last executing test programs: 2.945325637s ago: executing program 3 (id=1351): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x4, 0xe76, 0x200, 0x100, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) socket$inet6(0xa, 0x80000, 0x40) 2.556592508s ago: executing program 3 (id=1354): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2f}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "91"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf4}, 0x1, 0x0, 0x0, 0x180}, 0x0) 2.395899771s ago: executing program 3 (id=1355): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x1000003, 0x30, r0, 0x7388f000) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001680)={{r1, &(0x7f0000000040)='}\x00', 0x10000, &(0x7f0000000080)={@_ha_fsid={[0xca6, 0x7]}, {0x8, 0x6, 0xffffffff, 0x2}}, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}, 0x6, &(0x7f00000015c0)=[{0x3, 0x9, &(0x7f0000000140)='/dev/virtual_nci\x00', &(0x7f0000000180)="ec61b4d7252f01e4564739700ff8b423b9ab140620cb15db942d123e1f49bcc29634e66b6faf5069e89fcf7154e80308437534b9ba7a16f56ea214fe60322817550612427d47d96ec0826ba04aea1fd84d8b44897c104b2ea52a3fafbb113da8970ad2615bf9d046682cc038c79ba45afdb91cbdf60c079d92f351d2621ae0bc253a02bbcdb3dc322cf7bdccb08598abf21ad243ae5abfa5c69e800a4d541d7ffd6f442feb955259c913ec06579344b43b859e00c9a2588a6f84fa283fd717173e8766797a73fcd426f445fb91568b96c89fbbcc143726f50da0d820", 0xdc}, {0x2, 0x638c, &(0x7f0000000280)='/dev/virtual_nci\x00', &(0x7f00000002c0)="d527c4a5697621e955e53b3d5ce87849f19d7f0ec30aa6c9dea3482e44fcc88c9b59a5f4f0e4f49cc5d1ed8bfbc3ff907ca4fcd70d68f1537e2ebff5566ae728009905ebfd82d524ddcae9b10f4e0cf36083719d2c5a082f057260b84091df1a36c930d06aebed2e9595ffd62495184c840e15518bc19c8655150f425ad2feab55c8503af3fa24bddb3d70ec579107fe87f83b0eed2f64e38f5d8a2f1c9995c51da2fea5481e944fe338966fc0a6d6e0ca240dbe30827f63040c4c53c336a29e49d345b041e9501095", 0xc9}, {0x1, 0x64b0ae51, &(0x7f00000003c0)=')*,.\\:\x00', &(0x7f0000000400)="59591a835b129061c71eaf052d292dbd36434da7f2387e1bb431baa50b56339b32a9a7f6afee75", 0x27, 0xc}, {0x3, 0xa2, &(0x7f0000000440)='/dev/virtual_nci\x00', &(0x7f0000000480)="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", 0x1000, 0x8}, {0x3, 0x8100000, &(0x7f0000001480)='/dev/virtual_nci\x00', &(0x7f00000014c0)="be63911711352dc2b6c875895378c6970ec5f62d25adfb2fbf62d663853f297159", 0x21}, {0x2, 0x55bd, &(0x7f0000001500)='\x00', &(0x7f0000001540)="7bd43424cdff151fdd8cfd759b8bf155f33c8559e4f3b0b918fbdeec9d8fad085c8f79dc432126d90e99dd053a92d86873d6dcbd0c68f47e0d35e66b1e3678b801fb1e7c38ec702947bbf3b61c25647ac05cbe5a3c7d9deb7a69a9010484488ea3dc64b46fe493c485b2925de37a2848fbac708b21b25347e763ffd5ca6dff", 0x7f, 0x38}]}) write$cgroup_devices(r2, &(0x7f0000001700)={'a', ' *:* ', 'rw\x00'}, 0x9) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000001740)='veth0_virt_wifi\x00', 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001880)={'ip_vti0\x00', &(0x7f00000017c0)={'syztnl2\x00', 0x0, 0x7800, 0x7, 0x0, 0xfffffffd, {{0x27, 0x4, 0x2, 0x6, 0x9c, 0x68, 0x0, 0x2, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@cipso={0x86, 0x1f, 0x3, [{0x0, 0x3, 'T'}, {0x1, 0xa, "17cc007e82fc41f2"}, {0x0, 0xc, "b2cc83eacb20a17144a6"}]}, @generic={0x86, 0x6, "8887ba50"}, @rr={0x7, 0x7, 0x11, [@private=0xa010102]}, @timestamp_addr={0x44, 0xc, 0xf0, 0x1, 0x8, [{@remote, 0xf}]}, @ra={0x94, 0x4, 0x1}, @noop, @lsrr={0x83, 0x1b, 0x2f, [@private=0xa010102, @loopback, @private=0xa010101, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x30, 0x0, [{0x6, 0x12, "18686d12700e1a4bacf8d289f72384db"}, {0x3, 0x6, "cafa9ad8"}, {0x6, 0x7, "eae45d4072"}, {0x7, 0x3, "98"}, {0x5, 0x3, '!'}, {0x2, 0x5, "4652e5"}]}]}}}}}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000018c0)={'ipvlan1\x00', 0x0}) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001900)={0x0, @multicast2, @initdev}, &(0x7f0000001940)=0xc) sendmsg$nl_route_sched(r2, &(0x7f0000002e40)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002e00)={&(0x7f0000001980)=@newchain={0x1464, 0x64, 0x20, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x15, 0x3}, {0xa, 0x9}, {0xb, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xffffffff}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x2}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @loopback}, @TCA_FLOWER_KEY_CVLAN_PRIO={0x5, 0x4e, 0x3}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x2}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e21}]}}, @TCA_CHAIN={0x8, 0xb, 0xfffffffa}, @TCA_RATE={0x6, 0x5, {0x62, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_basic={{0xa}, {0x1334, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4000}}]}, @TCA_BASIC_ACT={0x131c, 0x3, [@m_vlan={0xc8, 0x10, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x2cf}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x7c, 0x6, "d28d603aa89e50b267fbb7240ff3cbe29884579fb0d79b04084a064759d702a5aa57f763617ae8fff45cccdaa24c5862445eec6c5e1d08e20974acb742bca55feae62bd6fa7b5ec5efa8bb07e16cd9af8699f451d777b170e75a0b6a26cac14412bedf887e32145c714dc79e7260a9cf7f2d35196378809e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0xa4, 0x9, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x6, 0x6, 0x5c8}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x200, 0x6, 0x5, 0x9, 0xfffeffff}, 0x2, r6}}]}, {0x36, 0x6, "a4a781e140a0d049c2eafcab3a85ae4794cf037a88b0f6bc85924380c93179b2a09a55dce6e62d2c496f0386fc89cca49de7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0x1054, 0x5, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x6af, 0xffffffffeffffff5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x0, 0x2, 0x6, 0x8}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_skbmod={0x158, 0x12, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x16}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x102, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xc}}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @TCA_RATE={0x6, 0x5, {0x8, 0x6}}, @TCA_RATE={0x6, 0x5, {0x9, 0x9}}, @filter_kind_options=@f_bpf={{0x8}, {0x80, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0x9, 0x10, 0x6, 0x7fffffff}, {0xc, 0x5, 0x4, 0xfffffffa}, {0xfb, 0x7, 0x6, 0xd9509a2}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xf, 0x9}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x7}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x3d9b, 0xfe, 0x5, 0x9}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x5159bb65}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x1464}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) (async) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000002e80)={0x1f, @none, 0x7}, 0xa) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r7, 0x40189429, &(0x7f0000002ec0)={0x1, 0x7}) (async) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x100000c, 0x20010, r2, 0x100000000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000002f80)={'sit0\x00', &(0x7f0000002f00)={'tunl0\x00', r5, 0x8000, 0x8000, 0x6, 0x13d8, {{0x12, 0x4, 0x1, 0xd, 0x48, 0x65, 0x0, 0x9, 0x4, 0x0, @empty, @empty, {[@generic={0x82, 0x5, "46ef10"}, @cipso={0x86, 0x16, 0xffffffffffffffff, [{0x5, 0xb, "3630d93e1658d7c4ba"}, {0x7, 0x5, "dbfc94"}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x87, [@private=0xa010102, @empty, @empty, @multicast2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000003080)={'erspan0\x00', &(0x7f0000002fc0)={'tunl0\x00', r8, 0x1, 0x7, 0x14, 0x101, {{0x1d, 0x4, 0x2, 0x21, 0x74, 0x65, 0x0, 0x7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @broadcast, {[@generic={0x44, 0x10, "f35b6be23ea8cde0b6c1ecba0f38"}, @timestamp_addr={0x44, 0x44, 0x8e, 0x1, 0x2, [{@rand_addr=0x64010100, 0x400}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x8}, {@empty, 0x9}, {@broadcast, 0x8}, {@rand_addr=0x64010100, 0x8}, {@multicast2}, {@remote, 0x3}]}, @timestamp={0x44, 0x4, 0x7b, 0x0, 0x2}, @generic={0x88, 0x4, "45e4"}, @ra={0x94, 0x4}]}}}}}) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000003100), r2) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000031c0)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003180)={&(0x7f0000003140)={0x1c, r9, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) recvfrom$phonet(r7, &(0x7f0000003200)=""/93, 0x5d, 0x20, &(0x7f0000003280)={0x23, 0x4, 0x39, 0x6}, 0x10) write$cgroup_int(r2, &(0x7f00000032c0)=0x6, 0x12) (async) r10 = accept$nfc_llcp(r2, &(0x7f0000003300), &(0x7f0000003380)=0x60) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r10, 0x118, 0x1, &(0x7f00000033c0)=0x41c, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000003400)=0x2, 0x4) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000003480)=@o_path={&(0x7f0000003440)='./file0\x00', 0x0, 0x0, r7}, 0x18) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000003700)={0xf9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000037c0)={0x18, 0x14, &(0x7f00000034c0)=@raw=[@call, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r11}, @generic={0x6, 0x2, 0x2, 0xc, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], &(0x7f0000003580)='GPL\x00', 0x8, 0xaf, &(0x7f00000035c0)=""/175, 0x41000, 0xca53e3ef32dcff1, '\x00', r4, @fallback=0x17, r2, 0x8, &(0x7f0000003680)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000036c0)={0x3, 0x4, 0x1000, 0x9}, 0x10, r12, 0xffffffffffffffff, 0x3, &(0x7f0000003740)=[r2, r2, r2, r2, r2, r2], &(0x7f0000003780)=[{0x5, 0x2, 0xc, 0x4}, {0x2, 0x5, 0x9, 0xa}, {0x2, 0x3, 0x6, 0xa}], 0x10, 0xaab7}, 0x94) (async) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x0, 0x20010, r2, 0xeafc2000) socket$nl_route(0x10, 0x3, 0x0) getsockname$unix(r2, &(0x7f0000003880), &(0x7f0000003900)=0x6e) 1.982361437s ago: executing program 2 (id=1362): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.9425635s ago: executing program 2 (id=1364): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x15) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x20000400) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r5, 0x1) socket(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x800, 0x4, 0xfffffffffffffffd, 0x100000000000, 0x0, 0x0, 0x9}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x8, 0x8, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400014, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x5, 0x7f, 0x9, 0x1000003, 0x3, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0xffffff09, 0x4, 0x3, 0x8, 0xfffffffd, 0x1, 0xd, 0x40, 0x0, 0x0, 0x7fffffff, 0x9, 0x101, 0x107, 0x263, 0x98, 0x80, 0x80000001, 0x6, 0x4, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x27, 0x0, 0x8, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x5, 0x56, 0x645ec805, 0x4, 0x3, 0xfffffffb, 0x5007, 0x3, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x5ffee5c7, 0x8, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x5, 0x1ff, 0x0, 0xf02, 0x1e, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0x7, 0x3ff, 0x85f, 0x8, 0x2, 0x3, 0x2, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x5, 0x2, 0x9, 0x8001, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0xb, 0x7, 0xf, 0xfffffff7, 0x8, 0x7fff, 0x0, 0x2e7, 0x3ff, 0x8, 0x450, 0x7, 0x7fffffff, 0x5, 0x5, 0x5, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x4, 0x7, 0x2, 0x0, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x200, 0xc, 0x9, 0x13f9, 0x9, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x9, 0xa262, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x8, 0x205, 0x5072f7e2, 0x1000, 0x1, 0x58ba, 0x5, 0x59b1, 0x40005, 0x120, 0x3, 0x5, 0x5, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x4, 0x696, 0x5, 0x8, 0x2, 0x3ff, 0x3, 0x0, 0x8, 0x2, 0x8f0d, 0x4, 0xa, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd4c]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x20000000, 0x859, 0xaedb, 0x7, {0x7, 0x2, 0xd, 0x8, 0x4, 0x95a5}, {0x8, 0x2, 0x7ff, 0xf95b, 0x2, 0x280000}, 0x10001, 0xfffffffd, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4009, 0x0, 0xfffffffe, 0x10, 0x5, 0x0, 0x9, 0x0, 0x7, 0x8, 0x4d8b, 0x6, 0x40, 0x1, 0x0, 0x81, 0x0, 0xf, 0x0, 0x0, 0x5, 0xc, 0x8000, 0x4, 0x9, 0x9, 0x81, 0xa00000, 0xe, 0x4, 0x80000000, 0x6, 0xfffffff9, 0x3, 0x2, 0x7, 0x7, 0x1, 0x14f, 0x8, 0x200, 0x7, 0x5, 0x69, 0x84, 0xc, 0x0, 0xf0e7, 0x7, 0x487, 0x4, 0x8, 0x7fffffff, 0x3ff, 0x7fffffff, 0x0, 0xbd, 0x6, 0x0, 0xa, 0x10001, 0x2, 0x200043, 0x1, 0x7, 0x38095a10, 0x6, 0x8333f, 0x7, 0xc8a, 0x6, 0x1, 0x3, 0x7f, 0x7, 0x8, 0x100, 0x8003, 0x8, 0x4, 0x9, 0x81, 0x5, 0x4, 0x4, 0x0, 0x7f, 0x9, 0x6, 0x4, 0x4, 0x2, 0x9, 0x2, 0xfffffff8, 0x4, 0x4e, 0x3, 0x8004, 0x1ff, 0x4, 0x4, 0x5b3a, 0xfffffff7, 0x6d, 0x8001, 0x10000, 0x4000001, 0x2c29, 0x7, 0x4, 0x0, 0x5, 0x0, 0xfffffffb, 0xea, 0x0, 0x9, 0x40, 0xfffffffa, 0xffffff00, 0x1, 0x7, 0xda, 0x7f, 0x3, 0x8566, 0x2f, 0x9, 0xfffffff9, 0xb, 0xa97e, 0x8, 0x9, 0x2002b36, 0x60f63eb, 0x4, 0x6, 0x2, 0x7f, 0x5, 0x1ff, 0x7f, 0x101, 0xfffffffa, 0xd, 0x6, 0x0, 0xf, 0x9, 0xb, 0x7f, 0x1, 0x10, 0x0, 0x5, 0x1038, 0x9, 0x5, 0xf0, 0x200, 0x0, 0x6, 0x80000000, 0x5, 0xffffffff, 0x6, 0x2, 0x3ff, 0x3, 0x7ff, 0x5, 0x1, 0xd, 0x3, 0x632, 0x2, 0xc4, 0xffff, 0x8, 0x1, 0x9, 0x3, 0x8, 0x5, 0x7, 0x3, 0x10001, 0xd, 0xd, 0x7, 0x7, 0xf2, 0x5, 0x600000, 0x7, 0x4, 0xfffffff7, 0x1, 0x3, 0x33fbb166, 0x9, 0x3, 0x4, 0x8, 0x4, 0xc, 0x6, 0x400, 0x9, 0x8, 0x1, 0x2e5c, 0x5, 0x7, 0x5, 0x1, 0x7fff, 0x80000001, 0x8c, 0xffffffc0, 0x80000000, 0x7, 0x7d3, 0xfff0, 0x1, 0x8, 0xb, 0x7ff, 0x4, 0x0, 0x6, 0x4, 0x5, 0x6, 0xd143, 0x4, 0x3a6, 0x7, 0x6, 0x7, 0x1000, 0x1, 0x4, 0x2b, 0x7, 0xa, 0x6, 0xdfb, 0x30d, 0xfff, 0x1, 0x3ff, 0x7ff, 0xfffffffd, 0x7]}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="611084000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}, 0x1, 0x0, 0x0, 0x100000}, 0x0) 1.843321169s ago: executing program 4 (id=1365): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2f}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "91"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf4}, 0x1, 0x0, 0x0, 0x180}, 0x0) 1.642371431s ago: executing program 4 (id=1369): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0016000500142603600e1208000f", 0x2b}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c000780"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x3c, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x16c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0x3c}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r5) sendmsg$NFC_CMD_LLC_SET_PARAMS(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r7, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x5a8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3213000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d24402c2d400000000006000440000700003c0001800900010068617368000000002c0002800800074000000000080003400000001608000140000000120800024000000000080004400000000020000180080001006e6174001400028008"], 0x150}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c000180060006"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newtaction={0x48, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}, [{0x4}, {0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x1d, {0x3, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x240000d0}, 0x0) 1.531890311s ago: executing program 0 (id=1370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xd4}}, 0x44840) 1.448230485s ago: executing program 1 (id=1371): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6001}, 0x4c) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b000000"], 0x50) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x38}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fc}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r2, 0x0) 1.37258906s ago: executing program 0 (id=1372): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000004c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}], 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') socket$pppl2tp(0x18, 0x1, 0x1) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x43}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.368519662s ago: executing program 4 (id=1373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x2, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xb, 0xffff}, {0x5, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0xf}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="28f80100", @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c00000008000300040000003400"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x4, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) recvmsg(r7, &(0x7f0000002c00)={&(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000001b80), 0x0, &(0x7f0000001c00)=""/4096, 0x1000}, 0x1) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0xfffe, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x2, @empty}, 0x0, {[0x3, 0x0, 0xfffffffe, 0x1, 0x2089f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r9, 0x29, 0xd4, &(0x7f0000000340), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$phonet_pipe(0x23, 0x5, 0x2) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000002740)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x260, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x448, 0xffffffff, 0xffffffff, 0x448, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffff00], 'geneve1\x00', 'bridge0\x00', {}, {}, 0x2f}, 0x0, 0x1f8, 0x260, 0x0, {}, [@common=@srh1={{0x90}, {0x3a, 0x5, 0x2, 0x8, 0xc6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, @mcast2, [0xff, 0x0, 0xff000000, 0xffffff00], [0xffffffff, 0xff, 0xff, 0xff], [0xff000000, 0xff000000, 0x0, 0xff000000], 0x2140, 0x440}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0xfd}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e22, 0x4e23, 0x1146, 0x19a}, 0x100, 0x20}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x8, 0x0, 0x74d2, '\x00', 'syz0\x00', {0x959}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xff], 'gretap0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@hbh={{0x48}, {0x2, 0x5, 0x0, [0x7ff, 0x7, 0x9, 0x3, 0xb, 0xfffc, 0x6, 0x6, 0x7, 0x3, 0x4, 0x9, 0x1, 0x5, 0x23, 0x7478], 0x10}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x9, 0x5, 0x8, 'syz0\x00', 'syz1\x00', {0xa77}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e8) 1.368068731s ago: executing program 1 (id=1374): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) unshare(0x22020600) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, 0x0, 0xfffffffd}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60020000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000480)=[{0x3, 0x3, {0x2}, {0x0, 0xf0, 0x3}, 0xff, 0xfd}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x7, 0xc}, {0xfff1, 0xffff}, {0x3, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) 1.316094189s ago: executing program 3 (id=1375): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x11, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000001fffffff0000004b000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b6000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.242860284s ago: executing program 3 (id=1376): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @private=0xa010101}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000c000000bca30000000000002403000020feffff620af8fff8ffffff71a4f8ff000000001f03000000000000e5000300000000002604fdffff02000014010000033800001d130000000000007a0af8ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737900640000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r3 = socket(0x2, 0x3, 0x100000001) setsockopt(r3, 0xff, 0x1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f80)='memory.events\x00', 0x7a44, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r5, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=0x0, @ANYRES8=r4, @ANYRES8, @ANYRESHEX=r1], 0x33) sendfile(r5, r4, 0x0, 0x10000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000005000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r9, 0xc010f508, 0x0) connect$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r9, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r9, 0x1) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="00b0b3", @ANYRES16=r10, @ANYBLOB="08002abd7000fcdbdf25620000000600b300020000000600b300000000000600b400950f00000600b300000000000600b400a30600000600b400640f00000600b4005d080000"], 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x0) socket$unix(0x1, 0x5, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1.112013483s ago: executing program 0 (id=1377): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'gre0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x8000, 0x20, 0x7fff, 0x30, {{0x5, 0x4, 0x1, 0x4, 0x14, 0x67, 0x0, 0x3, 0x4, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f0000000840), r0) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 1.030116446s ago: executing program 1 (id=1378): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0x9, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x4800) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x1ff) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'gre0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x8000, 0x20, 0x7fff, 0x30, {{0x5, 0x4, 0x1, 0x4, 0x14, 0x67, 0x0, 0x3, 0x4, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0xc0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f0000000840), r4) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=@flushpolicy={0x2dc, 0x1d, 0x400, 0x70bd25, 0x25dfdbfe, "", [@lifetime_val={0x24, 0x9, {0x1, 0x1, 0x9, 0xcd}}, @algo_auth_trunc={0xf6, 0x14, {{'sha224-neon\x00'}, 0x550, 0x40, "4ed680ddc5fc8cb4010204e776462cc055335f7a3f789500ed357e6a163b60e1324a31a180558082c24154d8ecfffe6a372763d074b5b02f8f9396a9d46bf1601fd02bfa4aece1b3c4023e0eec57a805545f1e55c6bd8c7e954dcff43aa4a1a8892dc7dd3198fca8d0b61fc3d1d659dffdb80f00c3fee9fcad61319e66c08215990c0c7cefcf4dd4d6abbbfd4f2c750caf74b640630f4512b405b92228be6adafe27b37420d4707e0fad"}}, @coaddr={0x14, 0xe, @in=@private=0xa010102}, @migrate={0x134, 0x11, [{@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x10}, @in=@loopback, @in=@empty, 0x33, 0x4, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@mcast2, @in=@rand_addr=0x64010102, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x7b30934a14f40e7c, 0x3, 0x0, 0x3501, 0x2, 0x8}, {@in6=@private2, @in=@rand_addr=0x64010100, @in6=@private1, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0xff, 0x3, 0x0, 0x3503, 0x2, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast2, @in6=@remote, @in6=@local, 0x6c, 0x2, 0x0, 0x3501, 0xa, 0xa}]}, @algo_aead={0x60, 0x12, {{'ccm(aes)\x00'}, 0xa0, 0x60, "3518ca7bb52fe748e53612ebc8e87a5b84a54de6"}}, @extra_flags={0x8, 0x18, 0x5}]}, 0x2dc}}, 0x0) 900.904763ms ago: executing program 2 (id=1379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "91"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x180}, 0x0) 878.822358ms ago: executing program 0 (id=1380): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) (fail_nth: 2) 855.384424ms ago: executing program 4 (id=1381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000098", 0x24) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f00000005c0)=@ethtool_drvinfo={0x3, "8a0d98976fa77c52154820c0bade20c6cc80e4d6896979f863007b9caf4e0fee", "cb3c292d34c34ace42f5a7d38a8da2838809a1a8d73bf14ff8bff111c7afbd81", "f7c893d41751a78a5431f9f71ecec3e8a3c2e552d432efb39a2f1ca28b1f91df", "31e10dc5b71519bfa16623871e1af24fd6e471ab0d203770f70bad15c7f6bb0a", "cf61dc6f215ca0b22abd5c938b2acff2ed2dc6f6851f9fe77fb382ae8bd5fbb6", "7b8601e788761d2872fdd753", 0x3, 0x6, 0x3, 0x5, 0x101}}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4000800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x64, r7, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4009}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x8084) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB="aa00000000000000000020e50000001000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x9, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000040)=r11, 0x4) sendmsg$NFT_MSG_GETSET(r10, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000880)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20008044}, 0x40) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r12, 0x1}, 0xc) socket(0x9, 0x6, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x14, &(0x7f0000000280)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xd, 0x3, 0x0, 0x4}, @ldst={0x0, 0x1, 0x0, 0xa, 0x5, 0xffffffffffffffe0, 0x8}], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) 795.30543ms ago: executing program 2 (id=1382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xd0}}, 0x44840) 754.154357ms ago: executing program 1 (id=1383): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback=r0, r0, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000000100000bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff00000000ae04020000000000be400300000000006504030001ed00007b130000000000007f44000000000000630a04fe0000000071330000000000009f030000000000009500000000000000023bc065b7a379d17cf9333379fc05000000912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50bec919bc461e91a7168c5181554d1b583c587e436fe275daf51efd601b6bf01c8e8b1b526375ec5dd6fcd82e4fee5bef7af9a0200000000000000e3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f645679c294392cf538b07ce2646cb7798b3e6440c2fbdb00a3e35208b0bb1d2cd871c5548930be3835f2554b4a28610643a98d9ec21ead2ed51b104d4d91af25b84550a7925c3109b151b8b9f75d80000000eda88c658d42ecbf28bf7076c15b463bebc72f526d8e4a9e231d512381e7a78afcb913466aae7f6df70252e79166d858fc152b659da074e1320060d0b11008e59a5923906f88b53987ad1714e72ba7a5b74f0c33d39000d06a59ff61622cfd9aa58fe8d485ae2c0cc65c2a36aaec2477584b6a89adaf17b0a6041bde4cc3ed54d27f777e92b87496e6649cf728d236619074d6ebdf098bc908c423d228a40f9411fe7226a40409d6e37c4f46756d31cb46761bade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18de0ae564162a27afea62d84f3a10746443d64364f56e24e6d21053d901204a1deeed41556175cbd4041b7d301bcb72652d950ad31928b0b093778b68e2e9853c02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f98928d5e9b94ff9ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cff538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595bcf50ab32d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063b59261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6f8c3a13596c2ea3e2e04cfdce669e51731b2875353193f82ade69d0540059fe6c7fe7c00fb7502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abd47b64a1b304502dda787343ce3c95300000000010000003baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022af46667cf25c5d3038816106dec28eaeb88343261a48a18f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfeff59d54d1f92ecc4e95dd2d18383117c03987d198899b212c55318294270a1ad10d30fef7c24b78b29d83238273f4fc87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead8eaf68b0c5dda0467d35a3807000000b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ea1e717d29135753208165b9cdbae037f315c7d951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d7012c1b45f6ada1ee7baa5b6a686b50f09b7f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac4d73a008364e0602a594817031fc2ff2c32a1989e00f52f8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a3c3e6e4fd2e016820f78b796a825b3dad9ce7b37507e0b83c3ecd01549bca6a016b3e18a00c748894dc3bfe5efda8b0a477d6a6562fdee45eb16e276dee992094ba9830f6c164179e7d532d86060bea930118d3cae1b8f916b9671b7000000000040f4bee5ad2dea2d14e195265504c05bba38b095e1679f96ddef65ba5de9c8cfb6465ae4165c0689a314a6eb6b36aa705b957edef3035e14b879d4e7dc00624708042e00bf9a7f7ae5f308744770759558e4fcb99c0dc957521ef255362bf2f3966f3754e81fb9bdef22c19f5a49147b85343f9f36bcda9f64b7a5c5b2f5452f5b1de02e6f15c5640bf89d4a74d51dc233dee628c1dfbb5566b98478c174b34eb234481547e484c6af101396b6977dd668b401391c1dc54f2edccf1cabe6be9868d383eb937efdfd9ade018106f544f04fc07ad525497f65fbad3cf145396acf3b0d38e6b46e28d86880fd6f62c373000000000000000000005d194c27cd4d8f6727f59c71dc84311c0f1fb6c87081c7be9355288610c32c2d8c18bf2027212182903687f48262aea54c5f8a315c9aa4a5af1aa2c4007d1baae38c270012b7eb9411ae451204dba30f8321b07a18db97c3e0cf6a15170e515b1cc463a67a5b2b23ec5662ccfa898b8d5075647bdfb390cde56efb8fd42df12c5c8f66bdc58449ec2b38bf12f5f0a49dcbcf4e6f11c47d23fa34793a0000a1cbb1e06e9a8d2449451d7a05ec0a0d3c9716f505ddeba488c60ebf44cac05c2739694359c925148137376dd3f1330ed0e9211f73ee279cc0b5c298422395ce438f48a39ff569375e609f9e904aacc3d8011326d5e4d654c74501cf16bbf72d3984f9b4ef000000003a8a3d49fc837001e4622e58e3a4ef6b55a8dd0680d951cdb6e54ed92a9a6a0e5e494b7b7b0ef4b4bafc5d964551b2a22bfd12b0761ef07a103e51e84917ee44f860b9785e264343f6a80e9318edecf73df6940856cd56c56eb3831445833c701044aaa49439a44a624267580b3c0980d7f87437bf498f6e1915450400000000000000564a02552c0a5fedbcf4da0db6ed03b9dbc224ee76d20aaf1ac74bcb7eb6f202209e64cc4d130dcf6ab3df8ae4911deb4bb5c7df97fc348d151e834be73915f854272f69d88123f666448b6a8e73322b04fffea9cc05e4129debf311c73b4d1a244b1e5b9943028745a0b6477686740ab877315e35624d791e6f71adb1acd3e22cf472ff7e048b16c11c84da9a3b16b92665912132a4dba680052919c20e191311d8092a09f3c609823fed1bd651ce1c34de105790ba2ca3afa26647f66efbf97b109e7226c74e32beb14ff3fd6918e255fc9b42f86b0188cf885afcc9bb77a7fc3ca7ec1015af494add960f8a11422ca005f24006867cd156e0350022943e301b2c07f4d37d07b05ac2fa1f1d5a0d6eb7e992b076bd77509c26034d2a740d578476410b413591884136259693effaf27e7bcfb58efa92625fb9bd68ecca42047f6e7d24b0446ea16a310073c163d1c6aa3ba1fe76b4e88d5f98cc05c6d033e2c28b4990892230d6b4e5c083a601a25145eb22f4f77313117f8147810d95c64fb78b0a000000000000000000000000e92ba8b066e4bd82bb6003d5da8791d838bcd6eefb13000000000000000000000000000000b652ff6fbad82da75114742bc6a27cba894ef490531be709a3a3c81b267dfafa55e6f855200b4e7518682c30f40808cd5bb8f00beb63b4989cc01d8e75a182337b9f9e08430ccec9bda0134d07a9f54b60033182f5d2bb61fd130d65e68bf148d26470060c707a8cf750ca954ee63c78cd975c7f565783383f02edcb7ce4a9ed0c511d18fe32352276d72eefe0d566f97ccae16b3492f60b96574aac4f1862fb6e4932c181dbf8c68ca16b765de9edba0bf5bfb9c4950d19c0bc31db02f374ce62141160436639d4b6cb0033a47ffdc54d55f1136743b1b26946f200000000000000007590ab8f29c7accd9d11786c4ca1271cd2293b572f14a3dfcaa3467f2783fc09e3eee3fa4b82b7b6ce904e05fa797a2f7ff63e4f874bd870821f6460904e05d7a3f8295a9a5fba1e3587b9d9e878c86ba9b66c4491fcff607d9cbf156f3fc0fb8c827d4e6cac493a3e2746bd5f0f8bc024352200a4250785cdca4fe3c546972d0a56e3905d1e72c33d64f6591fe25f312f47e7ec6b4640f1f6dc4efee4b8d3cfbfcbf77bfd52f0a99adc7d359233cfea0a11f5dcb87603885f08d633e842644988d2f45a1824361b5df707f726fad22d53727b4396b3d05df34933262fdb09f19837fdc2af1c721b17d54076e25ab625ae0a4c9cd900"/3002], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) 372.444184ms ago: executing program 0 (id=1384): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="bf16000000000000180200000a0000010000000000000000180200000a000001ffffffffffffffb0180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050800008500000006000000bf61000000000000bfa2000000000000850000004100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 372.095569ms ago: executing program 2 (id=1385): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x200, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1d0, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}]}}]}, 0x200}}, 0x0) 341.749425ms ago: executing program 1 (id=1386): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0, 0xffffffffffffffff}, 0x4) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000010240)={&(0x7f0000000180), 0xc, &(0x7f0000010200)={&(0x7f00000001c0)={0x10, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x3f2, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000010380)={0xfffb, 0xaed, 0x1820a, 0x0, 0x0, 0x3, 0x40, 0x7, 0x0}, &(0x7f00000103c0)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000010400)={0x8000, 0x0, 0x203, 0x4c5a, 0x4, 0x5, 0x10, 0x0, r6}, &(0x7f0000010440)=0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r7) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r8, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0xfffffffc, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x6880) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xe0ad1b42a4118436}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r8, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x8000, @link='syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x80) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r11, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r11, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000010340)={&(0x7f0000010280), 0xc, &(0x7f0000010300)={&(0x7f00000102c0)={0x14, r11, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'veth0_macvtap\x00', 0x800}) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r14 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r13}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x5c1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 249.192052ms ago: executing program 0 (id=1387): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x6, 0x4, 0x4096, 0x89, 0x0, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000100)=0xf, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa22}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfecc}, 0x40000002) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="0100ae216700"], 0x18}, 0x1, 0x0, 0x0, 0x24000840}, 0x4000084) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="10002bbd820d88857165bedfd905b78d5638c27000fbdbdf250200000006000a00"], 0x1c}, 0x1, 0x0, 0x0, 0x40840}, 0x8090) 209.736855ms ago: executing program 3 (id=1388): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000000000000006574683a73797a6b616c6c6572300000000000000000000000e51c42de00b48a8dceb89bf28378863870c4ffad45a02b48a243615b5006e2829a556a89279c9a221aca875ddc5d2798ce4d225317a98401bdbc44003af7ca8767b2d172c7ab7723d6bdf9fd94c6b89c0ce116a3787f8f4ee9c01caf514aa06dcf9fa263568d2f7a5bf6b5dee8"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4004, @local}, 0x10, 0x0}, 0x30004001) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x64) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) shutdown(0xffffffffffffffff, 0x1) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0x9, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbfc, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x9}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x8000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[], 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x40, 0x0, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x52}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x40}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x80000}, 0x486c85ad048629fd) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x3377}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x4, 0x9, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) write$rfkill(r5, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1c, 0x0, 0x200, 0x70bd2e, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x48040) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0xd, &(0x7f00000000c0), 0x4) 192.638686ms ago: executing program 1 (id=1389): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) syz_open_procfs$namespace(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @multicast}, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, 0x0, 0x24048894) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x4, 0x1, 0x26, @local, @remote, 0x20, 0x80, 0x81, 0x7}}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="1a040500dbff03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x6, 0x6, @remote}, 0x14) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x28, 0xfffc, 0x0, 0xa, 0x0, 0x0, 0x67}, {0xfffffffffffffff8, 0x400000000001, 0x100, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000}, {0x3, 0x0, 0x80, 0x2}, 0x7, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x4, 0x0, 0x0, 0xe000000}}, 0xe8) listen(r7, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x100}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 180.735198ms ago: executing program 4 (id=1390): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20048040) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0007000700ac1414bb08000a00", @ANYRES32], 0x5c}}, 0x40) 192.853µs ago: executing program 2 (id=1391): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'gre0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x8000, 0x20, 0x7fff, 0x30, {{0x5, 0x4, 0x1, 0x4, 0x14, 0x67, 0x0, 0x3, 0x4, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f0000000840), r0) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 0s ago: executing program 4 (id=1392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "91"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x180}, 0x0) kernel console output (not intermixed with test programs): 0: unexpected cc 0x0c23 length: 249 > 4 [ 80.093783][ T4927] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.101312][ T4927] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.110550][ T4927] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.121914][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.143526][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.170054][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.179989][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.190540][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.203801][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.213557][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.935391][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.943303][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.950831][ T5608] bridge_slave_0: entered allmulticast mode [ 81.958364][ T5608] bridge_slave_0: entered promiscuous mode [ 81.997030][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.004380][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.011614][ T5608] bridge_slave_1: entered allmulticast mode [ 82.018853][ T5608] bridge_slave_1: entered promiscuous mode [ 82.124643][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.131920][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.139231][ T5610] bridge_slave_0: entered allmulticast mode [ 82.147709][ T5610] bridge_slave_0: entered promiscuous mode [ 82.175897][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.193125][ T5612] Bluetooth: hci2: command tx timeout [ 82.199004][ T50] Bluetooth: hci1: command tx timeout [ 82.199169][ T50] Bluetooth: hci3: command tx timeout [ 82.199285][ T50] Bluetooth: hci0: command tx timeout [ 82.225359][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.232777][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.240068][ T5610] bridge_slave_1: entered allmulticast mode [ 82.248154][ T5610] bridge_slave_1: entered promiscuous mode [ 82.265054][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.272239][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.279388][ T5609] bridge_slave_0: entered allmulticast mode [ 82.283416][ T5612] Bluetooth: hci4: command tx timeout [ 82.290133][ T5609] bridge_slave_0: entered promiscuous mode [ 82.300946][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.350450][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.357903][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.365768][ T5609] bridge_slave_1: entered allmulticast mode [ 82.373207][ T5609] bridge_slave_1: entered promiscuous mode [ 82.411429][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.418586][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.426245][ T5607] bridge_slave_0: entered allmulticast mode [ 82.433451][ T5607] bridge_slave_0: entered promiscuous mode [ 82.454396][ T5608] team0: Port device team_slave_0 added [ 82.460175][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.467434][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.474686][ T5617] bridge_slave_0: entered allmulticast mode [ 82.482086][ T5617] bridge_slave_0: entered promiscuous mode [ 82.491978][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.501250][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.508458][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.516339][ T5607] bridge_slave_1: entered allmulticast mode [ 82.523901][ T5607] bridge_slave_1: entered promiscuous mode [ 82.548707][ T5608] team0: Port device team_slave_1 added [ 82.554812][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.562154][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.569316][ T5617] bridge_slave_1: entered allmulticast mode [ 82.576823][ T5617] bridge_slave_1: entered promiscuous mode [ 82.586172][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.619566][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.682960][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.693098][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.700113][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.726288][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.750884][ T5610] team0: Port device team_slave_0 added [ 82.764422][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.786395][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.793610][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.819977][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.841462][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.853065][ T5610] team0: Port device team_slave_1 added [ 82.860681][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.895134][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.927377][ T5609] team0: Port device team_slave_0 added [ 82.957392][ T5607] team0: Port device team_slave_0 added [ 82.965807][ T5609] team0: Port device team_slave_1 added [ 83.003118][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.010094][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.036129][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.048996][ T5607] team0: Port device team_slave_1 added [ 83.077422][ T5617] team0: Port device team_slave_0 added [ 83.083839][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.090896][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.116871][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.138939][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.145995][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.172432][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.189152][ T5608] hsr_slave_0: entered promiscuous mode [ 83.195980][ T5608] hsr_slave_1: entered promiscuous mode [ 83.205074][ T5617] team0: Port device team_slave_1 added [ 83.227681][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.234904][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.260895][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.295138][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.302416][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.329155][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.360731][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.368104][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.394176][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.406025][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.413303][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.439627][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.471486][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.478490][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.504546][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.583807][ T5610] hsr_slave_0: entered promiscuous mode [ 83.590227][ T5610] hsr_slave_1: entered promiscuous mode [ 83.596681][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 83.602847][ T5610] Cannot create hsr debugfs directory [ 83.640963][ T5609] hsr_slave_0: entered promiscuous mode [ 83.647470][ T5609] hsr_slave_1: entered promiscuous mode [ 83.653822][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 83.659566][ T5609] Cannot create hsr debugfs directory [ 83.741534][ T5607] hsr_slave_0: entered promiscuous mode [ 83.747885][ T5607] hsr_slave_1: entered promiscuous mode [ 83.754206][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 83.759952][ T5607] Cannot create hsr debugfs directory [ 83.798254][ T5617] hsr_slave_0: entered promiscuous mode [ 83.804964][ T5617] hsr_slave_1: entered promiscuous mode [ 83.811842][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 83.817629][ T5617] Cannot create hsr debugfs directory [ 84.272037][ T5612] Bluetooth: hci0: command tx timeout [ 84.278035][ T5614] Bluetooth: hci3: command tx timeout [ 84.283792][ T50] Bluetooth: hci2: command tx timeout [ 84.284238][ T4927] Bluetooth: hci1: command tx timeout [ 84.320496][ T5608] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.338914][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.346872][ T5608] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.353719][ T4927] Bluetooth: hci4: command tx timeout [ 84.363130][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.371776][ T5608] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.382236][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.390135][ T5608] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.400443][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.504388][ T5610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.517909][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.526025][ T5610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.537338][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.545640][ T5610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.555629][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.563755][ T5610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.574816][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.649535][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.664744][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.672888][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.682506][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.690569][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.700594][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.722012][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.733597][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.858988][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.866832][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.877170][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.886502][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.896515][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.928128][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.939644][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.947786][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.958659][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.013109][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.049537][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.056959][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.068551][ T5607] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.079772][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.088075][ T5607] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.100052][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.108067][ T5607] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.118497][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.126954][ T5607] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.137740][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.170056][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.177206][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.274297][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.304795][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.323122][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.355847][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.363001][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.384056][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.407245][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.414639][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.458797][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.466026][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.499103][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.506322][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.588052][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.677759][ T5610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.699239][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.732565][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.742735][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.749925][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.784952][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.792217][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.908713][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.956680][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.963886][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.001139][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.008383][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.338392][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.352491][ T4927] Bluetooth: hci2: command tx timeout [ 86.353808][ T50] Bluetooth: hci3: command tx timeout [ 86.357969][ T4927] Bluetooth: hci0: command tx timeout [ 86.357992][ T4927] Bluetooth: hci1: command tx timeout [ 86.432418][ T50] Bluetooth: hci4: command tx timeout [ 86.647786][ T5608] veth0_vlan: entered promiscuous mode [ 86.715792][ T5608] veth1_vlan: entered promiscuous mode [ 86.845052][ T5608] veth0_macvtap: entered promiscuous mode [ 86.877934][ T5608] veth1_macvtap: entered promiscuous mode [ 86.980817][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.043277][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.110238][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.142554][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.401886][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.412688][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.436568][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.460055][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.544935][ T5610] veth0_vlan: entered promiscuous mode [ 87.562044][ T5610] veth1_vlan: entered promiscuous mode [ 87.584234][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.606741][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.615879][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.632922][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.766691][ T5609] veth0_vlan: entered promiscuous mode [ 87.801219][ T5610] veth0_macvtap: entered promiscuous mode [ 87.827741][ T5608] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.839430][ T5610] veth1_macvtap: entered promiscuous mode [ 87.857722][ T5609] veth1_vlan: entered promiscuous mode [ 87.872310][ T497] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.964327][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.991397][ T497] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.017146][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.027182][ T5617] veth0_vlan: entered promiscuous mode [ 88.074652][ T5609] veth0_macvtap: entered promiscuous mode [ 88.110328][ T5617] veth1_vlan: entered promiscuous mode [ 88.144775][ T5609] veth1_macvtap: entered promiscuous mode [ 88.245870][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.295438][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.308483][ T497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.319918][ T497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.332103][ T1169] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.396875][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.408402][ T77] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.417294][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.431697][ T5614] Bluetooth: hci0: command tx timeout [ 88.432624][ T4927] Bluetooth: hci2: command tx timeout [ 88.437860][ T5614] Bluetooth: hci3: command tx timeout [ 88.445134][ T5617] veth0_macvtap: entered promiscuous mode [ 88.448253][ T50] Bluetooth: hci1: command tx timeout [ 88.473719][ T1116] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.485476][ T1116] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.511388][ T50] Bluetooth: hci4: command tx timeout [ 88.516930][ T1169] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.539051][ T1169] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.549741][ T5811] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7'. [ 88.563650][ T5607] veth0_vlan: entered promiscuous mode [ 88.570368][ T5617] veth1_macvtap: entered promiscuous mode [ 88.582636][ T77] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.673394][ T5607] veth1_vlan: entered promiscuous mode [ 88.738955][ T5815] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'. [ 88.787984][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.798321][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.812218][ T1116] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.822236][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.847508][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.936691][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.941970][ T77] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.955253][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.972351][ T5607] veth0_macvtap: entered promiscuous mode [ 88.986960][ T5819] batadv1: entered promiscuous mode [ 88.994145][ T5819] batadv1: entered allmulticast mode [ 89.002862][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 89.014196][ T5607] veth1_macvtap: entered promiscuous mode [ 89.137061][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.165800][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.313758][ T1169] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.337246][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.337514][ T1169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.360884][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.377720][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.485127][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.508589][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.611469][ T1116] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.655640][ T77] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.734609][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.778531][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.927939][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.936901][ T1169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.963851][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.974547][ T1169] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.096279][ T5851] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 90.461959][ T5860] x_tables: ip_tables: ah match: only valid for protocol 51 [ 90.863045][ T5874] IPVS: set_ctl: invalid protocol: 0 172.30.0.5:20002 [ 90.890913][ T5871] netlink: 36 bytes leftover after parsing attributes in process `syz.1.18'. [ 90.926949][ T5871] netlink: 36 bytes leftover after parsing attributes in process `syz.1.18'. [ 91.009382][ T5871] netlink: 31 bytes leftover after parsing attributes in process `syz.1.18'. [ 91.107499][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.154210][ T5894] Zero length message leads to an empty skb [ 91.413093][ T5898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24'. [ 91.528758][ T5905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26'. [ 91.584450][ T5905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26'. [ 91.690156][ T5909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 91.798563][ T24] cfg80211: failed to load regulatory.db [ 91.928049][ T5915] syzkaller1: entered promiscuous mode [ 91.945794][ T5918] netlink: 260 bytes leftover after parsing attributes in process `syz.3.32'. [ 91.960933][ T5915] syzkaller1: entered allmulticast mode [ 92.020402][ T5923] netlink: 'syz.1.34': attribute type 1 has an invalid length. [ 92.125997][ T5926] warning: `syz.1.34' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 92.234340][ T5931] veth2: entered promiscuous mode [ 92.420482][ T5940] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 93.041420][ T35] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.087504][ T35] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.122123][ T35] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.156866][ T35] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.560058][ T5985] __nla_validate_parse: 6 callbacks suppressed [ 93.560078][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.57'. [ 93.832972][ T5997] netlink: 830 bytes leftover after parsing attributes in process `syz.0.61'. [ 93.854486][ T5996] vcan0: tx drop: invalid sa for name 0x0000000002000200 [ 94.319732][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.327017][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.149861][ T6043] netlink: 7 bytes leftover after parsing attributes in process `syz.1.74'. [ 95.210717][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.76'. [ 95.229381][ T6049] FAULT_INJECTION: forcing a failure. [ 95.229381][ T6049] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 95.262741][ T6049] CPU: 0 UID: 0 PID: 6049 Comm: syz.2.77 Not tainted syzkaller #0 PREEMPT(full) [ 95.262766][ T6049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.262786][ T6049] Call Trace: [ 95.262794][ T6049] [ 95.262803][ T6049] dump_stack_lvl+0xe8/0x150 [ 95.262850][ T6049] should_fail_ex+0x40c/0x560 [ 95.262876][ T6049] _copy_from_user+0x2d/0xb0 [ 95.262907][ T6049] bpf_test_init+0xd8/0x150 [ 95.262935][ T6049] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 95.262977][ T6049] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 95.263007][ T6049] ? __fget_files+0x2a/0x420 [ 95.263039][ T6049] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 95.263064][ T6049] bpf_prog_test_run+0x2c5/0x340 [ 95.263096][ T6049] __sys_bpf+0xa22/0xd90 [ 95.263130][ T6049] ? __pfx___sys_bpf+0x10/0x10 [ 95.263178][ T6049] ? __fget_files+0x2a/0x420 [ 95.263226][ T6049] ? rcu_is_watching+0x15/0xb0 [ 95.263270][ T6049] __x64_sys_bpf+0xba/0xd0 [ 95.263294][ T6049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.263317][ T6049] do_syscall_64+0x174/0x580 [ 95.263346][ T6049] ? trace_irq_disable+0x3b/0x140 [ 95.263372][ T6049] ? clear_bhb_loop+0x70/0xc0 [ 95.263397][ T6049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.263417][ T6049] RIP: 0033:0x7f084a99e0d9 [ 95.263455][ T6049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.263471][ T6049] RSP: 002b:00007f084b7c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 95.263509][ T6049] RAX: ffffffffffffffda RBX: 00007f084ac25fa0 RCX: 00007f084a99e0d9 [ 95.263522][ T6049] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 95.263534][ T6049] RBP: 00007f084b7c3090 R08: 0000000000000000 R09: 0000000000000000 [ 95.263545][ T6049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.263555][ T6049] R13: 00007f084ac26038 R14: 00007f084ac25fa0 R15: 00007fff9ff1f168 [ 95.263586][ T6049] [ 95.541991][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.78'. [ 95.663485][ T6043] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.735135][ T6056] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 95.979154][ T6043] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.172170][ T6043] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.222056][ T6073] syzkaller0: entered promiscuous mode [ 96.239702][ T6073] syzkaller0: entered allmulticast mode [ 96.363718][ T6043] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.458467][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'. [ 96.476786][ T6085] netlink: 'syz.0.88': attribute type 5 has an invalid length. [ 96.496662][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.88'. [ 96.723794][ T6091] netlink: 'syz.3.89': attribute type 4 has an invalid length. [ 96.810617][ T6090] bond1: option packets_per_slave: invalid value (875837489) [ 96.818578][ T6090] bond1: option packets_per_slave: allowed values 0 - 65535 [ 96.839153][ T6090] bond1 (unregistering): Released all slaves [ 97.252005][ T6071] syz.4.84 (6071) used greatest stack depth: 15936 bytes left [ 97.438240][ T6107] 8021q: VLANs not supported on ip6tnl0 [ 97.463150][ T48] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.476226][ T48] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.484676][ T6112] netlink: 40 bytes leftover after parsing attributes in process `syz.3.95'. [ 97.494867][ T48] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.679439][ T6114] netlink: 'syz.2.97': attribute type 6 has an invalid length. [ 97.926496][ T6107] batadv1: left promiscuous mode [ 97.971583][ T6114] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 98.021664][ T77] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.038298][ T5779] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 98.354820][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.102'. [ 98.558555][ T6149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.110'. [ 98.588205][ T6149] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 98.760126][ T6158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.112'. [ 99.000618][ T6165] netlink: 'syz.3.115': attribute type 6 has an invalid length. [ 99.050399][ T6165] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 99.075723][ T5705] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 99.526720][ T6184] syz.2.122 uses obsolete (PF_INET,SOCK_PACKET) [ 99.685243][ T6197] Driver unsupported XDP return value 0 on prog (id 41) dev N/A, expect packet loss! [ 99.834870][ T6205] netlink: 'syz.2.129': attribute type 6 has an invalid length. [ 99.896070][ T6203] ipvlan2: entered promiscuous mode [ 99.947428][ T6202] netlink: 16 bytes leftover after parsing attributes in process `syz.0.127'. [ 99.976944][ T6201] netlink: 16 bytes leftover after parsing attributes in process `syz.0.127'. [ 99.999442][ T6201] tc action pedit offset must be on 32 bit boundaries [ 100.007118][ T6201] tc action pedit offset must be on 32 bit boundaries [ 100.013976][ T6201] tc action pedit offset must be on 32 bit boundaries [ 100.020780][ T6201] tc action pedit offset must be on 32 bit boundaries [ 100.027618][ T6201] tc action pedit offset must be on 32 bit boundaries [ 100.034434][ T6201] tc action pedit offset must be on 32 bit boundaries [ 100.041254][ T6201] tc action pedit offset must be on 32 bit boundaries [ 100.048050][ T6201] tc action pedit offset must be on 32 bit boundaries [ 100.054882][ T6201] tc action pedit offset must be on 32 bit boundaries [ 100.061704][ T6201] tc action pedit offset must be on 32 bit boundaries [ 100.068540][ T6201] TC_ACT_REPEAT abuse ? [ 100.105007][ T6213] bond0: entered promiscuous mode [ 100.142880][ T6213] bond_slave_0: entered promiscuous mode [ 100.161608][ T6213] bond_slave_1: entered promiscuous mode [ 100.173147][ T6213] batadv0: entered promiscuous mode [ 100.183518][ T6213] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 100.204177][ T6213] bond0: left promiscuous mode [ 100.215314][ T6213] bond_slave_0: left promiscuous mode [ 100.222769][ T6213] bond_slave_1: left promiscuous mode [ 100.229561][ T6213] batadv0: left promiscuous mode [ 100.947690][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.137'. [ 101.611276][ T6248] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 101.637586][ T6247] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 102.133134][ T6283] netlink: 20 bytes leftover after parsing attributes in process `syz.4.148'. [ 102.582478][ T6292] netlink: 60 bytes leftover after parsing attributes in process `syz.4.151'. [ 102.739593][ T6289] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.747548][ T6289] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.833972][ T6290] netlink: 156 bytes leftover after parsing attributes in process `syz.0.150'. [ 103.072553][ T6289] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 103.124277][ T6294] netlink: 60 bytes leftover after parsing attributes in process `syz.4.151'. [ 103.347841][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.152'. [ 104.056035][ T6326] syzkaller1: entered promiscuous mode [ 104.082158][ T6326] syzkaller1: entered allmulticast mode [ 104.187430][ T6336] netlink: 60 bytes leftover after parsing attributes in process `syz.2.163'. [ 104.221631][ T6336] netlink: 60 bytes leftover after parsing attributes in process `syz.2.163'. [ 104.355612][ T6338] netlink: 144 bytes leftover after parsing attributes in process `syz.0.164'. [ 104.881530][ T6366] netlink: 60 bytes leftover after parsing attributes in process `syz.0.177'. [ 104.895398][ T6357] ip6t_REJECT: ECHOREPLY is not supported [ 104.920847][ T6366] netlink: 60 bytes leftover after parsing attributes in process `syz.0.177'. [ 105.217188][ T6381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.180'. [ 105.357921][ T6381] team1: entered promiscuous mode [ 105.371336][ T6381] team1: entered allmulticast mode [ 105.389989][ T6381] 8021q: adding VLAN 0 to HW filter on device team1 [ 105.495681][ T6399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.594133][ T6399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.606544][ T6399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.737004][ T6408] netlink: 20 bytes leftover after parsing attributes in process `syz.3.187'. [ 105.840473][ T6412] netlink: 60 bytes leftover after parsing attributes in process `syz.3.190'. [ 105.863920][ T6412] netlink: 60 bytes leftover after parsing attributes in process `syz.3.190'. [ 105.885688][ T6414] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004 [ 106.077233][ T6419] netlink: 24 bytes leftover after parsing attributes in process `syz.3.191'. [ 106.588865][ T6444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.188927][ T6473] netlink: 'syz.2.206': attribute type 5 has an invalid length. [ 107.332424][ T6474] syzkaller0: entered promiscuous mode [ 107.338499][ T6474] syzkaller0: entered allmulticast mode [ 107.397313][ T6481] netlink: 'syz.0.207': attribute type 8 has an invalid length. [ 107.692406][ T6493] syz_tun: entered allmulticast mode [ 107.727006][ T6494] dvmrp8: entered allmulticast mode [ 107.883439][ T6504] netlink: 'syz.0.212': attribute type 4 has an invalid length. [ 108.892596][ T6504] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 108.893630][ T6487] syz_tun: left allmulticast mode [ 109.572844][ T6538] __nla_validate_parse: 12 callbacks suppressed [ 109.572864][ T6538] netlink: 60 bytes leftover after parsing attributes in process `syz.2.220'. [ 109.656268][ T6531] syzkaller0: entered promiscuous mode [ 109.663348][ T6531] syzkaller0: entered allmulticast mode [ 109.672855][ T6547] netlink: 60 bytes leftover after parsing attributes in process `syz.2.220'. [ 109.747305][ T6548] netlink: 'syz.1.223': attribute type 1 has an invalid length. [ 109.790790][ T6550] netlink: 'syz.0.225': attribute type 4 has an invalid length. [ 109.955808][ T6556] netlink: 60 bytes leftover after parsing attributes in process `syz.0.228'. [ 116.304098][ T6639] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 116.342727][ T3323] IPVS: starting estimator thread 0... [ 116.454240][ T6655] IPVS: using max 28 ests per chain, 67200 per kthread [ 116.485570][ T6639] netlink: 'syz.1.242': attribute type 3 has an invalid length. [ 118.071050][ T6666] netlink: 144 bytes leftover after parsing attributes in process `syz.2.246'. [ 118.375743][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.253'. [ 118.925930][ T6724] netlink: 20 bytes leftover after parsing attributes in process `syz.0.261'. [ 119.179297][ T6730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.263'. [ 119.508426][ T6738] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 119.518326][ T6618] IPVS: starting estimator thread 0... [ 119.631467][ T6745] IPVS: using max 25 ests per chain, 60000 per kthread [ 119.720036][ T6734] netlink: 'syz.4.264': attribute type 3 has an invalid length. [ 121.317521][ T6777] netlink: 20 bytes leftover after parsing attributes in process `syz.1.273'. [ 121.563991][ T6792] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 121.591384][ T6792] bond1 (unregistering): Released all slaves [ 121.686551][ T6799] netlink: 'syz.2.280': attribute type 6 has an invalid length. [ 121.938606][ T6808] syzkaller0: entered promiscuous mode [ 121.960010][ T6808] syzkaller0: entered allmulticast mode [ 122.006752][ T6812] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 122.054774][ T6807] netlink: 24 bytes leftover after parsing attributes in process `syz.4.282'. [ 122.076060][ T6815] netlink: 16 bytes leftover after parsing attributes in process `syz.2.286'. [ 122.090450][ T6810] netlink: 'syz.1.285': attribute type 3 has an invalid length. [ 122.098978][ T6815] netlink: 16 bytes leftover after parsing attributes in process `syz.2.286'. [ 122.275824][ T6823] netlink: 32 bytes leftover after parsing attributes in process `syz.0.289'. [ 123.700245][ T6841] netlink: 'syz.3.296': attribute type 6 has an invalid length. [ 124.054069][ T6860] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20001 [ 124.254481][ T6870] netlink: 60 bytes leftover after parsing attributes in process `syz.1.306'. [ 124.278809][ T6867] netlink: 60 bytes leftover after parsing attributes in process `syz.0.307'. [ 124.298524][ T6867] netlink: 60 bytes leftover after parsing attributes in process `syz.0.307'. [ 124.310425][ T6873] FAULT_INJECTION: forcing a failure. [ 124.310425][ T6873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.331391][ T6873] CPU: 1 UID: 0 PID: 6873 Comm: syz.1.306 Not tainted syzkaller #0 PREEMPT(full) [ 124.331426][ T6873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.331438][ T6873] Call Trace: [ 124.331446][ T6873] [ 124.331454][ T6873] dump_stack_lvl+0xe8/0x150 [ 124.331500][ T6873] should_fail_ex+0x40c/0x560 [ 124.331527][ T6873] _copy_from_user+0x2d/0xb0 [ 124.331556][ T6873] ___sys_recvmsg+0x173/0x5a0 [ 124.331588][ T6873] ? __pfx____sys_recvmsg+0x10/0x10 [ 124.331617][ T6873] ? __fget_files+0x2a/0x420 [ 124.331662][ T6873] ? __fget_files+0x3a2/0x420 [ 124.331699][ T6873] __x64_sys_recvmsg+0x1ae/0x290 [ 124.331726][ T6873] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 124.331766][ T6873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.331784][ T6873] do_syscall_64+0x174/0x580 [ 124.331808][ T6873] ? trace_irq_disable+0x3b/0x140 [ 124.331828][ T6873] ? clear_bhb_loop+0x70/0xc0 [ 124.331848][ T6873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.331864][ T6873] RIP: 0033:0x7f31b5b9e0d9 [ 124.331888][ T6873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.331901][ T6873] RSP: 002b:00007f31b6a47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 124.331924][ T6873] RAX: ffffffffffffffda RBX: 00007f31b5e26090 RCX: 00007f31b5b9e0d9 [ 124.331935][ T6873] RDX: 0000000000012000 RSI: 0000200000000040 RDI: 0000000000000003 [ 124.331945][ T6873] RBP: 00007f31b6a47090 R08: 0000000000000000 R09: 0000000000000000 [ 124.331955][ T6873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.331966][ T6873] R13: 00007f31b5e26128 R14: 00007f31b5e26090 R15: 00007fff57e07718 [ 124.331996][ T6873] [ 124.340141][ T6874] x_tables: duplicate underflow at hook 1 [ 124.948835][ T6881] netlink: 32 bytes leftover after parsing attributes in process `syz.1.310'. [ 126.713979][ T6946] netlink: 68 bytes leftover after parsing attributes in process `syz.4.331'. [ 126.920216][ T6946] netlink: 68 bytes leftover after parsing attributes in process `syz.4.331'. [ 127.119790][ T6946] netlink: 68 bytes leftover after parsing attributes in process `syz.4.331'. [ 127.161695][ T6946] netlink: 68 bytes leftover after parsing attributes in process `syz.4.331'. [ 127.173610][ T6946] netlink: 68 bytes leftover after parsing attributes in process `syz.4.331'. [ 127.205410][ T6946] netlink: 68 bytes leftover after parsing attributes in process `syz.4.331'. [ 127.544890][ T6980] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 127.552501][ T6980] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 128.170897][ T7008] Bluetooth: MGMT ver 1.23 [ 128.213938][ T7008] netlink: 'syz.3.346': attribute type 12 has an invalid length. [ 128.249941][ T7008] netlink: 'syz.3.346': attribute type 14 has an invalid length. [ 128.578650][ T50] Bluetooth: hci4: link tx timeout [ 128.584679][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.641659][ T7017] syzkaller0: entered promiscuous mode [ 128.669029][ T7017] syzkaller0: entered allmulticast mode [ 129.427262][ T7052] __nla_validate_parse: 65 callbacks suppressed [ 129.427284][ T7052] netlink: 76 bytes leftover after parsing attributes in process `syz.1.363'. [ 130.211092][ T7068] netlink: 24 bytes leftover after parsing attributes in process `syz.0.368'. [ 130.325156][ T7070] netlink: 'syz.1.369': attribute type 10 has an invalid length. [ 130.384979][ T7075] netlink: 108 bytes leftover after parsing attributes in process `syz.4.371'. [ 130.401910][ T7070] team0: Port device dummy0 added [ 130.497998][ T7079] netlink: 'syz.0.373': attribute type 1 has an invalid length. [ 130.559625][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.374'. [ 130.603615][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.374'. [ 130.673045][ T5614] Bluetooth: hci4: command 0x0406 tx timeout [ 131.104724][ T7105] smc: net device lo applied user defined pnetid SYZ0 [ 131.126180][ T7105] smc: smcd device lo applied user defined pnetid SYZ0 [ 131.734380][ T7102] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 131.769690][ T7102] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 131.875159][ T7153] netlink: 'syz.2.392': attribute type 2 has an invalid length. [ 131.879599][ T7102] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 131.929431][ T7102] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 132.017090][ T7102] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 132.044286][ T7102] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 132.059904][ T7165] netlink: 20 bytes leftover after parsing attributes in process `syz.3.394'. [ 132.116804][ T7102] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 132.145816][ T7102] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 132.328426][ T7173] mac80211_hwsim hwsim6 »»»»»»Â: renamed from wlan0 (while UP) [ 132.710708][ T7193] netlink: 36 bytes leftover after parsing attributes in process `syz.2.402'. [ 132.755462][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.768062][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.800983][ T7194] netlink: 'syz.2.402': attribute type 1 has an invalid length. [ 132.821704][ T7194] netlink: 20 bytes leftover after parsing attributes in process `syz.2.402'. [ 132.882722][ T7203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.404'. [ 133.360441][ T7229] netlink: 60 bytes leftover after parsing attributes in process `syz.2.408'. [ 133.758824][ T7247] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 134.387398][ T7277] xt_hashlimit: size too large, truncated to 1048576 [ 134.492266][ T7287] netlink: 120 bytes leftover after parsing attributes in process `syz.3.421'. [ 134.545582][ T7287] netlink: 36 bytes leftover after parsing attributes in process `syz.3.421'. [ 134.807621][ T7294] netlink: 'syz.1.422': attribute type 1 has an invalid length. [ 135.216947][ T7314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.428'. [ 135.520167][ T7327] netlink: 24 bytes leftover after parsing attributes in process `syz.3.431'. [ 135.766977][ T7337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.434'. [ 135.825513][ T7327] netlink: 24 bytes leftover after parsing attributes in process `syz.3.431'. [ 136.014842][ T7329] syzkaller0: entered promiscuous mode [ 136.068349][ T7329] syzkaller0: entered allmulticast mode [ 136.222790][ T7351] syzkaller1: entered promiscuous mode [ 136.229732][ T7351] syzkaller1: entered allmulticast mode [ 136.538483][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'. [ 138.596575][ T7422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.453'. [ 138.861357][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.459'. [ 139.288722][ T7458] FAULT_INJECTION: forcing a failure. [ 139.288722][ T7458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.305114][ T7458] CPU: 1 UID: 0 PID: 7458 Comm: syz.4.465 Not tainted syzkaller #0 PREEMPT(full) [ 139.305141][ T7458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.305153][ T7458] Call Trace: [ 139.305162][ T7458] [ 139.305170][ T7458] dump_stack_lvl+0xe8/0x150 [ 139.305229][ T7458] should_fail_ex+0x40c/0x560 [ 139.305257][ T7458] _copy_from_iter+0x1d3/0x1660 [ 139.305280][ T7458] ? kmem_cache_alloc_node_noprof+0x1d1/0x610 [ 139.305304][ T7458] ? rcu_is_watching+0x15/0xb0 [ 139.305334][ T7458] ? trace_kmem_cache_alloc+0x29/0xe0 [ 139.305359][ T7458] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 139.305383][ T7458] ? __pfx__copy_from_iter+0x10/0x10 [ 139.305407][ T7458] ? __alloc_skb+0x276/0x7a0 [ 139.305425][ T7458] ? __alloc_skb+0x276/0x7a0 [ 139.305450][ T7458] ? netlink_sendmsg+0x650/0xb40 [ 139.305474][ T7458] ? skb_put+0x112/0x210 [ 139.305497][ T7458] netlink_sendmsg+0x6c0/0xb40 [ 139.305532][ T7458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.305560][ T7458] ? aa_sock_msg_perm+0xf1/0x1b0 [ 139.305596][ T7458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.305619][ T7458] sock_sendmsg_nosec+0x13a/0x180 [ 139.305659][ T7458] ____sys_sendmsg+0x54e/0x850 [ 139.305688][ T7458] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.305721][ T7458] ? import_iovec+0x73/0xa0 [ 139.305751][ T7458] ___sys_sendmsg+0x2a5/0x360 [ 139.305772][ T7458] ? __lock_acquire+0x683/0x2cf0 [ 139.305801][ T7458] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.305828][ T7458] ? kstrtouint+0x6e/0xe0 [ 139.305877][ T7458] ? __fget_files+0x2a/0x420 [ 139.305901][ T7458] ? __fget_files+0x3a2/0x420 [ 139.305937][ T7458] __sys_sendmmsg+0x273/0x4d0 [ 139.305966][ T7458] ? __pfx___sys_sendmmsg+0x10/0x10 [ 139.306000][ T7458] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 139.306046][ T7458] ? ksys_write+0x242/0x270 [ 139.306080][ T7458] ? __pfx_ksys_write+0x10/0x10 [ 139.306116][ T7458] __x64_sys_sendmmsg+0xa0/0xc0 [ 139.306138][ T7458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.306160][ T7458] do_syscall_64+0x174/0x580 [ 139.306189][ T7458] ? trace_irq_disable+0x3b/0x140 [ 139.306213][ T7458] ? clear_bhb_loop+0x70/0xc0 [ 139.306239][ T7458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.306259][ T7458] RIP: 0033:0x7feb8959e0d9 [ 139.306278][ T7458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.306295][ T7458] RSP: 002b:00007feb8a4c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 139.306316][ T7458] RAX: ffffffffffffffda RBX: 00007feb89825fa0 RCX: 00007feb8959e0d9 [ 139.306332][ T7458] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 139.306345][ T7458] RBP: 00007feb8a4c6090 R08: 0000000000000000 R09: 0000000000000000 [ 139.306357][ T7458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.306369][ T7458] R13: 00007feb89826038 R14: 00007feb89825fa0 R15: 00007fff3ed035b8 [ 139.306401][ T7458] [ 140.411082][ T7484] syzkaller0: entered promiscuous mode [ 140.430381][ T7484] syzkaller0: entered allmulticast mode [ 140.472470][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.474'. [ 141.058908][ T7516] netlink: 'syz.0.477': attribute type 15 has an invalid length. [ 141.120815][ T7496] netlink: 24 bytes leftover after parsing attributes in process `syz.1.473'. [ 142.169283][ T7520] netlink: Setting conntrack mark requires 'commit' flag. [ 142.200268][ T7520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.245757][ T7520] netlink: 48 bytes leftover after parsing attributes in process `syz.3.479'. [ 142.285045][ T7520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.479'. [ 142.482368][ T7530] veth0: entered promiscuous mode [ 142.698512][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.488'. [ 142.776205][ T7529] veth0: left promiscuous mode [ 143.053753][ T7551] ip_tables: iptables: counters copy to user failed while replacing table [ 143.068153][ T7549] syzkaller0: entered promiscuous mode [ 143.077380][ T7549] syzkaller0: entered allmulticast mode [ 144.964205][ T7591] syzkaller0: entered promiscuous mode [ 144.970053][ T7583] netlink: 24 bytes leftover after parsing attributes in process `syz.2.500'. [ 144.987927][ T7591] syzkaller0: entered allmulticast mode [ 145.902951][ T7619] syzkaller0: entered promiscuous mode [ 145.910561][ T7619] syzkaller0: entered allmulticast mode [ 146.199386][ T7642] No such timeout policy "syz1" [ 146.217187][ T7642] netlink: 'syz.2.514': attribute type 1 has an invalid length. [ 147.218106][ T7642] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 147.439551][ T7654] syzkaller0: entered promiscuous mode [ 147.499413][ T7654] syzkaller0: entered allmulticast mode [ 148.015431][ T7679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.525'. [ 148.280257][ T7681] syzkaller0: entered promiscuous mode [ 148.299859][ T7681] syzkaller0: entered allmulticast mode [ 150.078520][ T7692] syzkaller1: entered promiscuous mode [ 150.084441][ T7692] syzkaller1: entered allmulticast mode [ 150.794325][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.542'. [ 150.832816][ T7749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.543'. [ 150.859030][ T7749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.543'. [ 150.895859][ T7747] vlan2: entered promiscuous mode [ 150.901321][ T7747] bridge0: entered promiscuous mode [ 150.966304][ T7757] netlink: 179624 bytes leftover after parsing attributes in process `syz.1.546'. [ 151.121743][ T7754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.174149][ T7754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.434633][ T7754] team1: left promiscuous mode [ 151.451291][ T7754] team1: left allmulticast mode [ 151.469280][ T7766] netlink: 'syz.1.547': attribute type 1 has an invalid length. [ 151.609106][ T7769] syzkaller0: entered promiscuous mode [ 151.645333][ T7769] syzkaller0: entered allmulticast mode [ 151.689044][ T7784] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 151.711458][ T48] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.737278][ T48] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.768651][ T48] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.796632][ T48] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.217631][ T7798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.558'. [ 153.205905][ T7791] batadv0: entered promiscuous mode [ 153.214520][ T7791] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 153.225474][ T7791] batadv0: left promiscuous mode [ 153.349491][ T7798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.558'. [ 153.413175][ T6618] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.445613][ T6618] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.468643][ T6618] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.499750][ T6618] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.512724][ T6618] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.547352][ T6618] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.575510][ T6618] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.611103][ T6618] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.628657][ T7817] netlink: 60 bytes leftover after parsing attributes in process `syz.2.563'. [ 153.895282][ T7834] netlink: 52 bytes leftover after parsing attributes in process `syz.3.567'. [ 153.935531][ T7835] netlink: 40 bytes leftover after parsing attributes in process `syz.0.568'. [ 153.992147][ T7839] netlink: 28 bytes leftover after parsing attributes in process `syz.0.568'. [ 154.129057][ T7834] syzkaller0: entered promiscuous mode [ 154.153995][ T7834] syzkaller0: entered allmulticast mode [ 154.359655][ T7853] netlink: 16 bytes leftover after parsing attributes in process `syz.2.571'. [ 154.759540][ T7866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.807893][ T7866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.145009][ T7883] netlink: 16 bytes leftover after parsing attributes in process `syz.1.580'. [ 155.223776][ T7885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.581'. [ 155.277041][ T7885] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 155.379064][ T7889] netlink: 'syz.3.582': attribute type 1 has an invalid length. [ 155.405628][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.582'. [ 155.428593][ T7891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.582'. [ 155.878544][ T5614] block nbd0: Receive control failed (result -32) [ 155.878544][ T50] block nbd0: Receive control failed (result -32) [ 156.184917][ T7919] Bluetooth: ISO socket layer initialized [ 156.296081][ T7919] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.304545][ T7919] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.453087][ T7930] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 156.665244][ T7937] erspan0: entered promiscuous mode [ 156.700261][ T7937] macvtap1: entered promiscuous mode [ 156.718353][ T7937] macvtap1: entered allmulticast mode [ 156.727539][ T7937] erspan0: entered allmulticast mode [ 156.752704][ T7943] erspan0: left allmulticast mode [ 156.762043][ T7943] erspan0: left promiscuous mode [ 156.767854][ T7943] macvtap1: left promiscuous mode [ 156.774059][ T7943] macvtap1: left allmulticast mode [ 157.188897][ T7967] FAULT_INJECTION: forcing a failure. [ 157.188897][ T7967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.230663][ T7967] CPU: 1 UID: 0 PID: 7967 Comm: syz.1.608 Not tainted syzkaller #0 PREEMPT(full) [ 157.230688][ T7967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.230699][ T7967] Call Trace: [ 157.230706][ T7967] [ 157.230714][ T7967] dump_stack_lvl+0xe8/0x150 [ 157.230745][ T7967] should_fail_ex+0x40c/0x560 [ 157.230769][ T7967] _copy_to_user+0x31/0xb0 [ 157.230799][ T7967] bpf_test_finish+0x4ea/0x690 [ 157.230830][ T7967] ? __pfx_bpf_test_finish+0x10/0x10 [ 157.230859][ T7967] ? _copy_from_user+0x94/0xb0 [ 157.230884][ T7967] ? bpf_test_init+0x113/0x150 [ 157.230906][ T7967] bpf_prog_test_run_xdp+0x8bc/0x11d0 [ 157.230943][ T7967] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 157.230980][ T7967] ? __fget_files+0x2a/0x420 [ 157.231009][ T7967] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 157.231032][ T7967] bpf_prog_test_run+0x2c5/0x340 [ 157.231062][ T7967] __sys_bpf+0xa22/0xd90 [ 157.231092][ T7967] ? __pfx___sys_bpf+0x10/0x10 [ 157.231126][ T7967] ? __fget_files+0x2a/0x420 [ 157.231169][ T7967] ? ksys_write+0x242/0x270 [ 157.231198][ T7967] ? __pfx_ksys_write+0x10/0x10 [ 157.231231][ T7967] __x64_sys_bpf+0xba/0xd0 [ 157.231251][ T7967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.231271][ T7967] do_syscall_64+0x174/0x580 [ 157.231297][ T7967] ? trace_irq_disable+0x3b/0x140 [ 157.231319][ T7967] ? clear_bhb_loop+0x70/0xc0 [ 157.231342][ T7967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.231360][ T7967] RIP: 0033:0x7f31b5b9e0d9 [ 157.231377][ T7967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.231392][ T7967] RSP: 002b:00007f31b6a68028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 157.231412][ T7967] RAX: ffffffffffffffda RBX: 00007f31b5e25fa0 RCX: 00007f31b5b9e0d9 [ 157.231425][ T7967] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 157.231436][ T7967] RBP: 00007f31b6a68090 R08: 0000000000000000 R09: 0000000000000000 [ 157.231448][ T7967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.231458][ T7967] R13: 00007f31b5e26038 R14: 00007f31b5e25fa0 R15: 00007fff57e07718 [ 157.231488][ T7967] [ 157.885497][ T7986] netlink: 'syz.4.615': attribute type 4 has an invalid length. [ 158.181793][ T7996] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 158.815809][ T8024] vxcan2: entered allmulticast mode [ 159.273886][ T8049] sctp: [Deprecated]: syz.3.637 (pid 8049) Use of int in maxseg socket option. [ 159.273886][ T8049] Use struct sctp_assoc_value instead [ 160.087860][ T8081] netlink: 'syz.0.646': attribute type 1 has an invalid length. [ 160.179412][ T8081] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.195052][ T8084] vlan3: entered promiscuous mode [ 160.204322][ T8081] __nla_validate_parse: 14 callbacks suppressed [ 160.204377][ T8081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.646'. [ 160.206523][ T8084] bond1: entered promiscuous mode [ 160.232940][ T8084] vlan3: entered allmulticast mode [ 160.245879][ T8084] bond1: entered allmulticast mode [ 160.354929][ T8088] netlink: 24 bytes leftover after parsing attributes in process `syz.4.649'. [ 160.379907][ T8080] bond1: option arp_all_targets: invalid value (3) [ 160.405431][ T8080] bond1 (unregistering): Released all slaves [ 160.774233][ T8109] netlink: 20 bytes leftover after parsing attributes in process `syz.0.655'. [ 160.815349][ T8103] tipc: Enabling of bearer rejected, failed to enable media [ 161.097327][ T8128] FAULT_INJECTION: forcing a failure. [ 161.097327][ T8128] name failslab, interval 1, probability 0, space 0, times 0 [ 161.128452][ T8128] CPU: 1 UID: 0 PID: 8128 Comm: syz.4.662 Not tainted syzkaller #0 PREEMPT(full) [ 161.128480][ T8128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.128492][ T8128] Call Trace: [ 161.128500][ T8128] [ 161.128509][ T8128] dump_stack_lvl+0xe8/0x150 [ 161.128543][ T8128] should_fail_ex+0x40c/0x560 [ 161.128571][ T8128] should_failslab+0xa8/0x100 [ 161.128604][ T8128] __kmalloc_noprof+0xfe/0x720 [ 161.128632][ T8128] ? bpf_test_init+0x9f/0x150 [ 161.128661][ T8128] ? bpf_test_init+0x9f/0x150 [ 161.128691][ T8128] bpf_test_init+0x9f/0x150 [ 161.128719][ T8128] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 161.128761][ T8128] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 161.128792][ T8128] ? __fget_files+0x2a/0x420 [ 161.128824][ T8128] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 161.128851][ T8128] bpf_prog_test_run+0x2c5/0x340 [ 161.128883][ T8128] __sys_bpf+0xa22/0xd90 [ 161.128918][ T8128] ? __pfx___sys_bpf+0x10/0x10 [ 161.128957][ T8128] ? __fget_files+0x2a/0x420 [ 161.129002][ T8128] ? ksys_write+0x242/0x270 [ 161.129035][ T8128] ? __pfx_ksys_write+0x10/0x10 [ 161.129076][ T8128] __x64_sys_bpf+0xba/0xd0 [ 161.129100][ T8128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.129123][ T8128] do_syscall_64+0x174/0x580 [ 161.129152][ T8128] ? trace_irq_disable+0x3b/0x140 [ 161.129177][ T8128] ? clear_bhb_loop+0x70/0xc0 [ 161.129203][ T8128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.129223][ T8128] RIP: 0033:0x7feb8959e0d9 [ 161.129242][ T8128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.129259][ T8128] RSP: 002b:00007feb8a4c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 161.129281][ T8128] RAX: ffffffffffffffda RBX: 00007feb89825fa0 RCX: 00007feb8959e0d9 [ 161.129295][ T8128] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 161.129308][ T8128] RBP: 00007feb8a4c6090 R08: 0000000000000000 R09: 0000000000000000 [ 161.129320][ T8128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.129332][ T8128] R13: 00007feb89826038 R14: 00007feb89825fa0 R15: 00007fff3ed035b8 [ 161.129365][ T8128] [ 161.379724][ T8126] netlink: 'syz.1.661': attribute type 30 has an invalid length. [ 161.478541][ T8133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.666'. [ 161.595651][ T8142] bridge_slave_0: left allmulticast mode [ 161.601481][ T8142] bridge_slave_0: left promiscuous mode [ 161.607420][ T8142] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.628816][ T8142] bridge_slave_1: left allmulticast mode [ 161.639339][ T8142] bridge_slave_1: left promiscuous mode [ 161.672592][ T8142] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.698704][ T8142] bond0: (slave bond_slave_0): Releasing backup interface [ 161.725594][ T8142] bond0: (slave bond_slave_1): Releasing backup interface [ 161.737308][ T8148] netlink: 'syz.1.670': attribute type 1 has an invalid length. [ 161.748211][ T8148] netlink: 236 bytes leftover after parsing attributes in process `syz.1.670'. [ 161.762017][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.670'. [ 161.776032][ T8142] team0: Port device team_slave_0 removed [ 161.787244][ T8142] team0: Port device team_slave_1 removed [ 161.794495][ T8142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.802226][ T8142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.811116][ T8142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.819585][ T8142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.854319][ T8142] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 161.890805][ T8145] team0: Port device xfrm0 added [ 161.961879][ T8154] bond1: option updelay: invalid value (18446744073709518847) [ 161.969600][ T8154] bond1: option updelay: allowed values 0 - 2147483647 [ 161.980632][ T8154] bond1 (unregistering): Released all slaves [ 162.030814][ T8147] syzkaller0: entered promiscuous mode [ 162.040450][ T8147] syzkaller0: entered allmulticast mode [ 162.251701][ T8167] netlink: 28 bytes leftover after parsing attributes in process `syz.3.673'. [ 162.451031][ T8173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.676'. [ 162.496297][ T8173] lo speed is unknown, defaulting to 1000 [ 162.519341][ T8173] lo speed is unknown, defaulting to 1000 [ 162.647509][ T8173] lo speed is unknown, defaulting to 1000 [ 162.724972][ T8173] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 162.779319][ T8173] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 162.840218][ T8173] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 162.919404][ T8173] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 163.038075][ T8173] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 163.217336][ T8173] lo speed is unknown, defaulting to 1000 [ 163.245628][ T8173] lo speed is unknown, defaulting to 1000 [ 163.260942][ T8173] lo speed is unknown, defaulting to 1000 [ 163.289768][ T8173] lo speed is unknown, defaulting to 1000 [ 163.332724][ T8173] lo speed is unknown, defaulting to 1000 [ 165.767613][ T8277] syzkaller0: entered promiscuous mode [ 165.773312][ T8277] syzkaller0: entered allmulticast mode [ 165.896140][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.731'. [ 165.907657][ T8294] netlink: 76 bytes leftover after parsing attributes in process `syz.4.732'. [ 166.008196][ T8300] nbd: must specify a size in bytes for the device [ 166.181045][ T8309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.736'. [ 166.205143][ T8309] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 166.216449][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.735'. [ 166.248310][ T8311] netlink: 144 bytes leftover after parsing attributes in process `syz.3.737'. [ 166.309441][ T8315] FAULT_INJECTION: forcing a failure. [ 166.309441][ T8315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.328191][ T8315] CPU: 1 UID: 0 PID: 8315 Comm: syz.0.738 Not tainted syzkaller #0 PREEMPT(full) [ 166.328215][ T8315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.328226][ T8315] Call Trace: [ 166.328233][ T8315] [ 166.328241][ T8315] dump_stack_lvl+0xe8/0x150 [ 166.328271][ T8315] should_fail_ex+0x40c/0x560 [ 166.328291][ T8315] _copy_to_user+0x31/0xb0 [ 166.328314][ T8315] bpf_test_finish+0x1cf/0x690 [ 166.328339][ T8315] ? __pfx_bpf_test_finish+0x10/0x10 [ 166.328362][ T8315] ? _copy_from_user+0x94/0xb0 [ 166.328381][ T8315] ? bpf_test_init+0x113/0x150 [ 166.328399][ T8315] bpf_prog_test_run_xdp+0x8bc/0x11d0 [ 166.328429][ T8315] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 166.328451][ T8315] ? __fget_files+0x2a/0x420 [ 166.328473][ T8315] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 166.328492][ T8315] bpf_prog_test_run+0x2c5/0x340 [ 166.328515][ T8315] __sys_bpf+0xa22/0xd90 [ 166.328539][ T8315] ? __pfx___sys_bpf+0x10/0x10 [ 166.328566][ T8315] ? __fget_files+0x2a/0x420 [ 166.328600][ T8315] ? rcu_is_watching+0x15/0xb0 [ 166.328627][ T8315] __x64_sys_bpf+0xba/0xd0 [ 166.328644][ T8315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.328660][ T8315] do_syscall_64+0x174/0x580 [ 166.328684][ T8315] ? trace_irq_disable+0x3b/0x140 [ 166.328702][ T8315] ? clear_bhb_loop+0x70/0xc0 [ 166.328720][ T8315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.328735][ T8315] RIP: 0033:0x7f6472f9e0d9 [ 166.328749][ T8315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.328761][ T8315] RSP: 002b:00007f6473e2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 166.328776][ T8315] RAX: ffffffffffffffda RBX: 00007f6473225fa0 RCX: 00007f6472f9e0d9 [ 166.328787][ T8315] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 166.328796][ T8315] RBP: 00007f6473e2c090 R08: 0000000000000000 R09: 0000000000000000 [ 166.328805][ T8315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.328814][ T8315] R13: 00007f6473226038 R14: 00007f6473225fa0 R15: 00007ffd9ea82ff8 [ 166.328837][ T8315] [ 167.027220][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.748'. [ 167.050594][ T8340] netlink: 24 bytes leftover after parsing attributes in process `syz.1.749'. [ 167.232545][ T8343] xt_CT: No such helper "netbios-ns" [ 167.487582][ T8358] FAULT_INJECTION: forcing a failure. [ 167.487582][ T8358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.514135][ T8359] netlink: 'syz.2.752': attribute type 1 has an invalid length. [ 167.529527][ T8358] CPU: 0 UID: 0 PID: 8358 Comm: syz.0.754 Not tainted syzkaller #0 PREEMPT(full) [ 167.529554][ T8358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 167.529573][ T8358] Call Trace: [ 167.529582][ T8358] [ 167.529590][ T8358] dump_stack_lvl+0xe8/0x150 [ 167.529624][ T8358] should_fail_ex+0x40c/0x560 [ 167.529651][ T8358] _copy_to_user+0x31/0xb0 [ 167.529682][ T8358] bpf_test_finish+0x4ea/0x690 [ 167.529717][ T8358] ? __pfx_bpf_test_finish+0x10/0x10 [ 167.529748][ T8358] ? _copy_from_user+0x94/0xb0 [ 167.529775][ T8358] ? bpf_test_init+0x113/0x150 [ 167.529800][ T8358] bpf_prog_test_run_xdp+0x8bc/0x11d0 [ 167.529843][ T8358] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 167.529874][ T8358] ? __fget_files+0x2a/0x420 [ 167.529906][ T8358] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 167.529932][ T8358] bpf_prog_test_run+0x2c5/0x340 [ 167.529965][ T8358] __sys_bpf+0xa22/0xd90 [ 167.529999][ T8358] ? __pfx___sys_bpf+0x10/0x10 [ 167.530037][ T8358] ? __fget_files+0x2a/0x420 [ 167.530081][ T8358] ? ksys_write+0x242/0x270 [ 167.530114][ T8358] ? __pfx_ksys_write+0x10/0x10 [ 167.530150][ T8358] __x64_sys_bpf+0xba/0xd0 [ 167.530174][ T8358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.530196][ T8358] do_syscall_64+0x174/0x580 [ 167.530226][ T8358] ? trace_irq_disable+0x3b/0x140 [ 167.530251][ T8358] ? clear_bhb_loop+0x70/0xc0 [ 167.530276][ T8358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.530297][ T8358] RIP: 0033:0x7f6472f9e0d9 [ 167.530317][ T8358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.530334][ T8358] RSP: 002b:00007f6473e2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 167.530355][ T8358] RAX: ffffffffffffffda RBX: 00007f6473225fa0 RCX: 00007f6472f9e0d9 [ 167.530370][ T8358] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 167.530382][ T8358] RBP: 00007f6473e2c090 R08: 0000000000000000 R09: 0000000000000000 [ 167.530394][ T8358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.530406][ T8358] R13: 00007f6473226038 R14: 00007f6473225fa0 R15: 00007ffd9ea82ff8 [ 167.530438][ T8358] [ 167.870852][ T8359] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.023062][ T8363] bond1: (slave geneve2): making interface the new active one [ 168.032725][ T8363] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 168.058508][ T9] lo speed is unknown, defaulting to 1000 [ 168.067178][ T9] syz2: Port: 1 Link DOWN [ 168.127808][ T8381] bridge0: port 3(vlan2) entered blocking state [ 168.134434][ T8381] bridge0: port 3(vlan2) entered disabled state [ 168.141086][ T8381] vlan2: entered allmulticast mode [ 168.146965][ T8381] batadv0: entered allmulticast mode [ 168.154943][ T8381] vlan2: entered promiscuous mode [ 168.162599][ T8381] batadv0: entered promiscuous mode [ 168.172331][ T8381] bridge0: port 3(vlan2) entered blocking state [ 168.178759][ T8381] bridge0: port 3(vlan2) entered forwarding state [ 168.274297][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.761'. [ 168.810631][ T8407] netlink: 'syz.0.767': attribute type 31 has an invalid length. [ 169.017781][ T8420] tipc: Started in network mode [ 169.045490][ T8420] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 169.118350][ T8420] tipc: Enabled bearer , priority 10 [ 169.322043][ T8440] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 169.374741][ T8440] netlink: 'syz.2.771': attribute type 1 has an invalid length. [ 169.436238][ T8440] netlink: 256 bytes leftover after parsing attributes in process `syz.2.771'. [ 169.483720][ T8444] Unknown options in mask 6 [ 169.562711][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.777'. [ 170.147229][ T8471] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 170.184466][ T5712] tipc: Node number set to 4269801488 [ 170.578417][ T8483] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.606236][ T8493] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 170.666062][ T8493] netlink: 'syz.1.793': attribute type 11 has an invalid length. [ 170.987147][ T8510] batman_adv: batadv0: Adding interface: gretap1 [ 171.025881][ T8510] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.118457][ T8510] batman_adv: batadv0: Interface activated: gretap1 [ 171.532357][ T8529] tipc: Started in network mode [ 171.549195][ T8529] tipc: Node identity 3a3b891d2aab, cluster identity 4711 [ 171.579485][ T8529] tipc: Enabled bearer , priority 0 [ 171.591663][ T8535] geneve1: entered promiscuous mode [ 171.605900][ T8535] geneve1: entered allmulticast mode [ 171.768213][ T8529] syzkaller0: entered promiscuous mode [ 171.793470][ T8529] syzkaller0: entered allmulticast mode [ 171.810119][ T8529] tipc: Resetting bearer [ 171.887179][ T8526] tipc: Resetting bearer [ 172.028499][ T8566] netlink: NAT attribute has 1 unknown bytes [ 172.045781][ T8566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.084148][ T8570] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20002 [ 173.472483][ T8526] tipc: Disabling bearer [ 173.505790][ T8582] geneve0: entered promiscuous mode [ 173.514546][ T8582] geneve0: left promiscuous mode [ 173.540059][ T5712] tipc: Node number set to 277907741 [ 174.065389][ T8618] __nla_validate_parse: 7 callbacks suppressed [ 174.065409][ T8618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.826'. [ 174.084422][ T8618] netlink: 40 bytes leftover after parsing attributes in process `syz.4.826'. [ 174.882877][ T8557] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 175.283472][ T8642] vlan0: entered promiscuous mode [ 175.296911][ T8642] team0: Port device vlan0 added [ 175.671464][ T8657] syzkaller0: entered promiscuous mode [ 175.677228][ T8657] syzkaller0: entered allmulticast mode [ 176.123168][ T8665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.843'. [ 176.419812][ T8670] netlink: 32 bytes leftover after parsing attributes in process `syz.2.845'. [ 176.852987][ T8688] netlink: 16 bytes leftover after parsing attributes in process `syz.2.849'. [ 177.030392][ T8692] FAULT_INJECTION: forcing a failure. [ 177.030392][ T8692] name failslab, interval 1, probability 0, space 0, times 0 [ 177.044108][ T8692] CPU: 1 UID: 0 PID: 8692 Comm: syz.2.851 Not tainted syzkaller #0 PREEMPT(full) [ 177.044148][ T8692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.044168][ T8692] Call Trace: [ 177.044180][ T8692] [ 177.044195][ T8692] dump_stack_lvl+0xe8/0x150 [ 177.044247][ T8692] should_fail_ex+0x40c/0x560 [ 177.044294][ T8692] should_failslab+0xa8/0x100 [ 177.044326][ T8692] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 177.044349][ T8692] ? local_lock_release+0x9c/0x160 [ 177.044384][ T8692] ? __alloc_skb+0x1d7/0x7a0 [ 177.044401][ T8692] ? __alloc_skb+0x1d7/0x7a0 [ 177.044428][ T8692] __alloc_skb+0x1d7/0x7a0 [ 177.044452][ T8692] xfrm_alloc_compat+0x1a6/0x1740 [ 177.044495][ T8692] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 177.044526][ T8692] xfrm_nlmsg_multicast+0xda/0x1f0 [ 177.044555][ T8692] xfrm_send_state_notify+0x120e/0x18d0 [ 177.044584][ T8692] ? km_state_notify+0x25/0x1f0 [ 177.044608][ T8692] ? lock_acquire+0x106/0x350 [ 177.044635][ T8692] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 177.044657][ T8692] ? km_state_notify+0x25/0x1f0 [ 177.044685][ T8692] ? ktime_get_with_offset+0x93/0x2d0 [ 177.044714][ T8692] ? km_state_notify+0x25/0x1f0 [ 177.044737][ T8692] ? km_state_notify+0x25/0x1f0 [ 177.044761][ T8692] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 177.044789][ T8692] km_state_notify+0x110/0x1f0 [ 177.044818][ T8692] xfrm_state_check_expire+0x435/0x4d0 [ 177.044842][ T8692] ? hrtimer_start_range_ns_common+0x812/0xb90 [ 177.044877][ T8692] ? __pfx_xfrm_state_check_expire+0x10/0x10 [ 177.044910][ T8692] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 177.044945][ T8692] xfrm_state_update+0xa3d/0x1380 [ 177.044980][ T8692] xfrm_add_sa+0x3566/0x40d0 [ 177.045016][ T8692] ? __pfx_xfrm_add_sa+0x10/0x10 [ 177.045040][ T8692] ? apparmor_capable+0x126/0x170 [ 177.045069][ T8692] ? __nla_parse+0x40/0x60 [ 177.045098][ T8692] xfrm_user_rcv_msg+0x7a8/0xf30 [ 177.045131][ T8692] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 177.045194][ T8692] ? __mutex_trylock_common+0x15f/0x270 [ 177.045230][ T8692] ? __pfx___mutex_trylock_common+0x10/0x10 [ 177.045265][ T8692] ? rcu_is_watching+0x15/0xb0 [ 177.045302][ T8692] ? trace_contention_end+0x3d/0x140 [ 177.045338][ T8692] netlink_rcv_skb+0x226/0x4a0 [ 177.045365][ T8692] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 177.045394][ T8692] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.045445][ T8692] xfrm_netlink_rcv+0x79/0x90 [ 177.045471][ T8692] netlink_unicast+0x7bb/0x940 [ 177.045506][ T8692] netlink_sendmsg+0x813/0xb40 [ 177.045542][ T8692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.045572][ T8692] ? aa_sock_msg_perm+0xf1/0x1b0 [ 177.045609][ T8692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.045632][ T8692] sock_sendmsg_nosec+0x13a/0x180 [ 177.045664][ T8692] ____sys_sendmsg+0x54e/0x850 [ 177.045694][ T8692] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.045728][ T8692] ? import_iovec+0x73/0xa0 [ 177.045759][ T8692] ___sys_sendmsg+0x2a5/0x360 [ 177.045781][ T8692] ? __lock_acquire+0x683/0x2cf0 [ 177.045813][ T8692] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.045877][ T8692] ? __fget_files+0x2a/0x420 [ 177.045903][ T8692] ? __fget_files+0x3a2/0x420 [ 177.045940][ T8692] __x64_sys_sendmsg+0x1b1/0x290 [ 177.045967][ T8692] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 177.046012][ T8692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.046036][ T8692] do_syscall_64+0x174/0x580 [ 177.046066][ T8692] ? trace_irq_disable+0x3b/0x140 [ 177.046091][ T8692] ? clear_bhb_loop+0x70/0xc0 [ 177.046117][ T8692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.046138][ T8692] RIP: 0033:0x7f084a99e0d9 [ 177.046158][ T8692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.046174][ T8692] RSP: 002b:00007f084b7c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.046195][ T8692] RAX: ffffffffffffffda RBX: 00007f084ac25fa0 RCX: 00007f084a99e0d9 [ 177.046211][ T8692] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000005 [ 177.046223][ T8692] RBP: 00007f084b7c3090 R08: 0000000000000000 R09: 0000000000000000 [ 177.046235][ T8692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.046247][ T8692] R13: 00007f084ac26038 R14: 00007f084ac25fa0 R15: 00007fff9ff1f168 [ 177.046287][ T8692] [ 177.755383][ T8700] netlink: 36 bytes leftover after parsing attributes in process `syz.2.853'. [ 177.764823][ T8700] netlink: 16 bytes leftover after parsing attributes in process `syz.2.853'. [ 177.774230][ T8700] netlink: 36 bytes leftover after parsing attributes in process `syz.2.853'. [ 178.479997][ T8702] tipc: Can't bind to reserved service type 0 [ 178.896706][ T8711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.856'. [ 178.907781][ T8713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.857'. [ 179.009633][ T8718] ieee802154 phy0 wpan0: encryption failed: -90 [ 179.192636][ T8726] netlink: 'syz.4.860': attribute type 21 has an invalid length. [ 179.201470][ T8726] netlink: 132 bytes leftover after parsing attributes in process `syz.4.860'. [ 179.535574][ T8747] netlink: 'syz.0.869': attribute type 4 has an invalid length. [ 179.803637][ T8751] syzkaller0: entered promiscuous mode [ 179.818738][ T8751] syzkaller0: entered allmulticast mode [ 180.116294][ T8764] FAULT_INJECTION: forcing a failure. [ 180.116294][ T8764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.130871][ T8764] CPU: 1 UID: 0 PID: 8764 Comm: syz.4.877 Not tainted syzkaller #0 PREEMPT(full) [ 180.130898][ T8764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.130910][ T8764] Call Trace: [ 180.130919][ T8764] [ 180.130928][ T8764] dump_stack_lvl+0xe8/0x150 [ 180.130958][ T8764] should_fail_ex+0x40c/0x560 [ 180.130982][ T8764] _copy_from_user+0x2d/0xb0 [ 180.131021][ T8764] kstrtouint_from_user+0xd6/0x180 [ 180.131044][ T8764] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 180.131085][ T8764] proc_fail_nth_write+0x8e/0x210 [ 180.131113][ T8764] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 180.131149][ T8764] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 180.131177][ T8764] vfs_write+0x296/0xba0 [ 180.131219][ T8764] ? __pfx_vfs_write+0x10/0x10 [ 180.131252][ T8764] ? __fget_files+0x2a/0x420 [ 180.131285][ T8764] ? __fget_files+0x3a2/0x420 [ 180.131310][ T8764] ? __fget_files+0x2a/0x420 [ 180.131343][ T8764] ksys_write+0x150/0x270 [ 180.131377][ T8764] ? __pfx_ksys_write+0x10/0x10 [ 180.131421][ T8764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.131448][ T8764] do_syscall_64+0x174/0x580 [ 180.131480][ T8764] ? trace_irq_disable+0x3b/0x140 [ 180.131507][ T8764] ? clear_bhb_loop+0x70/0xc0 [ 180.131536][ T8764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.131559][ T8764] RIP: 0033:0x7feb8955e90e [ 180.131581][ T8764] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 180.131600][ T8764] RSP: 002b:00007feb8a4c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 180.131623][ T8764] RAX: ffffffffffffffda RBX: 00007feb8a4c66c0 RCX: 00007feb8955e90e [ 180.131639][ T8764] RDX: 0000000000000001 RSI: 00007feb8a4c60a0 RDI: 0000000000000005 [ 180.131653][ T8764] RBP: 00007feb8a4c6090 R08: 0000000000000000 R09: 0000000000000000 [ 180.131667][ T8764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.131680][ T8764] R13: 00007feb89826038 R14: 00007feb89825fa0 R15: 00007fff3ed035b8 [ 180.131719][ T8764] [ 181.088178][ T8798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.888'. [ 181.497457][ T8801] netlink: zone id is out of range [ 181.507459][ T8801] netlink: zone id is out of range [ 181.521758][ T8801] netlink: zone id is out of range [ 181.537213][ T8801] netlink: zone id is out of range [ 181.553622][ T8801] netlink: zone id is out of range [ 181.570898][ T8801] netlink: zone id is out of range [ 181.578931][ T8801] netlink: zone id is out of range [ 181.584594][ T8801] netlink: zone id is out of range [ 181.589913][ T8801] netlink: zone id is out of range [ 181.595803][ T8801] netlink: zone id is out of range [ 182.190191][ T8817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.889'. [ 182.520424][ T8837] netlink: 'syz.1.896': attribute type 21 has an invalid length. [ 182.678294][ T8832] syzkaller0: entered promiscuous mode [ 182.701047][ T8832] syzkaller0: entered allmulticast mode [ 183.015499][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.901'. [ 184.353083][ T8866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.903'. [ 184.403593][ T8872] netlink: 19 bytes leftover after parsing attributes in process `syz.0.906'. [ 184.445581][ T8872] netlink: 19 bytes leftover after parsing attributes in process `syz.0.906'. [ 184.620250][ T8879] netlink: 'syz.3.904': attribute type 3 has an invalid length. [ 184.868114][ T8897] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 185.094776][ T8907] netlink: 52 bytes leftover after parsing attributes in process `syz.1.913'. [ 185.133281][ T8907] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.142867][ T8907] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.558207][ T8924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.918'. [ 186.598242][ T8924] net_ratelimit: 18 callbacks suppressed [ 186.598259][ T8924] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 186.650677][ T8929] netlink: 28 bytes leftover after parsing attributes in process `syz.1.920'. [ 186.848191][ T8942] netlink: 24 bytes leftover after parsing attributes in process `syz.4.922'. [ 186.892891][ T8942] netlink: 24 bytes leftover after parsing attributes in process `syz.4.922'. [ 187.197163][ T8968] netlink: 16 bytes leftover after parsing attributes in process `syz.4.930'. [ 187.866336][ T8992] netlink: 'syz.3.940': attribute type 10 has an invalid length. [ 187.892142][ T6616] IPVS: starting estimator thread 0... [ 187.892974][ T8991] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20002 [ 187.919143][ T8992] team0: Port device dummy0 added [ 188.002110][ T8998] IPVS: using max 27 ests per chain, 64800 per kthread [ 188.381794][ T9012] netlink: 24 bytes leftover after parsing attributes in process `syz.2.947'. [ 188.656603][ T9021] lo speed is unknown, defaulting to 1000 [ 189.434019][ T9058] __nla_validate_parse: 3 callbacks suppressed [ 189.434033][ T9058] netlink: 16 bytes leftover after parsing attributes in process `syz.4.961'. [ 189.452953][ T9058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.961'. [ 189.466759][ T9058] netlink: 16 bytes leftover after parsing attributes in process `syz.4.961'. [ 189.476503][ T9058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.961'. [ 189.899798][ T9062] ipvlan2: left promiscuous mode [ 189.935784][ T9062] batman_adv: batadv0: Interface deactivated: gretap1 [ 189.967735][ T3293] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.021740][ T6614] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.034723][ T6614] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.055209][ T6614] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.697292][ T9099] netlink: 'syz.4.965': attribute type 1 has an invalid length. [ 190.724490][ T9099] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.790189][ T9101] netlink: 'syz.4.965': attribute type 10 has an invalid length. [ 190.798198][ T9101] netlink: 40 bytes leftover after parsing attributes in process `syz.4.965'. [ 190.807633][ T9101] dummy0: entered promiscuous mode [ 191.013536][ T9106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.967'. [ 191.480452][ T9018] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 191.763753][ T9116] FAULT_INJECTION: forcing a failure. [ 191.763753][ T9116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.818135][ T9116] CPU: 1 UID: 0 PID: 9116 Comm: syz.4.970 Not tainted syzkaller #0 PREEMPT(full) [ 191.818163][ T9116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.818175][ T9116] Call Trace: [ 191.818183][ T9116] [ 191.818191][ T9116] dump_stack_lvl+0xe8/0x150 [ 191.818223][ T9116] should_fail_ex+0x40c/0x560 [ 191.818250][ T9116] _copy_to_user+0x31/0xb0 [ 191.818280][ T9116] simple_read_from_buffer+0xe1/0x170 [ 191.818311][ T9116] proc_fail_nth_read+0x1bb/0x230 [ 191.818342][ T9116] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.818374][ T9116] ? rw_verify_area+0x24a/0x4c0 [ 191.818405][ T9116] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.818432][ T9116] vfs_read+0x213/0xa80 [ 191.818467][ T9116] ? __pfx_vfs_read+0x10/0x10 [ 191.818499][ T9116] ? __asan_memset+0x22/0x50 [ 191.818522][ T9116] ? _copy_from_user+0x4c/0xb0 [ 191.818547][ T9116] ? pppol2tp_setsockopt+0x172/0x5f0 [ 191.818575][ T9116] ksys_read+0x150/0x270 [ 191.818605][ T9116] ? __pfx_ksys_read+0x10/0x10 [ 191.818642][ T9116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.818664][ T9116] do_syscall_64+0x174/0x580 [ 191.818692][ T9116] ? trace_irq_disable+0x3b/0x140 [ 191.818716][ T9116] ? clear_bhb_loop+0x70/0xc0 [ 191.818740][ T9116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.818760][ T9116] RIP: 0033:0x7feb8955e90e [ 191.818777][ T9116] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 191.818793][ T9116] RSP: 002b:00007feb8a4c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 191.818814][ T9116] RAX: ffffffffffffffda RBX: 00007feb8a4c66c0 RCX: 00007feb8955e90e [ 191.818828][ T9116] RDX: 000000000000000f RSI: 00007feb8a4c60a0 RDI: 0000000000000004 [ 191.818840][ T9116] RBP: 00007feb8a4c6090 R08: 0000000000000000 R09: 0000000000000000 [ 191.818851][ T9116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.818862][ T9116] R13: 00007feb89826038 R14: 00007feb89825fa0 R15: 00007fff3ed035b8 [ 191.818893][ T9116] [ 192.628756][ T9151] FAULT_INJECTION: forcing a failure. [ 192.628756][ T9151] name failslab, interval 1, probability 0, space 0, times 0 [ 192.672390][ T9151] CPU: 1 UID: 0 PID: 9151 Comm: syz.1.981 Not tainted syzkaller #0 PREEMPT(full) [ 192.672418][ T9151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.672431][ T9151] Call Trace: [ 192.672438][ T9151] [ 192.672447][ T9151] dump_stack_lvl+0xe8/0x150 [ 192.672481][ T9151] should_fail_ex+0x40c/0x560 [ 192.672508][ T9151] should_failslab+0xa8/0x100 [ 192.672548][ T9151] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 192.672571][ T9151] ? local_lock_release+0x9c/0x160 [ 192.672605][ T9151] ? __alloc_skb+0x1d7/0x7a0 [ 192.672622][ T9151] ? __alloc_skb+0x1d7/0x7a0 [ 192.672648][ T9151] __alloc_skb+0x1d7/0x7a0 [ 192.672673][ T9151] netlink_dump+0x1e7/0xee0 [ 192.672696][ T9151] ? __netlink_lookup+0xc6/0x8b0 [ 192.672732][ T9151] ? __pfx_netlink_dump+0x10/0x10 [ 192.672768][ T9151] ? netlink_lookup+0x30/0x200 [ 192.672789][ T9151] ? netlink_lookup+0x30/0x200 [ 192.672822][ T9151] __netlink_dump_start+0x589/0x7b0 [ 192.672853][ T9151] rtnetlink_rcv_msg+0xa48/0xc00 [ 192.672876][ T9151] ? __pfx_rtm_dump_nexthop_bucket+0x10/0x10 [ 192.672897][ T9151] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 192.672917][ T9151] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 192.672935][ T9151] ? ref_tracker_free+0x689/0x830 [ 192.672964][ T9151] ? __pfx_rtnl_dumpit+0x10/0x10 [ 192.672983][ T9151] ? __pfx_rtm_dump_nexthop_bucket+0x10/0x10 [ 192.673019][ T9151] netlink_rcv_skb+0x226/0x4a0 [ 192.673044][ T9151] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 192.673066][ T9151] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 192.673104][ T9151] ? netlink_deliver_tap+0x2e/0x1b0 [ 192.673128][ T9151] ? netlink_deliver_tap+0x2e/0x1b0 [ 192.673158][ T9151] netlink_unicast+0x7bb/0x940 [ 192.673192][ T9151] netlink_sendmsg+0x813/0xb40 [ 192.673228][ T9151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.673257][ T9151] ? aa_sock_msg_perm+0xf1/0x1b0 [ 192.673293][ T9151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.673316][ T9151] sock_sendmsg_nosec+0x13a/0x180 [ 192.673345][ T9151] ____sys_sendmsg+0x54e/0x850 [ 192.673374][ T9151] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.673408][ T9151] ? import_iovec+0x73/0xa0 [ 192.673439][ T9151] ___sys_sendmsg+0x2a5/0x360 [ 192.673460][ T9151] ? __lock_acquire+0x683/0x2cf0 [ 192.673492][ T9151] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.673556][ T9151] ? __fget_files+0x2a/0x420 [ 192.673581][ T9151] ? __fget_files+0x3a2/0x420 [ 192.673619][ T9151] __x64_sys_sendmsg+0x1b1/0x290 [ 192.673646][ T9151] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 192.673696][ T9151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.673719][ T9151] do_syscall_64+0x174/0x580 [ 192.673749][ T9151] ? trace_irq_disable+0x3b/0x140 [ 192.673774][ T9151] ? clear_bhb_loop+0x70/0xc0 [ 192.673800][ T9151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.673820][ T9151] RIP: 0033:0x7f31b5b9e0d9 [ 192.673840][ T9151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.673856][ T9151] RSP: 002b:00007f31b6a68028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.673878][ T9151] RAX: ffffffffffffffda RBX: 00007f31b5e25fa0 RCX: 00007f31b5b9e0d9 [ 192.673893][ T9151] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 192.673906][ T9151] RBP: 00007f31b6a68090 R08: 0000000000000000 R09: 0000000000000000 [ 192.673923][ T9151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.673935][ T9151] R13: 00007f31b5e26038 R14: 00007f31b5e25fa0 R15: 00007fff57e07718 [ 192.673978][ T9151] [ 192.690482][ T9149] dvmrp0: entered allmulticast mode [ 193.261166][ T9164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.984'. [ 193.280270][ T9166] netlink: 24 bytes leftover after parsing attributes in process `syz.2.985'. [ 193.332769][ T9164] netlink: 28 bytes leftover after parsing attributes in process `syz.4.984'. [ 193.377489][ T9166] netlink: 32 bytes leftover after parsing attributes in process `syz.2.985'. [ 194.160466][ T9200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.194658][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.201047][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.213410][ T9200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.771555][ T9222] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 195.048870][ T9232] syzkaller0: entered promiscuous mode [ 195.063431][ T9232] syzkaller0: entered allmulticast mode [ 195.477206][ T9257] __nla_validate_parse: 6 callbacks suppressed [ 195.477224][ T9257] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1011'. [ 195.656017][ T9268] netlink: 'syz.0.1014': attribute type 1 has an invalid length. [ 195.669738][ T9268] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1014'. [ 195.692173][ T9268] netlink: 'syz.0.1014': attribute type 2 has an invalid length. [ 195.703808][ T9268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1014'. [ 195.748168][ T9257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1011'. [ 195.985390][ T9278] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1017'. [ 196.016583][ T9278] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1017'. [ 196.036643][ T9282] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1019'. [ 196.118584][ T9284] syzkaller0: entered promiscuous mode [ 196.141121][ T9284] syzkaller0: entered allmulticast mode [ 196.376940][ T9290] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1022'. [ 196.518600][ T9305] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1025'. [ 196.905928][ T29] audit: type=1800 audit(1786382305.997:2): pid=9323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1031" name="memory.events" dev="tmpfs" ino=1199 res=0 errno=0 [ 196.921990][ T9324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1032'. [ 197.008460][ T29] audit: type=1804 audit(1786382306.047:3): pid=9323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1031" name="/newroot/229/memory.events" dev="tmpfs" ino=1199 res=1 errno=0 [ 197.044584][ T9332] No such timeout policy "syz1" [ 197.226518][ T9338] syzkaller0: entered promiscuous mode [ 197.240552][ T9338] syzkaller0: entered allmulticast mode [ 197.718739][ T6612] IPVS: starting estimator thread 0... [ 197.778414][ T9364] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 197.787510][ T9366] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 197.831949][ T9365] IPVS: using max 28 ests per chain, 67200 per kthread [ 197.879384][ T9371] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 197.892983][ T9366] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 198.360851][ T9388] syzkaller0: entered promiscuous mode [ 198.380188][ T9388] syzkaller0: entered allmulticast mode [ 198.731798][ T9397] bond2: entered allmulticast mode [ 198.863519][ T9414] netlink: 'syz.1.1058': attribute type 25 has an invalid length. [ 198.984294][ T9406] lo speed is unknown, defaulting to 1000 [ 198.995719][ T9418] syzkaller0: entered promiscuous mode [ 199.002371][ T9418] syzkaller0: entered allmulticast mode [ 199.144783][ T9421] netlink: 'syz.1.1062': attribute type 1 has an invalid length. [ 199.282103][ T9421] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.266601][ T9468] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 200.295871][ T9447] syzkaller0: entered promiscuous mode [ 200.306348][ T9447] syzkaller0: entered allmulticast mode [ 200.345097][ T9471] block nbd0: reconnected socket [ 200.382807][ T9466] ip6gre1: entered promiscuous mode [ 200.397297][ T9466] ip6gre1: entered allmulticast mode [ 200.423335][ T50] block nbd0: Receive control failed (result -32) [ 200.505982][ T6612] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 200.531440][ T6612] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 200.540108][ T9072] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 200.797339][ T9485] __nla_validate_parse: 12 callbacks suppressed [ 200.797358][ T9485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1075'. [ 200.823054][ T9072] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 200.942529][ T9072] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 200.959818][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1075'. [ 200.971867][ T9485] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 201.579351][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1087'. [ 201.605834][ T9526] netlink: 'syz.4.1087': attribute type 13 has an invalid length. [ 201.613906][ T9526] netlink: 'syz.4.1087': attribute type 17 has an invalid length. [ 201.663337][ T9526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.672379][ T9526] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.680067][ T9526] dummy0: left promiscuous mode [ 201.690500][ T9526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.747947][ T9526] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 201.758903][ T9526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.783437][ T9526] veth1_vlan: left promiscuous mode [ 201.790076][ T9526] veth0_vlan: left promiscuous mode [ 201.797745][ T9526] veth0_vlan: entered promiscuous mode [ 201.806720][ T9526] veth1_vlan: entered promiscuous mode [ 201.818704][ T9526] veth1_macvtap: left promiscuous mode [ 201.826482][ T9526] veth0_macvtap: left promiscuous mode [ 201.835316][ T9526] veth0_macvtap: entered promiscuous mode [ 201.849247][ T9526] veth1_macvtap: entered promiscuous mode [ 201.862517][ T9526] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 201.874475][ T9526] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 201.886062][ T9526] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 201.897731][ T9526] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 201.921550][ T9526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.930360][ T9526] batman_adv: batadv0: Interface activated: gretap1 [ 202.032056][ T6616] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.040881][ T6616] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.050132][ T6616] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.060031][ T6616] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.071299][ T48] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 203.622158][ T9480] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 203.818041][ T9533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1088'. [ 203.940811][ T9542] syzkaller1: entered promiscuous mode [ 203.947534][ T9542] syzkaller1: entered allmulticast mode [ 204.080032][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1092'. [ 204.751411][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 205.053901][ T9549] batman_adv: batadv0: Interface deactivated: gretap1 [ 205.110714][ T6612] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.143628][ T9558] virt_wifi0: entered promiscuous mode [ 205.173904][ T9558] batman_adv: batadv0: Adding interface: virt_wifi0 [ 205.188952][ T9558] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.225117][ T9558] batman_adv: batadv0: Interface activated: virt_wifi0 [ 205.361868][ T6612] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.373403][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1098'. [ 205.387927][ T6612] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.440611][ T6612] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.961282][ T9587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1106'. [ 206.177039][ T9591] dummy0: entered promiscuous mode [ 206.218359][ T9591] syz_tun: entered promiscuous mode [ 206.236074][ T9591] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 206.291377][ T9591] hsr1: entered allmulticast mode [ 206.330800][ T9591] dummy0: entered allmulticast mode [ 206.359910][ T9591] syz_tun: entered allmulticast mode [ 206.367040][ T9600] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1109'. [ 206.579639][ T9600] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1109'. [ 206.800564][ T9616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1114'. [ 206.858817][ T9623] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1114'. [ 206.943363][ T9629] netlink: 'syz.4.1117': attribute type 7 has an invalid length. [ 206.960036][ T9629] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1117'. [ 207.152722][ T9616] syzkaller0: entered promiscuous mode [ 207.166048][ T9616] syzkaller0: entered allmulticast mode [ 207.180453][ T9629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1117'. [ 207.212886][ T9640] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1120'. [ 207.235869][ T9640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1120'. [ 207.300619][ T9642] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1120'. [ 208.796357][ T9663] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 208.818192][ T9663] dvmrp1: linktype set to 776 [ 209.129495][ T9679] veth0_to_hsr: entered promiscuous mode [ 209.159097][ T9679] A link change request failed with some changes committed already. Interface veth0_to_hsr may have been left with an inconsistent configuration, please check. [ 209.818759][ T9719] netlink: 'syz.1.1137': attribute type 9 has an invalid length. [ 210.414990][ T9748] ip_tables: iptables: counters copy to user failed while replacing table [ 210.681308][ T9750] netlink: 'syz.3.1147': attribute type 39 has an invalid length. [ 210.714828][ T9767] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 211.523273][ T9796] __nla_validate_parse: 11 callbacks suppressed [ 211.523292][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1160'. [ 211.538846][ T9788] netdevsim0 speed is unknown, defaulting to 1000 [ 211.549621][ T9797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1161'. [ 211.559350][ T9788] netdevsim0 speed is unknown, defaulting to 1000 [ 211.567120][ T9797] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 211.575858][ T9788] netdevsim0 speed is unknown, defaulting to 1000 [ 211.587033][ T9788] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 211.603636][ T9788] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 211.622257][ T9788] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 211.647616][ T9788] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 211.732526][ T9788] netdevsim0 speed is unknown, defaulting to 1000 [ 211.751838][ T9788] netdevsim0 speed is unknown, defaulting to 1000 [ 211.776633][ T9788] netdevsim0 speed is unknown, defaulting to 1000 [ 211.844902][ T9788] netdevsim0 speed is unknown, defaulting to 1000 [ 211.869619][ T9788] netdevsim0 speed is unknown, defaulting to 1000 [ 212.193838][ T9823] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1169'. [ 212.358831][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1172'. [ 212.498960][ T9840] bridge1: entered promiscuous mode [ 212.504384][ T9840] bridge1: entered allmulticast mode [ 212.514028][ T9840] team0: Port device bridge1 added [ 212.546478][ T9842] veth0_to_hsr: left promiscuous mode [ 212.592388][ T9842] hsr1: left allmulticast mode [ 212.634149][ T9842] dummy0: left allmulticast mode [ 212.667115][ T9842] syz_tun: left allmulticast mode [ 212.730496][ T9847] bridge0: port 3(team0) entered blocking state [ 212.751352][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 212.786495][ T9847] bridge0: port 3(team0) entered disabled state [ 212.810770][ T9847] team0: entered allmulticast mode [ 212.836524][ T9847] team_slave_0: entered allmulticast mode [ 212.857225][ T9847] team_slave_1: entered allmulticast mode [ 212.904904][ T9847] team0: entered promiscuous mode [ 212.926702][ T9847] team_slave_0: entered promiscuous mode [ 212.948058][ T9847] team_slave_1: entered promiscuous mode [ 213.423589][ T9853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.460790][ T9853] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 213.474198][ T9853] virt_wifi0: left promiscuous mode [ 213.516563][ T9887] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1182'. [ 213.598387][ T9853] ip6gre1: left promiscuous mode [ 213.615904][ T9853] ip6gre1: left allmulticast mode [ 213.801465][ T6614] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.837134][ T6614] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.962228][ T6614] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.001459][ T6614] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.560579][ T9928] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1194'. [ 214.596986][ T9934] netlink: 'syz.2.1196': attribute type 1 has an invalid length. [ 214.665555][ T9940] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1195'. [ 214.684603][ T9934] 8021q: adding VLAN 0 to HW filter on device bond3 [ 214.695189][ T9941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1197'. [ 214.719159][ T9940] netlink: 'syz.0.1195': attribute type 9 has an invalid length. [ 214.736021][ T9934] bond3: (slave ip6gretap1): making interface the new active one [ 214.747368][ T9934] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 214.756871][ T9940] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1195'. [ 214.770985][ T9939] bond3: entered allmulticast mode [ 214.777540][ T9939] ip6gretap1: entered allmulticast mode [ 214.785648][ T9940] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1195'. [ 214.822876][ T9930] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 214.857543][ T9930] netlink: 'syz.0.1195': attribute type 3 has an invalid length. [ 215.256988][ T6618] IPVS: starting estimator thread 0... [ 215.371755][ T9962] IPVS: using max 30 ests per chain, 72000 per kthread [ 216.647380][ T9954] gre1: entered allmulticast mode [ 216.935297][ T9980] smc: net device lo erased user defined pnetid SYZ0 [ 216.968310][ T9980] smc: smcd device lo erased user defined pnetid SYZ0 [ 216.999728][ T9985] __nla_validate_parse: 2 callbacks suppressed [ 216.999745][ T9985] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1208'. [ 216.999955][ T9987] SET target dimension over the limit! [ 217.244919][T10001] FAULT_INJECTION: forcing a failure. [ 217.244919][T10001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.274993][T10001] CPU: 1 UID: 0 PID: 10001 Comm: syz.4.1217 Not tainted syzkaller #0 PREEMPT(full) [ 217.275021][T10001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 217.275032][T10001] Call Trace: [ 217.275041][T10001] [ 217.275049][T10001] dump_stack_lvl+0xe8/0x150 [ 217.275083][T10001] should_fail_ex+0x40c/0x560 [ 217.275110][T10001] _copy_from_user+0x2d/0xb0 [ 217.275156][T10001] kstrtouint_from_user+0xd6/0x180 [ 217.275183][T10001] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 217.275224][T10001] proc_fail_nth_write+0x8e/0x210 [ 217.275254][T10001] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 217.275299][T10001] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 217.275327][T10001] vfs_write+0x296/0xba0 [ 217.275373][T10001] ? __pfx_vfs_write+0x10/0x10 [ 217.275405][T10001] ? __fget_files+0x2a/0x420 [ 217.275433][T10001] ? __fget_files+0x3a2/0x420 [ 217.275455][T10001] ? __fget_files+0x2a/0x420 [ 217.275487][T10001] ksys_write+0x150/0x270 [ 217.275516][T10001] ? __pfx_ksys_write+0x10/0x10 [ 217.275551][T10001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.275576][T10001] do_syscall_64+0x174/0x580 [ 217.275605][T10001] ? clear_bhb_loop+0x70/0xc0 [ 217.275628][T10001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.275651][T10001] RIP: 0033:0x7feb8955e90e [ 217.275669][T10001] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 217.275684][T10001] RSP: 002b:00007feb8a4c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 217.275706][T10001] RAX: ffffffffffffffda RBX: 00007feb8a4c66c0 RCX: 00007feb8955e90e [ 217.275719][T10001] RDX: 0000000000000001 RSI: 00007feb8a4c60a0 RDI: 0000000000000006 [ 217.275734][T10001] RBP: 00007feb8a4c6090 R08: 0000000000000000 R09: 0000000000000000 [ 217.275745][T10001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.275755][T10001] R13: 00007feb89826038 R14: 00007feb89825fa0 R15: 00007fff3ed035b8 [ 217.275786][T10001] [ 217.769032][T10017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1223'. [ 217.785493][T10012] bridge2: entered promiscuous mode [ 217.811315][T10012] bridge2: entered allmulticast mode [ 217.878351][T10012] team0: Port device bridge2 added [ 218.235603][T10035] sctp: [Deprecated]: syz.4.1229 (pid 10035) Use of struct sctp_assoc_value in delayed_ack socket option. [ 218.235603][T10035] Use struct sctp_sack_info instead [ 218.492327][T10045] netlink: 'syz.1.1228': attribute type 28 has an invalid length. [ 218.507921][T10045] netlink: 'syz.1.1228': attribute type 3 has an invalid length. [ 218.516577][T10045] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1228'. [ 218.719454][T10053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.754300][T10053] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1234'. [ 218.780449][T10053] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1234'. [ 219.687716][ T5705] netdevsim0 speed is unknown, defaulting to 1000 [ 219.698978][ T5611] netdevsim0 speed is unknown, defaulting to 1000 [ 220.245420][T10101] syzkaller0: entered promiscuous mode [ 220.267444][T10101] syzkaller0: entered allmulticast mode [ 220.294792][T10101] tipc: Enabled bearer , priority 0 [ 220.373303][T10101] tipc: Resetting bearer [ 220.475200][T10101] tipc: Disabling bearer [ 220.648012][T10117] team0: entered promiscuous mode [ 220.662971][T10117] team_slave_0: entered promiscuous mode [ 220.674902][T10117] team_slave_1: entered promiscuous mode [ 220.698402][T10117] dummy0: entered promiscuous mode [ 220.712086][T10117] team0: entered allmulticast mode [ 220.717353][T10117] team_slave_0: entered allmulticast mode [ 220.724605][T10117] team_slave_1: entered allmulticast mode [ 220.732224][T10117] vlan0: entered allmulticast mode [ 220.737812][T10117] veth0_vlan: entered allmulticast mode [ 220.744004][T10117] dummy0: entered allmulticast mode [ 220.778994][T10124] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1257'. [ 220.812890][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1257'. [ 220.978875][T10139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1262'. [ 221.762194][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1276'. [ 221.790999][T10179] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1275'. [ 221.818689][T10182] tipc: Enabled bearer , priority 0 [ 221.954173][T10183] gretap0: entered promiscuous mode [ 222.075598][T10183] tipc: Disabling bearer [ 222.299116][T10198] __nla_validate_parse: 3 callbacks suppressed [ 222.299137][T10198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1281'. [ 222.637757][T10214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1286'. [ 222.679356][T10214] netlink: 'syz.0.1286': attribute type 1 has an invalid length. [ 222.772061][T10221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1288'. [ 223.366576][T10243] ip_tables: iptables: counters copy to user failed while replacing table [ 223.429109][T10251] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1294'. [ 223.491070][T10245] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 223.843775][T10268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1300'. [ 224.207380][T10283] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1304'. [ 224.287794][T10283] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1304'. [ 224.313271][T10283] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1304'. [ 224.330761][T10283] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1304'. [ 224.366679][T10288] tipc: Enabling of bearer rejected, failed to enable media [ 224.475602][T10296] FAULT_INJECTION: forcing a failure. [ 224.475602][T10296] name failslab, interval 1, probability 0, space 0, times 0 [ 224.530488][T10296] CPU: 1 UID: 0 PID: 10296 Comm: syz.0.1309 Not tainted syzkaller #0 PREEMPT(full) [ 224.530516][T10296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.530539][T10296] Call Trace: [ 224.530546][T10296] [ 224.530554][T10296] dump_stack_lvl+0xe8/0x150 [ 224.530585][T10296] should_fail_ex+0x40c/0x560 [ 224.530611][T10296] should_failslab+0xa8/0x100 [ 224.530640][T10296] __kmalloc_noprof+0xfe/0x720 [ 224.530664][T10296] ? tomoyo_encode+0x2ad/0x570 [ 224.530699][T10296] ? tomoyo_encode+0x2ad/0x570 [ 224.530732][T10296] tomoyo_encode+0x2ad/0x570 [ 224.530774][T10296] tomoyo_realpath_from_path+0x5fa/0x640 [ 224.530813][T10296] ? tomoyo_path_number_perm+0x219/0x5f0 [ 224.530839][T10296] tomoyo_path_number_perm+0x246/0x5f0 [ 224.530866][T10296] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 224.530889][T10296] ? __lock_acquire+0x683/0x2cf0 [ 224.530931][T10296] ? hook_file_ioctl+0x1f0/0x5f0 [ 224.530977][T10296] ? __fget_files+0x2a/0x420 [ 224.531004][T10296] ? __fget_files+0x2a/0x420 [ 224.531026][T10296] ? __fget_files+0x3a2/0x420 [ 224.531048][T10296] ? __fget_files+0x2a/0x420 [ 224.531075][T10296] security_file_ioctl+0xc3/0x2a0 [ 224.531101][T10296] __se_sys_ioctl+0x47/0x170 [ 224.531130][T10296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.531151][T10296] do_syscall_64+0x174/0x580 [ 224.531178][T10296] ? trace_irq_disable+0x3b/0x140 [ 224.531200][T10296] ? clear_bhb_loop+0x70/0xc0 [ 224.531223][T10296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.531242][T10296] RIP: 0033:0x7f6472f9e0d9 [ 224.531259][T10296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.531274][T10296] RSP: 002b:00007f6473e2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.531294][T10296] RAX: ffffffffffffffda RBX: 00007f6473225fa0 RCX: 00007f6472f9e0d9 [ 224.531307][T10296] RDX: 00002000000005c0 RSI: 00000000000089f8 RDI: 0000000000000004 [ 224.531318][T10296] RBP: 00007f6473e2c090 R08: 0000000000000000 R09: 0000000000000000 [ 224.531328][T10296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.531338][T10296] R13: 00007f6473226038 R14: 00007f6473225fa0 R15: 00007ffd9ea82ff8 [ 224.531369][T10296] [ 224.784280][T10296] ERROR: Out of memory at tomoyo_realpath_from_path. [ 224.803093][T10310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1312'. [ 224.901721][T10312] set match dimension is over the limit! [ 225.630148][T10342] FAULT_INJECTION: forcing a failure. [ 225.630148][T10342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.645768][T10342] CPU: 0 UID: 0 PID: 10342 Comm: syz.2.1326 Not tainted syzkaller #0 PREEMPT(full) [ 225.645794][T10342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.645805][T10342] Call Trace: [ 225.645812][T10342] [ 225.645820][T10342] dump_stack_lvl+0xe8/0x150 [ 225.645850][T10342] should_fail_ex+0x40c/0x560 [ 225.645875][T10342] _copy_from_user+0x2d/0xb0 [ 225.645901][T10342] get_user_ifreq+0x6b/0x180 [ 225.645927][T10342] sock_ioctl+0x6f8/0x7e0 [ 225.645953][T10342] ? __pfx_sock_ioctl+0x10/0x10 [ 225.645980][T10342] ? __fget_files+0x3a2/0x420 [ 225.646002][T10342] ? __fget_files+0x2a/0x420 [ 225.646028][T10342] ? bpf_lsm_file_ioctl+0x9/0x20 [ 225.646049][T10342] ? __pfx_sock_ioctl+0x10/0x10 [ 225.646072][T10342] __se_sys_ioctl+0xfc/0x170 [ 225.646101][T10342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.646122][T10342] do_syscall_64+0x174/0x580 [ 225.646148][T10342] ? trace_irq_disable+0x3b/0x140 [ 225.646171][T10342] ? clear_bhb_loop+0x70/0xc0 [ 225.646212][T10342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.646230][T10342] RIP: 0033:0x7f084a99e0d9 [ 225.646245][T10342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.646260][T10342] RSP: 002b:00007f084b7c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.646279][T10342] RAX: ffffffffffffffda RBX: 00007f084ac25fa0 RCX: 00007f084a99e0d9 [ 225.646292][T10342] RDX: 00002000000005c0 RSI: 00000000000089f8 RDI: 0000000000000004 [ 225.646302][T10342] RBP: 00007f084b7c3090 R08: 0000000000000000 R09: 0000000000000000 [ 225.646312][T10342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.646322][T10342] R13: 00007f084ac26038 R14: 00007f084ac25fa0 R15: 00007fff9ff1f168 [ 225.646349][T10342] [ 225.874091][T10348] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 226.038052][T10350] bond1: entered promiscuous mode [ 226.043976][T10350] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.149166][ T50] block nbd1: Receive control failed (result -32) [ 226.307228][T10372] netlink: 'syz.3.1338': attribute type 1 has an invalid length. [ 228.119539][T10383] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 228.129485][T10383] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 228.139439][T10383] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 228.313295][T10410] __nla_validate_parse: 6 callbacks suppressed [ 228.313315][T10410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1350'. [ 228.771064][T10424] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 229.207744][T10446] vlan3: left promiscuous mode [ 229.222067][T10446] bond1: left promiscuous mode [ 229.235931][T10446] vlan3: left allmulticast mode [ 229.262955][T10446] bond1: left allmulticast mode [ 229.310479][T10457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1363'. [ 229.724270][T10471] nbd2: detected capacity change from 0 to 63 [ 229.749373][T10471] netlink: 'syz.4.1369': attribute type 29 has an invalid length. [ 229.806146][ T50] block nbd2: Receive control failed (result -104) [ 229.896055][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1374'. [ 230.023553][T10491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1376'. [ 230.056223][T10483] netlink: 'syz.4.1373': attribute type 1 has an invalid length. [ 230.090750][T10483] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1373'. [ 230.109271][T10483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1373'. [ 230.266232][T10496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1377'. [ 230.369327][T10498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1378'. [ 230.476046][T10503] FAULT_INJECTION: forcing a failure. [ 230.476046][T10503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.495157][T10503] CPU: 1 UID: 0 PID: 10503 Comm: syz.0.1380 Not tainted syzkaller #0 PREEMPT(full) [ 230.495183][T10503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.495194][T10503] Call Trace: [ 230.495202][T10503] [ 230.495210][T10503] dump_stack_lvl+0xe8/0x150 [ 230.495242][T10503] should_fail_ex+0x40c/0x560 [ 230.495277][T10503] _copy_from_iter+0x1d3/0x1660 [ 230.495299][T10503] ? kmem_cache_alloc_node_noprof+0x1d1/0x610 [ 230.495324][T10503] ? rcu_is_watching+0x15/0xb0 [ 230.495365][T10503] ? trace_kmem_cache_alloc+0x29/0xe0 [ 230.495390][T10503] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 230.495411][T10503] ? __pfx__copy_from_iter+0x10/0x10 [ 230.495431][T10503] ? preempt_schedule_thunk+0x16/0x40 [ 230.495449][T10503] ? __alloc_skb+0x276/0x7a0 [ 230.495464][T10503] ? __alloc_skb+0x276/0x7a0 [ 230.495486][T10503] ? netlink_sendmsg+0x650/0xb40 [ 230.495508][T10503] ? skb_put+0x112/0x210 [ 230.495528][T10503] netlink_sendmsg+0x6c0/0xb40 [ 230.495560][T10503] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.495585][T10503] ? aa_sock_msg_perm+0xf1/0x1b0 [ 230.495617][T10503] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.495638][T10503] sock_sendmsg_nosec+0x13a/0x180 [ 230.495665][T10503] sock_write_iter+0x2de/0x3e0 [ 230.495691][T10503] ? __pfx_sock_write_iter+0x10/0x10 [ 230.495722][T10503] ? bpf_lsm_file_permission+0x9/0x20 [ 230.495742][T10503] ? security_file_permission+0x75/0x260 [ 230.495771][T10503] vfs_write+0x612/0xba0 [ 230.495808][T10503] ? __pfx_vfs_write+0x10/0x10 [ 230.495854][T10503] ? __fget_files+0x2a/0x420 [ 230.495884][T10503] ksys_write+0x150/0x270 [ 230.495912][T10503] ? __pfx_ksys_write+0x10/0x10 [ 230.495945][T10503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.495964][T10503] do_syscall_64+0x174/0x580 [ 230.495987][T10503] ? trace_irq_disable+0x3b/0x140 [ 230.496006][T10503] ? clear_bhb_loop+0x70/0xc0 [ 230.496025][T10503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.496042][T10503] RIP: 0033:0x7f6472f9e0d9 [ 230.496058][T10503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.496071][T10503] RSP: 002b:00007f6473e2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 230.496091][T10503] RAX: ffffffffffffffda RBX: 00007f6473225fa0 RCX: 00007f6472f9e0d9 [ 230.496104][T10503] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 230.496115][T10503] RBP: 00007f6473e2c090 R08: 0000000000000000 R09: 0000000000000000 [ 230.496125][T10503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.496135][T10503] R13: 00007f6473226038 R14: 00007f6473225fa0 R15: 00007ffd9ea82ff8 [ 230.496163][T10503] [ 230.976452][T10515] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1385'. [ 231.177367][T10525] batadv_slave_1: entered promiscuous mode [ 231.230125][T10519] [ 231.232523][T10519] ====================================================== [ 231.239559][T10519] WARNING: possible circular locking dependency detected [ 231.246633][T10519] syzkaller #0 Not tainted [ 231.251052][T10519] ------------------------------------------------------ [ 231.258071][T10519] syz.1.1389/10519 is trying to acquire lock: [ 231.264167][T10519] ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove+0x44/0x80 [ 231.273505][T10519] [ 231.273505][T10519] but task is already holding lock: [ 231.280890][T10519] ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 231.290733][T10519] [ 231.290733][T10519] which lock already depends on the new lock. [ 231.290733][T10519] [ 231.301144][T10519] [ 231.301144][T10519] the existing dependency chain (in reverse order) is: [ 231.310170][T10519] [ 231.310170][T10519] -> #10 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 231.318874][T10519] down_read+0x4a/0x330 [ 231.323577][T10519] kernfs_remove_by_name_ns+0x3f/0x140 [ 231.329567][T10519] internal_create_group+0x58e/0x1180 [ 231.335477][T10519] sysfs_update_groups+0x60/0x130 [ 231.341048][T10519] pmu_dev_alloc+0x29b/0x300 [ 231.346185][T10519] perf_event_sysfs_init+0x76/0x100 [ 231.352028][T10519] do_one_initcall+0x250/0x870 [ 231.357335][T10519] do_initcall_level+0x10a/0x1a0 [ 231.362807][T10519] do_initcalls+0x59/0xa0 [ 231.367673][T10519] kernel_init_freeable+0x29d/0x3e0 [ 231.373406][T10519] kernel_init+0x1d/0x1d0 [ 231.378288][T10519] ret_from_fork+0x514/0xb70 [ 231.383418][T10519] ret_from_fork_asm+0x1a/0x30 [ 231.388723][T10519] [ 231.388723][T10519] -> #9 (pmus_lock){+.+.}-{4:4}: [ 231.395864][T10519] __mutex_lock+0x19d/0x1550 [ 231.401008][T10519] perf_event_init_cpu+0x1d1/0x7a0 [ 231.406671][T10519] cpuhp_invoke_callback+0x434/0x810 [ 231.412502][T10519] cpuhp_thread_fun+0x362/0x780 [ 231.417892][T10519] smpboot_thread_fn+0x57c/0xa80 [ 231.423364][T10519] kthread+0x388/0x470 [ 231.427974][T10519] ret_from_fork+0x514/0xb70 [ 231.433119][T10519] ret_from_fork_asm+0x1a/0x30 [ 231.438453][T10519] [ 231.438453][T10519] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 231.446032][T10519] cpuhp_thread_fun+0x127/0x780 [ 231.451453][T10519] smpboot_thread_fn+0x57c/0xa80 [ 231.456944][T10519] kthread+0x388/0x470 [ 231.461565][T10519] ret_from_fork+0x514/0xb70 [ 231.466699][T10519] ret_from_fork_asm+0x1a/0x30 [ 231.472004][T10519] [ 231.472004][T10519] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 231.479761][T10519] cpus_read_lock+0x42/0x160 [ 231.484898][T10519] static_key_slow_inc+0x12/0x30 [ 231.490383][T10519] nbd_genl_reconfigure+0x1301/0x1e80 [ 231.496298][T10519] genl_family_rcv_msg_doit+0x233/0x340 [ 231.502507][T10519] genl_rcv_msg+0x614/0x7a0 [ 231.507566][T10519] netlink_rcv_skb+0x226/0x4a0 [ 231.512962][T10519] genl_rcv+0x28/0x40 [ 231.517511][T10519] netlink_unicast+0x7bb/0x940 [ 231.522818][T10519] netlink_sendmsg+0x813/0xb40 [ 231.528127][T10519] sock_sendmsg_nosec+0x13a/0x180 [ 231.533687][T10519] ____sys_sendmsg+0x54e/0x850 [ 231.539076][T10519] ___sys_sendmsg+0x2a5/0x360 [ 231.544292][T10519] __x64_sys_sendmsg+0x1b1/0x290 [ 231.549776][T10519] do_syscall_64+0x174/0x580 [ 231.554928][T10519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.561362][T10519] [ 231.561362][T10519] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 231.569027][T10519] __mutex_lock+0x19d/0x1550 [ 231.574158][T10519] nbd_queue_rq+0x373/0x1150 [ 231.579288][T10519] blk_mq_dispatch_rq_list+0x499/0x1990 [ 231.585374][T10519] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 231.592261][T10519] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 231.598790][T10519] blk_mq_run_work_fn+0x16c/0x300 [ 231.604361][T10519] process_scheduled_works+0xa8e/0x14e0 [ 231.610452][T10519] worker_thread+0xa47/0xfb0 [ 231.615586][T10519] kthread+0x388/0x470 [ 231.620206][T10519] ret_from_fork+0x514/0xb70 [ 231.625335][T10519] ret_from_fork_asm+0x1a/0x30 [ 231.630650][T10519] [ 231.630650][T10519] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 231.637875][T10519] __mutex_lock+0x19d/0x1550 [ 231.643012][T10519] nbd_queue_rq+0xc1/0x1150 [ 231.648081][T10519] blk_mq_dispatch_rq_list+0x499/0x1990 [ 231.654159][T10519] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 231.661014][T10519] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 231.667524][T10519] blk_mq_run_work_fn+0x16c/0x300 [ 231.673092][T10519] process_scheduled_works+0xa8e/0x14e0 [ 231.679167][T10519] worker_thread+0xa47/0xfb0 [ 231.684279][T10519] kthread+0x388/0x470 [ 231.688879][T10519] ret_from_fork+0x514/0xb70 [ 231.694007][T10519] ret_from_fork_asm+0x1a/0x30 [ 231.699334][T10519] [ 231.699334][T10519] -> #4 (set->srcu){.+.+}-{0:0}: [ 231.706481][T10519] __synchronize_srcu+0xc9/0x2f0 [ 231.711958][T10519] elevator_switch+0x1e8/0x7b0 [ 231.717263][T10519] elevator_change+0x2fa/0x480 [ 231.722558][T10519] elevator_set_default+0x375/0x440 [ 231.728290][T10519] blk_register_queue+0x3f3/0x4e0 [ 231.733855][T10519] __add_disk+0x6cb/0xe30 [ 231.738729][T10519] add_disk_fwnode+0x100/0x3a0 [ 231.744031][T10519] nbd_dev_add+0x733/0xb60 [ 231.748980][T10519] nbd_init+0x15f/0x1e0 [ 231.753669][T10519] do_one_initcall+0x250/0x870 [ 231.758995][T10519] do_initcall_level+0x10a/0x1a0 [ 231.764467][T10519] do_initcalls+0x59/0xa0 [ 231.769329][T10519] kernel_init_freeable+0x29d/0x3e0 [ 231.775058][T10519] kernel_init+0x1d/0x1d0 [ 231.779917][T10519] ret_from_fork+0x514/0xb70 [ 231.785059][T10519] ret_from_fork_asm+0x1a/0x30 [ 231.790359][T10519] [ 231.790359][T10519] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 231.798192][T10519] __mutex_lock+0x19d/0x1550 [ 231.803329][T10519] elevator_change+0x1af/0x480 [ 231.808662][T10519] elevator_set_none+0xb5/0x140 [ 231.814060][T10519] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 231.820437][T10519] nbd_start_device+0x189/0xb30 [ 231.825832][T10519] nbd_genl_connect+0x1597/0x1c10 [ 231.831418][T10519] genl_family_rcv_msg_doit+0x233/0x340 [ 231.837519][T10519] genl_rcv_msg+0x614/0x7a0 [ 231.842563][T10519] netlink_rcv_skb+0x226/0x4a0 [ 231.847866][T10519] genl_rcv+0x28/0x40 [ 231.852389][T10519] netlink_unicast+0x7bb/0x940 [ 231.857706][T10519] netlink_sendmsg+0x813/0xb40 [ 231.863011][T10519] sock_sendmsg_nosec+0x13a/0x180 [ 231.868674][T10519] ____sys_sendmsg+0x54e/0x850 [ 231.873967][T10519] ___sys_sendmsg+0x2a5/0x360 [ 231.879170][T10519] __x64_sys_sendmsg+0x1b1/0x290 [ 231.884636][T10519] do_syscall_64+0x174/0x580 [ 231.889772][T10519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.896195][T10519] [ 231.896195][T10519] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 231.904821][T10519] blk_alloc_queue+0x544/0x690 [ 231.910126][T10519] __blk_mq_alloc_disk+0x194/0x390 [ 231.915781][T10519] nbd_dev_add+0x494/0xb60 [ 231.920747][T10519] nbd_init+0x15f/0x1e0 [ 231.925437][T10519] do_one_initcall+0x250/0x870 [ 231.930730][T10519] do_initcall_level+0x10a/0x1a0 [ 231.936197][T10519] do_initcalls+0x59/0xa0 [ 231.941049][T10519] kernel_init_freeable+0x29d/0x3e0 [ 231.946806][T10519] kernel_init+0x1d/0x1d0 [ 231.951667][T10519] ret_from_fork+0x514/0xb70 [ 231.956801][T10519] ret_from_fork_asm+0x1a/0x30 [ 231.962106][T10519] [ 231.962106][T10519] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 231.969327][T10519] fs_reclaim_acquire+0x71/0x100 [ 231.974797][T10519] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 231.981045][T10519] alloc_inode+0xb8/0x1b0 [ 231.985905][T10519] iget_locked+0x131/0x6a0 [ 231.990891][T10519] kernfs_get_inode+0x4f/0x770 [ 231.996189][T10519] kernfs_get_tree+0x5cd/0x980 [ 232.001486][T10519] vfs_get_tree+0x92/0x2a0 [ 232.006463][T10519] do_new_mount+0x319/0xdc0 [ 232.011497][T10519] __se_sys_mount+0x31d/0x420 [ 232.016707][T10519] do_syscall_64+0x174/0x580 [ 232.021839][T10519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.028270][T10519] [ 232.028270][T10519] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 232.036365][T10519] __lock_acquire+0x1520/0x2cf0 [ 232.041752][T10519] lock_acquire+0x106/0x350 [ 232.046790][T10519] down_write+0x96/0x200 [ 232.051566][T10519] kernfs_remove+0x44/0x80 [ 232.056534][T10519] __kobject_del+0xe0/0x310 [ 232.061571][T10519] kobject_put+0x23a/0x550 [ 232.066517][T10519] br_sysfs_delbr+0x44/0x70 [ 232.071557][T10519] br_dev_delete+0x106/0x130 [ 232.076691][T10519] br_del_bridge+0xb1/0xf0 [ 232.081644][T10519] br_ioctl_stub+0x746/0xd60 [ 232.086768][T10519] sock_ioctl+0x4e1/0x7e0 [ 232.091629][T10519] __se_sys_ioctl+0xfc/0x170 [ 232.096760][T10519] do_syscall_64+0x174/0x580 [ 232.101881][T10519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.108299][T10519] [ 232.108299][T10519] other info that might help us debug this: [ 232.108299][T10519] [ 232.118534][T10519] Chain exists of: [ 232.118534][T10519] &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem [ 232.118534][T10519] [ 232.132402][T10519] Possible unsafe locking scenario: [ 232.132402][T10519] [ 232.139862][T10519] CPU0 CPU1 [ 232.145228][T10519] ---- ---- [ 232.150602][T10519] rlock(&root->kernfs_supers_rwsem); [ 232.156072][T10519] lock(pmus_lock); [ 232.162497][T10519] lock(&root->kernfs_supers_rwsem); [ 232.170400][T10519] lock(&root->kernfs_rwsem); [ 232.175173][T10519] [ 232.175173][T10519] *** DEADLOCK *** [ 232.175173][T10519] [ 232.183403][T10519] 3 locks held by syz.1.1389/10519: [ 232.188617][T10519] #0: ffffffff90008c00 (br_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x4b8/0x7e0 [ 232.197779][T10519] #1: ffffffff90027ec0 (rtnl_mutex){+.+.}-{4:4}, at: br_ioctl_stub+0x1a8/0xd60 [ 232.206850][T10519] #2: ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 232.217137][T10519] [ 232.217137][T10519] stack backtrace: [ 232.223040][T10519] CPU: 1 UID: 0 PID: 10519 Comm: syz.1.1389 Not tainted syzkaller #0 PREEMPT(full) [ 232.223061][T10519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 232.223072][T10519] Call Trace: [ 232.223080][T10519] [ 232.223088][T10519] dump_stack_lvl+0xe8/0x150 [ 232.223113][T10519] print_circular_bug+0x2e1/0x300 [ 232.223142][T10519] check_noncircular+0x12e/0x150 [ 232.223172][T10519] __lock_acquire+0x1520/0x2cf0 [ 232.223196][T10519] ? lockdep_unlock+0x5d/0xd0 [ 232.223222][T10519] ? kernfs_remove+0x44/0x80 [ 232.223246][T10519] lock_acquire+0x106/0x350 [ 232.223267][T10519] ? kernfs_remove+0x44/0x80 [ 232.223297][T10519] down_write+0x96/0x200 [ 232.223313][T10519] ? kernfs_remove+0x44/0x80 [ 232.223336][T10519] ? __pfx_down_write+0x10/0x10 [ 232.223354][T10519] ? down_read+0x2be/0x330 [ 232.223371][T10519] kernfs_remove+0x44/0x80 [ 232.223395][T10519] __kobject_del+0xe0/0x310 [ 232.223415][T10519] kobject_put+0x23a/0x550 [ 232.223434][T10519] br_sysfs_delbr+0x44/0x70 [ 232.223460][T10519] br_dev_delete+0x106/0x130 [ 232.223481][T10519] br_del_bridge+0xb1/0xf0 [ 232.223502][T10519] br_ioctl_stub+0x746/0xd60 [ 232.223524][T10519] ? trace_contention_end+0x3d/0x140 [ 232.223552][T10519] ? __mutex_lock+0x30d/0x1550 [ 232.223577][T10519] ? __pfx_br_ioctl_stub+0x10/0x10 [ 232.223599][T10519] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 232.223617][T10519] ? vfs_write+0x9d5/0xba0 [ 232.223640][T10519] ? sock_ioctl+0x4b8/0x7e0 [ 232.223670][T10519] ? hook_file_ioctl+0x1f0/0x5f0 [ 232.223699][T10519] ? __pfx_br_ioctl_stub+0x10/0x10 [ 232.223721][T10519] sock_ioctl+0x4e1/0x7e0 [ 232.223743][T10519] ? __pfx_sock_ioctl+0x10/0x10 [ 232.223763][T10519] ? __fget_files+0x2a/0x420 [ 232.223784][T10519] ? __fget_files+0x3a2/0x420 [ 232.223804][T10519] ? __fget_files+0x2a/0x420 [ 232.223826][T10519] ? bpf_lsm_file_ioctl+0x9/0x20 [ 232.223844][T10519] ? __pfx_sock_ioctl+0x10/0x10 [ 232.223865][T10519] __se_sys_ioctl+0xfc/0x170 [ 232.223890][T10519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.223908][T10519] do_syscall_64+0x174/0x580 [ 232.223933][T10519] ? trace_irq_disable+0x3b/0x140 [ 232.223952][T10519] ? clear_bhb_loop+0x70/0xc0 [ 232.223971][T10519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.223988][T10519] RIP: 0033:0x7f31b5b9e0d9 [ 232.224004][T10519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.224019][T10519] RSP: 002b:00007f31b6a68028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.224036][T10519] RAX: ffffffffffffffda RBX: 00007f31b5e25fa0 RCX: 00007f31b5b9e0d9 [ 232.224049][T10519] RDX: 0000200000000040 RSI: 00000000000089a1 RDI: 0000000000000008 [ 232.224060][T10519] RBP: 00007f31b5c35024 R08: 0000000000000000 R09: 0000000000000000 [ 232.224071][T10519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.224081][T10519] R13: 00007f31b5e26038 R14: 00007f31b5e25fa0 R15: 00007fff57e07718 [ 232.224101][T10519] [ 232.250044][T10527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1391'. [ 232.554383][T10517] tipc: Enabling of bearer rejected, failed to enable media [ 232.637841][T10518] batadv_slave_1: left promiscuous mode