last executing test programs: 1m39.415976917s ago: executing program 4 (id=883): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_fallocate_exit\x00', r0}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) (async) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x8, r0}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000001c0)=r1, 0x4) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r2, &(0x7f0000002fc0)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @dev, @broadcast}}}], 0x20}}], 0x1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@deltaction={0x34, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x34}}, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) (async, rerun: 64) ioctl$sock_SIOCSIFBR(r3, 0x890c, 0x0) (rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000013000100"/20, @ANYRES32=0x0, @ANYBLOB="01030000000000000800280000d3530008001300", @ANYRES32, @ANYBLOB="0500100000000000140003006d61637674617030"], 0x54}}, 0x0) (async, rerun: 32) pipe(&(0x7f0000000080)) (rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x275a, 0x0) socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (rerun: 32) socket$packet(0x11, 0x3, 0x300) socket$rxrpc(0x21, 0x2, 0xa) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r6, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m27.572048793s ago: executing program 4 (id=883): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_fallocate_exit\x00', r0}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) (async) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x8, r0}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000001c0)=r1, 0x4) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r2, &(0x7f0000002fc0)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @dev, @broadcast}}}], 0x20}}], 0x1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@deltaction={0x34, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x34}}, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) (async, rerun: 64) ioctl$sock_SIOCSIFBR(r3, 0x890c, 0x0) (rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000013000100"/20, @ANYRES32=0x0, @ANYBLOB="01030000000000000800280000d3530008001300", @ANYRES32, @ANYBLOB="0500100000000000140003006d61637674617030"], 0x54}}, 0x0) (async, rerun: 32) pipe(&(0x7f0000000080)) (rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x275a, 0x0) socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (rerun: 32) socket$packet(0x11, 0x3, 0x300) socket$rxrpc(0x21, 0x2, 0xa) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r6, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m15.704559778s ago: executing program 4 (id=883): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_fallocate_exit\x00', r0}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) (async) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x8, r0}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000001c0)=r1, 0x4) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r2, &(0x7f0000002fc0)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @dev, @broadcast}}}], 0x20}}], 0x1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@deltaction={0x34, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x34}}, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) (async, rerun: 64) ioctl$sock_SIOCSIFBR(r3, 0x890c, 0x0) (rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000013000100"/20, @ANYRES32=0x0, @ANYBLOB="01030000000000000800280000d3530008001300", @ANYRES32, @ANYBLOB="0500100000000000140003006d61637674617030"], 0x54}}, 0x0) (async, rerun: 32) pipe(&(0x7f0000000080)) (rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x275a, 0x0) socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (rerun: 32) socket$packet(0x11, 0x3, 0x300) socket$rxrpc(0x21, 0x2, 0xa) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r6, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m3.514193752s ago: executing program 4 (id=883): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_fallocate_exit\x00', r0}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) (async) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x8, r0}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000001c0)=r1, 0x4) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r2, &(0x7f0000002fc0)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @dev, @broadcast}}}], 0x20}}], 0x1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@deltaction={0x34, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x34}}, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) (async, rerun: 64) ioctl$sock_SIOCSIFBR(r3, 0x890c, 0x0) (rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000013000100"/20, @ANYRES32=0x0, @ANYBLOB="01030000000000000800280000d3530008001300", @ANYRES32, @ANYBLOB="0500100000000000140003006d61637674617030"], 0x54}}, 0x0) (async, rerun: 32) pipe(&(0x7f0000000080)) (rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x275a, 0x0) socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (rerun: 32) socket$packet(0x11, 0x3, 0x300) socket$rxrpc(0x21, 0x2, 0xa) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r6, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 18.228092262s ago: executing program 4 (id=883): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_fallocate_exit\x00', r0}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) (async) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x8, r0}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000001c0)=r1, 0x4) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r2, &(0x7f0000002fc0)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @dev, @broadcast}}}], 0x20}}], 0x1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@deltaction={0x34, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x34}}, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) (async, rerun: 64) ioctl$sock_SIOCSIFBR(r3, 0x890c, 0x0) (rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000013000100"/20, @ANYRES32=0x0, @ANYBLOB="01030000000000000800280000d3530008001300", @ANYRES32, @ANYBLOB="0500100000000000140003006d61637674617030"], 0x54}}, 0x0) (async, rerun: 32) pipe(&(0x7f0000000080)) (rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x275a, 0x0) socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (rerun: 32) socket$packet(0x11, 0x3, 0x300) socket$rxrpc(0x21, 0x2, 0xa) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r6, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 7.186710819s ago: executing program 4 (id=883): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_fallocate_exit\x00', r0}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) (async) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x8, r0}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000001c0)=r1, 0x4) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r2, &(0x7f0000002fc0)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @dev, @broadcast}}}], 0x20}}], 0x1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@deltaction={0x34, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x34}}, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) (async, rerun: 64) ioctl$sock_SIOCSIFBR(r3, 0x890c, 0x0) (rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000013000100"/20, @ANYRES32=0x0, @ANYBLOB="01030000000000000800280000d3530008001300", @ANYRES32, @ANYBLOB="0500100000000000140003006d61637674617030"], 0x54}}, 0x0) (async, rerun: 32) pipe(&(0x7f0000000080)) (rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x275a, 0x0) socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (rerun: 32) socket$packet(0x11, 0x3, 0x300) socket$rxrpc(0x21, 0x2, 0xa) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r6, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.839342701s ago: executing program 3 (id=2046): r0 = socket$unix(0x1, 0x2, 0x0) getsockname$unix(r0, &(0x7f0000000680), &(0x7f00000000c0)=0x6e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x1, 0x7, 0x5}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='rss_stat\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="760a00000000000e6111700000000000180000000000000000002000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3a}, 0x80) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x2}, 0x800, 0x0, 0x103, 0xb, 0x5, 0x6}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(r7, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e21, 0x80000, @local, 0x3}, 0x1c, 0x0}, 0x0) pwritev(r3, &(0x7f0000000440)=[{&(0x7f0000000140)='[e\"L', 0x4}, {&(0x7f0000000180)="a61d", 0x2}, {&(0x7f0000000240)="77e398ba8204278818b08d4621b0b096f35c7aa9420778ba553a18d86a30", 0x1e}, {&(0x7f00000002c0)="ec613cd354064a517cc005d5efb484ba930ef5a3c18ebbd0d94397fd404648b491", 0x21}], 0x4, 0x7da, 0x10002) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000827e883f9bc70018c2b12525efa7d3bf9465e3c0000000000002c330e2d8dfa5fc79d84365a46871a2671ca94c7fd8baf866e276f2f3f0b75027a63816a3677a83a4c12784c66434365eb370824adebf159a8db04b777b5ee21e2263edd938918bb04f4c577c667ae133527eaf47e931a9f5cc814b6657006655ac5b07770953bd44ca8df270174991b506c01424fe09bacd1371705c815d13ee08cce3abfd308f87680b7ab19e0629982c16ff034aee3ae7bbf47", @ANYRES32=r8, @ANYRESOCT=r8], 0x1c}}, 0x20000001) socket$kcm(0x10, 0x3, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) 4.654719158s ago: executing program 3 (id=2048): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) clock_gettime(0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xd) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xd) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000580)={'erspan0\x00', r1, 0x20, 0x7, 0x9, 0xfb41, {{0x7, 0x4, 0x1, 0x8, 0x1c, 0x65, 0x0, 0x5, 0x2f, 0x0, @remote, @broadcast, {[@ssrr={0x89, 0x7, 0x81, [@empty]}]}}}}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x248, 0xc8, 0x8, 0x248, 0x5803, 0x3b0, 0x2e8, 0x2e8, 0x3b0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @local, [], [], 'veth1_to_hsr\x00', 'geneve1\x00'}, 0x0, 0x220, 0x248, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit2={{0x150}, {'lo\x00', {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1f, 0x1f}}}]}, @common=@unspec=@NFQUEUE1={0x28}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@srh={{0x30}}, @common=@icmp6={{0x28}, {0x0, "4edc"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) 4.59933839s ago: executing program 0 (id=2050): socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) r0 = socket$igmp6(0xa, 0x3, 0x3a) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000001b40)={0x0, 0xe8}) (async) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000140), 0x4) (async) getsockopt$MRT6(r0, 0x29, 0xce, 0xffffffffffffffff, &(0x7f00000000c0)) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0xe, 0x504, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r2}, 0x38) (async) r3 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000008f03b720006d0000009500"/25], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) (async) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7, 0x0, 0x0, 0x415f, 0x60, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x11, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r9 = socket(0x11, 0x800000003, 0x0) (async) r10 = socket(0x21, 0x2, 0xffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newqdisc={0x8c, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x2, [0x0, 0x0, 0x0, 0xc, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4], 0x4, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x2000], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffa]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24000084}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 4.537779365s ago: executing program 3 (id=2051): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x8, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'nr0\x00'}) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRESDEC], 0x48}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000001480)) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000b00), r6) sendmsg$NLBL_CIPSOV4_C_LIST(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000900)={0x1e8, r7, 0x1, 0x70bd2a, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x154, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8748}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4abfc35c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3520}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x361f3813}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf8f3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf8c907f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x81a9}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41a1367e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9586}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b4a77dc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xefc1}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa8b1eb6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x59d8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x94f2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x143d0cac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65eb691f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c5c8d95}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdffa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa37c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe66f}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x557f1054}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x13ba}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea72}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7601ec74}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x702f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8062}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6095bba9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x351c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52e7de57}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9b68}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x753c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x206e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5bda}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32f966af}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a8bab11}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe72bd75}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe03c}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71f79d83}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7bbb7bb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}]}, 0x1e8}}, 0x2050) 4.124820059s ago: executing program 0 (id=2052): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d80), 0xffffffffffffffff) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = epoll_create1(0x0) epoll_wait(r3, &(0x7f000000affb)=[{}], 0x1, 0x7fff) (async) mmap(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x20000007}) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100007b79bb7e2199d62962af00000000000000140000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300fcffffff08000b000000000006001100000000000800150000000000"], 0x54}}, 0x0) 3.977980469s ago: executing program 0 (id=2055): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, 0x0, 0x0) 3.780311933s ago: executing program 0 (id=2058): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@ifindex, 0xffffffffffffffff, 0x8, 0x0, 0x0, @prog_fd}, 0x20) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYRES16=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000600aaaaaaaaaabbaaaaaaaaaa26000000aaaaaaaaaabb78a916c3653fa97543732d286a48171ba62d3743a7292e3d"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x7, 0x8, &(0x7f00000002c0)="b8000005000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x368, 0xa, 0x148, 0x368, 0x60, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'rose0\x00'}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x308) socket$inet_tcp(0x2, 0x1, 0x0) 3.636916125s ago: executing program 3 (id=2060): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x680, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c000280080001", @ANYRES32], 0x4c}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000020240)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x10010) r2 = socket(0x2, 0x4, 0x1) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xffffffffffffffd3, 0x4, @link_local}, @TCA_SKBMOD_PARMS={0x24}]}, {0xfffffffffffffe84}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000f7ffffff080000000c0006000100000001000000"], 0x20}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000600)={0x0, 0x7f390004, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000000020605020000200000000000000000001400078008001340040000000800124000060000050001000700000013000300686173683a6e65742c6966616365000005000440000000000900020073797a3100000000050005000a"], 0x60}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2c4002, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r8, 0x11, 0x1, &(0x7f0000000000), 0x4) sendmmsg$inet(r8, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)=0x4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="000228bd7000fedbdf252a000000050037000000000005df3600a7e5f4f12851a3f4a10000005d4f7ebfe201f9a98aa39b6c0f3c97fa06749e0a8d67cdd04f747c8b8f17f00418b45c5304ef7049bb4de71a8ad8b9af1f84bb142324cfdf96fbfb210bf6cd221c4680045c32e71b53938b05bfd87acedfd3fac4"], 0x2c}, 0x1, 0x0, 0x0, 0xc941}, 0x80) 2.640272747s ago: executing program 2 (id=2068): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @bcast, @bpq0, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @bcast]}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0x90, "994dd300fd4e5d8d5b64016766f9b2a19017d023d2dc600c533577416ac994afee3ef198a7080bbe548e398c77181ad5150a82e773f73e46f83d881da13e4b674d38871174473fe98507500c2b0b4bf3f13720db5dbd6a28d62e1c34ba893ec66ee92355922271dba126abcd2f2ac894d415bb82cfe86884ae9c7b655774c536a5226388bf361f8b4b05a27b4172f38b"}, &(0x7f0000000280)=0x98) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000000300)) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e21, 0x7, @loopback}, 0x1c) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x22, 0x0, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x1000, 0x0}, 0x8) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x20000040) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0x10, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5cf5, 0x0, 0x0, 0x0, 0xe}, {}, {}, [@func]}, 0x0, 0x8000, 0x5d, &(0x7f0000000b40)=""/93, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000c00)={0x3, 0xa, 0x2000000, 0x3a}, 0x10, r2, r3, 0x0, 0x0, 0x0, 0x10, 0xe5a8}, 0x90) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000d00)=0xffffffffffffffff, 0x4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000d40)={0x0, 0x7}, &(0x7f0000000d80)=0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000010c0)={&(0x7f0000000dc0)="191c55ecd911ae66b404775dabcfc91f6a8610d9a5a56e8264e12a294dae882a38876edcb0859de3046a08edd28a6c3551607b2fac6f13eada991248b8b21f3f549237c9aed536a406335b25295d59a0e5d4a71abadc86fd22de4d573821f29a0ff53420a93a08e527adf9bc2eb9e39f672533c3668545685a055b22841b84173c46794613c3a38c2e04e1eac5e2e1682b4aaea0f2170fe258184bf5936d1d7159f142fcb131b2", &(0x7f0000000e80)=""/4, &(0x7f0000000ec0)="48a6aa09f15232c105e48b440e3f27c50e9a1d006cfa9e2beaad96989bfa73eaf60e6a45fb737b038c7bba2dcff5d416b22a454a00fdd1cd03be506826c2557dfe1cfddd0345f36b25f2ec3cf9ede6fa1b768d8cf95702d83945a6cad8e52445bd216d1df4fba7513528c506563b968c0d58bbecc6e15ad34511df42b54dfb254fb926ad6c4f99e8cd746ea498637978ea4e9141d1f2fcb44b9f49b48b7d7048f7f7fe1fccdd45e6f49224109294a819b4975e1d0ca8d6df34aafc9becdeb162338d57d44aa893346e605762", &(0x7f0000000fc0)="0b458914f0df7cd7847a1453fb2dabaf553d3eead5e98411116365bc4522d053df9d1de42f05a6e0379494c4be97973383290798f6b74128f5d2fc41cebf7028488f307689b7448a50194bc4c84e365139f4d626fdbcfb76487cf3e8e42fd33f9e4c64bc854524836a59abe77c0fb04bda1c2132f23056e0ba9f130e493fb55cc1b7e63d11d5315ded7fc76252ff902014ec25d1979b07700d967260a320405a348da933bdc33a0394da7fe0ad2b480e0b8b7b7408e367743a51dd270f81e83736eb3467f358ca9b6d9e751b307f2eb3ab49521ba688455a793675f09a7c043ab2ae9e10", 0xb2ad, r3, 0x4}, 0x38) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001140), r4) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x850408}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x24, r6, 0x10, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x758}]}, 0x24}, 0x1, 0x0, 0x0, 0x851}, 0x4000010) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x4c, 0x0, 0x110, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bind$alg(r1, &(0x7f0000001380)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) 1.547931891s ago: executing program 2 (id=2069): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 1.521021882s ago: executing program 1 (id=2070): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 1.456249381s ago: executing program 3 (id=2071): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x8, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'nr0\x00'}) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRESDEC], 0x48}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000001480)) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000b00), r6) sendmsg$NLBL_CIPSOV4_C_LIST(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000900)={0x1e8, r7, 0x1, 0x70bd2a, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x154, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8748}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4abfc35c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3520}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x361f3813}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf8f3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf8c907f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x81a9}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41a1367e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9586}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b4a77dc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xefc1}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa8b1eb6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x59d8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x94f2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x143d0cac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65eb691f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c5c8d95}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdffa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa37c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe66f}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x557f1054}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x13ba}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea72}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7601ec74}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x702f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8062}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6095bba9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x351c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52e7de57}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9b68}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x753c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x206e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5bda}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32f966af}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a8bab11}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe72bd75}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe03c}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71f79d83}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7bbb7bb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}]}, 0x1e8}}, 0x2050) 1.403746478s ago: executing program 1 (id=2072): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.mem_hardwall\x00', 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@getchain={0x74, 0x66, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x2}, {0x6, 0xfff2}, {0xd, 0xc}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0xe0}, {0x8, 0xb, 0xa7}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xfffffffe}, {0x8, 0xb, 0x10001}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xc8}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x2, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) ioctl$sock_netdev_private(r1, 0x89fd, &(0x7f0000000540)="4c7ca8f8cd01f021da816b0a392139c46d8eaccb4305d465356d5a3eee9d594ebd640d3bb18a7a8755256a15bdb54e858149d6a8bc1c03fa71bc0c5e1912c5d4f2a5748681c26bca4a641634a07190493232e560826f5610134f1a1c1b7224bef53af82d08de860a6c34af1a9d79280175730f9fa01eb80404b67f7e2207775f633c26f2390f20cd9b9a0887ace911489026dad40aef085602958b8f80a2ee73bf72") ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'bond0\x00', 0x1000}) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r7, 0x0, 0x18, 0x0, &(0x7f0000000540)) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x6, 0x6, &(0x7f0000000040)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @exit], &(0x7f0000000100)='GPL\x00', 0x4, 0x1000, &(0x7f0000001840)=""/4096}, 0x23) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="34000000ff52ad33820f6bf9336b71516e7da38fe5b68e849e42fc9d4d00786810800b55fe7a5afaf07955612afa44f9d3dc56901b49617e727ad53e2e42a33e63849c8beb457db214dcdeadebed366221d11590051d4496daafd734d444c93fbda41c8075f8613844161e85519caad9fdebece4ff13388aaeb3b5cfc5259acd9731d308137586d25214210a69a6f03c6e46de656564488ac399a20182481445f0438e00", @ANYBLOB="42494f675e71483d332cafa6c1294bd9d2b578e9dee6c0e1d8d44a377fe9b8cc9024a88041c741f1dec194b279ab101a3652c7885849251769500d39d2aabc56deb9600192e2b1a562c86b2530f6686319a184c3a9e00c8c8e5091ae4c07047825a4c0de3c706aa900e646ce", @ANYBLOB="00012cbd7000000000000b00000005002e000100000008002c000900000008002c00070000000031000700000000"], 0x34}}, 0x840) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r9, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x95}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10813}, 0x4000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f000000a2c0)={0x0, 0x0, &(0x7f000000a280)={&(0x7f0000000300)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 1.384301686s ago: executing program 2 (id=2073): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001340)={0x1dc4, r3, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xf2, 0xe}}}}, [@NL80211_ATTR_NAN_FUNC={0x4a0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x9}, @NL80211_NAN_FUNC_SRF={0x120, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xe}, @NL80211_NAN_SRF_BF={0x103, 0x2, "712ff85dc9b23b5791ee64afd28836cf69f17ea6720c95f9cb12f8fc7882bc42faa43251917bbed6ad3af2d1ef9b7828696c1f7fadf8a6cb194bb76e10eb4890f6b2fc8fe77ccc9223a9fcb7c1876b71547809ea90f2a75b5ec7c43479163da44f051b9de494cb0eda2fc8b990b778a4636223e9f1be27d94e126bc3c61d188d980b00f366710f4103aebbac1ce11f9b2748dd2e6dee78f83f5521787ccab54d7c330f21b641f8c7eeae8372529654c56d76072019169d664758af0f4c972eec4597b1beb5520b2b19c4b0781053a59f349849cc97375c10c512b0f9354b4283a0febcaf8b735375a31a2effc16882a80a708a84af9a54d7f730c3b7abbc2a"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xe8}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x10}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x2}, @NL80211_NAN_FUNC_SERVICE_INFO={0x9f, 0xb, "138f71ba7e82fabaa20e06f45af9ce43950e9fa5e61c244269cf31b244e936ebca2a45a93c1ec577334f025323d81225a9e88cba7150a561a3cbf58f19bd9bc0b7f4cd5c0743eb2b637886ab241f1efe7e6654b6c3419c68cc87d6e4fc70f8e1a3377e7eba4ce19e61e5f0a97fab50d0646048c3581ac9698ac12b64b434c01b22b739303d45397c16d6adcedd556c47107985cfec6d223a637138"}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x2b8, 0xd, 0x0, 0x1, [{0x5e, 0x0, "0a207356810ea144c3de25fd485faff07dcbc1242bdc2f289053451e556fccdf0a6f99c1a2675ba21abc4375e98cc103d764d6b3013791cef4b3c1a1b928ceeb399a25b81892a1c763bc56d437d9d13e3c6578bc40a7c760919d"}, {0x31, 0x0, "0428b6bd300aa5e25eb212e1e975e15f0f7b0260de51726199afb8c5d01b9c5da9250fa99fc3e4769c9059fff6"}, {0x4b, 0x0, "5f1cd5146ab6984c3b8cf98674ca954a9b022652958bc9edc9d48aff2e2508aad83d9fdef5abb95926a65fbac5d238a65692f416c3fbefeeed8ea694719414e17f91fc78e2f30d"}, {0x89, 0x0, "3abd02ca15f4a6dc1c7ae97b6eaa5483ddcb1cf24bb272207b2240423f5fa3e6c79ec59422cf63c81998bc307dbc23f71a538c5bfd87e466c21250006ffa071ce387f8cdac38af9d241b854a08cf10d3a3ec00ee2b25dbb969560a258d0fdac9aef9380bf87ded50687ee97e03ff58cfa66e659cf85077c444ab6578dccdaa7ad70e698708"}, {0x70, 0x0, "d9108bd3a96b07982cc1d84130837f48fc8cb2d34a6b1eecd09affb1fa322969925c666382fa69aa5f4bc38a897ab6163b2a4aa62c88e27eec86d8171890bcc94ac76c3d619cee981d0f3dff7ac16625fc846b4ccf44a23c2cfd05d10be273034a5e4042caa1239404eaeb3f"}, {0x45, 0x0, "982b0b541dc8c096670458a32122cb80c7ce5029412906b292e4d290669311484683b1967fe75651c8166ad1709fe276f70680fc0cb24e74a99092c7456b51173a"}, {0x5d, 0x0, "ff4335dba9d7b5ca235a135989c371a6a5b25c81e0f9cbbfdb55b6874e088cea7a99cecc809223cae3dbd911fb32142c1f3215b098bd38f92d38de83e38c1350017886104fd18665886e449ed9150a29c78b35492d288c4879"}, {0x2d, 0x0, "1938e7a39b5a9ae497df2162b9cf27bdd72d21c33470b2b232c3f75e451d071daac855e4f9717ba21b"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x5}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x10b4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "091fa4c4d70f"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "2e5de3237d44"}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xfffffff8}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x108c, 0xd, 0x0, 0x1, [{0x82, 0x0, "9a98225deb052c08f684da6c0ed7bb17bb54c7d79e0bbe504e950b2526f25dfe121b0db1c4a4ef012905b548c71b593b9d9d653ac1deeaf5cb3b84a98b405b4005c9915e0e566de1c2c7d722baa9d8805a97390ffe2ea970c85128bc1646a856c360dbd2e557066ce4813ea10e450b251b39b5e1f9b2f1b454e51460d7d1"}, {0x1004, 0x0, "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"}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x30c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x1bc, 0xd, 0x0, 0x1, [{0x88, 0x0, "b183385105e38ff7941be39169a453c7538b7f150892583a4cd785502a15beff1991fed8f3bb1efdfe30d60be96686a9c5cd39ce521444e43be8299e3e57a955223e18938c0870f56409ba437e4ae35cf3bec633af0efbc8adb8997ae44e8e88a2741ed4e59ef85796d309b23ea44c5b1c49cca19812faa2499a1c760ea33c9d8be92a73"}, {0x4b, 0x0, "5900f3e1073ef1b4748f817d391d7f26ec657278830abb031b518bf222ac0bb09b1da9bbba060a34e60634e8e6a36e56b9335efd690277f417829ba17d86d1c0005b7bebd56a39"}, {0x6b, 0x0, "efc8a0cb887ecc680578d38da739c6170b52fa5f9e84301ae3f62a40ac1d9445ed9e39284ba4990c0bb1398636c70a0a6f0f25b314cf01c8a5ab13cde55b8ce47f75964deb3bb335cea2787052b9698d41835003b07e17fc355c21c7ab18cfbb0342fb4e1e713e"}, {0x78, 0x0, "c338fec9a533f7a155d6e587cb811956befa91fd6be23c33fb5991a5cd46c3dddae1ffc814563f1bd06f9c9b8be1ee1a399ace536ad9343b52283cbab39a72405b4437a8efaf4037eb206ae6435d9e33cd79bf93004b00e479f005b30196685c4827b0f6f599dedf3b2bb91adf4bdd48ae388a75"}]}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x1}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x89}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x63}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x68, 0xe, 0x0, 0x1, [{0x63, 0x0, "cc5d1dc2a27974f037349ccb1c186b3a8472199248f3c3134444fc0dbe143dd7e3b64745c61be5761b137b29823123f6ba088f2290edb9f45047b040341715953c145e6b702ba2ef831027b9226a07c6d36e71e6308ade962b90c20fa744e4"}]}, @NL80211_NAN_FUNC_TTL={0x8}, @NL80211_NAN_FUNC_SERVICE_INFO={0xb8, 0xb, "964a4f329d8e1000748c627757178dc335f995994e5cefea91214fa316a1209ab25a8bfb8019118e8a7167d764115d12a2405c603f7929974becd3ea2960895ec28f997fdd4b6106c804f6af0a9ebd6f50965e8927237cd6bff2bd469779b60f08a967ee5167831e296d2be067534c18d546ee6350edcf591e9a3d1d393a381ae4745f57e8e46a5bb0b07e2e2311defc4776bb78b6aeb710666f1af7691d78d75068d9c5becaffe35ae1a77cb73614f53e7924c7"}]}, @NL80211_ATTR_NAN_FUNC={0x53c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x10}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x10}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x4cc, 0xe, 0x0, 0x1, [{0x102, 0x0, "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"}, {0xb7, 0x0, "e713c0ef4bf8108c0a101c633f1c042fab6d089c9da3597f3a83fb72aafa4aad8feaf0edb7d726ed1175cacc35606b13a5e4316726d895a99749570d56f37dd34bd70c4962a5c01e3bc5f9cfdf21fe489da8da8bd7a5e537db5a1a68278eb63e06303dc37990a273b29a02f0ec38ef7894d976748f33b0cc67c2dbb4dc5b7975467e4ed852ebd32298413928655cd22fa89954f2b4663ab9477b38a2c7ad26e5189b397bc047f0da067890a3324628d0f8a8e8"}, {0xbc, 0x0, "04d593b867aef7c1f0de86676c0252abbb00668366285c68063b3db41ea1c346e573e9a4df3b1e8a9789f6157ee1e485dc4562aa3c5477e9d031c5482431d41dc0c25e9d6d46f571a05c9b3e8abf72af886fb399144d67cc6a95cad055ba1307f52788f4b3a7f6caed756debf77e4ad5367198f0b1231f11db8ae1ec18a042896459119f19ee1fa5f242654a01c025802b24e83a9dc9bb59010dd1698971f6ccdbd2a7f7126b52f75f0211e1193ac7fdf8ca92fb208d2add"}, {0xe0, 0x0, "a88dda669b191a1638c2ee33e0ecd2e1b699d72dba103f0e1eb9968d3f9a43583c0f83852b0cfbba3dced81bb060d11fc9d88d0ddc345573d529798cb184060d8cb5a6d0dcc9781b2657f9f47120db69f04991f9051aa4e2ab57e7ffc8bce5d817437c572030c9c0fd8298cc0f5d829f34d29d5eed893c3fc9d3a1b184bfcc9d80834ab96dd46875ab0da5a865563d91f20c48261a687dfbaf5988960200999a8670d5589c864597f22c7f8d47f479d655080d3a8aff1baa4fed183de4cbe2a39cf33cecc8d8a67936a46307ca9078831726cbafe8e1e33533a697d6"}, {0x86, 0x0, "248355c9f1bfe6f17da36cc2fc1c619afd00dcf735e614179afd65689faf8472b90180f33d3df66a3abac70b9c5bf103959e5031684e7b814c68d3644713aa765f312084c867328bf2046d9988fce9195b4a497ffbeb1cb8856b81f53b37770401b4e828455ce4291430aaca75fd97af006740d3cdb5b10a9eecd26ae6af0f1abcb1"}, {0x4}, {0x51, 0x0, "a00ed0ac3adcbd90489625932c2a31200211e8daee1a18969050e966aeec3ceaff7f148e5a89c3491106af9e7c064e9091c7a2adab111db9d2d02cf3704a671d696d9cec312cd5be20ed6df35a"}, {0x16, 0x0, "1a999cee80232ede57c9d984a134fa49c387"}, {0x76, 0x0, "14fbf11f7495cc13b5aa5735e78e0e864f2a2ba447f47112a734b132acf30962050c4dbee739379352d774a1f32865ebe88d0ae18873d354972dcf48f07319e4ee61167b1644a8f8b4fb348df9f761d0823c9a263eaa39af49d3d0f78b5608be6530eee4f3123e03126de0e5361cf1770d57"}]}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xfffffa41}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x9}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xb}, @NL80211_NAN_FUNC_SRF={0x28, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa}]}]}]}]}, 0x1dc4}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001300)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)={0x5c, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5c}}, 0x20000000) 1.068314638s ago: executing program 2 (id=2074): socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) (async) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f0000000340)={{{@in=@local, @in6=@loopback}}, {{@in=@private}, 0x0, @in6=@mcast2}}, 0xe8) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000029c0)={@ifindex, 0xffffffffffffffff, 0x16, 0x3a}, 0x20) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) unshare(0x400) (async) listen(r2, 0x0) (async) ppoll(&(0x7f00000002c0)=[{r2}], 0x1, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'gretap0\x00', 0x0}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000006c0)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x2c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_WINDOW={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xf, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) 953.852763ms ago: executing program 2 (id=2075): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) unshare(0xc040480) (async) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time_for_children\x00') sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x2c}}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x4}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) (async) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00H'], 0xfe33) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000007f80)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000880)=""/23, 0x17}], 0x1}}], 0x1, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)={0x10c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0xa8, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x4}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8080}, 0xc000) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002400)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, r9, 0x0) (async) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000022004106"], 0x1c}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'xfrm0\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) 762.59841ms ago: executing program 1 (id=2076): r0 = socket$isdn(0x22, 0x3, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0xd) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}]}]}, 0xcc}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) connect$pppoe(r4, &(0x7f00000001c0)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r7, 0x103, 0x4, 0x0, &(0x7f00000000c0)) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0x40000000000000) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000002c0)={'team_slave_1\x00', 0x400}) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r11], 0x20}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x394}}, 0x0) 647.774538ms ago: executing program 3 (id=2077): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000000700000006000000c34100000000000095000000d3031a00"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x118, &(0x7f0000000140)=""/250}, 0x23) r0 = socket(0x2b, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="8ec1cc54649640be1983f79c5bfe88cd6a6afdd570ab59578db363f4892559f334d436138406b699de69db13fd73742880", 0x31}, {&(0x7f0000000340)="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", 0x217}, {&(0x7f0000000580)="1b3b351333f3a3b13679144b7cd8a483d6dbc75ded5829aceff163e19496e9ba6875841285b877fac97b183e950017761d4433127df4ffeab47d3545970ac2571b8775e05a2ec30dbc2154f17ddb1de319411d093471a30c77ca0d06d1576a43cbd422dd9fc5aeeef4a0a53a5d93a9b5b000bba7223848aa6b97abe164077f7737311f187ffdfefdae072f6c3d59bf3a7d15", 0x92}], 0x3}, 0x0) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="8db4c6d3916872c4d26e8e39f30e9ce9ab2f204389cf53c6", 0x18) r6 = accept$alg(r5, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) recvmmsg(r6, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4083, 0xff3}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000bc0)=""/232, 0xffffff43}, {&(0x7f0000000700)=""/125, 0x7d}, {&(0x7f0000000780)=""/88, 0x58}, {&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/228, 0xbf}, {&(0x7f00000009c0)=""/99, 0x63}, {&(0x7f0000000a40)=""/51, 0x33}], 0xa}}], 0x2, 0x0, 0x0) sendfile(r6, r4, 0x0, 0x10000a006) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@gettaction={0x44, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA]}, 0x44}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 276.250956ms ago: executing program 1 (id=2078): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) (async) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) (async) syz_emit_ethernet(0x456, &(0x7f00000003c0)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x420, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}, @mcast2, {[@fragment={0x3b, 0x0, 0xc, 0x0, 0x0, 0x3, 0x68}, @routing={0x33, 0xe, 0x1, 0x5a, 0x0, [@local, @dev={0xfe, 0x80, '\x00', 0x22}, @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @private1]}, @hopopts={0x2e, 0x39, '\x00', [@hao={0xc9, 0x10, @mcast1}, @pad1, @ra={0x5, 0x2, 0x9}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x8, 0x2b, "6f24dc7ccd30feef6d360573f54a63f6141d6ec8c971c15d6d32b393e01867038c6a0fb4d1d8d4f7ccc38a"}, @ra={0x5, 0x2, 0x1}, @generic={0x6, 0xdb, "ac9823d9a60dc8ed2e8a2c6ed17365698f697faddb62b822d2471b2ced93a57e25e3b6e1bcaf53ddf6e5f176a5c11ecfc3db254a4ab11ad45490aebc241e6e6f301b7f012612b8604bbbe6bd36fb1d3ca01cf6bc9e47e755b2e6c7b77218a7c82c893b4cf20eacee6efacc41789d11d3148198e342d9c402b82a1e78963d46d3b76809806a4f4b481f42a8f051a44672aaab1949e430484ef6e5efe8822933b68707c2dedd60d71c72d134f71033fe0d95b17f8e4f4eae96b62dc30f0604c91a723334ac135d53abb237e4ca7c84b720720ef6502d3589244988c2"}, @generic={0x6, 0x9f, "263c392d8607cfc86829dc44d08518c80526a8141305fb0c4a0756d02315d20980c3c2d683ae5d995ddd4f8f56a7d890853fb999774b0bacc38dc35ce58d45e05f32646e361b592dda84a07417d765e645beeff1a897e3119754650861d61f6a0b17d7579f6a042f4dbc294e623412531ec947250c980b364c76bc3b5f9198699ebfc3d444e1e21d825ee6ecc639b95f47fb3003c865f41c9956650d2dbbcd"}]}, @routing={0x3b, 0x6, 0x2, 0xff, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @mcast2]}, @srh={0x1, 0xe, 0x4, 0x7, 0xac, 0xf0, 0x3, [@local, @dev={0xfe, 0x80, '\x00', 0x22}, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}]}, @fragment={0x36, 0x0, 0x3, 0x1, 0x0, 0x4, 0x66}, @dstopts={0x3c}, @fragment={0x2f, 0x0, 0x9, 0x0, 0x0, 0x15, 0x67}, @hopopts={0x1, 0x17, '\x00', [@pad1, @pad1, @calipso={0x7, 0x28, {0x0, 0x8, 0x8, 0x3, [0xf16, 0x40, 0x2, 0x0]}}, @pad1, @ra={0x5, 0x2, 0x43a3}, @generic={0x5, 0x5d, "aa6ecbbc5825338741e58ebbbaf50fd71d61521cf24bd3901583f9118f206e7139f87820f19f38404b72a62fe1b5a6b717e9c51a114cd5adee7dc01693f81b802ec2bbe4c96a6d0dc5d9eabf9fa72fc518b1748de854519bf4e3356460"}, @jumbo={0xc2, 0x4, 0x143}, @calipso={0x7, 0x20, {0x3, 0x6, 0x5, 0xbd, [0x6, 0xe, 0x2]}}]}], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, 'K\x00', 0x0, 0x3a, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r5 = getpid() sendmsg$unix(r3, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[@rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee01}}}], 0x38}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x20c, 0x26, 0x200, 0x70bd29, 0x25dfdbff, {0x6}, [@typed={0xda, 0x139, 0x0, 0x0, @binary="27828b59728329e5ccd41aaff994de9b532327733732dd9a7c9cb1cbe7eb83566541a818e39b07e45b7f7a65c4ded5483c578c0f91801255d4883c1de08e482e7f8984e8ef44d5dc714becb438e90cf6617873ab9a380da06c922cbcb7e81950fd6b24f3c1ba10dc990f224388baacca555da56b3a6bc546e6c5a1a57efcc4c26e2a45756f737a219d507ec45a7f18cb55cbaaae3ad8860bf21e6825919732cde7ab74956a6849cee8eb065f3fb6e116dae988a0a0d87e6394772a5b1e00815560b512a55a01bb0383caa6c4a5ea0900a41b9ba752d4"}, @nested={0x18, 0x25, 0x0, 0x1, [@typed={0xc, 0xa3, 0x0, 0x0, @u64=0x6}, @typed={0x8, 0x145, 0x0, 0x0, @u32=0x100}]}, @typed={0x8, 0x2e, 0x0, 0x0, @pid}, @nested={0xf3, 0xf1, 0x0, 0x1, [@generic, @generic="3eb5ac72b0d19e3503f9e7bb6c1efc07c12b23ad626850e6241ae1cf5d6b9bf339bef102a8c101f14ee84e10af1aa613b0e28fe4a2f9cc7835ca785730e53fbc45e93768c56fad582c950b42b98d698078985dac870a1aa3fe556da42c5338e492d48c219176dc0838a58c668d545fbf7ff90497e17ebcc7c68f7fe5c7a9a240c6ad8644dc507c403ac074ac455e1515848182ce2b1ba16d81c1a9cbeec8a5e63cf42f2fe9551a13bf4c2f9209f6b69e9f890cc648371e010f4c9e7ccffd05e7ac05d57a36703027a4682c95ba2dc4c91791c939069f6364dd3e7fdaa990eb34db6c", @typed={0x5, 0x5d, 0x0, 0x0, @str='\x00'}, @generic="fc74a3969e"]}, @typed={0x8, 0x60, 0x0, 0x0, @pid=r5}]}, 0x20c}, 0x1, 0x0, 0x0, 0x1}, 0x240400d0) (async) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 196.617646ms ago: executing program 0 (id=2079): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000a40)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000b40)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x4c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x58015}, 0x20084084) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000180)=0x1) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000300)="d6", 0x1}, {&(0x7f0000000340)="dae9fafc98efd9911c0ea6870ef1d5377167f571b332e2f02180d9a558bc0bd24386ccdb1f66d1a834df67ccad0c3aebb9ab13c3e034f2c53bf90d8a6c87c442af2625dfafd8f13d878a5f81187cdb89d6ada9cb5ed198d95bb6614228c91061195f26aec0a154854b264730c072e80410d510fb3cf6e568a4121dd798dcfc7ce3054e57ecf8c94f60330846f3", 0x8d}, {&(0x7f0000001080)="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", 0xf73}], 0x3}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/172, 0xac}], 0x7}}], 0x1, 0x0, 0x0) 166.094223ms ago: executing program 1 (id=2080): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @bcast, @bpq0, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @bcast]}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0x90, "994dd300fd4e5d8d5b64016766f9b2a19017d023d2dc600c533577416ac994afee3ef198a7080bbe548e398c77181ad5150a82e773f73e46f83d881da13e4b674d38871174473fe98507500c2b0b4bf3f13720db5dbd6a28d62e1c34ba893ec66ee92355922271dba126abcd2f2ac894d415bb82cfe86884ae9c7b655774c536a5226388bf361f8b4b05a27b4172f38b"}, &(0x7f0000000280)=0x98) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000000300)) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e21, 0x7, @loopback}, 0x1c) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x22, 0x0, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x1000, 0x0}, 0x8) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x20000040) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0x10, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5cf5, 0x0, 0x0, 0x0, 0xe}, {}, {}, [@func]}, 0x0, 0x8000, 0x5d, &(0x7f0000000b40)=""/93, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x3, 0xa, 0x2000000, 0x3a}, 0x10, r2, r3, 0x0, 0x0, 0x0, 0x10, 0xe5a8}, 0x90) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000d00)=0xffffffffffffffff, 0x4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000d40)={0x0, 0x7}, &(0x7f0000000d80)=0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000010c0)={&(0x7f0000000dc0)="191c55ecd911ae66b404775dabcfc91f6a8610d9a5a56e8264e12a294dae882a38876edcb0859de3046a08edd28a6c3551607b2fac6f13eada991248b8b21f3f549237c9aed536a406335b25295d59a0e5d4a71abadc86fd22de4d573821f29a0ff53420a93a08e527adf9bc2eb9e39f672533c3668545685a055b22841b84173c46794613c3a38c2e04e1eac5e2e1682b4aaea0f2170fe258184bf5936d1d7159f142fcb131b2", &(0x7f0000000e80)=""/4, &(0x7f0000000ec0)="48a6aa09f15232c105e48b440e3f27c50e9a1d006cfa9e2beaad96989bfa73eaf60e6a45fb737b038c7bba2dcff5d416b22a454a00fdd1cd03be506826c2557dfe1cfddd0345f36b25f2ec3cf9ede6fa1b768d8cf95702d83945a6cad8e52445bd216d1df4fba7513528c506563b968c0d58bbecc6e15ad34511df42b54dfb254fb926ad6c4f99e8cd746ea498637978ea4e9141d1f2fcb44b9f49b48b7d7048f7f7fe1fccdd45e6f49224109294a819b4975e1d0ca8d6df34aafc9becdeb162338d57d44aa893346e605762", &(0x7f0000000fc0)="0b458914f0df7cd7847a1453fb2dabaf553d3eead5e98411116365bc4522d053df9d1de42f05a6e0379494c4be97973383290798f6b74128f5d2fc41cebf7028488f307689b7448a50194bc4c84e365139f4d626fdbcfb76487cf3e8e42fd33f9e4c64bc854524836a59abe77c0fb04bda1c2132f23056e0ba9f130e493fb55cc1b7e63d11d5315ded7fc76252ff902014ec25d1979b07700d967260a320405a348da933bdc33a0394da7fe0ad2b480e0b8b7b7408e367743a51dd270f81e83736eb3467f358ca9b6d9e751b307f2eb3ab49521ba688455a793675f09a7c043ab2ae9e10", 0xb2ad, r3, 0x4}, 0x38) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001140), r4) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x850408}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x24, r6, 0x10, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x758}]}, 0x24}, 0x1, 0x0, 0x0, 0x851}, 0x4000010) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x4c, 0x0, 0x110, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bind$alg(r1, &(0x7f0000001380)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) 80.364527ms ago: executing program 0 (id=2081): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x8, 0xa}, 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@acquire={0x180, 0x17, 0x1, 0x0, 0x0, {{@in6=@mcast2}, @in6=@remote, {@in=@remote, @in6=@private0, 0x0, 0x2}, {{@in6=@private2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@private2}]}, @mark={0xc, 0x15, {0x0, 0x37}}]}, 0x180}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$packet(0x11, 0x0, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r5 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r5, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0x4}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000002c0)="4ba72c4cfd81685544f46c3f88a8", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r2]}, 0x90) unshare(0x2c060000) unshare(0x24020400) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, 0x0, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = socket(0x0, 0x3, 0x0) sendmsg$nl_generic(r8, 0x0, 0x0) sendmmsg$inet(r7, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @multicast2}}, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$BTRFS_IOC_QGROUP_LIMIT(r9, 0x8030942b, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r9, 0xc400941d, 0x0) r10 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r10, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="02", 0x1}], 0x1}, 0x0) 24.048149ms ago: executing program 1 (id=2082): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x8, 0x1ff, 0x3, 0x3, 0x0, r1, 0xf4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @local}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x2c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000005740), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000005800)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x38, r5, 0x1, 0x0, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x44}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r8, 0x0) 0s ago: executing program 2 (id=2083): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) kernel console output (not intermixed with test programs): The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.160443][ T9096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.199268][ T9096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.223056][ T9096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.241842][ T9096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.253963][ T9096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.281400][ T9096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.398986][ T9096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.423299][ T9096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.446063][ T9096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.471591][ T9096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.493944][ T9096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.513408][ T9096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.527427][ T9096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.561534][ T9096] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.595414][ T9096] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.622669][ T9096] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.646916][ T9096] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.832255][ T2529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.848615][ T2529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.890774][ T9402] bridge_slave_1: left allmulticast mode [ 155.897310][ T9402] bridge_slave_1: left promiscuous mode [ 155.903399][ T9402] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.915866][ T9402] bridge3: port 1(bridge_slave_1) entered blocking state [ 155.923101][ T9402] bridge3: port 1(bridge_slave_1) entered disabled state [ 155.930287][ T9402] bridge_slave_1: entered allmulticast mode [ 155.937932][ T9402] bridge_slave_1: entered promiscuous mode [ 155.945761][ T9402] bridge3: port 1(bridge_slave_1) entered blocking state [ 155.952957][ T9402] bridge3: port 1(bridge_slave_1) entered forwarding state [ 155.971365][ T9408] bridge3: port 2(veth1_to_bond) entered blocking state [ 155.979999][ T9408] bridge3: port 2(veth1_to_bond) entered disabled state [ 155.987633][ T9408] veth1_to_bond: entered allmulticast mode [ 155.995283][ T9408] veth1_to_bond: entered promiscuous mode [ 156.001958][ T9408] bridge3: port 2(veth1_to_bond) entered blocking state [ 156.009064][ T9408] bridge3: port 2(veth1_to_bond) entered forwarding state [ 156.027022][ T2529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.050654][ T2529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.237300][ T9421] __nla_validate_parse: 2 callbacks suppressed [ 156.237319][ T9421] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1067'. [ 156.281747][ T9423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1068'. [ 156.309248][ T9423] netlink: 'syz.3.1068': attribute type 1 has an invalid length. [ 156.333635][ T9423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1068'. [ 156.343564][ T9424] netlink: 'syz.3.1068': attribute type 1 has an invalid length. [ 156.395485][ C0] eth0: bad gso: type: 1, size: 1408 [ 156.409746][ T9426] lo speed is unknown, defaulting to 1000 [ 156.440501][ T9428] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1070'. [ 156.622440][ T9433] netlink: 'syz.1.1072': attribute type 21 has an invalid length. [ 156.654830][ T9433] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1072'. [ 156.874639][ T9443] bond_slave_0: entered promiscuous mode [ 156.880674][ T9443] bond_slave_1: entered promiscuous mode [ 156.950592][ T9443] bond0: entered promiscuous mode [ 157.119084][ T9440] bond0: left promiscuous mode [ 157.143789][ T9440] bond_slave_0: left promiscuous mode [ 157.149488][ T9440] bond_slave_1: left promiscuous mode [ 157.391039][ T9457] lo speed is unknown, defaulting to 1000 [ 158.264258][ T9493] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1085'. [ 158.374398][ T9500] sctp: [Deprecated]: syz.3.1084 (pid 9500) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.374398][ T9500] Use struct sctp_sack_info instead [ 158.471397][ T9504] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1087'. [ 158.481485][ T9492] tap0: tun_chr_ioctl cmd 1074025677 [ 158.491885][ T9492] tap0: linktype set to 0 [ 158.505720][ T9504] netlink: 'syz.1.1087': attribute type 10 has an invalid length. [ 158.514256][ T9504] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1087'. [ 158.523525][ T9504] ipvlan1: entered promiscuous mode [ 158.528748][ T9504] ipvlan1: entered allmulticast mode [ 158.535780][ T9504] veth0_vlan: entered allmulticast mode [ 158.547285][ T9504] bridge0: port 3(ipvlan1) entered blocking state [ 158.554011][ T9504] bridge0: port 3(ipvlan1) entered disabled state [ 158.561997][ T9504] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 158.747118][ T2529] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.333879][ T5246] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 159.344134][ T5246] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 159.354339][ T9550] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1099'. [ 159.371347][ T5246] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 159.381097][ T5246] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 159.388872][ T5246] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 159.396463][ T5246] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 159.432725][ T9555] Bluetooth: MGMT ver 1.23 [ 159.434058][ T9549] lo speed is unknown, defaulting to 1000 [ 159.661517][ T9549] chnl_net:caif_netlink_parms(): no params data found [ 159.730122][ T9549] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.744844][ T9549] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.752002][ T9549] bridge_slave_0: entered allmulticast mode [ 159.760444][ T9549] bridge_slave_0: entered promiscuous mode [ 159.769712][ T9549] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.777094][ T9549] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.784475][ T9549] bridge_slave_1: entered allmulticast mode [ 159.803458][ T9549] bridge_slave_1: entered promiscuous mode [ 159.849838][ T9549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.870767][ T9549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.927660][ T9549] team0: Port device team_slave_0 added [ 159.946216][ T9549] team0: Port device team_slave_1 added [ 160.023780][ T2529] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.074379][ T9571] openvswitch: netlink: Message has 8 unknown bytes. [ 160.110615][ T2529] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.146659][ T9549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.155657][ T9549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.184702][ T9549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.235686][ T2529] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.258685][ T9549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.273802][ T9549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.334271][ T9549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.490901][ T9549] hsr_slave_0: entered promiscuous mode [ 160.498662][ T9549] hsr_slave_1: entered promiscuous mode [ 160.506506][ T9549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.518095][ T9549] Cannot create hsr debugfs directory [ 160.671303][ T2529] bridge_slave_1: left allmulticast mode [ 160.678631][ T2529] bridge_slave_1: left promiscuous mode [ 160.685079][ T2529] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.699702][ T2529] bridge_slave_0: left allmulticast mode [ 160.705689][ T2529] bridge_slave_0: left promiscuous mode [ 160.711569][ T2529] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.035395][ T2529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.051617][ T2529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.063167][ T2529] bond0 (unregistering): Released all slaves [ 161.082310][ T9592] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1108'. [ 161.439030][ T9603] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1111'. [ 161.471560][ T9603] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1111'. [ 161.493123][ T5241] Bluetooth: hci0: command tx timeout [ 162.092617][ T2529] hsr_slave_0: left promiscuous mode [ 162.116513][ T2529] hsr_slave_1: left promiscuous mode [ 162.139634][ T2529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.154235][ T2529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.177543][ T2529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.191551][ T2529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.273915][ T2529] veth1_macvtap: left promiscuous mode [ 162.285526][ T2529] veth0_macvtap: left promiscuous mode [ 162.298052][ T2529] veth1_vlan: left promiscuous mode [ 162.310160][ T2529] veth0_vlan: left promiscuous mode [ 162.467614][ T9615] syz.3.1114 (9615) used greatest stack depth: 16856 bytes left [ 162.735928][ T9638] sctp: [Deprecated]: syz.3.1120 (pid 9638) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.735928][ T9638] Use struct sctp_sack_info instead [ 163.175794][ T2529] team0 (unregistering): Port device team_slave_1 removed [ 163.253621][ T2529] team0 (unregistering): Port device team_slave_0 removed [ 163.573929][ T5241] Bluetooth: hci0: command tx timeout [ 163.941043][ T9631] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 163.960731][ T9639] tap0: tun_chr_ioctl cmd 1074025677 [ 164.020853][ T9639] tap0: linktype set to 0 [ 164.062552][ T9549] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 164.092431][ T9549] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 164.149897][ T9549] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 164.194568][ T9549] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 164.251268][ T9645] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1122'. [ 164.519558][ T9027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.547244][ T9549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.554821][ T9027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.597957][ T9549] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.608194][ T9667] netlink: 'syz.0.1127': attribute type 3 has an invalid length. [ 164.623491][ T5283] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.630638][ T5283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.645514][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1127'. [ 164.676544][ T5283] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.683746][ T5283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.723367][ T9661] lo speed is unknown, defaulting to 1000 [ 165.178548][ T9549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.367604][ T9549] veth0_vlan: entered promiscuous mode [ 165.396561][ T9549] veth1_vlan: entered promiscuous mode [ 165.502198][ T9696] can: request_module (can-proto-5) failed. [ 165.521715][ T9549] veth0_macvtap: entered promiscuous mode [ 165.587600][ T9549] veth1_macvtap: entered promiscuous mode [ 165.617236][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.629452][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.653073][ T5241] Bluetooth: hci0: command tx timeout [ 165.658590][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.658613][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.699552][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.725880][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.759972][ T9549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.777179][ T9707] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 165.790138][ T9704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1135'. [ 165.820237][ T9707] ip6tnl0: entered promiscuous mode [ 165.837676][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.850669][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.861234][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.874507][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.884940][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.903742][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.916374][ T9549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.933212][ T9706] ip6tnl0: left promiscuous mode [ 165.966979][ T9549] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.978714][ T9549] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.999936][ T9549] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.009794][ T9549] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.034898][ T9687] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 166.104326][ T9717] FAULT_INJECTION: forcing a failure. [ 166.104326][ T9717] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 166.123281][ T9717] CPU: 1 UID: 0 PID: 9717 Comm: syz.1.1139 Not tainted 6.10.0-syzkaller-12585-g301927d2d2eb #0 [ 166.133743][ T9717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 166.143827][ T9717] Call Trace: [ 166.147110][ T9717] [ 166.150032][ T9717] dump_stack_lvl+0x241/0x360 [ 166.154709][ T9717] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.159901][ T9717] ? __pfx__printk+0x10/0x10 [ 166.164482][ T9717] ? __pfx_lock_release+0x10/0x10 [ 166.169510][ T9717] should_fail_ex+0x3b0/0x4e0 [ 166.174187][ T9717] _copy_from_iter+0x1f6/0x1960 [ 166.179028][ T9717] ? __virt_addr_valid+0x183/0x530 [ 166.184134][ T9717] ? __pfx_lock_release+0x10/0x10 [ 166.189159][ T9717] ? __alloc_skb+0x28f/0x440 [ 166.193748][ T9717] ? __pfx__copy_from_iter+0x10/0x10 [ 166.199023][ T9717] ? __virt_addr_valid+0x183/0x530 [ 166.204121][ T9717] ? __virt_addr_valid+0x183/0x530 [ 166.209219][ T9717] ? __virt_addr_valid+0x45f/0x530 [ 166.214335][ T9717] ? __check_object_size+0x49c/0x900 [ 166.219615][ T9717] netlink_sendmsg+0x73d/0xcb0 [ 166.224379][ T9717] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.229747][ T9717] ? __import_iovec+0x536/0x820 [ 166.234588][ T9717] ? aa_sock_msg_perm+0x91/0x160 [ 166.239515][ T9717] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 166.244790][ T9717] ? security_socket_sendmsg+0x87/0xb0 [ 166.250243][ T9717] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.255520][ T9717] __sock_sendmsg+0x221/0x270 [ 166.260192][ T9717] ____sys_sendmsg+0x525/0x7d0 [ 166.264954][ T9717] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.270244][ T9717] __sys_sendmsg+0x2b0/0x3a0 [ 166.274831][ T9717] ? __pfx___sys_sendmsg+0x10/0x10 [ 166.279935][ T9717] ? vfs_write+0x7c4/0xc90 [ 166.284375][ T9717] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 166.290701][ T9717] ? do_syscall_64+0x100/0x230 [ 166.295466][ T9717] ? do_syscall_64+0xb6/0x230 [ 166.300132][ T9717] do_syscall_64+0xf3/0x230 [ 166.304625][ T9717] ? clear_bhb_loop+0x35/0x90 [ 166.309295][ T9717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.315183][ T9717] RIP: 0033:0x7f751a177299 [ 166.319593][ T9717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.339189][ T9717] RSP: 002b:00007f751afde048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.347598][ T9717] RAX: ffffffffffffffda RBX: 00007f751a305f80 RCX: 00007f751a177299 [ 166.355558][ T9717] RDX: 0000000000000000 RSI: 0000000020000e40 RDI: 0000000000000005 [ 166.363521][ T9717] RBP: 00007f751afde0a0 R08: 0000000000000000 R09: 0000000000000000 [ 166.371481][ T9717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.379441][ T9717] R13: 000000000000000b R14: 00007f751a305f80 R15: 00007ffed2eaa4f8 [ 166.387415][ T9717] [ 166.506875][ T9037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.525340][ T9037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.641941][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.681656][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.861896][ T9735] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1145'. [ 166.899143][ T9739] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1147'. [ 166.978979][ T9745] netlink: 'syz.2.1149': attribute type 1 has an invalid length. [ 166.987594][ T9745] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1149'. [ 166.997888][ T9745] netlink: 'syz.2.1149': attribute type 1 has an invalid length. [ 167.008931][ T9741] syz.3.1148: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 167.036797][ T9741] CPU: 1 UID: 0 PID: 9741 Comm: syz.3.1148 Not tainted 6.10.0-syzkaller-12585-g301927d2d2eb #0 [ 167.047183][ T9741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 167.057257][ T9741] Call Trace: [ 167.060542][ T9741] [ 167.063472][ T9741] dump_stack_lvl+0x241/0x360 [ 167.068153][ T9741] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.073349][ T9741] ? __pfx__printk+0x10/0x10 [ 167.078023][ T9741] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 167.084434][ T9741] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 167.091196][ T9741] warn_alloc+0x278/0x410 [ 167.095525][ T9741] ? stack_depot_save_flags+0x29/0x830 [ 167.100983][ T9741] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 167.107048][ T9741] ? __pfx_warn_alloc+0x10/0x10 [ 167.111900][ T9741] ? kasan_save_track+0x3f/0x80 [ 167.116774][ T9741] ? __kasan_kmalloc+0x98/0xb0 [ 167.121533][ T9741] ? xsk_setsockopt+0x4ea/0x950 [ 167.126374][ T9741] ? do_sock_setsockopt+0x3af/0x720 [ 167.131571][ T9741] ? __sys_setsockopt+0x1ae/0x250 [ 167.136594][ T9741] ? __x64_sys_setsockopt+0xb5/0xd0 [ 167.141797][ T9741] ? do_syscall_64+0xf3/0x230 [ 167.146466][ T9741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.152539][ T9741] __vmalloc_node_range_noprof+0x130/0x1460 [ 167.158449][ T9741] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 167.164788][ T9741] ? __kasan_kmalloc+0x98/0xb0 [ 167.169550][ T9741] ? xskq_create+0x54/0x170 [ 167.174050][ T9741] vmalloc_user_noprof+0x74/0x80 [ 167.178981][ T9741] ? xskq_create+0xb6/0x170 [ 167.183475][ T9741] xskq_create+0xb6/0x170 [ 167.187799][ T9741] xsk_init_queue+0xa1/0x100 [ 167.192386][ T9741] xsk_setsockopt+0x4ea/0x950 [ 167.197060][ T9741] ? __pfx_xsk_setsockopt+0x10/0x10 [ 167.202249][ T9741] ? __pfx_lock_acquire+0x10/0x10 [ 167.207275][ T9741] ? aa_sock_opt_perm+0x79/0x120 [ 167.212206][ T9741] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 167.217750][ T9741] ? security_socket_setsockopt+0x87/0xb0 [ 167.223469][ T9741] ? __pfx_xsk_setsockopt+0x10/0x10 [ 167.228659][ T9741] do_sock_setsockopt+0x3af/0x720 [ 167.233694][ T9741] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 167.239245][ T9741] ? __fget_files+0x29/0x470 [ 167.243836][ T9741] ? __fget_files+0x3f6/0x470 [ 167.248520][ T9741] __sys_setsockopt+0x1ae/0x250 [ 167.253462][ T9741] __x64_sys_setsockopt+0xb5/0xd0 [ 167.258485][ T9741] do_syscall_64+0xf3/0x230 [ 167.262981][ T9741] ? clear_bhb_loop+0x35/0x90 [ 167.267655][ T9741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.273544][ T9741] RIP: 0033:0x7fd0b1b77299 [ 167.277950][ T9741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.297548][ T9741] RSP: 002b:00007fd0b29bd048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 167.305968][ T9741] RAX: ffffffffffffffda RBX: 00007fd0b1d05f80 RCX: 00007fd0b1b77299 [ 167.313932][ T9741] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 167.321978][ T9741] RBP: 00007fd0b1be48e6 R08: 0000000000000004 R09: 0000000000000000 [ 167.329946][ T9741] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.337922][ T9741] R13: 000000000000000b R14: 00007fd0b1d05f80 R15: 00007ffde2e431e8 [ 167.345903][ T9741] [ 167.361657][ T9750] FAULT_INJECTION: forcing a failure. [ 167.361657][ T9750] name failslab, interval 1, probability 0, space 0, times 0 [ 167.366831][ T9741] Mem-Info: [ 167.378130][ T9750] CPU: 0 UID: 0 PID: 9750 Comm: syz.0.1151 Not tainted 6.10.0-syzkaller-12585-g301927d2d2eb #0 [ 167.382919][ T9741] active_anon:2589 inactive_anon:0 isolated_anon:0 [ 167.382919][ T9741] active_file:1570 inactive_file:38183 isolated_file:0 [ 167.382919][ T9741] unevictable:768 dirty:130 writeback:0 [ 167.382919][ T9741] slab_reclaimable:9715 slab_unreclaimable:98724 [ 167.382919][ T9741] mapped:20766 shmem:1246 pagetables:613 [ 167.382919][ T9741] sec_pagetables:0 bounce:0 [ 167.382919][ T9741] kernel_misc_reclaimable:0 [ 167.382919][ T9741] free:1390905 free_pcp:723 free_cma:0 [ 167.388469][ T9750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 167.388483][ T9750] Call Trace: [ 167.388491][ T9750] [ 167.388500][ T9750] dump_stack_lvl+0x241/0x360 [ 167.388530][ T9750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.433697][ T9741] Node 0 active_anon:10356kB inactive_anon:0kB active_file:6280kB inactive_file:152660kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:83064kB dirty:520kB writeback:0kB shmem:3448kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10872kB pagetables:2452kB sec_pagetables:0kB all_unreclaimable? no [ 167.443487][ T9750] ? __pfx__printk+0x10/0x10 [ 167.443518][ T9750] ? __kmalloc_noprof+0xb0/0x400 [ 167.443540][ T9750] ? __pfx___might_resched+0x10/0x10 [ 167.443558][ T9750] ? __mutex_lock+0x2ef/0xd70 [ 167.443581][ T9750] should_fail_ex+0x3b0/0x4e0 [ 167.443607][ T9750] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 167.443633][ T9750] should_failslab+0xac/0x100 [ 167.443658][ T9750] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 167.443680][ T9750] __kmalloc_noprof+0xd8/0x400 [ 167.443706][ T9750] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 167.443740][ T9750] genl_rcv_msg+0x802/0xec0 [ 167.443762][ T9750] ? mark_lock+0x9a/0x350 [ 167.443797][ T9750] ? __pfx_genl_rcv_msg+0x10/0x10 [ 167.443855][ T9750] ? __pfx_lock_acquire+0x10/0x10 [ 167.443877][ T9750] ? __pfx_netlbl_cipsov4_list+0x10/0x10 [ 167.443900][ T9750] ? __pfx___might_resched+0x10/0x10 [ 167.443934][ T9750] netlink_rcv_skb+0x1e3/0x430 [ 167.443958][ T9750] ? __pfx_genl_rcv_msg+0x10/0x10 [ 167.443984][ T9750] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 167.444039][ T9750] genl_rcv+0x28/0x40 [ 167.444061][ T9750] netlink_unicast+0x7f0/0x990 [ 167.444092][ T9750] ? __pfx_netlink_unicast+0x10/0x10 [ 167.444110][ T9750] ? __virt_addr_valid+0x183/0x530 [ 167.444133][ T9750] ? __check_object_size+0x49c/0x900 [ 167.444152][ T9750] ? bpf_lsm_netlink_send+0x9/0x10 [ 167.444177][ T9750] netlink_sendmsg+0x8e4/0xcb0 [ 167.444213][ T9750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.444237][ T9750] ? __import_iovec+0x536/0x820 [ 167.444257][ T9750] ? aa_sock_msg_perm+0x91/0x160 [ 167.444279][ T9750] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 167.444300][ T9750] ? security_socket_sendmsg+0x87/0xb0 [ 167.444327][ T9750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.444346][ T9750] __sock_sendmsg+0x221/0x270 [ 167.444372][ T9750] ____sys_sendmsg+0x525/0x7d0 [ 167.444405][ T9750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.448433][ T9741] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 167.450612][ T9750] __sys_sendmsg+0x2b0/0x3a0 [ 167.450648][ T9750] ? __pfx___sys_sendmsg+0x10/0x10 [ 167.455389][ T9741] Node 0 [ 167.460462][ T9750] ? vfs_write+0x7c4/0xc90 [ 167.460535][ T9750] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 167.723010][ T9750] ? do_syscall_64+0x100/0x230 [ 167.727788][ T9750] ? do_syscall_64+0xb6/0x230 [ 167.732460][ T9750] do_syscall_64+0xf3/0x230 [ 167.736958][ T9750] ? clear_bhb_loop+0x35/0x90 [ 167.741641][ T9750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.747531][ T9750] RIP: 0033:0x7f4985777299 [ 167.751945][ T9750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.771549][ T9750] RSP: 002b:00007f498646a048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.780048][ T9750] RAX: ffffffffffffffda RBX: 00007f4985905f80 RCX: 00007f4985777299 [ 167.788012][ T9750] RDX: 0000000000000000 RSI: 0000000020000e40 RDI: 0000000000000005 [ 167.796064][ T9750] RBP: 00007f498646a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 167.804025][ T9750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.811986][ T9750] R13: 000000000000000b R14: 00007f4985905f80 R15: 00007ffdbb56f6d8 [ 167.819966][ T9750] [ 167.835427][ T9741] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 167.863936][ T9741] lowmem_reserve[]: 0 2563 2565 0 0 [ 167.869235][ T9741] Node 0 DMA32 free:1598448kB boost:0kB min:35036kB low:43792kB high:52548kB reserved_highatomic:0KB active_anon:10312kB inactive_anon:0kB active_file:6280kB inactive_file:151080kB unevictable:1536kB writepending:516kB present:3129332kB managed:2653304kB mlocked:0kB bounce:0kB free_pcp:1032kB local_pcp:756kB free_cma:0kB [ 167.899974][ T9741] lowmem_reserve[]: 0 0 1 0 0 [ 167.904823][ T9741] Node 0 Normal free:8kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:4kB present:1048576kB managed:1640kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 167.932351][ T9741] lowmem_reserve[]: 0 0 0 0 0 [ 167.938928][ T9741] Node 1 Normal free:3950060kB boost:0kB min:54844kB low:68552kB high:82260kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:1508kB local_pcp:1508kB free_cma:0kB [ 167.970740][ T9741] lowmem_reserve[]: 0 0 0 0 0 [ 167.975628][ T9741] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 167.989175][ T9741] Node 0 DMA32: 513*4kB (UE) 422*8kB (UME) 251*16kB (UME) 178*32kB (UME) 95*64kB (UME) 49*128kB (UME) 24*256kB (UM) 32*512kB (UM) 41*1024kB (UM) 9*2048kB (U) 363*4096kB (UME) = 1597284kB [ 168.008445][ T9741] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 168.033426][ T9741] Node 1 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (M) 1*128kB (U) 7*256kB (UM) 5*512kB (UM) 7*1024kB (U) 5*2048kB (U) 959*4096kB (M) = 3950060kB [ 168.076431][ T9741] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 168.096597][ T9741] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 168.113116][ T9741] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 168.140655][ T9741] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 168.158381][ T9741] 41001 total pagecache pages [ 168.170820][ T9741] 0 pages in swap cache [ 168.184331][ T9741] Free swap = 124996kB [ 168.189021][ T9741] Total swap = 124996kB [ 168.235756][ T9741] 2097051 pages RAM [ 168.242126][ T9741] 0 pages HighMem/MovableOnly [ 168.252550][ T9741] 402195 pages reserved [ 168.256950][ T9741] 0 pages cma reserved [ 168.484204][ T9774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1159'. [ 168.522032][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1160'. [ 168.549366][ T9779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1160'. [ 168.598328][ T9785] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1161'. [ 168.732260][ T9797] FAULT_INJECTION: forcing a failure. [ 168.732260][ T9797] name failslab, interval 1, probability 0, space 0, times 0 [ 168.748213][ T9797] CPU: 0 UID: 0 PID: 9797 Comm: syz.2.1164 Not tainted 6.10.0-syzkaller-12585-g301927d2d2eb #0 [ 168.758582][ T9797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 168.768676][ T9797] Call Trace: [ 168.771978][ T9797] [ 168.774925][ T9797] dump_stack_lvl+0x241/0x360 [ 168.779626][ T9797] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.784843][ T9797] ? __pfx__printk+0x10/0x10 [ 168.789458][ T9797] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 168.795460][ T9797] ? __pfx___might_resched+0x10/0x10 [ 168.800867][ T9797] ? stack_depot_save_flags+0x29/0x830 [ 168.806384][ T9797] should_fail_ex+0x3b0/0x4e0 [ 168.811094][ T9797] should_failslab+0xac/0x100 [ 168.815804][ T9797] ? __alloc_skb+0x1c3/0x440 [ 168.820415][ T9797] kmem_cache_alloc_node_noprof+0x71/0x320 [ 168.826247][ T9797] __alloc_skb+0x1c3/0x440 [ 168.830685][ T9797] ? __pfx___alloc_skb+0x10/0x10 [ 168.835634][ T9797] netlbl_cipsov4_list+0xf3/0x18f0 [ 168.840761][ T9797] ? __pfx_netlbl_cipsov4_list+0x10/0x10 [ 168.846387][ T9797] ? __nla_parse+0x40/0x60 [ 168.850801][ T9797] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 168.857133][ T9797] genl_rcv_msg+0xb14/0xec0 [ 168.861638][ T9797] ? mark_lock+0x9a/0x350 [ 168.866183][ T9797] ? __pfx_genl_rcv_msg+0x10/0x10 [ 168.871240][ T9797] ? __pfx_lock_acquire+0x10/0x10 [ 168.876268][ T9797] ? __pfx_netlbl_cipsov4_list+0x10/0x10 [ 168.881899][ T9797] ? __pfx___might_resched+0x10/0x10 [ 168.887188][ T9797] netlink_rcv_skb+0x1e3/0x430 [ 168.891948][ T9797] ? __pfx_genl_rcv_msg+0x10/0x10 [ 168.896971][ T9797] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 168.902270][ T9797] genl_rcv+0x28/0x40 [ 168.906248][ T9797] netlink_unicast+0x7f0/0x990 [ 168.911012][ T9797] ? __pfx_netlink_unicast+0x10/0x10 [ 168.916314][ T9797] ? __virt_addr_valid+0x183/0x530 [ 168.921423][ T9797] ? __check_object_size+0x49c/0x900 [ 168.926790][ T9797] ? bpf_lsm_netlink_send+0x9/0x10 [ 168.931896][ T9797] netlink_sendmsg+0x8e4/0xcb0 [ 168.936667][ T9797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.941945][ T9797] ? __import_iovec+0x536/0x820 [ 168.946783][ T9797] ? aa_sock_msg_perm+0x91/0x160 [ 168.951711][ T9797] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 168.956997][ T9797] ? security_socket_sendmsg+0x87/0xb0 [ 168.962457][ T9797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.967738][ T9797] __sock_sendmsg+0x221/0x270 [ 168.972413][ T9797] ____sys_sendmsg+0x525/0x7d0 [ 168.977180][ T9797] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.982470][ T9797] __sys_sendmsg+0x2b0/0x3a0 [ 168.987059][ T9797] ? __pfx___sys_sendmsg+0x10/0x10 [ 168.992163][ T9797] ? vfs_write+0x7c4/0xc90 [ 168.996608][ T9797] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 169.002936][ T9797] ? do_syscall_64+0x100/0x230 [ 169.007701][ T9797] ? do_syscall_64+0xb6/0x230 [ 169.012370][ T9797] do_syscall_64+0xf3/0x230 [ 169.016867][ T9797] ? clear_bhb_loop+0x35/0x90 [ 169.021541][ T9797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.027425][ T9797] RIP: 0033:0x7f3bdad77299 [ 169.031831][ T9797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.051426][ T9797] RSP: 002b:00007f3bdbbe0048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.059833][ T9797] RAX: ffffffffffffffda RBX: 00007f3bdaf05f80 RCX: 00007f3bdad77299 [ 169.067796][ T9797] RDX: 0000000000000000 RSI: 0000000020000e40 RDI: 0000000000000005 [ 169.075758][ T9797] RBP: 00007f3bdbbe00a0 R08: 0000000000000000 R09: 0000000000000000 [ 169.083723][ T9797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.091685][ T9797] R13: 000000000000004d R14: 00007f3bdaf05f80 R15: 00007ffc32531d58 [ 169.099661][ T9797] [ 169.230953][ T9805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1165'. [ 169.477466][ T9834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1174'. [ 169.548514][ T9834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1174'. [ 169.602541][ T9833] delete_channel: no stack [ 169.771843][ T9849] netlink: 'syz.0.1179': attribute type 11 has an invalid length. [ 169.872764][ T9853] lo speed is unknown, defaulting to 1000 [ 169.920442][ T9862] tipc: Started in network mode [ 169.945477][ T9862] tipc: Node identity 0000000000002d000000000000000001, cluster identity 4711 [ 169.969366][ T9862] tipc: Enabling of bearer rejected, failed to enable media [ 170.572731][ T9899] SET target dimension over the limit! [ 170.576444][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.592411][ T9900] FAULT_INJECTION: forcing a failure. [ 170.592411][ T9900] name failslab, interval 1, probability 0, space 0, times 0 [ 170.614608][ T9900] CPU: 1 UID: 0 PID: 9900 Comm: syz.2.1192 Not tainted 6.10.0-syzkaller-12585-g301927d2d2eb #0 [ 170.624976][ T9900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 170.635056][ T9900] Call Trace: [ 170.638390][ T9900] [ 170.641337][ T9900] dump_stack_lvl+0x241/0x360 [ 170.646042][ T9900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.651290][ T9900] ? __pfx__printk+0x10/0x10 [ 170.655905][ T9900] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 170.661908][ T9900] ? __pfx___might_resched+0x10/0x10 [ 170.667219][ T9900] should_fail_ex+0x3b0/0x4e0 [ 170.671924][ T9900] should_failslab+0xac/0x100 [ 170.676638][ T9900] ? __alloc_skb+0x1c3/0x440 [ 170.681264][ T9900] kmem_cache_alloc_node_noprof+0x71/0x320 [ 170.687088][ T9900] __alloc_skb+0x1c3/0x440 [ 170.691515][ T9900] ? __pfx___alloc_skb+0x10/0x10 [ 170.696476][ T9900] ? netlink_ack_tlv_len+0x6e/0x200 [ 170.701686][ T9900] netlink_ack+0x13f/0xa30 [ 170.706112][ T9900] ? __pfx_lock_acquire+0x10/0x10 [ 170.711149][ T9900] ? __pfx_netlbl_cipsov4_list+0x10/0x10 [ 170.716796][ T9900] netlink_rcv_skb+0x262/0x430 [ 170.721568][ T9900] ? __pfx_genl_rcv_msg+0x10/0x10 [ 170.726596][ T9900] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 170.731904][ T9900] genl_rcv+0x28/0x40 [ 170.735884][ T9900] netlink_unicast+0x7f0/0x990 [ 170.740646][ T9900] ? __pfx_netlink_unicast+0x10/0x10 [ 170.745921][ T9900] ? __virt_addr_valid+0x183/0x530 [ 170.751025][ T9900] ? __check_object_size+0x49c/0x900 [ 170.756301][ T9900] ? bpf_lsm_netlink_send+0x9/0x10 [ 170.761407][ T9900] netlink_sendmsg+0x8e4/0xcb0 [ 170.766176][ T9900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.771463][ T9900] ? __import_iovec+0x536/0x820 [ 170.776310][ T9900] ? aa_sock_msg_perm+0x91/0x160 [ 170.781260][ T9900] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 170.786550][ T9900] ? security_socket_sendmsg+0x87/0xb0 [ 170.792012][ T9900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.797385][ T9900] __sock_sendmsg+0x221/0x270 [ 170.802058][ T9900] ____sys_sendmsg+0x525/0x7d0 [ 170.806828][ T9900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.812120][ T9900] __sys_sendmsg+0x2b0/0x3a0 [ 170.816709][ T9900] ? __pfx___sys_sendmsg+0x10/0x10 [ 170.821813][ T9900] ? vfs_write+0x7c4/0xc90 [ 170.826350][ T9900] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 170.832678][ T9900] ? do_syscall_64+0x100/0x230 [ 170.837436][ T9900] ? do_syscall_64+0xb6/0x230 [ 170.842114][ T9900] do_syscall_64+0xf3/0x230 [ 170.846611][ T9900] ? clear_bhb_loop+0x35/0x90 [ 170.851378][ T9900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.857278][ T9900] RIP: 0033:0x7f3bdad77299 [ 170.861700][ T9900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.881317][ T9900] RSP: 002b:00007f3bdbbbf048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.889735][ T9900] RAX: ffffffffffffffda RBX: 00007f3bdaf06058 RCX: 00007f3bdad77299 [ 170.897704][ T9900] RDX: 0000000000000000 RSI: 0000000020000e40 RDI: 0000000000000006 [ 170.905666][ T9900] RBP: 00007f3bdbbbf0a0 R08: 0000000000000000 R09: 0000000000000000 [ 170.913634][ T9900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.921616][ T9900] R13: 000000000000006e R14: 00007f3bdaf06058 R15: 00007ffc32531d58 [ 170.929843][ T9900] [ 171.218348][ T9907] netlink: 'syz.0.1194': attribute type 11 has an invalid length. [ 171.477682][ C0] eth0: bad gso: type: 1, size: 1408 [ 171.599558][ T5246] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 171.617917][ T5246] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 171.633078][ T5246] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 171.651094][ T5246] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 171.659869][ T5246] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 171.672962][ T5246] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 171.807004][ T9941] sctp: [Deprecated]: syz.1.1204 (pid 9941) Use of int in maxseg socket option. [ 171.807004][ T9941] Use struct sctp_assoc_value instead [ 171.819021][ T9929] lo speed is unknown, defaulting to 1000 [ 172.140835][ T9037] wlan0: Trigger new scan to find an IBSS to join [ 172.156321][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.191706][ T9964] __nla_validate_parse: 4 callbacks suppressed [ 172.191725][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1207'. [ 172.232177][ T9967] netlink: 'syz.1.1208': attribute type 2 has an invalid length. [ 172.264520][ T9968] netlink: 'syz.2.1209': attribute type 23 has an invalid length. [ 172.350405][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.423801][ T9967] netlink: 'syz.1.1208': attribute type 21 has an invalid length. [ 172.431812][ T9967] IPv6: NLM_F_CREATE should be specified when creating new route [ 172.440710][ T9970] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1210'. [ 172.499000][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.550014][ T9978] x_tables: duplicate underflow at hook 1 [ 172.560693][ T9978] x_tables: duplicate underflow at hook 1 [ 172.776319][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1217'. [ 172.785580][ C0] eth0: bad gso: type: 1, size: 1408 [ 173.047705][ T12] bridge_slave_1: left allmulticast mode [ 173.058715][ T12] bridge_slave_1: left promiscuous mode [ 173.066413][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.080939][ T12] bridge_slave_0: left allmulticast mode [ 173.099339][ T12] bridge_slave_0: left promiscuous mode [ 173.106118][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.159770][T10020] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1221'. [ 173.178744][T10020] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1221'. [ 173.589165][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.600414][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.613951][ T12] bond0 (unregistering): Released all slaves [ 173.650234][ T9929] chnl_net:caif_netlink_parms(): no params data found [ 173.734079][ T5246] Bluetooth: hci0: command tx timeout [ 173.850326][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1224'. [ 173.859505][T10034] netlink: 'syz.1.1224': attribute type 1 has an invalid length. [ 173.867534][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1224'. [ 173.876705][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1224'. [ 174.171482][T10051] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1226'. [ 174.366284][T10054] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1228'. [ 174.449648][T10053] netlink: 'syz.3.1228': attribute type 11 has an invalid length. [ 174.777037][ T9929] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.791002][ T9929] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.798410][ T9929] bridge_slave_0: entered allmulticast mode [ 174.807808][ T9929] bridge_slave_0: entered promiscuous mode [ 174.821448][ T9929] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.832938][ T9929] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.840267][ T9929] bridge_slave_1: entered allmulticast mode [ 174.849200][ T9929] bridge_slave_1: entered promiscuous mode [ 174.869865][T10077] macvtap1: entered promiscuous mode [ 174.882031][T10077] bond0: entered promiscuous mode [ 174.887913][T10077] bond_slave_0: entered promiscuous mode [ 174.893885][T10077] bond_slave_1: entered promiscuous mode [ 174.900661][T10077] netdevsim netdevsim2 ÿÿÿÿ: entered promiscuous mode [ 174.909983][T10077] batadv0: entered promiscuous mode [ 174.916400][T10077] macvtap1: entered allmulticast mode [ 174.925633][T10077] bond0: entered allmulticast mode [ 174.930861][T10077] bond_slave_0: entered allmulticast mode [ 174.937549][T10077] bond_slave_1: entered allmulticast mode [ 174.952281][T10077] netdevsim netdevsim2 ÿÿÿÿ: entered allmulticast mode [ 174.961439][T10077] batadv0: entered allmulticast mode [ 174.969786][T10077] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 174.994040][T10070] bond0: left allmulticast mode [ 175.002981][T10070] bond_slave_0: left allmulticast mode [ 175.008504][T10070] bond_slave_1: left allmulticast mode [ 175.032961][T10070] netdevsim netdevsim2 ÿÿÿÿ: left allmulticast mode [ 175.046088][T10070] batadv0: left allmulticast mode [ 175.051250][T10070] bond0: left promiscuous mode [ 175.061384][T10070] bond_slave_0: left promiscuous mode [ 175.070361][T10070] bond_slave_1: left promiscuous mode [ 175.079688][T10070] netdevsim netdevsim2 ÿÿÿÿ: left promiscuous mode [ 175.086660][T10070] batadv0: left promiscuous mode [ 175.098839][T10070] macvtap1: left promiscuous mode [ 175.108293][T10070] macvtap1: left allmulticast mode [ 175.228593][ T9929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.251906][T10090] x_tables: duplicate underflow at hook 1 [ 175.259942][T10090] sctp: [Deprecated]: syz.3.1237 (pid 10090) Use of int in max_burst socket option deprecated. [ 175.259942][T10090] Use struct sctp_assoc_value instead [ 175.311956][ T12] hsr_slave_0: left promiscuous mode [ 175.319250][ T12] hsr_slave_1: left promiscuous mode [ 175.329610][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.337425][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.354882][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.362406][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.381828][ T12] veth1_macvtap: left promiscuous mode [ 175.387707][ T12] veth0_macvtap: left promiscuous mode [ 175.393584][ T12] veth1_vlan: left promiscuous mode [ 175.398902][ T12] veth0_vlan: left promiscuous mode [ 175.811330][ T12] team0 (unregistering): Port device team_slave_1 removed [ 175.819098][ T5246] Bluetooth: hci0: command tx timeout [ 175.852527][ T12] team0 (unregistering): Port device team_slave_0 removed [ 176.202026][ T9929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.335919][ T9929] team0: Port device team_slave_0 added [ 176.373950][ T9929] team0: Port device team_slave_1 added [ 176.500090][ T9929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.512721][ T9929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.554427][ T9929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.569914][ T9929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.578942][ T9929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.605846][ T9929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.632740][T10124] netlink: 'syz.0.1246': attribute type 1 has an invalid length. [ 176.649989][T10124] netlink: 'syz.0.1246': attribute type 1 has an invalid length. [ 176.674933][T10124] netlink: 'syz.0.1246': attribute type 2 has an invalid length. [ 176.738079][ T9929] hsr_slave_0: entered promiscuous mode [ 176.752072][ T9929] hsr_slave_1: entered promiscuous mode [ 176.774222][ T9929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.781827][ T9929] Cannot create hsr debugfs directory [ 177.068600][T10141] xt_l2tp: missing protocol rule (udp|l2tpip) [ 177.077912][T10141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.093066][ T9036] wlan0: Trigger new scan to find an IBSS to join [ 177.210558][T10146] __nla_validate_parse: 10 callbacks suppressed [ 177.210577][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1253'. [ 177.237973][T10149] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv_slave_1, syncid = 0, id = 0 [ 177.394859][T10156] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1256'. [ 177.509881][T10159] netlink: 'syz.2.1257': attribute type 1 has an invalid length. [ 177.587751][ T9929] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 177.611492][ T9929] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 177.636895][ T9929] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 177.645868][T10164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1260'. [ 177.658836][ T9929] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 177.894848][ T5246] Bluetooth: hci0: command tx timeout [ 177.927182][ T9929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.970693][T10176] netlink: 'syz.1.1264': attribute type 1 has an invalid length. [ 178.032138][T10176] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.045810][ T9929] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.065125][ T9038] wlan0: Creating new IBSS network, BSSID f6:b0:3c:8d:b2:d4 [ 178.144687][T10185] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.222785][T10186] Bluetooth: MGMT ver 1.23 [ 178.401596][T10181] netlink: 'syz.0.1263': attribute type 1 has an invalid length. [ 178.410885][T10181] netlink: 16110 bytes leftover after parsing attributes in process `syz.0.1263'. [ 178.458147][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.465332][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.495515][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.502686][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.534612][T10176] netlink: 'syz.1.1264': attribute type 5 has an invalid length. [ 178.665910][T10191] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.981566][T10210] netlink: 'syz.1.1271': attribute type 4 has an invalid length. [ 179.074126][ T9929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.139384][T10223] bridge_slave_0: entered promiscuous mode [ 179.162727][T10223] bridge_slave_0: entered allmulticast mode [ 179.251322][T10227] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1275'. [ 179.374075][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1277'. [ 179.460685][T10240] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1278'. [ 179.494809][T10240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1278'. [ 179.509407][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1278'. [ 179.532170][T10243] ieee802154 phy0 wpan0: encryption failed: -22 [ 179.564012][T10247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1279'. [ 179.639039][ T9929] veth0_vlan: entered promiscuous mode [ 179.674045][ T9929] veth1_vlan: entered promiscuous mode [ 179.721987][ T9929] veth0_macvtap: entered promiscuous mode [ 179.736009][ T9929] veth1_macvtap: entered promiscuous mode [ 179.779216][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.799987][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.827760][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.847792][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.863145][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.893366][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.923805][ T9929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.955304][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.975407][ T5246] Bluetooth: hci0: command tx timeout [ 179.992841][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.016707][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.037988][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.054628][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.065376][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.083763][ T9929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.098415][ T9929] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.107426][ T9929] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.116310][ T9929] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.125641][ T9929] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.299975][ T9038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.319961][ T9038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.465258][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.483304][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.559790][T10293] netlink: 'syz.1.1291': attribute type 1 has an invalid length. [ 180.612006][T10293] bond2: entered promiscuous mode [ 180.624418][T10293] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.649799][T10293] bond2: left promiscuous mode [ 180.855088][T10307] netlink: 'syz.0.1296': attribute type 4 has an invalid length. [ 180.902253][T10310] bond0: (slave ÿÿÿÿ): Releasing backup interface [ 180.927998][T10310] team0: Port device ÿÿÿÿ added [ 181.360485][ C0] eth0: bad gso: type: 1, size: 1408 [ 181.582567][T10337] tap0: tun_chr_ioctl cmd 1074025677 [ 181.595760][T10337] tap0: linktype set to 65534 [ 182.028588][T10358] validate_nla: 1 callbacks suppressed [ 182.028609][T10358] netlink: 'syz.0.1315': attribute type 30 has an invalid length. [ 182.227646][T10367] __nla_validate_parse: 13 callbacks suppressed [ 182.227660][T10367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1318'. [ 182.337256][ T9027] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.007850][T10378] netlink: 'syz.2.1320': attribute type 30 has an invalid length. [ 183.126541][T10389] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 183.590853][ T5241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 183.600821][ T5241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 183.609150][ T5241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 183.626990][ T5241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 183.639190][ T5241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 183.648670][ T5241] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 183.758316][ T9027] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.230455][ T9027] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.285124][T10421] lo speed is unknown, defaulting to 1000 [ 184.302409][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1333'. [ 184.487067][ T9027] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.663398][T10490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1338'. [ 184.736008][ T9027] bridge_slave_1: left allmulticast mode [ 184.743047][ T9027] bridge_slave_1: left promiscuous mode [ 184.750238][ T9027] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.761331][ T9027] bridge_slave_0: left allmulticast mode [ 184.769656][ T9027] bridge_slave_0: left promiscuous mode [ 184.784715][ T9027] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.887842][T10457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.251844][ T9027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.265070][ T9027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.275922][ T9027] bond0 (unregistering): Released all slaves [ 185.295150][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1343'. [ 185.405709][T10421] chnl_net:caif_netlink_parms(): no params data found [ 185.487093][T10519] sctp: [Deprecated]: syz.0.1345 (pid 10519) Use of int in max_burst socket option. [ 185.487093][T10519] Use struct sctp_assoc_value instead [ 185.551887][T10524] netlink: 'syz.3.1344': attribute type 7 has an invalid length. [ 185.564331][T10524] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1344'. [ 185.653658][T10517] Bluetooth: MGMT ver 1.23 [ 185.718096][T10421] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.727203][T10421] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.735300][T10421] bridge_slave_0: entered allmulticast mode [ 185.744359][T10421] bridge_slave_0: entered promiscuous mode [ 185.789213][T10421] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.813685][T10421] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.820940][T10421] bridge_slave_1: entered allmulticast mode [ 185.872721][T10421] bridge_slave_1: entered promiscuous mode [ 186.049694][T10533] netlink: 'syz.2.1347': attribute type 13 has an invalid length. [ 186.075693][T10533] netlink: 'syz.2.1347': attribute type 58 has an invalid length. [ 186.099674][T10533] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1347'. [ 186.196326][ T9027] hsr_slave_0: left promiscuous mode [ 186.207523][ T9027] hsr_slave_1: left promiscuous mode [ 186.250616][ T9027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.260172][ T9027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.281620][ T9027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.296359][ T9027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.323304][ T9027] veth1_macvtap: left promiscuous mode [ 186.329153][ T9027] veth0_macvtap: left promiscuous mode [ 186.336015][ T9027] veth1_vlan: left promiscuous mode [ 186.340450][T10552] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1351'. [ 186.341418][ T9027] veth0_vlan: left promiscuous mode [ 186.379589][ T5239] Bluetooth: hci2: command 0x0406 tx timeout [ 186.386824][ T5235] Bluetooth: hci1: command 0x0406 tx timeout [ 186.808507][ T9027] team0 (unregistering): Port device team_slave_1 removed [ 186.841853][ T9027] team0 (unregistering): Port device team_slave_0 removed [ 187.197041][T10562] FAULT_INJECTION: forcing a failure. [ 187.197041][T10562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.239325][T10562] CPU: 1 UID: 0 PID: 10562 Comm: syz.3.1353 Not tainted 6.10.0-syzkaller-12585-g301927d2d2eb #0 [ 187.249790][T10562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 187.259865][T10562] Call Trace: [ 187.263155][T10562] [ 187.266099][T10562] dump_stack_lvl+0x241/0x360 [ 187.270819][T10562] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.276040][T10562] ? __pfx__printk+0x10/0x10 [ 187.280657][T10562] ? __pfx_lock_release+0x10/0x10 [ 187.285718][T10562] should_fail_ex+0x3b0/0x4e0 [ 187.290423][T10562] _copy_from_user+0x2f/0xe0 [ 187.295035][T10562] copy_msghdr_from_user+0xae/0x680 [ 187.300263][T10562] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 187.306105][T10562] do_recvmmsg+0x40f/0xae0 [ 187.310560][T10562] ? __pfx_lock_release+0x10/0x10 [ 187.315612][T10562] ? __pfx_do_recvmmsg+0x10/0x10 [ 187.320588][T10562] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 187.326505][T10562] ? ksys_write+0x23e/0x2c0 [ 187.331035][T10562] ? __pfx_lock_release+0x10/0x10 [ 187.336081][T10562] ? vfs_write+0x7c4/0xc90 [ 187.340500][T10562] ? __mutex_unlock_slowpath+0x21d/0x750 [ 187.346137][T10562] ? __fget_files+0x3f6/0x470 [ 187.350826][T10562] __x64_sys_recvmmsg+0x199/0x250 [ 187.355856][T10562] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 187.361398][T10562] ? do_syscall_64+0x100/0x230 [ 187.366159][T10562] ? do_syscall_64+0xb6/0x230 [ 187.370827][T10562] do_syscall_64+0xf3/0x230 [ 187.375325][T10562] ? clear_bhb_loop+0x35/0x90 [ 187.379998][T10562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.385881][T10562] RIP: 0033:0x7fd0b1b77299 [ 187.390285][T10562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.409904][T10562] RSP: 002b:00007fd0b29bd048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 187.418328][T10562] RAX: ffffffffffffffda RBX: 00007fd0b1d05f80 RCX: 00007fd0b1b77299 [ 187.426308][T10562] RDX: 0000000000000001 RSI: 0000000020003940 RDI: 0000000000000004 [ 187.434287][T10562] RBP: 00007fd0b29bd0a0 R08: 0000000000000000 R09: 0000000000000000 [ 187.442264][T10562] R10: 0000000000002040 R11: 0000000000000246 R12: 0000000000000001 [ 187.450235][T10562] R13: 000000000000000b R14: 00007fd0b1d05f80 R15: 00007ffde2e431e8 [ 187.458218][T10562] [ 187.623757][T10530] lo speed is unknown, defaulting to 1000 [ 187.690784][T10551] netlink: 'syz.1.1349': attribute type 6 has an invalid length. [ 187.720960][T10421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.766265][T10421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.997922][T10421] team0: Port device team_slave_0 added [ 188.034637][T10421] team0: Port device team_slave_1 added [ 188.158799][T10421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.172756][T10421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.199525][T10421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.211195][T10583] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1358'. [ 188.238448][T10421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.251821][T10421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.280888][T10421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.359267][T10597] sctp: [Deprecated]: syz.1.1362 (pid 10597) Use of int in maxseg socket option. [ 188.359267][T10597] Use struct sctp_assoc_value instead [ 188.384298][T10593] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1361'. [ 188.450838][T10421] hsr_slave_0: entered promiscuous mode [ 188.465960][T10421] hsr_slave_1: entered promiscuous mode [ 188.483563][T10421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.491483][T10421] Cannot create hsr debugfs directory [ 188.499107][T10588] netlink: 'syz.3.1359': attribute type 4 has an invalid length. [ 188.527638][T10588] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1359'. [ 189.500451][T10643] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1371'. [ 189.549851][T10421] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 189.560220][T10647] Bluetooth: MGMT ver 1.23 [ 189.570668][T10421] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 189.603820][T10421] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 189.644102][T10421] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 189.936153][T10421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.046374][T10421] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.095867][ T5285] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.103059][ T5285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.157629][ T5285] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.164861][ T5285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.579995][T10421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.818224][T10702] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1383'. [ 191.172831][T10421] veth0_vlan: entered promiscuous mode [ 191.220911][T10421] veth1_vlan: entered promiscuous mode [ 191.307874][T10421] veth0_macvtap: entered promiscuous mode [ 191.326255][T10421] veth1_macvtap: entered promiscuous mode [ 191.368800][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.389284][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.406218][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.417311][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.427748][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.439028][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.443138][ C0] eth0: bad gso: type: 1, size: 1408 [ 191.452370][T10421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.495455][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.535883][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.552701][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.563811][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.574493][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.586120][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.610642][T10421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.637960][T10421] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.657247][T10421] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.681719][T10421] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.697256][T10421] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.725230][T10738] delete_channel: no stack [ 191.753377][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1392'. [ 191.768463][T10733] geneve2: entered promiscuous mode [ 191.774055][T10733] geneve2: entered allmulticast mode [ 191.927277][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.951999][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.009721][ T9027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.021544][ T9027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.034300][T10751] bridge0: port 3(team0) entered disabled state [ 192.041004][T10751] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.048671][T10751] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.234738][T10756] netlink: 'syz.2.1398': attribute type 1 has an invalid length. [ 192.271828][T10756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1398'. [ 192.301701][T10756] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1398'. [ 192.607543][T10773] lo speed is unknown, defaulting to 1000 [ 193.380482][T10794] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1406'. [ 193.419519][T10794] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 193.451038][T10800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1409'. [ 193.797334][T10808] team0: Port device macvlan1 added [ 193.838738][T10811] bond0: (slave vlan0): Error -34 calling dev_set_mtu [ 194.223320][T10830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1417'. [ 194.541728][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.878275][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.625876][T10866] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1424'. [ 195.658369][T10866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1424'. [ 195.899460][T10882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.927542][T10886] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1429'. [ 195.947710][T10886] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 195.994046][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.038976][T10886] netlink: 178588 bytes leftover after parsing attributes in process `syz.3.1429'. [ 196.083926][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 196.094512][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 196.106532][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 196.116490][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 196.125378][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 196.135536][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 196.179144][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.291754][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.362242][T10892] lo speed is unknown, defaulting to 1000 [ 196.571472][ T12] bridge_slave_1: left allmulticast mode [ 196.587005][ T12] bridge_slave_1: left promiscuous mode [ 196.587493][T10914] ax25_connect(): syz.2.1437 uses autobind, please contact jreuter@yaina.de [ 196.598293][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.645217][ T12] bridge_slave_0: left allmulticast mode [ 196.650905][ T12] bridge_slave_0: left promiscuous mode [ 196.670272][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.027171][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.041046][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.052075][ T12] bond0 (unregistering): Released all slaves [ 197.256959][T10929] : entered promiscuous mode [ 197.263946][T10927] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 197.601970][T10955] syzkaller0: entered promiscuous mode [ 197.607792][T10955] syzkaller0: entered allmulticast mode [ 197.665308][T10952] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1446'. [ 197.805185][T10970] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 197.822689][T10892] chnl_net:caif_netlink_parms(): no params data found [ 198.468337][T10990] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1452'. [ 199.316714][T10975] tc_dump_action: action bad kind [ 199.336453][T10976] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1449'. [ 199.373012][T10989] netlink: 'syz.3.1452': attribute type 1 has an invalid length. [ 199.399338][T10989] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 199.432348][ T12] hsr_slave_0: left promiscuous mode [ 199.474081][ T12] hsr_slave_1: left promiscuous mode [ 199.500217][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.509953][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.518712][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.533053][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.609412][ T12] veth1_macvtap: left promiscuous mode [ 199.626807][ T12] veth0_macvtap: left promiscuous mode [ 199.640159][ T12] veth1_vlan: left promiscuous mode [ 199.651451][ T12] veth0_vlan: left promiscuous mode [ 199.695778][T11010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1458'. [ 200.157460][ T12] team0 (unregistering): Port device team_slave_1 removed [ 200.198465][ T12] team0 (unregistering): Port device team_slave_0 removed [ 200.605770][T11013] team0: entered promiscuous mode [ 200.610863][T11013] team_slave_0: entered promiscuous mode [ 200.643474][T11013] team0: left promiscuous mode [ 200.648443][T11013] team_slave_0: left promiscuous mode [ 200.729159][ C0] eth0: bad gso: type: 1, size: 1408 [ 200.738107][ C0] eth0: bad gso: type: 1, size: 1408 [ 200.739042][T11019] can: request_module (can-proto-0) failed. [ 200.825387][T10892] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.853094][T10892] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.860350][T10892] bridge_slave_0: entered allmulticast mode [ 200.912944][T10892] bridge_slave_0: entered promiscuous mode [ 200.943871][T10892] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.960574][T10892] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.975166][T10892] bridge_slave_1: entered allmulticast mode [ 200.990210][T10892] bridge_slave_1: entered promiscuous mode [ 201.003149][T11035] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1461'. [ 201.147112][ C0] eth0: bad gso: type: 1, size: 1408 [ 201.162088][T10892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.192701][T10892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.234267][T11048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1467'. [ 201.240391][T11051] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1466'. [ 201.328643][T10892] team0: Port device team_slave_0 added [ 201.363636][T11056] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1469'. [ 201.418301][T10892] team0: Port device team_slave_1 added [ 201.435646][T11062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.458176][T11062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.521446][T10892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.541474][T10892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.577881][T11070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1472'. [ 201.588458][T10892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.615574][T10892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.632932][T10892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.693551][T10892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.797945][T10892] hsr_slave_0: entered promiscuous mode [ 201.809974][T10892] hsr_slave_1: entered promiscuous mode [ 201.817222][T10892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.836672][T10892] Cannot create hsr debugfs directory [ 202.095159][T11093] netlink: 'syz.0.1478': attribute type 3 has an invalid length. [ 202.394422][T11114] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1483'. [ 202.441465][T11114] xt_TPROXY: Can be used only with -p tcp or -p udp [ 202.737121][T11131] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1488'. [ 202.839251][T10892] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 202.861688][T10892] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 202.894219][T10892] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 202.916386][T10892] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 203.090288][T10892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.122098][T10892] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.138500][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.145682][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.174441][ T5281] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.181599][ T5281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.476606][T11161] __nla_validate_parse: 3 callbacks suppressed [ 203.476626][T11161] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1499'. [ 203.527325][ T9022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.536214][ T9022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.545847][T10892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.557305][T11168] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1501'. [ 203.572384][T11168] xt_TPROXY: Can be used only with -p tcp or -p udp [ 203.996904][T10892] veth0_vlan: entered promiscuous mode [ 204.034663][T10892] veth1_vlan: entered promiscuous mode [ 204.082255][T10892] veth0_macvtap: entered promiscuous mode [ 204.099421][T10892] veth1_macvtap: entered promiscuous mode [ 204.131767][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.163398][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.178389][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.220813][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.236519][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.256357][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.278885][T10892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.314658][T11195] netlink: 'syz.1.1506': attribute type 2 has an invalid length. [ 204.329983][T11195] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1506'. [ 204.356288][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.381475][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.392285][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.408242][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.418228][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.428968][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.440024][T10892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.451710][T10892] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.462768][T10892] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.472132][T10892] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.481077][T10892] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.502124][T11198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1507'. [ 204.592492][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1507'. [ 204.632122][ T9019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.652941][ T9019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.715684][ T9036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.747490][ T9036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.297366][T11230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1518'. [ 205.330402][T11230] vxcan7: entered promiscuous mode [ 205.778300][T11241] netlink: 'syz.0.1521': attribute type 27 has an invalid length. [ 205.786380][T11241] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1521'. [ 205.803574][T11241] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 205.866749][T11248] netlink: 'syz.1.1523': attribute type 11 has an invalid length. [ 206.089048][T11261] netlink: 'syz.3.1528': attribute type 4 has an invalid length. [ 206.144829][T11264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1529'. [ 206.321075][T11280] netlink: 'syz.2.1532': attribute type 29 has an invalid length. [ 206.331115][T11281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1533'. [ 206.516443][T11288] netlink: 'syz.2.1532': attribute type 29 has an invalid length. [ 206.791872][T11307] netlink: 'syz.0.1541': attribute type 4 has an invalid length. [ 206.839073][T11311] netlink: 'syz.1.1542': attribute type 2 has an invalid length. [ 206.855286][T11311] netlink: 'syz.1.1542': attribute type 8 has an invalid length. [ 206.870158][T11311] netlink: 'syz.1.1542': attribute type 1 has an invalid length. [ 206.882629][T11311] netlink: 'syz.1.1542': attribute type 1 has an invalid length. [ 206.898289][T11311] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.947135][T11322] netlink: 'syz.3.1545': attribute type 1 has an invalid length. [ 206.962426][T11322] netlink: 9328 bytes leftover after parsing attributes in process `syz.3.1545'. [ 207.064499][T11329] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 207.096831][T11333] xt_TCPMSS: Only works on TCP SYN packets [ 207.163799][T11334] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 207.172754][T11334] bond3: (slave batadv1): Enslaving as a backup interface with an up link [ 207.219105][T11329] netlink: 'syz.1.1548': attribute type 11 has an invalid length. [ 207.659698][T11344] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 207.831309][T11356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.879736][T11357] lo speed is unknown, defaulting to 1000 [ 207.890790][T11356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.114500][T11362] lo speed is unknown, defaulting to 1000 [ 208.588246][ T9024] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 208.714111][T11371] __nla_validate_parse: 3 callbacks suppressed [ 208.714131][T11371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1558'. [ 208.753236][T11371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1558'. [ 208.801640][ T9027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.827071][ T9027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.269968][T11393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1563'. [ 209.343124][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1563'. [ 209.567289][ T9024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.598124][T11408] FAULT_INJECTION: forcing a failure. [ 209.598124][T11408] name failslab, interval 1, probability 0, space 0, times 0 [ 209.633741][T11408] CPU: 0 UID: 0 PID: 11408 Comm: syz.0.1567 Not tainted 6.10.0-syzkaller-12585-g301927d2d2eb #0 [ 209.641116][ T9024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.644175][T11408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 209.644189][T11408] Call Trace: [ 209.644197][T11408] [ 209.644206][T11408] dump_stack_lvl+0x241/0x360 [ 209.644241][T11408] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.644262][T11408] ? __pfx__printk+0x10/0x10 [ 209.644283][T11408] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 209.688227][T11408] ? __pfx___might_resched+0x10/0x10 [ 209.693559][T11408] should_fail_ex+0x3b0/0x4e0 [ 209.698290][T11408] should_failslab+0xac/0x100 [ 209.702994][T11408] ? __alloc_skb+0x1c3/0x440 [ 209.707609][T11408] kmem_cache_alloc_node_noprof+0x71/0x320 [ 209.713447][T11408] __alloc_skb+0x1c3/0x440 [ 209.717886][T11408] ? __pfx___alloc_skb+0x10/0x10 [ 209.722831][T11408] ? netlink_ack_tlv_len+0x6e/0x200 [ 209.728031][T11408] netlink_ack+0x13f/0xa30 [ 209.732442][T11408] ? __pfx_lock_acquire+0x10/0x10 [ 209.737471][T11408] ? __pfx_netlbl_cipsov4_list+0x10/0x10 [ 209.743119][T11408] netlink_rcv_skb+0x262/0x430 [ 209.747897][T11408] ? __pfx_genl_rcv_msg+0x10/0x10 [ 209.752920][T11408] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 209.758222][T11408] genl_rcv+0x28/0x40 [ 209.762200][T11408] netlink_unicast+0x7f0/0x990 [ 209.766961][T11408] ? __pfx_netlink_unicast+0x10/0x10 [ 209.772232][T11408] ? __virt_addr_valid+0x183/0x530 [ 209.777333][T11408] ? __check_object_size+0x49c/0x900 [ 209.782607][T11408] ? bpf_lsm_netlink_send+0x9/0x10 [ 209.787715][T11408] netlink_sendmsg+0x8e4/0xcb0 [ 209.792479][T11408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.797754][T11408] ? __import_iovec+0x536/0x820 [ 209.802593][T11408] ? aa_sock_msg_perm+0x91/0x160 [ 209.807529][T11408] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 209.812811][T11408] ? security_socket_sendmsg+0x87/0xb0 [ 209.818271][T11408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.823548][T11408] __sock_sendmsg+0x221/0x270 [ 209.828218][T11408] ____sys_sendmsg+0x525/0x7d0 [ 209.832985][T11408] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.838275][T11408] __sys_sendmsg+0x2b0/0x3a0 [ 209.842861][T11408] ? __pfx___sys_sendmsg+0x10/0x10 [ 209.847963][T11408] ? vfs_write+0x7c4/0xc90 [ 209.852403][T11408] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 209.858728][T11408] ? do_syscall_64+0x100/0x230 [ 209.863485][T11408] ? do_syscall_64+0xb6/0x230 [ 209.868151][T11408] do_syscall_64+0xf3/0x230 [ 209.872646][T11408] ? clear_bhb_loop+0x35/0x90 [ 209.877319][T11408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.883204][T11408] RIP: 0033:0x7f4985777299 [ 209.887624][T11408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.907233][T11408] RSP: 002b:00007f49851ff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.915644][T11408] RAX: ffffffffffffffda RBX: 00007f4985906058 RCX: 00007f4985777299 [ 209.923609][T11408] RDX: 0000000000000000 RSI: 0000000020000e40 RDI: 0000000000000006 [ 209.931570][T11408] RBP: 00007f49851ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 209.939533][T11408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.947497][T11408] R13: 000000000000006e R14: 00007f4985906058 R15: 00007ffdbb56f6d8 [ 209.955479][T11408] [ 210.000307][T11415] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1569'. [ 210.709841][T11467] lo speed is unknown, defaulting to 1000 [ 210.771255][T11468] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 210.960549][T11471] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1581'. [ 211.295734][T11480] netlink: 4272 bytes leftover after parsing attributes in process `syz.2.1584'. [ 211.313221][T11480] netlink: 133 bytes leftover after parsing attributes in process `syz.2.1584'. [ 211.417416][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1586'. [ 211.646602][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.663652][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.689752][T11487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.744964][T11503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1590'. [ 211.846011][ T9024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.855125][ T9024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.867843][T11515] FAULT_INJECTION: forcing a failure. [ 211.867843][T11515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.894157][T11515] CPU: 1 UID: 0 PID: 11515 Comm: syz.0.1594 Not tainted 6.10.0-syzkaller-12585-g301927d2d2eb #0 [ 211.904613][T11515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 211.914684][T11515] Call Trace: [ 211.917980][T11515] [ 211.920916][T11515] dump_stack_lvl+0x241/0x360 [ 211.925635][T11515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.930852][T11515] ? __pfx__printk+0x10/0x10 [ 211.935464][T11515] ? snprintf+0xda/0x120 [ 211.939731][T11515] should_fail_ex+0x3b0/0x4e0 [ 211.944435][T11515] _copy_to_user+0x2f/0xb0 [ 211.948867][T11515] simple_read_from_buffer+0xca/0x150 [ 211.954283][T11515] proc_fail_nth_read+0x1e9/0x250 [ 211.959339][T11515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 211.964907][T11515] ? rw_verify_area+0x520/0x6b0 [ 211.969784][T11515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 211.975358][T11515] vfs_read+0x204/0xbc0 [ 211.979543][T11515] ? __pfx_lock_release+0x10/0x10 [ 211.984608][T11515] ? __pfx_vfs_read+0x10/0x10 [ 211.989312][T11515] ? __fget_files+0x29/0x470 [ 211.993926][T11515] ? __fget_files+0x3f6/0x470 [ 211.998634][T11515] ksys_read+0x1a0/0x2c0 [ 212.002897][T11515] ? __pfx_ksys_read+0x10/0x10 [ 212.007677][T11515] ? do_syscall_64+0x100/0x230 [ 212.012462][T11515] ? do_syscall_64+0xb6/0x230 [ 212.017160][T11515] do_syscall_64+0xf3/0x230 [ 212.021682][T11515] ? clear_bhb_loop+0x35/0x90 [ 212.026381][T11515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.032296][T11515] RIP: 0033:0x7f4985775d7c [ 212.036725][T11515] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 212.056352][T11515] RSP: 002b:00007f498646a040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 212.064788][T11515] RAX: ffffffffffffffda RBX: 00007f4985905f80 RCX: 00007f4985775d7c [ 212.072777][T11515] RDX: 000000000000000f RSI: 00007f498646a0b0 RDI: 0000000000000005 [ 212.080763][T11515] RBP: 00007f498646a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 212.088752][T11515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 212.096736][T11515] R13: 000000000000000b R14: 00007f4985905f80 R15: 00007ffdbb56f6d8 [ 212.104743][T11515] [ 212.529466][T11534] validate_nla: 7 callbacks suppressed [ 212.529486][T11534] netlink: 'syz.2.1598': attribute type 15 has an invalid length. [ 212.545697][T11534] netlink: 'syz.2.1598': attribute type 2 has an invalid length. [ 212.569774][T11537] ipvlan1: entered allmulticast mode [ 212.578291][T11537] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 212.769146][T11548] xt_hashlimit: overflow, try lower: 2647300743266041856/8 [ 212.927880][T11554] bond0: entered promiscuous mode [ 212.938653][T11554] bond_slave_0: entered promiscuous mode [ 212.944733][T11554] bond_slave_1: entered promiscuous mode [ 212.950934][T11554] batadv0: entered promiscuous mode [ 212.998826][T11563] netlink: 'syz.0.1605': attribute type 1 has an invalid length. [ 213.075472][T11553] bond0: left promiscuous mode [ 213.088731][T11553] bond_slave_0: left promiscuous mode [ 213.095820][T11553] bond_slave_1: left promiscuous mode [ 213.112759][T11553] batadv0: left promiscuous mode [ 213.266428][T11576] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 213.970799][T11611] __nla_validate_parse: 3 callbacks suppressed [ 213.970816][T11611] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1621'. [ 214.054168][ C0] eth0: bad gso: type: 1, size: 1408 [ 214.097132][T11612] syzkaller0: entered allmulticast mode [ 214.115315][T11614] netlink: 'syz.3.1622': attribute type 1 has an invalid length. [ 214.132005][T11610] syzkaller0: left allmulticast mode [ 214.223375][T11624] netlink: 'syz.2.1624': attribute type 21 has an invalid length. [ 214.269708][T11626] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1626'. [ 214.291143][T11626] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1626'. [ 214.573797][T11642] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1629'. [ 214.601245][ T9019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.641655][ T9019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.653750][T11637] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1629'. [ 214.739745][T11651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1632'. [ 215.281979][T11664] pimreg: entered allmulticast mode [ 215.696484][T11691] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 215.719188][T11696] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1642'. [ 215.760057][T11696] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1642'. [ 215.817851][T11707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1645'. [ 215.846557][ C0] eth0: bad gso: type: 1, size: 1408 [ 215.855891][ C0] eth0: bad gso: type: 1, size: 1408 [ 215.861945][ C0] eth0: bad gso: type: 1, size: 1408 [ 215.971994][T11717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1647'. [ 216.266269][T11738] netlink: 'syz.0.1654': attribute type 6 has an invalid length. [ 216.283753][T11738] netlink: 'syz.0.1654': attribute type 1 has an invalid length. [ 216.350666][ T9022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.379451][ T9022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.400943][T11746] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20004 [ 216.502057][T11747] lo speed is unknown, defaulting to 1000 [ 216.533219][ T5239] Bluetooth: hci5: command 0x0405 tx timeout [ 216.993757][ C0] eth0: bad gso: type: 1, size: 1408 [ 217.635326][T11787] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 218.372072][T11833] netlink: 'syz.2.1675': attribute type 3 has an invalid length. [ 218.644549][T11843] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 219.028299][T11856] ip6t_rpfilter: unknown options [ 219.378250][T11877] netlink: 'syz.3.1692': attribute type 4 has an invalid length. [ 219.971084][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.994314][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.184059][T11899] __nla_validate_parse: 10 callbacks suppressed [ 220.184080][T11899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1698'. [ 220.346300][T11902] veth0_vlan: left promiscuous mode [ 220.574957][T11910] netlink: 616 bytes leftover after parsing attributes in process `syz.1.1702'. [ 220.678025][T11918] netlink: 'syz.3.1704': attribute type 4 has an invalid length. [ 220.957625][T11939] netlink: 'syz.0.1709': attribute type 2 has an invalid length. [ 220.973393][T11939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1709'. [ 220.996980][T11942] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1708'. [ 221.009834][T11939] dccp_invalid_packet: P.Data Offset(0) too small [ 221.021568][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1710'. [ 221.030868][T11941] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1710'. [ 221.041064][T11939] netlink: 'syz.0.1709': attribute type 2 has an invalid length. [ 221.082915][T11939] netlink: 766 bytes leftover after parsing attributes in process `syz.0.1709'. [ 221.135786][T11948] netlink: zone id is out of range [ 221.145201][ C0] eth0: bad gso: type: 1, size: 1408 [ 221.152972][T11948] netlink: zone id is out of range [ 221.158111][T11948] netlink: zone id is out of range [ 221.195106][T11948] netlink: zone id is out of range [ 221.224761][T11948] netlink: zone id is out of range [ 221.230800][T11948] netlink: set zone limit has 4 unknown bytes [ 221.360560][T11956] syzkaller0: left promiscuous mode [ 221.366418][T11956] syzkaller0: left allmulticast mode [ 221.490271][T11966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1716'. [ 221.550823][T11966] xt_cgroup: xt_cgroup: no path or classid specified [ 221.567428][T11970] netlink: 'syz.3.1717': attribute type 4 has an invalid length. [ 221.625948][T11966] netlink: 'syz.0.1716': attribute type 1 has an invalid length. [ 222.352084][T12015] netlink: 'syz.0.1729': attribute type 4 has an invalid length. [ 222.513264][T12023] tap0: tun_chr_ioctl cmd 1074025694 [ 222.523916][T12023] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1732'. [ 222.676319][T12034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1736'. [ 222.800936][T12044] syzkaller1: entered promiscuous mode [ 222.807009][T12044] syzkaller1: entered allmulticast mode [ 222.818052][T12042] netlink: 'syz.2.1738': attribute type 15 has an invalid length. [ 223.037938][T12052] netlink: 'syz.2.1742': attribute type 4 has an invalid length. [ 223.646148][T12069] syzkaller0: entered promiscuous mode [ 223.674660][T12069] syzkaller0: entered allmulticast mode [ 223.695884][T12076] vlan2: entered promiscuous mode [ 223.710311][T12076] ip_vti0: entered promiscuous mode [ 223.719661][T12076] ip_vti0: left promiscuous mode [ 223.742342][T12082] netlink: 'syz.2.1754': attribute type 4 has an invalid length. [ 223.976707][T12099] x_tables: duplicate underflow at hook 1 [ 225.470634][T12087] ip6gretap0: entered promiscuous mode [ 225.477686][T12087] batadv_slave_0: entered promiscuous mode [ 225.485886][T12111] tipc: Cannot configure node identity twice [ 225.492097][T12111] tipc: Cannot configure node identity twice [ 225.630849][T12128] netlink: 'syz.0.1765': attribute type 4 has an invalid length. [ 225.980173][T12155] __nla_validate_parse: 5 callbacks suppressed [ 225.980193][T12155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1771'. [ 226.025256][T12155] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1771'. [ 226.030261][T12158] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1773'. [ 226.058848][T12158] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 226.235549][T12174] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1776'. [ 226.284580][T12173] Cannot find add_set index 0 as target [ 226.293041][T12173] netlink: 'syz.2.1778': attribute type 4 has an invalid length. [ 226.300915][T12173] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1778'. [ 226.346266][T12180] netlink: 'syz.1.1776': attribute type 39 has an invalid length. [ 226.519961][T12188] netlink: 'syz.3.1781': attribute type 4 has an invalid length. [ 226.595841][T12191] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1782'. [ 226.769953][T12202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.093486][ T9033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.107366][T12215] tap0: tun_chr_ioctl cmd 1074025677 [ 227.113332][ T9033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.115301][T12215] tap0: linktype set to 65534 [ 227.150525][T12215] openvswitch: netlink: Message has 16 unknown bytes. [ 227.466774][T12228] tap0: tun_chr_ioctl cmd 1074025677 [ 227.472505][T12228] tap0: linktype set to 774 [ 227.479457][T12228] tap0: tun_chr_ioctl cmd 2148553947 [ 227.494723][T12226] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1793'. [ 227.519935][T12230] netlink: 'syz.0.1795': attribute type 4 has an invalid length. [ 227.616267][ T9033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.636379][ T9033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.776211][T12246] tipc: Enabled bearer , priority 0 [ 227.783898][T12246] tipc: Resetting bearer [ 227.883323][T12248] ieee802154 phy0 wpan0: encryption failed: -22 [ 228.122984][ T9032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.153648][ T9032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.215337][T12267] netlink: 'syz.2.1806': attribute type 4 has an invalid length. [ 228.423838][T12273] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1805'. [ 228.536198][T12281] bridge0: entered allmulticast mode [ 228.541840][T12281] bridge0: left allmulticast mode [ 228.565483][T12283] bridge0: entered allmulticast mode [ 228.726868][T12293] macvlan3: entered allmulticast mode [ 228.743095][T12293] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 228.811404][T12292] macvlan3: entered allmulticast mode [ 228.904526][ T5286] tipc: Node number set to 11521 [ 229.070981][T12298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1813'. [ 229.281603][T12303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1815'. [ 229.436858][T12312] netlink: 'syz.3.1817': attribute type 4 has an invalid length. [ 229.672320][T12326] netlink: 'syz.0.1822': attribute type 2 has an invalid length. [ 229.694605][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.713441][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.821306][T12332] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 229.861794][T12335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.932382][T12335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.179465][T12351] netlink: 'syz.2.1827': attribute type 10 has an invalid length. [ 230.192704][T12351] geneve0: entered promiscuous mode [ 230.211347][T12351] netdevsim netdevsim2 ÿÿÿÿ: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.228094][T12351] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.237126][T12351] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.246411][T12351] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.257440][T12351] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 230.441136][T12362] netlink: 'syz.2.1831': attribute type 4 has an invalid length. [ 230.647070][T12368] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 230.655581][T12368] macsec1: entered promiscuous mode [ 230.662742][T12368] macsec1: entered allmulticast mode [ 230.671833][T12364] bridge0: port 1(netdevsim1) entered blocking state [ 230.713077][T12364] bridge0: port 1(netdevsim1) entered disabled state [ 230.724033][T12364] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 230.751724][T12364] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 231.019163][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.055357][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.239452][T12398] netlink: 'syz.0.1842': attribute type 4 has an invalid length. [ 231.647841][T12409] netlink: 'syz.0.1845': attribute type 2 has an invalid length. [ 232.014456][T12427] __nla_validate_parse: 2 callbacks suppressed [ 232.014474][T12427] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1850'. [ 232.160133][T12432] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1852'. [ 232.207749][T12430] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1852'. [ 232.253076][T12436] netlink: 'syz.2.1854': attribute type 4 has an invalid length. [ 232.482067][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1856'. [ 232.503016][T12445] netlink: 'syz.3.1856': attribute type 1 has an invalid length. [ 232.511143][T12445] netlink: 'syz.3.1856': attribute type 2 has an invalid length. [ 232.676269][T12456] C: renamed from lo [ 232.695077][T12456] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 233.070447][T12477] netlink: 'syz.2.1865': attribute type 4 has an invalid length. [ 233.078820][T12477] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1865'. [ 233.145422][T12484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1865'. [ 233.250513][T12487] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1867'. [ 234.217238][T12516] lo speed is unknown, defaulting to 1000 [ 234.263442][T12518] team0: Failed to send options change via netlink (err -105) [ 234.291310][T12518] team0: Port device € added [ 234.312257][ T8] team0: Failed to send port change of device € via netlink (err -105) [ 234.357897][T12520] team0: Failed to send options change via netlink (err -105) [ 234.376251][T12520] team0: Failed to send port change of device € via netlink (err -105) [ 234.400803][T12520] team0: Port device € removed [ 234.427587][T12520] bond0: (slave €): Enslaving as an active interface with an up link [ 234.778397][T12525] validate_nla: 4 callbacks suppressed [ 234.778414][T12525] netlink: 'syz.3.1879': attribute type 4 has an invalid length. [ 234.898135][T12528] netlink: 'syz.0.1880': attribute type 8 has an invalid length. [ 235.976890][T12554] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1888'. [ 235.982543][T12552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1885'. [ 236.050520][T12554] Êü: entered promiscuous mode [ 236.201225][T12564] netlink: 'syz.3.1891': attribute type 4 has an invalid length. [ 236.291509][ T9022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.323206][ T9022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.008945][T12581] xt_hashlimit: overflow, try lower: 0/0 [ 237.567705][T12604] netlink: 'syz.3.1900': attribute type 5 has an invalid length. [ 237.580025][T12604] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1900'. [ 237.711348][T12612] netlink: 'syz.2.1902': attribute type 4 has an invalid length. [ 237.808069][T12606] syzkaller0: entered promiscuous mode [ 237.826613][T12606] syzkaller0: entered allmulticast mode [ 237.843644][ T9] IPVS: starting estimator thread 0... [ 237.933057][T12623] IPVS: using max 19 ests per chain, 45600 per kthread [ 239.563019][T12636] netlink: 'syz.1.1908': attribute type 29 has an invalid length. [ 239.578760][T12637] netlink: 'syz.1.1908': attribute type 29 has an invalid length. [ 239.793562][T12649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1913'. [ 239.831000][T12649] netdevsim netdevsim2 netdevsim1: left allmulticast mode [ 239.843242][T12649] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 239.850055][T12652] netlink: 892 bytes leftover after parsing attributes in process `syz.0.1914'. [ 239.868046][T12649] bridge0: port 1(netdevsim1) entered disabled state [ 239.906650][T12649] bridge0 (unregistering): left allmulticast mode [ 240.049630][ T9037] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.111353][ T9037] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.168744][ T9037] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.239820][ T9037] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.319599][ T9037] bridge_slave_1: left allmulticast mode [ 240.327526][ T9037] bridge_slave_1: left promiscuous mode [ 240.333473][ T9037] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.341981][ T9037] bridge_slave_0: left allmulticast mode [ 240.348563][ T9037] bridge_slave_0: left promiscuous mode [ 240.354449][ T9037] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.617013][ T9032] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 240.661582][ T9037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.672609][ T9037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.683095][ T9037] bond0 (unregistering): Released all slaves [ 240.823268][T12664] netlink: 'syz.0.1915': attribute type 4 has an invalid length. [ 240.927120][T12661] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1918'. [ 241.082733][T12671] dvmrp1: entered allmulticast mode [ 241.111906][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 241.126764][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 241.144833][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 241.154380][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 241.173606][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 241.187370][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 241.296933][T12690] netlink: 'syz.0.1925': attribute type 1 has an invalid length. [ 241.305788][T12690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1925'. [ 241.583882][T12680] lo speed is unknown, defaulting to 1000 [ 241.669799][T12705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1927'. [ 241.748808][ T9037] hsr_slave_0: left promiscuous mode [ 241.755055][ T9037] hsr_slave_1: left promiscuous mode [ 241.778232][ T9037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.805195][ T9037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.833822][ T9037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.841241][ T9037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.855602][T12716] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1928'. [ 241.916442][T12718] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1931'. [ 241.936966][ T9037] veth1_macvtap: left promiscuous mode [ 241.942537][ T9037] veth0_macvtap: left promiscuous mode [ 241.966550][ T9037] veth1_vlan: left promiscuous mode [ 241.978579][ T9037] veth0_vlan: left promiscuous mode [ 242.529798][ T9037] team0 (unregistering): Port device team_slave_1 removed [ 242.570282][ T9037] team0 (unregistering): Port device team_slave_0 removed [ 242.696834][ T5235] Bluetooth: hci4: command 0x0405 tx timeout [ 242.918024][T12710] netlink: 'syz.0.1929': attribute type 4 has an invalid length. [ 243.257180][ T5235] Bluetooth: hci0: command tx timeout [ 243.441457][T12758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1939'. [ 243.444721][T12680] chnl_net:caif_netlink_parms(): no params data found [ 243.481276][T12758] batadv0: entered promiscuous mode [ 243.520653][T12764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1942'. [ 243.594198][T12764] geneve2: entered promiscuous mode [ 243.606515][T12764] geneve2: entered allmulticast mode [ 243.829145][T12680] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.859971][T12680] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.878596][T12680] bridge_slave_0: entered allmulticast mode [ 243.887803][T12680] bridge_slave_0: entered promiscuous mode [ 243.901846][T12680] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.914625][T12680] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.922086][T12680] bridge_slave_1: entered allmulticast mode [ 243.937456][T12738] syz.3.1935 (12738) used greatest stack depth: 15280 bytes left [ 243.952274][T12680] bridge_slave_1: entered promiscuous mode [ 244.088690][T12680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.112215][T12680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.204443][T12680] team0: Port device team_slave_0 added [ 244.228115][T12680] team0: Port device team_slave_1 added [ 244.311239][T12680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.338286][T12680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.375528][T12680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.399314][T12680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.417400][T12680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.453342][T12680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.581355][T12680] hsr_slave_0: entered promiscuous mode [ 244.603391][T12680] hsr_slave_1: entered promiscuous mode [ 244.613198][T12680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.621573][T12680] Cannot create hsr debugfs directory [ 244.780326][T12824] netlink: 'syz.0.1954': attribute type 1 has an invalid length. [ 244.799076][T12824] netlink: 9348 bytes leftover after parsing attributes in process `syz.0.1954'. [ 244.817937][T12824] netlink: 'syz.0.1954': attribute type 1 has an invalid length. [ 244.832739][T12829] syz.2.1955 uses old SIOCAX25GETINFO [ 245.048399][T12824] syzkaller0: entered promiscuous mode [ 245.061726][T12824] syzkaller0: entered allmulticast mode [ 245.333101][ T5235] Bluetooth: hci0: command tx timeout [ 245.475395][T12849] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1960'. [ 245.996735][T12680] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 246.032974][T12680] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 246.090964][T12680] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 246.119539][T12680] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 246.124570][T12883] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1967'. [ 246.200686][T12887] macsec2: entered promiscuous mode [ 246.207971][T12887] vlan0: entered promiscuous mode [ 246.222125][T12887] vlan0: left promiscuous mode [ 246.380641][T12680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.435857][T12680] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.457599][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.464807][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.496344][T12894] bridge0: port 2(team0) entered blocking state [ 246.510803][T12894] bridge0: port 2(team0) entered disabled state [ 246.527624][T12894] team0: entered allmulticast mode [ 246.557825][T12894] team_slave_0: entered allmulticast mode [ 246.574461][T12894] team0: entered promiscuous mode [ 246.598922][T12894] team_slave_0: entered promiscuous mode [ 246.612175][T12894] bridge0: port 2(team0) entered blocking state [ 246.618596][T12894] bridge0: port 2(team0) entered forwarding state [ 246.637091][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.644290][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.881637][ C0] eth0: bad gso: type: 1, size: 1408 [ 247.168700][T12918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1978'. [ 247.198516][T12680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.214764][T12925] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1979'. [ 247.249204][T12925] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1979'. [ 247.413300][ T5235] Bluetooth: hci0: command tx timeout [ 247.433139][T12934] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1980'. [ 247.665183][T12951] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1983'. [ 247.805028][T12957] netlink: 'syz.1.1985': attribute type 1 has an invalid length. [ 247.861439][T12957] 8021q: adding VLAN 0 to HW filter on device bond4 [ 248.110179][T12680] veth0_vlan: entered promiscuous mode [ 248.165586][T12680] veth1_vlan: entered promiscuous mode [ 248.250634][T12680] veth0_macvtap: entered promiscuous mode [ 248.270567][T12989] netlink: 'syz.3.1993': attribute type 4 has an invalid length. [ 248.289220][T12680] veth1_macvtap: entered promiscuous mode [ 248.375938][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.400411][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.410759][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.434666][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.453310][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.472657][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.494862][T12680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.527498][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.530153][ C0] eth0: bad gso: type: 1, size: 1408 [ 248.538697][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.564695][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.583660][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.597439][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.608890][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.654603][T12680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.684179][T12680] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.704532][T12680] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.723012][T12680] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.742351][T12680] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.757194][T13009] syzkaller0: entered promiscuous mode [ 248.763970][T13009] syzkaller0: entered allmulticast mode [ 248.911714][ T9037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.930746][ T9037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.989875][ T9037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.011219][ T9037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.073125][T13020] openvswitch: netlink: Missing key (keys=100000040, expected=2000) [ 249.305370][T13029] netlink: 'syz.1.2004': attribute type 4 has an invalid length. [ 249.686300][T13055] netlink: 'syz.3.2009': attribute type 4 has an invalid length. [ 250.032100][T13079] netlink: 'syz.1.2017': attribute type 4 has an invalid length. [ 250.348045][ T9023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.369536][ T9023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.412589][T13099] netlink: 'syz.1.2023': attribute type 11 has an invalid length. [ 250.457205][T13101] netlink: 'syz.2.2024': attribute type 4 has an invalid length. [ 250.995712][ T9023] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.945728][T13131] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.971809][T13131] __nla_validate_parse: 1 callbacks suppressed [ 251.971825][T13131] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2032'. [ 252.070578][ T9023] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.092013][T13145] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2033'. [ 252.123036][T13145] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 252.267196][ T9023] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.389165][ T9023] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.483428][ T5241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.493520][ T5241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.502953][ T5241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.511950][ T5241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.521767][ T5241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 252.529571][ T5241] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.720818][T13158] lo speed is unknown, defaulting to 1000 [ 252.723110][ T9023] bridge_slave_1: left allmulticast mode [ 252.746246][ T9023] bridge_slave_1: left promiscuous mode [ 252.760944][ T9023] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.814032][ T9023] bridge_slave_0: left allmulticast mode [ 252.826121][ T9023] bridge_slave_0: left promiscuous mode [ 252.837495][ T9023] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.970680][T13170] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2041'. [ 253.111291][T13177] netlink: 'syz.2.2040': attribute type 1 has an invalid length. [ 253.135625][T13177] netlink: 'syz.2.2040': attribute type 1 has an invalid length. [ 253.163174][T13177] netlink: 'syz.2.2040': attribute type 1 has an invalid length. [ 253.176112][T13177] netlink: 'syz.2.2040': attribute type 2 has an invalid length. [ 253.189238][T13177] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2040'. [ 253.455570][T13194] xt_hashlimit: size too large, truncated to 1048576 [ 253.472352][T13194] xt_hashlimit: overflow, try lower: 0/0 [ 253.637367][ T9023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.650792][ T9023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.666535][ T9023] bond0 (unregistering): Released all slaves [ 253.682365][T13167] netlink: 'syz.2.2040': attribute type 1 has an invalid length. [ 253.753773][T13167] bond5: entered promiscuous mode [ 253.806257][T13172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2040'. [ 253.827228][T13172] bond5: entered allmulticast mode [ 253.839526][T13172] 8021q: adding VLAN 0 to HW filter on device bond5 [ 253.889832][T13196] tipc: Started in network mode [ 253.903075][T13196] tipc: Node identity 653a203130370a5b, cluster identity 4711 [ 253.924937][T13196] tipc: Enabling of bearer rejected, failed to enable media [ 254.088769][ T1077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.108846][ T1077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.387857][T13234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2056'. [ 254.616183][ T5235] Bluetooth: hci0: command tx timeout [ 254.740377][T13251] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 254.742911][T13230] lo speed is unknown, defaulting to 1000 [ 254.884124][ T9023] hsr_slave_0: left promiscuous mode [ 254.916382][ T9023] hsr_slave_1: left promiscuous mode [ 254.963670][ T9023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.971130][ T9023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.998838][ T9023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.018577][ T9023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.045760][T13261] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 255.101564][ T9023] veth1_macvtap: left promiscuous mode [ 255.112931][ T9023] veth0_macvtap: left promiscuous mode [ 255.118596][ T9023] veth1_vlan: left promiscuous mode [ 255.128428][ T9023] veth0_vlan: left promiscuous mode [ 255.846495][ T9023] team0 (unregistering): Port device team_slave_1 removed [ 255.885110][ T9023] team0 (unregistering): Port device team_slave_0 removed [ 255.980027][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.383479][T13243] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2060'. [ 256.400094][T13243] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2060'. [ 256.409256][T13243] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2060'. [ 256.693145][ T5235] Bluetooth: hci0: command tx timeout [ 256.897997][T13158] chnl_net:caif_netlink_parms(): no params data found [ 257.405087][T13158] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.423920][T13158] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.431616][T13158] bridge_slave_0: entered allmulticast mode [ 257.448734][T13158] bridge_slave_0: entered promiscuous mode [ 257.478963][T13158] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.489971][T13158] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.497577][T13158] bridge_slave_1: entered allmulticast mode [ 257.507350][T13158] bridge_slave_1: entered promiscuous mode [ 257.540521][T13317] netlink: 'syz.1.2076': attribute type 6 has an invalid length. [ 257.559524][T13317] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2076'. [ 257.582291][T13158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.602299][T13158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.645769][T13158] team0: Port device team_slave_0 added [ 257.655532][T13158] team0: Port device team_slave_1 added [ 257.716996][T13158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.732960][T13158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.782995][T13158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.804750][T13158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.811711][T13158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.838931][T13158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.954264][T13158] hsr_slave_0: entered promiscuous mode [ 257.969954][T13158] hsr_slave_1: entered promiscuous mode [ 258.020554][T13158] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.038404][T13158] Cannot create hsr debugfs directory [ 258.089328][T13335] netlink: 'syz.1.2082': attribute type 10 has an invalid length. [ 258.121909][T13338] ================================================================== [ 258.130005][T13338] BUG: KASAN: slab-use-after-free in rose_get_neigh+0x1b6/0x6f0 [ 258.137670][T13338] Read of size 1 at addr ffff88802ce42030 by task syz.2.2083/13338 [ 258.145577][T13338] [ 258.145601][T13335] team0: Failed to send options change via netlink (err -105) [ 258.147902][T13338] CPU: 0 UID: 0 PID: 13338 Comm: syz.2.2083 Not tainted 6.10.0-syzkaller-12585-g301927d2d2eb #0 [ 258.147935][T13338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 258.157456][T13335] team0: Port device netdevsim0 added [ 258.165747][T13338] Call Trace: [ 258.165761][T13338] [ 258.165770][T13338] dump_stack_lvl+0x241/0x360 [ 258.165802][T13338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.165826][T13338] ? __pfx__printk+0x10/0x10 [ 258.165849][T13338] ? _printk+0xd5/0x120 [ 258.165870][T13338] ? __virt_addr_valid+0x183/0x530 [ 258.165892][T13338] ? __virt_addr_valid+0x183/0x530 [ 258.165917][T13338] print_report+0x169/0x550 [ 258.165946][T13338] ? __virt_addr_valid+0x183/0x530 [ 258.165967][T13338] ? __virt_addr_valid+0x183/0x530 [ 258.165988][T13338] ? __virt_addr_valid+0x45f/0x530 [ 258.166008][T13338] ? __phys_addr+0xba/0x170 [ 258.166028][T13338] ? rose_get_neigh+0x1b6/0x6f0 [ 258.166056][T13338] kasan_report+0x143/0x180 [ 258.166085][T13338] ? rose_get_neigh+0x1b6/0x6f0 [ 258.166113][T13338] rose_get_neigh+0x1b6/0x6f0 [ 258.166143][T13338] rose_connect+0x45a/0x1170 [ 258.166167][T13338] ? aa_sk_perm+0x967/0xab0 [ 258.166192][T13338] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 258.166210][T13338] ? __pfx_rose_connect+0x10/0x10 [ 258.166238][T13338] ? aa_af_perm+0x2f0/0x3b0 [ 258.166262][T13338] ? __might_fault+0xaa/0x120 [ 258.166285][T13338] ? __might_fault+0xc6/0x120 [ 258.166310][T13338] ? bpf_lsm_socket_connect+0x9/0x10 [ 258.166334][T13338] ? security_socket_connect+0x87/0xb0 [ 258.166357][T13338] __sys_connect+0x2df/0x310 [ 258.166384][T13338] ? __pfx___sys_connect+0x10/0x10 [ 258.166413][T13338] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 258.166440][T13338] ? do_syscall_64+0x100/0x230 [ 258.166463][T13338] __x64_sys_connect+0x7a/0x90 [ 258.166486][T13338] do_syscall_64+0xf3/0x230 [ 258.166506][T13338] ? clear_bhb_loop+0x35/0x90 [ 258.166532][T13338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.166562][T13338] RIP: 0033:0x7f3bdad77299 [ 258.166581][T13338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.166597][T13338] RSP: 002b:00007f3bdbbe0048 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 258.166619][T13338] RAX: ffffffffffffffda RBX: 00007f3bdaf05f80 RCX: 00007f3bdad77299 [ 258.166634][T13338] RDX: 0000000000000040 RSI: 0000000020000000 RDI: 0000000000000004 [ 258.166648][T13338] RBP: 00007f3bdade48e6 R08: 0000000000000000 R09: 0000000000000000 [ 258.166661][T13338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.166674][T13338] R13: 000000000000004d R14: 00007f3bdaf05f80 R15: 00007ffc32531d58 [ 258.166696][T13338] [ 258.419612][T13338] [ 258.421920][T13338] Allocated by task 10435: [ 258.426315][T13338] kasan_save_track+0x3f/0x80 [ 258.430984][T13338] __kasan_kmalloc+0x98/0xb0 [ 258.435561][T13338] __kmalloc_cache_noprof+0x19c/0x2c0 [ 258.440916][T13338] rose_add_node+0x209/0xda0 [ 258.445496][T13338] rose_rt_ioctl+0xa6f/0xed0 [ 258.450072][T13338] rose_ioctl+0x3cb/0x9d0 [ 258.454385][T13338] sock_do_ioctl+0x158/0x460 [ 258.458958][T13338] sock_ioctl+0x629/0x8e0 [ 258.463269][T13338] __se_sys_ioctl+0xfc/0x170 [ 258.467844][T13338] do_syscall_64+0xf3/0x230 [ 258.472333][T13338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.478212][T13338] [ 258.480520][T13338] Freed by task 13295: [ 258.484568][T13338] kasan_save_track+0x3f/0x80 [ 258.489230][T13338] kasan_save_free_info+0x40/0x50 [ 258.494239][T13338] poison_slab_object+0xe0/0x150 [ 258.499162][T13338] __kasan_slab_free+0x37/0x60 [ 258.503916][T13338] kfree+0x149/0x360 [ 258.507793][T13338] rose_rt_device_down+0x6e5/0x740 [ 258.512895][T13338] rose_device_event+0x601/0x6a0 [ 258.517817][T13338] notifier_call_chain+0x19f/0x3e0 [ 258.522920][T13338] dev_close_many+0x33c/0x4c0 [ 258.527577][T13338] dev_close+0x1c0/0x2c0 [ 258.531802][T13338] bpq_device_event+0x372/0x8b0 [ 258.536645][T13338] notifier_call_chain+0x19f/0x3e0 [ 258.541741][T13338] __dev_notify_flags+0x207/0x400 [ 258.546753][T13338] dev_change_flags+0xf0/0x1a0 [ 258.551501][T13338] dev_ifsioc+0x7c8/0xe70 [ 258.555816][T13338] dev_ioctl+0x719/0x1340 [ 258.560131][T13338] sock_do_ioctl+0x240/0x460 [ 258.564703][T13338] sock_ioctl+0x629/0x8e0 [ 258.569015][T13338] __se_sys_ioctl+0xfc/0x170 [ 258.573591][T13338] do_syscall_64+0xf3/0x230 [ 258.578077][T13338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.583960][T13338] [ 258.586264][T13338] The buggy address belongs to the object at ffff88802ce42000 [ 258.586264][T13338] which belongs to the cache kmalloc-512 of size 512 [ 258.600299][T13338] The buggy address is located 48 bytes inside of [ 258.600299][T13338] freed 512-byte region [ffff88802ce42000, ffff88802ce42200) [ 258.613999][T13338] [ 258.616304][T13338] The buggy address belongs to the physical page: [ 258.622701][T13338] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802ce42800 pfn:0x2ce40 [ 258.632749][T13338] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 258.641233][T13338] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 258.649800][T13338] page_type: 0xfdffffff(slab) [ 258.654462][T13338] raw: 00fff00000000240 ffff888015441c80 ffffea0000af7910 ffffea00008ef010 [ 258.663028][T13338] raw: ffff88802ce42800 000000000010000a 00000001fdffffff 0000000000000000 [ 258.671592][T13338] head: 00fff00000000240 ffff888015441c80 ffffea0000af7910 ffffea00008ef010 [ 258.680252][T13338] head: ffff88802ce42800 000000000010000a 00000001fdffffff 0000000000000000 [ 258.688903][T13338] head: 00fff00000000002 ffffea0000b39001 ffffffffffffffff 0000000000000000 [ 258.697555][T13338] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 258.706204][T13338] page dumped because: kasan: bad access detected [ 258.712689][T13338] page_owner tracks the page as allocated [ 258.718385][T13338] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4685, tgid 4685 (udevadm), ts 19185916699, free_ts 11733585929 [ 258.739293][T13338] post_alloc_hook+0x1f3/0x230 [ 258.744047][T13338] get_page_from_freelist+0x2e4c/0x2f10 [ 258.749580][T13338] __alloc_pages_noprof+0x256/0x6c0 [ 258.754763][T13338] alloc_slab_page+0x5f/0x120 [ 258.759425][T13338] allocate_slab+0x5a/0x2f0 [ 258.763913][T13338] ___slab_alloc+0xcd1/0x14b0 [ 258.768574][T13338] __slab_alloc+0x58/0xa0 [ 258.772886][T13338] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 258.778244][T13338] kernfs_fop_open+0x3e0/0xd10 [ 258.782995][T13338] do_dentry_open+0x970/0x1440 [ 258.787743][T13338] vfs_open+0x3e/0x330 [ 258.791793][T13338] path_openat+0x2b3e/0x3470 [ 258.796366][T13338] do_filp_open+0x235/0x490 [ 258.800851][T13338] do_sys_openat2+0x13e/0x1d0 [ 258.805510][T13338] __x64_sys_openat+0x247/0x2a0 [ 258.810342][T13338] do_syscall_64+0xf3/0x230 [ 258.814831][T13338] page last free pid 941 tgid 941 stack trace: [ 258.820964][T13338] free_unref_page+0xd22/0xea0 [ 258.825716][T13338] vfree+0x186/0x2e0 [ 258.829591][T13338] delayed_vfree_work+0x56/0x80 [ 258.834425][T13338] process_scheduled_works+0xa2c/0x1830 [ 258.839972][T13338] worker_thread+0x86d/0xd40 [ 258.844564][T13338] kthread+0x2f0/0x390 [ 258.848633][T13338] ret_from_fork+0x4b/0x80 [ 258.853047][T13338] ret_from_fork_asm+0x1a/0x30 [ 258.857802][T13338] [ 258.860111][T13338] Memory state around the buggy address: [ 258.865723][T13338] ffff88802ce41f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 258.873772][T13338] ffff88802ce41f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 258.881821][T13338] >ffff88802ce42000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 258.889869][T13338] ^ [ 258.895494][T13338] ffff88802ce42080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 258.903543][T13338] ffff88802ce42100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 258.911595][T13338] ================================================================== [ 258.919749][T13338] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 258.926949][T13338] CPU: 0 UID: 0 PID: 13338 Comm: syz.2.2083 Not tainted 6.10.0-syzkaller-12585-g301927d2d2eb #0 [ 258.937370][T13338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 258.947416][T13338] Call Trace: [ 258.950684][T13338] [ 258.953606][T13338] dump_stack_lvl+0x241/0x360 [ 258.958280][T13338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.963472][T13338] ? __pfx__printk+0x10/0x10 [ 258.968057][T13338] ? vscnprintf+0x5d/0x90 [ 258.972378][T13338] panic+0x349/0x860 [ 258.976265][T13338] ? check_panic_on_warn+0x21/0xb0 [ 258.981367][T13338] ? __pfx_panic+0x10/0x10 [ 258.985774][T13338] ? mark_lock+0x9a/0x350 [ 258.990097][T13338] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 258.995983][T13338] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 259.001867][T13338] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 259.008183][T13338] ? print_report+0x502/0x550 [ 259.012876][T13338] check_panic_on_warn+0x86/0xb0 [ 259.017835][T13338] ? rose_get_neigh+0x1b6/0x6f0 [ 259.022686][T13338] end_report+0x77/0x160 [ 259.026924][T13338] kasan_report+0x154/0x180 [ 259.031422][T13338] ? rose_get_neigh+0x1b6/0x6f0 [ 259.036358][T13338] rose_get_neigh+0x1b6/0x6f0 [ 259.041032][T13338] rose_connect+0x45a/0x1170 [ 259.045617][T13338] ? aa_sk_perm+0x967/0xab0 [ 259.050117][T13338] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 259.056012][T13338] ? __pfx_rose_connect+0x10/0x10 [ 259.061048][T13338] ? aa_af_perm+0x2f0/0x3b0 [ 259.065568][T13338] ? __might_fault+0xaa/0x120 [ 259.070239][T13338] ? __might_fault+0xc6/0x120 [ 259.074909][T13338] ? bpf_lsm_socket_connect+0x9/0x10 [ 259.080188][T13338] ? security_socket_connect+0x87/0xb0 [ 259.085653][T13338] __sys_connect+0x2df/0x310 [ 259.090245][T13338] ? __pfx___sys_connect+0x10/0x10 [ 259.095354][T13338] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 259.101675][T13338] ? do_syscall_64+0x100/0x230 [ 259.106430][T13338] __x64_sys_connect+0x7a/0x90 [ 259.111183][T13338] do_syscall_64+0xf3/0x230 [ 259.115679][T13338] ? clear_bhb_loop+0x35/0x90 [ 259.120351][T13338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.126454][T13338] RIP: 0033:0x7f3bdad77299 [ 259.130866][T13338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.150461][T13338] RSP: 002b:00007f3bdbbe0048 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 259.158868][T13338] RAX: ffffffffffffffda RBX: 00007f3bdaf05f80 RCX: 00007f3bdad77299 [ 259.166829][T13338] RDX: 0000000000000040 RSI: 0000000020000000 RDI: 0000000000000004 [ 259.174788][T13338] RBP: 00007f3bdade48e6 R08: 0000000000000000 R09: 0000000000000000 [ 259.182747][T13338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.190710][T13338] R13: 000000000000004d R14: 00007f3bdaf05f80 R15: 00007ffc32531d58 [ 259.198681][T13338] [ 259.201904][T13338] Kernel Offset: disabled [ 259.206215][T13338] Rebooting in 86400 seconds..