ T8156] ? do_syscall_64+0x100/0x230 [ 162.374010][ T8156] ? do_syscall_64+0xb6/0x230 [ 162.378714][ T8156] do_syscall_64+0xf3/0x230 [ 162.383294][ T8156] ? clear_bhb_loop+0x35/0x90 [ 162.387992][ T8156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.394071][ T8156] RIP: 0033:0x7f68049799f9 [ 162.398497][ T8156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.418204][ T8156] RSP: 002b:00007f68056d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 162.426633][ T8156] RAX: ffffffffffffffda RBX: 00007f6804b15f80 RCX: 00007f68049799f9 [ 162.434616][ T8156] RDX: 0000000000000a0d RSI: 00000000200066c0 RDI: 0000000000000006 [ 162.442598][ T8156] RBP: 00007f68056d4090 R08: 0000000000000000 R09: 0000000000000000 [ 162.450577][ T8156] R10: 000000f000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.458589][ T8156] R13: 0000000000000000 R14: 00007f6804b15f80 R15: 00007fff9da79ac8 [ 162.466593][ T8156] [ 162.706955][ T8163] __nla_validate_parse: 5 callbacks suppressed [ 162.706978][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.841'. [ 162.867502][ T8168] pimreg: entered allmulticast mode [ 162.881268][ T8168] pimreg: left allmulticast mode [ 163.160080][ T8182] FAULT_INJECTION: forcing a failure. [ 163.160080][ T8182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.174262][ T8182] CPU: 0 UID: 0 PID: 8182 Comm: syz.0.849 Not tainted 6.11.0-rc2-syzkaller-00326-gf547e956dd84 #0 [ 163.185004][ T8182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 163.195108][ T8182] Call Trace: [ 163.198408][ T8182] [ 163.201352][ T8182] dump_stack_lvl+0x241/0x360 [ 163.206072][ T8182] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.211322][ T8182] ? __pfx__printk+0x10/0x10 [ 163.215928][ T8182] ? __pfx_lock_release+0x10/0x10 [ 163.220977][ T8182] should_fail_ex+0x3b0/0x4e0 [ 163.225665][ T8182] _copy_from_user+0x2f/0xe0 [ 163.230266][ T8182] copy_msghdr_from_user+0xae/0x680 [ 163.235490][ T8182] ? __pfx___might_resched+0x10/0x10 [ 163.240796][ T8182] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 163.246627][ T8182] ? __might_fault+0xaa/0x120 [ 163.251772][ T8182] do_recvmmsg+0x40f/0xae0 [ 163.256219][ T8182] ? __pfx_lock_release+0x10/0x10 [ 163.261452][ T8182] ? __pfx_do_recvmmsg+0x10/0x10 [ 163.266516][ T8182] ? rcu_read_lock_any_held+0xb7/0x160 [ 163.272016][ T8182] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 163.277933][ T8182] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 163.283587][ T8182] ? sb_end_write+0xe9/0x1c0 [ 163.288203][ T8182] ? vfs_write+0x7c4/0xc90 [ 163.292679][ T8182] ? __pfx_do_sys_openat2+0x10/0x10 [ 163.297931][ T8182] __x64_sys_recvmmsg+0x199/0x250 [ 163.302996][ T8182] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 163.308564][ T8182] ? do_syscall_64+0x100/0x230 [ 163.313349][ T8182] ? do_syscall_64+0xb6/0x230 [ 163.318055][ T8182] do_syscall_64+0xf3/0x230 [ 163.322587][ T8182] ? clear_bhb_loop+0x35/0x90 [ 163.327397][ T8182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.333309][ T8182] RIP: 0033:0x7f68049799f9 [ 163.337734][ T8182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.357351][ T8182] RSP: 002b:00007f68056d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 163.365777][ T8182] RAX: ffffffffffffffda RBX: 00007f6804b15f80 RCX: 00007f68049799f9 [ 163.373756][ T8182] RDX: 0000000000000a0d RSI: 00000000200066c0 RDI: 0000000000000006 [ 163.381743][ T8182] RBP: 00007f68056d4090 R08: 0000000000000000 R09: 0000000000000000 [ 163.389760][ T8182] R10: 000000f000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.397742][ T8182] R13: 0000000000000000 R14: 00007f6804b15f80 R15: 00007fff9da79ac8 [ 163.405734][ T8182] [ 163.481924][ T8184] netlink: 'syz.2.850': attribute type 1 has an invalid length. [ 163.490713][ T8184] netlink: 9372 bytes leftover after parsing attributes in process `syz.2.850'. [ 163.499964][ T8184] netlink: 'syz.2.850': attribute type 1 has an invalid length. [ 163.593687][ T8187] ieee802154 phy1 wpan1: encryption failed: -90 [ 163.630354][ T8192] x_tables: duplicate underflow at hook 3 [ 163.778888][ T8203] netlink: 'syz.4.856': attribute type 11 has an invalid length. [ 163.820500][ T8205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.855'. [ 163.843210][ T8205] netlink: 'syz.3.855': attribute type 10 has an invalid length. [ 163.870872][ T8201] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967295 > 32) [ 163.914356][ T8201] netlink: 'syz.3.855': attribute type 29 has an invalid length. [ 163.946180][ T8205] bond0: (slave bond_slave_0): Releasing backup interface [ 164.156610][ T8231] netlink: 'syz.3.863': attribute type 5 has an invalid length. [ 164.216371][ T8231] syzkaller0: entered promiscuous mode [ 164.231895][ T8231] syzkaller0: entered allmulticast mode [ 164.364383][ T8236] lo: entered allmulticast mode [ 164.819869][ T8260] nbd: must specify a size in bytes for the device [ 164.832432][ T8258] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.862018][ T8258] netlink: 36 bytes leftover after parsing attributes in process `syz.4.870'. [ 165.034826][ T8264] hsr0: entered promiscuous mode [ 165.051410][ T8264] hsr0: left promiscuous mode [ 165.262627][ T8276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.876'. [ 165.469600][ T8286] netlink: 'syz.0.878': attribute type 12 has an invalid length. [ 165.484234][ T8286] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.878'. [ 165.798982][ T8295] netlink: 36 bytes leftover after parsing attributes in process `syz.3.882'. [ 165.836486][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.882'. [ 165.967742][ T8312] lo speed is unknown, defaulting to 1000 [ 166.110381][ T8319] netlink: 'syz.3.889': attribute type 2 has an invalid length. [ 166.145433][ T8319] netlink: 48 bytes leftover after parsing attributes in process `syz.3.889'. [ 166.352006][ T8327] team0: Port device macvlan1 added [ 166.440127][ T8323] team_slave_0: entered promiscuous mode [ 166.446309][ T8323] team_slave_1: entered promiscuous mode [ 166.468855][ T8323] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 166.485564][ T8330] netlink: 72 bytes leftover after parsing attributes in process `syz.3.892'. [ 166.594341][ T8331] netlink: 'syz.3.892': attribute type 4 has an invalid length. [ 166.749220][ T8335] lo speed is unknown, defaulting to 1000 [ 167.400077][ T8341] lo speed is unknown, defaulting to 1000 [ 167.998853][ T8366] __nla_validate_parse: 3 callbacks suppressed [ 167.998875][ T8366] netlink: 40 bytes leftover after parsing attributes in process `syz.4.902'. [ 168.690764][ T8401] SET target dimension over the limit! [ 171.124264][ T8422] lo speed is unknown, defaulting to 1000 [ 171.284212][ T8432] sctp: [Deprecated]: syz.2.919 (pid 8432) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.284212][ T8432] Use struct sctp_sack_info instead [ 171.750081][ T8443] netlink: 'syz.0.924': attribute type 1 has an invalid length. [ 171.769482][ T8443] netlink: 224 bytes leftover after parsing attributes in process `syz.0.924'. [ 171.779169][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.925'. [ 172.322036][ T8462] Cannot find set identified by id 0 to match [ 172.428883][ T8468] netlink: 20 bytes leftover after parsing attributes in process `syz.3.927'. [ 172.547505][ T8464] netlink: 47 bytes leftover after parsing attributes in process `syz.3.927'. [ 172.679626][ T8473] Bluetooth: hci3: too big key_count value 40847 [ 172.944023][ T8480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.933'. [ 173.223817][ T8490] xt_NFQUEUE: number of total queues is 0 [ 173.322016][ T8496] netlink: 'syz.0.937': attribute type 1 has an invalid length. [ 173.331861][ T8496] netlink: 9372 bytes leftover after parsing attributes in process `syz.0.937'. [ 173.341290][ T8496] netlink: 11 bytes leftover after parsing attributes in process `syz.0.937'. [ 173.386314][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.937'. [ 173.413881][ T8499] netlink: 'syz.1.938': attribute type 29 has an invalid length. [ 173.424172][ T8499] netlink: 'syz.1.938': attribute type 29 has an invalid length. [ 173.436402][ T8499] netlink: 500 bytes leftover after parsing attributes in process `syz.1.938'. [ 173.459247][ T8499] netlink: 'syz.1.938': attribute type 29 has an invalid length. [ 173.549112][ T8507] pimreg: entered allmulticast mode [ 173.576687][ T8507] pimreg: left allmulticast mode [ 173.630436][ T8509] vlan3: entered promiscuous mode [ 173.647721][ T8509] bridge0: entered promiscuous mode [ 173.653555][ T8509] vlan3: entered allmulticast mode [ 173.659472][ T8509] bridge0: entered allmulticast mode [ 173.688292][ T8509] bridge0: left allmulticast mode [ 173.701444][ T8509] bridge0: left promiscuous mode [ 173.936080][ T8524] netlink: 'syz.3.945': attribute type 1 has an invalid length. [ 173.962848][ T8524] netlink: 9352 bytes leftover after parsing attributes in process `syz.3.945'. [ 173.973289][ T8514] lo speed is unknown, defaulting to 1000 [ 173.982908][ T8524] netlink: 'syz.3.945': attribute type 1 has an invalid length. [ 174.004126][ T8524] netlink: 'syz.3.945': attribute type 2 has an invalid length. [ 174.023237][ T8524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.945'. [ 174.355350][ T8545] netlink: 20 bytes leftover after parsing attributes in process `syz.2.951'. [ 174.385511][ T8541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.952'. [ 174.435248][ T8541] netlink: 28 bytes leftover after parsing attributes in process `syz.3.952'. [ 174.657142][ T8559] netlink: 16 bytes leftover after parsing attributes in process `syz.2.953'. [ 174.739658][ T8561] pimreg: entered allmulticast mode [ 174.773440][ T8561] pimreg: left allmulticast mode [ 175.032658][ T8568] netlink: 'syz.2.956': attribute type 10 has an invalid length. [ 175.465060][ T8568] team0 (unregistering): Port device team_slave_0 removed [ 175.493120][ T8568] team0 (unregistering): Port device team_slave_1 removed [ 175.558010][ T8589] netlink: 'syz.0.963': attribute type 1 has an invalid length. [ 176.017914][ T8608] pimreg: entered allmulticast mode [ 176.064405][ T8608] pimreg: left allmulticast mode [ 176.903902][ T8636] validate_nla: 1 callbacks suppressed [ 176.903925][ T8636] netlink: 'syz.1.976': attribute type 10 has an invalid length. [ 176.918354][ T8636] macvlan0: entered promiscuous mode [ 176.925007][ T8636] macvlan0: entered allmulticast mode [ 176.934620][ T8636] veth1_vlan: entered allmulticast mode [ 176.963052][ T8634] xt_socket: unknown flags 0x8 [ 176.977347][ T8636] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 177.274636][ T54] Bluetooth: hci3: link tx timeout [ 177.288225][ T54] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 177.321781][ T54] Bluetooth: hci3: link tx timeout [ 177.327218][ T54] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 177.412108][ T8657] netlink: 'syz.0.982': attribute type 13 has an invalid length. [ 177.430347][ T8657] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 177.461191][ T8657] netlink: 'syz.0.982': attribute type 11 has an invalid length. [ 177.482002][ T8651] netlink: 'syz.3.980': attribute type 10 has an invalid length. [ 177.736935][ T8665] lo: left allmulticast mode [ 178.356002][ T8709] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ1 [ 178.533502][ T8708] xt_CT: No such helper "netbios-ns" [ 178.545840][ T8715] vcan0: Master is either lo or non-ether device [ 178.818875][ T8732] pimreg: entered allmulticast mode [ 178.832899][ T8732] pimreg: left allmulticast mode [ 178.896171][ T8735] ipt_ECN: cannot use operation on non-tcp rule [ 179.050418][ T8743] Bluetooth: MGMT ver 1.23 [ 179.315852][ T5231] Bluetooth: hci3: command 0x0405 tx timeout [ 179.363705][ T8763] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 179.375309][ T8764] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.534955][ T8767] __nla_validate_parse: 12 callbacks suppressed [ 179.534978][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1010'. [ 179.600664][ T8767] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1010'. [ 180.113077][ T8800] pimreg: entered allmulticast mode [ 180.145741][ T8800] pimreg: left allmulticast mode [ 180.244906][ T8806] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1019'. [ 180.375694][ T8816] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 180.806074][ T8835] syzkaller0: entered promiscuous mode [ 180.811648][ T8835] syzkaller0: entered allmulticast mode [ 180.832318][ T8841] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1028'. [ 180.988233][ T8854] xt_CT: You must specify a L4 protocol and not use inversions on it [ 181.015937][ T8839] nlmon0: entered promiscuous mode [ 181.021694][ T8839] vlan3: entered promiscuous mode [ 181.044153][ T8839] nlmon0: left promiscuous mode [ 182.721169][ T8853] pimreg: entered allmulticast mode [ 182.728290][ T8855] pimreg: left allmulticast mode [ 182.753777][ T8858] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1032'. [ 183.108807][ T8875] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 183.362024][ T8888] pim6reg1: entered promiscuous mode [ 183.368921][ T8888] pim6reg1: entered allmulticast mode [ 183.507453][ T8895] lo speed is unknown, defaulting to 1000 [ 183.750249][ T8910] pimreg: entered allmulticast mode [ 183.766761][ T8908] infiniband syz0: set active [ 183.815680][ T8908] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.865313][ T5241] lo speed is unknown, defaulting to 1000 [ 183.871113][ T8910] pimreg: left allmulticast mode [ 184.022850][ T8919] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.044376][ T8918] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 184.732009][ T8940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1055'. [ 184.778268][ T8945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1057'. [ 184.846656][ T8949] netlink: 'syz.3.1058': attribute type 5 has an invalid length. [ 184.854593][ T8949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1058'. [ 184.893683][ T8947] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 184.924640][ T8947] bond3: (slave vcan1): Error -95 calling set_mac_address [ 185.494516][ T8968] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1065'. [ 185.545660][ T8968] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 185.826059][ T8980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1069'. [ 185.915086][ T8985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1071'. [ 185.958667][ T8986] xt_CT: You must specify a L4 protocol and not use inversions on it [ 186.130469][ T8988] pimreg: entered allmulticast mode [ 186.158907][ T8988] pimreg: left allmulticast mode [ 186.269967][ T8994] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1075'. [ 186.313155][ T8994] netlink: 'syz.0.1075': attribute type 1 has an invalid length. [ 186.324653][ T8994] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1075'. [ 186.469626][ T9001] trusted_key: syz.2.1078 sent an empty control message without MSG_MORE. [ 186.549449][ T9007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1080'. [ 187.004054][ T9025] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 187.078644][ T9029] pimreg: entered allmulticast mode [ 187.090254][ T9029] pimreg: left allmulticast mode [ 187.230781][ T9036] IPVS: set_ctl: invalid protocol: 32 0.0.0.0:20001 [ 187.240559][ T9036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1089'. [ 187.573117][ T9054] Cannot find set identified by id 0 to match [ 188.178847][ T9076] pimreg: entered allmulticast mode [ 188.327791][ T9076] pimreg: left allmulticast mode [ 189.775406][ T9149] FAULT_INJECTION: forcing a failure. [ 189.775406][ T9149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.789042][ T9149] CPU: 0 UID: 0 PID: 9149 Comm: syz.0.1124 Not tainted 6.11.0-rc2-syzkaller-00326-gf547e956dd84 #0 [ 189.799824][ T9149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 189.809991][ T9149] Call Trace: [ 189.813287][ T9149] [ 189.816231][ T9149] dump_stack_lvl+0x241/0x360 [ 189.820936][ T9149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.826155][ T9149] ? __pfx__printk+0x10/0x10 [ 189.830772][ T9149] ? __pfx_lock_release+0x10/0x10 [ 189.835832][ T9149] should_fail_ex+0x3b0/0x4e0 [ 189.840702][ T9149] _copy_from_user+0x2f/0xe0 [ 189.845351][ T9149] copy_msghdr_from_user+0xae/0x680 [ 189.850575][ T9149] ? __pfx___might_resched+0x10/0x10 [ 189.855879][ T9149] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 189.861714][ T9149] ? __might_fault+0xaa/0x120 [ 189.866413][ T9149] do_recvmmsg+0x40f/0xae0 [ 189.871037][ T9149] ? __pfx_lock_release+0x10/0x10 [ 189.876097][ T9149] ? __pfx_do_recvmmsg+0x10/0x10 [ 189.881062][ T9149] ? rcu_read_lock_any_held+0xb7/0x160 [ 189.886548][ T9149] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 189.892467][ T9149] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 189.898134][ T9149] ? sb_end_write+0xe9/0x1c0 [ 189.902747][ T9149] ? vfs_write+0x7c4/0xc90 [ 189.907200][ T9149] ? __pfx_do_sys_openat2+0x10/0x10 [ 189.912424][ T9149] __x64_sys_recvmmsg+0x199/0x250 [ 189.917472][ T9149] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 189.923067][ T9149] ? do_syscall_64+0x100/0x230 [ 189.927875][ T9149] ? do_syscall_64+0xb6/0x230 [ 189.932583][ T9149] do_syscall_64+0xf3/0x230 [ 189.937129][ T9149] ? clear_bhb_loop+0x35/0x90 [ 189.941851][ T9149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.947772][ T9149] RIP: 0033:0x7f68049799f9 [ 189.952204][ T9149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.971825][ T9149] RSP: 002b:00007f68056d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 189.980339][ T9149] RAX: ffffffffffffffda RBX: 00007f6804b15f80 RCX: 00007f68049799f9 [ 189.988324][ T9149] RDX: 0000000000000a0d RSI: 00000000200066c0 RDI: 0000000000000006 [ 189.996402][ T9149] RBP: 00007f68056d4090 R08: 0000000000000000 R09: 0000000000000000 [ 190.004383][ T9149] R10: 000000f000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.012367][ T9149] R13: 0000000000000000 R14: 00007f6804b15f80 R15: 00007fff9da79ac8 [ 190.020372][ T9149] [ 190.240649][ T9151] pimreg: entered allmulticast mode [ 190.276125][ T9151] pimreg: left allmulticast mode [ 190.550917][ T9162] Cannot find set identified by id 0 to match [ 190.907293][ T9173] __nla_validate_parse: 7 callbacks suppressed [ 190.907315][ T9173] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1134'. [ 191.142103][ T9183] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1139'. [ 191.246862][ T9188] pimreg: entered allmulticast mode [ 191.262497][ T9188] pimreg: left allmulticast mode [ 191.668900][ T9201] FAULT_INJECTION: forcing a failure. [ 191.668900][ T9201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.702722][ T9201] CPU: 0 UID: 0 PID: 9201 Comm: syz.4.1147 Not tainted 6.11.0-rc2-syzkaller-00326-gf547e956dd84 #0 [ 191.713473][ T9201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 191.723569][ T9201] Call Trace: [ 191.726893][ T9201] [ 191.729863][ T9201] dump_stack_lvl+0x241/0x360 [ 191.734604][ T9201] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.739863][ T9201] ? __pfx__printk+0x10/0x10 [ 191.744509][ T9201] ? __pfx_lock_release+0x10/0x10 [ 191.749617][ T9201] should_fail_ex+0x3b0/0x4e0 [ 191.754442][ T9201] _copy_from_user+0x2f/0xe0 [ 191.759087][ T9201] copy_msghdr_from_user+0xae/0x680 [ 191.764315][ T9201] ? __pfx___might_resched+0x10/0x10 [ 191.769624][ T9201] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 191.775473][ T9201] ? __might_fault+0xaa/0x120 [ 191.780207][ T9201] do_recvmmsg+0x40f/0xae0 [ 191.784661][ T9201] ? __pfx_lock_release+0x10/0x10 [ 191.789724][ T9201] ? __pfx_do_recvmmsg+0x10/0x10 [ 191.794784][ T9201] ? rcu_read_lock_any_held+0xb7/0x160 [ 191.800266][ T9201] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 191.806198][ T9201] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 191.811855][ T9201] ? sb_end_write+0xe9/0x1c0 [ 191.816469][ T9201] ? vfs_write+0x7c4/0xc90 [ 191.821175][ T9201] ? __pfx_do_sys_openat2+0x10/0x10 [ 191.826402][ T9201] __x64_sys_recvmmsg+0x199/0x250 [ 191.831446][ T9201] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 191.837006][ T9201] ? do_syscall_64+0x100/0x230 [ 191.841789][ T9201] ? do_syscall_64+0xb6/0x230 [ 191.846492][ T9201] do_syscall_64+0xf3/0x230 [ 191.851025][ T9201] ? clear_bhb_loop+0x35/0x90 [ 191.855726][ T9201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.861635][ T9201] RIP: 0033:0x7f4b3f1799f9 [ 191.866060][ T9201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.885703][ T9201] RSP: 002b:00007f4b3ffbc038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 191.894132][ T9201] RAX: ffffffffffffffda RBX: 00007f4b3f315f80 RCX: 00007f4b3f1799f9 [ 191.902129][ T9201] RDX: 0000000000000a0d RSI: 00000000200066c0 RDI: 0000000000000006 [ 191.910432][ T9201] RBP: 00007f4b3ffbc090 R08: 0000000000000000 R09: 0000000000000000 [ 191.918438][ T9201] R10: 000000f000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.926421][ T9201] R13: 0000000000000000 R14: 00007f4b3f315f80 R15: 00007ffd66a1f6f8 [ 191.934420][ T9201] [ 192.236797][ T9208] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1149'. [ 192.854058][ T9228] Cannot find set identified by id 0 to match [ 193.383030][ T9235] pimreg: entered allmulticast mode [ 193.414890][ T9235] pimreg: left allmulticast mode [ 193.678213][ T9238] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 193.692621][ T9240] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1160'. [ 193.896847][ T9246] lo speed is unknown, defaulting to 1000 [ 194.018211][ T9250] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1162'. [ 195.225413][ T9273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1158'. [ 195.455723][ T9275] pimreg: entered allmulticast mode [ 195.476602][ T9275] pimreg: left allmulticast mode [ 195.578691][ T9277] netlink: 9396 bytes leftover after parsing attributes in process `syz.2.1171'. [ 195.753268][ T9281] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1172'. [ 196.302016][ T9292] FAULT_INJECTION: forcing a failure. [ 196.302016][ T9292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.345192][ T9292] CPU: 0 UID: 0 PID: 9292 Comm: syz.0.1176 Not tainted 6.11.0-rc2-syzkaller-00326-gf547e956dd84 #0 [ 196.355946][ T9292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 196.366157][ T9292] Call Trace: [ 196.369467][ T9292] [ 196.372512][ T9292] dump_stack_lvl+0x241/0x360 [ 196.377243][ T9292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.382489][ T9292] ? __pfx__printk+0x10/0x10 [ 196.387136][ T9292] ? __pfx_lock_release+0x10/0x10 [ 196.392212][ T9292] should_fail_ex+0x3b0/0x4e0 [ 196.396927][ T9292] _copy_from_user+0x2f/0xe0 [ 196.401557][ T9292] copy_msghdr_from_user+0xae/0x680 [ 196.406854][ T9292] ? __pfx___might_resched+0x10/0x10 [ 196.412193][ T9292] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 196.418060][ T9292] ? __might_fault+0xaa/0x120 [ 196.422793][ T9292] do_recvmmsg+0x40f/0xae0 [ 196.427259][ T9292] ? __pfx_lock_release+0x10/0x10 [ 196.432333][ T9292] ? __pfx_do_recvmmsg+0x10/0x10 [ 196.437333][ T9292] ? rcu_read_lock_any_held+0xb7/0x160 [ 196.442950][ T9292] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 196.448890][ T9292] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 196.454571][ T9292] ? sb_end_write+0xe9/0x1c0 [ 196.459206][ T9292] ? vfs_write+0x7c4/0xc90 [ 196.463690][ T9292] ? __pfx_do_sys_openat2+0x10/0x10 [ 196.469061][ T9292] __x64_sys_recvmmsg+0x199/0x250 [ 196.474112][ T9292] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 196.479763][ T9292] ? do_syscall_64+0x100/0x230 [ 196.484641][ T9292] ? do_syscall_64+0xb6/0x230 [ 196.489349][ T9292] do_syscall_64+0xf3/0x230 [ 196.493875][ T9292] ? clear_bhb_loop+0x35/0x90 [ 196.498655][ T9292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.504914][ T9292] RIP: 0033:0x7f68049799f9 [ 196.509360][ T9292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.528979][ T9292] RSP: 002b:00007f68056d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 196.537408][ T9292] RAX: ffffffffffffffda RBX: 00007f6804b15f80 RCX: 00007f68049799f9 [ 196.545387][ T9292] RDX: 0000000000000a0d RSI: 00000000200066c0 RDI: 0000000000000006 [ 196.553368][ T9292] RBP: 00007f68056d4090 R08: 0000000000000000 R09: 0000000000000000 [ 196.561346][ T9292] R10: 000000f000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.569329][ T9292] R13: 0000000000000000 R14: 00007f6804b15f80 R15: 00007fff9da79ac8 [ 196.577328][ T9292] [ 196.733090][ T9296] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.741423][ T9296] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.921231][ T9296] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.928558][ T9296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.936139][ T9296] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.943344][ T9296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.967088][ T9296] bridge0: entered promiscuous mode [ 196.974126][ T9296] bridge0: entered allmulticast mode [ 197.134842][ T9303] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1180'. [ 197.625148][ T9311] pimreg: entered allmulticast mode [ 197.658967][ T9311] pimreg: left allmulticast mode [ 198.077620][ T9320] bridge0: port 2(bridge_slave_1) entered listening state [ 198.700494][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1188'. [ 198.722231][ T9330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1188'. [ 198.915098][ T5231] Bluetooth: hci3: command 0x0405 tx timeout [ 199.034163][ T9343] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 199.169818][ T9347] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1195'. [ 199.421452][ T9351] pimreg: entered allmulticast mode [ 199.441599][ T9351] pimreg: left allmulticast mode [ 199.859435][ T9359] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1200'. [ 200.056027][ T9367] Cannot find set identified by id 0 to match [ 200.922797][ T9377] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1206'. [ 201.075207][ T5236] Bluetooth: hci0: command tx timeout [ 201.131742][ T9383] pimreg: entered allmulticast mode [ 201.164914][ T9383] pimreg: left allmulticast mode [ 201.711199][ T9406] netlink: 'syz.3.1217': attribute type 9 has an invalid length. [ 201.852785][ T9411] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1219'. [ 201.877350][ T5243] Bluetooth: hci4: command 0x0406 tx timeout [ 201.883470][ T5236] Bluetooth: hci2: command 0x0406 tx timeout [ 201.883489][ T4618] Bluetooth: hci1: command 0x0406 tx timeout [ 202.972682][ T9439] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1229'. [ 202.996446][ T9439] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 203.139688][ T9441] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1230'. [ 203.383466][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 203.396194][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 203.413902][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 203.453520][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 203.461891][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 203.470737][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 203.621014][ T9448] lo speed is unknown, defaulting to 1000 [ 203.916512][ T9458] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1234'. [ 204.510880][ T9474] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1241'. [ 204.612349][ T9478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1243'. [ 204.751411][ T9478] bond1: entered promiscuous mode [ 204.825271][ T9479] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 204.874362][ T9479] ip6gretap1: entered promiscuous mode [ 204.886964][ T9479] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 205.246278][ T9499] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1248'. [ 205.391390][ T9448] chnl_net:caif_netlink_parms(): no params data found [ 205.555226][ T54] Bluetooth: hci5: command tx timeout [ 205.927792][ T9522] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1253'. [ 205.992340][ T9448] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.028639][ T9448] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.059168][ T9448] bridge_slave_0: entered allmulticast mode [ 206.090596][ T9448] bridge_slave_0: entered promiscuous mode [ 206.132909][ T9448] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.171604][ T9448] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.199634][ T9448] bridge_slave_1: entered allmulticast mode [ 206.220692][ T9448] bridge_slave_1: entered promiscuous mode [ 206.293257][ T9534] FAULT_INJECTION: forcing a failure. [ 206.293257][ T9534] name failslab, interval 1, probability 0, space 0, times 0 [ 206.336418][ T9536] xt_NFQUEUE: number of total queues is 0 [ 206.345162][ T9534] CPU: 1 UID: 0 PID: 9534 Comm: syz.1.1256 Not tainted 6.11.0-rc2-syzkaller-00326-gf547e956dd84 #0 [ 206.355946][ T9534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 206.366048][ T9534] Call Trace: [ 206.369370][ T9534] [ 206.370172][ T9536] netlink: 'syz.2.1257': attribute type 4 has an invalid length. [ 206.372315][ T9534] dump_stack_lvl+0x241/0x360 [ 206.384781][ T9534] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.390048][ T9534] ? __pfx__printk+0x10/0x10 [ 206.394706][ T9534] ? fs_reclaim_acquire+0x93/0x140 [ 206.399874][ T9534] ? __pfx___might_resched+0x10/0x10 [ 206.405224][ T9534] should_fail_ex+0x3b0/0x4e0 [ 206.409600][ T9536] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1257'. [ 206.409927][ T9534] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 206.424960][ T9534] should_failslab+0xac/0x100 [ 206.429693][ T9534] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 206.435454][ T9534] __kmalloc_noprof+0xd8/0x400 [ 206.440245][ T9534] ? kfree+0x4e/0x360 [ 206.444243][ T9534] tomoyo_realpath_from_path+0xcf/0x5e0 [ 206.449864][ T9534] tomoyo_path_number_perm+0x23a/0x880 [ 206.455367][ T9534] ? tomoyo_path_number_perm+0x208/0x880 [ 206.461029][ T9534] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 206.467067][ T9534] ? __fget_files+0x29/0x470 [ 206.471704][ T9534] ? __fget_files+0x3f6/0x470 [ 206.476398][ T9534] ? __fget_files+0x29/0x470 [ 206.481023][ T9534] security_file_ioctl+0x75/0xb0 [ 206.485981][ T9534] __se_sys_ioctl+0x47/0x170 [ 206.490677][ T9534] do_syscall_64+0xf3/0x230 [ 206.495202][ T9534] ? clear_bhb_loop+0x35/0x90 [ 206.499894][ T9534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.505805][ T9534] RIP: 0033:0x7fa8f2f799f9 [ 206.510232][ T9534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.529882][ T9534] RSP: 002b:00007fa8f3d6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 206.538319][ T9534] RAX: ffffffffffffffda RBX: 00007fa8f3115f80 RCX: 00007fa8f2f799f9 [ 206.546305][ T9534] RDX: 0000000020000000 RSI: 0000000000008914 RDI: 000000000000000a [ 206.554286][ T9534] RBP: 00007fa8f3d6e090 R08: 0000000000000000 R09: 0000000000000000 [ 206.562268][ T9534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.570250][ T9534] R13: 0000000000000000 R14: 00007fa8f3115f80 R15: 00007fff493e5a48 [ 206.578248][ T9534] [ 206.592097][ T9448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.602321][ T9534] ERROR: Out of memory at tomoyo_realpath_from_path. [ 206.645452][ T9448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.868421][ T9448] team0: Port device team_slave_0 added [ 206.920545][ T9448] team0: Port device team_slave_1 added [ 206.974368][ T9548] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1260'. [ 206.992782][ T9548] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1260'. [ 207.032923][ T9542] ɶƣ0GCTw: entered promiscuous mode [ 207.059264][ T9539] openvswitch: ɶƣ0GCTw: Dropping previously announced user features [ 207.236898][ T9448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.243911][ T9448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.333227][ T9448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.374053][ T9448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.404928][ T9448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.469408][ T9448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.491570][ T9559] netlink: 'syz.1.1264': attribute type 1 has an invalid length. [ 207.625327][ T9559] bond4: entered promiscuous mode [ 207.636363][ T54] Bluetooth: hci5: command 0x041b tx timeout [ 207.654452][ T9562] vlan3: entered promiscuous mode [ 207.712548][ T9566] bond4: left promiscuous mode [ 207.718370][ T9566] 8021q: adding VLAN 0 to HW filter on device bond4 [ 207.856851][ T9576] FAULT_INJECTION: forcing a failure. [ 207.856851][ T9576] name failslab, interval 1, probability 0, space 0, times 0 [ 207.894385][ T9576] CPU: 0 UID: 0 PID: 9576 Comm: syz.3.1269 Not tainted 6.11.0-rc2-syzkaller-00326-gf547e956dd84 #0 [ 207.894477][ T9448] hsr_slave_0: entered promiscuous mode [ 207.905108][ T9576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 207.905125][ T9576] Call Trace: [ 207.905134][ T9576] [ 207.905145][ T9576] dump_stack_lvl+0x241/0x360 [ 207.905187][ T9576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.905222][ T9576] ? __pfx__printk+0x10/0x10 [ 207.905257][ T9576] ? fs_reclaim_acquire+0x93/0x140 [ 207.905291][ T9576] ? __pfx___might_resched+0x10/0x10 [ 207.905319][ T9576] ? dynamic_dname+0x141/0x1b0 [ 207.905360][ T9576] should_fail_ex+0x3b0/0x4e0 [ 207.905389][ T9576] ? tomoyo_encode+0x26f/0x540 [ 207.905422][ T9576] should_failslab+0xac/0x100 [ 207.905459][ T9576] ? tomoyo_encode+0x26f/0x540 [ 207.905487][ T9576] __kmalloc_noprof+0xd8/0x400 [ 207.905518][ T9576] tomoyo_encode+0x26f/0x540 [ 207.985237][ T9576] ? __pfx_sockfs_dname+0x10/0x10 [ 207.990295][ T9576] tomoyo_realpath_from_path+0x59e/0x5e0 [ 207.995958][ T9576] tomoyo_path_number_perm+0x23a/0x880 [ 208.001437][ T9576] ? tomoyo_path_number_perm+0x208/0x880 [ 208.007085][ T9576] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 208.013115][ T9576] ? __fget_files+0x29/0x470 [ 208.017732][ T9576] ? __fget_files+0x3f6/0x470 [ 208.022425][ T9576] ? __fget_files+0x29/0x470 [ 208.027038][ T9576] security_file_ioctl+0x75/0xb0 [ 208.031998][ T9576] __se_sys_ioctl+0x47/0x170 [ 208.036613][ T9576] do_syscall_64+0xf3/0x230 [ 208.041141][ T9576] ? clear_bhb_loop+0x35/0x90 [ 208.045857][ T9576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.051798][ T9576] RIP: 0033:0x7eff429799f9 [ 208.056241][ T9576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.075865][ T9576] RSP: 002b:00007eff436f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.084383][ T9576] RAX: ffffffffffffffda RBX: 00007eff42b15f80 RCX: 00007eff429799f9 [ 208.092486][ T9576] RDX: 0000000020000000 RSI: 0000000000008914 RDI: 000000000000000a [ 208.100470][ T9576] RBP: 00007eff436f3090 R08: 0000000000000000 R09: 0000000000000000 [ 208.108456][ T9576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.116449][ T9576] R13: 0000000000000000 R14: 00007eff42b15f80 R15: 00007ffcce473ea8 [ 208.124452][ T9576] [ 208.148003][ T9448] hsr_slave_1: entered promiscuous mode [ 208.160237][ T9448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.171944][ T9448] Cannot create hsr debugfs directory [ 208.188214][ T9576] ERROR: Out of memory at tomoyo_realpath_from_path. [ 208.275670][ T9583] Cannot find set identified by id 0 to match [ 208.631671][ T9586] __nla_validate_parse: 4 callbacks suppressed [ 208.631696][ T9586] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1272'. [ 208.731246][ T9589] No such timeout policy "syz0" [ 208.846116][ T9448] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.919756][ T9589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1273'. [ 208.953239][ T9589] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 208.995301][ T9589] gretap1: entered promiscuous mode [ 209.013806][ T9589] gretap1: entered allmulticast mode [ 209.109912][ T9448] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.273364][ T9448] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.403625][ T9599] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1277'. [ 209.528370][ T9448] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.715457][ T5248] Bluetooth: hci5: command 0x041b tx timeout [ 210.003028][ T9448] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 210.083264][ T9448] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 210.263087][ T9448] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 210.302461][ T9448] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 210.387680][ T9622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1282'. [ 210.421929][ T9630] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 210.454638][ T9630] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 210.482579][ T9630] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 210.666219][ T9448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.747811][ T9448] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.787274][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.794508][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.880261][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.887527][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.185166][ T9637] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1289'. [ 211.257976][ T9642] FAULT_INJECTION: forcing a failure. [ 211.257976][ T9642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.317086][ T9642] CPU: 1 UID: 0 PID: 9642 Comm: syz.1.1290 Not tainted 6.11.0-rc2-syzkaller-00326-gf547e956dd84 #0 [ 211.327840][ T9642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 211.337950][ T9642] Call Trace: [ 211.341270][ T9642] [ 211.344240][ T9642] dump_stack_lvl+0x241/0x360 [ 211.348980][ T9642] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.354246][ T9642] ? __pfx__printk+0x10/0x10 [ 211.358901][ T9642] ? __pfx_lock_release+0x10/0x10 [ 211.363990][ T9642] should_fail_ex+0x3b0/0x4e0 [ 211.368723][ T9642] _copy_from_user+0x2f/0xe0 [ 211.373386][ T9642] copy_msghdr_from_user+0xae/0x680 [ 211.378639][ T9642] ? __pfx___might_resched+0x10/0x10 [ 211.383982][ T9642] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 211.389859][ T9642] ? __might_fault+0xaa/0x120 [ 211.394603][ T9642] do_recvmmsg+0x40f/0xae0 [ 211.399090][ T9642] ? __pfx_lock_release+0x10/0x10 [ 211.404192][ T9642] ? __pfx_do_recvmmsg+0x10/0x10 [ 211.409203][ T9642] ? rcu_read_lock_any_held+0xb7/0x160 [ 211.414721][ T9642] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 211.420682][ T9642] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 211.426379][ T9642] ? sb_end_write+0xe9/0x1c0 [ 211.431021][ T9642] ? vfs_write+0x7c4/0xc90 [ 211.435519][ T9642] ? __pfx_do_sys_openat2+0x10/0x10 [ 211.440784][ T9642] __x64_sys_recvmmsg+0x199/0x250 [ 211.445869][ T9642] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 211.451476][ T9642] ? do_syscall_64+0x100/0x230 [ 211.456301][ T9642] ? do_syscall_64+0xb6/0x230 [ 211.461050][ T9642] do_syscall_64+0xf3/0x230 [ 211.465614][ T9642] ? clear_bhb_loop+0x35/0x90 [ 211.470344][ T9642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.476287][ T9642] RIP: 0033:0x7fa8f2f799f9 [ 211.480745][ T9642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.500490][ T9642] RSP: 002b:00007fa8f3d6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 211.508954][ T9642] RAX: ffffffffffffffda RBX: 00007fa8f3115f80 RCX: 00007fa8f2f799f9 [ 211.516970][ T9642] RDX: 0000000000000a0d RSI: 00000000200066c0 RDI: 0000000000000006 [ 211.525068][ T9642] RBP: 00007fa8f3d6e090 R08: 0000000000000000 R09: 0000000000000000 [ 211.533088][ T9642] R10: 000000f000000000 R11: 0000000000000246 R12: 0000000000000002 [ 211.541107][ T9642] R13: 0000000000000000 R14: 00007fa8f3115f80 R15: 00007fff493e5a48 [ 211.549229][ T9642] [ 211.753744][ T9448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.795596][ T5248] Bluetooth: hci5: command 0x041b tx timeout [ 212.571010][ T9675] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 212.740493][ T9448] veth0_vlan: entered promiscuous mode [ 212.801256][ T9448] veth1_vlan: entered promiscuous mode [ 212.918972][ T9448] veth0_macvtap: entered promiscuous mode [ 212.961775][ T9448] veth1_macvtap: entered promiscuous mode [ 213.067554][ T9685] pimreg: entered allmulticast mode [ 213.097441][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.134827][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.162037][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.183310][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.204965][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.225169][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.245636][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.274824][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.307846][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.326677][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.356716][ T9448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.384891][ T9685] pimreg: left allmulticast mode [ 213.445280][ T9690] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1303'. [ 213.513825][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.549448][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.594899][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.623156][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.662755][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.694026][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.714652][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.735363][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.769919][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.800946][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.847364][ T9448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.875047][ T5248] Bluetooth: hci5: command 0x041b tx timeout [ 213.885174][ T9448] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.902134][ T9448] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.911291][ T9448] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.925054][ T9448] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.267239][ T2957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.278449][ T9703] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1308'. [ 214.279057][ T2957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.429032][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.474904][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.553567][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1311'. [ 214.595693][ T9712] openvswitch: netlink: Flow actions attr not present in new flow. [ 214.678863][ T9712] syzkaller1: entered promiscuous mode [ 214.685526][ T9712] syzkaller1: entered allmulticast mode [ 215.944252][ T9745] veth0: entered promiscuous mode [ 215.980324][ T9745] veth0: left promiscuous mode [ 216.256197][ T9748] netlink: 'syz.4.1321': attribute type 10 has an invalid length. [ 216.310097][ T9749] netlink: 'syz.4.1321': attribute type 10 has an invalid length. [ 216.477396][ T9756] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1323'. [ 216.530354][ T9755] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1323'. [ 216.669410][ T9755] bond0: entered promiscuous mode [ 216.697320][ T9755] bond_slave_1: entered promiscuous mode [ 217.030328][ T9776] pimreg: entered allmulticast mode [ 217.064344][ T9776] pimreg: left allmulticast mode [ 217.073753][ T9778] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1330'. [ 217.590876][ T9792] IPv6: sit1: Disabled Multicast RS [ 217.685002][ T9795] netlink: 'syz.2.1336': attribute type 11 has an invalid length. [ 218.438266][ T9829] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 218.712778][ T9836] pim6reg: tun_chr_ioctl cmd 1074025677 [ 218.744915][ T9836] pim6reg: linktype set to 823 [ 218.771987][ T9836] netlink: 'syz.3.1350': attribute type 8 has an invalid length. [ 218.810588][ T9836] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1350'. [ 218.863838][ T9840] tap0: tun_chr_ioctl cmd 1074025678 [ 218.888406][ T9840] tap0: group set to 0 [ 218.894001][ T9840] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1353'. [ 218.937369][ T9840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1353'. [ 219.353351][ T9851] netlink: 'syz.1.1356': attribute type 7 has an invalid length. [ 219.361359][ T9851] netlink: 'syz.1.1356': attribute type 39 has an invalid length. [ 219.470202][ T9851] bridge1: port 1(gretap1) entered blocking state [ 219.498589][ T9851] bridge1: port 1(gretap1) entered disabled state [ 219.524572][ T9851] gretap1: entered allmulticast mode [ 219.543159][ T9851] gretap1: entered promiscuous mode [ 219.573718][ T9859] netlink: 'syz.1.1356': attribute type 7 has an invalid length. [ 219.593629][ T9859] netlink: 'syz.1.1356': attribute type 39 has an invalid length. [ 219.653597][ T9863] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1358'. [ 220.006537][ T9876] sctp: [Deprecated]: syz.4.1362 (pid 9876) Use of int in maxseg socket option. [ 220.006537][ T9876] Use struct sctp_assoc_value instead [ 220.060626][ T9880] x_tables: duplicate underflow at hook 2 [ 220.110912][ T9882] pimreg: entered allmulticast mode [ 220.122509][ T9882] pimreg: left allmulticast mode [ 220.197960][ T9886] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 220.511906][ T9903] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1366'. [ 220.777361][ T9912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1372'. [ 221.735664][ T9936] pimreg: entered allmulticast mode [ 221.750046][ T9940] FAULT_INJECTION: forcing a failure. [ 221.750046][ T9940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.769597][ T9936] pimreg: left allmulticast mode [ 221.794890][ T9940] CPU: 1 UID: 0 PID: 9940 Comm: syz.2.1382 Not tainted 6.11.0-rc2-syzkaller-00326-gf547e956dd84 #0 [ 221.805648][ T9940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 221.815744][ T9940] Call Trace: [ 221.819065][ T9940] [ 221.822030][ T9940] dump_stack_lvl+0x241/0x360 [ 221.826770][ T9940] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.832035][ T9940] ? __pfx__printk+0x10/0x10 [ 221.836678][ T9940] ? __pfx_lock_release+0x10/0x10 [ 221.841762][ T9940] should_fail_ex+0x3b0/0x4e0 [ 221.846491][ T9940] _copy_from_user+0x2f/0xe0 [ 221.851128][ T9940] copy_msghdr_from_user+0xae/0x680 [ 221.856377][ T9940] ? __pfx___might_resched+0x10/0x10 [ 221.861704][ T9940] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 221.867572][ T9940] ? __might_fault+0xaa/0x120 [ 221.872301][ T9940] do_recvmmsg+0x40f/0xae0 [ 221.876775][ T9940] ? __pfx_lock_release+0x10/0x10 [ 221.881851][ T9940] ? __pfx_do_recvmmsg+0x10/0x10 [ 221.886857][ T9940] ? rcu_read_lock_any_held+0xb7/0x160 [ 221.892368][ T9940] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 221.898314][ T9940] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 221.903998][ T9940] ? sb_end_write+0xe9/0x1c0 [ 221.908628][ T9940] ? vfs_write+0x7c4/0xc90 [ 221.913124][ T9940] ? __pfx_do_sys_openat2+0x10/0x10 [ 221.918389][ T9940] __x64_sys_recvmmsg+0x199/0x250 [ 221.923469][ T9940] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 221.929065][ T9940] ? do_syscall_64+0x100/0x230 [ 221.933882][ T9940] ? do_syscall_64+0xb6/0x230 [ 221.938611][ T9940] do_syscall_64+0xf3/0x230 [ 221.943162][ T9940] ? clear_bhb_loop+0x35/0x90 [ 221.947889][ T9940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.953818][ T9940] RIP: 0033:0x7fdc2c9799f9 [ 221.958268][ T9940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.977920][ T9940] RSP: 002b:00007fdc2d82f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 221.986377][ T9940] RAX: ffffffffffffffda RBX: 00007fdc2cb15f80 RCX: 00007fdc2c9799f9 [ 221.994388][ T9940] RDX: 0000000000000a0d RSI: 00000000200066c0 RDI: 0000000000000006 [ 222.002398][ T9940] RBP: 00007fdc2d82f090 R08: 0000000000000000 R09: 0000000000000000 [ 222.010409][ T9940] R10: 000000f000000000 R11: 0000000000000246 R12: 0000000000000002 [ 222.018422][ T9940] R13: 0000000000000000 R14: 00007fdc2cb15f80 R15: 00007ffd4a464168 [ 222.026457][ T9940] [ 222.770493][ T9962] netlink: 'syz.0.1390': attribute type 2 has an invalid length. [ 222.806907][ T9962] IPv6: Can't replace route, no match found [ 222.861151][ T9977] RDS: rds_bind could not find a transport for ::8000:20:0:0, load rds_tcp or rds_rdma? [ 222.950934][ T9972] can: request_module (can-proto-0) failed. [ 223.187333][ T9989] nbd: couldn't find a device at index 1073741824 [ 223.223940][ T9989] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1399'. [ 223.246288][ T9989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.861906][ T9999] netlink: 'syz.3.1401': attribute type 10 has an invalid length. [ 223.900543][ T9999] team0: Device ipvlan1 failed to register rx_handler [ 224.407948][T10015] IPVS: stopping backup sync thread 6753 ... [ 224.450026][T10015] [ 224.452425][T10015] ====================================================== [ 224.459464][T10015] WARNING: possible circular locking dependency detected [ 224.466508][T10015] 6.11.0-rc2-syzkaller-00326-gf547e956dd84 #0 Not tainted [ 224.473640][T10015] ------------------------------------------------------ [ 224.480855][T10015] syz.0.1407/10015 is trying to acquire lock: [ 224.486938][T10015] ffffffff8fc81c88 (rtnl_mutex){+.+.}-{3:3}, at: ip_mc_drop_socket+0x81/0x280 [ 224.496112][T10015] [ 224.496112][T10015] but task is already holding lock: [ 224.503483][T10015] ffff888023b65750 (&smc->clcsock_release_lock){+.+.}-{3:3}, at: smc_setsockopt+0x1c3/0xe50 [ 224.513605][T10015] [ 224.513605][T10015] which lock already depends on the new lock. [ 224.513605][T10015] [ 224.524016][T10015] [ 224.524016][T10015] the existing dependency chain (in reverse order) is: [ 224.533064][T10015] [ 224.533064][T10015] -> #2 (&smc->clcsock_release_lock){+.+.}-{3:3}: [ 224.541702][T10015] lock_acquire+0x1ed/0x550 [ 224.546836][T10015] __mutex_lock+0x136/0xd70 [ 224.551876][T10015] smc_switch_to_fallback+0x35/0xdb0 [ 224.557725][T10015] smc_sendmsg+0x11f/0x530 [ 224.562695][T10015] __sock_sendmsg+0x221/0x270 [ 224.567905][T10015] __sys_sendto+0x3a4/0x4f0 [ 224.572938][T10015] __x64_sys_sendto+0xde/0x100 [ 224.578226][T10015] do_syscall_64+0xf3/0x230 [ 224.583263][T10015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.589693][T10015] [ 224.589693][T10015] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 224.597350][T10015] lock_acquire+0x1ed/0x550 [ 224.602415][T10015] lock_sock_nested+0x48/0x100 [ 224.607721][T10015] do_ip_setsockopt+0x1a2d/0x3cd0 [ 224.613319][T10015] ip_setsockopt+0x63/0x100 [ 224.618361][T10015] do_sock_setsockopt+0x3af/0x720 [ 224.623913][T10015] __sys_setsockopt+0x1ae/0x250 [ 224.629295][T10015] __x64_sys_setsockopt+0xb5/0xd0 [ 224.635025][T10015] do_syscall_64+0xf3/0x230 [ 224.640075][T10015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.646523][T10015] [ 224.646523][T10015] -> #0 (rtnl_mutex){+.+.}-{3:3}: [ 224.653749][T10015] validate_chain+0x18e0/0x5900 [ 224.659133][T10015] __lock_acquire+0x137a/0x2040 [ 224.664520][T10015] lock_acquire+0x1ed/0x550 [ 224.669558][T10015] __mutex_lock+0x136/0xd70 [ 224.674598][T10015] ip_mc_drop_socket+0x81/0x280 [ 224.679980][T10015] inet_release+0x96/0x200 [ 224.684934][T10015] sock_release+0x82/0x150 [ 224.689883][T10015] stop_sync_thread+0x4e6/0x5e0 [ 224.695266][T10015] do_ip_vs_set_ctl+0x47b/0x13d0 [ 224.700737][T10015] nf_setsockopt+0x295/0x2c0 [ 224.705868][T10015] smc_setsockopt+0x275/0xe50 [ 224.711073][T10015] do_sock_setsockopt+0x3af/0x720 [ 224.716629][T10015] __sys_setsockopt+0x1ae/0x250 [ 224.722016][T10015] __x64_sys_setsockopt+0xb5/0xd0 [ 224.727580][T10015] do_syscall_64+0xf3/0x230 [ 224.732639][T10015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.739080][T10015] [ 224.739080][T10015] other info that might help us debug this: [ 224.739080][T10015] [ 224.749310][T10015] Chain exists of: [ 224.749310][T10015] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 224.749310][T10015] [ 224.762888][T10015] Possible unsafe locking scenario: [ 224.762888][T10015] [ 224.770959][T10015] CPU0 CPU1 [ 224.776330][T10015] ---- ---- [ 224.781783][T10015] lock(&smc->clcsock_release_lock); [ 224.787165][T10015] lock(sk_lock-AF_INET); [ 224.794109][T10015] lock(&smc->clcsock_release_lock); [ 224.802714][T10015] lock(rtnl_mutex); [ 224.806804][T10015] [ 224.806804][T10015] *** DEADLOCK *** [ 224.806804][T10015] [ 224.814949][T10015] 1 lock held by syz.0.1407/10015: [ 224.820060][T10015] #0: ffff888023b65750 (&smc->clcsock_release_lock){+.+.}-{3:3}, at: smc_setsockopt+0x1c3/0xe50 [ 224.830704][T10015] [ 224.830704][T10015] stack backtrace: [ 224.836603][T10015] CPU: 0 UID: 0 PID: 10015 Comm: syz.0.1407 Not tainted 6.11.0-rc2-syzkaller-00326-gf547e956dd84 #0 [ 224.847631][T10015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 224.857780][T10015] Call Trace: [ 224.861082][T10015] [ 224.864029][T10015] dump_stack_lvl+0x241/0x360 [ 224.868736][T10015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.873958][T10015] ? print_circular_bug+0x130/0x1a0 [ 224.879164][T10015] check_noncircular+0x36a/0x4a0 [ 224.884111][T10015] ? __pfx_delayed_put_task_struct+0x10/0x10 [ 224.890137][T10015] ? __pfx_check_noncircular+0x10/0x10 [ 224.895609][T10015] ? lockdep_lock+0x123/0x2b0 [ 224.900302][T10015] ? do_syscall_64+0xf3/0x230 [ 224.905002][T10015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.911169][T10015] ? validate_chain+0x11e/0x5900 [ 224.916120][T10015] validate_chain+0x18e0/0x5900 [ 224.920996][T10015] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 224.927020][T10015] ? __pfx_validate_chain+0x10/0x10 [ 224.932246][T10015] ? call_rcu+0x738/0xa70 [ 224.936604][T10015] ? lockdep_hardirqs_on+0x99/0x150 [ 224.941823][T10015] ? __pfx_call_rcu+0x10/0x10 [ 224.946514][T10015] ? put_task_stack+0x1a2/0x230 [ 224.951386][T10015] ? mark_lock+0x9a/0x350 [ 224.955739][T10015] __lock_acquire+0x137a/0x2040 [ 224.960616][T10015] lock_acquire+0x1ed/0x550 [ 224.965131][T10015] ? ip_mc_drop_socket+0x81/0x280 [ 224.970167][T10015] ? __pfx_lock_acquire+0x10/0x10 [ 224.975209][T10015] ? __pfx___might_resched+0x10/0x10 [ 224.980516][T10015] __mutex_lock+0x136/0xd70 [ 224.985061][T10015] ? ip_mc_drop_socket+0x81/0x280 [ 224.990099][T10015] ? _raw_spin_unlock_irq+0x2e/0x50 [ 224.995308][T10015] ? wait_for_completion+0x555/0x620 [ 225.000699][T10015] ? ip_mc_drop_socket+0x81/0x280 [ 225.005739][T10015] ? __pfx___mutex_lock+0x10/0x10 [ 225.010813][T10015] ? __mutex_unlock_slowpath+0x21d/0x750 [ 225.016474][T10015] ip_mc_drop_socket+0x81/0x280 [ 225.021336][T10015] inet_release+0x96/0x200 [ 225.025770][T10015] sock_release+0x82/0x150 [ 225.030207][T10015] stop_sync_thread+0x4e6/0x5e0 [ 225.035083][T10015] do_ip_vs_set_ctl+0x47b/0x13d0 [ 225.040042][T10015] ? __pfx___might_resched+0x10/0x10 [ 225.045347][T10015] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 225.050740][T10015] ? rcu_is_watching+0x15/0xb0 [ 225.055527][T10015] ? __mutex_unlock_slowpath+0x21d/0x750 [ 225.061184][T10015] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 225.067186][T10015] ? __pfx___mutex_lock+0x10/0x10 [ 225.072236][T10015] ? module_put+0x13a/0x2d0 [ 225.076758][T10015] nf_setsockopt+0x295/0x2c0 [ 225.081368][T10015] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 225.087280][T10015] smc_setsockopt+0x275/0xe50 [ 225.091970][T10015] ? __pfx_smc_setsockopt+0x10/0x10 [ 225.097177][T10015] ? aa_sock_opt_perm+0x79/0x120 [ 225.102127][T10015] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 225.107691][T10015] ? security_socket_setsockopt+0x87/0xb0 [ 225.113436][T10015] ? __pfx_smc_setsockopt+0x10/0x10 [ 225.118644][T10015] do_sock_setsockopt+0x3af/0x720 [ 225.123686][T10015] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 225.129248][T10015] ? __fget_files+0x29/0x470 [ 225.133855][T10015] ? __fget_files+0x3f6/0x470 [ 225.138557][T10015] __sys_setsockopt+0x1ae/0x250 [ 225.143421][T10015] __x64_sys_setsockopt+0xb5/0xd0 [ 225.148489][T10015] do_syscall_64+0xf3/0x230 [ 225.153029][T10015] ? clear_bhb_loop+0x35/0x90 [ 225.157732][T10015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.163637][T10015] RIP: 0033:0x7f68049799f9 [ 225.168059][T10015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.187771][T10015] RSP: 002b:00007f68056d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 225.196198][T10015] RAX: ffffffffffffffda RBX: 00007f6804b15f80 RCX: 00007f68049799f9 [ 225.204270][T10015] RDX: 000000000000048c RSI: 0000000000000000 RDI: 0000000000000003 [ 225.212250][T10015] RBP: 00007f68049e78ee R08: 0000000000000018 R09: 0000000000000000 [ 225.220232][T10015] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 225.228210][T10015] R13: 0000000000000000 R14: 00007f6804b15f80 R15: 00007fff9da79ac8 [ 225.236206][T10015]