last executing test programs: 17.363026684s ago: executing program 0 (id=3411): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000040)=""/11, &(0x7f00000000c0)=0xb) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x53}, {&(0x7f0000000fc0)=""/4096, 0x564}, {&(0x7f0000000400)=""/106, 0x14}, {&(0x7f0000000740)=""/73, 0x60}, {&(0x7f0000000200)=""/77, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x2, &(0x7f0000003700)={0x77359400}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x7}, 0x10) close(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f0000000140)=0x7ff, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000400)={0x4, &(0x7f0000000040)=[{0x2, 0x3f, 0x54, 0x7}, {0x3, 0x1f, 0x3f, 0x8}, {0xf6, 0xee, 0x0, 0x10000}, {0x7, 0x6, 0x1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) getsockopt$inet_int(r5, 0x0, 0x1, &(0x7f0000000480), &(0x7f0000000540)=0x4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x18, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}, 0x1, 0xba01}, 0x0) close(0x4) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000300)) 16.448439607s ago: executing program 0 (id=3425): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c) sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x502c, @mcast2, 0x5}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000100)="b47ed3c07f28dab2b07c2a1132de45b097f8bdc7f1e180f4ec7588953d3b2b64777c7e3e8aa2117f58b9e8", 0x2b}, {&(0x7f0000000140)="3020a1cabf2a444a88bfb9816573", 0xe}, {&(0x7f0000000180)="0f7a054c8317ec940180357e0990790fe732067bd89189c398c2d71c6394", 0x1e}, {&(0x7f00000001c0)="8cddb92c49bd2d537fd4472d5886fba45bbe55c04d10df64ce21673db2df10563aac67c95819a058348083c2a8be9180dea1d8b856d3410089fccde70e9318ba8a6f26d38d0c6e13d3fc50eb03ac21e395a17f2a01488c6f64b4b04c3c99ca32db32c8824fab778b960955a7fdcd68f45741cb3acc7ce43748e66e5d781e1e7e16d7922657fec53ef43fed4be924daa127b1d8ae6bfbbbb520a8a2a37bd2b4b6bd11e4bc1833cc59b12d3b4cd1524f0067", 0xb1}, {&(0x7f0000000280)="80fe7b626b710e1a715f3fb1d1bbd29b629128d3f549330112f6c20d6a4b7ab0f7c401052b99346916ff5e9c5390bcac9f6d03f658eb3fd9361324f4f15f010c719432ee3572e1a6a93ad17a745cf325a8adf281407816aa58667be93cee041e28e92ae997da8c21508576f75d61760973e4bb94e0f3ddc565c9207bfe83022dc35a7151265a29f237d454bec92bfd02ff27af0b699af0c8de9b607c778bc60bb733ce553e46b5848e68e87ba11a89c93007cabd21e1be877e330ef1b75dd1edd8040d", 0xc3}, {&(0x7f0000000380)="e67bc6fbbc8d167565d633b22f1cb83b52854a97429c81355122a21a1ab53381c217a6d5fdbb4bf381c8dfc047219ec928f6efcfba244ac15d7175c51558596cfc9f8037cd26e532e25c55898656c1ea2ad829a74b6b9614cd182f64e3de5ee5c99ff46aacb7c389b649fc639d328c2b930b777c32", 0x75}, {&(0x7f0000000400)="f315ddec48f600657aa3469b3ed972c51f80344c46e26a60831484eeeb69723124e50729a1dff6c90e53e584caf366ba2c8fc1396882a27f54333081a518c11d8cba53fba4751546672de284d89b814a071a1a575bf287a564b96b47bc87c444038e8cc3bf71e385fd8499374ded5a30b710c8e4864d2986740e0b890c4439f7dad7d90f6b99de", 0x87}, {&(0x7f00000004c0)="668e89489d1e262a06795c42a789378e39587c9b2fef2dbbaa75b2b818862260196351cd0ba709df2f102deeb1836dc5c4c8b8925dca1d83106c2fabd64e156590ba0196571243ad1dec51ab61af14fa6ce92c2468b06daed83ac0ce3c3048a2f647256243283b2516f4a3d71e4b31b2", 0x70}, {&(0x7f0000000540)="d3699c372244b819bedb2fce", 0xc}, {&(0x7f0000000580)="33ef6978440c48aa46fa233bb14bf6969ba650ad89a07eb0aeb153787af573c39fbd2545cd87762ffc97282a", 0x2c}], 0xa}}, {{&(0x7f0000000680)={0xa, 0x4e21, 0x0, @mcast1, 0x9}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f00000006c0)="ca2b2856f1fc61551f9e400678cafa825678ae4c469164694b0df43dc231e4b86aac3b7f4500eafa2f56eb152189dc5f4fdff9f2ce1d28b6a8c49382816aa5af004dbb95a44c8dbc4f8439870988cba04bea8478cb829dd07b6e638e1645c72cf12ce359811b53084f01fc7ae0c958d1b2c012fd666c346708fb2eac435a", 0x7e}, {&(0x7f0000000740)="4d8bdb2a518d94d594999eabb8f329ff1cb12b135620472bdaf629764299cd87a1600756790a8eb5933939e4a698944add3f31a9d658e063d788c18a58c7ea6517e28cdab8870426bedd98517db1c6eab9d15d029f6720da3283c3bc81d93209df2905066f9c7e51a49cbf2f36d1f25dfcec590d5b7cf2cabf8bf66055bef62a6788f1f5cbbfafe260e766e7b1809c93a81871", 0x93}, {&(0x7f0000000800)="dbf866397fdfeb901a028bc4f52fb0f1e87dcffcdfa73463089e71d6dd5e3ccaf84d15dab509874409ee10196275709d7cead845389b4288316953485f0bba92f4e9310912228bd3d3ba6542e06a5228018ae6b62016db8acbba7ef0a3cb64a151", 0x61}, {&(0x7f0000000880)="49683afa0fe17ba5994b8ff2a87514853bf07c5186be6d5df77508daab053c2223e649d61a5306950d6dbadf58d6653372c4a531c6893216", 0x38}, {&(0x7f00000008c0)="002cefcef78b07ef4da17479ed6c1f5b59c5a6279f4153e722e46e76831238b1069c69b678df2ea88ff47407a62309634f7b1b471cafe7243146e1e219ead3439fe52047ebc121725e0c1774f08f312ba7ada58e8e97cacaf2f6186f20a1afd1fb8ebebf8c1a55502ac5a8db525e6c", 0x6f}, {&(0x7f0000000940)="26eefcd52530991aba813b73a783296cddf093", 0x13}, {&(0x7f0000000980)="7a309015a0d3748766951997be6cea4867af2d42d358f7914786e71d67633143c1525d92aa3a5c6c0fb2922a3882dd1c0d2a4c69b28871cfbb730f7f237851fa93f477f6fd35a4b55fd1a779fe59d344994aeedb6e74b673469b6c089606a5962c52d47902014302c529303ec42cabb2e92205d87e61900b8b5bc639f349b78cd223f36d8c982e1378502eec49d7555fc10062867754d854c262c0d5d4e39bffceb631f952ad63c546dc310355249822d18f112532b97a2aab7a56117092f281f2b9e742ea7064ddd155795a", 0xcc}, {&(0x7f0000000a80)="ba07a9ea56a69a65890c0a852d4f18f091b4570dfbfcfb5a36d5214d9b57dd980717147f7a3954fdd3900746a9b2b956fe63a2f9e38741e244017a107ab0c3d26ebed72d7c6ead2ef0793055a48e1ec2a93f9216b633c924b7412ae7cf834f15b2e054fb7503f62c", 0x68}, {&(0x7f0000000b00)="18ccaa186d6d3610", 0x8}, {&(0x7f0000000b40)="e23963b739430b5fcbadb40331664ed35c726eadace6812e08e0174d875a073ee3e554f03173b24031492ec895a61dd90dbbd6f6af5b3951e6b77f86a48847b8e9b3b80d16417d59092542578da2e41057fdd06505396635b1114f6fa27b", 0x5e}], 0xa}}], 0x2, 0x8000) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000d00)={r0, 0x100000000, 0x7, 0x1}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000008}, 0x4080) socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000e40)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000e80)=0x14) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000ec0)={0x0, 0xd, 0x10, 0x5, 0xfcce, 0x9, 0xfffc, 0x45, {r2, @in={{0x2, 0x4e20, @broadcast}}, 0xe33, 0x7, 0x80000001, 0xfffffffe, 0x2}}, &(0x7f0000000f80)=0xb0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000fc0)=0x8020, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000001000)=0xffffffffffffffff, 0x4) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000001080)=@add_del={0x2, &(0x7f0000001040)='vcan0\x00'}) connect$llc(r1, &(0x7f00000010c0)={0x1a, 0x201, 0x5, 0xa, 0x8, 0x9, @random="d3d33bc10b48"}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000001280)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001240)={&(0x7f0000001180)={0xbc, r4, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:crypt_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x37}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:auditd_log_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0xbc}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4001) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002540)={&(0x7f00000012c0)="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", &(0x7f00000022c0)=""/192, &(0x7f0000002380)="9e4ecc296a4ce81c6572766e2cd6273d3f608377dd111961fba1f0fc645f5bcdea324ae834ed91f559808cf67feedb9f5535c614de021d635a18b1a723dff289b4a8e9a27d66c649b49052c4a67f70502a1b64032c2bddab021a1d1bb72ebcf1e5a0ba2b71a3dc0c3fe8df4d3f3779d25d74b51340a29d0cbb598fac78abf987bbac6a9e19120be325b5a66a5099de3b1f0c9bc77ca9ba0ef2ff752782d23e697875d7dc80d4e5bbb24e0de7abdc0bcedc935975a6f7b9942c62bf26", &(0x7f0000002440)="1e395dcd6082cc96f6d9581669a0bdba8851768f69a46ff8a52f6e66e427ad07a70768b2feb66a285e0ab8028b9d5db2d54d83f588931282db1d527ae359dfab67f255c4dfb6912a814e608d2800d69e4d02c643f4edb0b2f01044babb72d4f079ccdc3cf8b92dc6f162fb6188c6c3c9e5310b6bb33660be3093f155a3cbd2a007e453970b5c13c25396096917171e0fe1dbb1bd3c78fa4f6c16494e182c8563fafd4ad98434f5cfb482b09e5562def36b113cd438d510d5de7e45b0ab0f068e31f5e4e7bc1ef70281ee1c6ae8986b27cfb3302fbd73c23a9e77a9", 0x693, r1}, 0x38) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000002680)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)={0x58, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x81) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000026c0)={'wlan0\x00'}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000002700)) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000002740)={0xeb, 0x5, '\x00', [@hao={0xc9, 0x10, @private0}, @pad1, @hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x9e}]}, 0x38) r5 = socket$inet(0x2, 0x800, 0x3ff) connect$inet(r5, &(0x7f0000002780)={0x2, 0x4e23, @multicast1}, 0x10) syz_emit_ethernet(0x56, &(0x7f00000027c0)={@broadcast, @remote, @void, {@canfd={0xd, {{0x4, 0x1, 0x1}, 0x11, 0x0, 0x0, 0x0, "94d9c3c93558871f7802cba3f467fb269659098cbb0454dedf35b5f5eb18838f18a5d51a1f4156a741c8224d15d011fc7f0f31a09a0a96c91b0aad0fd237af1c"}}}}, &(0x7f0000002840)={0x0, 0x2, [0xecc, 0xf78, 0xcdd, 0xfe]}) connect$inet6(r0, &(0x7f0000002880)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00', 0x2}, 0x1c) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002900), r3) sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f0000002a00)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x58, r6, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040054}, 0x20000000) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000003b80)={&(0x7f0000002a40)="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", &(0x7f0000003a40)=""/52, &(0x7f0000003a80)="bffa1c0e93ebb66b8d7441b3bc7ce892345791633ccf449d43db2650fab32b71a1e40559bff63b55e9b0af454ea229a0dab6f1371c5c61b5d2180eb53466e3fc1e94abf64fdb1dcc4db878fb40df370ab3136f380ce194c9ed593c12b4f16b20b59d5ef6ac179cc3", &(0x7f0000003b00)="32b82bd6f414b65b1e2e92ef9e000eded25d389faec0b39ee32cbec709a1255b1586144580fe80cbb3ad9e91f27608865925156dc827c639e08ea641d9203f326fe353c2f5e1439464dfbb4e0eabe0046afb9634f68df9639958fa4b341b0877e8247afdf6e7cd6cb574a827f71e2c20d950be3d60940401805cb1cc39", 0x7, r1}, 0x38) clock_gettime(0x0, &(0x7f0000006f00)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000006dc0)=[{{&(0x7f0000003bc0), 0x6e, &(0x7f0000003d00)=[{&(0x7f0000003c40)=""/118, 0x76}, {&(0x7f0000003cc0)=""/52, 0x34}], 0x2}}, {{0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000003d40)=""/228, 0xe4}, {&(0x7f0000003e40)=""/53, 0x35}, {&(0x7f0000003e80)=""/100, 0x64}, {&(0x7f0000003f00)=""/4096, 0x1000}, {&(0x7f0000004f00)=""/4096, 0x1000}, {&(0x7f0000005f00)=""/78, 0x4e}, {&(0x7f0000005f80)=""/55, 0x37}], 0x7, &(0x7f0000006040)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f00000060c0), 0x6e, &(0x7f0000006600)=[{&(0x7f0000006140)=""/105, 0x69}, {&(0x7f00000061c0)=""/142, 0x8e}, {&(0x7f0000006280)=""/225, 0xe1}, {&(0x7f0000006380)=""/238, 0xee}, {&(0x7f0000006480)=""/51, 0x33}, {&(0x7f00000064c0)=""/186, 0xba}, {&(0x7f0000006580)=""/98, 0x62}], 0x7, &(0x7f0000006680)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000006b00)=[{&(0x7f0000006740)=""/61, 0x3d}, {&(0x7f0000006780)=""/242, 0xf2}, {&(0x7f0000006880)=""/214, 0xd6}, {&(0x7f0000006980)=""/73, 0x49}, {&(0x7f0000006a00)=""/251, 0xfb}], 0x5, &(0x7f0000006b80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000006c00), 0x6e, &(0x7f0000006d40)=[{&(0x7f0000006c80)=""/39, 0x27}, {&(0x7f0000006cc0)=""/92, 0x5c}], 0x2, &(0x7f0000006d80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}], 0x5, 0x103, &(0x7f0000006f40)={r7, r8+60000000}) 16.31939708s ago: executing program 0 (id=3429): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@gettclass={0x24, 0x2a, 0x10d, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) (fail_nth: 3) 16.199698365s ago: executing program 0 (id=3431): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x13, 0x5, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x48) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000040)=0x400, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x2, 0x1d, &(0x7f0000000680)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018340e00030000000000000000000000184a00000000000000000000000000000e3500000400000018400000f9ffffff00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x1, 0x2d, &(0x7f0000000500)=""/45, 0x41000, 0x4, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000700)=[{0x3, 0x3, 0x7, 0x7}, {0x1, 0x1, 0x2, 0x4}, {0x4, 0x4, 0xa, 0x5}, {0x4, 0x5, 0xd, 0xc}, {0x0, 0x2, 0x10, 0x2}, {0x5, 0xfffffffd, 0xffffffff}, {0x4, 0x2, 0x2, 0xc}, {0x3, 0x5, 0xe, 0xa}, {0x1, 0x2, 0xb, 0x8}], 0x10, 0x7}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r4}, 0x10) r5 = openat$cgroup_ro(r2, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000400)}, 0x10) bind$bt_hci(r8, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) socket$netlink(0x10, 0x3, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000010000000000000020000000000a00"/40], 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x20041805) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r9 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r9, 0x6, 0x21, 0x0, 0x2e) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r10, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) 11.84420478s ago: executing program 2 (id=3500): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x800, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000010000000000000000000000005000600000000000a0000fffffffb00fc02000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000100140000000000010015"], 0x80}, 0x1, 0x7}, 0x0) 11.695060695s ago: executing program 3 (id=3502): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) recvmmsg(r0, &(0x7f0000009640)=[{{&(0x7f0000000700)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000780)=""/80, 0x50}, {&(0x7f0000000900)=""/73, 0x49}, {&(0x7f0000000180)=""/30, 0x1e}, {&(0x7f0000000980)=""/83, 0x53}, {&(0x7f0000000a00)=""/120, 0x78}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000000240)=""/62, 0x3e}], 0x7}, 0x9}, {{&(0x7f0000000c40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000002280)=""/4096, 0x1000}], 0x1, &(0x7f0000000cc0)=""/159, 0x9f}, 0x7453}, {{&(0x7f0000003280)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000640)=""/46, 0x2e}], 0x1, &(0x7f0000003340)=""/212, 0xd4}, 0x8}, {{&(0x7f0000003440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003900)=[{&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/161, 0xa1}, {&(0x7f0000003600)=""/45, 0x2d}, {&(0x7f0000003680)=""/91, 0x5b}, {&(0x7f0000003700)=""/109, 0x6d}, {&(0x7f0000003780)=""/1, 0x1}, {&(0x7f00000037c0)=""/19, 0x13}, {&(0x7f0000003800)=""/227, 0xe3}], 0x8, &(0x7f00000039c0)=""/238, 0xee}, 0xffff8001}, {{&(0x7f0000003ac0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000003b40)=""/235, 0xeb}, {&(0x7f0000003c40)=""/125, 0x7d}, {&(0x7f0000003cc0)=""/209, 0xd1}, {&(0x7f0000003dc0)=""/123, 0x7b}], 0x4, &(0x7f0000003e80)=""/188, 0xbc}, 0xb7}, {{&(0x7f0000003f40)=@isdn, 0x80, &(0x7f00000052c0)=[{&(0x7f0000003fc0)=""/193, 0xc1}, {&(0x7f00000040c0)=""/193, 0xc1}, {&(0x7f00000041c0)=""/24, 0x18}, {&(0x7f0000004200)=""/4096, 0x1000}, {&(0x7f0000005200)=""/161, 0xa1}], 0x5, &(0x7f0000005340)=""/99, 0x63}, 0x9}, {{&(0x7f00000053c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000059c0)=[{&(0x7f0000005440)=""/207, 0xcf}, {&(0x7f0000005540)=""/107, 0x6b}, {&(0x7f00000055c0)=""/30, 0x1e}, {&(0x7f0000005600)=""/83, 0x53}, {&(0x7f0000005680)=""/136, 0x88}, {&(0x7f0000005740)=""/212, 0xd4}, {&(0x7f0000005840)=""/126, 0x7e}, {&(0x7f00000058c0)=""/242, 0xf2}], 0x8}, 0x3}, {{0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000005a40)=""/106, 0x6a}, {&(0x7f0000005ac0)=""/65, 0x41}, {&(0x7f0000005b40)=""/39, 0x27}, {&(0x7f0000005b80)=""/108, 0x6c}, {&(0x7f0000005c00)=""/4096, 0x1000}, {&(0x7f0000006c00)=""/72, 0x48}, {&(0x7f0000006c80)=""/123, 0x7b}, {&(0x7f0000006d00)=""/4096, 0x1000}], 0x8, &(0x7f0000007d80)=""/81, 0x51}, 0x5}, {{&(0x7f0000007e00)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000090c0)=[{&(0x7f0000007e80)=""/65, 0x41}, {&(0x7f0000007f00)=""/4096, 0x1000}, {&(0x7f0000008f00)=""/172, 0xac}, {&(0x7f0000008fc0)=""/181, 0xb5}, {&(0x7f0000009080)}], 0x5, &(0x7f0000009140)=""/108, 0x6c}, 0x1}, {{&(0x7f00000091c0)=@ieee802154, 0x80, &(0x7f00000094c0)=[{&(0x7f0000009240)}, {&(0x7f0000009280)=""/142, 0x8e}, {&(0x7f0000009340)=""/186, 0xba}, {&(0x7f0000009400)=""/51, 0x33}, {&(0x7f0000009440)=""/71, 0x47}], 0x5, &(0x7f0000009540)=""/244, 0xf4}, 0x401}], 0xa, 0x0, 0x0) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 11.611785157s ago: executing program 2 (id=3503): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x9) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000005180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac14143be000000200000000110000000000000000000000010000000e000000000000001100000000000000000000000100000005000000000000001400000000000000000000000100000000000000000000003c0000000000010d00000000070000000704a32c940401004420de9000000009000000020000e4230000001000000007000000090000000094040100000000001100000000000000000000000100000004000000000000001100000000000000000000000100000002060000000000001c00"], 0xf8}}], 0x1, 0x0) 11.557462976s ago: executing program 2 (id=3505): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10e, 0x10e, 0xb, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0xff}}, @var={0x1, 0x0, 0x0, 0xe, 0x5}, @func={0x4, 0x0, 0x0, 0xc, 0x3}, @datasec={0x2, 0x9, 0x0, 0xf, 0x2, [{0x5, 0x7, 0x800}, {0x4, 0xa590, 0x9}, {0x4, 0xc2a, 0x3}, {0x2, 0x1, 0x7}, {0x2, 0x3ff, 0x200}, {0x5, 0x8, 0x9}, {0x0, 0x6, 0x5}, {0x1, 0x8, 0x7f}, {0x5, 0xd, 0xe}], "e93e"}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x1, 0x4}, {0xd, 0x3}, {0x1, 0x2}]}, @const={0x1, 0x0, 0x0, 0xa, 0x5}, @fwd={0x7}, @const={0xb, 0x0, 0x0, 0xa, 0x2}, @struct={0xc, 0x1, 0x0, 0x4, 0x0, 0x3, [{0x7, 0x0, 0x2}]}]}, {0x0, [0x0, 0x2e, 0x61, 0x30, 0x2e, 0x2e, 0x0, 0x61, 0x5f]}}, &(0x7f0000000b00)=""/163, 0x133, 0xa3, 0x1, 0x88c}, 0x20) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x2e4, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, r1, 0x0, '\x00', 0x0, r0}, 0x48) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000001300)="d252f20c45b15e62c2507365e5a850e2441d79d2f070f91558ec2bc945382915960e9faf9fd76ac6a17fc66e31799151729fc35b5a2ccfd720d92450ce6f43", 0x3f}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x7, 0x4, 0x21, 0xc1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0), &(0x7f0000001280), 0xb46, r2}, 0x38) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000100)={r2, &(0x7f0000002240)="046e9abe", 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x2b, 0x80801, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180), 0xfea7) socket$inet_dccp(0x2, 0x6, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d010000000000000040293cb90008000300", @ANYRES32=r5], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r9, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r8, r7, 0x0, 0x100000002) 11.348851122s ago: executing program 2 (id=3508): socketpair(0x15, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=@newqdisc={0x5e8, 0x24, 0x0, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x1}, {0xc}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_STAB={0xb8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9f, 0x7, 0xd9b, 0xc, 0x2, 0xb, 0x7, 0x4}}, {0xc, 0x2, [0x6, 0x2, 0x2, 0x4]}}, {{0x1c, 0x1, {0x80, 0x3, 0xfff, 0x2, 0x0, 0x609, 0xffffffa4, 0xa}}, {0x18, 0x2, [0x6, 0xd, 0x0, 0x8, 0xa, 0x6, 0x6, 0x4, 0x8000, 0x0]}}, {{0x1c, 0x1, {0x42, 0x2, 0x6, 0x9, 0x2, 0x1ff, 0x0, 0x9}}, {0x16, 0x2, [0x5, 0x3, 0x43d, 0xd82, 0x3, 0x0, 0x9, 0x0, 0x81]}}, {{0x1c, 0x1, {0x8, 0x3, 0x58, 0x1, 0x1, 0x6, 0x280, 0x2}}, {0x8, 0x2, [0x3, 0x10]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x8}}]}}, @TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x3, 0x7, 0xc9, 0x0, 0xfffffffa, 0x7, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x2, 0x6, 0xfeff, 0x8000, 0x1, 0x9, 0x6f9, 0x5}}, {0xe, 0x2, [0x5bf2, 0x6, 0x4, 0xec47, 0x81]}}, {{0x1c, 0x1, {0x5, 0x40, 0x9, 0x8, 0x0, 0x8, 0x0, 0x1}}, {0x6, 0x2, [0xd]}}]}, @qdisc_kind_options=@q_htb={{0x8}, {0x44, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x2}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x5}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x1}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1000}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xff}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @qdisc_kind_options=@q_gred={{0x9}, {0x2a4, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x6, 0x1, 0x5, 0xa, 0x3, 0x7, 0x4, 0x4, 0x3, 0x4e, 0x1a, 0x10, 0x19, 0x1, 0x0, 0x5}}, @TCA_GRED_PARMS={0x38, 0x1, {0x7, 0x4, 0x7f, 0xa, 0x7fffffff, 0x5, 0xf74, 0x1, 0xfd, 0x7f, 0x1d, 0x20, 0x19, 0x5, 0x4, 0x401}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x4}, @TCA_GRED_LIMIT={0x8, 0x5, 0x3}, @TCA_GRED_DPS={0x10, 0x3, {0x10, 0x8, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8, 0x5, 0xf34}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_STAB={0x160, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x4, 0x3, 0xfffffffc, 0x0, 0x7fff, 0xcf, 0x1}}, {0x6, 0x2, [0x400]}}, {{0x1c, 0x1, {0x8, 0x4, 0x46, 0x7, 0x0, 0x8001, 0x9, 0x8}}, {0x14, 0x2, [0x63f, 0x0, 0x8, 0x100, 0x8, 0x57, 0x4, 0x70]}}, {{0x1c, 0x1, {0x3, 0x4, 0xaa, 0x401, 0x0, 0x8000, 0x4, 0xa}}, {0x18, 0x2, [0x2, 0x8, 0x69, 0x8000, 0xbf4, 0x479, 0x8, 0xc, 0x5, 0x4]}}, {{0x1c, 0x1, {0xa5, 0x9, 0x8, 0x7, 0x1, 0x80007ff, 0x3, 0x8}}, {0x14, 0x2, [0x100, 0x4, 0xa, 0x2, 0x9, 0x7, 0xffff, 0x4]}}, {{0x1c, 0x1, {0x60, 0xa, 0x9, 0x955c, 0x2, 0x7fffffff, 0x6908b61b, 0x6}}, {0x10, 0x2, [0x4, 0x1ff, 0x6, 0x9, 0x1d, 0x1]}}, {{0x1c, 0x1, {0x4, 0x5, 0x2, 0x44, 0x1, 0x7aa8, 0x2, 0x5}}, {0xe, 0x2, [0x400, 0x3, 0x9, 0xed3, 0x3]}}, {{0x1c, 0x1, {0x4, 0x5, 0xd, 0x8b8, 0x1, 0x46, 0x7ff, 0x2}}, {0x8, 0x2, [0x3, 0x3]}}, {{0x1c, 0x1, {0x6, 0xb, 0x2, 0x3, 0x2, 0x3, 0xffff4af6, 0x4}}, {0xc, 0x2, [0x3, 0xe54e, 0xfff9, 0x7]}}]}]}, 0x5e8}}, 0x40880) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x80}]}]}, 0x58}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x19, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x32, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="185900001300000000661e6599f41224dc894f1772f8a03a9060691ca8474b6952b548f9e53db87162cc3dc1092a46ad9985cc11a3efc630c1f3471d665a4e48c500bb0ae85937c6fd7dca533effd9b82b52bdfd56aac2e2a35981f1bf5b86857b6fbbd20efd7693dc06fb6625a88cc16bba60a344f27256885cc9fc08e5a1057e8ab529f25f0f95ece48aa327a7c59429554d2a5b4fa1a91295fbb1cb2fdb261fe786711379ff50f1f17d656050903be0c2b9afcbc89954980a0023c9e94561a9a275a0f700d13c0a8dfa390438a1bdd61c8526aa84e658", @ANYRES32=r2, @ANYBLOB="0000000000000080850000002e00000085100000ffffffff8c0080000100000085000000140000001833000004000000000000000000000018000000000001000000000007000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0xed, &(0x7f0000000280)=""/237, 0x41000, 0x8, '\x00', r4, 0x2c, r2, 0x8, &(0x7f0000000180)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x3, 0xc20, 0x467}, 0x10, r5, r2, 0x3, 0x0, &(0x7f0000000580)=[{0x5, 0x1, 0xf, 0x3}, {0x1, 0x1, 0xd, 0xc}, {0x5, 0x5, 0x2, 0x7}], 0x10, 0xffffffff}, 0x90) connect$llc(r3, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f000000d040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x34, r7, 0x8de13c6b70ae92c3, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x34}}, 0x0) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r3, r2, 0x0, 0xffefffff) 10.295001199s ago: executing program 2 (id=3514): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000000ffd07b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018109900", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x4, 0x14, &(0x7f0000001e00)=""/4088}, 0x90) 10.043643951s ago: executing program 2 (id=3515): socket$netlink(0x10, 0x3, 0x14) socket$rxrpc(0x21, 0x2, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)={0x24, 0x0, 0x1, 0x2, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="1f6000000000000000001e00000008000300", @ANYRES32=r6, @ANYBLOB="48002f803800038008000100000000002c00038006000100000000000c0004000201aaaaaaaaaaaa08170200000000000c0004000000"], 0x64}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$binfmt_script(0xffffffffffffffff, &(0x7f00000022c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000c) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffd88) write$nbd(0xffffffffffffffff, 0x0, 0x10) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getnetconf={0x1c, 0x52, 0x401, 0x0, 0x0, {}, [@NETCONFA_PROXY_NEIGH={0x8}]}, 0x1c}}, 0x0) mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x0, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 4.696029446s ago: executing program 4 (id=3538): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@gettclass={0x24, 0x2a, 0x10d, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) (fail_nth: 8) 4.14587461s ago: executing program 4 (id=3540): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001f80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x64, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xba2ceb09c15e9291}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x0, 0x0, 0x6000}, 0x3, 0x8}}]}}]}, 0x64}}, 0x0) 3.983177425s ago: executing program 4 (id=3541): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x39, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x05G'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x8, 0x9, 0x0, 0x1, [@typed={0x4}]}]}, 0x34}, 0x1, 0x21}, 0x0) 3.706342379s ago: executing program 4 (id=3543): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x8, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x9, 0x6}, {0x4, 0xc}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000140)=0x2, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000002100), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$alg(r6, &(0x7f00000041c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="180000000000f60017010000030000000000000000000000180000000000000017010000020000000003000000000000"], 0x30}], 0x1, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) socket$rds(0x15, 0x5, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4715cc6504a6cb3) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="1808000000423b000000000000003b169697f1d1e4840ba1d1afb5fe40a52ccbb15418b6b2dff12546a48eae6d082961c946aba49b43058f26f3bfef99226fccc992d16790c72be34e9aa5a86f14225af9c967c2fc50b8df75ac761273d5cb770561969ecd6e6b30ce721c19452d96636ed515e4a87a0d69fe1726ab962bb27300fc40013e71ab12b138ef36f9ffec5d1e549f770731744d736ecafe5628042be959f7b7a07a297c29f81c79ef1d0f5f2fcff7525d19aeafc474e664b33d30e6d697a35b9898dbc9c6148b404e05026b61683ca1078395cbf242529340f34a2871d52d286551478d8c380a356ee3eb179d0ff22105598a880a968e4bb368883e9e86932a0a6080073a5f3bc4b47271c83fc63c43318953fc7f5a98071586266674bb136357c46aea6ecce67bcebe6af7f8e80945c407dd68622b91b0e77d2ea64fb7dbb05c0e6c8447", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200020000007b9a00fe00000000b509000002000000c39a04fee1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.503754841s ago: executing program 4 (id=3544): sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x14}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff000000000023000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) 3.390852551s ago: executing program 4 (id=3546): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000480)="984ae56e0d", 0x5, 0x0, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/62, 0x1134000, 0x800, 0x0, 0x3}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f00000000c0)="59ec", 0x2}], 0x2}, 0x5003) 2.279234218s ago: executing program 3 (id=3511): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x2f) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) close(r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r7, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, 0x0, 0x3b) readv(r6, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000005c0)="286e1783e08e77a8a3207dfdd8c4a28d7df1a3bdf9e0baa3c9dffc5dcde9dfc057b808261a9556740bafe4def7f2838292f1b92d5fa13e2fa9655c89c72efacfaf41eeb56c3558aa21b380293d27754443def408a16810d77cf4da1c7a8b5a2f64098f83aae9ec6afcd8fafe3fb2131f577d49afa9d43cf6f69ff48b9b2ed5c0c2541a84e26195c464a61d4cd6f529d94fce3a3ee08190a94c82bf2993994460871c90676f", 0xa5}, {&(0x7f0000000680)="c04deb664106ed6a6710567e89bb10579df6c304c11c6ba6a554a708d1c609df3c8044723ffa588b7b114293446dba3bb97c9b69ed3f177dafd8b2dc529fbcbe98396dbacbd9d2", 0x47}, {&(0x7f0000000700)="9b3213b28d6108bead0a03d2a7e45514a85969d90ea61fb4b7c1507cb328e045b65cb10faf3daa93d1aa42408d777e28f258896e74545ea224ef8c64d9c88642913a1ee45eac8fd3e6d84bd29780f1f63d89818239389772e7ee5af6a0ecbbfc6e65", 0x62}, {&(0x7f0000000400)="353586d1", 0x4}, {&(0x7f0000000780)="2c941de7810edfd7347aa78db230b87a37fd5c2bfc12999064110fbe1f96d36c3a261a17697f160f96a446fa642542d22b80bd1865bba8554e0f8d40ba73e82d15554c71e6646f84fca9ff5b3f99089b94ad2db5065436ab6d1a9bc85bd3804ef4c561a855b283aaaaf5b07a930d830cca44c5a95339e3896e18c78378f9fb30c88924d31209c2c4223101c03f4ad981266b90ed7ff9e51e95387b091568a85990fd1db6240effa5d1af7244", 0xac}, {&(0x7f0000000900)="c513ea8a21df743d86bb8539062bc0f1d4153232afc86324e3cc2fad7f2e4d90ac22842d6143199d5b56673dac5ad47af2ed5ba47295718ed668aa392e01f8cfe38961c7e65aa5772672e61ed3144b355f65276585e834a833ce6df8c7655340fee0ed50166daf81246b", 0x6a}], 0x6}, 0x200400c4) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x3, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.163759059s ago: executing program 1 (id=3550): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x42000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) socket$igmp6(0xa, 0x3, 0x2) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) unshare(0x0) r2 = socket$packet(0x11, 0x0, 0x300) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000002c0)=""/5, 0x5}, &(0x7f0000000580), 0x20}}], 0x30}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xc}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509020000d44affe5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r5, 0x0) r6 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000225bd7000fedbdf25090000003000018008000b007369700007000600666f0000060004004e22000006000100020000000c000700100000000600000004000380"], 0x48}, 0x1, 0x0, 0x0, 0x40498c8}, 0x8804) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000008314"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) unshare(0x24000000) 2.06776335s ago: executing program 3 (id=3551): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x10, 0x6, 0x5c0, 0x1f8, 0xd0, 0x0, 0xd0, 0x1f8, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0, 0x2dc}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) 1.995821016s ago: executing program 3 (id=3552): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000002880)=@RTM_GETMDB={0x18, 0x11, 0x1}, 0x18}}, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x7c, r2, 0x300, 0x70bd2a, 0x101, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:inetd_var_run_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r3) sendmsg$NET_DM_CMD_START(r3, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000000)={0x14, r4, 0x401, 0x70bd28, 0x0, {0x2}}, 0x14}}, 0x0) 1.84444166s ago: executing program 3 (id=3553): clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x48, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@nested={0x34, 0x18, 0x0, 0x1, [@generic="d26f71d0dd5521a283b207d8784bf60916fb192d7a26ab94442a4f70cae2bb97dab1ace8d95cd836e16ba0f4ab55b2ef"]}]}, 0x48}}, 0x0) pselect6(0x0, 0x0, &(0x7f0000000a00)={0x8, 0x80000001, 0x4, 0x10000000000009, 0x8, 0x3, 0x4, 0x7}, 0x0, &(0x7f0000000080)={r0, r1+10000000}, &(0x7f0000000b00)={&(0x7f0000000000), 0x8}) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00'}) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x14, 0x6, 0x0, @local, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000280)={&(0x7f0000001c40)=@newtaction={0x68, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0x9}, {0x24, 0x3, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) shutdown(r5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) writev(r10, &(0x7f0000000440)=[{&(0x7f00000004c0)='>', 0x1}], 0x1) close(r5) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvfrom$x25(r11, &(0x7f00000000c0)=""/105, 0x69, 0x42, &(0x7f0000000140), 0x12) 887.648081ms ago: executing program 1 (id=3554): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000380)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x9, 0xe, 0x5}) write$binfmt_script(r1, &(0x7f0000000e00)={'#! ', './file0', [{0x20, '\x00'}, {0x20, '^'}, {}, {}, {0x20, 'syzkaller\x00'}, {0x20, '\x00'}, {0x20, '\x00'}, {0x20, '-%++\a}{\xbe-{!}'}, {0x20, ']-1'}, {0x20, ']'}], 0xa, "8c6253c86bc89f77fe862e89bece6c99c6d238c81ac1f7d89d8524f5d6a7ec5257f3d44374c6b72848611cacdc77eafa13fd90de1f67c147a87782c8ab1c0570776637cd34dd0e008d19fba7ac58a0532946d7a2a02c70debc413cdfa58c5ff26b212b7277ce73a59a55cff7cafdf8937f4f0acb53e28a942239b73d44b9e418a75a5e11e2b106"}, 0xba) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000a9000000000000000200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000380)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x9, 0xe, 0x5}) (async) write$binfmt_script(r1, &(0x7f0000000e00)={'#! ', './file0', [{0x20, '\x00'}, {0x20, '^'}, {}, {}, {0x20, 'syzkaller\x00'}, {0x20, '\x00'}, {0x20, '\x00'}, {0x20, '-%++\a}{\xbe-{!}'}, {0x20, ']-1'}, {0x20, ']'}], 0xa, "8c6253c86bc89f77fe862e89bece6c99c6d238c81ac1f7d89d8524f5d6a7ec5257f3d44374c6b72848611cacdc77eafa13fd90de1f67c147a87782c8ab1c0570776637cd34dd0e008d19fba7ac58a0532946d7a2a02c70debc413cdfa58c5ff26b212b7277ce73a59a55cff7cafdf8937f4f0acb53e28a942239b73d44b9e418a75a5e11e2b106"}, 0xba) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000a9000000000000000200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) (async) 853.351077ms ago: executing program 3 (id=3555): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) unshare(0x0) socket$packet(0x11, 0x0, 0x300) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)={0x20, 0x5e, 0xe25, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x8}]}, @nested={0x4, 0x1}]}, 0x20}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x2b, &(0x7f0000000040)=0x1, 0x4) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x9a1d98c892be3fe1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x28, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'vxcan1\x00', 0x0}) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0xffffffffffffffff, 0x1, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r7}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="7011ffff00000000185690000007000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f00000004c0)='GPL\x00', 0x800, 0x8e, &(0x7f0000000500)=""/142, 0x40f00, 0x24, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0xc, 0x2, 0xd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r0, r7], 0x0, 0x10, 0x1db5}, 0x90) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0xb0b}, 0x14}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r2) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 707.955059ms ago: executing program 1 (id=3556): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) recvmmsg(r0, &(0x7f0000009640)=[{{&(0x7f0000000700)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000780)=""/80, 0x50}, {&(0x7f0000000900)=""/73, 0x49}, {&(0x7f0000000180)=""/30, 0x1e}, {&(0x7f0000000980)=""/83, 0x53}, {&(0x7f0000000a00)=""/120, 0x78}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000000240)=""/62, 0x3e}], 0x7}, 0x9}, {{&(0x7f0000000c40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000002280)=""/4096, 0x1000}], 0x1, &(0x7f0000000cc0)=""/159, 0x9f}, 0x7453}, {{&(0x7f0000003280)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000640)=""/46, 0x2e}], 0x1, &(0x7f0000003340)=""/212, 0xd4}, 0x8}, {{&(0x7f0000003440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003900)=[{&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/161, 0xa1}, {0x0}, {&(0x7f0000003640)=""/58, 0x3a}, {&(0x7f0000003680)=""/91, 0x5b}, {&(0x7f0000003700)=""/109, 0x6d}, {&(0x7f0000003780)=""/1, 0x1}, {&(0x7f00000037c0)=""/19, 0x13}, {&(0x7f0000003800)=""/227, 0xe3}], 0x9, &(0x7f00000039c0)=""/238, 0xee}, 0xffff8001}, {{&(0x7f0000003ac0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000003b40)=""/235, 0xeb}, {&(0x7f0000003c40)=""/125, 0x7d}, {&(0x7f0000003cc0)=""/209, 0xd1}, {&(0x7f0000003dc0)=""/123, 0x7b}], 0x4, &(0x7f0000003e80)=""/188, 0xbc}, 0xb7}, {{&(0x7f0000003f40)=@isdn, 0x80, &(0x7f00000052c0)=[{&(0x7f0000003fc0)=""/193, 0xc1}, {&(0x7f00000040c0)=""/193, 0xc1}, {&(0x7f00000041c0)=""/24, 0x18}, {&(0x7f0000004200)=""/4096, 0x1000}, {&(0x7f0000005200)=""/161, 0xa1}], 0x5, &(0x7f0000005340)=""/99, 0x63}, 0x9}, {{&(0x7f00000053c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000059c0)=[{&(0x7f0000005440)=""/207, 0xcf}, {&(0x7f0000005540)=""/107, 0x6b}, {&(0x7f00000055c0)=""/30, 0x1e}, {&(0x7f0000005600)=""/83, 0x53}, {&(0x7f0000005680)=""/136, 0x88}, {&(0x7f0000005740)=""/212, 0xd4}, {&(0x7f0000005840)=""/126, 0x7e}, {&(0x7f00000058c0)=""/242, 0xf2}], 0x8}, 0x3}, {{0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000005a40)=""/106, 0x6a}, {&(0x7f0000005ac0)=""/65, 0x41}, {&(0x7f0000005b40)=""/39, 0x27}, {&(0x7f0000005b80)=""/108, 0x6c}, {&(0x7f0000005c00)=""/4096, 0x1000}, {&(0x7f0000006c00)=""/72, 0x48}, {&(0x7f0000006c80)=""/123, 0x7b}, {&(0x7f0000006d00)=""/4096, 0x1000}], 0x8, &(0x7f0000007d80)=""/81, 0x51}, 0x5}, {{&(0x7f0000007e00)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000090c0)=[{&(0x7f0000007e80)=""/65, 0x41}, {&(0x7f0000007f00)=""/4096, 0x1000}, {&(0x7f0000008f00)=""/172, 0xac}, {&(0x7f0000008fc0)=""/181, 0xb5}, {&(0x7f0000009080)}], 0x5, &(0x7f0000009140)=""/108, 0x6c}, 0x1}, {{&(0x7f00000091c0)=@ieee802154, 0x80, &(0x7f00000094c0)=[{&(0x7f0000009240)}, {&(0x7f0000009280)=""/142, 0x8e}, {&(0x7f0000009340)=""/186, 0xba}, {&(0x7f0000009400)=""/51, 0x33}, {&(0x7f0000009440)=""/71, 0x47}], 0x5, &(0x7f0000009540)=""/244, 0xf4}, 0x401}], 0xa, 0x0, 0x0) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 535.786316ms ago: executing program 1 (id=3557): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900011873797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000"], 0x7c}}, 0x0) 427.658769ms ago: executing program 0 (id=3532): socket$inet6_sctp(0xa, 0x801, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000006000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) 373.61029ms ago: executing program 1 (id=3558): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@gettclass={0x24, 0x2a, 0x10d, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) (fail_nth: 9) 299.63862ms ago: executing program 0 (id=3559): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) socket$nl_audit(0x10, 0x3, 0x9) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x0, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) bind$tipc(r1, 0x0, 0x0) bind$tipc(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r3, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x210, 0x9403, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x4, 0x8, 0x0, 'syz1\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'lo\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f00000001c0)=0x9c) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}]}, 0x44}}, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @none, 0x1000}, 0xe) syz_emit_ethernet(0x56, &(0x7f00000028c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaa920086dd607ca62300200100fe8038000000000000000000000000bbff02000000000000000000000000000100020000400000000100c910fe8000000000000000000000000000bb00000000"], 0x0) 0s ago: executing program 1 (id=3560): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x90) kernel console output (not intermixed with test programs): /0x390 [ 323.410685][T13189] should_failslab+0xac/0x100 [ 323.415539][T13189] ? skb_clone+0x20c/0x390 [ 323.419951][T13189] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 323.425326][T13189] skb_clone+0x20c/0x390 [ 323.429567][T13189] __netlink_deliver_tap+0x3cc/0x7c0 [ 323.434878][T13189] ? netlink_deliver_tap+0x2e/0x1b0 [ 323.440158][T13189] netlink_deliver_tap+0x19d/0x1b0 [ 323.445260][T13189] netlink_sendskb+0x68/0x140 [ 323.449935][T13189] netlink_unicast+0x39d/0x990 [ 323.454690][T13189] ? __asan_memcpy+0x40/0x70 [ 323.459281][T13189] ? __pfx_netlink_unicast+0x10/0x10 [ 323.464567][T13189] nfnetlink_rcv+0x26b6/0x2ab0 [ 323.469348][T13189] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 323.474485][T13189] ? netlink_deliver_tap+0x2e/0x1b0 [ 323.479669][T13189] ? skb_clone+0x240/0x390 [ 323.484082][T13189] ? __pfx_lock_release+0x10/0x10 [ 323.489111][T13189] ? netlink_deliver_tap+0x2e/0x1b0 [ 323.494303][T13189] netlink_unicast+0x7f6/0x990 [ 323.499072][T13189] ? __pfx_netlink_unicast+0x10/0x10 [ 323.504349][T13189] ? __virt_addr_valid+0x183/0x530 [ 323.509450][T13189] ? __check_object_size+0x49c/0x900 [ 323.514726][T13189] ? bpf_lsm_netlink_send+0x9/0x10 [ 323.519832][T13189] netlink_sendmsg+0x8e4/0xcb0 [ 323.524605][T13189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.529879][T13189] ? __import_iovec+0x536/0x820 [ 323.534718][T13189] ? aa_sock_msg_perm+0x91/0x160 [ 323.539652][T13189] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 323.544931][T13189] ? security_socket_sendmsg+0x87/0xb0 [ 323.550384][T13189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.555656][T13189] __sock_sendmsg+0x221/0x270 [ 323.560335][T13189] ____sys_sendmsg+0x525/0x7d0 [ 323.565103][T13189] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.570394][T13189] __sys_sendmsg+0x2b0/0x3a0 [ 323.574993][T13189] ? __pfx___sys_sendmsg+0x10/0x10 [ 323.580096][T13189] ? vfs_write+0x7c4/0xc90 [ 323.584548][T13189] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 323.590881][T13189] ? do_syscall_64+0x100/0x230 [ 323.595724][T13189] ? do_syscall_64+0xb6/0x230 [ 323.600394][T13189] do_syscall_64+0xf3/0x230 [ 323.604889][T13189] ? clear_bhb_loop+0x35/0x90 [ 323.609561][T13189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.615447][T13189] RIP: 0033:0x7f1bd8379ef9 [ 323.619853][T13189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.639536][T13189] RSP: 002b:00007f1bd918d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.647941][T13189] RAX: ffffffffffffffda RBX: 00007f1bd8515f80 RCX: 00007f1bd8379ef9 [ 323.655902][T13189] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 323.663882][T13189] RBP: 00007f1bd918d090 R08: 0000000000000000 R09: 0000000000000000 [ 323.671841][T13189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 323.679802][T13189] R13: 0000000000000000 R14: 00007f1bd8515f80 R15: 00007ffda58b7d58 [ 323.687778][T13189] [ 323.814351][ T54] Bluetooth: hci3: command 0x0419 tx timeout [ 323.922823][T13194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2584'. [ 323.970595][T13197] IPVS: length: 215 != 24 [ 324.130086][T13202] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.287392][T13208] vlan2: entered allmulticast mode [ 324.292548][T13208] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode [ 324.326434][T13208] mac80211_hwsim hwsim26 wlan1: left allmulticast mode [ 324.643418][T13220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2590'. [ 324.662880][T13220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2590'. [ 325.561558][T13264] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2601'. [ 325.571085][T13264] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2601'. [ 325.682127][T13271] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2604'. [ 325.759977][T13276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2603'. [ 325.771668][T13276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2603'. [ 325.825230][ T54] Bluetooth: hci3: command 0x0419 tx timeout [ 325.936497][T13286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.949942][T13286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.960577][T13286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.971217][T13286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.981505][T13286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.992117][T13286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.446206][T13328] x_tables: duplicate underflow at hook 3 [ 326.979927][T13368] SET target dimension over the limit! [ 327.009374][T13370] netlink: 'syz.4.2635': attribute type 1 has an invalid length. [ 327.616868][T13393] __nla_validate_parse: 5 callbacks suppressed [ 327.616890][T13393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2644'. [ 327.767190][T13396] vlan0: entered promiscuous mode [ 327.775629][T13396] vlan0: entered allmulticast mode [ 327.791128][T13396] veth0_vlan: entered allmulticast mode [ 328.003343][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2646'. [ 328.148881][T13415] netlink: 'syz.1.2651': attribute type 25 has an invalid length. [ 328.164633][T13415] netlink: 'syz.1.2651': attribute type 7 has an invalid length. [ 328.513482][T13433] : entered promiscuous mode [ 328.519374][T13434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2656'. [ 328.528974][T13434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2656'. [ 328.861116][T13447] netlink: 'syz.2.2663': attribute type 25 has an invalid length. [ 328.877760][T13447] netlink: 'syz.2.2663': attribute type 7 has an invalid length. [ 329.125824][T13456] vlan2: entered promiscuous mode [ 329.130985][T13456] vlan2: entered allmulticast mode [ 329.253984][T13460] syzkaller0: entered allmulticast mode [ 329.303409][T13461] syzkaller0 (unregistering): left allmulticast mode [ 329.392925][T13464] openvswitch: : Dropping previously announced user features [ 329.433419][T13466] netlink: 'syz.1.2672': attribute type 15 has an invalid length. [ 329.459104][T13466] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2672'. [ 329.478331][T13468] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2671'. [ 329.837789][T13491] IPv6: NLM_F_REPLACE set, but no existing node found! [ 329.853831][T13492] xt_l2tp: missing protocol rule (udp|l2tpip) [ 329.864536][T13491] xt_l2tp: missing protocol rule (udp|l2tpip) [ 330.019531][T13501] : entered promiscuous mode [ 330.325720][T13514] IPv6: NLM_F_REPLACE set, but no existing node found! [ 330.338717][T13514] IPv6: NLM_F_REPLACE set, but no existing node found! [ 330.671056][T13527] sctp: [Deprecated]: syz.0.2691 (pid 13527) Use of struct sctp_assoc_value in delayed_ack socket option. [ 330.671056][T13527] Use struct sctp_sack_info instead [ 330.975874][T13540] netlink: 'syz.4.2697': attribute type 9 has an invalid length. [ 331.067902][T13543] FAULT_INJECTION: forcing a failure. [ 331.067902][T13543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.101714][T13543] CPU: 0 UID: 0 PID: 13543 Comm: syz.0.2698 Not tainted 6.11.0-rc5-syzkaller-00735-g670726a8262e #0 [ 331.112535][T13543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 331.122615][T13543] Call Trace: [ 331.125909][T13543] [ 331.128855][T13543] dump_stack_lvl+0x241/0x360 [ 331.133557][T13543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.138779][T13543] ? __pfx__printk+0x10/0x10 [ 331.143395][T13543] ? __pfx_lock_release+0x10/0x10 [ 331.148449][T13543] should_fail_ex+0x3b0/0x4e0 [ 331.153158][T13543] _copy_from_user+0x2f/0xe0 [ 331.157767][T13543] copy_msghdr_from_user+0xae/0x680 [ 331.162986][T13543] ? __send_signal_locked+0xb44/0xdc0 [ 331.168382][T13543] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 331.174226][T13543] __sys_recvmsg+0x252/0x3e0 [ 331.178835][T13543] ? bpf_trace_run2+0x1fc/0x540 [ 331.183708][T13543] ? __pfx___sys_recvmsg+0x10/0x10 [ 331.188839][T13543] ? bpf_trace_run2+0x1fc/0x540 [ 331.193684][T13543] ? bpf_trace_run2+0x36e/0x540 [ 331.198539][T13543] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 331.204864][T13543] ? rcu_is_watching+0x15/0xb0 [ 331.209622][T13543] ? trace_sys_enter+0x1f/0xd0 [ 331.214380][T13543] do_syscall_64+0xf3/0x230 [ 331.218880][T13543] ? clear_bhb_loop+0x35/0x90 [ 331.223554][T13543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.229446][T13543] RIP: 0033:0x7fa82db79ef9 [ 331.233853][T13543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.253452][T13543] RSP: 002b:00007fa82e970038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 331.261949][T13543] RAX: ffffffffffffffda RBX: 00007fa82dd15f80 RCX: 00007fa82db79ef9 [ 331.269916][T13543] RDX: 0000000000000002 RSI: 00000000200004c0 RDI: 0000000000000004 [ 331.277880][T13543] RBP: 00007fa82e970090 R08: 0000000000000000 R09: 0000000000000000 [ 331.285842][T13543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.293802][T13543] R13: 0000000000000000 R14: 00007fa82dd15f80 R15: 00007ffccdd1f3d8 [ 331.301779][T13543] [ 331.440834][T13550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2700'. [ 331.474673][T13550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2700'. [ 331.632072][T13560] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 331.702692][T13563] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2704'. [ 331.852109][T13573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2707'. [ 331.903201][T13577] netlink: 'syz.0.2709': attribute type 9 has an invalid length. [ 332.088333][T13586] FAULT_INJECTION: forcing a failure. [ 332.088333][T13586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.119854][T13586] CPU: 0 UID: 0 PID: 13586 Comm: syz.4.2712 Not tainted 6.11.0-rc5-syzkaller-00735-g670726a8262e #0 [ 332.130770][T13586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 332.141194][T13586] Call Trace: [ 332.144495][T13586] [ 332.147443][T13586] dump_stack_lvl+0x241/0x360 [ 332.152158][T13586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.157379][T13586] ? __pfx__printk+0x10/0x10 [ 332.161991][T13586] ? __pfx_lock_release+0x10/0x10 [ 332.167050][T13586] should_fail_ex+0x3b0/0x4e0 [ 332.171755][T13586] _copy_from_user+0x2f/0xe0 [ 332.176452][T13586] copy_msghdr_from_user+0xae/0x680 [ 332.181686][T13586] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 332.187530][T13586] __sys_sendmsg+0x23d/0x3a0 [ 332.192145][T13586] ? __pfx___sys_sendmsg+0x10/0x10 [ 332.197279][T13586] ? vfs_write+0x7c4/0xc90 [ 332.201752][T13586] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 332.208106][T13586] ? do_syscall_64+0x100/0x230 [ 332.212898][T13586] ? do_syscall_64+0xb6/0x230 [ 332.217601][T13586] do_syscall_64+0xf3/0x230 [ 332.222123][T13586] ? clear_bhb_loop+0x35/0x90 [ 332.226918][T13586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.232920][T13586] RIP: 0033:0x7f3684979ef9 [ 332.237348][T13586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.256974][T13586] RSP: 002b:00007f3685828038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.265415][T13586] RAX: ffffffffffffffda RBX: 00007f3684b15f80 RCX: 00007f3684979ef9 [ 332.273412][T13586] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 332.281404][T13586] RBP: 00007f3685828090 R08: 0000000000000000 R09: 0000000000000000 [ 332.289398][T13586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.297387][T13586] R13: 0000000000000000 R14: 00007f3684b15f80 R15: 00007fff4b629928 [ 332.305401][T13586] [ 332.646063][T13599] netlink: 'syz.2.2716': attribute type 25 has an invalid length. [ 332.667673][T13599] netlink: 'syz.2.2716': attribute type 7 has an invalid length. [ 332.700886][T13607] __nla_validate_parse: 1 callbacks suppressed [ 332.700906][T13607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2718'. [ 332.754500][T13607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2718'. [ 332.774996][T13609] netlink: 'syz.4.2714': attribute type 2 has an invalid length. [ 333.063277][T13622] FAULT_INJECTION: forcing a failure. [ 333.063277][T13622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.094308][T13622] CPU: 1 UID: 0 PID: 13622 Comm: syz.2.2721 Not tainted 6.11.0-rc5-syzkaller-00735-g670726a8262e #0 [ 333.105136][T13622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 333.115208][T13622] Call Trace: [ 333.118512][T13622] [ 333.121456][T13622] dump_stack_lvl+0x241/0x360 [ 333.126158][T13622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.131378][T13622] ? __pfx__printk+0x10/0x10 [ 333.135991][T13622] ? __pfx_lock_release+0x10/0x10 [ 333.141051][T13622] should_fail_ex+0x3b0/0x4e0 [ 333.145752][T13622] _copy_from_user+0x2f/0xe0 [ 333.150351][T13622] copy_msghdr_from_user+0xae/0x680 [ 333.155581][T13622] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 333.161438][T13622] __sys_sendmsg+0x23d/0x3a0 [ 333.166036][T13622] ? __pfx___sys_sendmsg+0x10/0x10 [ 333.171226][T13622] ? vfs_write+0x7c4/0xc90 [ 333.175655][T13622] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 333.181984][T13622] ? do_syscall_64+0x100/0x230 [ 333.186750][T13622] ? do_syscall_64+0xb6/0x230 [ 333.191413][T13622] do_syscall_64+0xf3/0x230 [ 333.195921][T13622] ? clear_bhb_loop+0x35/0x90 [ 333.200618][T13622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.206520][T13622] RIP: 0033:0x7f1bd8379ef9 [ 333.210944][T13622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.230548][T13622] RSP: 002b:00007f1bd918d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.239921][T13622] RAX: ffffffffffffffda RBX: 00007f1bd8515f80 RCX: 00007f1bd8379ef9 [ 333.247885][T13622] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 333.255848][T13622] RBP: 00007f1bd918d090 R08: 0000000000000000 R09: 0000000000000000 [ 333.263896][T13622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.271856][T13622] R13: 0000000000000000 R14: 00007f1bd8515f80 R15: 00007ffda58b7d58 [ 333.279831][T13622] [ 333.672666][T13629] pim6reg: entered allmulticast mode [ 333.944972][T13639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2726'. [ 333.995194][T13641] FAULT_INJECTION: forcing a failure. [ 333.995194][T13641] name failslab, interval 1, probability 0, space 0, times 0 [ 334.031698][T13641] CPU: 1 UID: 0 PID: 13641 Comm: syz.1.2727 Not tainted 6.11.0-rc5-syzkaller-00735-g670726a8262e #0 [ 334.042601][T13641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 334.052770][T13641] Call Trace: [ 334.056069][T13641] [ 334.059017][T13641] dump_stack_lvl+0x241/0x360 [ 334.063720][T13641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.068941][T13641] ? __pfx__printk+0x10/0x10 [ 334.073564][T13641] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 334.079570][T13641] ? __pfx___might_resched+0x10/0x10 [ 334.084886][T13641] should_fail_ex+0x3b0/0x4e0 [ 334.089599][T13641] should_failslab+0xac/0x100 [ 334.094297][T13641] ? __alloc_skb+0x1c3/0x440 [ 334.098912][T13641] kmem_cache_alloc_node_noprof+0x71/0x320 [ 334.104734][T13641] __alloc_skb+0x1c3/0x440 [ 334.109144][T13641] ? __pfx___alloc_skb+0x10/0x10 [ 334.114067][T13641] ? netlink_autobind+0xd6/0x2f0 [ 334.118991][T13641] ? netlink_autobind+0x2b0/0x2f0 [ 334.124093][T13641] netlink_sendmsg+0x638/0xcb0 [ 334.128852][T13641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.134156][T13641] ? __import_iovec+0x536/0x820 [ 334.139099][T13641] ? aa_sock_msg_perm+0x91/0x160 [ 334.144047][T13641] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 334.149327][T13641] ? security_socket_sendmsg+0x87/0xb0 [ 334.154787][T13641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.160058][T13641] __sock_sendmsg+0x221/0x270 [ 334.164745][T13641] ____sys_sendmsg+0x525/0x7d0 [ 334.169508][T13641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 334.174880][T13641] __sys_sendmsg+0x2b0/0x3a0 [ 334.179458][T13641] ? __pfx___sys_sendmsg+0x10/0x10 [ 334.184654][T13641] ? vfs_write+0x7c4/0xc90 [ 334.189129][T13641] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 334.195483][T13641] ? do_syscall_64+0x100/0x230 [ 334.200268][T13641] ? do_syscall_64+0xb6/0x230 [ 334.204973][T13641] do_syscall_64+0xf3/0x230 [ 334.209503][T13641] ? clear_bhb_loop+0x35/0x90 [ 334.214203][T13641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.220121][T13641] RIP: 0033:0x7f6b95779ef9 [ 334.224548][T13641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.244170][T13641] RSP: 002b:00007f6b96508038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.252608][T13641] RAX: ffffffffffffffda RBX: 00007f6b95915f80 RCX: 00007f6b95779ef9 [ 334.260604][T13641] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 334.268596][T13641] RBP: 00007f6b96508090 R08: 0000000000000000 R09: 0000000000000000 [ 334.276588][T13641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.284581][T13641] R13: 0000000000000000 R14: 00007f6b95915f80 R15: 00007ffe231794d8 [ 334.292591][T13641] [ 334.485197][T13666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2733'. [ 334.501404][T13666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2733'. [ 334.591370][T13668] netlink: 'syz.4.2736': attribute type 25 has an invalid length. [ 334.609009][T13668] netlink: 'syz.4.2736': attribute type 7 has an invalid length. [ 334.693733][T13672] tipc: Failed to obtain node identity [ 334.724368][T13672] tipc: Enabling of bearer rejected, failed to enable media [ 334.944482][ T54] Bluetooth: hci2: command 0x0405 tx timeout [ 335.005837][T13686] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2741'. [ 335.029481][T13684] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2741'. [ 335.052330][T13684] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2741'. [ 335.062461][T13682] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2741'. [ 335.351976][T13696] openvswitch: : Dropping previously announced user features [ 335.438717][T13701] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 335.789825][T13713] netlink: 'syz.4.2749': attribute type 11 has an invalid length. [ 335.810948][T13713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2749'. [ 337.599057][T13748] netlink: 'syz.2.2760': attribute type 2 has an invalid length. [ 337.613590][T13748] netlink: 'syz.2.2760': attribute type 1 has an invalid length. [ 337.643119][T13748] netlink: 'syz.2.2760': attribute type 7 has an invalid length. [ 337.672042][T13748] netlink: 'syz.2.2760': attribute type 8 has an invalid length. [ 337.689424][T13748] netlink: 'syz.2.2760': attribute type 2 has an invalid length. [ 337.698916][T13755] netlink: 'syz.2.2760': attribute type 7 has an invalid length. [ 337.708937][T13748] netlink: 'syz.2.2760': attribute type 1 has an invalid length. [ 337.721098][T13755] netlink: 'syz.2.2760': attribute type 8 has an invalid length. [ 337.729392][T13748] __nla_validate_parse: 6 callbacks suppressed [ 337.729407][T13748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2760'. [ 337.747722][T13759] netlink: 1320 bytes leftover after parsing attributes in process `syz.4.2763'. [ 338.691468][T13779] FAULT_INJECTION: forcing a failure. [ 338.691468][T13779] name failslab, interval 1, probability 0, space 0, times 0 [ 338.707402][T13779] CPU: 0 UID: 0 PID: 13779 Comm: syz.0.2773 Not tainted 6.11.0-rc5-syzkaller-00735-g670726a8262e #0 [ 338.718197][T13779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 338.728246][T13779] Call Trace: [ 338.731514][T13779] [ 338.734435][T13779] dump_stack_lvl+0x241/0x360 [ 338.739112][T13779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.744301][T13779] ? __pfx__printk+0x10/0x10 [ 338.748885][T13779] ? ref_tracker_alloc+0x332/0x490 [ 338.753991][T13779] should_fail_ex+0x3b0/0x4e0 [ 338.758670][T13779] ? skb_clone+0x20c/0x390 [ 338.763075][T13779] should_failslab+0xac/0x100 [ 338.767748][T13779] ? skb_clone+0x20c/0x390 [ 338.772156][T13779] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 338.777524][T13779] skb_clone+0x20c/0x390 [ 338.781769][T13779] __netlink_deliver_tap+0x3cc/0x7c0 [ 338.787055][T13779] ? netlink_deliver_tap+0x2e/0x1b0 [ 338.792239][T13779] netlink_deliver_tap+0x19d/0x1b0 [ 338.797340][T13779] netlink_unicast+0x7c4/0x990 [ 338.802109][T13779] ? __pfx_netlink_unicast+0x10/0x10 [ 338.807388][T13779] ? __virt_addr_valid+0x183/0x530 [ 338.812522][T13779] ? __check_object_size+0x49c/0x900 [ 338.817810][T13779] ? bpf_lsm_netlink_send+0x9/0x10 [ 338.822917][T13779] netlink_sendmsg+0x8e4/0xcb0 [ 338.827682][T13779] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.832956][T13779] ? __import_iovec+0x536/0x820 [ 338.837799][T13779] ? aa_sock_msg_perm+0x91/0x160 [ 338.842729][T13779] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 338.848049][T13779] ? security_socket_sendmsg+0x87/0xb0 [ 338.853509][T13779] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.858809][T13779] __sock_sendmsg+0x221/0x270 [ 338.863488][T13779] ____sys_sendmsg+0x525/0x7d0 [ 338.868257][T13779] ? __pfx_____sys_sendmsg+0x10/0x10 [ 338.873553][T13779] __sys_sendmsg+0x2b0/0x3a0 [ 338.878157][T13779] ? __pfx___sys_sendmsg+0x10/0x10 [ 338.883271][T13779] ? vfs_write+0x7c4/0xc90 [ 338.887719][T13779] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 338.894056][T13779] ? do_syscall_64+0x100/0x230 [ 338.898824][T13779] ? do_syscall_64+0xb6/0x230 [ 338.903582][T13779] do_syscall_64+0xf3/0x230 [ 338.908094][T13779] ? clear_bhb_loop+0x35/0x90 [ 338.912776][T13779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.918681][T13779] RIP: 0033:0x7fa82db79ef9 [ 338.923096][T13779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.942704][T13779] RSP: 002b:00007fa82e970038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.951115][T13779] RAX: ffffffffffffffda RBX: 00007fa82dd15f80 RCX: 00007fa82db79ef9 [ 338.959078][T13779] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 338.967060][T13779] RBP: 00007fa82e970090 R08: 0000000000000000 R09: 0000000000000000 [ 338.975031][T13779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.983005][T13779] R13: 0000000000000000 R14: 00007fa82dd15f80 R15: 00007ffccdd1f3d8 [ 338.990991][T13779] [ 339.108243][T13785] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2775'. [ 339.223680][ T7893] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.097901][T13818] FAULT_INJECTION: forcing a failure. [ 340.097901][T13818] name failslab, interval 1, probability 0, space 0, times 0 [ 340.110966][T13818] CPU: 0 UID: 0 PID: 13818 Comm: syz.1.2788 Not tainted 6.11.0-rc5-syzkaller-00735-g670726a8262e #0 [ 340.121759][T13818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 340.131839][T13818] Call Trace: [ 340.135138][T13818] [ 340.138084][T13818] dump_stack_lvl+0x241/0x360 [ 340.142785][T13818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.148004][T13818] ? __pfx__printk+0x10/0x10 [ 340.152609][T13818] should_fail_ex+0x3b0/0x4e0 [ 340.157306][T13818] ? skb_clone+0x20c/0x390 [ 340.161719][T13818] should_failslab+0xac/0x100 [ 340.166397][T13818] ? skb_clone+0x20c/0x390 [ 340.170805][T13818] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 340.176174][T13818] skb_clone+0x20c/0x390 [ 340.180414][T13818] ? dev_queue_xmit_nit+0x220/0xc10 [ 340.185604][T13818] dev_queue_xmit_nit+0x419/0xc10 [ 340.190619][T13818] ? dev_queue_xmit_nit+0x2b/0xc10 [ 340.195723][T13818] ? validate_xmit_skb+0x9f9/0x1120 [ 340.200917][T13818] dev_hard_start_xmit+0x15f/0x7e0 [ 340.206023][T13818] ? __pfx_validate_xmit_skb+0x10/0x10 [ 340.211495][T13818] __dev_queue_xmit+0x1b63/0x3e90 [ 340.216516][T13818] ? kasan_save_track+0x51/0x80 [ 340.221365][T13818] ? do_syscall_64+0xf3/0x230 [ 340.226038][T13818] ? __dev_queue_xmit+0x2da/0x3e90 [ 340.231147][T13818] ? __pfx___dev_queue_xmit+0x10/0x10 [ 340.236526][T13818] ? __copy_skb_header+0x437/0x5b0 [ 340.241632][T13818] ? __asan_memcpy+0x40/0x70 [ 340.246231][T13818] ? skb_clone+0x240/0x390 [ 340.250644][T13818] __netlink_deliver_tap+0x54d/0x7c0 [ 340.255929][T13818] ? netlink_deliver_tap+0x2e/0x1b0 [ 340.261114][T13818] netlink_deliver_tap+0x19d/0x1b0 [ 340.266216][T13818] netlink_unicast+0x7c4/0x990 [ 340.270981][T13818] ? __pfx_netlink_unicast+0x10/0x10 [ 340.276260][T13818] ? __virt_addr_valid+0x183/0x530 [ 340.281364][T13818] ? __check_object_size+0x49c/0x900 [ 340.286641][T13818] ? bpf_lsm_netlink_send+0x9/0x10 [ 340.291745][T13818] netlink_sendmsg+0x8e4/0xcb0 [ 340.296509][T13818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.301782][T13818] ? __import_iovec+0x536/0x820 [ 340.306623][T13818] ? aa_sock_msg_perm+0x91/0x160 [ 340.311553][T13818] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 340.316829][T13818] ? security_socket_sendmsg+0x87/0xb0 [ 340.322283][T13818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.327558][T13818] __sock_sendmsg+0x221/0x270 [ 340.332235][T13818] ____sys_sendmsg+0x525/0x7d0 [ 340.337087][T13818] ? __pfx_____sys_sendmsg+0x10/0x10 [ 340.342379][T13818] __sys_sendmsg+0x2b0/0x3a0 [ 340.346965][T13818] ? __pfx___sys_sendmsg+0x10/0x10 [ 340.352067][T13818] ? vfs_write+0x7c4/0xc90 [ 340.356508][T13818] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 340.362832][T13818] ? do_syscall_64+0x100/0x230 [ 340.367590][T13818] ? do_syscall_64+0xb6/0x230 [ 340.372258][T13818] do_syscall_64+0xf3/0x230 [ 340.376753][T13818] ? clear_bhb_loop+0x35/0x90 [ 340.381427][T13818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.387318][T13818] RIP: 0033:0x7f6b95779ef9 [ 340.391724][T13818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.411317][T13818] RSP: 002b:00007f6b96508038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.419725][T13818] RAX: ffffffffffffffda RBX: 00007f6b95915f80 RCX: 00007f6b95779ef9 [ 340.427690][T13818] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 340.435654][T13818] RBP: 00007f6b96508090 R08: 0000000000000000 R09: 0000000000000000 [ 340.443617][T13818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.451576][T13818] R13: 0000000000000000 R14: 00007f6b95915f80 R15: 00007ffe231794d8 [ 340.459552][T13818] [ 340.614801][T13825] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2790'. [ 341.159943][T13852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2798'. [ 341.192538][T13852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2798'. [ 341.210158][T13851] validate_nla: 1 callbacks suppressed [ 341.210176][T13851] netlink: 'syz.3.2799': attribute type 1 has an invalid length. [ 341.240987][T13851] netlink: 'syz.3.2799': attribute type 4 has an invalid length. [ 341.256737][T13851] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.2799'. [ 341.475584][T13861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.502921][T13868] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2802'. [ 341.518021][T13868] openvswitch: : Dropping previously announced user features [ 341.681625][T13874] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2806'. [ 341.772346][T13879] netlink: 'syz.3.2808': attribute type 25 has an invalid length. [ 341.794288][T13879] netlink: 'syz.3.2808': attribute type 7 has an invalid length. [ 342.108017][T13895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2812'. [ 342.330652][T13910] netlink: 'syz.2.2815': attribute type 1 has an invalid length. [ 342.347864][T13910] netlink: 'syz.2.2815': attribute type 4 has an invalid length. [ 342.836561][T13932] xt_l2tp: v2 doesn't support IP mode [ 343.550371][T13945] __nla_validate_parse: 1 callbacks suppressed [ 343.550393][T13945] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2826'. [ 343.662855][T13952] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2828'. [ 344.034844][T13972] netlink: 'syz.3.2834': attribute type 32 has an invalid length. [ 344.046408][T13972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2834'. [ 344.056106][T13972] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 344.793895][T14009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2847'. [ 345.062850][T14023] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2850'. [ 345.083849][T14023] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2850'. [ 345.093247][T14023] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2850'. [ 345.340218][T14041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2856'. [ 345.352418][T14041] caif0: Master is either lo or non-ether device [ 345.462280][T14049] syz.0.2858[14049] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 345.462432][T14049] syz.0.2858[14049] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 345.871511][T14058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2861'. [ 346.271326][T14067] netlink: 'syz.3.2866': attribute type 9 has an invalid length. [ 346.851730][T14099] netlink: 'syz.2.2875': attribute type 4 has an invalid length. [ 346.911796][T14099] netlink: 'syz.2.2875': attribute type 4 has an invalid length. [ 347.071793][T14114] netlink: 'syz.0.2880': attribute type 32 has an invalid length. [ 347.080931][T14114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2880'. [ 347.103183][T14114] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 347.128085][T14115] FAULT_INJECTION: forcing a failure. [ 347.128085][T14115] name failslab, interval 1, probability 0, space 0, times 0 [ 347.142017][T14115] CPU: 1 UID: 0 PID: 14115 Comm: syz.1.2881 Not tainted 6.11.0-rc5-syzkaller-00735-g670726a8262e #0 [ 347.152820][T14115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 347.162895][T14115] Call Trace: [ 347.166189][T14115] [ 347.169134][T14115] dump_stack_lvl+0x241/0x360 [ 347.173833][T14115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.179056][T14115] ? __pfx__printk+0x10/0x10 [ 347.183666][T14115] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 347.189147][T14115] ? __pfx___might_resched+0x10/0x10 [ 347.194900][T14115] should_fail_ex+0x3b0/0x4e0 [ 347.199703][T14115] should_failslab+0xac/0x100 [ 347.204408][T14115] ? rtnl_newlink+0xf2/0x20a0 [ 347.209094][T14115] __kmalloc_cache_noprof+0x6c/0x2c0 [ 347.214372][T14115] rtnl_newlink+0xf2/0x20a0 [ 347.218872][T14115] ? __pfx_lock_acquire+0x10/0x10 [ 347.223891][T14115] ? __mutex_lock+0x99b/0xd70 [ 347.228557][T14115] ? __pfx_lock_release+0x10/0x10 [ 347.233568][T14115] ? do_raw_spin_lock+0x14f/0x370 [ 347.238581][T14115] ? __pfx_rtnl_newlink+0x10/0x10 [ 347.243601][T14115] ? do_raw_spin_unlock+0x13c/0x8b0 [ 347.248812][T14115] ? __mutex_lock+0x9a5/0xd70 [ 347.253497][T14115] ? __mutex_lock+0x527/0xd70 [ 347.258251][T14115] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 347.263357][T14115] ? __pfx___mutex_lock+0x10/0x10 [ 347.268378][T14115] ? __pfx_rtnl_newlink+0x10/0x10 [ 347.273413][T14115] rtnetlink_rcv_msg+0x73f/0xcf0 [ 347.278461][T14115] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 347.283575][T14115] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 347.289029][T14115] ? ref_tracker_free+0x643/0x7e0 [ 347.294065][T14115] netlink_rcv_skb+0x1e3/0x430 [ 347.298859][T14115] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 347.304341][T14115] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 347.309677][T14115] ? netlink_deliver_tap+0x2e/0x1b0 [ 347.312320][T14122] netlink: 'syz.0.2884': attribute type 3 has an invalid length. [ 347.314877][T14115] netlink_unicast+0x7f6/0x990 [ 347.314917][T14115] ? __pfx_netlink_unicast+0x10/0x10 [ 347.314940][T14115] ? __virt_addr_valid+0x183/0x530 [ 347.338426][T14115] ? __check_object_size+0x49c/0x900 [ 347.343704][T14115] ? bpf_lsm_netlink_send+0x9/0x10 [ 347.348828][T14115] netlink_sendmsg+0x8e4/0xcb0 [ 347.353622][T14115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.358911][T14115] ? __import_iovec+0x536/0x820 [ 347.363765][T14115] ? aa_sock_msg_perm+0x91/0x160 [ 347.364482][T14121] xt_cgroup: path and classid specified [ 347.368709][T14115] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 347.368744][T14115] ? security_socket_sendmsg+0x87/0xb0 [ 347.385103][T14115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.390378][T14115] __sock_sendmsg+0x221/0x270 [ 347.395064][T14115] ____sys_sendmsg+0x525/0x7d0 [ 347.399857][T14115] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.405168][T14115] __sys_sendmsg+0x2b0/0x3a0 [ 347.409789][T14115] ? __pfx___sys_sendmsg+0x10/0x10 [ 347.414900][T14115] ? vfs_write+0x7c4/0xc90 [ 347.419339][T14115] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 347.425667][T14115] ? do_syscall_64+0x100/0x230 [ 347.430427][T14115] ? do_syscall_64+0xb6/0x230 [ 347.435182][T14115] do_syscall_64+0xf3/0x230 [ 347.439678][T14115] ? clear_bhb_loop+0x35/0x90 [ 347.444359][T14115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.450274][T14115] RIP: 0033:0x7f6b95779ef9 [ 347.454700][T14115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.474301][T14115] RSP: 002b:00007f6b96508038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.482720][T14115] RAX: ffffffffffffffda RBX: 00007f6b95915f80 RCX: 00007f6b95779ef9 [ 347.490695][T14115] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 347.498678][T14115] RBP: 00007f6b96508090 R08: 0000000000000000 R09: 0000000000000000 [ 347.506663][T14115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.514624][T14115] R13: 0000000000000000 R14: 00007f6b95915f80 R15: 00007ffe231794d8 [ 347.522606][T14115] [ 347.779014][T14136] netlink: 'syz.1.2885': attribute type 29 has an invalid length. [ 347.809802][T14130] netlink: 'syz.1.2885': attribute type 29 has an invalid length. [ 347.818529][T14139] netlink: 'syz.0.2889': attribute type 9 has an invalid length. [ 347.885480][T14141] FAULT_INJECTION: forcing a failure. [ 347.885480][T14141] name failslab, interval 1, probability 0, space 0, times 0 [ 347.918883][T14141] CPU: 0 UID: 0 PID: 14141 Comm: syz.4.2890 Not tainted 6.11.0-rc5-syzkaller-00735-g670726a8262e #0 [ 347.929708][T14141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 347.939794][T14141] Call Trace: [ 347.943087][T14141] [ 347.946032][T14141] dump_stack_lvl+0x241/0x360 [ 347.950737][T14141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.955955][T14141] ? __pfx__printk+0x10/0x10 [ 347.960572][T14141] ? ref_tracker_alloc+0x332/0x490 [ 347.965717][T14141] should_fail_ex+0x3b0/0x4e0 [ 347.970425][T14141] ? skb_clone+0x20c/0x390 [ 347.974863][T14141] should_failslab+0xac/0x100 [ 347.979563][T14141] ? skb_clone+0x20c/0x390 [ 347.983996][T14141] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 347.989389][T14141] skb_clone+0x20c/0x390 [ 347.993657][T14141] __netlink_deliver_tap+0x3cc/0x7c0 [ 347.998977][T14141] ? netlink_deliver_tap+0x2e/0x1b0 [ 348.004191][T14141] netlink_deliver_tap+0x19d/0x1b0 [ 348.009319][T14141] netlink_unicast+0x7c4/0x990 [ 348.014112][T14141] ? __pfx_netlink_unicast+0x10/0x10 [ 348.019444][T14141] ? __virt_addr_valid+0x183/0x530 [ 348.024580][T14141] ? __check_object_size+0x49c/0x900 [ 348.029886][T14141] ? bpf_lsm_netlink_send+0x9/0x10 [ 348.035024][T14141] netlink_sendmsg+0x8e4/0xcb0 [ 348.039819][T14141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.045134][T14141] ? __import_iovec+0x536/0x820 [ 348.050093][T14141] ? aa_sock_msg_perm+0x91/0x160 [ 348.055057][T14141] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 348.060366][T14141] ? security_socket_sendmsg+0x87/0xb0 [ 348.065856][T14141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.071162][T14141] __sock_sendmsg+0x221/0x270 [ 348.075874][T14141] ____sys_sendmsg+0x525/0x7d0 [ 348.080680][T14141] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.086011][T14141] __sys_sendmsg+0x2b0/0x3a0 [ 348.090629][T14141] ? __pfx___sys_sendmsg+0x10/0x10 [ 348.095766][T14141] ? vfs_write+0x7c4/0xc90 [ 348.100249][T14141] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 348.106600][T14141] ? do_syscall_64+0x100/0x230 [ 348.111386][T14141] ? do_syscall_64+0xb6/0x230 [ 348.116173][T14141] do_syscall_64+0xf3/0x230 [ 348.120695][T14141] ? clear_bhb_loop+0x35/0x90 [ 348.125397][T14141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.131314][T14141] RIP: 0033:0x7f3684979ef9 [ 348.135752][T14141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.155377][T14141] RSP: 002b:00007f3685828038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.163819][T14141] RAX: ffffffffffffffda RBX: 00007f3684b15f80 RCX: 00007f3684979ef9 [ 348.171990][T14141] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 348.179993][T14141] RBP: 00007f3685828090 R08: 0000000000000000 R09: 0000000000000000 [ 348.188038][T14141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.196032][T14141] R13: 0000000000000000 R14: 00007f3684b15f80 R15: 00007fff4b629928 [ 348.204130][T14141] [ 348.227173][T14141] netlink: 'syz.4.2890': attribute type 9 has an invalid length. [ 348.516740][T14157] netlink: 'syz.4.2895': attribute type 32 has an invalid length. [ 348.545224][T14157] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 348.629934][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.642021][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.664547][T14166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.665388][T14165] __nla_validate_parse: 4 callbacks suppressed [ 348.665402][T14165] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2900'. [ 348.696090][T14165] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2900'. [ 348.710735][T14165] FAULT_INJECTION: forcing a failure. [ 348.710735][T14165] name failslab, interval 1, probability 0, space 0, times 0 [ 348.723831][T14165] CPU: 0 UID: 0 PID: 14165 Comm: syz.4.2900 Not tainted 6.11.0-rc5-syzkaller-00735-g670726a8262e #0 [ 348.734627][T14165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 348.744703][T14165] Call Trace: [ 348.747986][T14165] [ 348.750919][T14165] dump_stack_lvl+0x241/0x360 [ 348.755617][T14165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.760830][T14165] ? __pfx__printk+0x10/0x10 [ 348.765435][T14165] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 348.771428][T14165] ? __pfx___might_resched+0x10/0x10 [ 348.776892][T14165] should_fail_ex+0x3b0/0x4e0 [ 348.781584][T14165] should_failslab+0xac/0x100 [ 348.786276][T14165] ? __alloc_skb+0x1c3/0x440 [ 348.790880][T14165] kmem_cache_alloc_node_noprof+0x71/0x320 [ 348.796701][T14165] __alloc_skb+0x1c3/0x440 [ 348.801128][T14165] ? __pfx___alloc_skb+0x10/0x10 [ 348.806065][T14165] ? netlink_ack_tlv_len+0x6e/0x200 [ 348.811268][T14165] netlink_ack+0x13f/0xa30 [ 348.815698][T14165] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 348.821181][T14165] netlink_rcv_skb+0x262/0x430 [ 348.825954][T14165] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 348.831422][T14165] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 348.836725][T14165] ? netlink_deliver_tap+0x2e/0x1b0 [ 348.841919][T14165] netlink_unicast+0x7f6/0x990 [ 348.846684][T14165] ? __pfx_netlink_unicast+0x10/0x10 [ 348.851965][T14165] ? __virt_addr_valid+0x183/0x530 [ 348.857072][T14165] ? __check_object_size+0x49c/0x900 [ 348.862357][T14165] ? bpf_lsm_netlink_send+0x9/0x10 [ 348.867466][T14165] netlink_sendmsg+0x8e4/0xcb0 [ 348.872232][T14165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.877518][T14165] ? __import_iovec+0x536/0x820 [ 348.882360][T14165] ? aa_sock_msg_perm+0x91/0x160 [ 348.887292][T14165] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 348.892588][T14165] ? security_socket_sendmsg+0x87/0xb0 [ 348.898048][T14165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.903324][T14165] __sock_sendmsg+0x221/0x270 [ 348.908003][T14165] ____sys_sendmsg+0x525/0x7d0 [ 348.912772][T14165] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.918070][T14165] __sys_sendmsg+0x2b0/0x3a0 [ 348.922659][T14165] ? __pfx___sys_sendmsg+0x10/0x10 [ 348.927764][T14165] ? vfs_write+0x7c4/0xc90 [ 348.932202][T14165] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 348.938526][T14165] ? do_syscall_64+0x100/0x230 [ 348.943308][T14165] ? do_syscall_64+0xb6/0x230 [ 348.948000][T14165] do_syscall_64+0xf3/0x230 [ 348.952506][T14165] ? clear_bhb_loop+0x35/0x90 [ 348.957189][T14165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.963081][T14165] RIP: 0033:0x7f3684979ef9 [ 348.967502][T14165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.987101][T14165] RSP: 002b:00007f3685828038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.995537][T14165] RAX: ffffffffffffffda RBX: 00007f3684b15f80 RCX: 00007f3684979ef9 [ 349.003497][T14165] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 349.011457][T14165] RBP: 00007f3685828090 R08: 0000000000000000 R09: 0000000000000000 [ 349.019437][T14165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.027403][T14165] R13: 0000000000000000 R14: 00007f3684b15f80 R15: 00007fff4b629928 [ 349.035380][T14165] [ 349.207637][T14175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2903'. [ 349.223381][T14175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2903'. [ 349.245652][T14177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.472848][T14188] pim6reg527: entered allmulticast mode [ 349.980787][T14209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2918'. [ 350.037538][T14211] openvswitch: : Dropping previously announced user features [ 350.205727][T14217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2921'. [ 350.231055][T14217] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2921'. [ 350.506169][T14228] FAULT_INJECTION: forcing a failure. [ 350.506169][T14228] name failslab, interval 1, probability 0, space 0, times 0 [ 350.519452][T14228] CPU: 1 UID: 0 PID: 14228 Comm: syz.2.2927 Not tainted 6.11.0-rc5-syzkaller-00735-g670726a8262e #0 [ 350.530249][T14228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 350.540407][T14228] Call Trace: [ 350.543712][T14228] [ 350.546660][T14228] dump_stack_lvl+0x241/0x360 [ 350.551371][T14228] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.556592][T14228] ? __pfx__printk+0x10/0x10 [ 350.561206][T14228] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 350.567206][T14228] ? __pfx___might_resched+0x10/0x10 [ 350.572518][T14228] should_fail_ex+0x3b0/0x4e0 [ 350.577217][T14228] should_failslab+0xac/0x100 [ 350.581894][T14228] ? __alloc_skb+0x1c3/0x440 [ 350.586479][T14228] kmem_cache_alloc_node_noprof+0x71/0x320 [ 350.592282][T14228] __alloc_skb+0x1c3/0x440 [ 350.596733][T14228] ? __pfx___alloc_skb+0x10/0x10 [ 350.601672][T14228] ? netlink_autobind+0xd6/0x2f0 [ 350.606619][T14228] ? netlink_autobind+0x2b0/0x2f0 [ 350.611659][T14228] netlink_sendmsg+0x638/0xcb0 [ 350.616444][T14228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.621730][T14228] ? __import_iovec+0x536/0x820 [ 350.626576][T14228] ? aa_sock_msg_perm+0x91/0x160 [ 350.631509][T14228] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 350.636791][T14228] ? security_socket_sendmsg+0x87/0xb0 [ 350.642248][T14228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.647541][T14228] __sock_sendmsg+0x221/0x270 [ 350.652238][T14228] ____sys_sendmsg+0x525/0x7d0 [ 350.657031][T14228] ? __pfx_____sys_sendmsg+0x10/0x10 [ 350.662333][T14228] __sys_sendmsg+0x2b0/0x3a0 [ 350.666922][T14228] ? __pfx___sys_sendmsg+0x10/0x10 [ 350.672028][T14228] ? vfs_write+0x7c4/0xc90 [ 350.676472][T14228] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 350.682797][T14228] ? do_syscall_64+0x100/0x230 [ 350.687553][T14228] ? do_syscall_64+0xb6/0x230 [ 350.692220][T14228] do_syscall_64+0xf3/0x230 [ 350.696714][T14228] ? clear_bhb_loop+0x35/0x90 [ 350.701386][T14228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.707273][T14228] RIP: 0033:0x7f1bd8379ef9 [ 350.711679][T14228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.731283][T14228] RSP: 002b:00007f1bd918d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.739697][T14228] RAX: ffffffffffffffda RBX: 00007f1bd8515f80 RCX: 00007f1bd8379ef9 [ 350.747660][T14228] RDX: 0000000000000000 RSI: 0000000020004a80 RDI: 0000000000000003 [ 350.755627][T14228] RBP: 00007f1bd918d090 R08: 0000000000000000 R09: 0000000000000000 [ 350.763587][T14228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.771550][T14228] R13: 0000000000000000 R14: 00007f1bd8515f80 R15: 00007ffda58b7d58 [ 350.779530][T14228] [ 350.902705][T14225] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 351.089733][T14242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2932'. [ 351.295133][T14247] netlink: 'syz.0.2933': attribute type 32 has an invalid length. [ 351.313287][T14247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2933'. [ 351.331295][T14247] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 351.432386][T14255] netlink: 404 bytes leftover after parsing attributes in process `syz.1.2937'. [ 351.467205][T14260] netlink: zone id is out of range [ 351.484730][T14260] netlink: zone id is out of range [ 351.494511][T14260] netlink: zone id is out of range [ 351.499844][T14260] netlink: set zone limit has 8 unknown bytes [ 352.256409][T14289] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.265328][T14289] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.274044][T14289] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.283126][T14289] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.351073][T14292] caif0: entered allmulticast mode [ 352.369904][T14294] netlink: 'syz.4.2950': attribute type 2 has an invalid length. [ 352.425024][T14294] netlink: 'syz.4.2950': attribute type 2 has an invalid length. [ 352.495026][T14295] netlink: 'syz.3.2947': attribute type 30 has an invalid length. [ 352.503963][T14295] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 352.535614][T14298] FAULT_INJECTION: forcing a failure. [ 352.535614][T14298] name failslab, interval 1, probability 0, space 0, times 0 [ 352.574390][T14298] CPU: 0 UID: 0 PID: 14298 Comm: syz.1.2951 Not tainted 6.11.0-rc5-syzkaller-00735-g670726a8262e #0 [ 352.585204][T14298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 352.595284][T14298] Call Trace: [ 352.598591][T14298] [ 352.601542][T14298] dump_stack_lvl+0x241/0x360 [ 352.606251][T14298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.611471][T14298] ? __pfx__printk+0x10/0x10 [ 352.616087][T14298] ? ref_tracker_alloc+0x332/0x490 [ 352.621248][T14298] should_fail_ex+0x3b0/0x4e0 [ 352.625949][T14298] ? skb_clone+0x20c/0x390 [ 352.630383][T14298] should_failslab+0xac/0x100 [ 352.635087][T14298] ? skb_clone+0x20c/0x390 [ 352.639531][T14298] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 352.644934][T14298] skb_clone+0x20c/0x390 [ 352.649206][T14298] __netlink_deliver_tap+0x3cc/0x7c0 [ 352.654521][T14298] ? netlink_deliver_tap+0x2e/0x1b0 [ 352.659736][T14298] netlink_deliver_tap+0x19d/0x1b0 [ 352.664862][T14298] netlink_sendskb+0x68/0x140 [ 352.669564][T14298] netlink_unicast+0x39d/0x990 [ 352.674349][T14298] ? __asan_memcpy+0x40/0x70 [ 352.678964][T14298] ? __pfx_netlink_unicast+0x10/0x10 [ 352.684276][T14298] netlink_rcv_skb+0x262/0x430 [ 352.689062][T14298] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 352.694545][T14298] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 352.699880][T14298] ? netlink_deliver_tap+0x2e/0x1b0 [ 352.705097][T14298] netlink_unicast+0x7f6/0x990 [ 352.709890][T14298] ? __pfx_netlink_unicast+0x10/0x10 [ 352.715197][T14298] ? __virt_addr_valid+0x183/0x530 [ 352.720334][T14298] ? __check_object_size+0x49c/0x900 [ 352.725648][T14298] ? bpf_lsm_netlink_send+0x9/0x10 [ 352.730787][T14298] netlink_sendmsg+0x8e4/0xcb0 [ 352.735588][T14298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.740894][T14298] ? __import_iovec+0x536/0x820 [ 352.745761][T14298] ? aa_sock_msg_perm+0x91/0x160 [ 352.750717][T14298] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 352.756028][T14298] ? security_socket_sendmsg+0x87/0xb0 [ 352.761518][T14298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.766830][T14298] __sock_sendmsg+0x221/0x270 [ 352.771557][T14298] ____sys_sendmsg+0x525/0x7d0 [ 352.776538][T14298] ? __pfx_____sys_sendmsg+0x10/0x10 [ 352.781876][T14298] __sys_sendmsg+0x2b0/0x3a0 [ 352.786499][T14298] ? __pfx___sys_sendmsg+0x10/0x10 [ 352.791630][T14298] ? vfs_write+0x7c4/0xc90 [ 352.796124][T14298] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 352.802478][T14298] ? do_syscall_64+0x100/0x230 [ 352.807264][T14298] ? do_syscall_64+0xb6/0x230 [ 352.811965][T14298] do_syscall_64+0xf3/0x230 [ 352.816489][T14298] ? clear_bhb_loop+0x35/0x90 [ 352.821189][T14298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.827103][T14298] RIP: 0033:0x7f6b95779ef9 [ 352.831541][T14298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.851180][T14298] RSP: 002b:00007f6b96508038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.859627][T14298] RAX: ffffffffffffffda RBX: 00007f6b95915f80 RCX: 00007f6b95779ef9 [ 352.867714][T14298] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 352.875708][T14298] RBP: 00007f6b96508090 R08: 0000000000000000 R09: 0000000000000000 [ 352.883700][T14298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 352.891689][T14298] R13: 0000000000000000 R14: 00007f6b95915f80 R15: 00007ffe231794d8 [ 352.899699][T14298] [ 353.193806][T14304] netlink: 'syz.2.2953': attribute type 9 has an invalid length. [ 353.213186][T14304] FAULT_INJECTION: forcing a failure. [ 353.213186][T14304] name failslab, interval 1, probability 0, space 0, times 0 [ 353.270914][T14304] CPU: 0 UID: 0 PID: 14304 Comm: syz.2.2953 Not tainted 6.11.0-rc5-syzkaller-00735-g670726a8262e #0 [ 353.281743][T14304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 353.291829][T14304] Call Trace: [ 353.295130][T14304] [ 353.298077][T14304] dump_stack_lvl+0x241/0x360 [ 353.302778][T14304] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.307997][T14304] ? __pfx__printk+0x10/0x10 [ 353.312610][T14304] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 353.318612][T14304] ? __pfx___might_resched+0x10/0x10 [ 353.323929][T14304] should_fail_ex+0x3b0/0x4e0 [ 353.328640][T14304] should_failslab+0xac/0x100 [ 353.333342][T14304] ? __alloc_skb+0x1c3/0x440 [ 353.337952][T14304] kmem_cache_alloc_node_noprof+0x71/0x320 [ 353.343784][T14304] __alloc_skb+0x1c3/0x440 [ 353.348234][T14304] ? __pfx___alloc_skb+0x10/0x10 [ 353.353203][T14304] ? netlink_ack_tlv_len+0x6e/0x200 [ 353.358426][T14304] netlink_ack+0x13f/0xa30 [ 353.362844][T14304] ? __pfx_lock_acquire+0x10/0x10 [ 353.367866][T14304] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 353.373084][T14304] netlink_rcv_skb+0x262/0x430 [ 353.377849][T14304] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.382866][T14304] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 353.388160][T14304] ? __netlink_deliver_tap+0x77e/0x7c0 [ 353.393620][T14304] genl_rcv+0x28/0x40 [ 353.397594][T14304] netlink_unicast+0x7f6/0x990 [ 353.402361][T14304] ? __pfx_netlink_unicast+0x10/0x10 [ 353.407639][T14304] ? __virt_addr_valid+0x183/0x530 [ 353.412744][T14304] ? __check_object_size+0x49c/0x900 [ 353.418024][T14304] ? bpf_lsm_netlink_send+0x9/0x10 [ 353.423149][T14304] netlink_sendmsg+0x8e4/0xcb0 [ 353.427927][T14304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.433207][T14304] ? __import_iovec+0x536/0x820 [ 353.438050][T14304] ? aa_sock_msg_perm+0x91/0x160 [ 353.442983][T14304] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 353.448266][T14304] ? security_socket_sendmsg+0x87/0xb0 [ 353.453719][T14304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.458992][T14304] __sock_sendmsg+0x221/0x270 [ 353.463670][T14304] ____sys_sendmsg+0x525/0x7d0 [ 353.468435][T14304] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.473730][T14304] __sys_sendmsg+0x2b0/0x3a0 [ 353.478314][T14304] ? __pfx___sys_sendmsg+0x10/0x10 [ 353.483416][T14304] ? vfs_write+0x7c4/0xc90 [ 353.487860][T14304] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 353.494183][T14304] ? do_syscall_64+0x100/0x230 [ 353.498946][T14304] ? do_syscall_64+0xb6/0x230 [ 353.503613][T14304] do_syscall_64+0xf3/0x230 [ 353.508109][T14304] ? clear_bhb_loop+0x35/0x90 [ 353.512782][T14304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.518669][T14304] RIP: 0033:0x7f1bd8379ef9 [ 353.523080][T14304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.542771][T14304] RSP: 002b:00007f1bd918d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.551185][T14304] RAX: ffffffffffffffda RBX: 00007f1bd8515f80 RCX: 00007f1bd8379ef9 [ 353.559202][T14304] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 353.567164][T14304] RBP: 00007f1bd918d090 R08: 0000000000000000 R09: 0000000000000000 [ 353.575215][T14304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.583176][T14304] R13: 0000000000000000 R14: 00007f1bd8515f80 R15: 00007ffda58b7d58 [ 353.591151][T14304] [ 353.629351][T14309] openvswitch: : Dropping previously announced user features [ 353.971439][T14323] __nla_validate_parse: 7 callbacks suppressed [ 353.971460][T14323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2961'. [ 354.110145][T14325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2962'. [ 354.350004][T14330] netlink: 'syz.1.2964': attribute type 25 has an invalid length. [ 354.384335][T14330] netlink: 'syz.1.2964': attribute type 7 has an invalid length. [ 354.535702][T14338] FAULT_INJECTION: forcing a failure. [ 354.535702][T14338] name failslab, interval 1, probability 0, space 0, times 0 [ 354.562233][T14338] CPU: 1 UID: 0 PID: 14338 Comm: syz.1.2968 Not tainted 6.11.0-rc5-syzkaller-00735-g670726a8262e #0 [ 354.573048][T14338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 354.583125][T14338] Call Trace: [ 354.586421][T14338] [ 354.589350][T14338] dump_stack_lvl+0x241/0x360 [ 354.594037][T14338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.599240][T14338] ? __pfx__printk+0x10/0x10 [ 354.603845][T14338] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 354.609841][T14338] ? __pfx___might_resched+0x10/0x10 [ 354.615160][T14338] should_fail_ex+0x3b0/0x4e0 [ 354.619859][T14338] should_failslab+0xac/0x100 [ 354.624543][T14338] ? __alloc_skb+0x1c3/0x440 [ 354.629126][T14338] kmem_cache_alloc_node_noprof+0x71/0x320 [ 354.634933][T14338] __alloc_skb+0x1c3/0x440 [ 354.639345][T14338] ? __pfx___alloc_skb+0x10/0x10 [ 354.644274][T14338] ? __lock_acquire+0x137a/0x2040 [ 354.649297][T14338] ? netlink_ack_tlv_len+0x6e/0x200 [ 354.654503][T14338] netlink_ack+0x13f/0xa30 [ 354.658924][T14338] ? mark_lock+0x9a/0x350 [ 354.663252][T14338] ? __lock_acquire+0x137a/0x2040 [ 354.668281][T14338] rdma_nl_rcv+0x3f6/0x9e0 [ 354.672706][T14338] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 354.677659][T14338] ? netlink_deliver_tap+0x2e/0x1b0 [ 354.682847][T14338] netlink_unicast+0x7f6/0x990 [ 354.687612][T14338] ? __pfx_netlink_unicast+0x10/0x10 [ 354.692888][T14338] ? __virt_addr_valid+0x183/0x530 [ 354.698078][T14338] ? __check_object_size+0x49c/0x900 [ 354.703361][T14338] ? bpf_lsm_netlink_send+0x9/0x10 [ 354.708466][T14338] netlink_sendmsg+0x8e4/0xcb0 [ 354.713227][T14338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.718508][T14338] ? __import_iovec+0x536/0x820 [ 354.723353][T14338] ? aa_sock_msg_perm+0x91/0x160 [ 354.728283][T14338] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 354.733561][T14338] ? security_socket_sendmsg+0x87/0xb0 [ 354.739013][T14338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.744288][T14338] __sock_sendmsg+0x221/0x270 [ 354.748967][T14338] ____sys_sendmsg+0x525/0x7d0 [ 354.753732][T14338] ? __pfx_____sys_sendmsg+0x10/0x10 [ 354.759025][T14338] __sys_sendmsg+0x2b0/0x3a0 [ 354.763610][T14338] ? __pfx___sys_sendmsg+0x10/0x10 [ 354.768732][T14338] ? vfs_write+0x7c4/0xc90 [ 354.773195][T14338] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 354.779533][T14338] ? do_syscall_64+0x100/0x230 [ 354.784296][T14338] ? do_syscall_64+0xb6/0x230 [ 354.788964][T14338] do_syscall_64+0xf3/0x230 [ 354.793458][T14338] ? clear_bhb_loop+0x35/0x90 [ 354.798218][T14338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.804102][T14338] RIP: 0033:0x7f6b95779ef9 [ 354.808506][T14338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.828108][T14338] RSP: 002b:00007f6b96508038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.836519][T14338] RAX: ffffffffffffffda RBX: 00007f6b95915f80 RCX: 00007f6b95779ef9 [ 354.844479][T14338] RDX: 0000000000000000 RSI: 0000000020004a80 RDI: 0000000000000003 [ 354.852526][T14338] RBP: 00007f6b96508090 R08: 0000000000000000 R09: 0000000000000000 [ 354.860492][T14338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.868455][T14338] R13: 0000000000000000 R14: 00007f6b95915f80 R15: 00007ffe231794d8 [ 354.876434][T14338] [ 355.232517][T14358] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2974'. [ 355.246268][T14358] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2974'. [ 355.590896][T14374] netlink: 'syz.4.2981': attribute type 1 has an invalid length. [ 355.625665][T14374] netlink: 'syz.4.2981': attribute type 9 has an invalid length. [ 355.870060][T14387] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2986'. [ 355.907741][T14387] netlink: 'syz.4.2986': attribute type 1 has an invalid length. [ 355.934301][T14387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2986'. [ 355.985107][T14387] bond0: entered promiscuous mode [ 355.995820][T14387] bond_slave_1: entered promiscuous mode [ 356.013151][T14387] batadv0: entered promiscuous mode [ 356.079124][T14390] bond0: (slave batadv0): Releasing backup interface [ 356.125043][T14390] batadv0: left promiscuous mode [ 356.174649][T14390] bridge_slave_0: left allmulticast mode [ 356.190223][T14390] bridge_slave_0: left promiscuous mode [ 356.196980][T14390] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.210116][T14390] bridge_slave_1: left allmulticast mode [ 356.216728][T14390] bridge_slave_1: left promiscuous mode [ 356.222880][T14390] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.241718][T14390] bond0: (slave bond_slave_1): Releasing backup interface [ 356.262024][T14390] bond_slave_1: left promiscuous mode [ 356.319930][T14390] team0: Port device team_slave_0 removed [ 356.377313][T14390] team0: Port device team_slave_1 removed [ 356.409982][T14390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.428134][T14390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.461788][T14390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.480448][T14390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.521951][T14390] batman_adv: batadv0: Removing interface: macvtap1 [ 356.668308][T14394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2987'. [ 357.002600][T14414] validate_nla: 3 callbacks suppressed [ 357.002637][T14414] netlink: 'syz.3.2996': attribute type 9 has an invalid length. [ 357.218453][T14424] netlink: 'syz.3.3002': attribute type 32 has an invalid length. [ 357.230116][T14424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3002'. [ 357.243211][T14424] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 357.667819][T14434] openvswitch: : Dropping previously announced user features [ 357.969261][T14452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3011'. [ 357.996351][T14452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3011'. [ 358.115928][T14457] netlink: 'syz.3.3015': attribute type 32 has an invalid length. [ 358.133594][T14457] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 358.299374][T14462] netlink: 'syz.2.3016': attribute type 25 has an invalid length. [ 358.324672][T14462] netlink: 'syz.2.3016': attribute type 7 has an invalid length. [ 358.652534][T14482] delete_channel: no stack [ 358.853433][T14493] netlink: 'syz.1.3028': attribute type 1 has an invalid length. [ 358.873882][T14493] netlink: 'syz.1.3028': attribute type 4 has an invalid length. [ 358.901801][T14498] syz.3.3030[14498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 358.901948][T14498] syz.3.3030[14498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 359.335127][T14519] openvswitch: : Dropping previously announced user features [ 359.649893][T14536] vlan2: entered promiscuous mode [ 359.676368][T14536] vlan2: entered allmulticast mode [ 359.723888][T14542] __nla_validate_parse: 4 callbacks suppressed [ 359.723907][T14542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3044'. [ 360.084006][T14553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3046'. [ 360.109227][T14553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3046'. [ 360.395721][T14567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3051'. [ 360.430483][T14570] netlink: 'syz.4.3053': attribute type 1 has an invalid length. [ 360.440933][T14570] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3053'. [ 360.464613][ T5234] Bluetooth: hci2: command 0x0405 tx timeout [ 360.592755][T14578] netlink: 'syz.4.3056': attribute type 1 has an invalid length. [ 360.604370][T14578] netlink: 'syz.4.3056': attribute type 4 has an invalid length. [ 360.612201][T14578] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.3056'. [ 361.071270][T14587] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 361.312599][T14608] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3066'. [ 361.516187][T14618] vlan3: entered allmulticast mode [ 361.529798][T14618] bridge0: port 4(vlan3) entered blocking state [ 361.547995][T14618] bridge0: port 4(vlan3) entered disabled state [ 361.604476][T14619] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3068'. [ 361.618360][T14619] tipc: Started in network mode [ 361.623269][T14619] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 361.631211][T14619] tipc: Enabled bearer , priority 0 [ 361.651802][T14625] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.3070'. [ 362.483180][T14679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3080'. [ 362.744511][ T46] tipc: Node number set to 10922666 [ 363.315092][ T46] IPVS: starting estimator thread 0... [ 363.323038][T14715] tipc: Enabled bearer , priority 10 [ 363.425299][T14717] IPVS: using max 20 ests per chain, 48000 per kthread [ 363.596910][T14728] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 363.626914][T14728] openvswitch: : Dropping previously announced user features [ 364.321947][T14767] hsr0: entered promiscuous mode [ 364.332212][T14767] macvlan2: entered allmulticast mode [ 364.339233][T14767] hsr0: entered allmulticast mode [ 364.347354][T14767] hsr_slave_0: entered allmulticast mode [ 364.353043][T14767] hsr_slave_1: entered allmulticast mode [ 364.368997][T14767] hsr0: left allmulticast mode [ 364.377518][T14767] hsr_slave_0: left allmulticast mode [ 364.383051][T14767] hsr_slave_1: left allmulticast mode [ 364.893864][T14794] __nla_validate_parse: 7 callbacks suppressed [ 364.893883][T14794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3117'. [ 364.916578][T14792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3118'. [ 364.924353][T14794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3117'. [ 365.215863][T14806] openvswitch: netlink: Key type 16383 is out of range max 32 [ 365.245764][T14807] validate_nla: 2 callbacks suppressed [ 365.245783][T14807] netlink: 'syz.0.3122': attribute type 1 has an invalid length. [ 365.285945][T14807] netlink: 'syz.0.3122': attribute type 2 has an invalid length. [ 365.303999][T14806] netlink: 'syz.3.3124': attribute type 1 has an invalid length. [ 365.322320][T14806] netlink: 9320 bytes leftover after parsing attributes in process `syz.3.3124'. [ 365.338444][T14806] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3124'. [ 365.359861][T14806] netlink: 'syz.3.3124': attribute type 1 has an invalid length. [ 365.381169][T14813] netlink: 'syz.2.3126': attribute type 32 has an invalid length. [ 365.387298][T14806] netlink: 'syz.3.3124': attribute type 2 has an invalid length. [ 365.395922][T14813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3126'. [ 365.416400][T14813] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 365.661311][T14825] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3130'. [ 365.717951][T14829] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 365.765293][T14825] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3130'. [ 366.033632][T14837] netlink: 'syz.2.3136': attribute type 32 has an invalid length. [ 366.065321][T14837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3136'. [ 366.085355][T14837] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 366.178099][T14848] netlink: 'syz.4.3139': attribute type 30 has an invalid length. [ 366.192723][T14848] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 366.215507][T14848] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 366.254599][T14844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3137'. [ 366.323016][T14848] ipvlan2: entered promiscuous mode [ 366.437215][T14862] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 366.635168][T14866] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 366.675874][T14872] sctp: [Deprecated]: syz.3.3141 (pid 14872) Use of struct sctp_assoc_value in delayed_ack socket option. [ 366.675874][T14872] Use struct sctp_sack_info instead [ 366.738070][T14875] pim6reg: left allmulticast mode [ 368.007582][T14940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.177132][T14940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.196864][T14941] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.307994][T14941] bridge_slave_0: left promiscuous mode [ 368.313603][T14941] bridge_slave_0: left allmulticast mode [ 368.407868][T14941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.448200][T14941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.613307][T14941] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.644446][T14941] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.660859][T14941] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.673586][T14941] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.788530][T14941] bridge1: left promiscuous mode [ 368.793517][T14941] bridge1: left allmulticast mode [ 368.826984][T14941] bridge2: left promiscuous mode [ 368.831981][T14941] bridge2: left allmulticast mode [ 368.849793][T14941] ip6erspan0: left allmulticast mode [ 369.978749][T15022] __nla_validate_parse: 8 callbacks suppressed [ 369.978771][T15022] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3196'. [ 370.004445][T15022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3196'. [ 370.052024][T15023] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3195'. [ 370.086196][T15023] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3195'. [ 370.414862][T15037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3200'. [ 370.488312][T15039] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3202'. [ 370.718627][T15046] netlink: 644 bytes leftover after parsing attributes in process `syz.0.3204'. [ 370.720625][T15044] workqueue: name exceeds WQ_NAME_LEN. Truncating to: †< )Ù2¼”›U7‘Åä‹¡ô¾ÐËÝ;&!éi‡¼ [ 371.429743][T15076] wireguard0: entered promiscuous mode [ 371.440482][T15076] wireguard0: entered allmulticast mode [ 371.480331][T15079] netlink: 'syz.3.3216': attribute type 1 has an invalid length. [ 371.496322][T15079] netlink: 'syz.3.3216': attribute type 4 has an invalid length. [ 371.511678][T15079] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.3216'. [ 371.969292][T15106] netlink: 'syz.0.3223': attribute type 32 has an invalid length. [ 371.978034][T15106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3223'. [ 371.987977][T15106] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 372.567046][T15124] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3228'. [ 373.609699][T15163] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.031687][T15163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.068168][T15163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.255018][T15163] veth0_vlan: left allmulticast mode [ 374.260638][T15163] vlan0: left promiscuous mode [ 374.290453][T15163] vlan0: left allmulticast mode [ 374.380510][T15163] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.397752][T15163] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.406829][T15163] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.416602][T15163] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.241828][T15227] __nla_validate_parse: 5 callbacks suppressed [ 375.241848][T15227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3259'. [ 375.505157][T15236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3263'. [ 375.524463][T15236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3263'. [ 375.693522][T15242] netlink: 'syz.3.3266': attribute type 9 has an invalid length. [ 375.948723][T15255] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3272'. [ 376.199619][T15270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3276'. [ 376.224518][T15270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3276'. [ 376.541232][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 376.557966][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 376.576778][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 376.587019][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 376.604719][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 376.612309][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 376.794182][T15285] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3282'. [ 377.060213][T15276] chnl_net:caif_netlink_parms(): no params data found [ 377.262602][T15276] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.270247][T15276] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.278486][T15276] bridge_slave_0: entered allmulticast mode [ 377.285968][T15276] bridge_slave_0: entered promiscuous mode [ 377.295338][T15276] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.302541][T15276] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.310005][T15276] bridge_slave_1: entered allmulticast mode [ 377.318103][T15276] bridge_slave_1: entered promiscuous mode [ 377.365827][T15319] veth0_vlan: entered allmulticast mode [ 377.382800][T15276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.399064][T15323] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3293'. [ 377.404441][T15276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.550050][T15276] team0: Port device team_slave_0 added [ 377.578741][T15276] team0: Port device team_slave_1 added [ 377.616460][T15333] FAULT_INJECTION: forcing a failure. [ 377.616460][T15333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.630229][T15333] CPU: 1 UID: 0 PID: 15333 Comm: syz.2.3297 Not tainted 6.11.0-rc5-syzkaller-00735-g670726a8262e #0 [ 377.641009][T15333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 377.651151][T15333] Call Trace: [ 377.654421][T15333] [ 377.657343][T15333] dump_stack_lvl+0x241/0x360 [ 377.662014][T15333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 377.667202][T15333] ? __pfx__printk+0x10/0x10 [ 377.671790][T15333] ? __pfx_lock_release+0x10/0x10 [ 377.676833][T15333] should_fail_ex+0x3b0/0x4e0 [ 377.681619][T15333] _copy_from_user+0x2f/0xe0 [ 377.686214][T15333] copy_msghdr_from_user+0xae/0x680 [ 377.691429][T15333] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 377.697343][T15333] ? lockdep_hardirqs_on+0x99/0x150 [ 377.702543][T15333] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 377.708358][T15333] __sys_sendmsg+0x23d/0x3a0 [ 377.712948][T15333] ? __pfx___sys_sendmsg+0x10/0x10 [ 377.718092][T15333] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 377.724430][T15333] ? rcu_is_watching+0x15/0xb0 [ 377.729206][T15333] ? trace_sys_enter+0x1f/0xd0 [ 377.733965][T15333] do_syscall_64+0xf3/0x230 [ 377.738475][T15333] ? clear_bhb_loop+0x35/0x90 [ 377.743172][T15333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.749257][T15333] RIP: 0033:0x7f1bd8379ef9 [ 377.753676][T15333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.773279][T15333] RSP: 002b:00007f1bd918d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.781705][T15333] RAX: ffffffffffffffda RBX: 00007f1bd8515f80 RCX: 00007f1bd8379ef9 [ 377.790125][T15333] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 377.798119][T15333] RBP: 00007f1bd918d090 R08: 0000000000000000 R09: 0000000000000000 [ 377.806121][T15333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.814200][T15333] R13: 0000000000000000 R14: 00007f1bd8515f80 R15: 00007ffda58b7d58 [ 377.822198][T15333] [ 377.842006][T15276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.849337][T15276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.884858][T15276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.898396][T15276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.911789][T15276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.946454][T15276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.978903][T15338] Cannot find del_set index 286 as target [ 378.052655][T15276] hsr_slave_0: entered promiscuous mode [ 378.061803][T15276] hsr_slave_1: entered promiscuous mode [ 378.070703][T15276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.079363][T15276] Cannot create hsr debugfs directory [ 378.106206][T15339] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3298'. [ 378.480655][T15355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.543773][T15355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.563869][T15355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.698845][T15276] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 378.704578][ T5234] Bluetooth: hci1: command tx timeout [ 378.718834][T15276] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 378.729482][T15276] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 378.742576][T15276] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 378.823269][T15276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.842631][T15276] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.857030][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.864277][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.869023][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.886605][T11592] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.893807][T11592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.070248][T15276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.131822][T15276] veth0_vlan: entered promiscuous mode [ 379.154646][T15276] veth1_vlan: entered promiscuous mode [ 379.211003][T15276] veth0_macvtap: entered promiscuous mode [ 379.268088][T15276] veth1_macvtap: entered promiscuous mode [ 379.316279][T15276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.329667][T15276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.342393][T15276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.353315][T15276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.364240][T15276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.374080][T15276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.385955][T15276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.405625][T15276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.455343][T15276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.478511][T15276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.513217][T15276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.531771][T15276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.559881][T15377] netlink: 4272 bytes leftover after parsing attributes in process `syz.4.3309'. [ 379.621210][T15378] dummy0: entered promiscuous mode [ 379.633332][T15378] dummy0: left promiscuous mode [ 379.814677][T11592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.822515][T11592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.978883][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.002251][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.786975][ T5234] Bluetooth: hci1: command 0x041b tx timeout [ 381.355596][ T5242] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 381.375300][ T5242] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 381.384466][ T5242] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 381.393544][ T5242] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 381.401430][ T5242] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 381.428566][ T5242] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 381.675253][T15430] __nla_validate_parse: 1 callbacks suppressed [ 381.675273][T15430] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3326'. [ 381.742367][T15419] chnl_net:caif_netlink_parms(): no params data found [ 381.751569][T15430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3326'. [ 381.905000][T15419] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.912395][T15419] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.921547][T15419] bridge_slave_0: entered allmulticast mode [ 381.929753][T15419] bridge_slave_0: entered promiscuous mode [ 381.938907][T15419] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.946514][T15419] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.953853][T15419] bridge_slave_1: entered allmulticast mode [ 381.961490][T15419] bridge_slave_1: entered promiscuous mode [ 382.055456][T15419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.091520][T15419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.216318][T15419] team0: Port device team_slave_0 added [ 382.237612][T15419] team0: Port device team_slave_1 added [ 382.312731][T15419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.330006][T15419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.384776][T15419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.414398][T15419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.424346][T15419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.481726][T15419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.554306][T15466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3340'. [ 382.638239][T15419] hsr_slave_0: entered promiscuous mode [ 382.657172][T15419] hsr_slave_1: entered promiscuous mode [ 382.664392][T15419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.685062][T15419] Cannot create hsr debugfs directory [ 382.864955][ T5234] Bluetooth: hci1: command 0x041b tx timeout [ 383.108424][T15419] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.120392][T15419] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.227265][T15419] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.247994][T15419] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.368245][T15419] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.387188][T15419] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.477790][T15473] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3341'. [ 383.505411][ T54] Bluetooth: hci4: command tx timeout [ 383.518354][T15419] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.529925][T15473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3341'. [ 383.541542][T15419] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.803616][T15419] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 383.818517][T15419] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 383.847212][T15419] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 383.888944][T15419] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 384.164715][T15419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.241736][T15419] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.277723][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.284903][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.331251][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.338464][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.524086][T15503] netlink: 'syz.1.3353': attribute type 25 has an invalid length. [ 384.554301][T15503] netlink: 'syz.1.3353': attribute type 7 has an invalid length. [ 384.954331][ T54] Bluetooth: hci1: command 0x041b tx timeout [ 384.997894][T15419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.026133][T15520] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3357'. [ 385.586605][ T54] Bluetooth: hci4: command tx timeout [ 385.738391][T15419] veth0_vlan: entered promiscuous mode [ 385.799190][T15419] veth1_vlan: entered promiscuous mode [ 385.906557][T15419] veth0_macvtap: entered promiscuous mode [ 385.933185][T15543] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3365'. [ 385.957295][T15419] veth1_macvtap: entered promiscuous mode [ 386.022308][T15419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.053522][T15419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.086047][T15419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.134690][T15419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.166479][T15419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.218962][T15419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.248920][T15419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.268139][T15419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.302941][T15419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.343340][T15419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.364047][T15419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.391080][T15419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.423711][T15419] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.465000][T15419] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.504085][T15419] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.514255][T15419] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.747525][ T7898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.779103][T15569] FAULT_INJECTION: forcing a failure. [ 386.779103][T15569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.780732][ T7898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.816903][T15569] CPU: 0 UID: 0 PID: 15569 Comm: syz.0.3374 Not tainted 6.11.0-rc5-syzkaller-00735-g670726a8262e #0 [ 386.827718][T15569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 386.837792][T15569] Call Trace: [ 386.841079][T15569] [ 386.844018][T15569] dump_stack_lvl+0x241/0x360 [ 386.848714][T15569] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.853925][T15569] ? __pfx__printk+0x10/0x10 [ 386.858532][T15569] ? __pfx_lock_release+0x10/0x10 [ 386.863588][T15569] should_fail_ex+0x3b0/0x4e0 [ 386.868306][T15569] _copy_from_user+0x2f/0xe0 [ 386.872941][T15569] copy_msghdr_from_user+0xae/0x680 [ 386.878257][T15569] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 386.884110][T15569] __sys_sendmsg+0x23d/0x3a0 [ 386.888728][T15569] ? __pfx___sys_sendmsg+0x10/0x10 [ 386.893858][T15569] ? vfs_write+0x7c4/0xc90 [ 386.898316][T15569] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 386.904663][T15569] ? do_syscall_64+0x100/0x230 [ 386.909430][T15569] ? do_syscall_64+0xb6/0x230 [ 386.914101][T15569] do_syscall_64+0xf3/0x230 [ 386.918597][T15569] ? clear_bhb_loop+0x35/0x90 [ 386.923271][T15569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.929164][T15569] RIP: 0033:0x7f5495979ef9 [ 386.933569][T15569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.953164][T15569] RSP: 002b:00007f54967d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.961569][T15569] RAX: ffffffffffffffda RBX: 00007f5495b15f80 RCX: 00007f5495979ef9 [ 386.969530][T15569] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000005 [ 386.977486][T15569] RBP: 00007f54967d3090 R08: 0000000000000000 R09: 0000000000000000 [ 386.985447][T15569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.993405][T15569] R13: 0000000000000000 R14: 00007f5495b15f80 R15: 00007ffe2eeb16e8 [ 387.001430][T15569] [ 387.041010][ T7898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.054812][ T7898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.096761][ T54] Bluetooth: hci1: command 0x041b tx timeout [ 387.161738][T15578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3376'. [ 387.186507][T15578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3376'. [ 387.223984][T15582] openvswitch: : Dropping previously announced user features [ 387.361943][T15592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3377'. [ 387.391323][T15592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3377'. [ 387.442926][T15591] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3380'. [ 387.675769][ T54] Bluetooth: hci4: command tx timeout [ 387.818803][T15619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3387'. [ 387.855418][T15619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3387'. [ 388.394940][T15649] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3398'. [ 388.491714][T15654] tipc: Started in network mode [ 388.501765][T15654] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 388.533859][T15654] tipc: Enabled bearer , priority 10 [ 388.951565][T15675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 389.000990][T15678] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 389.016669][T15678] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 389.036150][T15678] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 389.108041][ T54] Bluetooth: hci1: command 0x041b tx timeout [ 389.138847][T15682] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3410'. [ 389.156198][T15683] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 389.482057][T15689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3412'. [ 389.519770][T15690] vlan2: entered allmulticast mode [ 389.543137][T15690] bridge0: port 3(vlan2) entered blocking state [ 389.563889][T15690] bridge0: port 3(vlan2) entered disabled state [ 389.644795][T14957] tipc: Node number set to 4269801488 [ 389.745298][ T5234] Bluetooth: hci4: command tx timeout [ 390.184158][T15727] netlink: 'syz.1.3426': attribute type 32 has an invalid length. [ 390.197033][T15727] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 390.380483][T15741] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 390.689678][T15755] team0: Port device team_slave_0 removed [ 390.697514][T15755] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 391.030610][T15769] netlink: 'syz.4.3443': attribute type 32 has an invalid length. [ 391.042455][T15769] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 391.077017][T15771] openvswitch: : Dropping previously announced user features [ 391.227494][T15778] bridge0: port 3(dummy0) entered disabled state [ 391.571794][T15796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 391.626051][T15796] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 391.650048][T15799] netlink: 'syz.4.3457': attribute type 25 has an invalid length. [ 391.664002][T15799] netlink: 'syz.4.3457': attribute type 7 has an invalid length. [ 391.819189][T15811] FAULT_INJECTION: forcing a failure. [ 391.819189][T15811] name failslab, interval 1, probability 0, space 0, times 0 [ 391.837115][T15808] netlink: 'syz.2.3462': attribute type 32 has an invalid length. [ 391.845671][T15811] CPU: 1 UID: 0 PID: 15811 Comm: syz.1.3461 Not tainted 6.11.0-rc5-syzkaller-00735-g670726a8262e #0 [ 391.856456][T15811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 391.866500][T15811] Call Trace: [ 391.869766][T15811] [ 391.872679][T15811] dump_stack_lvl+0x241/0x360 [ 391.877349][T15811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.882533][T15811] ? __pfx__printk+0x10/0x10 [ 391.883572][T15808] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 391.887118][T15811] ? ref_tracker_alloc+0x332/0x490 [ 391.887151][T15811] should_fail_ex+0x3b0/0x4e0 [ 391.887181][T15811] ? skb_clone+0x20c/0x390 [ 391.887203][T15811] should_failslab+0xac/0x100 [ 391.915504][T15811] ? skb_clone+0x20c/0x390 [ 391.919945][T15811] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 391.925526][T15811] skb_clone+0x20c/0x390 [ 391.929807][T15811] __netlink_deliver_tap+0x3cc/0x7c0 [ 391.935129][T15811] ? netlink_deliver_tap+0x2e/0x1b0 [ 391.940346][T15811] netlink_deliver_tap+0x19d/0x1b0 [ 391.945486][T15811] netlink_unicast+0x7c4/0x990 [ 391.950286][T15811] ? __pfx_netlink_unicast+0x10/0x10 [ 391.955609][T15811] ? __virt_addr_valid+0x183/0x530 [ 391.960743][T15811] ? __check_object_size+0x49c/0x900 [ 391.966048][T15811] ? bpf_lsm_netlink_send+0x9/0x10 [ 391.971182][T15811] netlink_sendmsg+0x8e4/0xcb0 [ 391.975984][T15811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.981293][T15811] ? __import_iovec+0x536/0x820 [ 391.986158][T15811] ? aa_sock_msg_perm+0x91/0x160 [ 391.991119][T15811] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 391.996423][T15811] ? security_socket_sendmsg+0x87/0xb0 [ 392.001901][T15811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.007251][T15811] __sock_sendmsg+0x221/0x270 [ 392.012043][T15811] ____sys_sendmsg+0x525/0x7d0 [ 392.016839][T15811] ? __pfx_____sys_sendmsg+0x10/0x10 [ 392.022164][T15811] __sys_sendmsg+0x2b0/0x3a0 [ 392.026784][T15811] ? __pfx___sys_sendmsg+0x10/0x10 [ 392.031911][T15811] ? vfs_write+0x7c4/0xc90 [ 392.036399][T15811] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 392.042749][T15811] ? do_syscall_64+0x100/0x230 [ 392.047538][T15811] ? do_syscall_64+0xb6/0x230 [ 392.052235][T15811] do_syscall_64+0xf3/0x230 [ 392.056757][T15811] ? clear_bhb_loop+0x35/0x90 [ 392.061453][T15811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.067363][T15811] RIP: 0033:0x7f6b95779ef9 [ 392.071800][T15811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.091434][T15811] RSP: 002b:00007f6b96508038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.099881][T15811] RAX: ffffffffffffffda RBX: 00007f6b95915f80 RCX: 00007f6b95779ef9 [ 392.107889][T15811] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000005 [ 392.115881][T15811] RBP: 00007f6b96508090 R08: 0000000000000000 R09: 0000000000000000 [ 392.123864][T15811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.132035][T15811] R13: 0000000000000000 R14: 00007f6b95915f80 R15: 00007ffe231794d8 [ 392.140051][T15811] [ 392.199377][T15826] __nla_validate_parse: 10 callbacks suppressed [ 392.199399][T15826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3467'. [ 392.293207][T15830] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3468'. [ 392.415509][T15835] netlink: 16162 bytes leftover after parsing attributes in process `syz.3.3470'. [ 392.446267][T15837] netlink: 'syz.2.3471': attribute type 25 has an invalid length. [ 392.457672][T15837] netlink: 'syz.2.3471': attribute type 7 has an invalid length. [ 392.528351][T15845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3472'. [ 392.548524][T15845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3472'. [ 392.898986][T15859] sctp: [Deprecated]: syz.4.3476 (pid 15859) Use of struct sctp_assoc_value in delayed_ack socket option. [ 392.898986][T15859] Use struct sctp_sack_info instead [ 393.389031][T15879] netlink: 'syz.4.3484': attribute type 25 has an invalid length. [ 393.399365][T15879] netlink: 'syz.4.3484': attribute type 7 has an invalid length. [ 393.657499][T15892] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.3486'. [ 393.684128][T15887] netlink: 16162 bytes leftover after parsing attributes in process `syz.3.3487'. [ 393.926837][T15897] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3488'. [ 394.121602][T15904] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 394.657672][T15925] netlink: 'syz.2.3496': attribute type 25 has an invalid length. [ 394.795392][T15930] netlink: 16162 bytes leftover after parsing attributes in process `syz.4.3499'. [ 394.879991][T15935] geneve3: entered promiscuous mode [ 394.895717][T15935] geneve3: entered allmulticast mode [ 395.256269][T15954] FAULT_INJECTION: forcing a failure. [ 395.256269][T15954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.306918][T15954] CPU: 0 UID: 0 PID: 15954 Comm: syz.4.3506 Not tainted 6.11.0-rc5-syzkaller-00735-g670726a8262e #0 [ 395.317729][T15954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 395.327805][T15954] Call Trace: [ 395.331168][T15954] [ 395.334093][T15954] dump_stack_lvl+0x241/0x360 [ 395.338857][T15954] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.344048][T15954] ? __pfx__printk+0x10/0x10 [ 395.348635][T15954] ? __pfx_lock_release+0x10/0x10 [ 395.353661][T15954] should_fail_ex+0x3b0/0x4e0 [ 395.358342][T15954] _copy_from_user+0x2f/0xe0 [ 395.362924][T15954] copy_msghdr_from_user+0xae/0x680 [ 395.368127][T15954] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 395.373941][T15954] do_recvmmsg+0x40f/0xae0 [ 395.378358][T15954] ? __pfx_lock_release+0x10/0x10 [ 395.383470][T15954] ? __pfx_do_recvmmsg+0x10/0x10 [ 395.388416][T15954] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 395.394307][T15954] ? ksys_write+0x23e/0x2c0 [ 395.398800][T15954] ? __pfx_lock_release+0x10/0x10 [ 395.403824][T15954] ? vfs_write+0x7c4/0xc90 [ 395.408244][T15954] ? __mutex_unlock_slowpath+0x21d/0x750 [ 395.413877][T15954] ? __fget_files+0x3f6/0x470 [ 395.418560][T15954] __x64_sys_recvmmsg+0x199/0x250 [ 395.423582][T15954] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 395.429212][T15954] ? do_syscall_64+0x100/0x230 [ 395.433975][T15954] ? do_syscall_64+0xb6/0x230 [ 395.438733][T15954] do_syscall_64+0xf3/0x230 [ 395.443229][T15954] ? clear_bhb_loop+0x35/0x90 [ 395.447906][T15954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.453793][T15954] RIP: 0033:0x7fd1bbd79ef9 [ 395.458205][T15954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.477807][T15954] RSP: 002b:00007fd1bcac0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 395.486347][T15954] RAX: ffffffffffffffda RBX: 00007fd1bbf16130 RCX: 00007fd1bbd79ef9 [ 395.494309][T15954] RDX: 04000000000001db RSI: 00000000200005c0 RDI: 0000000000000005 [ 395.502271][T15954] RBP: 00007fd1bcac0090 R08: 0000000000000000 R09: 0000000000000000 [ 395.510250][T15954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.518217][T15954] R13: 0000000000000001 R14: 00007fd1bbf16130 R15: 00007ffec54cd8a8 [ 395.526205][T15954] [ 396.279563][T15977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3513'. [ 396.488669][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 396.498858][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 396.507766][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 396.517683][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 396.544828][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 396.554533][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 396.617319][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.687789][T15989] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 396.778542][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.946316][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.299699][T15980] chnl_net:caif_netlink_parms(): no params data found [ 397.407559][ T12] dummy0: left promiscuous mode [ 397.428845][ T12] bridge0: port 3(dummy0) entered disabled state [ 397.451350][ T12] bridge_slave_1: left allmulticast mode [ 397.457291][ T12] bridge_slave_1: left promiscuous mode [ 397.463072][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.474404][ T12] bridge_slave_0: left allmulticast mode [ 397.480199][ T12] bridge_slave_0: left promiscuous mode [ 397.487643][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.901623][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.914615][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.925938][ T12] bond0 (unregistering): Released all slaves [ 398.048936][ T12] bond1 (unregistering): Released all slaves [ 398.061432][ T12] bond2 (unregistering): Released all slaves [ 398.119726][T15980] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.128159][T15980] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.135561][T15980] bridge_slave_0: entered allmulticast mode [ 398.148874][T15980] bridge_slave_0: entered promiscuous mode [ 398.159654][T15980] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.168358][T15980] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.181588][T15980] bridge_slave_1: entered allmulticast mode [ 398.191237][T15980] bridge_slave_1: entered promiscuous mode [ 398.199049][ T12] : left promiscuous mode [ 398.241276][T15980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.257181][ T12] tipc: Left network mode [ 398.260097][T15980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.298608][ T12] IPVS: stopping master sync thread 7982 ... [ 398.355091][T15980] team0: Port device team_slave_0 added [ 398.361432][T16018] __nla_validate_parse: 4 callbacks suppressed [ 398.361450][T16018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3525'. [ 398.381214][T15980] team0: Port device team_slave_1 added [ 398.470781][T15980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.489876][T15980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.521769][T15980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.559288][T15980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.574768][T15980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.602166][T15980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.625378][ T54] Bluetooth: hci2: command tx timeout [ 398.747655][T15980] hsr_slave_0: entered promiscuous mode [ 398.764744][T15980] hsr_slave_1: entered promiscuous mode [ 398.771209][T15980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.779393][T15980] Cannot create hsr debugfs directory [ 398.928166][ T12] hsr_slave_0: left promiscuous mode [ 398.935285][ T12] hsr_slave_1: left promiscuous mode [ 398.945496][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.953029][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.968700][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.979921][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.001816][ T12] veth1_macvtap: left promiscuous mode [ 399.007634][ T12] veth0_macvtap: left promiscuous mode [ 399.015822][ T12] veth1_vlan: left promiscuous mode [ 399.023545][ T12] veth0_vlan: left promiscuous mode [ 399.232234][ T12] pim6reg527 (unregistering): left allmulticast mode [ 399.260354][ T12] pimreg (unregistering): left allmulticast mode [ 399.822610][ T12] team0 (unregistering): Port device team_slave_1 removed [ 399.887104][ T12] team0 (unregistering): Port device team_slave_0 removed [ 400.305198][T16033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 400.570927][T16036] validate_nla: 2 callbacks suppressed [ 400.570949][T16036] netlink: 'syz.1.3533': attribute type 25 has an invalid length. [ 400.604456][T16036] netlink: 'syz.1.3533': attribute type 7 has an invalid length. [ 400.705785][ T54] Bluetooth: hci2: command tx timeout [ 400.951210][ T5234] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 400.982429][ T5234] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 400.992439][ T5234] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 401.004318][ T5234] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 401.012125][ T5234] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 401.020071][ T5234] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 401.151658][T15980] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 401.188711][T15980] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 401.221723][T15980] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 401.253735][T15980] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 401.557948][T15980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.591038][T16048] chnl_net:caif_netlink_parms(): no params data found [ 401.658373][T15980] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.731293][ T2908] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.739063][ T2908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.801475][T16048] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.814828][T16048] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.822109][T16048] bridge_slave_0: entered allmulticast mode [ 401.835763][T16048] bridge_slave_0: entered promiscuous mode [ 401.867392][T16048] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.884476][T16048] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.891804][T16048] bridge_slave_1: entered allmulticast mode [ 401.899458][T16048] bridge_slave_1: entered promiscuous mode [ 401.913270][ T2919] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.920479][ T2919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.966149][T16065] FAULT_INJECTION: forcing a failure. [ 401.966149][T16065] name failslab, interval 1, probability 0, space 0, times 0 [ 401.981378][T16065] CPU: 1 UID: 0 PID: 16065 Comm: syz.4.3538 Not tainted 6.11.0-rc5-syzkaller-00735-g670726a8262e #0 [ 401.992180][T16065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 402.002258][T16065] Call Trace: [ 402.005562][T16065] [ 402.008500][T16065] dump_stack_lvl+0x241/0x360 [ 402.013192][T16065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.018402][T16065] ? __pfx__printk+0x10/0x10 [ 402.023010][T16065] ? ref_tracker_alloc+0x332/0x490 [ 402.028145][T16065] should_fail_ex+0x3b0/0x4e0 [ 402.032827][T16065] ? skb_clone+0x20c/0x390 [ 402.037240][T16065] should_failslab+0xac/0x100 [ 402.041912][T16065] ? skb_clone+0x20c/0x390 [ 402.046320][T16065] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 402.051772][T16065] skb_clone+0x20c/0x390 [ 402.056123][T16065] __netlink_deliver_tap+0x3cc/0x7c0 [ 402.061440][T16065] ? netlink_deliver_tap+0x2e/0x1b0 [ 402.066642][T16065] netlink_deliver_tap+0x19d/0x1b0 [ 402.071757][T16065] __netlink_sendskb+0x60/0xd0 [ 402.076522][T16065] netlink_dump+0x97d/0xd80 [ 402.081036][T16065] ? __pfx_netlink_dump+0x10/0x10 [ 402.086069][T16065] ? __pfx_lock_acquire+0x10/0x10 [ 402.091181][T16065] __netlink_dump_start+0x5a2/0x790 [ 402.096387][T16065] ? __pfx_tc_dump_tclass+0x10/0x10 [ 402.101576][T16065] rtnetlink_rcv_msg+0xb3d/0xcf0 [ 402.106512][T16065] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 402.111965][T16065] ? __pfx_rtnl_dumpit+0x10/0x10 [ 402.116896][T16065] ? __pfx_tc_dump_tclass+0x10/0x10 [ 402.122087][T16065] ? ref_tracker_free+0x643/0x7e0 [ 402.127111][T16065] netlink_rcv_skb+0x1e3/0x430 [ 402.131884][T16065] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 402.137339][T16065] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 402.142636][T16065] ? netlink_deliver_tap+0x2e/0x1b0 [ 402.147826][T16065] netlink_unicast+0x7f6/0x990 [ 402.152589][T16065] ? __pfx_netlink_unicast+0x10/0x10 [ 402.157867][T16065] ? __virt_addr_valid+0x183/0x530 [ 402.162975][T16065] ? __check_object_size+0x49c/0x900 [ 402.168256][T16065] ? bpf_lsm_netlink_send+0x9/0x10 [ 402.173365][T16065] netlink_sendmsg+0x8e4/0xcb0 [ 402.178132][T16065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.183408][T16065] ? __import_iovec+0x536/0x820 [ 402.188248][T16065] ? aa_sock_msg_perm+0x91/0x160 [ 402.193177][T16065] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 402.198455][T16065] ? security_socket_sendmsg+0x87/0xb0 [ 402.203908][T16065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.209182][T16065] __sock_sendmsg+0x221/0x270 [ 402.213860][T16065] ____sys_sendmsg+0x525/0x7d0 [ 402.218621][T16065] ? __pfx_____sys_sendmsg+0x10/0x10 [ 402.223908][T16065] __sys_sendmsg+0x2b0/0x3a0 [ 402.228501][T16065] ? __pfx___sys_sendmsg+0x10/0x10 [ 402.233608][T16065] ? vfs_write+0x7c4/0xc90 [ 402.238052][T16065] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 402.244378][T16065] ? do_syscall_64+0x100/0x230 [ 402.249134][T16065] ? do_syscall_64+0xb6/0x230 [ 402.253803][T16065] do_syscall_64+0xf3/0x230 [ 402.258297][T16065] ? clear_bhb_loop+0x35/0x90 [ 402.262974][T16065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.268864][T16065] RIP: 0033:0x7fd1bbd79ef9 [ 402.273276][T16065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.292872][T16065] RSP: 002b:00007fd1bcb02038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.301279][T16065] RAX: ffffffffffffffda RBX: 00007fd1bbf15f80 RCX: 00007fd1bbd79ef9 [ 402.309238][T16065] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000005 [ 402.317197][T16065] RBP: 00007fd1bcb02090 R08: 0000000000000000 R09: 0000000000000000 [ 402.325160][T16065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.333119][T16065] R13: 0000000000000000 R14: 00007fd1bbf15f80 R15: 00007ffec54cd8a8 [ 402.341095][T16065] [ 402.395484][T16048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.428639][T16048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.500851][T15980] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 402.512626][T15980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 402.581851][T16048] team0: Port device team_slave_0 added [ 402.592317][T16048] team0: Port device team_slave_1 added [ 402.642688][T16072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3539'. [ 402.655046][T16072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3539'. [ 402.673737][T16048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.686573][T16048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.713427][T16048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.753001][T16048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.768717][T16048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.800540][ T5234] Bluetooth: hci2: command tx timeout [ 402.834545][T16048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.888709][T16078] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.3542'. [ 403.043635][T16048] hsr_slave_0: entered promiscuous mode [ 403.080794][T16048] hsr_slave_1: entered promiscuous mode [ 403.090235][T16048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.099948][T16048] Cannot create hsr debugfs directory [ 403.107123][T16089] netlink: 'syz.4.3544': attribute type 32 has an invalid length. [ 403.114873][ T5234] Bluetooth: hci5: command tx timeout [ 403.115548][T16089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3544'. [ 403.130452][T16089] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 403.250903][T15980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.515760][T16048] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.560470][T16100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3549'. [ 403.583638][T15980] veth0_vlan: entered promiscuous mode [ 403.602250][T15980] veth1_vlan: entered promiscuous mode [ 403.647968][T16048] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.683793][T15980] veth0_macvtap: entered promiscuous mode [ 403.699739][T15980] veth1_macvtap: entered promiscuous mode [ 403.722078][T16048] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.749311][T15980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.761382][T15980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.771375][T15980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.782083][T15980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.792909][T15980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.805644][T15980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.817838][T15980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.833179][T15980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.849497][T15980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.860459][T15980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.871378][T15980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.881475][T15980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.892222][T15980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.905266][T15980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.938668][T16048] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.959726][T15980] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.972190][T15980] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.981134][T15980] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.990825][T15980] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.156719][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.156937][T16048] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 404.172028][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.183734][T16048] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 404.202828][T16048] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 404.231960][ T2908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.232456][T16048] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 404.239888][ T2908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.418138][T16048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.567086][T16048] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.631200][ T2919] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.638432][ T2919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.648642][ T2919] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.655822][ T2919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.759123][T16048] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 404.781080][T16048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 404.866439][ T54] Bluetooth: hci2: command tx timeout [ 405.068693][T16048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.157466][T16048] veth0_vlan: entered promiscuous mode [ 405.173777][T16048] veth1_vlan: entered promiscuous mode [ 405.184582][ T54] Bluetooth: hci5: command tx timeout [ 405.247596][T16048] veth0_macvtap: entered promiscuous mode [ 405.259474][T16048] veth1_macvtap: entered promiscuous mode [ 405.304986][T16048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.326241][T16048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.343010][T16048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.374358][T16048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.394328][T16048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.405323][T16048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.425949][T16048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.444665][T16048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.456557][T16048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.484479][T16048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.495824][T16048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.514428][T16048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.530724][T16048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.546078][T16048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.556740][T16048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.568417][T16048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.581285][T16048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.602292][T16048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.617370][T16048] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.627435][T16048] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.637069][T16048] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.647595][T16048] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.937438][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.956474][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.047040][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.064343][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.103309][T16132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3557'. [ 406.186493][T16134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3532'. [ 406.290687][T16137] FAULT_INJECTION: forcing a failure. [ 406.290687][T16137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.309730][T16138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3559'. [ 406.318889][T16137] CPU: 0 UID: 0 PID: 16137 Comm: syz.1.3558 Not tainted 6.11.0-rc5-syzkaller-00735-g670726a8262e #0 [ 406.329675][T16137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 406.339728][T16137] Call Trace: [ 406.343029][T16137] [ 406.345953][T16137] dump_stack_lvl+0x241/0x360 [ 406.350715][T16137] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.356000][T16137] ? __pfx__printk+0x10/0x10 [ 406.360589][T16137] ? snprintf+0xda/0x120 [ 406.364834][T16137] should_fail_ex+0x3b0/0x4e0 [ 406.369515][T16137] _copy_to_user+0x2f/0xb0 [ 406.373935][T16137] simple_read_from_buffer+0xca/0x150 [ 406.379315][T16137] proc_fail_nth_read+0x1ec/0x260 [ 406.384351][T16137] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 406.389909][T16137] ? rw_verify_area+0x520/0x6b0 [ 406.394754][T16137] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 406.400301][T16137] vfs_read+0x204/0xbc0 [ 406.404450][T16137] ? __pfx_lock_release+0x10/0x10 [ 406.409474][T16137] ? __pfx_vfs_read+0x10/0x10 [ 406.414144][T16137] ? __fget_files+0x29/0x470 [ 406.418729][T16137] ? __fget_files+0x3f6/0x470 [ 406.423408][T16137] ksys_read+0x1a0/0x2c0 [ 406.427646][T16137] ? __pfx_ksys_read+0x10/0x10 [ 406.432405][T16137] ? do_syscall_64+0x100/0x230 [ 406.437167][T16137] ? do_syscall_64+0xb6/0x230 [ 406.441842][T16137] do_syscall_64+0xf3/0x230 [ 406.446338][T16137] ? clear_bhb_loop+0x35/0x90 [ 406.451015][T16137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.456903][T16137] RIP: 0033:0x7f6b9577893c [ 406.461310][T16137] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 406.480916][T16137] RSP: 002b:00007f6b96508030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 406.489412][T16137] RAX: ffffffffffffffda RBX: 00007f6b95915f80 RCX: 00007f6b9577893c [ 406.497376][T16137] RDX: 000000000000000f RSI: 00007f6b965080a0 RDI: 0000000000000006 [ 406.505341][T16137] RBP: 00007f6b96508090 R08: 0000000000000000 R09: 0000000000000000 [ 406.513302][T16137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.521261][T16137] R13: 0000000000000000 R14: 00007f6b95915f80 R15: 00007ffe231794d8 [ 406.529244][T16137] [ 406.629990][ T4623] ================================================================== [ 406.638097][ T4623] BUG: KASAN: slab-use-after-free in mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 406.646800][ T4623] Read of size 8 at addr ffff888022c0e818 by task kworker/u9:1/4623 [ 406.654804][ T4623] [ 406.657151][ T4623] CPU: 0 UID: 0 PID: 4623 Comm: kworker/u9:1 Not tainted 6.11.0-rc5-syzkaller-00735-g670726a8262e #0 [ 406.668010][ T4623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 406.678081][ T4623] Workqueue: hci0 hci_cmd_sync_work [ 406.683302][ T4623] Call Trace: [ 406.686586][ T4623] [ 406.689527][ T4623] dump_stack_lvl+0x241/0x360 [ 406.694219][ T4623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.699430][ T4623] ? __pfx__printk+0x10/0x10 [ 406.704036][ T4623] ? _printk+0xd5/0x120 [ 406.708203][ T4623] ? __virt_addr_valid+0x183/0x530 [ 406.713322][ T4623] ? __virt_addr_valid+0x183/0x530 [ 406.718541][ T4623] print_report+0x169/0x550 [ 406.723070][ T4623] ? __virt_addr_valid+0x183/0x530 [ 406.728195][ T4623] ? __virt_addr_valid+0x183/0x530 [ 406.733317][ T4623] ? __virt_addr_valid+0x45f/0x530 [ 406.738454][ T4623] ? __phys_addr+0xba/0x170 [ 406.742962][ T4623] ? mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 406.748868][ T4623] kasan_report+0x143/0x180 [ 406.753393][ T4623] ? mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 406.759311][ T4623] mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 406.765091][ T4623] ? __pfx_mgmt_remove_adv_monitor_sync+0x10/0x10 [ 406.771521][ T4623] hci_cmd_sync_work+0x22b/0x400 [ 406.776474][ T4623] ? process_scheduled_works+0x945/0x1830 [ 406.782211][ T4623] process_scheduled_works+0xa2c/0x1830 [ 406.787791][ T4623] ? __pfx_process_scheduled_works+0x10/0x10 [ 406.793798][ T4623] ? assign_work+0x364/0x3d0 [ 406.798415][ T4623] worker_thread+0x86d/0xd10 [ 406.803032][ T4623] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 406.808958][ T4623] ? __kthread_parkme+0x169/0x1d0 [ 406.814086][ T4623] ? __pfx_worker_thread+0x10/0x10 [ 406.819224][ T4623] kthread+0x2f0/0x390 [ 406.823311][ T4623] ? __pfx_worker_thread+0x10/0x10 [ 406.828441][ T4623] ? __pfx_kthread+0x10/0x10 [ 406.833046][ T4623] ret_from_fork+0x4b/0x80 [ 406.837476][ T4623] ? __pfx_kthread+0x10/0x10 [ 406.842083][ T4623] ret_from_fork_asm+0x1a/0x30 [ 406.846867][ T4623] [ 406.849885][ T4623] [ 406.852207][ T4623] Allocated by task 13591: [ 406.856623][ T4623] kasan_save_track+0x3f/0x80 [ 406.861320][ T4623] __kasan_kmalloc+0x98/0xb0 [ 406.865926][ T4623] __kmalloc_cache_noprof+0x19c/0x2c0 [ 406.871313][ T4623] mgmt_pending_new+0x65/0x250 [ 406.876089][ T4623] mgmt_pending_add+0x36/0x120 [ 406.880864][ T4623] remove_adv_monitor+0x102/0x1b0 [ 406.885927][ T4623] hci_mgmt_cmd+0xc47/0x11d0 [ 406.890532][ T4623] hci_sock_sendmsg+0x7b8/0x11c0 [ 406.895482][ T4623] __sock_sendmsg+0x221/0x270 [ 406.900169][ T4623] sock_write_iter+0x2dd/0x400 [ 406.904945][ T4623] vfs_write+0xa72/0xc90 [ 406.909195][ T4623] ksys_write+0x1a0/0x2c0 [ 406.913527][ T4623] do_syscall_64+0xf3/0x230 [ 406.918125][ T4623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.924037][ T4623] [ 406.926377][ T4623] Freed by task 15739: [ 406.930453][ T4623] kasan_save_track+0x3f/0x80 [ 406.935144][ T4623] kasan_save_free_info+0x40/0x50 [ 406.940178][ T4623] poison_slab_object+0xe0/0x150 [ 406.945144][ T4623] __kasan_slab_free+0x37/0x60 [ 406.949923][ T4623] kfree+0x149/0x360 [ 406.953820][ T4623] mgmt_pending_foreach+0xd1/0x130 [ 406.958941][ T4623] __mgmt_power_off+0x187/0x420 [ 406.963801][ T4623] hci_dev_close_sync+0x665/0x11a0 [ 406.968928][ T4623] hci_dev_close+0x112/0x210 [ 406.973524][ T4623] sock_do_ioctl+0x158/0x460 [ 406.978124][ T4623] sock_ioctl+0x629/0x8e0 [ 406.982511][ T4623] __se_sys_ioctl+0xfc/0x170 [ 406.987289][ T4623] do_syscall_64+0xf3/0x230 [ 406.991804][ T4623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.997708][ T4623] [ 407.000038][ T4623] The buggy address belongs to the object at ffff888022c0e800 [ 407.000038][ T4623] which belongs to the cache kmalloc-96 of size 96 [ 407.013929][ T4623] The buggy address is located 24 bytes inside of [ 407.013929][ T4623] freed 96-byte region [ffff888022c0e800, ffff888022c0e860) [ 407.027567][ T4623] [ 407.029890][ T4623] The buggy address belongs to the physical page: [ 407.036308][ T4623] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22c0e [ 407.045080][ T4623] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 407.052649][ T4623] page_type: 0xfdffffff(slab) [ 407.057349][ T4623] raw: 00fff00000000000 ffff888015841280 0000000000000000 dead000000000001 [ 407.065953][ T4623] raw: 0000000000000000 0000000000200020 00000001fdffffff 0000000000000000 [ 407.074544][ T4623] page dumped because: kasan: bad access detected [ 407.080969][ T4623] page_owner tracks the page as allocated [ 407.086687][ T4623] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8, tgid 8 (kworker/0:0), ts 63644647163, free_ts 63629328530 [ 407.105285][ T4623] post_alloc_hook+0x1f3/0x230 [ 407.110071][ T4623] get_page_from_freelist+0x2e4c/0x2f10 [ 407.115640][ T4623] __alloc_pages_noprof+0x256/0x6c0 [ 407.120845][ T4623] alloc_slab_page+0x5f/0x120 [ 407.125536][ T4623] allocate_slab+0x5a/0x2f0 [ 407.130047][ T4623] ___slab_alloc+0xcd1/0x14b0 [ 407.134729][ T4623] __slab_alloc+0x58/0xa0 [ 407.139063][ T4623] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 407.144438][ T4623] nsim_fib_event_work+0x19c5/0x4130 [ 407.149726][ T4623] process_scheduled_works+0xa2c/0x1830 [ 407.155279][ T4623] worker_thread+0x86d/0xd10 [ 407.159875][ T4623] kthread+0x2f0/0x390 [ 407.164036][ T4623] ret_from_fork+0x4b/0x80 [ 407.168461][ T4623] ret_from_fork_asm+0x1a/0x30 [ 407.173234][ T4623] page last free pid 5351 tgid 5338 stack trace: [ 407.179559][ T4623] free_unref_folios+0x103a/0x1b00 [ 407.184677][ T4623] folios_put_refs+0x76e/0x860 [ 407.189453][ T4623] free_pages_and_swap_cache+0x5c8/0x690 [ 407.195096][ T4623] tlb_flush_mmu+0x3a3/0x680 [ 407.199697][ T4623] tlb_finish_mmu+0xd4/0x200 [ 407.204289][ T4623] exit_mmap+0x44f/0xc80 [ 407.208526][ T4623] __mmput+0x115/0x390 [ 407.212600][ T4623] exit_mm+0x220/0x310 [ 407.216672][ T4623] do_exit+0x9b2/0x27f0 [ 407.220825][ T4623] do_group_exit+0x207/0x2c0 [ 407.225412][ T4623] get_signal+0x16a1/0x1740 [ 407.229917][ T4623] arch_do_signal_or_restart+0x96/0x860 [ 407.235464][ T4623] syscall_exit_to_user_mode+0xc9/0x370 [ 407.241006][ T4623] do_syscall_64+0x100/0x230 [ 407.245583][ T4623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.251463][ T4623] [ 407.253768][ T4623] Memory state around the buggy address: [ 407.259379][ T4623] ffff888022c0e700: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 407.267422][ T4623] ffff888022c0e780: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 407.275466][ T4623] >ffff888022c0e800: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 407.283505][ T4623] ^ [ 407.288339][ T4623] ffff888022c0e880: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 407.296387][ T4623] ffff888022c0e900: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 407.304430][ T4623] ================================================================== [ 407.320039][ T54] Bluetooth: hci5: command 0x040f tx timeout [ 407.330551][ T4623] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 407.337780][ T4623] CPU: 0 UID: 0 PID: 4623 Comm: kworker/u9:1 Not tainted 6.11.0-rc5-syzkaller-00735-g670726a8262e #0 [ 407.348636][ T4623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 407.358707][ T4623] Workqueue: hci0 hci_cmd_sync_work [ 407.363925][ T4623] Call Trace: [ 407.367208][ T4623] [ 407.370143][ T4623] dump_stack_lvl+0x241/0x360 [ 407.374835][ T4623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.380041][ T4623] ? __pfx__printk+0x10/0x10 [ 407.384641][ T4623] ? preempt_schedule+0xe1/0xf0 [ 407.389505][ T4623] ? vscnprintf+0x5d/0x90 [ 407.393846][ T4623] panic+0x349/0x860 [ 407.397750][ T4623] ? check_panic_on_warn+0x21/0xb0 [ 407.402867][ T4623] ? __pfx_panic+0x10/0x10 [ 407.407290][ T4623] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 407.413285][ T4623] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 407.419631][ T4623] ? print_report+0x502/0x550 [ 407.424322][ T4623] check_panic_on_warn+0x86/0xb0 [ 407.429261][ T4623] ? mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 407.435146][ T4623] end_report+0x77/0x160 [ 407.439379][ T4623] kasan_report+0x154/0x180 [ 407.443871][ T4623] ? mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 407.449757][ T4623] mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 407.455466][ T4623] ? __pfx_mgmt_remove_adv_monitor_sync+0x10/0x10 [ 407.461867][ T4623] hci_cmd_sync_work+0x22b/0x400 [ 407.466794][ T4623] ? process_scheduled_works+0x945/0x1830 [ 407.472503][ T4623] process_scheduled_works+0xa2c/0x1830 [ 407.478047][ T4623] ? __pfx_process_scheduled_works+0x10/0x10 [ 407.484018][ T4623] ? assign_work+0x364/0x3d0 [ 407.488604][ T4623] worker_thread+0x86d/0xd10 [ 407.493187][ T4623] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 407.499076][ T4623] ? __kthread_parkme+0x169/0x1d0 [ 407.504098][ T4623] ? __pfx_worker_thread+0x10/0x10 [ 407.509207][ T4623] kthread+0x2f0/0x390 [ 407.513269][ T4623] ? __pfx_worker_thread+0x10/0x10 [ 407.518370][ T4623] ? __pfx_kthread+0x10/0x10 [ 407.522949][ T4623] ret_from_fork+0x4b/0x80 [ 407.527355][ T4623] ? __pfx_kthread+0x10/0x10 [ 407.531937][ T4623] ret_from_fork_asm+0x1a/0x30 [ 407.536695][ T4623] [ 407.539921][ T4623] Kernel Offset: disabled [ 407.544231][ T4623] Rebooting in 86400 seconds..