last executing test programs: 2.97378379s ago: executing program 1 (id=4002): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000004ec0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}], 0x1, 0x20000800) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0xd3d, 0xffc0}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x10202, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x8, 0xc}]}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0xfffffb07, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x17, 0x4, 0x6, 0x400000b}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0xa, 0x3, 0x3a) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000400)={0x2d, 0x3}) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f0000000540), 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r6, &(0x7f0000000740)='\x00', 0x1, 0x44, &(0x7f0000000100)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x16, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x3}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x48}}, 0x24000004) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$bt_hci(r1, 0x11a, 0x1, 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r4) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB="05917aea68cc9e4458180698", @ANYRES16=r7, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000004040000", 0x58}], 0x1) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES8=r1, @ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRES16=r1], 0x13c}}, 0xc004) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=r3, @ANYRES16=r3], 0x50) 2.862505265s ago: executing program 3 (id=4004): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r1, 0x201, 0x70bd26, 0xfffffffe, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x31}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x4c}, 0x8, 0x3000000000002, 0x4000}, 0x844) 2.710054883s ago: executing program 3 (id=4007): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x300440f1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r1, r3}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x16, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffff5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_fd={0x18, 0x3, 0x1, 0x0, r3}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7a5528335960843a}}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, &(0x7f0000000080), 0xf7f37f7e772f2944, 0x2a, '\x00', 0x0, @fallback=0x1b, r3, 0x8, &(0x7f0000000180)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x7, 0x6, 0xfffffff9}, 0x10, 0xffffffffffffffff, r3, 0x4, 0x0, &(0x7f0000000280)=[{0x2, 0x3, 0x7fff, 0xc}, {0x0, 0x1, 0x2, 0x8}, {0x3, 0x3, 0x2, 0xa}, {0x5, 0x3, 0xf, 0xb}], 0x10, 0x3}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f00000007c0)=r4, 0xfffffd72) 2.461781897s ago: executing program 3 (id=4010): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1e00000001000000040000000002000008000100", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000200000003000000000000000000001c", @ANYRES32, @ANYBLOB], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @chandef_params]}, 0x38}}, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r10, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendfile(r2, r1, &(0x7f0000000000)=0x1, 0x8) recvmmsg(r10, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000780)=[{&(0x7f0000000340)=""/179, 0xb3}, {&(0x7f0000000280)=""/122, 0x7a}, {&(0x7f0000000400)=""/165, 0xa5}, {&(0x7f00000004c0)=""/142, 0x8e}, {&(0x7f0000000640)=""/70, 0x46}, {&(0x7f0000000b00)=""/179, 0xb3}], 0x6, &(0x7f0000000580)=""/70, 0x46}}], 0x1, 0x2, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r11, 0x28, 0x8, &(0x7f0000000100)=0xad47e17a14ae4701, 0x12d) setsockopt$inet6_int(r10, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) r12 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r12, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000000300)=ANY=[@ANYBLOB="500211e8ffff0702110000000000000000000000000055000100000602020202020201761577bd99db2d70730882848b960c12182400"], 0x36) nanosleep(&(0x7f0000000340), &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f00000008c0)=ANY=[@ANYBLOB="b000000008021100000108021100000050505050505010000000000000003bfafd71579bdbf154c5b5ad30429ee158790531a5a7c1fd54c012ab08b0f9c2f5c46efdf96fed2c9f22a5909b5cb891df57620acf2972594c068530a2c94dd356cbef4c3647faa18f63f0ddf8ecab9d0546e82b0cbc4984f2395fcefea0084bd3f77298b70c7c5981e186e2210758f2a671eecb9e06bfb40df4822427d0de583e788ae244dba1c31386dd44d27b62e7c9631b32da2a02ee74afa6a426a994782b87b60f57416c78c3a0861eaeb0"], 0x1e) 2.289498802s ago: executing program 1 (id=4015): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000180)={0x2, 0x3, 0x6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32, 0x1}, 0x9c) shutdown(r3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000900)=[@in={0x2, 0x0, @loopback}], 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtaction={0x78, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x64, 0x1, [@m_sample={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0xd, 0x6, 0x7f, 0x4}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x66c}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x800}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 2.248025582s ago: executing program 2 (id=4016): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x18}}, 0x4044004) recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000600)=""/179, 0xb3}, {&(0x7f00000004c0)=""/262, 0x106}, {&(0x7f0000000000)=""/48, 0x30}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000003bc0)=""/4109, 0x100d}, {&(0x7f00000017c0)=""/227, 0xe3}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x4a}, {{0x0, 0x0, 0x0}, 0x48}, {{0x0, 0x0, 0x0}}], 0x9, 0x0, 0x0) 2.131595599s ago: executing program 1 (id=4017): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (fail_nth: 7) 2.123723973s ago: executing program 4 (id=4018): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff, 0x1, 0x2, 0x3, 0x7, 0x7}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@multicast1}, 0x0, @in=@local}}, 0x9db) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}]}, 0x1c}}, 0x4000084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, 0x0, 0x0) r5 = socket(0xa, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x45) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x3}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x2}, {}, {0x4}}}, &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x90) socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x4c, r9, 0x1, 0x70bd2b, 0x4000, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xfffffffa}, {0x6, 0x11, 0xca}}]}, 0x4c}}, 0x4040000) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x10001, 0x0, r7, 0x7ea1, '\x00', r4, 0xffffffffffffffff, 0x3, 0x4}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x15, 0x3, 0x3ff, 0x8, 0x44180, r11, 0x8, '\x00', r12, r13, 0x1, 0x2, 0x1}, 0x50) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'lc\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 2.097994954s ago: executing program 0 (id=4019): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {0x0}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.01939741s ago: executing program 0 (id=4020): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x9, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b703000000000000850000006b00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff0000000000000000000485100000210000fb9500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) 1.704758771s ago: executing program 0 (id=4021): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "00df3cf7ff1000", "c950e928a0c40500000000cd36d4da9b680000000000468ba8435e0dbec05b4e", "06060065", "89b06aff130000fd"}, 0x38) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x30}, 0x4000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'rose0\x00'}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000006, 0x4ca31, 0xffffffffffffffff, 0xd1d1d000) 1.704194038s ago: executing program 1 (id=4022): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff, 0x1, 0x2, 0x3, 0x7, 0x7}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@multicast1}, 0x0, @in=@local}}, 0x9db) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_SET_BSS(r1, 0x0, 0x4000084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, 0x0, 0x0) r4 = socket(0xa, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x45) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x3}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x2}, {}, {0x4}}}, &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x90) socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x4c, r8, 0x1, 0x70bd2b, 0x4000, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xfffffffa}, {0x6, 0x11, 0xca}}]}, 0x4c}}, 0x4040000) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x10001, 0x0, r6, 0x7ea1, '\x00', r3, 0xffffffffffffffff, 0x3, 0x4}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x15, 0x3, 0x3ff, 0x8, 0x44180, r10, 0x8, '\x00', r11, r12, 0x1, 0x2, 0x1}, 0x50) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'lc\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 1.634588105s ago: executing program 4 (id=4023): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="93fc85ff30d22ecafcc67bf208004500002000000000002f907800000000e0000001320088000c907801e500"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r3}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffff5e, &(0x7f0000000000)='cgroup\x00'}, 0x30) accept4(r2, 0x0, &(0x7f0000000280), 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r6, 0x1, 0x70bd2b, 0xfffffffb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044000) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x44, r6, 0x300, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_pressure(r8, &(0x7f0000000240)='cpu.pressure\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0x40000000000004) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r10, 0x0, 0x3, &(0x7f0000000080), &(0x7f0000000140)=0x4) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) 1.167181689s ago: executing program 2 (id=4024): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.166281293s ago: executing program 4 (id=4025): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001c40)="b7", 0x1}], 0x1, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x840}], 0x1, 0x0) recvmsg$unix(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/96, 0x60}], 0x1}, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd25, 0xfffffffc, {0x1d, 0x1, 0x1}, [@CGW_MOD_AND={0x15, 0x1, {{{0x4, 0x1, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "0e5fa2e4e96119c1"}, 0x5}}, @CGW_CS_CRC8={0x11e, 0x6, {0x29, 0x13, 0x52, 0x1d, 0xc2, "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", 0x0, "e828d5e8a9feb93bb601066489af5d7888fe58de"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20008044}, 0xc000) 1.071699119s ago: executing program 1 (id=4026): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.028580517s ago: executing program 0 (id=4027): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c0000000d0a010e00000000000000c1130000000900010073797a30000000000900020073797a3200000000"], 0x2c}}, 0x0) 1.028044552s ago: executing program 2 (id=4028): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x18, 0x0, &(0x7f0000000040)) r1 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000080)) r4 = socket$inet6(0x2d, 0x2, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x24, 0x3, 0xa, 0x202, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x4000002) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r6, 0x0, 0x0, 0x40, &(0x7f0000000e00)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x2c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x5, 0x0, 0x0, 0xf, 0x0, 0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f00000006c0)=""/262, 0x2b, 0x106, 0x9}, 0x28) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r9, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e25, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000001440)="95", 0x1}], 0x1}}], 0x2, 0x20000004) shutdown(r9, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x6}, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) 1.027649224s ago: executing program 3 (id=4029): socket(0x1e, 0x4, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000"], 0xb8}}, 0x0) (fail_nth: 9) 876.541234ms ago: executing program 4 (id=4030): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {0x0}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 817.633159ms ago: executing program 0 (id=4031): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x9, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b703000000000000850000006b00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff0000000000000000000485100000210000fb9500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) 450.928819ms ago: executing program 3 (id=4032): socket$igmp(0x2, 0x3, 0x2) r0 = socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x23}}, &(0x7f0000000000)='GPL\x00'}, 0x94) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'erspan0\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x181341, 0x0) ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, 0x0) 373.162884ms ago: executing program 4 (id=4033): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$caif_stream(0x25, 0x1, 0x5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r1], 0x40}}, 0x0) 294.195273ms ago: executing program 1 (id=4034): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x41, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23, 0xa502}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20090}}}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x5c, 0x30, 0xb, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}}, 0x0) 293.129688ms ago: executing program 2 (id=4035): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r0, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8947, &(0x7f0000000580)={'bond0\x00', 0xfffd}) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x7fffe}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = accept4$packet(r0, 0x0, &(0x7f0000000200), 0x80800) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000280)={0x0, 0x1, 0x6}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711213000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$OBJ_GET_MAP(0x11, &(0x7f0000010f00)=@generic={&(0x7f0000000ec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 245.358733ms ago: executing program 3 (id=4036): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000380), 0x4) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000000020104f8000000000000000a000000040003800400028004000180"], 0x20}}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) write$tun(r7, &(0x7f0000000500)=ANY=[@ANYRESHEX=r4, @ANYRES64=r7, @ANYRESDEC, @ANYBLOB="a7baa24852092234ab17bd14d19eb7310a6c17f47fd88b98fda9e532d8e0866bb112a2c1039154b6584cb9e6f040c0e5b8e50315c36d8df6113c0e3e3b384768186da57689518aaece13f2af18ac0f5c6982fef1b0a75d5f3e75d57e81addaf4dbb433e1a9f4b91abc1494a32668c76fb71f7c4a01c4c6bcec09ffb382be1035767b644c007a78686dfb31057832d16191b301fb0ba0f2aba7fc0ea884d38e4a275b0d006a880a91fb0bb11d92746fccf40c030ec104588b841b7e3a5a23ac45aaeec0d422a284650e2b8d7c3b", @ANYRES16=r7, @ANYRES32=r1, @ANYRES8=r6], 0x18c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000280)={{0x2, 0x4e22, @multicast1}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x60, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 'ip6gretap0\x00'}) (async) r8 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r8, 0x5000940e, &(0x7f0000000f80)={{r9}, "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"}) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$team(&(0x7f0000000300), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000c40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010026bd7000fbdbdf250200000008000100", @ANYRES32=r13, @ANYBLOB="040002801efcca944b5aa07f70ec4eb601ea570bf5edaddef92a26c04ccabfd17555e27f7c93fb17c9e380c0aac0eb4c81c866b028f272c2b8"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x8000080) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095", @ANYRESHEX], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) sendmsg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) (async) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x8, 0xf, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r15}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xc2}}}, &(0x7f0000000280)='syzkaller\x00', 0x4}, 0x94) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r0}, 0xc) 202.600867ms ago: executing program 0 (id=4037): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x1}, 0x20) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x1, r2}, 0x10) 126.08424ms ago: executing program 2 (id=4038): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.151132ms ago: executing program 4 (id=4039): pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x8, 0x4000000, 0x0, 0x0, 0x400003}, 0x0, &(0x7f00000010c0)={0x2, 0x80000000, 0xa8cb, 0x0, 0xfffffffffffffffa, 0x5}, &(0x7f0000000300)={0x0, 0x989680}, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) (async) socket$netlink(0x10, 0x3, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async) close(0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000f10d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000300)="63bd9973e9b98600000000000000", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x894) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000300), 0x75, r2}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) (rerun: 64) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000010000000f000000080034000400030008000300", @ANYRES32=r6, @ANYBLOB="050033"], 0x2c}}, 0x80) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) nanosleep(&(0x7f0000000040)={r7, r8+10000000}, &(0x7f0000000080)) 0s ago: executing program 2 (id=4040): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x14, 0x3e, 0x301, 0x270bd26, 0x25dfdc00, {0x4}}, 0x14}}, 0x8004) kernel console output (not intermixed with test programs): 38][T19032] netlink: 'syz.4.3116': attribute type 4 has an invalid length. [ 715.263844][T19042] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3120'. [ 715.451279][T19045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3121'. [ 715.451758][T19046] openvswitch: netlink: IP tunnel dst address not specified [ 715.548793][T19045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3121'. [ 716.645225][T19058] IPVS: persistence engine module ip_vs_pe_ not found [ 717.003311][T19076] xt_CT: No such helper "snmp" [ 717.234085][T19088] netlink: 'syz.1.3137': attribute type 39 has an invalid length. [ 720.419489][T19108] netlink: 'syz.1.3145': attribute type 2 has an invalid length. [ 720.460026][T19111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 720.564522][T19113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 720.616467][T19113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 720.729592][T19113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 720.788939][T19113] dummy0: entered promiscuous mode [ 720.798944][T19113] vlan4: entered promiscuous mode [ 720.876660][T19126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 720.930708][T19125] tc_dump_action: action bad kind [ 721.310277][T19141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3158'. [ 721.310391][T19139] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3158'. [ 721.320405][T19141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3158'. [ 721.359410][T19141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3158'. [ 721.388027][T19141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3158'. [ 721.402097][T19139] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3158'. [ 721.438096][T19141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3158'. [ 721.476885][T19139] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3158'. [ 721.487262][T19139] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3158'. [ 721.501232][T19139] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3158'. [ 721.552307][T19149] Cannot find add_set index 4 as target [ 721.740323][T19157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 721.838984][T19157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 722.007008][T19157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 722.064512][T19157] dummy0: entered promiscuous mode [ 722.070112][T19157] vlan2: entered promiscuous mode [ 722.160796][T19161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 722.765924][T19194] netlink: 'syz.1.3180': attribute type 11 has an invalid length. [ 724.421825][T19219] netlink: 'syz.1.3187': attribute type 6 has an invalid length. [ 724.430307][T19219] netlink: 'syz.1.3187': attribute type 5 has an invalid length. [ 724.572630][T19222] netlink: 'syz.4.3189': attribute type 4 has an invalid length. [ 724.757025][T19232] netlink: 'syz.3.3190': attribute type 303 has an invalid length. [ 724.828306][T19233] netlink: 'syz.0.3191': attribute type 303 has an invalid length. [ 725.583782][T19244] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 726.361542][T19263] __nla_validate_parse: 54 callbacks suppressed [ 726.361565][T19263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3202'. [ 726.394895][T19260] lo speed is unknown, defaulting to 1000 [ 726.691618][T19273] FAULT_INJECTION: forcing a failure. [ 726.691618][T19273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.728572][T19273] CPU: 1 UID: 0 PID: 19273 Comm: syz.1.3206 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 726.728603][T19273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 726.728615][T19273] Call Trace: [ 726.728624][T19273] [ 726.728633][T19273] dump_stack_lvl+0x189/0x250 [ 726.728669][T19273] ? __pfx____ratelimit+0x10/0x10 [ 726.728693][T19273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 726.728723][T19273] ? __pfx__printk+0x10/0x10 [ 726.728759][T19273] should_fail_ex+0x414/0x560 [ 726.728790][T19273] _copy_from_user+0x2d/0xb0 [ 726.728811][T19273] get_user_ifreq+0x6c/0x180 [ 726.728836][T19273] inet_ioctl+0x38c/0x4c0 [ 726.728861][T19273] ? __pfx_inet_ioctl+0x10/0x10 [ 726.728902][T19273] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 726.728940][T19273] sock_do_ioctl+0xdc/0x300 [ 726.728964][T19273] ? __pfx_sock_do_ioctl+0x10/0x10 [ 726.728992][T19273] ? __lock_acquire+0xab9/0xd20 [ 726.729038][T19273] sock_ioctl+0x576/0x790 [ 726.729062][T19273] ? __pfx_sock_ioctl+0x10/0x10 [ 726.729083][T19273] ? __fget_files+0x2a/0x420 [ 726.729104][T19273] ? __fget_files+0x3a0/0x420 [ 726.729124][T19273] ? __fget_files+0x2a/0x420 [ 726.729148][T19273] ? bpf_lsm_file_ioctl+0x9/0x20 [ 726.729176][T19273] ? __pfx_sock_ioctl+0x10/0x10 [ 726.729196][T19273] __se_sys_ioctl+0xfc/0x170 [ 726.729227][T19273] do_syscall_64+0xfa/0x3b0 [ 726.729249][T19273] ? lockdep_hardirqs_on+0x9c/0x150 [ 726.729273][T19273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.729292][T19273] ? clear_bhb_loop+0x60/0xb0 [ 726.729314][T19273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.729332][T19273] RIP: 0033:0x7f8578b8e929 [ 726.729351][T19273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 726.729368][T19273] RSP: 002b:00007f8579a7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 726.729390][T19273] RAX: ffffffffffffffda RBX: 00007f8578db5fa0 RCX: 00007f8578b8e929 [ 726.729405][T19273] RDX: 0000200000000200 RSI: 0000000000008916 RDI: 0000000000000003 [ 726.729418][T19273] RBP: 00007f8579a7c090 R08: 0000000000000000 R09: 0000000000000000 [ 726.729431][T19273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.729443][T19273] R13: 0000000000000000 R14: 00007f8578db5fa0 R15: 00007fff767bb638 [ 726.729477][T19273] [ 727.022853][T19278] netlink: 'syz.2.3209': attribute type 1 has an invalid length. [ 727.030729][T19278] netlink: 'syz.2.3209': attribute type 2 has an invalid length. [ 727.170609][T19277] raw_sendmsg: syz.4.3207 forgot to set AF_INET. Fix it! [ 727.225818][T19283] lo speed is unknown, defaulting to 1000 [ 727.410747][T19259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 727.929028][T19306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3217'. [ 727.959620][T19308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3218'. [ 728.307488][T19318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3223'. [ 728.325284][T19318] bridge0: port 5(hsr1) entered disabled state [ 728.342596][T19319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.372782][T19319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.900089][T19332] bridge0: port 15(erspan0) entered blocking state [ 728.923425][T19332] bridge0: port 15(erspan0) entered disabled state [ 728.937133][T19332] erspan0: entered allmulticast mode [ 728.949202][T19332] erspan0: entered promiscuous mode [ 728.955927][T19332] bridge0: port 15(erspan0) entered blocking state [ 728.963404][T19332] bridge0: port 15(erspan0) entered forwarding state [ 729.038941][T19332] erspan0: left allmulticast mode [ 729.044043][T19332] erspan0: left promiscuous mode [ 729.090014][T19332] bridge0: port 15(erspan0) entered disabled state [ 729.171879][T19337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3229'. [ 730.036498][T19377] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3236'. [ 730.078676][T19377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3236'. [ 730.146886][T19378] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3233'. [ 730.181638][T19378] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3233'. [ 730.415538][T19378] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3233'. [ 730.476794][T19392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 730.495395][T19390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 730.499883][T19389] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 730.566280][T19392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 730.719474][T19397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 730.794505][T19392] vlan4: entered promiscuous mode [ 730.892209][T19397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 730.936449][T19402] FAULT_INJECTION: forcing a failure. [ 730.936449][T19402] name failslab, interval 1, probability 0, space 0, times 0 [ 730.978502][T19402] CPU: 0 UID: 0 PID: 19402 Comm: syz.4.3244 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 730.978534][T19402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 730.978547][T19402] Call Trace: [ 730.978555][T19402] [ 730.978563][T19402] dump_stack_lvl+0x189/0x250 [ 730.978597][T19402] ? __pfx____ratelimit+0x10/0x10 [ 730.978619][T19402] ? __pfx_dump_stack_lvl+0x10/0x10 [ 730.978646][T19402] ? __pfx__printk+0x10/0x10 [ 730.978672][T19402] ? __pfx___might_resched+0x10/0x10 [ 730.978714][T19402] should_fail_ex+0x414/0x560 [ 730.978743][T19402] should_failslab+0xa8/0x100 [ 730.978764][T19402] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 730.978783][T19402] ? __alloc_skb+0x112/0x2d0 [ 730.978811][T19402] __alloc_skb+0x112/0x2d0 [ 730.978840][T19402] netlink_sendmsg+0x5c6/0xb30 [ 730.978877][T19402] ? __pfx_netlink_sendmsg+0x10/0x10 [ 730.978908][T19402] ? aa_sock_msg_perm+0x94/0x160 [ 730.978935][T19402] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 730.978958][T19402] ? __pfx_netlink_sendmsg+0x10/0x10 [ 730.978985][T19402] __sock_sendmsg+0x21c/0x270 [ 730.979012][T19402] ____sys_sendmsg+0x505/0x830 [ 730.979047][T19402] ? __pfx_____sys_sendmsg+0x10/0x10 [ 730.979087][T19402] ? import_iovec+0x74/0xa0 [ 730.979112][T19402] ___sys_sendmsg+0x21f/0x2a0 [ 730.979144][T19402] ? __pfx____sys_sendmsg+0x10/0x10 [ 730.979218][T19402] ? __fget_files+0x2a/0x420 [ 730.979239][T19402] ? __fget_files+0x3a0/0x420 [ 730.979274][T19402] __x64_sys_sendmsg+0x19b/0x260 [ 730.979306][T19402] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 730.979346][T19402] ? __pfx_ksys_write+0x10/0x10 [ 730.979362][T19402] ? rcu_is_watching+0x15/0xb0 [ 730.979398][T19402] ? do_syscall_64+0xbe/0x3b0 [ 730.979427][T19402] do_syscall_64+0xfa/0x3b0 [ 730.979449][T19402] ? lockdep_hardirqs_on+0x9c/0x150 [ 730.979472][T19402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.979492][T19402] ? clear_bhb_loop+0x60/0xb0 [ 730.979517][T19402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.979536][T19402] RIP: 0033:0x7f915118e929 [ 730.979556][T19402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 730.979573][T19402] RSP: 002b:00007f9151f92038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 730.979596][T19402] RAX: ffffffffffffffda RBX: 00007f91513b5fa0 RCX: 00007f915118e929 [ 730.979611][T19402] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 730.979625][T19402] RBP: 00007f9151f92090 R08: 0000000000000000 R09: 0000000000000000 [ 730.979637][T19402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 730.979649][T19402] R13: 0000000000000000 R14: 00007f91513b5fa0 R15: 00007fff2f4d0c98 [ 730.979684][T19402] [ 731.501144][T19404] __nla_validate_parse: 3 callbacks suppressed [ 731.501165][T19404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3245'. [ 732.109158][T19432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.586349][T19443] lo speed is unknown, defaulting to 1000 [ 733.542257][T19482] netlink: 'syz.1.3276': attribute type 39 has an invalid length. [ 733.627309][T19443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3262'. [ 733.659827][T19487] netlink: 'syz.0.3277': attribute type 1 has an invalid length. [ 734.754041][T19519] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 734.791899][ T6525] lo speed is unknown, defaulting to 1000 [ 734.798122][ T6525] syz2: Port: 1 Link ACTIVE [ 734.897919][T19533] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3290'. [ 734.908162][T19533] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3290'. [ 734.923885][T19533] netlink: 'syz.3.3290': attribute type 6 has an invalid length. [ 734.932483][T19533] netlink: 'syz.3.3290': attribute type 5 has an invalid length. [ 734.945935][T19533] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3290'. [ 734.992421][T19533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3290'. [ 735.458156][T19549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3300'. [ 735.572085][T19544] lo speed is unknown, defaulting to 1000 [ 735.613501][T19549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3300'. [ 736.192692][T19577] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3309'. [ 736.227144][T19574] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3307'. [ 736.596016][T19574] __nla_validate_parse: 2 callbacks suppressed [ 736.596041][T19574] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3307'. [ 736.639844][T19578] lo speed is unknown, defaulting to 1000 [ 736.685243][T19574] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3307'. [ 736.791954][T19570] lo speed is unknown, defaulting to 1000 [ 737.190324][T19574] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3307'. [ 737.253056][T19574] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3307'. [ 737.352034][T19602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3317'. [ 737.521453][T19606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3317'. [ 737.655407][T19574] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3307'. [ 737.974629][T19616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 738.780623][T19642] FAULT_INJECTION: forcing a failure. [ 738.780623][T19642] name failslab, interval 1, probability 0, space 0, times 0 [ 738.848967][T19642] CPU: 0 UID: 0 PID: 19642 Comm: syz.2.3329 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 738.848998][T19642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 738.849011][T19642] Call Trace: [ 738.849019][T19642] [ 738.849029][T19642] dump_stack_lvl+0x189/0x250 [ 738.849063][T19642] ? __pfx____ratelimit+0x10/0x10 [ 738.849086][T19642] ? __pfx_dump_stack_lvl+0x10/0x10 [ 738.849115][T19642] ? __pfx__printk+0x10/0x10 [ 738.849155][T19642] should_fail_ex+0x414/0x560 [ 738.849185][T19642] should_failslab+0xa8/0x100 [ 738.849208][T19642] __kmalloc_cache_noprof+0x70/0x3d0 [ 738.849228][T19642] ? sctp_add_bind_addr+0x8c/0x370 [ 738.849256][T19642] sctp_add_bind_addr+0x8c/0x370 [ 738.849283][T19642] sctp_copy_local_addr_list+0x30b/0x4e0 [ 738.849311][T19642] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 738.849334][T19642] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 738.849362][T19642] ? sctp_v4_is_any+0x35/0x60 [ 738.849384][T19642] ? sctp_copy_one_addr+0x93/0x360 [ 738.849411][T19642] sctp_bind_addr_copy+0xb3/0x3c0 [ 738.849434][T19642] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 738.849469][T19642] sctp_connect_new_asoc+0x2e0/0x690 [ 738.849501][T19642] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 738.849525][T19642] ? __local_bh_enable_ip+0x12d/0x1c0 [ 738.849563][T19642] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 738.849589][T19642] ? security_sctp_bind_connect+0x7e/0x2e0 [ 738.849614][T19642] sctp_sendmsg+0x155c/0x2810 [ 738.849662][T19642] ? __pfx_sctp_sendmsg+0x10/0x10 [ 738.849702][T19642] ? aa_sk_perm+0x81e/0x950 [ 738.849731][T19642] ? __pfx_aa_sk_perm+0x10/0x10 [ 738.849759][T19642] ? sock_rps_record_flow+0x19/0x410 [ 738.849785][T19642] ? inet_sendmsg+0x2f4/0x370 [ 738.849812][T19642] __sock_sendmsg+0x19c/0x270 [ 738.849841][T19642] ____sys_sendmsg+0x52d/0x830 [ 738.849877][T19642] ? __pfx_____sys_sendmsg+0x10/0x10 [ 738.849917][T19642] ? import_iovec+0x74/0xa0 [ 738.849941][T19642] ___sys_sendmsg+0x21f/0x2a0 [ 738.849972][T19642] ? __pfx____sys_sendmsg+0x10/0x10 [ 738.850045][T19642] ? __fget_files+0x2a/0x420 [ 738.850066][T19642] ? __fget_files+0x3a0/0x420 [ 738.850100][T19642] __sys_sendmmsg+0x227/0x430 [ 738.850137][T19642] ? __pfx___sys_sendmmsg+0x10/0x10 [ 738.850162][T19642] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 738.850221][T19642] ? ksys_write+0x22a/0x250 [ 738.850244][T19642] ? __pfx_ksys_write+0x10/0x10 [ 738.850259][T19642] ? rcu_is_watching+0x15/0xb0 [ 738.850297][T19642] __x64_sys_sendmmsg+0xa0/0xc0 [ 738.850329][T19642] do_syscall_64+0xfa/0x3b0 [ 738.850352][T19642] ? lockdep_hardirqs_on+0x9c/0x150 [ 738.850375][T19642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.850394][T19642] ? clear_bhb_loop+0x60/0xb0 [ 738.850418][T19642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.850437][T19642] RIP: 0033:0x7fbe9578e929 [ 738.850455][T19642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 738.850471][T19642] RSP: 002b:00007fbe9651c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 738.850492][T19642] RAX: ffffffffffffffda RBX: 00007fbe959b5fa0 RCX: 00007fbe9578e929 [ 738.850506][T19642] RDX: 0000000000000001 RSI: 0000200000000f40 RDI: 0000000000000003 [ 738.850517][T19642] RBP: 00007fbe9651c090 R08: 0000000000000000 R09: 0000000000000000 [ 738.850529][T19642] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000000000002 [ 738.850540][T19642] R13: 0000000000000000 R14: 00007fbe959b5fa0 R15: 00007ffe8d4da6e8 [ 738.850575][T19642] [ 738.929643][T19650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3332'. [ 739.419077][T19668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3332'. [ 740.182135][T19710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 740.252476][T19704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 740.266376][T19716] FAULT_INJECTION: forcing a failure. [ 740.266376][T19716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.296932][T19709] lo speed is unknown, defaulting to 1000 [ 740.304428][T19713] netlink: 'syz.4.3344': attribute type 10 has an invalid length. [ 740.306940][T19716] CPU: 1 UID: 0 PID: 19716 Comm: syz.3.3345 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 740.306965][T19716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 740.306976][T19716] Call Trace: [ 740.306984][T19716] [ 740.306992][T19716] dump_stack_lvl+0x189/0x250 [ 740.307023][T19716] ? __pfx____ratelimit+0x10/0x10 [ 740.307044][T19716] ? __pfx_dump_stack_lvl+0x10/0x10 [ 740.307069][T19716] ? __pfx__printk+0x10/0x10 [ 740.307102][T19716] should_fail_ex+0x414/0x560 [ 740.307129][T19716] _copy_to_user+0x31/0xb0 [ 740.307150][T19716] simple_read_from_buffer+0xe1/0x170 [ 740.307174][T19716] proc_fail_nth_read+0x1df/0x250 [ 740.307200][T19716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 740.307224][T19716] ? rw_verify_area+0x258/0x650 [ 740.307249][T19716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 740.307271][T19716] vfs_read+0x1fd/0x980 [ 740.307302][T19716] ? __pfx___mutex_lock+0x10/0x10 [ 740.307324][T19716] ? __pfx_vfs_read+0x10/0x10 [ 740.307351][T19716] ? __fget_files+0x2a/0x420 [ 740.307374][T19716] ? __fget_files+0x3a0/0x420 [ 740.307392][T19716] ? __fget_files+0x2a/0x420 [ 740.307420][T19716] ksys_read+0x145/0x250 [ 740.307439][T19716] ? __pfx_ksys_read+0x10/0x10 [ 740.307470][T19716] ? do_syscall_64+0xbe/0x3b0 [ 740.307494][T19716] do_syscall_64+0xfa/0x3b0 [ 740.307514][T19716] ? lockdep_hardirqs_on+0x9c/0x150 [ 740.307533][T19716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.307550][T19716] ? clear_bhb_loop+0x60/0xb0 [ 740.307571][T19716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.307588][T19716] RIP: 0033:0x7fb5fe78d33c [ 740.307623][T19716] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 740.307638][T19716] RSP: 002b:00007fb5ff6a9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 740.307658][T19716] RAX: ffffffffffffffda RBX: 00007fb5fe9b5fa0 RCX: 00007fb5fe78d33c [ 740.307671][T19716] RDX: 000000000000000f RSI: 00007fb5ff6a90a0 RDI: 0000000000000005 [ 740.307682][T19716] RBP: 00007fb5ff6a9090 R08: 0000000000000000 R09: 0000000000000000 [ 740.307693][T19716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.307704][T19716] R13: 0000000000000000 R14: 00007fb5fe9b5fa0 R15: 00007fff51fdce08 [ 740.307734][T19716] [ 740.547982][T19722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 740.584120][T19713] openvswitch: netlink: Flow key attr not present in new flow. [ 740.597841][T19710] 8021q: VLANs not supported on nlmon0 [ 740.611374][T19724] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3346'. [ 740.620631][T19724] netlink: 'syz.2.3346': attribute type 6 has an invalid length. [ 740.628378][T19724] netlink: 'syz.2.3346': attribute type 5 has an invalid length. [ 740.672530][T19710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 740.767634][T19726] netlink: 'syz.2.3346': attribute type 16 has an invalid length. [ 741.859888][T19749] FAULT_INJECTION: forcing a failure. [ 741.859888][T19749] name failslab, interval 1, probability 0, space 0, times 0 [ 741.898584][T19749] CPU: 0 UID: 0 PID: 19749 Comm: syz.3.3357 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 741.898612][T19749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 741.898624][T19749] Call Trace: [ 741.898631][T19749] [ 741.898640][T19749] dump_stack_lvl+0x189/0x250 [ 741.898672][T19749] ? __pfx____ratelimit+0x10/0x10 [ 741.898693][T19749] ? __pfx_dump_stack_lvl+0x10/0x10 [ 741.898720][T19749] ? __pfx__printk+0x10/0x10 [ 741.898745][T19749] ? __pfx___might_resched+0x10/0x10 [ 741.898777][T19749] should_fail_ex+0x414/0x560 [ 741.898806][T19749] should_failslab+0xa8/0x100 [ 741.898828][T19749] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 741.898848][T19749] ? __alloc_skb+0x112/0x2d0 [ 741.898874][T19749] __alloc_skb+0x112/0x2d0 [ 741.898907][T19749] netlink_sendmsg+0x5c6/0xb30 [ 741.898936][T19749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 741.898959][T19749] ? aa_sock_msg_perm+0x94/0x160 [ 741.898982][T19749] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 741.899007][T19749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 741.899028][T19749] __sock_sendmsg+0x21c/0x270 [ 741.899049][T19749] ____sys_sendmsg+0x505/0x830 [ 741.899078][T19749] ? __pfx_____sys_sendmsg+0x10/0x10 [ 741.899109][T19749] ? import_iovec+0x74/0xa0 [ 741.899130][T19749] ___sys_sendmsg+0x21f/0x2a0 [ 741.899159][T19749] ? __pfx____sys_sendmsg+0x10/0x10 [ 741.899223][T19749] ? __fget_files+0x2a/0x420 [ 741.899242][T19749] ? __fget_files+0x3a0/0x420 [ 741.899272][T19749] __x64_sys_sendmsg+0x19b/0x260 [ 741.899303][T19749] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 741.899341][T19749] ? __pfx_ksys_write+0x10/0x10 [ 741.899357][T19749] ? rcu_is_watching+0x15/0xb0 [ 741.899390][T19749] ? do_syscall_64+0xbe/0x3b0 [ 741.899416][T19749] do_syscall_64+0xfa/0x3b0 [ 741.899437][T19749] ? lockdep_hardirqs_on+0x9c/0x150 [ 741.899460][T19749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.899479][T19749] ? clear_bhb_loop+0x60/0xb0 [ 741.899502][T19749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.899519][T19749] RIP: 0033:0x7fb5fe78e929 [ 741.899538][T19749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 741.899555][T19749] RSP: 002b:00007fb5ff6a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 741.899576][T19749] RAX: ffffffffffffffda RBX: 00007fb5fe9b5fa0 RCX: 00007fb5fe78e929 [ 741.899590][T19749] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 741.899601][T19749] RBP: 00007fb5ff6a9090 R08: 0000000000000000 R09: 0000000000000000 [ 741.899611][T19749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.899622][T19749] R13: 0000000000000000 R14: 00007fb5fe9b5fa0 R15: 00007fff51fdce08 [ 741.899652][T19749] [ 742.357405][T19757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 742.433160][T19757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 742.547264][T19768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 742.569669][T19765] __nla_validate_parse: 4 callbacks suppressed [ 742.569690][T19765] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3364'. [ 742.610104][T19757] dummy0: entered promiscuous mode [ 742.615421][T19757] vlan3: entered promiscuous mode [ 742.726042][T19768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 742.805902][T19774] xt_CT: No such helper "snmp" [ 742.845520][T19778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 742.898764][T19778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 743.019752][T19778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 743.086299][T19778] dummy0: entered promiscuous mode [ 743.092264][T19778] vlan2: entered promiscuous mode [ 743.164480][T19787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 743.381448][T19786] lo speed is unknown, defaulting to 1000 [ 743.487678][T19794] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3374'. [ 743.623214][T19796] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3375'. [ 743.655458][T19796] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3375'. [ 743.929790][T19796] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3375'. [ 743.980396][T19796] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3375'. [ 744.080637][T19809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 744.189554][T19811] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3379'. [ 744.683015][T19822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 744.835889][T19822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 744.861202][T19830] netlink: 'syz.2.3385': attribute type 1 has an invalid length. [ 744.883287][T19822] vlan3: entered promiscuous mode [ 744.934072][T19830] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3385'. [ 744.983130][T19835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.504920][T19853] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 745.694321][T19858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.822285][T19863] lo speed is unknown, defaulting to 1000 [ 745.834917][T19865] netlink: 'syz.3.3400': attribute type 13 has an invalid length. [ 746.516675][T19865] bridge0: port 6(hsr1) entered disabled state [ 746.825751][T19865] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 747.282587][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.294133][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.509191][T19865] batman_adv: batadv0: Interface deactivated: macsec1 [ 748.529645][T19865] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 748.882667][T19896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 748.967437][T19902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 749.119149][T19908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 749.302521][T19912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 749.386823][T19904] vlan2: entered promiscuous mode [ 749.562783][T19919] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3414'. [ 749.572539][T19919] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3414'. [ 749.581738][T19919] netlink: 'syz.3.3414': attribute type 6 has an invalid length. [ 749.592244][T19919] netlink: 'syz.3.3414': attribute type 5 has an invalid length. [ 749.600332][T19919] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3414'. [ 749.673907][T19920] netlink: 'syz.3.3414': attribute type 16 has an invalid length. [ 749.684941][T19920] netlink: 'syz.3.3414': attribute type 17 has an invalid length. [ 749.692917][T19920] netlink: 'syz.3.3414': attribute type 27 has an invalid length. [ 752.306112][T19943] lo: left promiscuous mode [ 752.457251][T19943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.467004][T19943] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.484666][T19943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 752.835316][T19962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.921255][T19962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 753.098616][T19962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 753.192444][T19962] vlan4: entered promiscuous mode [ 753.259926][T19965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 753.327879][T19979] tipc: Started in network mode [ 753.369069][T19979] tipc: Node identity , cluster identity 4711 [ 753.725552][T19987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 753.903651][T19987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 754.023813][T20000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3446'. [ 754.151509][T19987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 755.135806][T19995] lo speed is unknown, defaulting to 1000 [ 755.683023][T20030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3449'. [ 755.914459][T20036] lo speed is unknown, defaulting to 1000 [ 756.023020][T20043] FAULT_INJECTION: forcing a failure. [ 756.023020][T20043] name failslab, interval 1, probability 0, space 0, times 0 [ 756.056145][T20043] CPU: 1 UID: 0 PID: 20043 Comm: syz.4.3459 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 756.056177][T20043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 756.056189][T20043] Call Trace: [ 756.056198][T20043] [ 756.056208][T20043] dump_stack_lvl+0x189/0x250 [ 756.056243][T20043] ? __pfx____ratelimit+0x10/0x10 [ 756.056268][T20043] ? __pfx_dump_stack_lvl+0x10/0x10 [ 756.056298][T20043] ? __pfx__printk+0x10/0x10 [ 756.056324][T20043] ? __pfx___might_resched+0x10/0x10 [ 756.056353][T20043] ? fs_reclaim_acquire+0x7d/0x100 [ 756.056383][T20043] should_fail_ex+0x414/0x560 [ 756.056415][T20043] should_failslab+0xa8/0x100 [ 756.056439][T20043] __kmalloc_noprof+0xcb/0x4f0 [ 756.056458][T20043] ? tomoyo_encode+0x28b/0x550 [ 756.056491][T20043] tomoyo_encode+0x28b/0x550 [ 756.056525][T20043] tomoyo_realpath_from_path+0x58d/0x5d0 [ 756.056556][T20043] ? tomoyo_domain+0xd9/0x130 [ 756.056590][T20043] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 756.056615][T20043] tomoyo_path_number_perm+0x1e8/0x5a0 [ 756.056641][T20043] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 756.056687][T20043] ? __lock_acquire+0xab9/0xd20 [ 756.056738][T20043] ? __fget_files+0x2a/0x420 [ 756.056771][T20043] ? __fget_files+0x2a/0x420 [ 756.056791][T20043] ? __fget_files+0x3a0/0x420 [ 756.056811][T20043] ? __fget_files+0x2a/0x420 [ 756.056837][T20043] security_file_ioctl+0xcb/0x2d0 [ 756.056862][T20043] __se_sys_ioctl+0x47/0x170 [ 756.056892][T20043] do_syscall_64+0xfa/0x3b0 [ 756.056913][T20043] ? lockdep_hardirqs_on+0x9c/0x150 [ 756.056935][T20043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.056953][T20043] ? clear_bhb_loop+0x60/0xb0 [ 756.056977][T20043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.056994][T20043] RIP: 0033:0x7f915118e929 [ 756.057012][T20043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 756.057028][T20043] RSP: 002b:00007f9151f92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 756.057050][T20043] RAX: ffffffffffffffda RBX: 00007f91513b5fa0 RCX: 00007f915118e929 [ 756.057063][T20043] RDX: 0000200000000080 RSI: 00000000400448e7 RDI: 0000000000000004 [ 756.057076][T20043] RBP: 00007f9151f92090 R08: 0000000000000000 R09: 0000000000000000 [ 756.057088][T20043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.057106][T20043] R13: 0000000000000000 R14: 00007f91513b5fa0 R15: 00007fff2f4d0c98 [ 756.057142][T20043] [ 756.057239][T20043] ERROR: Out of memory at tomoyo_realpath_from_path. [ 756.665906][T20054] lo speed is unknown, defaulting to 1000 [ 757.716998][T20079] netlink: 'syz.3.3469': attribute type 4 has an invalid length. [ 757.803560][T20083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3470'. [ 758.570854][T20096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3472'. [ 759.233717][T20107] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3478'. [ 759.830304][T20131] netlink: 344 bytes leftover after parsing attributes in process `syz.2.3484'. [ 759.893616][T20130] lo speed is unknown, defaulting to 1000 [ 760.007997][T20141] netlink: 'syz.1.3487': attribute type 303 has an invalid length. [ 760.060011][T20141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3487'. [ 760.593871][T20153] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3493'. [ 760.735685][T20163] netlink: 'syz.1.3492': attribute type 4 has an invalid length. [ 760.760493][T20158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3493'. [ 760.944745][ T30] audit: type=1107 audit(1750931139.168:62): pid=20166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 761.535735][T20183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 761.702213][T20192] netlink: 'syz.4.3503': attribute type 303 has an invalid length. [ 761.809991][T20190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3503'. [ 762.283651][T20199] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3507'. [ 762.292814][T20199] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3507'. [ 762.378620][T20201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 762.503364][T20199] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3507'. [ 762.565581][T20199] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3507'. [ 762.586992][T20208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 762.683720][T20207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 763.333040][T20221] FAULT_INJECTION: forcing a failure. [ 763.333040][T20221] name failslab, interval 1, probability 0, space 0, times 0 [ 763.398652][T20221] CPU: 1 UID: 0 PID: 20221 Comm: syz.2.3513 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 763.398685][T20221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 763.398697][T20221] Call Trace: [ 763.398706][T20221] [ 763.398715][T20221] dump_stack_lvl+0x189/0x250 [ 763.398750][T20221] ? __pfx____ratelimit+0x10/0x10 [ 763.398775][T20221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 763.398804][T20221] ? __pfx__printk+0x10/0x10 [ 763.398828][T20221] ? __pfx___might_resched+0x10/0x10 [ 763.398857][T20221] ? fs_reclaim_acquire+0x7d/0x100 [ 763.398886][T20221] should_fail_ex+0x414/0x560 [ 763.398916][T20221] should_failslab+0xa8/0x100 [ 763.398939][T20221] kmem_cache_alloc_noprof+0x73/0x3c0 [ 763.398967][T20221] ? security_file_alloc+0x34/0x330 [ 763.398993][T20221] security_file_alloc+0x34/0x330 [ 763.399017][T20221] init_file+0x93/0x2f0 [ 763.399045][T20221] alloc_empty_file+0x6e/0x1d0 [ 763.399070][T20221] alloc_file_pseudo+0x13d/0x210 [ 763.399098][T20221] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 763.399120][T20221] ? evm_inode_alloc_security+0x40/0xb0 [ 763.399147][T20221] ? security_inode_alloc+0xd5/0x330 [ 763.399186][T20221] sock_alloc_file+0xb8/0x2e0 [ 763.399212][T20221] do_accept+0x34b/0x680 [ 763.399244][T20221] ? __pfx_do_accept+0x10/0x10 [ 763.399293][T20221] __sys_accept4+0x11c/0x1c0 [ 763.399321][T20221] ? __pfx___sys_accept4+0x10/0x10 [ 763.399346][T20221] ? __pfx_ksys_write+0x10/0x10 [ 763.399362][T20221] ? rcu_is_watching+0x15/0xb0 [ 763.399435][T20221] __x64_sys_accept4+0x9a/0xb0 [ 763.399462][T20221] do_syscall_64+0xfa/0x3b0 [ 763.399484][T20221] ? lockdep_hardirqs_on+0x9c/0x150 [ 763.399506][T20221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.399526][T20221] ? clear_bhb_loop+0x60/0xb0 [ 763.399549][T20221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.399569][T20221] RIP: 0033:0x7fbe9578e929 [ 763.399587][T20221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 763.399604][T20221] RSP: 002b:00007fbe9651c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 763.399626][T20221] RAX: ffffffffffffffda RBX: 00007fbe959b5fa0 RCX: 00007fbe9578e929 [ 763.399640][T20221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 763.399652][T20221] RBP: 00007fbe9651c090 R08: 0000000000000000 R09: 0000000000000000 [ 763.399669][T20221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.399681][T20221] R13: 0000000000000000 R14: 00007fbe959b5fa0 R15: 00007ffe8d4da6e8 [ 763.399714][T20221] [ 764.279411][T20242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3521'. [ 764.327973][T20243] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3520'. [ 764.349604][T20243] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3520'. [ 764.395947][T20246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3521'. [ 764.721431][T20261] netlink: 'syz.4.3524': attribute type 4 has an invalid length. [ 764.830421][T20257] netlink: 'syz.2.3525': attribute type 303 has an invalid length. [ 764.942890][T18495] lo speed is unknown, defaulting to 1000 [ 764.948911][T18495] syz2: Port: 1 Link DOWN [ 766.231868][T20292] FAULT_INJECTION: forcing a failure. [ 766.231868][T20292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 766.268869][T20292] CPU: 1 UID: 0 PID: 20292 Comm: syz.0.3537 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 766.268898][T20292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 766.268910][T20292] Call Trace: [ 766.268918][T20292] [ 766.268926][T20292] dump_stack_lvl+0x189/0x250 [ 766.268961][T20292] ? __pfx____ratelimit+0x10/0x10 [ 766.268985][T20292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 766.269012][T20292] ? __pfx__printk+0x10/0x10 [ 766.269033][T20292] ? __might_fault+0xb0/0x130 [ 766.269064][T20292] should_fail_ex+0x414/0x560 [ 766.269093][T20292] _copy_from_user+0x2d/0xb0 [ 766.269114][T20292] ___sys_sendmsg+0x158/0x2a0 [ 766.269146][T20292] ? __pfx____sys_sendmsg+0x10/0x10 [ 766.269215][T20292] ? __fget_files+0x2a/0x420 [ 766.269236][T20292] ? __fget_files+0x3a0/0x420 [ 766.269267][T20292] __x64_sys_sendmsg+0x19b/0x260 [ 766.269296][T20292] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 766.269335][T20292] ? __pfx_ksys_write+0x10/0x10 [ 766.269351][T20292] ? rcu_is_watching+0x15/0xb0 [ 766.269395][T20292] ? do_syscall_64+0xbe/0x3b0 [ 766.269424][T20292] do_syscall_64+0xfa/0x3b0 [ 766.269445][T20292] ? lockdep_hardirqs_on+0x9c/0x150 [ 766.269467][T20292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.269486][T20292] ? clear_bhb_loop+0x60/0xb0 [ 766.269510][T20292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.269528][T20292] RIP: 0033:0x7f821ad8e929 [ 766.269547][T20292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 766.269563][T20292] RSP: 002b:00007f821bb55038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 766.269584][T20292] RAX: ffffffffffffffda RBX: 00007f821afb5fa0 RCX: 00007f821ad8e929 [ 766.269598][T20292] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 766.269610][T20292] RBP: 00007f821bb55090 R08: 0000000000000000 R09: 0000000000000000 [ 766.269621][T20292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 766.269632][T20292] R13: 0000000000000000 R14: 00007f821afb5fa0 R15: 00007ffd818210e8 [ 766.269665][T20292] [ 766.733214][T20297] FAULT_INJECTION: forcing a failure. [ 766.733214][T20297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 766.746790][T20297] CPU: 1 UID: 0 PID: 20297 Comm: syz.1.3540 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 766.746819][T20297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 766.746830][T20297] Call Trace: [ 766.746839][T20297] [ 766.746848][T20297] dump_stack_lvl+0x189/0x250 [ 766.746884][T20297] ? __pfx____ratelimit+0x10/0x10 [ 766.746908][T20297] ? __pfx_dump_stack_lvl+0x10/0x10 [ 766.746937][T20297] ? __pfx__printk+0x10/0x10 [ 766.746959][T20297] ? __might_fault+0xb0/0x130 [ 766.746992][T20297] should_fail_ex+0x414/0x560 [ 766.747022][T20297] _copy_from_iter+0x1db/0x16f0 [ 766.747055][T20297] ? rcu_is_watching+0x15/0xb0 [ 766.747086][T20297] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 766.747108][T20297] ? __pfx__copy_from_iter+0x10/0x10 [ 766.747138][T20297] ? __build_skb_around+0x257/0x3e0 [ 766.747168][T20297] ? netlink_sendmsg+0x642/0xb30 [ 766.747192][T20297] ? skb_put+0x11b/0x210 [ 766.747222][T20297] netlink_sendmsg+0x6b2/0xb30 [ 766.747257][T20297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 766.747287][T20297] ? aa_sock_msg_perm+0x94/0x160 [ 766.747314][T20297] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 766.747339][T20297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 766.747391][T20297] __sock_sendmsg+0x21c/0x270 [ 766.747417][T20297] ____sys_sendmsg+0x505/0x830 [ 766.747453][T20297] ? __pfx_____sys_sendmsg+0x10/0x10 [ 766.747493][T20297] ? import_iovec+0x74/0xa0 [ 766.747517][T20297] ___sys_sendmsg+0x21f/0x2a0 [ 766.747548][T20297] ? __pfx____sys_sendmsg+0x10/0x10 [ 766.747619][T20297] ? __fget_files+0x2a/0x420 [ 766.747640][T20297] ? __fget_files+0x3a0/0x420 [ 766.747667][T20297] __x64_sys_sendmsg+0x19b/0x260 [ 766.747697][T20297] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 766.747736][T20297] ? __pfx_ksys_write+0x10/0x10 [ 766.747749][T20297] ? rcu_is_watching+0x15/0xb0 [ 766.747782][T20297] ? do_syscall_64+0xbe/0x3b0 [ 766.747810][T20297] do_syscall_64+0xfa/0x3b0 [ 766.747831][T20297] ? lockdep_hardirqs_on+0x9c/0x150 [ 766.747854][T20297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.747873][T20297] ? clear_bhb_loop+0x60/0xb0 [ 766.747895][T20297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.747915][T20297] RIP: 0033:0x7f8578b8e929 [ 766.747933][T20297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 766.747950][T20297] RSP: 002b:00007f8579a7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 766.747972][T20297] RAX: ffffffffffffffda RBX: 00007f8578db5fa0 RCX: 00007f8578b8e929 [ 766.747986][T20297] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 766.747998][T20297] RBP: 00007f8579a7c090 R08: 0000000000000000 R09: 0000000000000000 [ 766.748010][T20297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 766.748022][T20297] R13: 0000000000000000 R14: 00007f8578db5fa0 R15: 00007fff767bb638 [ 766.748056][T20297] [ 767.492640][T20321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.525283][T20321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.567290][T20325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 767.816783][T20333] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 767.847491][T20333] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 768.135342][T20351] __nla_validate_parse: 4 callbacks suppressed [ 768.135363][T20351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3556'. [ 768.458246][T20363] FAULT_INJECTION: forcing a failure. [ 768.458246][T20363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 768.491031][T20363] CPU: 1 UID: 0 PID: 20363 Comm: syz.4.3564 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 768.491063][T20363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 768.491074][T20363] Call Trace: [ 768.491083][T20363] [ 768.491093][T20363] dump_stack_lvl+0x189/0x250 [ 768.491134][T20363] ? __pfx____ratelimit+0x10/0x10 [ 768.491158][T20363] ? __pfx_dump_stack_lvl+0x10/0x10 [ 768.491188][T20363] ? __pfx__printk+0x10/0x10 [ 768.491225][T20363] should_fail_ex+0x414/0x560 [ 768.491256][T20363] strncpy_from_user+0x36/0x290 [ 768.491282][T20363] bpf_raw_tp_link_attach+0x1ea/0x6b0 [ 768.491309][T20363] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 768.491340][T20363] ? __fget_files+0x2a/0x420 [ 768.491372][T20363] bpf_raw_tracepoint_open+0x19b/0x1f0 [ 768.491404][T20363] __sys_bpf+0x3cd/0x860 [ 768.491432][T20363] ? __pfx___sys_bpf+0x10/0x10 [ 768.491474][T20363] ? ksys_write+0x22a/0x250 [ 768.491494][T20363] ? __pfx_ksys_write+0x10/0x10 [ 768.491510][T20363] ? rcu_is_watching+0x15/0xb0 [ 768.491545][T20363] __x64_sys_bpf+0x7c/0x90 [ 768.491570][T20363] do_syscall_64+0xfa/0x3b0 [ 768.491600][T20363] ? lockdep_hardirqs_on+0x9c/0x150 [ 768.491623][T20363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.491641][T20363] ? clear_bhb_loop+0x60/0xb0 [ 768.491664][T20363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.491681][T20363] RIP: 0033:0x7f915118e929 [ 768.491700][T20363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 768.491717][T20363] RSP: 002b:00007f9151f92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 768.491739][T20363] RAX: ffffffffffffffda RBX: 00007f91513b5fa0 RCX: 00007f915118e929 [ 768.491753][T20363] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000011 [ 768.491766][T20363] RBP: 00007f9151f92090 R08: 0000000000000000 R09: 0000000000000000 [ 768.491778][T20363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.491790][T20363] R13: 0000000000000000 R14: 00007f91513b5fa0 R15: 00007fff2f4d0c98 [ 768.491822][T20363] [ 768.930399][T20371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3567'. [ 768.969805][T20380] netlink: 'syz.4.3569': attribute type 303 has an invalid length. [ 769.130776][T20378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3569'. [ 769.176037][T20389] netlink: 'syz.3.3573': attribute type 1 has an invalid length. [ 769.192930][T20389] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3573'. [ 769.269555][T20395] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3573'. [ 769.585842][T20405] pim6reg: entered allmulticast mode [ 769.600554][T20407] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3581'. [ 769.625516][T20405] pim6reg: left allmulticast mode [ 769.714805][T20409] batadv_slave_1: entered promiscuous mode [ 769.755349][T20409] batadv41: entered allmulticast mode [ 769.770070][T20409] 8021q: adding VLAN 0 to HW filter on device batadv41 [ 769.878797][T20415] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 769.915013][T20408] batadv_slave_1: left promiscuous mode [ 770.817586][T20453] lo speed is unknown, defaulting to 1000 [ 770.822617][T20458] FAULT_INJECTION: forcing a failure. [ 770.822617][T20458] name failslab, interval 1, probability 0, space 0, times 0 [ 770.854356][T20458] CPU: 1 UID: 0 PID: 20458 Comm: syz.3.3601 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 770.854399][T20458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 770.854411][T20458] Call Trace: [ 770.854419][T20458] [ 770.854427][T20458] dump_stack_lvl+0x189/0x250 [ 770.854463][T20458] ? __pfx____ratelimit+0x10/0x10 [ 770.854486][T20458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 770.854513][T20458] ? __pfx__printk+0x10/0x10 [ 770.854549][T20458] should_fail_ex+0x414/0x560 [ 770.854581][T20458] should_failslab+0xa8/0x100 [ 770.854604][T20458] kmem_cache_alloc_noprof+0x73/0x3c0 [ 770.854632][T20458] ? __nf_conntrack_alloc+0x99/0x380 [ 770.854665][T20458] __nf_conntrack_alloc+0x99/0x380 [ 770.854706][T20458] init_conntrack+0x155/0xef0 [ 770.854732][T20458] ? __pfx_init_conntrack+0x10/0x10 [ 770.854756][T20458] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 770.854780][T20458] ? __local_bh_enable_ip+0x12d/0x1c0 [ 770.854808][T20458] ? __siphash_unaligned+0x232/0x3b0 [ 770.854839][T20458] nf_conntrack_in+0xbf2/0x1600 [ 770.854894][T20458] ? __pfx_nf_conntrack_in+0x10/0x10 [ 770.854935][T20458] ? ipt_do_table+0x2a3/0x1640 [ 770.854972][T20458] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 770.854991][T20458] ? ipv4_conntrack_local+0x126/0x210 [ 770.855014][T20458] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 770.855041][T20458] nf_hook_slow+0xc2/0x220 [ 770.855072][T20458] nf_hook+0x217/0x380 [ 770.855104][T20458] ? nf_hook+0x9d/0x380 [ 770.855130][T20458] ? __pfx_nf_hook+0x10/0x10 [ 770.855159][T20458] ? __pfx_dst_output+0x10/0x10 [ 770.855195][T20458] ? ip_fast_csum+0x1ee/0x2b0 [ 770.855217][T20458] __ip_local_out+0x4db/0x600 [ 770.855241][T20458] ? __pfx_dst_output+0x10/0x10 [ 770.855273][T20458] ip_send_skb+0x4a/0x100 [ 770.855294][T20458] udp_send_skb+0xaf1/0x14c0 [ 770.855339][T20458] udp_sendmsg+0x1962/0x2300 [ 770.855363][T20458] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 770.855406][T20458] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 770.855426][T20458] ? __pfx_udp_sendmsg+0x10/0x10 [ 770.855455][T20458] ? count_memcg_event_mm+0x21/0x260 [ 770.855491][T20458] ? __pfx___schedule+0x10/0x10 [ 770.855509][T20458] ? count_memcg_event_mm+0x21/0x260 [ 770.855560][T20458] ? sock_rps_record_flow+0x19/0x410 [ 770.855584][T20458] ? inet_sendmsg+0x29c/0x370 [ 770.855603][T20458] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 770.855630][T20458] __sock_sendmsg+0x19c/0x270 [ 770.855655][T20458] ____sys_sendmsg+0x52d/0x830 [ 770.855691][T20458] ? __pfx_____sys_sendmsg+0x10/0x10 [ 770.855730][T20458] ? import_iovec+0x74/0xa0 [ 770.855754][T20458] ___sys_sendmsg+0x21f/0x2a0 [ 770.855785][T20458] ? __pfx____sys_sendmsg+0x10/0x10 [ 770.855857][T20458] ? __fget_files+0x2a/0x420 [ 770.855878][T20458] ? __fget_files+0x3a0/0x420 [ 770.855911][T20458] __sys_sendmmsg+0x227/0x430 [ 770.855948][T20458] ? __pfx___sys_sendmmsg+0x10/0x10 [ 770.855972][T20458] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 770.856028][T20458] ? ksys_write+0x22a/0x250 [ 770.856048][T20458] ? __pfx_ksys_write+0x10/0x10 [ 770.856064][T20458] ? rcu_is_watching+0x15/0xb0 [ 770.856099][T20458] __x64_sys_sendmmsg+0xa0/0xc0 [ 770.856131][T20458] do_syscall_64+0xfa/0x3b0 [ 770.856153][T20458] ? lockdep_hardirqs_on+0x9c/0x150 [ 770.856174][T20458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.856193][T20458] ? clear_bhb_loop+0x60/0xb0 [ 770.856217][T20458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.856234][T20458] RIP: 0033:0x7fb5fe78e929 [ 770.856253][T20458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 770.856270][T20458] RSP: 002b:00007fb5ff6a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 770.856292][T20458] RAX: ffffffffffffffda RBX: 00007fb5fe9b5fa0 RCX: 00007fb5fe78e929 [ 770.856306][T20458] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 770.856320][T20458] RBP: 00007fb5ff6a9090 R08: 0000000000000000 R09: 0000000000000000 [ 770.856333][T20458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.856344][T20458] R13: 0000000000000000 R14: 00007fb5fe9b5fa0 R15: 00007fff51fdce08 [ 770.856395][T20458] [ 771.331591][T20462] FAULT_INJECTION: forcing a failure. [ 771.331591][T20462] name failslab, interval 1, probability 0, space 0, times 0 [ 771.403539][T20462] CPU: 1 UID: 0 PID: 20462 Comm: syz.4.3603 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 771.403579][T20462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 771.403591][T20462] Call Trace: [ 771.403599][T20462] [ 771.403608][T20462] dump_stack_lvl+0x189/0x250 [ 771.403643][T20462] ? __pfx____ratelimit+0x10/0x10 [ 771.403667][T20462] ? __pfx_dump_stack_lvl+0x10/0x10 [ 771.403696][T20462] ? __pfx__printk+0x10/0x10 [ 771.403721][T20462] ? __pfx___might_resched+0x10/0x10 [ 771.403752][T20462] ? fs_reclaim_acquire+0x7d/0x100 [ 771.403780][T20462] should_fail_ex+0x414/0x560 [ 771.403810][T20462] should_failslab+0xa8/0x100 [ 771.403834][T20462] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 771.403854][T20462] ? __alloc_skb+0x112/0x2d0 [ 771.403885][T20462] __alloc_skb+0x112/0x2d0 [ 771.403915][T20462] alloc_skb_with_frags+0xca/0x890 [ 771.403940][T20462] ? aa_label_sk_perm+0x413/0x560 [ 771.403967][T20462] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 771.403993][T20462] sock_alloc_send_pskb+0x857/0x990 [ 771.404032][T20462] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 771.404063][T20462] ? aa_sk_perm+0x81e/0x950 [ 771.404087][T20462] hci_sock_sendmsg+0x207/0xef0 [ 771.404120][T20462] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 771.404145][T20462] ? aa_sock_msg_perm+0x94/0x160 [ 771.404170][T20462] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 771.404192][T20462] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 771.404216][T20462] __sock_sendmsg+0x21c/0x270 [ 771.404240][T20462] sock_write_iter+0x258/0x330 [ 771.404263][T20462] ? __pfx_sock_write_iter+0x10/0x10 [ 771.404294][T20462] ? bpf_lsm_file_permission+0x9/0x20 [ 771.404318][T20462] ? security_file_permission+0x75/0x290 [ 771.404345][T20462] vfs_write+0x548/0xa90 [ 771.404374][T20462] ? __pfx_sock_write_iter+0x10/0x10 [ 771.404393][T20462] ? __pfx_vfs_write+0x10/0x10 [ 771.404432][T20462] ? __fget_files+0x2a/0x420 [ 771.404461][T20462] ksys_write+0x145/0x250 [ 771.404481][T20462] ? __pfx_ksys_write+0x10/0x10 [ 771.404496][T20462] ? rcu_is_watching+0x15/0xb0 [ 771.404529][T20462] ? do_syscall_64+0xbe/0x3b0 [ 771.404555][T20462] do_syscall_64+0xfa/0x3b0 [ 771.404584][T20462] ? lockdep_hardirqs_on+0x9c/0x150 [ 771.404605][T20462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.404624][T20462] ? clear_bhb_loop+0x60/0xb0 [ 771.404648][T20462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.404666][T20462] RIP: 0033:0x7f915118e929 [ 771.404683][T20462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.404700][T20462] RSP: 002b:00007f9151f92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 771.404722][T20462] RAX: ffffffffffffffda RBX: 00007f91513b5fa0 RCX: 00007f915118e929 [ 771.404736][T20462] RDX: 0000000000000007 RSI: 0000200000000140 RDI: 0000000000000004 [ 771.404748][T20462] RBP: 00007f9151f92090 R08: 0000000000000000 R09: 0000000000000000 [ 771.404760][T20462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.404771][T20462] R13: 0000000000000000 R14: 00007f91513b5fa0 R15: 00007fff2f4d0c98 [ 771.404804][T20462] [ 771.833561][T20471] team0: No ports can be present during mode change [ 772.036560][T20474] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 772.278622][T20489] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3608'. [ 772.497660][T20495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3614'. [ 772.515003][T20499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3615'. [ 772.530186][T20495] xt_TCPMSS: Only works on TCP SYN packets [ 772.600393][T20504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3615'. [ 773.858912][T20509] bond_slave_1: mtu less than device minimum [ 774.199567][T20530] __nla_validate_parse: 3 callbacks suppressed [ 774.199588][T20530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3627'. [ 774.853371][T20541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3629'. [ 774.900394][T20543] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3631'. [ 774.916837][T20545] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3629'. [ 774.927104][T20545] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3629'. [ 775.086428][T20545] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3629'. [ 775.096585][T20545] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3629'. [ 775.143266][T20551] netlink: 'syz.4.3634': attribute type 4 has an invalid length. [ 775.940664][T20582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3644'. [ 776.020442][T20584] gtp0: entered promiscuous mode [ 776.135709][T20588] FAULT_INJECTION: forcing a failure. [ 776.135709][T20588] name failslab, interval 1, probability 0, space 0, times 0 [ 776.174078][T20588] CPU: 0 UID: 0 PID: 20588 Comm: syz.2.3648 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 776.174108][T20588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 776.174121][T20588] Call Trace: [ 776.174130][T20588] [ 776.174139][T20588] dump_stack_lvl+0x189/0x250 [ 776.174172][T20588] ? __pfx____ratelimit+0x10/0x10 [ 776.174195][T20588] ? __pfx_dump_stack_lvl+0x10/0x10 [ 776.174225][T20588] ? __pfx__printk+0x10/0x10 [ 776.174261][T20588] should_fail_ex+0x414/0x560 [ 776.174290][T20588] should_failslab+0xa8/0x100 [ 776.174313][T20588] __kmalloc_cache_noprof+0x70/0x3d0 [ 776.174333][T20588] ? sctp_add_bind_addr+0x8c/0x370 [ 776.174359][T20588] sctp_add_bind_addr+0x8c/0x370 [ 776.174386][T20588] sctp_copy_local_addr_list+0x30b/0x4e0 [ 776.174412][T20588] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 776.174433][T20588] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 776.174458][T20588] ? sctp_v4_is_any+0x35/0x60 [ 776.174480][T20588] ? sctp_copy_one_addr+0x93/0x360 [ 776.174516][T20588] sctp_bind_addr_copy+0xb3/0x3c0 [ 776.174542][T20588] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 776.174575][T20588] sctp_connect_new_asoc+0x2e0/0x690 [ 776.174604][T20588] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 776.174629][T20588] ? __local_bh_enable_ip+0x12d/0x1c0 [ 776.174668][T20588] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 776.174692][T20588] ? security_sctp_bind_connect+0x7e/0x2e0 [ 776.174717][T20588] sctp_sendmsg+0x155c/0x2810 [ 776.174757][T20588] ? __pfx_sctp_sendmsg+0x10/0x10 [ 776.174786][T20588] ? aa_sk_perm+0x81e/0x950 [ 776.174812][T20588] ? __pfx_aa_sk_perm+0x10/0x10 [ 776.174837][T20588] ? sock_rps_record_flow+0x19/0x410 [ 776.174863][T20588] ? inet_sendmsg+0x2f4/0x370 [ 776.174888][T20588] __sock_sendmsg+0x19c/0x270 [ 776.174914][T20588] ____sys_sendmsg+0x52d/0x830 [ 776.174948][T20588] ? __pfx_____sys_sendmsg+0x10/0x10 [ 776.174987][T20588] ? import_iovec+0x74/0xa0 [ 776.175012][T20588] ___sys_sendmsg+0x21f/0x2a0 [ 776.175043][T20588] ? __pfx____sys_sendmsg+0x10/0x10 [ 776.175121][T20588] ? __fget_files+0x2a/0x420 [ 776.175142][T20588] ? __fget_files+0x3a0/0x420 [ 776.175176][T20588] __sys_sendmmsg+0x227/0x430 [ 776.175211][T20588] ? __pfx___sys_sendmmsg+0x10/0x10 [ 776.175235][T20588] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 776.175290][T20588] ? ksys_write+0x22a/0x250 [ 776.175312][T20588] ? __pfx_ksys_write+0x10/0x10 [ 776.175326][T20588] ? rcu_is_watching+0x15/0xb0 [ 776.175362][T20588] __x64_sys_sendmmsg+0xa0/0xc0 [ 776.175391][T20588] do_syscall_64+0xfa/0x3b0 [ 776.175414][T20588] ? lockdep_hardirqs_on+0x9c/0x150 [ 776.175434][T20588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.175454][T20588] ? clear_bhb_loop+0x60/0xb0 [ 776.175478][T20588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.175496][T20588] RIP: 0033:0x7fbe9578e929 [ 776.175526][T20588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 776.175543][T20588] RSP: 002b:00007fbe9651c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 776.175565][T20588] RAX: ffffffffffffffda RBX: 00007fbe959b5fa0 RCX: 00007fbe9578e929 [ 776.175579][T20588] RDX: 0000000000000001 RSI: 0000200000000f40 RDI: 0000000000000003 [ 776.175591][T20588] RBP: 00007fbe9651c090 R08: 0000000000000000 R09: 0000000000000000 [ 776.175603][T20588] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000000000002 [ 776.175615][T20588] R13: 0000000000000000 R14: 00007fbe959b5fa0 R15: 00007ffe8d4da6e8 [ 776.175650][T20588] [ 776.176907][T20592] FAULT_INJECTION: forcing a failure. [ 776.176907][T20592] name failslab, interval 1, probability 0, space 0, times 0 [ 776.539651][T20592] CPU: 1 UID: 0 PID: 20592 Comm: syz.1.3650 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 776.539683][T20592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 776.539696][T20592] Call Trace: [ 776.539705][T20592] [ 776.539714][T20592] dump_stack_lvl+0x189/0x250 [ 776.539750][T20592] ? __pfx____ratelimit+0x10/0x10 [ 776.539775][T20592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 776.539805][T20592] ? __pfx__printk+0x10/0x10 [ 776.539830][T20592] ? __pfx___might_resched+0x10/0x10 [ 776.539859][T20592] ? fs_reclaim_acquire+0x7d/0x100 [ 776.539889][T20592] should_fail_ex+0x414/0x560 [ 776.539920][T20592] should_failslab+0xa8/0x100 [ 776.539944][T20592] __kmalloc_noprof+0xcb/0x4f0 [ 776.539963][T20592] ? tomoyo_encode+0x28b/0x550 [ 776.539996][T20592] tomoyo_encode+0x28b/0x550 [ 776.540030][T20592] tomoyo_realpath_from_path+0x58d/0x5d0 [ 776.540060][T20592] ? tomoyo_domain+0xd9/0x130 [ 776.540095][T20592] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 776.540119][T20592] tomoyo_path_number_perm+0x1e8/0x5a0 [ 776.540146][T20592] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 776.540190][T20592] ? __lock_acquire+0xab9/0xd20 [ 776.540242][T20592] ? __fget_files+0x2a/0x420 [ 776.540304][T20592] ? __fget_files+0x2a/0x420 [ 776.540324][T20592] ? __fget_files+0x3a0/0x420 [ 776.540344][T20592] ? __fget_files+0x2a/0x420 [ 776.540371][T20592] security_file_ioctl+0xcb/0x2d0 [ 776.540398][T20592] __se_sys_ioctl+0x47/0x170 [ 776.540430][T20592] do_syscall_64+0xfa/0x3b0 [ 776.540453][T20592] ? lockdep_hardirqs_on+0x9c/0x150 [ 776.540477][T20592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.540497][T20592] ? clear_bhb_loop+0x60/0xb0 [ 776.540521][T20592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.540540][T20592] RIP: 0033:0x7f8578b8e929 [ 776.540558][T20592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 776.540575][T20592] RSP: 002b:00007f8579a7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 776.540598][T20592] RAX: ffffffffffffffda RBX: 00007f8578db5fa0 RCX: 00007f8578b8e929 [ 776.540612][T20592] RDX: 0000200000000380 RSI: 00000000400448e6 RDI: 0000000000000004 [ 776.540625][T20592] RBP: 00007f8579a7c090 R08: 0000000000000000 R09: 0000000000000000 [ 776.540636][T20592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.540648][T20592] R13: 0000000000000000 R14: 00007f8578db5fa0 R15: 00007fff767bb638 [ 776.540681][T20592] [ 776.540705][T20592] ERROR: Out of memory at tomoyo_realpath_from_path. [ 776.596974][T20597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 776.868587][T20601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 777.075316][T20599] vlan2: entered promiscuous mode [ 777.184665][T20601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 777.451540][T20621] FAULT_INJECTION: forcing a failure. [ 777.451540][T20621] name failslab, interval 1, probability 0, space 0, times 0 [ 777.489388][T20621] CPU: 1 UID: 0 PID: 20621 Comm: syz.0.3660 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 777.489418][T20621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 777.489428][T20621] Call Trace: [ 777.489437][T20621] [ 777.489446][T20621] dump_stack_lvl+0x189/0x250 [ 777.489481][T20621] ? __pfx____ratelimit+0x10/0x10 [ 777.489505][T20621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 777.489543][T20621] ? __pfx__printk+0x10/0x10 [ 777.489573][T20621] ? __pfx___might_resched+0x10/0x10 [ 777.489601][T20621] ? fs_reclaim_acquire+0x7d/0x100 [ 777.489631][T20621] should_fail_ex+0x414/0x560 [ 777.489663][T20621] should_failslab+0xa8/0x100 [ 777.489686][T20621] __kmalloc_noprof+0xcb/0x4f0 [ 777.489703][T20621] ? kfree+0x4d/0x440 [ 777.489727][T20621] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 777.489762][T20621] tomoyo_realpath_from_path+0xe3/0x5d0 [ 777.489790][T20621] ? tomoyo_domain+0xd9/0x130 [ 777.489825][T20621] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 777.489850][T20621] tomoyo_path_number_perm+0x1e8/0x5a0 [ 777.489877][T20621] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 777.489919][T20621] ? __lock_acquire+0xab9/0xd20 [ 777.489972][T20621] ? __fget_files+0x2a/0x420 [ 777.489998][T20621] ? __fget_files+0x2a/0x420 [ 777.490018][T20621] ? __fget_files+0x3a0/0x420 [ 777.490038][T20621] ? __fget_files+0x2a/0x420 [ 777.490065][T20621] security_file_ioctl+0xcb/0x2d0 [ 777.490091][T20621] __se_sys_ioctl+0x47/0x170 [ 777.490123][T20621] do_syscall_64+0xfa/0x3b0 [ 777.490145][T20621] ? lockdep_hardirqs_on+0x9c/0x150 [ 777.490168][T20621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.490187][T20621] ? clear_bhb_loop+0x60/0xb0 [ 777.490212][T20621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.490232][T20621] RIP: 0033:0x7f821ad8e929 [ 777.490251][T20621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 777.490266][T20621] RSP: 002b:00007f821bb55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 777.490288][T20621] RAX: ffffffffffffffda RBX: 00007f821afb5fa0 RCX: 00007f821ad8e929 [ 777.490303][T20621] RDX: 0000200000000080 RSI: 00000000400448e7 RDI: 0000000000000004 [ 777.490316][T20621] RBP: 00007f821bb55090 R08: 0000000000000000 R09: 0000000000000000 [ 777.490328][T20621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.490340][T20621] R13: 0000000000000000 R14: 00007f821afb5fa0 R15: 00007ffd818210e8 [ 777.490375][T20621] [ 777.490384][T20621] ERROR: Out of memory at tomoyo_realpath_from_path. [ 777.990211][T20631] FAULT_INJECTION: forcing a failure. [ 777.990211][T20631] name failslab, interval 1, probability 0, space 0, times 0 [ 778.026441][T20631] CPU: 1 UID: 0 PID: 20631 Comm: syz.0.3663 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 778.026474][T20631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 778.026486][T20631] Call Trace: [ 778.026495][T20631] [ 778.026504][T20631] dump_stack_lvl+0x189/0x250 [ 778.026538][T20631] ? __pfx____ratelimit+0x10/0x10 [ 778.026562][T20631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 778.026591][T20631] ? __pfx__printk+0x10/0x10 [ 778.026620][T20631] ? __pfx___might_resched+0x10/0x10 [ 778.026648][T20631] ? fs_reclaim_acquire+0x7d/0x100 [ 778.026678][T20631] should_fail_ex+0x414/0x560 [ 778.026708][T20631] should_failslab+0xa8/0x100 [ 778.026729][T20631] __kmalloc_noprof+0xcb/0x4f0 [ 778.026747][T20631] ? bpf_test_init+0xc2/0x170 [ 778.026773][T20631] bpf_test_init+0xc2/0x170 [ 778.026802][T20631] bpf_prog_test_run_xdp+0x37c/0x1000 [ 778.026845][T20631] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 778.026875][T20631] ? __fget_files+0x2a/0x420 [ 778.026904][T20631] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 778.026930][T20631] bpf_prog_test_run+0x2c4/0x340 [ 778.026962][T20631] __sys_bpf+0x4a4/0x860 [ 778.026990][T20631] ? __pfx___sys_bpf+0x10/0x10 [ 778.027031][T20631] ? ksys_write+0x22a/0x250 [ 778.027052][T20631] ? __pfx_ksys_write+0x10/0x10 [ 778.027069][T20631] ? rcu_is_watching+0x15/0xb0 [ 778.027107][T20631] __x64_sys_bpf+0x7c/0x90 [ 778.027131][T20631] do_syscall_64+0xfa/0x3b0 [ 778.027152][T20631] ? lockdep_hardirqs_on+0x9c/0x150 [ 778.027173][T20631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.027193][T20631] ? clear_bhb_loop+0x60/0xb0 [ 778.027217][T20631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.027257][T20631] RIP: 0033:0x7f821ad8e929 [ 778.027276][T20631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 778.027294][T20631] RSP: 002b:00007f821bb55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 778.027318][T20631] RAX: ffffffffffffffda RBX: 00007f821afb5fa0 RCX: 00007f821ad8e929 [ 778.027341][T20631] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 778.027354][T20631] RBP: 00007f821bb55090 R08: 0000000000000000 R09: 0000000000000000 [ 778.027367][T20631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.027379][T20631] R13: 0000000000000000 R14: 00007f821afb5fa0 R15: 00007ffd818210e8 [ 778.027412][T20631] [ 778.294085][T20634] FAULT_INJECTION: forcing a failure. [ 778.294085][T20634] name failslab, interval 1, probability 0, space 0, times 0 [ 778.328114][T20634] CPU: 0 UID: 0 PID: 20634 Comm: syz.2.3662 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 778.328147][T20634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 778.328160][T20634] Call Trace: [ 778.328168][T20634] [ 778.328177][T20634] dump_stack_lvl+0x189/0x250 [ 778.328212][T20634] ? __pfx____ratelimit+0x10/0x10 [ 778.328238][T20634] ? __pfx_dump_stack_lvl+0x10/0x10 [ 778.328268][T20634] ? __pfx__printk+0x10/0x10 [ 778.328298][T20634] ? ref_tracker_alloc+0x318/0x460 [ 778.328327][T20634] should_fail_ex+0x414/0x560 [ 778.328357][T20634] should_failslab+0xa8/0x100 [ 778.328386][T20634] kmem_cache_alloc_noprof+0x73/0x3c0 [ 778.328413][T20634] ? skb_clone+0x212/0x3a0 [ 778.328436][T20634] skb_clone+0x212/0x3a0 [ 778.328458][T20634] __netlink_deliver_tap+0x404/0x850 [ 778.328499][T20634] ? netlink_deliver_tap+0x2e/0x1b0 [ 778.328525][T20634] netlink_deliver_tap+0x19c/0x1b0 [ 778.328550][T20634] netlink_unicast+0x72f/0x8d0 [ 778.328599][T20634] netlink_sendmsg+0x805/0xb30 [ 778.328635][T20634] ? __pfx_netlink_sendmsg+0x10/0x10 [ 778.328665][T20634] ? aa_sock_msg_perm+0x94/0x160 [ 778.328693][T20634] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 778.328717][T20634] ? __pfx_netlink_sendmsg+0x10/0x10 [ 778.328742][T20634] __sock_sendmsg+0x21c/0x270 [ 778.328769][T20634] ____sys_sendmsg+0x505/0x830 [ 778.328805][T20634] ? __pfx_____sys_sendmsg+0x10/0x10 [ 778.328845][T20634] ? import_iovec+0x74/0xa0 [ 778.328869][T20634] ___sys_sendmsg+0x21f/0x2a0 [ 778.328902][T20634] ? __pfx____sys_sendmsg+0x10/0x10 [ 778.328974][T20634] ? __fget_files+0x2a/0x420 [ 778.328995][T20634] ? __fget_files+0x3a0/0x420 [ 778.329028][T20634] __x64_sys_sendmsg+0x19b/0x260 [ 778.329059][T20634] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 778.329100][T20634] ? __pfx_ksys_write+0x10/0x10 [ 778.329116][T20634] ? rcu_is_watching+0x15/0xb0 [ 778.329151][T20634] ? do_syscall_64+0xbe/0x3b0 [ 778.329179][T20634] do_syscall_64+0xfa/0x3b0 [ 778.329201][T20634] ? lockdep_hardirqs_on+0x9c/0x150 [ 778.329224][T20634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.329243][T20634] ? clear_bhb_loop+0x60/0xb0 [ 778.329268][T20634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.329287][T20634] RIP: 0033:0x7fbe9578e929 [ 778.329305][T20634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 778.329322][T20634] RSP: 002b:00007fbe9651c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 778.329343][T20634] RAX: ffffffffffffffda RBX: 00007fbe959b5fa0 RCX: 00007fbe9578e929 [ 778.329358][T20634] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 778.329371][T20634] RBP: 00007fbe9651c090 R08: 0000000000000000 R09: 0000000000000000 [ 778.329383][T20634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.329394][T20634] R13: 0000000000000000 R14: 00007fbe959b5fa0 R15: 00007ffe8d4da6e8 [ 778.329428][T20634] [ 778.837773][T20645] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3669'. [ 778.852635][T20645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3669'. [ 778.877021][T20645] geneve2: entered promiscuous mode [ 778.883379][T20645] geneve2: entered allmulticast mode [ 778.914540][ T1108] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 51565 - 0 [ 778.935380][ T1108] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 51565 - 0 [ 778.994176][T20646] netlink: 'syz.4.3664': attribute type 303 has an invalid length. [ 779.011102][ T1108] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 51565 - 0 [ 779.035256][T20651] FAULT_INJECTION: forcing a failure. [ 779.035256][T20651] name failslab, interval 1, probability 0, space 0, times 0 [ 779.078728][ T1108] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 51565 - 0 [ 779.098548][T20651] CPU: 0 UID: 0 PID: 20651 Comm: syz.2.3670 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 779.098591][T20651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 779.098603][T20651] Call Trace: [ 779.098612][T20651] [ 779.098621][T20651] dump_stack_lvl+0x189/0x250 [ 779.098653][T20651] ? __pfx____ratelimit+0x10/0x10 [ 779.098677][T20651] ? __pfx_dump_stack_lvl+0x10/0x10 [ 779.098705][T20651] ? __pfx__printk+0x10/0x10 [ 779.098727][T20651] ? crng_make_state+0x3fc/0x700 [ 779.098754][T20651] ? crng_make_state+0x13a/0x700 [ 779.098782][T20651] should_fail_ex+0x414/0x560 [ 779.098814][T20651] should_failslab+0xa8/0x100 [ 779.098837][T20651] __kmalloc_cache_noprof+0x70/0x3d0 [ 779.098857][T20651] ? sctp_add_bind_addr+0x8c/0x370 [ 779.098886][T20651] sctp_add_bind_addr+0x8c/0x370 [ 779.098913][T20651] sctp_copy_local_addr_list+0x30b/0x4e0 [ 779.098941][T20651] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 779.098964][T20651] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 779.098989][T20651] ? sctp_v6_is_any+0x64/0x80 [ 779.099015][T20651] ? sctp_copy_one_addr+0x93/0x360 [ 779.099042][T20651] sctp_bind_addr_copy+0xb3/0x3c0 [ 779.099066][T20651] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 779.099101][T20651] sctp_connect_new_asoc+0x2e0/0x690 [ 779.099132][T20651] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 779.099167][T20651] ? sctp_get_af_specific+0x29/0x80 [ 779.099188][T20651] ? sctp_inet6_send_verify+0x80/0x300 [ 779.099209][T20651] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 779.099241][T20651] __sctp_connect+0x5ba/0xd50 [ 779.099284][T20651] ? __pfx___sctp_connect+0x10/0x10 [ 779.099309][T20651] ? __local_bh_enable_ip+0x12d/0x1c0 [ 779.099336][T20651] ? lockdep_hardirqs_on+0x9c/0x150 [ 779.099362][T20651] ? __local_bh_enable_ip+0x12d/0x1c0 [ 779.099389][T20651] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 779.099416][T20651] ? security_sctp_bind_connect+0x7e/0x2e0 [ 779.099442][T20651] sctp_setsockopt_connectx+0x100/0x1b0 [ 779.099478][T20651] sctp_setsockopt+0x6d9/0x1200 [ 779.099504][T20651] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 779.099531][T20651] do_sock_setsockopt+0x257/0x3e0 [ 779.099562][T20651] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 779.099602][T20651] ? __fget_files+0x2a/0x420 [ 779.099634][T20651] __x64_sys_setsockopt+0x18b/0x220 [ 779.099666][T20651] do_syscall_64+0xfa/0x3b0 [ 779.099689][T20651] ? lockdep_hardirqs_on+0x9c/0x150 [ 779.099709][T20651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.099727][T20651] ? clear_bhb_loop+0x60/0xb0 [ 779.099752][T20651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.099770][T20651] RIP: 0033:0x7fbe9578e929 [ 779.099789][T20651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.099806][T20651] RSP: 002b:00007fbe9651c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 779.099828][T20651] RAX: ffffffffffffffda RBX: 00007fbe959b5fa0 RCX: 00007fbe9578e929 [ 779.099842][T20651] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 779.099855][T20651] RBP: 00007fbe9651c090 R08: 0000000000000010 R09: 0000000000000000 [ 779.099867][T20651] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000001 [ 779.099880][T20651] R13: 0000000000000000 R14: 00007fbe959b5fa0 R15: 00007ffe8d4da6e8 [ 779.099916][T20651] [ 779.704056][T20666] netlink: 'syz.3.3674': attribute type 10 has an invalid length. [ 780.084675][T20659] bridge0: port 5(hsr1) entered blocking state [ 780.091095][T20659] bridge0: port 5(hsr1) entered listening state [ 780.126372][T20659] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 780.980412][T20711] netlink: 'syz.0.3688': attribute type 303 has an invalid length. [ 781.017401][T20711] __nla_validate_parse: 2 callbacks suppressed [ 781.017423][T20711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3688'. [ 781.215720][T20709] lo speed is unknown, defaulting to 1000 [ 781.588334][T20722] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3692'. [ 781.624175][T20722] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3692'. [ 782.140297][T20751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 782.198014][T20746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 782.250756][T20746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 782.293399][T20746] vlan2: entered promiscuous mode [ 782.436879][T20764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 782.460233][T20765] netlink: 'syz.1.3705': attribute type 303 has an invalid length. [ 782.544313][T20763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3705'. [ 782.598785][T20767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3709'. [ 782.950866][T20784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3715'. [ 783.109513][T20786] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3717'. [ 783.134826][T20788] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3718'. [ 783.236344][T20795] x_tables: duplicate underflow at hook 1 [ 783.752167][T20815] FAULT_INJECTION: forcing a failure. [ 783.752167][T20815] name failslab, interval 1, probability 0, space 0, times 0 [ 783.773668][T20815] CPU: 0 UID: 0 PID: 20815 Comm: syz.1.3727 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 783.773699][T20815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 783.773711][T20815] Call Trace: [ 783.773720][T20815] [ 783.773729][T20815] dump_stack_lvl+0x189/0x250 [ 783.773764][T20815] ? __pfx____ratelimit+0x10/0x10 [ 783.773794][T20815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 783.773823][T20815] ? __pfx__printk+0x10/0x10 [ 783.773852][T20815] ? __pfx___might_resched+0x10/0x10 [ 783.773887][T20815] should_fail_ex+0x414/0x560 [ 783.773917][T20815] should_failslab+0xa8/0x100 [ 783.773941][T20815] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 783.773961][T20815] ? __alloc_skb+0x112/0x2d0 [ 783.773993][T20815] __alloc_skb+0x112/0x2d0 [ 783.774023][T20815] netlink_sendmsg+0x5c6/0xb30 [ 783.774061][T20815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 783.774091][T20815] ? aa_sock_msg_perm+0x94/0x160 [ 783.774118][T20815] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 783.774143][T20815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 783.774170][T20815] __sock_sendmsg+0x21c/0x270 [ 783.774204][T20815] ____sys_sendmsg+0x505/0x830 [ 783.774240][T20815] ? __pfx_____sys_sendmsg+0x10/0x10 [ 783.774279][T20815] ? import_iovec+0x74/0xa0 [ 783.774304][T20815] ___sys_sendmsg+0x21f/0x2a0 [ 783.774334][T20815] ? __pfx____sys_sendmsg+0x10/0x10 [ 783.774405][T20815] ? __fget_files+0x2a/0x420 [ 783.774426][T20815] ? __fget_files+0x3a0/0x420 [ 783.774459][T20815] __x64_sys_sendmsg+0x19b/0x260 [ 783.774491][T20815] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 783.774531][T20815] ? __pfx_ksys_write+0x10/0x10 [ 783.774546][T20815] ? rcu_is_watching+0x15/0xb0 [ 783.774580][T20815] ? do_syscall_64+0xbe/0x3b0 [ 783.774609][T20815] do_syscall_64+0xfa/0x3b0 [ 783.774631][T20815] ? lockdep_hardirqs_on+0x9c/0x150 [ 783.774653][T20815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.774672][T20815] ? clear_bhb_loop+0x60/0xb0 [ 783.774697][T20815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.774716][T20815] RIP: 0033:0x7f8578b8e929 [ 783.774734][T20815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 783.774752][T20815] RSP: 002b:00007f8579a7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 783.774774][T20815] RAX: ffffffffffffffda RBX: 00007f8578db5fa0 RCX: 00007f8578b8e929 [ 783.774789][T20815] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 783.774802][T20815] RBP: 00007f8579a7c090 R08: 0000000000000000 R09: 0000000000000000 [ 783.774814][T20815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.774826][T20815] R13: 0000000000000000 R14: 00007f8578db5fa0 R15: 00007fff767bb638 [ 783.774860][T20815] [ 784.397001][T20822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3730'. [ 784.402518][T20824] FAULT_INJECTION: forcing a failure. [ 784.402518][T20824] name failslab, interval 1, probability 0, space 0, times 0 [ 784.439414][T20824] CPU: 0 UID: 0 PID: 20824 Comm: syz.2.3734 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 784.439444][T20824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 784.439456][T20824] Call Trace: [ 784.439474][T20824] [ 784.439484][T20824] dump_stack_lvl+0x189/0x250 [ 784.439519][T20824] ? __pfx____ratelimit+0x10/0x10 [ 784.439543][T20824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 784.439572][T20824] ? __pfx__printk+0x10/0x10 [ 784.439602][T20824] ? ref_tracker_alloc+0x318/0x460 [ 784.439633][T20824] should_fail_ex+0x414/0x560 [ 784.439661][T20824] should_failslab+0xa8/0x100 [ 784.439682][T20824] kmem_cache_alloc_noprof+0x73/0x3c0 [ 784.439709][T20824] ? skb_clone+0x212/0x3a0 [ 784.439733][T20824] skb_clone+0x212/0x3a0 [ 784.439756][T20824] __netlink_deliver_tap+0x404/0x850 [ 784.439794][T20824] ? netlink_deliver_tap+0x2e/0x1b0 [ 784.439819][T20824] netlink_deliver_tap+0x19c/0x1b0 [ 784.439844][T20824] netlink_unicast+0x72f/0x8d0 [ 784.439877][T20824] netlink_sendmsg+0x805/0xb30 [ 784.439913][T20824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 784.439942][T20824] ? aa_sock_msg_perm+0x94/0x160 [ 784.439967][T20824] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 784.439991][T20824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 784.440015][T20824] __sock_sendmsg+0x21c/0x270 [ 784.440042][T20824] ____sys_sendmsg+0x505/0x830 [ 784.440078][T20824] ? __pfx_____sys_sendmsg+0x10/0x10 [ 784.440116][T20824] ? import_iovec+0x74/0xa0 [ 784.440141][T20824] ___sys_sendmsg+0x21f/0x2a0 [ 784.440171][T20824] ? __pfx____sys_sendmsg+0x10/0x10 [ 784.440239][T20824] ? __fget_files+0x2a/0x420 [ 784.440261][T20824] ? __fget_files+0x3a0/0x420 [ 784.440293][T20824] __x64_sys_sendmsg+0x19b/0x260 [ 784.440324][T20824] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 784.440360][T20824] ? __pfx_ksys_write+0x10/0x10 [ 784.440377][T20824] ? rcu_is_watching+0x15/0xb0 [ 784.440412][T20824] ? do_syscall_64+0xbe/0x3b0 [ 784.440441][T20824] do_syscall_64+0xfa/0x3b0 [ 784.440470][T20824] ? lockdep_hardirqs_on+0x9c/0x150 [ 784.440494][T20824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.440512][T20824] ? clear_bhb_loop+0x60/0xb0 [ 784.440536][T20824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.440554][T20824] RIP: 0033:0x7fbe9578e929 [ 784.440572][T20824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 784.440589][T20824] RSP: 002b:00007fbe9651c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 784.440612][T20824] RAX: ffffffffffffffda RBX: 00007fbe959b5fa0 RCX: 00007fbe9578e929 [ 784.440627][T20824] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 784.440641][T20824] RBP: 00007fbe9651c090 R08: 0000000000000000 R09: 0000000000000000 [ 784.440652][T20824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 784.440664][T20824] R13: 0000000000000000 R14: 00007fbe959b5fa0 R15: 00007ffe8d4da6e8 [ 784.440696][T20824] [ 784.974860][T20838] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3735'. [ 784.985799][T20838] netlink: 'syz.2.3735': attribute type 6 has an invalid length. [ 784.994579][T20838] netlink: 'syz.2.3735': attribute type 5 has an invalid length. [ 785.010162][T20838] netlink: 'syz.2.3735': attribute type 16 has an invalid length. [ 785.020539][T20838] netlink: 'syz.2.3735': attribute type 17 has an invalid length. [ 785.062755][T20838] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 786.016911][T20842] lo speed is unknown, defaulting to 1000 [ 786.565399][T20876] __nla_validate_parse: 8 callbacks suppressed [ 786.565420][T20876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3746'. [ 786.599682][T20877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3745'. [ 786.609101][T20877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3745'. [ 786.794434][T20877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3745'. [ 786.855070][T20877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3745'. [ 787.246577][T20877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3745'. [ 787.268586][T20877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3745'. [ 787.381857][T20901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3751'. [ 787.417828][T20901] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 787.476445][T20901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 787.525414][T20915] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3752'. [ 787.558786][T20915] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3752'. [ 787.612751][T20915] netlink: 'syz.0.3752': attribute type 6 has an invalid length. [ 787.677124][T20915] netlink: 'syz.0.3752': attribute type 5 has an invalid length. [ 787.725221][T20909] netlink: 'syz.0.3752': attribute type 16 has an invalid length. [ 787.789475][T20909] netlink: 'syz.0.3752': attribute type 17 has an invalid length. [ 787.848198][T20909] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 788.099143][T20931] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 788.148721][T20931] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7) [ 788.228898][T20935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 788.342813][T20935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 788.443527][T20935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 788.668693][T20952] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 789.059011][T20973] netlink: 'syz.3.3773': attribute type 6 has an invalid length. [ 789.066925][T20973] netlink: 'syz.3.3773': attribute type 5 has an invalid length. [ 789.121643][T20973] netlink: 'syz.3.3773': attribute type 16 has an invalid length. [ 789.130304][T20973] netlink: 'syz.3.3773': attribute type 17 has an invalid length. [ 792.053211][T20973] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 792.325975][T20995] netlink: 'syz.4.3784': attribute type 1 has an invalid length. [ 792.411633][T20992] __nla_validate_parse: 7 callbacks suppressed [ 792.411655][T20992] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3783'. [ 793.396751][T21010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3788'. [ 793.656185][T21016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3788'. [ 794.914698][T21000] netlink: 'syz.0.3785': attribute type 10 has an invalid length. [ 794.925290][T20991] lo speed is unknown, defaulting to 1000 [ 795.011241][T20993] lo speed is unknown, defaulting to 1000 [ 795.115270][T21019] netlink: 'syz.1.3789': attribute type 13 has an invalid length. [ 795.174978][T21026] netlink: 'syz.1.3789': attribute type 1 has an invalid length. [ 795.378350][T21032] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3792'. [ 795.391345][T21032] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3792'. [ 795.401478][T21032] netlink: 'syz.2.3792': attribute type 6 has an invalid length. [ 795.409756][T21032] netlink: 'syz.2.3792': attribute type 5 has an invalid length. [ 795.417745][T21032] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3792'. [ 795.444594][T21019] bridge0: port 7(hsr1) entered disabled state [ 795.492150][T21033] netlink: 'syz.2.3792': attribute type 16 has an invalid length. [ 795.500381][T21033] netlink: 'syz.2.3792': attribute type 17 has an invalid length. [ 797.098131][T21033] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 797.616794][T21063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3799'. [ 797.685729][T21052] lo speed is unknown, defaulting to 1000 [ 797.777917][T21063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3799'. [ 797.872941][T21056] lo speed is unknown, defaulting to 1000 [ 798.587284][T21085] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3806'. [ 798.597949][T21085] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3806'. [ 798.607332][T21085] netlink: 'syz.2.3806': attribute type 6 has an invalid length. [ 798.615613][T21085] netlink: 'syz.2.3806': attribute type 5 has an invalid length. [ 798.623475][T21085] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3806'. [ 798.639361][T21085] netlink: 'syz.2.3806': attribute type 16 has an invalid length. [ 798.656812][T21085] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 799.151817][T21092] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3810'. [ 799.184087][T21092] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3810'. [ 799.277645][T21097] FAULT_INJECTION: forcing a failure. [ 799.277645][T21097] name failslab, interval 1, probability 0, space 0, times 0 [ 799.318652][T21097] CPU: 1 UID: 0 PID: 21097 Comm: syz.0.3812 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 799.318683][T21097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 799.318695][T21097] Call Trace: [ 799.318704][T21097] [ 799.318713][T21097] dump_stack_lvl+0x189/0x250 [ 799.318748][T21097] ? __pfx____ratelimit+0x10/0x10 [ 799.318772][T21097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 799.318802][T21097] ? __pfx__printk+0x10/0x10 [ 799.318842][T21097] should_fail_ex+0x414/0x560 [ 799.318873][T21097] should_failslab+0xa8/0x100 [ 799.318896][T21097] __kmalloc_cache_noprof+0x70/0x3d0 [ 799.318917][T21097] ? sctp_add_bind_addr+0x8c/0x370 [ 799.318945][T21097] sctp_add_bind_addr+0x8c/0x370 [ 799.318972][T21097] sctp_copy_local_addr_list+0x30b/0x4e0 [ 799.319000][T21097] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 799.319023][T21097] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 799.319048][T21097] ? sctp_v6_is_any+0x64/0x80 [ 799.319082][T21097] ? sctp_copy_one_addr+0x93/0x360 [ 799.319109][T21097] sctp_bind_addr_copy+0xb3/0x3c0 [ 799.319133][T21097] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 799.319168][T21097] sctp_connect_new_asoc+0x2e0/0x690 [ 799.319200][T21097] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 799.319234][T21097] ? sctp_get_af_specific+0x29/0x80 [ 799.319256][T21097] ? sctp_inet6_send_verify+0x80/0x300 [ 799.319277][T21097] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 799.319308][T21097] __sctp_connect+0x5ba/0xd50 [ 799.319348][T21097] ? __pfx___sctp_connect+0x10/0x10 [ 799.319372][T21097] ? __local_bh_enable_ip+0x12d/0x1c0 [ 799.319400][T21097] ? lockdep_hardirqs_on+0x9c/0x150 [ 799.319425][T21097] ? __local_bh_enable_ip+0x12d/0x1c0 [ 799.319451][T21097] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 799.319476][T21097] ? security_sctp_bind_connect+0x7e/0x2e0 [ 799.319502][T21097] sctp_setsockopt_connectx+0x100/0x1b0 [ 799.319537][T21097] sctp_setsockopt+0x6d9/0x1200 [ 799.319563][T21097] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 799.319589][T21097] do_sock_setsockopt+0x257/0x3e0 [ 799.319621][T21097] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 799.319654][T21097] ? __fget_files+0x2a/0x420 [ 799.319688][T21097] __x64_sys_setsockopt+0x18b/0x220 [ 799.319721][T21097] do_syscall_64+0xfa/0x3b0 [ 799.319743][T21097] ? lockdep_hardirqs_on+0x9c/0x150 [ 799.319765][T21097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.319785][T21097] ? clear_bhb_loop+0x60/0xb0 [ 799.319809][T21097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.319828][T21097] RIP: 0033:0x7f821ad8e929 [ 799.319847][T21097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 799.319863][T21097] RSP: 002b:00007f821bb55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 799.319885][T21097] RAX: ffffffffffffffda RBX: 00007f821afb5fa0 RCX: 00007f821ad8e929 [ 799.319899][T21097] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 799.319911][T21097] RBP: 00007f821bb55090 R08: 0000000000000010 R09: 0000000000000000 [ 799.319923][T21097] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000001 [ 799.319935][T21097] R13: 0000000000000000 R14: 00007f821afb5fa0 R15: 00007ffd818210e8 [ 799.319969][T21097] [ 799.779960][T21102] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3814'. [ 800.239041][T21122] validate_nla: 1 callbacks suppressed [ 800.239071][T21122] netlink: 'syz.3.3821': attribute type 1 has an invalid length. [ 800.240178][T21124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3822'. [ 800.251064][T21122] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3821'. [ 800.422430][T21129] netlink: 'syz.1.3823': attribute type 6 has an invalid length. [ 800.455661][T21129] netlink: 'syz.1.3823': attribute type 5 has an invalid length. [ 800.489123][T21129] netlink: 'syz.1.3823': attribute type 16 has an invalid length. [ 800.497661][T21129] netlink: 'syz.1.3823': attribute type 17 has an invalid length. [ 800.574499][T21129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.583354][T21129] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.596922][T21129] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 800.724461][T21136] netlink: 'syz.4.3824': attribute type 39 has an invalid length. [ 801.068231][T21152] FAULT_INJECTION: forcing a failure. [ 801.068231][T21152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 801.126474][T21152] CPU: 0 UID: 0 PID: 21152 Comm: syz.2.3832 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 801.126504][T21152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 801.126516][T21152] Call Trace: [ 801.126524][T21152] [ 801.126533][T21152] dump_stack_lvl+0x189/0x250 [ 801.126567][T21152] ? __pfx____ratelimit+0x10/0x10 [ 801.126590][T21152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 801.126618][T21152] ? __pfx__printk+0x10/0x10 [ 801.126639][T21152] ? __might_fault+0xb0/0x130 [ 801.126673][T21152] should_fail_ex+0x414/0x560 [ 801.126702][T21152] _copy_from_iter+0x1db/0x16f0 [ 801.126736][T21152] ? rcu_is_watching+0x15/0xb0 [ 801.126766][T21152] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 801.126789][T21152] ? __pfx__copy_from_iter+0x10/0x10 [ 801.126819][T21152] ? __build_skb_around+0x257/0x3e0 [ 801.126849][T21152] ? netlink_sendmsg+0x642/0xb30 [ 801.126872][T21152] ? skb_put+0x11b/0x210 [ 801.126908][T21152] netlink_sendmsg+0x6b2/0xb30 [ 801.126942][T21152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 801.126971][T21152] ? aa_sock_msg_perm+0x94/0x160 [ 801.126998][T21152] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 801.127040][T21152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 801.127075][T21152] __sock_sendmsg+0x21c/0x270 [ 801.127101][T21152] ____sys_sendmsg+0x505/0x830 [ 801.127136][T21152] ? __pfx_____sys_sendmsg+0x10/0x10 [ 801.127177][T21152] ? import_iovec+0x74/0xa0 [ 801.127202][T21152] ___sys_sendmsg+0x21f/0x2a0 [ 801.127234][T21152] ? __pfx____sys_sendmsg+0x10/0x10 [ 801.127301][T21152] ? __fget_files+0x2a/0x420 [ 801.127322][T21152] ? __fget_files+0x3a0/0x420 [ 801.127354][T21152] __x64_sys_sendmsg+0x19b/0x260 [ 801.127384][T21152] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 801.127428][T21152] ? rcu_is_watching+0x15/0xb0 [ 801.127454][T21152] ? trace_sys_enter+0x25/0x120 [ 801.127487][T21152] do_syscall_64+0xfa/0x3b0 [ 801.127509][T21152] ? lockdep_hardirqs_on+0x9c/0x150 [ 801.127531][T21152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.127550][T21152] ? clear_bhb_loop+0x60/0xb0 [ 801.127573][T21152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.127591][T21152] RIP: 0033:0x7fbe9578e929 [ 801.127610][T21152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 801.127626][T21152] RSP: 002b:00007fbe9651c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 801.127647][T21152] RAX: ffffffffffffffda RBX: 00007fbe959b5fa0 RCX: 00007fbe9578e929 [ 801.127661][T21152] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 801.127674][T21152] RBP: 00007fbe9651c090 R08: 0000000000000000 R09: 0000000000000000 [ 801.127685][T21152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 801.127697][T21152] R13: 0000000000000000 R14: 00007fbe959b5fa0 R15: 00007ffe8d4da6e8 [ 801.127730][T21152] [ 801.897628][T21173] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 801.926882][T21174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.941512][T21174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 802.005366][T21174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 802.331642][T21190] netlink: 'syz.3.3844': attribute type 6 has an invalid length. [ 802.339675][T21190] netlink: 'syz.3.3844': attribute type 5 has an invalid length. [ 802.350837][T21190] netlink: 'syz.3.3844': attribute type 16 has an invalid length. [ 802.359267][T21190] netlink: 'syz.3.3844': attribute type 17 has an invalid length. [ 802.385977][T21190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 802.543727][T21193] geneve0: entered promiscuous mode [ 802.549748][T21193] geneve0: entered allmulticast mode [ 802.556760][T21193] team0: Port device geneve0 added [ 802.564877][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.595192][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.610830][T21196] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 802.613726][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.653157][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.122806][T21210] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 803.175832][T21214] FAULT_INJECTION: forcing a failure. [ 803.175832][T21214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 803.197811][T21214] CPU: 0 UID: 0 PID: 21214 Comm: syz.4.3853 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 803.197842][T21214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 803.197854][T21214] Call Trace: [ 803.197862][T21214] [ 803.197872][T21214] dump_stack_lvl+0x189/0x250 [ 803.197907][T21214] ? __pfx____ratelimit+0x10/0x10 [ 803.197931][T21214] ? __pfx_dump_stack_lvl+0x10/0x10 [ 803.197960][T21214] ? __pfx__printk+0x10/0x10 [ 803.198006][T21214] should_fail_ex+0x414/0x560 [ 803.198037][T21214] _copy_to_user+0x31/0xb0 [ 803.198062][T21214] simple_read_from_buffer+0xe1/0x170 [ 803.198090][T21214] proc_fail_nth_read+0x1df/0x250 [ 803.198118][T21214] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 803.198144][T21214] ? rw_verify_area+0x258/0x650 [ 803.198173][T21214] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 803.198198][T21214] vfs_read+0x1fd/0x980 [ 803.198232][T21214] ? __pfx___mutex_lock+0x10/0x10 [ 803.198256][T21214] ? __pfx_vfs_read+0x10/0x10 [ 803.198293][T21214] ? __fget_files+0x2a/0x420 [ 803.198319][T21214] ? __fget_files+0x3a0/0x420 [ 803.198338][T21214] ? __fget_files+0x2a/0x420 [ 803.198376][T21214] ksys_read+0x145/0x250 [ 803.198392][T21214] ? __fget_files+0x2a/0x420 [ 803.198414][T21214] ? __pfx_ksys_read+0x10/0x10 [ 803.198447][T21214] ? do_syscall_64+0xbe/0x3b0 [ 803.198476][T21214] do_syscall_64+0xfa/0x3b0 [ 803.198498][T21214] ? lockdep_hardirqs_on+0x9c/0x150 [ 803.198520][T21214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.198540][T21214] ? clear_bhb_loop+0x60/0xb0 [ 803.198565][T21214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.198584][T21214] RIP: 0033:0x7f915118d33c [ 803.198603][T21214] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 803.198620][T21214] RSP: 002b:00007f9151f92030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 803.198643][T21214] RAX: ffffffffffffffda RBX: 00007f91513b5fa0 RCX: 00007f915118d33c [ 803.198656][T21214] RDX: 000000000000000f RSI: 00007f9151f920a0 RDI: 0000000000000004 [ 803.198668][T21214] RBP: 00007f9151f92090 R08: 0000000000000000 R09: 0000000000000000 [ 803.198680][T21214] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 803.198693][T21214] R13: 0000000000000000 R14: 00007f91513b5fa0 R15: 00007fff2f4d0c98 [ 803.198726][T21214] [ 803.574827][T21221] __nla_validate_parse: 11 callbacks suppressed [ 803.574850][T21221] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3855'. [ 804.060926][T21239] FAULT_INJECTION: forcing a failure. [ 804.060926][T21239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 804.118665][T21239] CPU: 1 UID: 0 PID: 21239 Comm: syz.0.3863 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 804.118696][T21239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 804.118709][T21239] Call Trace: [ 804.118718][T21239] [ 804.118727][T21239] dump_stack_lvl+0x189/0x250 [ 804.118763][T21239] ? __pfx____ratelimit+0x10/0x10 [ 804.118788][T21239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 804.118817][T21239] ? __pfx__printk+0x10/0x10 [ 804.118840][T21239] ? __might_fault+0xb0/0x130 [ 804.118873][T21239] should_fail_ex+0x414/0x560 [ 804.118903][T21239] _copy_from_user+0x2d/0xb0 [ 804.118925][T21239] ___sys_sendmsg+0x158/0x2a0 [ 804.118957][T21239] ? __pfx____sys_sendmsg+0x10/0x10 [ 804.119036][T21239] ? __fget_files+0x2a/0x420 [ 804.119058][T21239] ? __fget_files+0x3a0/0x420 [ 804.119091][T21239] __x64_sys_sendmsg+0x19b/0x260 [ 804.119124][T21239] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 804.119163][T21239] ? __pfx_ksys_write+0x10/0x10 [ 804.119179][T21239] ? rcu_is_watching+0x15/0xb0 [ 804.119214][T21239] ? do_syscall_64+0xbe/0x3b0 [ 804.119243][T21239] do_syscall_64+0xfa/0x3b0 [ 804.119265][T21239] ? lockdep_hardirqs_on+0x9c/0x150 [ 804.119287][T21239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.119307][T21239] ? clear_bhb_loop+0x60/0xb0 [ 804.119332][T21239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.119351][T21239] RIP: 0033:0x7f821ad8e929 [ 804.119369][T21239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 804.119387][T21239] RSP: 002b:00007f821bb55038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 804.119409][T21239] RAX: ffffffffffffffda RBX: 00007f821afb5fa0 RCX: 00007f821ad8e929 [ 804.119424][T21239] RDX: 000000000000c000 RSI: 0000200000000100 RDI: 0000000000000003 [ 804.119437][T21239] RBP: 00007f821bb55090 R08: 0000000000000000 R09: 0000000000000000 [ 804.119449][T21239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 804.119462][T21239] R13: 0000000000000000 R14: 00007f821afb5fa0 R15: 00007ffd818210e8 [ 804.119495][T21239] [ 804.513620][T21243] netem: incorrect ge model size [ 804.522596][T21243] netem: change failed [ 804.553106][T21248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3868'. [ 804.554938][T21249] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3865'. [ 804.600300][T21249] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3865'. [ 804.624516][T21249] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3865'. [ 804.677442][T21251] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 804.759692][ T1212] lo speed is unknown, defaulting to 1000 [ 804.765551][ T1212] syz2: Port: 1 Link ACTIVE [ 805.111483][T21268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3875'. [ 805.163808][T21268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3875'. [ 805.723688][T21284] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 805.905881][T21289] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 805.961895][T21289] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 805.992424][T21295] validate_nla: 6 callbacks suppressed [ 805.992444][T21295] netlink: 'syz.0.3886': attribute type 1 has an invalid length. [ 806.026529][T21295] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3886'. [ 806.059031][T21295] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3886'. [ 806.301945][T21306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3891'. [ 806.387874][T21315] netlink: 'syz.3.3889': attribute type 6 has an invalid length. [ 806.396169][T21315] netlink: 'syz.3.3889': attribute type 5 has an invalid length. [ 806.410310][T21315] netlink: 'syz.3.3889': attribute type 16 has an invalid length. [ 806.418296][T21315] netlink: 'syz.3.3889': attribute type 17 has an invalid length. [ 806.462259][T21315] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 806.817420][T21326] netlink: 'syz.2.3895': attribute type 2 has an invalid length. [ 806.971416][T21330] netlink: 'syz.2.3895': attribute type 2 has an invalid length. [ 807.044668][T21329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 807.279321][T21340] FAULT_INJECTION: forcing a failure. [ 807.279321][T21340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 807.359899][T21340] CPU: 0 UID: 0 PID: 21340 Comm: syz.0.3901 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 807.359931][T21340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 807.359943][T21340] Call Trace: [ 807.359952][T21340] [ 807.359962][T21340] dump_stack_lvl+0x189/0x250 [ 807.359995][T21340] ? __pfx____ratelimit+0x10/0x10 [ 807.360019][T21340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 807.360050][T21340] ? __pfx__printk+0x10/0x10 [ 807.360088][T21340] should_fail_ex+0x414/0x560 [ 807.360119][T21340] _copy_from_user+0x2d/0xb0 [ 807.360141][T21340] __copy_msghdr+0x3c5/0x5b0 [ 807.360175][T21340] ___sys_sendmsg+0x1a5/0x2a0 [ 807.360207][T21340] ? __pfx____sys_sendmsg+0x10/0x10 [ 807.360288][T21340] ? __fget_files+0x2a/0x420 [ 807.360310][T21340] ? __fget_files+0x3a0/0x420 [ 807.360345][T21340] __sys_sendmmsg+0x227/0x430 [ 807.360381][T21340] ? __pfx___sys_sendmmsg+0x10/0x10 [ 807.360407][T21340] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 807.360463][T21340] ? ksys_write+0x22a/0x250 [ 807.360485][T21340] ? __pfx_ksys_write+0x10/0x10 [ 807.360501][T21340] ? rcu_is_watching+0x15/0xb0 [ 807.360538][T21340] __x64_sys_sendmmsg+0xa0/0xc0 [ 807.360568][T21340] do_syscall_64+0xfa/0x3b0 [ 807.360592][T21340] ? lockdep_hardirqs_on+0x9c/0x150 [ 807.360615][T21340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.360635][T21340] ? clear_bhb_loop+0x60/0xb0 [ 807.360660][T21340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.360679][T21340] RIP: 0033:0x7f821ad8e929 [ 807.360699][T21340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 807.360716][T21340] RSP: 002b:00007f821bb55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 807.360740][T21340] RAX: ffffffffffffffda RBX: 00007f821afb5fa0 RCX: 00007f821ad8e929 [ 807.360754][T21340] RDX: 0000000000000001 RSI: 0000200000004580 RDI: 0000000000000003 [ 807.360768][T21340] RBP: 00007f821bb55090 R08: 0000000000000000 R09: 0000000000000000 [ 807.360780][T21340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.360792][T21340] R13: 0000000000000000 R14: 00007f821afb5fa0 R15: 00007ffd818210e8 [ 807.360825][T21340] [ 807.642310][T21346] x_tables: ip_tables: ah match: only valid for protocol 51 [ 807.687453][T21347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 807.999004][T21351] lo speed is unknown, defaulting to 1000 [ 808.344287][T21364] netlink: 'syz.4.3909': attribute type 6 has an invalid length. [ 808.352388][T21364] netlink: 'syz.4.3909': attribute type 5 has an invalid length. [ 808.367474][T21364] netlink: 'syz.4.3909': attribute type 16 has an invalid length. [ 808.735196][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.742055][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.825720][T21364] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 809.942559][T21400] __nla_validate_parse: 8 callbacks suppressed [ 809.942583][T21400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3920'. [ 810.081910][T21404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3922'. [ 810.642899][ C1] bridge0: port 5(hsr1) entered learning state [ 810.882351][T21409] infiniband syz0: set active [ 810.889593][T21409] infiniband syz0: added team0 [ 810.988239][T21409] RDS/IB: syz0: added [ 810.997378][T21409] smc: adding ib device syz0 with port count 1 [ 811.025835][T21409] smc: ib device syz0 port 1 has pnetid [ 811.632490][T21438] validate_nla: 3 callbacks suppressed [ 811.632512][T21438] netlink: 'syz.2.3931': attribute type 20 has an invalid length. [ 811.762764][T21447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3934'. [ 811.886243][T21444] IPVS: persistence engine module ip_vs_pe_ not found [ 812.784453][T21472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 812.920638][T21476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 813.077939][T21477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 814.786959][T21476] vlan4: entered promiscuous mode [ 815.153176][T21489] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3947'. [ 815.310405][T21494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3950'. [ 815.412541][T21499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3952'. [ 815.588225][T21507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3952'. [ 816.121433][T21517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3957'. [ 816.215326][T21519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 816.257229][T21519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 816.978938][T21548] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 817.480655][T21554] netlink: 'syz.3.3970': attribute type 303 has an invalid length. [ 817.523927][T21554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3970'. [ 817.599977][T21555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3969'. [ 818.619552][T21577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 818.716730][T21580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3981'. [ 818.880043][T21586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 818.894846][T21586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 819.055266][T21593] FAULT_INJECTION: forcing a failure. [ 819.055266][T21593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 819.070633][T21593] CPU: 1 UID: 0 PID: 21593 Comm: syz.2.3984 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 819.070662][T21593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 819.070674][T21593] Call Trace: [ 819.070683][T21593] [ 819.070691][T21593] dump_stack_lvl+0x189/0x250 [ 819.070725][T21593] ? __pfx____ratelimit+0x10/0x10 [ 819.070747][T21593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 819.070775][T21593] ? __pfx__printk+0x10/0x10 [ 819.070796][T21593] ? __might_fault+0xb0/0x130 [ 819.070828][T21593] should_fail_ex+0x414/0x560 [ 819.070857][T21593] _copy_from_user+0x2d/0xb0 [ 819.070877][T21593] get_timespec64+0x8e/0x1a0 [ 819.070903][T21593] ? __pfx_get_timespec64+0x10/0x10 [ 819.070937][T21593] __x64_sys_recvmmsg+0x143/0x240 [ 819.070961][T21593] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 819.070977][T21593] ? rcu_is_watching+0x15/0xb0 [ 819.071010][T21593] ? do_syscall_64+0xbe/0x3b0 [ 819.071037][T21593] do_syscall_64+0xfa/0x3b0 [ 819.071059][T21593] ? lockdep_hardirqs_on+0x9c/0x150 [ 819.071081][T21593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.071100][T21593] ? clear_bhb_loop+0x60/0xb0 [ 819.071125][T21593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.071144][T21593] RIP: 0033:0x7fbe9578e929 [ 819.071163][T21593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.071179][T21593] RSP: 002b:00007fbe9651c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 819.071209][T21593] RAX: ffffffffffffffda RBX: 00007fbe959b5fa0 RCX: 00007fbe9578e929 [ 819.071222][T21593] RDX: 00000000000001ca RSI: 00002000000037c0 RDI: 0000000000000003 [ 819.071235][T21593] RBP: 00007fbe9651c090 R08: 0000200000003700 R09: 0000000000000000 [ 819.071248][T21593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.071260][T21593] R13: 0000000000000000 R14: 00007fbe959b5fa0 R15: 00007ffe8d4da6e8 [ 819.071290][T21593] [ 819.693113][T21613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3991'. [ 820.264212][T21637] netlink: 'syz.3.4001': attribute type 11 has an invalid length. [ 820.519221][T21656] netlink: 'syz.1.4002': attribute type 3 has an invalid length. [ 820.623808][T21659] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 820.875456][T21669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4010'. [ 821.003495][T21675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 821.066197][T21675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 821.196965][T21682] FAULT_INJECTION: forcing a failure. [ 821.196965][T21682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 821.241333][T21682] CPU: 0 UID: 0 PID: 21682 Comm: syz.1.4017 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 821.241365][T21682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 821.241378][T21682] Call Trace: [ 821.241386][T21682] [ 821.241395][T21682] dump_stack_lvl+0x189/0x250 [ 821.241430][T21682] ? __pfx____ratelimit+0x10/0x10 [ 821.241454][T21682] ? __pfx_dump_stack_lvl+0x10/0x10 [ 821.241484][T21682] ? __pfx__printk+0x10/0x10 [ 821.241519][T21682] should_fail_ex+0x414/0x560 [ 821.241551][T21682] _copy_to_user+0x31/0xb0 [ 821.241573][T21682] simple_read_from_buffer+0xe1/0x170 [ 821.241602][T21682] proc_fail_nth_read+0x1df/0x250 [ 821.241630][T21682] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 821.241657][T21682] ? rw_verify_area+0x258/0x650 [ 821.241686][T21682] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 821.241709][T21682] vfs_read+0x1fd/0x980 [ 821.241739][T21682] ? __pfx___mutex_lock+0x10/0x10 [ 821.241760][T21682] ? __pfx_vfs_read+0x10/0x10 [ 821.241786][T21682] ? __fget_files+0x2a/0x420 [ 821.241809][T21682] ? __fget_files+0x3a0/0x420 [ 821.241825][T21682] ? __fget_files+0x2a/0x420 [ 821.241852][T21682] ksys_read+0x145/0x250 [ 821.241870][T21682] ? __pfx_ksys_read+0x10/0x10 [ 821.241891][T21682] ? rcu_is_watching+0x15/0xb0 [ 821.241921][T21682] ? do_syscall_64+0xbe/0x3b0 [ 821.241945][T21682] do_syscall_64+0xfa/0x3b0 [ 821.241964][T21682] ? lockdep_hardirqs_on+0x9c/0x150 [ 821.241986][T21682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.242006][T21682] ? clear_bhb_loop+0x60/0xb0 [ 821.242030][T21682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.242050][T21682] RIP: 0033:0x7f8578b8d33c [ 821.242068][T21682] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 821.242085][T21682] RSP: 002b:00007f8579a7c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 821.242115][T21682] RAX: ffffffffffffffda RBX: 00007f8578db5fa0 RCX: 00007f8578b8d33c [ 821.242129][T21682] RDX: 000000000000000f RSI: 00007f8579a7c0a0 RDI: 0000000000000004 [ 821.242140][T21682] RBP: 00007f8579a7c090 R08: 0000000000000000 R09: 0000000000000000 [ 821.242152][T21682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.242164][T21682] R13: 0000000000000000 R14: 00007f8578db5fa0 R15: 00007fff767bb638 [ 821.242196][T21682] [ 821.756747][T21701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4023'. [ 821.869178][T21706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4023'. [ 822.350153][T21721] FAULT_INJECTION: forcing a failure. [ 822.350153][T21721] name failslab, interval 1, probability 0, space 0, times 0 [ 822.438607][T21721] CPU: 1 UID: 0 PID: 21721 Comm: syz.3.4029 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 822.438640][T21721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 822.438653][T21721] Call Trace: [ 822.438662][T21721] [ 822.438671][T21721] dump_stack_lvl+0x189/0x250 [ 822.438707][T21721] ? __pfx____ratelimit+0x10/0x10 [ 822.438731][T21721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 822.438759][T21721] ? __pfx__printk+0x10/0x10 [ 822.438799][T21721] should_fail_ex+0x414/0x560 [ 822.438831][T21721] should_failslab+0xa8/0x100 [ 822.438855][T21721] kmem_cache_alloc_noprof+0x73/0x3c0 [ 822.438885][T21721] ? skb_clone+0x212/0x3a0 [ 822.438918][T21721] skb_clone+0x212/0x3a0 [ 822.438941][T21721] __netlink_deliver_tap+0x404/0x850 [ 822.438983][T21721] ? netlink_deliver_tap+0x2e/0x1b0 [ 822.439010][T21721] netlink_deliver_tap+0x19c/0x1b0 [ 822.439035][T21721] netlink_sendskb+0x68/0x140 [ 822.439061][T21721] netlink_rcv_skb+0x28c/0x470 [ 822.439087][T21721] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 822.439116][T21721] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 822.439159][T21721] ? netlink_deliver_tap+0x2e/0x1b0 [ 822.439182][T21721] ? netlink_deliver_tap+0x2e/0x1b0 [ 822.439209][T21721] xfrm_netlink_rcv+0x79/0x90 [ 822.439235][T21721] netlink_unicast+0x758/0x8d0 [ 822.439272][T21721] netlink_sendmsg+0x805/0xb30 [ 822.439308][T21721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.439338][T21721] ? aa_sock_msg_perm+0x94/0x160 [ 822.439365][T21721] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 822.439388][T21721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.439415][T21721] __sock_sendmsg+0x21c/0x270 [ 822.439441][T21721] ____sys_sendmsg+0x505/0x830 [ 822.439476][T21721] ? __pfx_____sys_sendmsg+0x10/0x10 [ 822.439514][T21721] ? import_iovec+0x74/0xa0 [ 822.439537][T21721] ___sys_sendmsg+0x21f/0x2a0 [ 822.439569][T21721] ? __pfx____sys_sendmsg+0x10/0x10 [ 822.439642][T21721] ? __fget_files+0x2a/0x420 [ 822.439662][T21721] ? __fget_files+0x3a0/0x420 [ 822.439695][T21721] __x64_sys_sendmsg+0x19b/0x260 [ 822.439726][T21721] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 822.439760][T21721] ? __pfx_ksys_write+0x10/0x10 [ 822.439776][T21721] ? rcu_is_watching+0x15/0xb0 [ 822.439817][T21721] ? do_syscall_64+0xbe/0x3b0 [ 822.439846][T21721] do_syscall_64+0xfa/0x3b0 [ 822.439868][T21721] ? lockdep_hardirqs_on+0x9c/0x150 [ 822.439900][T21721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.439921][T21721] ? clear_bhb_loop+0x60/0xb0 [ 822.439945][T21721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.439964][T21721] RIP: 0033:0x7fb5fe78e929 [ 822.439983][T21721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 822.440000][T21721] RSP: 002b:00007fb5ff6a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 822.440023][T21721] RAX: ffffffffffffffda RBX: 00007fb5fe9b5fa0 RCX: 00007fb5fe78e929 [ 822.440038][T21721] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 822.440050][T21721] RBP: 00007fb5ff6a9090 R08: 0000000000000000 R09: 0000000000000000 [ 822.440063][T21721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.440075][T21721] R13: 0000000000000000 R14: 00007fb5fe9b5fa0 R15: 00007fff51fdce08 [ 822.440109][T21721] [ 822.986566][T21733] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4035'. [ 823.002751][T21733] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4035'. [ 823.020939][T21733] bridge0: entered promiscuous mode [ 823.028352][T21733] ip6gretap0: entered promiscuous mode [ 823.258868][T19691] [ 823.261261][T19691] ============================================ [ 823.267419][T19691] WARNING: possible recursive locking detected [ 823.273571][T19691] 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 Not tainted [ 823.280679][T19691] -------------------------------------------- [ 823.286837][T19691] kworker/u8:18/19691 is trying to acquire lock: [ 823.293159][T19691] ffff8880546b4f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 823.302238][T19691] [ 823.302238][T19691] but task is already holding lock: [ 823.309596][T19691] ffff888028994f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 823.318645][T19691] [ 823.318645][T19691] other info that might help us debug this: [ 823.326706][T19691] Possible unsafe locking scenario: [ 823.326706][T19691] [ 823.334160][T19691] CPU0 [ 823.337436][T19691] ---- [ 823.340736][T19691] lock(&hsr->seqnr_lock); [ 823.345238][T19691] lock(&hsr->seqnr_lock); [ 823.349739][T19691] [ 823.349739][T19691] *** DEADLOCK *** [ 823.349739][T19691] [ 823.357877][T19691] May be due to missing lock nesting notation [ 823.357877][T19691] [ 823.366190][T19691] 11 locks held by kworker/u8:18/19691: [ 823.371747][T19691] #0: ffff888030435148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 823.383309][T19691] #1: ffffc9001b64fbc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 823.396078][T19691] #2: ffffffff8f512e88 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 823.405555][T19691] #3: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x208/0x1400 [ 823.415047][T19691] #4: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x701/0x16a0 [ 823.424887][T19691] #5: ffffffff8e13ee00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70 [ 823.434812][T19691] #6: ffff888028994f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 823.444299][T19691] #7: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0x9e/0x2860 [ 823.453801][T19691] #8: ffffffff8e13ee00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70 [ 823.463710][T19691] #9: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x185/0x1840 [ 823.472922][T19691] #10: ffffffff8e13ee00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70 [ 823.482908][T19691] [ 823.482908][T19691] stack backtrace: [ 823.488797][T19691] CPU: 0 UID: 0 PID: 19691 Comm: kworker/u8:18 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 823.488818][T19691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 823.488829][T19691] Workqueue: ipv6_addrconf addrconf_dad_work [ 823.488858][T19691] Call Trace: [ 823.488867][T19691] [ 823.488876][T19691] dump_stack_lvl+0x189/0x250 [ 823.488901][T19691] ? __pfx_dump_stack_lvl+0x10/0x10 [ 823.488922][T19691] ? __pfx__printk+0x10/0x10 [ 823.488939][T19691] ? print_lock_name+0xde/0x100 [ 823.488955][T19691] print_deadlock_bug+0x28b/0x2a0 [ 823.488970][T19691] validate_chain+0x1a3f/0x2140 [ 823.488988][T19691] ? unwind_next_frame+0xa5/0x2390 [ 823.489008][T19691] ? rcu_is_watching+0x15/0xb0 [ 823.489029][T19691] ? __kasan_check_byte+0x12/0x40 [ 823.489044][T19691] ? unwind_next_frame+0xa5/0x2390 [ 823.489065][T19691] __lock_acquire+0xab9/0xd20 [ 823.489086][T19691] ? hsr_dev_xmit+0x19a/0x220 [ 823.489100][T19691] lock_acquire+0x120/0x360 [ 823.489118][T19691] ? hsr_dev_xmit+0x19a/0x220 [ 823.489130][T19691] ? unwind_next_frame+0xa5/0x2390 [ 823.489152][T19691] ? hsr_dev_xmit+0x19a/0x220 [ 823.489164][T19691] _raw_spin_lock_bh+0x36/0x50 [ 823.489179][T19691] ? hsr_dev_xmit+0x19a/0x220 [ 823.489192][T19691] hsr_dev_xmit+0x19a/0x220 [ 823.489205][T19691] dev_hard_start_xmit+0x2d4/0x830 [ 823.489223][T19691] __dev_queue_xmit+0x1adf/0x3a70 [ 823.489240][T19691] ? __dev_queue_xmit+0x27e/0x3a70 [ 823.489255][T19691] ? __local_bh_enable_ip+0x12d/0x1c0 [ 823.489276][T19691] ? lockdep_hardirqs_on+0x9c/0x150 [ 823.489293][T19691] ? __pfx___dev_queue_xmit+0x10/0x10 [ 823.489308][T19691] ? do_raw_read_unlock+0x3d/0x80 [ 823.489324][T19691] ? ebt_do_table+0x265b/0x2820 [ 823.489344][T19691] ? __lock_acquire+0xab9/0xd20 [ 823.489371][T19691] br_dev_queue_push_xmit+0x6c5/0x890 [ 823.489389][T19691] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 823.489406][T19691] ? NF_HOOK+0x9e/0x3c0 [ 823.489420][T19691] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 823.489435][T19691] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 823.489449][T19691] NF_HOOK+0x31d/0x3c0 [ 823.489465][T19691] ? NF_HOOK+0x9e/0x3c0 [ 823.489480][T19691] ? __pfx_NF_HOOK+0x10/0x10 [ 823.489495][T19691] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 823.489509][T19691] br_forward_finish+0xd3/0x130 [ 823.489520][T19691] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 823.489532][T19691] ? __pfx_br_forward_finish+0x10/0x10 [ 823.489544][T19691] ? __pfx_br_forward_finish+0x10/0x10 [ 823.489555][T19691] NF_HOOK+0x31d/0x3c0 [ 823.489567][T19691] ? NF_HOOK+0x9e/0x3c0 [ 823.489578][T19691] ? __pfx_NF_HOOK+0x10/0x10 [ 823.489589][T19691] ? br_multicast_count+0xf2/0xdc0 [ 823.489602][T19691] ? __pfx_br_forward_finish+0x10/0x10 [ 823.489616][T19691] __br_forward+0x41e/0x600 [ 823.489628][T19691] ? __pfx_br_forward_finish+0x10/0x10 [ 823.489639][T19691] ? maybe_deliver+0xc6/0x160 [ 823.489652][T19691] ? __pfx___br_forward+0x10/0x10 [ 823.489665][T19691] ? br_dev_xmit+0x185/0x1840 [ 823.489679][T19691] br_dev_xmit+0x11b3/0x1840 [ 823.489694][T19691] ? br_dev_xmit+0x185/0x1840 [ 823.489710][T19691] ? __pfx_br_dev_xmit+0x10/0x10 [ 823.489724][T19691] ? validate_xmit_xfrm+0xbf/0x1130 [ 823.489735][T19691] ? __pfx_skb_network_protocol+0x10/0x10 [ 823.489753][T19691] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 823.489764][T19691] ? __pfx_passthru_features_check+0x10/0x10 [ 823.489784][T19691] dev_hard_start_xmit+0x2d4/0x830 [ 823.489798][T19691] __dev_queue_xmit+0x1adf/0x3a70 [ 823.489811][T19691] ? __dev_queue_xmit+0x27e/0x3a70 [ 823.489823][T19691] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 823.489845][T19691] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 823.489857][T19691] ? __pfx___dev_queue_xmit+0x10/0x10 [ 823.489867][T19691] ? __copy_skb_header+0xa7/0x550 [ 823.489883][T19691] ? __asan_memcpy+0x40/0x70 [ 823.489898][T19691] ? __pskb_copy_fclone+0x9b5/0xfb0 [ 823.489909][T19691] ? __asan_memcpy+0x40/0x70 [ 823.489923][T19691] ? __pskb_copy_fclone+0x9b5/0xfb0 [ 823.489934][T19691] ? hsr_create_tagged_frame+0x449/0xc30 [ 823.489947][T19691] ? __asan_memmove+0x40/0x70 [ 823.489961][T19691] ? hsr_addr_subst_dest+0x307/0xac0 [ 823.489980][T19691] hsr_forward_skb+0x158b/0x2860 [ 823.489995][T19691] ? hsr_forward_skb+0x9e/0x2860 [ 823.490007][T19691] ? __pfx_hsr_forward_skb+0x10/0x10 [ 823.490019][T19691] ? do_raw_spin_lock+0x121/0x290 [ 823.490031][T19691] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 823.490045][T19691] ? hsr_dev_xmit+0x19a/0x220 [ 823.490055][T19691] hsr_dev_xmit+0x1a5/0x220 [ 823.490065][T19691] dev_hard_start_xmit+0x2d4/0x830 [ 823.490079][T19691] __dev_queue_xmit+0x1adf/0x3a70 [ 823.490089][T19691] ? register_lock_class+0x51/0x320 [ 823.490105][T19691] ? __dev_queue_xmit+0x27e/0x3a70 [ 823.490119][T19691] ? __pfx___dev_queue_xmit+0x10/0x10 [ 823.490130][T19691] ? read_seqbegin+0x122/0x250 [ 823.490142][T19691] ? neigh_connected_output+0x1ea/0x460 [ 823.490155][T19691] ? lockdep_hardirqs_on+0x9c/0x150 [ 823.490167][T19691] ? read_seqbegin+0x1ac/0x250 [ 823.490180][T19691] ? __pfx_read_seqbegin+0x10/0x10 [ 823.490192][T19691] ? eth_header+0x11b/0x200 [ 823.490207][T19691] ? __asan_memcpy+0x40/0x70 [ 823.490222][T19691] ? eth_header+0x11b/0x200 [ 823.490235][T19691] ? __pfx_eth_header+0x10/0x10 [ 823.490251][T19691] ? neigh_connected_output+0x3b6/0x460 [ 823.490268][T19691] ip6_finish_output2+0x11fb/0x16a0 [ 823.490284][T19691] ? ip6_finish_output2+0x701/0x16a0 [ 823.490302][T19691] ? __pfx_ip6_finish_output2+0x10/0x10 [ 823.490318][T19691] ? ip6_mtu+0x7d/0x3f0 [ 823.490332][T19691] ? ip6_mtu+0x7d/0x3f0 [ 823.490346][T19691] ip6_finish_output+0x234/0x7d0 [ 823.490361][T19691] ndisc_send_skb+0xb47/0x1400 [ 823.490373][T19691] ? ndisc_send_skb+0x208/0x1400 [ 823.490386][T19691] ? __pfx_ndisc_send_skb+0x10/0x10 [ 823.490397][T19691] ? __pfx_dst_output+0x10/0x10 [ 823.490408][T19691] ? __asan_memcpy+0x40/0x70 [ 823.490424][T19691] ? mod_delayed_work_on+0x128/0x200 [ 823.490437][T19691] ndisc_send_ns+0xcb/0x150 [ 823.490449][T19691] ? __pfx_ndisc_send_ns+0x10/0x10 [ 823.490461][T19691] ? addrconf_dad_work+0xa04/0x14b0 [ 823.490475][T19691] addrconf_dad_work+0xaae/0x14b0 [ 823.490488][T19691] ? __lock_acquire+0xab9/0xd20 [ 823.490504][T19691] ? __pfx_addrconf_dad_work+0x10/0x10 [ 823.490518][T19691] ? process_scheduled_works+0x9ef/0x17b0 [ 823.490535][T19691] ? _raw_spin_unlock_irq+0x23/0x50 [ 823.490546][T19691] ? process_scheduled_works+0x9ef/0x17b0 [ 823.490561][T19691] ? process_scheduled_works+0x9ef/0x17b0 [ 823.490577][T19691] process_scheduled_works+0xae1/0x17b0 [ 823.490600][T19691] ? __pfx_process_scheduled_works+0x10/0x10 [ 823.490619][T19691] worker_thread+0x8a0/0xda0 [ 823.490630][T19691] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 823.490644][T19691] ? __kthread_parkme+0x7b/0x200 [ 823.490656][T19691] kthread+0x70e/0x8a0 [ 823.490669][T19691] ? __pfx_worker_thread+0x10/0x10 [ 823.490685][T19691] ? __pfx_kthread+0x10/0x10 [ 823.490697][T19691] ? _raw_spin_unlock_irq+0x23/0x50 [ 823.490708][T19691] ? lockdep_hardirqs_on+0x9c/0x150 [ 823.490720][T19691] ? __pfx_kthread+0x10/0x10 [ 823.490731][T19691] ret_from_fork+0x3f9/0x770 [ 823.490747][T19691] ? __pfx_ret_from_fork+0x10/0x10 [ 823.490764][T19691] ? __switch_to_asm+0x39/0x70 [ 823.490775][T19691] ? __switch_to_asm+0x33/0x70 [ 823.490785][T19691] ? __pfx_kthread+0x10/0x10 [ 823.490797][T19691] ret_from_fork_asm+0x1a/0x30 [ 823.490812][T19691]