last executing test programs: 8.516529213s ago: executing program 1 (id=906): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a0000000700000002000084ffffffff01000000050000000100000008000000050000000000000000612e001e5f2e612a"], 0x0, 0x46, 0x0, 0x1}, 0x28) 8.370684727s ago: executing program 1 (id=908): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a00000003000000030000060400000007000000060000000600000005000000c44747220000000000612e2e61305f5f"], 0x0, 0x46, 0x0, 0x1, 0x68b}, 0x28) 8.336926937s ago: executing program 1 (id=909): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7.739104932s ago: executing program 1 (id=915): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000f000000850000002800000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007f000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000800)="0017b3eb324d4ff8b427e5667841", 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 7.576682116s ago: executing program 1 (id=916): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x5, 0x0, 0xa}, {0x10000002, 0x2, 0x8000000, 0xc}], 0x10, 0x40000000}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) 7.531720807s ago: executing program 1 (id=918): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x9400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) 5.731629311s ago: executing program 2 (id=924): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@cgroup, 0xffffffffffffffff, 0xa, 0x30}, 0x20) 5.546257055s ago: executing program 3 (id=926): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r0, 0x8010743f, 0xf0ff1f00000000) 5.479389506s ago: executing program 2 (id=928): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) 5.410778259s ago: executing program 4 (id=929): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x36, 0x0, 0x41000, 0x28}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 5.249452852s ago: executing program 3 (id=931): r0 = socket$kcm(0x2, 0x2, 0x73) recvmsg$kcm(r0, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x40) 5.248751672s ago: executing program 4 (id=932): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) socket$kcm(0x11, 0x200000000000003, 0x300) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) 5.227303583s ago: executing program 2 (id=933): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000249, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) write$cgroup_devices(r3, 0x0, 0xffdd) close(r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.062554347s ago: executing program 3 (id=934): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb59171e3664ffcfc, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 4.999924569s ago: executing program 4 (id=936): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000002000e400000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2f, 0x2000, 0x0, &(0x7f0000000140)="e0b9547ed387dbe9abc89b6f5b2e", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.658538327s ago: executing program 4 (id=938): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30f) 4.12493907s ago: executing program 3 (id=940): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006bab9a3fe3d96e17aa0b046b876c1d0040382019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a0000000000000000b116cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001e40)=""/4112, 0x1010}, {&(0x7f0000006c40)=""/4089, 0xff9}, {&(0x7f00000001c0)=""/219, 0xdb}, {&(0x7f0000001980)=""/189, 0xbd}, {&(0x7f0000000180)=""/44, 0x2c}], 0x5}, 0x20) 2.678650905s ago: executing program 2 (id=941): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.678473015s ago: executing program 3 (id=942): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$sock(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001900)="f4aa", 0x2}], 0x1}, 0x8001) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 2.655061676s ago: executing program 0 (id=943): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x1, 0x3, 0x1, 0x2, "00c282e4b39efcfaeb58575bb53556c8dd75190a506915ce7988e03731947bcd7d444d87f29c244f708fd022849d6758e7487efbc9c47d2cf8c5d8d30c2b7b", 0x34}, 0x80, 0x0}, 0xe07e872420dfefca) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000), 0xc) 2.633325326s ago: executing program 4 (id=944): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_int(r0, &(0x7f0000000100)=0x9, 0x12) 2.48256421s ago: executing program 2 (id=945): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0xfffffed3) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 2.4524593s ago: executing program 0 (id=946): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c850000005a000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 1.709166468s ago: executing program 3 (id=947): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2d311e000008"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000340)='%d\x1e\x00\x00\x00j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x0f\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 E\xaaC\xc388\x13\xc6H\x0f \x03\x86\xb5\xbfq\'\xab!\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdf\xde\x91\xfd\xf1B*j\n\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000180)='%d\x04\x00\x00\x00j\xfe?oz f;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x0f\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 E\xaaC\xc388\x13\xc6H\x0f \x03\x86\xb5\xbfq\'\xab!\xaa\xb3\x00\x00\x00\x00\x00\x00\xd4\xb5\x0f\x00\x00\x00\x00\x00\x00\x00Q\xdf\xde\x91\xfd\xf1B*j\n\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') 1.434678905s ago: executing program 0 (id=948): socket$kcm(0x2, 0x1, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r3, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.351454987s ago: executing program 0 (id=949): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) 1.24532563s ago: executing program 0 (id=950): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c00)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0x1}]}, {0x0, [0x2e, 0x2e, 0x2e]}}, 0x0, 0x29, 0x0, 0x1}, 0x28) 1.134707172s ago: executing program 0 (id=951): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000020000085000000d0"], 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000300)=r3) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 131.937657ms ago: executing program 4 (id=952): socket$kcm(0x29, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TUNATTACHFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) 0s ago: executing program 2 (id=953): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x2000, 0x9, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0xc, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 0: link becomes ready [ 76.403749][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.427279][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.446875][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.461081][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.468675][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.477693][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.487876][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.499858][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.530708][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.539332][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.562154][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.599291][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.610190][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.621623][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.644633][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.665200][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.686254][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.698804][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.706529][ T4274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.716466][ T4274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.726836][ T4274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.735805][ T4274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.775036][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.819372][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.833158][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.841820][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.851369][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.862112][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.871280][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.880797][ T4287] Bluetooth: hci0: command 0x040f tx timeout [ 76.886365][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.919709][ T4270] device veth0_vlan entered promiscuous mode [ 76.937157][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.945642][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.954056][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.963167][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 76.969789][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 76.976316][ T4286] Bluetooth: hci2: command 0x040f tx timeout [ 76.979752][ T4285] Bluetooth: hci1: command 0x040f tx timeout [ 76.995944][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.012984][ T4270] device veth1_vlan entered promiscuous mode [ 77.032203][ T4279] device veth0_vlan entered promiscuous mode [ 77.088666][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.103867][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.109525][ T4356] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 77.120631][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.132337][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.133320][ T4356] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 77.148687][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.149431][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.156002][ T4356] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 77.156045][ T4356] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 77.156080][ T4356] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 77.156123][ T4356] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 77.156157][ T4356] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 77.175289][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.182477][ T4356] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 77.227916][ T4356] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 77.237095][ T4356] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 77.293056][ T4279] device veth1_vlan entered promiscuous mode [ 77.369867][ T4277] device veth0_vlan entered promiscuous mode [ 77.393995][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.409279][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.422107][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.434122][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.459727][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.476495][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.486115][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.502932][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.511645][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.537396][ T4270] device veth0_macvtap entered promiscuous mode [ 77.572894][ T4277] device veth1_vlan entered promiscuous mode [ 77.579860][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.596219][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.603880][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.622987][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.641176][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.651391][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.667924][ T4279] device veth0_macvtap entered promiscuous mode [ 77.681434][ T4270] device veth1_macvtap entered promiscuous mode [ 77.715719][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.752945][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.765947][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.775897][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.786395][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.798626][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.812900][ T4279] device veth1_macvtap entered promiscuous mode [ 77.820730][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.836561][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.845761][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.856817][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.864854][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.872629][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.905361][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.923416][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.941911][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.953858][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.977460][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.986029][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.998167][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.013450][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.022826][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.052932][ T4277] device veth0_macvtap entered promiscuous mode [ 78.078726][ T4270] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.095930][ T4270] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.105537][ T4270] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.114633][ T4270] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.134077][ T4277] device veth1_macvtap entered promiscuous mode [ 78.155186][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.171988][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.183515][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.195021][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.205195][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.216303][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.228433][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.256741][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.265012][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.279088][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.288589][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.307100][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.328007][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.343228][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.360731][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.370832][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.388906][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.403157][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.431072][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.451976][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.463881][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.476377][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.486946][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.502441][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.512319][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.522911][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.534065][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.541807][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.552228][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.572819][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.608957][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.623119][ T4279] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.632831][ T4279] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.647913][ T4279] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.660705][ T4279] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.683031][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.721905][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.741317][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.774233][ C1] hrtimer: interrupt took 111162 ns [ 78.817722][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.877092][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.954647][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 78.956921][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.983761][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.995113][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.007653][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.038513][ T4285] Bluetooth: hci2: command 0x0419 tx timeout [ 79.038552][ T4286] Bluetooth: hci4: command 0x0419 tx timeout [ 79.046654][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 79.050804][ T4271] Bluetooth: hci3: command 0x0419 tx timeout [ 79.074013][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.093555][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.106943][ T4366] netlink: 'syz.2.3': attribute type 11 has an invalid length. [ 79.121767][ T4366] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3'. [ 79.140437][ T4277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.151026][ T4277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.160645][ T4277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.169870][ T4277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.330715][ T4365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.365345][ T4320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.376043][ T4320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.422454][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.485806][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.514261][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.530244][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.554623][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.562496][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.582916][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.607966][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.622949][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.638037][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.668314][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.702540][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.736242][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.744112][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.775701][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.797876][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.186273][ T4378] Zero length message leads to an empty skb [ 81.023904][ T4392] netlink: 188 bytes leftover after parsing attributes in process `syz.2.13'. [ 81.434263][ T4400] netlink: 188 bytes leftover after parsing attributes in process `syz.2.18'. [ 81.500670][ T4402] netlink: 188 bytes leftover after parsing attributes in process `syz.0.19'. [ 81.704451][ T4408] netlink: 188 bytes leftover after parsing attributes in process `syz.1.21'. [ 81.942923][ T4416] netlink: 'syz.0.24': attribute type 11 has an invalid length. [ 82.048057][ T4416] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.24'. [ 82.117013][ T4416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.994994][ T4435] netlink: 'syz.2.31': attribute type 11 has an invalid length. [ 83.070205][ T4435] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.31'. [ 83.377094][ T4442] netlink: 188 bytes leftover after parsing attributes in process `syz.3.33'. [ 83.673916][ T4433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.999436][ T4454] netlink: 188 bytes leftover after parsing attributes in process `syz.3.35'. [ 84.161950][ T4456] bridge0: port 3(ip6gretap0) entered blocking state [ 84.185601][ T4456] bridge0: port 3(ip6gretap0) entered disabled state [ 84.261966][ T4456] device ip6gretap0 entered promiscuous mode [ 84.349426][ T4456] bridge0: port 3(ip6gretap0) entered blocking state [ 84.358479][ T4456] bridge0: port 3(ip6gretap0) entered forwarding state [ 84.428214][ T4460] netlink: 'syz.4.39': attribute type 11 has an invalid length. [ 84.444569][ T4460] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.39'. [ 84.468053][ T4460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.250402][ T4479] netlink: 188 bytes leftover after parsing attributes in process `syz.1.45'. [ 86.256469][ T4490] netlink: 'syz.1.47': attribute type 11 has an invalid length. [ 86.396219][ T4490] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.47'. [ 86.629696][ T14] cfg80211: failed to load regulatory.db [ 86.704536][ T4485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.095614][ T4502] netlink: 188 bytes leftover after parsing attributes in process `syz.1.51'. [ 87.643691][ T4512] netlink: 'syz.2.54': attribute type 11 has an invalid length. [ 87.707884][ T4512] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.54'. [ 87.777934][ T4517] bridge0: port 3(ip6gretap0) entered blocking state [ 87.810941][ T4512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.825390][ T4517] bridge0: port 3(ip6gretap0) entered disabled state [ 88.250317][ T4517] device ip6gretap0 entered promiscuous mode [ 88.338018][ T4517] bridge0: port 3(ip6gretap0) entered blocking state [ 88.346397][ T4517] bridge0: port 3(ip6gretap0) entered forwarding state [ 89.179447][ T4531] netlink: 'syz.2.61': attribute type 11 has an invalid length. [ 89.209607][ T4531] netlink: 149476 bytes leftover after parsing attributes in process `syz.2.61'. [ 89.306982][ T4529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.443626][ T4556] delete_channel: no stack [ 90.481650][ T4556] delete_channel: no stack [ 90.797792][ T4549] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 91.949145][ T4570] netlink: 'syz.3.73': attribute type 11 has an invalid length. [ 91.992384][ T4570] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.73'. [ 92.052914][ T4569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.453750][ T4599] netlink: 'syz.2.83': attribute type 10 has an invalid length. [ 94.716433][ T4605] netlink: 'syz.4.85': attribute type 4 has an invalid length. [ 94.735267][ T4602] netlink: 'syz.0.84': attribute type 10 has an invalid length. [ 94.742685][ T4605] netlink: 'syz.4.85': attribute type 1 has an invalid length. [ 94.998250][ T4613] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.88'. [ 95.084653][ T4613] net_ratelimit: 6585 callbacks suppressed [ 95.084675][ T4613] openvswitch: netlink: Key type 386 is out of range max 32 [ 95.167979][ T4602] team0 (unregistering): Port device team_slave_0 removed [ 95.282041][ T4618] netlink: 'syz.1.90': attribute type 11 has an invalid length. [ 95.298303][ T4602] team0 (unregistering): Port device team_slave_1 removed [ 95.319149][ T4618] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.90'. [ 95.381633][ T4617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.613097][ T4602] syz.0.84 (4602) used greatest stack depth: 19664 bytes left [ 95.905481][ T4630] netlink: 'syz.3.94': attribute type 11 has an invalid length. [ 95.953658][ T4630] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.94'. [ 96.217425][ T4622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.246115][ T4635] FAULT_INJECTION: forcing a failure. [ 96.246115][ T4635] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 96.283192][ T4635] CPU: 0 PID: 4635 Comm: syz.0.97 Not tainted syzkaller #0 [ 96.290451][ T4635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 96.300537][ T4635] Call Trace: [ 96.303891][ T4635] [ 96.306836][ T4635] dump_stack_lvl+0x188/0x24e [ 96.311555][ T4635] ? show_regs_print_info+0x12/0x12 [ 96.316796][ T4635] ? load_image+0x410/0x410 [ 96.321337][ T4635] ? __lock_acquire+0x7c40/0x7c40 [ 96.326390][ T4635] ? snprintf+0xe5/0x140 [ 96.330658][ T4635] should_fail_ex+0x390/0x4c0 [ 96.335371][ T4635] _copy_to_user+0x2c/0x130 [ 96.339903][ T4635] simple_read_from_buffer+0xe3/0x150 [ 96.345300][ T4635] proc_fail_nth_read+0x1a6/0x220 [ 96.350355][ T4635] ? proc_fault_inject_write+0x310/0x310 [ 96.356014][ T4635] ? fsnotify_perm+0x248/0x550 [ 96.360798][ T4635] ? proc_fault_inject_write+0x310/0x310 [ 96.366462][ T4635] vfs_read+0x2db/0x960 [ 96.370651][ T4635] ? kernel_read+0x1e0/0x1e0 [ 96.375279][ T4635] ? __fget_files+0x28/0x460 [ 96.379898][ T4635] ? __fget_files+0x3fc/0x460 [ 96.384611][ T4635] ? __fdget_pos+0x2ae/0x360 [ 96.389233][ T4635] ? ksys_read+0x70/0x260 [ 96.393596][ T4635] ksys_read+0x14d/0x260 [ 96.397870][ T4635] ? vfs_write+0x9a0/0x9a0 [ 96.402320][ T4635] ? lockdep_hardirqs_on+0x94/0x140 [ 96.407544][ T4635] do_syscall_64+0x4c/0xa0 [ 96.411987][ T4635] ? clear_bhb_loop+0x60/0xb0 [ 96.416690][ T4635] ? clear_bhb_loop+0x60/0xb0 [ 96.421401][ T4635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.427320][ T4635] RIP: 0033:0x7f7bf875e6ce [ 96.431773][ T4635] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 96.451393][ T4635] RSP: 002b:00007f7bf970ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 96.459829][ T4635] RAX: ffffffffffffffda RBX: 00007f7bf97106c0 RCX: 00007f7bf875e6ce [ 96.467801][ T4635] RDX: 000000000000000f RSI: 00007f7bf97100a0 RDI: 0000000000000006 [ 96.475769][ T4635] RBP: 00007f7bf9710090 R08: 0000000000000000 R09: 0000000000000000 [ 96.483737][ T4635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.491707][ T4635] R13: 00007f7bf8a26038 R14: 00007f7bf8a25fa0 R15: 00007ffc1597dfe8 [ 96.499688][ T4635] [ 97.163123][ T4655] netlink: 'syz.1.105': attribute type 11 has an invalid length. [ 97.176637][ T4656] FAULT_INJECTION: forcing a failure. [ 97.176637][ T4656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.226829][ T4655] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.105'. [ 97.248915][ T4656] CPU: 1 PID: 4656 Comm: syz.3.104 Not tainted syzkaller #0 [ 97.256258][ T4656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 97.266333][ T4656] Call Trace: [ 97.269689][ T4656] [ 97.272645][ T4656] dump_stack_lvl+0x188/0x24e [ 97.277357][ T4656] ? show_regs_print_info+0x12/0x12 [ 97.282596][ T4656] ? load_image+0x410/0x410 [ 97.287124][ T4656] ? __lock_acquire+0x7c40/0x7c40 [ 97.292194][ T4656] should_fail_ex+0x390/0x4c0 [ 97.296909][ T4656] _copy_to_user+0x2c/0x130 [ 97.302832][ T4656] simple_read_from_buffer+0xe3/0x150 [ 97.308232][ T4656] proc_fail_nth_read+0x1a6/0x220 [ 97.313278][ T4656] ? proc_fault_inject_write+0x310/0x310 [ 97.318941][ T4656] ? fsnotify_perm+0x248/0x550 [ 97.323730][ T4656] ? proc_fault_inject_write+0x310/0x310 [ 97.329391][ T4656] vfs_read+0x2db/0x960 [ 97.333588][ T4656] ? kernel_read+0x1e0/0x1e0 [ 97.338205][ T4656] ? __fget_files+0x28/0x460 [ 97.342820][ T4656] ? __fget_files+0x3fc/0x460 [ 97.347530][ T4656] ? __fdget_pos+0x2ae/0x360 [ 97.352144][ T4656] ? ksys_read+0x70/0x260 [ 97.356500][ T4656] ksys_read+0x14d/0x260 [ 97.360764][ T4656] ? vfs_write+0x9a0/0x9a0 [ 97.365202][ T4656] ? syscall_enter_from_user_mode+0x2a/0x80 [ 97.371114][ T4656] do_syscall_64+0x4c/0xa0 [ 97.375557][ T4656] ? clear_bhb_loop+0x60/0xb0 [ 97.380362][ T4656] ? clear_bhb_loop+0x60/0xb0 [ 97.385065][ T4656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.390982][ T4656] RIP: 0033:0x7f4b1735e6ce [ 97.395413][ T4656] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 97.415038][ T4656] RSP: 002b:00007f4b1832efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 97.423484][ T4656] RAX: ffffffffffffffda RBX: 00007f4b1832f6c0 RCX: 00007f4b1735e6ce [ 97.431478][ T4656] RDX: 000000000000000f RSI: 00007f4b1832f0a0 RDI: 0000000000000007 [ 97.439488][ T4656] RBP: 00007f4b1832f090 R08: 0000000000000000 R09: 0000000000000000 [ 97.447484][ T4656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.455477][ T4656] R13: 00007f4b17626038 R14: 00007f4b17625fa0 R15: 00007ffc2f777558 [ 97.463484][ T4656] [ 97.475416][ T4652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.801784][ T4670] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.111'. [ 97.857247][ T4668] netlink: 'syz.4.110': attribute type 11 has an invalid length. [ 97.866921][ T4668] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.110'. [ 97.945145][ T4665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.522225][ T4683] netlink: 148 bytes leftover after parsing attributes in process `syz.3.116'. [ 98.638851][ T4683] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.116'. [ 98.918311][ T4690] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 98.967217][ T4690] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 98.976457][ T4690] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 98.985634][ T4690] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 98.994781][ T4690] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 99.003883][ T4690] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 99.013056][ T4690] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 99.022238][ T4690] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 99.031417][ T4690] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 99.772575][ T4695] netlink: 'syz.1.119': attribute type 11 has an invalid length. [ 99.828760][ T4695] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.119'. [ 99.874624][ T4694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.170941][ T4710] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.124'. [ 100.241611][ T4716] netlink: 'syz.3.126': attribute type 21 has an invalid length. [ 100.263985][ T4716] netlink: 164 bytes leftover after parsing attributes in process `syz.3.126'. [ 100.444738][ T4727] netlink: 'syz.0.128': attribute type 10 has an invalid length. [ 100.453152][ T4719] netlink: 'syz.2.127': attribute type 11 has an invalid length. [ 100.479308][ T4727] netlink: 40 bytes leftover after parsing attributes in process `syz.0.128'. [ 100.495925][ T4719] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.127'. [ 100.534583][ T4727] device dummy0 entered promiscuous mode [ 100.541561][ T4727] bridge0: port 4(dummy0) entered blocking state [ 100.549506][ T4717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.561078][ T4727] bridge0: port 4(dummy0) entered disabled state [ 100.576233][ T4727] bridge0: port 4(dummy0) entered blocking state [ 100.582914][ T4727] bridge0: port 4(dummy0) entered forwarding state [ 101.153638][ T4748] FAULT_INJECTION: forcing a failure. [ 101.153638][ T4748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.167353][ T4748] CPU: 0 PID: 4748 Comm: syz.0.137 Not tainted syzkaller #0 [ 101.174689][ T4748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 101.184762][ T4748] Call Trace: [ 101.188047][ T4748] [ 101.190994][ T4748] dump_stack_lvl+0x188/0x24e [ 101.195696][ T4748] ? show_regs_print_info+0x12/0x12 [ 101.200914][ T4748] ? load_image+0x410/0x410 [ 101.205441][ T4748] ? __lock_acquire+0x7c40/0x7c40 [ 101.210491][ T4748] ? snprintf+0xe5/0x140 [ 101.214754][ T4748] should_fail_ex+0x390/0x4c0 [ 101.219464][ T4748] _copy_to_user+0x2c/0x130 [ 101.223987][ T4748] simple_read_from_buffer+0xe3/0x150 [ 101.229381][ T4748] proc_fail_nth_read+0x1a6/0x220 [ 101.234440][ T4748] ? proc_fault_inject_write+0x310/0x310 [ 101.240096][ T4748] ? fsnotify_perm+0x248/0x550 [ 101.244978][ T4748] ? proc_fault_inject_write+0x310/0x310 [ 101.250618][ T4748] vfs_read+0x2db/0x960 [ 101.254777][ T4748] ? kernel_read+0x1e0/0x1e0 [ 101.259369][ T4748] ? __fget_files+0x28/0x460 [ 101.264048][ T4748] ? __fget_files+0x3fc/0x460 [ 101.268735][ T4748] ? __fdget_pos+0x2ae/0x360 [ 101.273328][ T4748] ? ksys_read+0x70/0x260 [ 101.277667][ T4748] ksys_read+0x14d/0x260 [ 101.281922][ T4748] ? vfs_write+0x9a0/0x9a0 [ 101.286340][ T4748] ? lockdep_hardirqs_on+0x94/0x140 [ 101.291536][ T4748] do_syscall_64+0x4c/0xa0 [ 101.295952][ T4748] ? clear_bhb_loop+0x60/0xb0 [ 101.300624][ T4748] ? clear_bhb_loop+0x60/0xb0 [ 101.305302][ T4748] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.311191][ T4748] RIP: 0033:0x7f7bf875e6ce [ 101.315601][ T4748] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 101.335211][ T4748] RSP: 002b:00007f7bf970ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.343630][ T4748] RAX: ffffffffffffffda RBX: 00007f7bf97106c0 RCX: 00007f7bf875e6ce [ 101.351596][ T4748] RDX: 000000000000000f RSI: 00007f7bf97100a0 RDI: 0000000000000005 [ 101.359561][ T4748] RBP: 00007f7bf9710090 R08: 0000000000000000 R09: 0000000000000000 [ 101.367530][ T4748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.375497][ T4748] R13: 00007f7bf8a26038 R14: 00007f7bf8a25fa0 R15: 00007ffc1597dfe8 [ 101.383479][ T4748] [ 101.601190][ T4758] netlink: 'syz.3.141': attribute type 11 has an invalid length. [ 101.639078][ T4749] netlink: 'syz.1.136': attribute type 11 has an invalid length. [ 101.742300][ T4757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.211310][ T4768] netlink: 'syz.3.143': attribute type 11 has an invalid length. [ 102.264723][ T4768] __nla_validate_parse: 12 callbacks suppressed [ 102.264745][ T4768] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.143'. [ 102.357177][ T4767] netlink: 2759 bytes leftover after parsing attributes in process `syz.1.144'. [ 102.368200][ T4766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.449403][ T4773] netlink: 'syz.0.145': attribute type 10 has an invalid length. [ 102.489153][ T4773] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.533157][ T4773] device bridge_slave_1 left promiscuous mode [ 102.616772][ T4773] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.706158][ T4773] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 103.125378][ T4789] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.151'. [ 103.187649][ T4785] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.151'. [ 103.250824][ T4790] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.150'. [ 103.368808][ T4795] netlink: 'syz.3.153': attribute type 11 has an invalid length. [ 103.435421][ T4795] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.153'. [ 103.457666][ T4803] FAULT_INJECTION: forcing a failure. [ 103.457666][ T4803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.492156][ T4803] CPU: 0 PID: 4803 Comm: syz.1.155 Not tainted syzkaller #0 [ 103.499500][ T4803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 103.509586][ T4803] Call Trace: [ 103.512876][ T4803] [ 103.515810][ T4803] dump_stack_lvl+0x188/0x24e [ 103.520504][ T4803] ? show_regs_print_info+0x12/0x12 [ 103.525708][ T4803] ? load_image+0x410/0x410 [ 103.530223][ T4803] ? __lock_acquire+0x7c40/0x7c40 [ 103.535284][ T4803] ? snprintf+0xe5/0x140 [ 103.539539][ T4803] should_fail_ex+0x390/0x4c0 [ 103.544268][ T4803] _copy_to_user+0x2c/0x130 [ 103.548778][ T4803] simple_read_from_buffer+0xe3/0x150 [ 103.554159][ T4803] proc_fail_nth_read+0x1a6/0x220 [ 103.559200][ T4803] ? proc_fault_inject_write+0x310/0x310 [ 103.564848][ T4803] ? fsnotify_perm+0x248/0x550 [ 103.569614][ T4803] ? proc_fault_inject_write+0x310/0x310 [ 103.575256][ T4803] vfs_read+0x2db/0x960 [ 103.579430][ T4803] ? kernel_read+0x1e0/0x1e0 [ 103.584025][ T4803] ? __fget_files+0x28/0x460 [ 103.588621][ T4803] ? __fget_files+0x3fc/0x460 [ 103.593312][ T4803] ? __fdget_pos+0x2ae/0x360 [ 103.597904][ T4803] ? ksys_read+0x70/0x260 [ 103.602248][ T4803] ksys_read+0x14d/0x260 [ 103.606519][ T4803] ? vfs_write+0x9a0/0x9a0 [ 103.610962][ T4803] ? lockdep_hardirqs_on+0x94/0x140 [ 103.616173][ T4803] do_syscall_64+0x4c/0xa0 [ 103.620599][ T4803] ? clear_bhb_loop+0x60/0xb0 [ 103.625285][ T4803] ? clear_bhb_loop+0x60/0xb0 [ 103.629972][ T4803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.635876][ T4803] RIP: 0033:0x7f7cd2b5e6ce [ 103.640297][ T4803] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.659924][ T4803] RSP: 002b:00007f7cd3a9ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.668347][ T4803] RAX: ffffffffffffffda RBX: 00007f7cd3aa06c0 RCX: 00007f7cd2b5e6ce [ 103.676338][ T4803] RDX: 000000000000000f RSI: 00007f7cd3aa00a0 RDI: 0000000000000005 [ 103.684331][ T4803] RBP: 00007f7cd3aa0090 R08: 0000000000000000 R09: 0000000000000000 [ 103.692312][ T4803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.700307][ T4803] R13: 00007f7cd2e26038 R14: 00007f7cd2e25fa0 R15: 00007ffd33fad4a8 [ 103.708325][ T4803] [ 103.799236][ T4794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.826247][ T4810] FAULT_INJECTION: forcing a failure. [ 103.826247][ T4810] name failslab, interval 1, probability 0, space 0, times 1 [ 103.954636][ T4810] CPU: 0 PID: 4810 Comm: syz.4.167 Not tainted syzkaller #0 [ 103.961986][ T4810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 103.972079][ T4810] Call Trace: [ 103.975385][ T4810] [ 103.978348][ T4810] dump_stack_lvl+0x188/0x24e [ 103.983087][ T4810] ? show_regs_print_info+0x12/0x12 [ 103.988331][ T4810] ? load_image+0x410/0x410 [ 103.992888][ T4810] ? __might_sleep+0xd0/0xd0 [ 103.997519][ T4810] ? __lock_acquire+0x7c40/0x7c40 [ 104.002602][ T4810] should_fail_ex+0x390/0x4c0 [ 104.007335][ T4810] should_failslab+0x5/0x20 [ 104.011886][ T4810] slab_pre_alloc_hook+0x59/0x300 [ 104.016954][ T4810] ? tomoyo_encode+0x28a/0x550 [ 104.021761][ T4810] __kmem_cache_alloc_node+0x4f/0x270 [ 104.027190][ T4810] ? tomoyo_encode+0x28a/0x550 [ 104.032000][ T4810] __kmalloc+0xa3/0x240 [ 104.036222][ T4810] tomoyo_encode+0x28a/0x550 [ 104.040954][ T4810] tomoyo_realpath_from_path+0x578/0x5c0 [ 104.046635][ T4810] ? tomoyo_domain+0xd2/0x120 [ 104.051374][ T4810] ? tomoyo_path_number_perm+0x205/0x650 [ 104.057054][ T4810] tomoyo_path_number_perm+0x22f/0x650 [ 104.062559][ T4810] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 104.069197][ T4810] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 104.074714][ T4810] ? hrtimer_interrupt+0x7cf/0x980 [ 104.079880][ T4810] ? ktime_get+0x7b/0x270 [ 104.084352][ T4810] ? __fget_files+0x28/0x460 [ 104.089030][ T4810] security_file_ioctl+0x6c/0xa0 [ 104.094014][ T4810] __se_sys_ioctl+0x48/0x170 [ 104.098669][ T4810] do_syscall_64+0x4c/0xa0 [ 104.103126][ T4810] ? clear_bhb_loop+0x60/0xb0 [ 104.107841][ T4810] ? clear_bhb_loop+0x60/0xb0 [ 104.112563][ T4810] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.118493][ T4810] RIP: 0033:0x7fef2cf9de99 [ 104.122940][ T4810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.142585][ T4810] RSP: 002b:00007fef2dd93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.151047][ T4810] RAX: ffffffffffffffda RBX: 00007fef2d226090 RCX: 00007fef2cf9de99 [ 104.159065][ T4810] RDX: 0000200000000000 RSI: 00000000000089e2 RDI: 000000000000000a [ 104.167076][ T4810] RBP: 00007fef2dd93090 R08: 0000000000000000 R09: 0000000000000000 [ 104.175085][ T4810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.183097][ T4810] R13: 00007fef2d226128 R14: 00007fef2d226090 R15: 00007ffdc4dbf338 [ 104.191157][ T4810] [ 104.303734][ T4810] ERROR: Out of memory at tomoyo_realpath_from_path. [ 104.330675][ T4811] netlink: 'syz.2.157': attribute type 11 has an invalid length. [ 104.347113][ T4811] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.157'. [ 104.376754][ T4815] net_ratelimit: 2936 callbacks suppressed [ 104.376767][ T4815] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 104.404220][ T4815] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 104.410608][ T4817] netlink: 17861 bytes leftover after parsing attributes in process `syz.1.161'. [ 104.413326][ T4815] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 104.413369][ T4815] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 104.440978][ T4815] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 104.450135][ T4815] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 104.459278][ T4815] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 104.468428][ T4815] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 104.477676][ T4815] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 104.486844][ T4815] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 104.812883][ T4808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.971851][ T4825] netlink: 'syz.4.164': attribute type 11 has an invalid length. [ 105.017243][ T4825] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.164'. [ 105.067697][ T4832] FAULT_INJECTION: forcing a failure. [ 105.067697][ T4832] name failslab, interval 1, probability 0, space 0, times 0 [ 105.080584][ T4832] CPU: 0 PID: 4832 Comm: syz.0.168 Not tainted syzkaller #0 [ 105.087883][ T4832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 105.097962][ T4832] Call Trace: [ 105.101256][ T4832] [ 105.104205][ T4832] dump_stack_lvl+0x188/0x24e [ 105.108902][ T4832] ? show_regs_print_info+0x12/0x12 [ 105.114122][ T4832] ? load_image+0x410/0x410 [ 105.118649][ T4832] ? ct_irq_exit_irqson+0x113/0x170 [ 105.123861][ T4832] should_fail_ex+0x390/0x4c0 [ 105.128545][ T4832] should_failslab+0x5/0x20 [ 105.133134][ T4832] slab_pre_alloc_hook+0x59/0x300 [ 105.138159][ T4832] ? __local_bh_enable_ip+0x136/0x1c0 [ 105.143533][ T4832] kmem_cache_alloc+0x56/0x2f0 [ 105.148299][ T4832] ? batadv_tt_local_event+0x57/0x770 [ 105.153685][ T4832] batadv_tt_local_event+0x57/0x770 [ 105.158900][ T4832] ? batadv_hash_add+0x4e7/0x640 [ 105.163840][ T4832] ? batadv_hash_add+0x4e7/0x640 [ 105.168782][ T4832] batadv_tt_local_add+0x340/0x1ac0 [ 105.173994][ T4832] ? skb_network_protocol+0x52f/0x790 [ 105.179368][ T4832] ? batadv_tt_global_entry_put+0x140/0x140 [ 105.185263][ T4832] ? batadv_get_vid+0x15f/0x270 [ 105.190110][ T4832] batadv_interface_tx+0x8cf/0x16c0 [ 105.195325][ T4832] ? batadv_softif_is_valid+0x60/0x60 [ 105.200708][ T4832] dev_hard_start_xmit+0x292/0x8b0 [ 105.205818][ T4832] ? validate_xmit_skb_list+0x120/0x120 [ 105.211367][ T4832] __dev_queue_xmit+0x1b4b/0x3810 [ 105.216389][ T4832] ? __dev_queue_xmit+0x281/0x3810 [ 105.221500][ T4832] ? netdev_core_pick_tx+0x360/0x360 [ 105.226794][ T4832] ? skb_release_data+0x1d3/0x7e0 [ 105.231825][ T4832] __bpf_redirect+0xb65/0x1110 [ 105.236595][ T4832] bpf_clone_redirect+0x311/0x4a0 [ 105.241624][ T4832] bpf_prog_e97454e6a39c6b06+0x59/0x5e [ 105.247080][ T4832] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 105.253075][ T4832] ? __lock_acquire+0x7c40/0x7c40 [ 105.258097][ T4832] ? lock_chain_count+0x20/0x20 [ 105.262988][ T4832] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 105.269225][ T4832] ? lockdep_hardirqs_on+0x94/0x140 [ 105.274419][ T4832] ? ktime_get+0x7b/0x270 [ 105.278743][ T4832] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 105.284978][ T4832] ? ktime_get_real_ts64+0x440/0x440 [ 105.290260][ T4832] ? read_lock_is_recursive+0x10/0x10 [ 105.295647][ T4832] bpf_test_run+0x4c1/0x830 [ 105.300162][ T4832] ? dst_hold+0xb0/0xb0 [ 105.304318][ T4832] ? eth_get_headlen+0x200/0x200 [ 105.309250][ T4832] ? __build_skb+0x24b/0x3b0 [ 105.313841][ T4832] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 105.319225][ T4832] ? cpu_online+0xa0/0xa0 [ 105.323549][ T4832] bpf_prog_test_run+0x31c/0x390 [ 105.328488][ T4832] __sys_bpf+0x62b/0x780 [ 105.332731][ T4832] ? bpf_link_show_fdinfo+0x380/0x380 [ 105.338116][ T4832] ? lock_chain_count+0x20/0x20 [ 105.342971][ T4832] __x64_sys_bpf+0x78/0x90 [ 105.347388][ T4832] do_syscall_64+0x4c/0xa0 [ 105.351803][ T4832] ? clear_bhb_loop+0x60/0xb0 [ 105.356475][ T4832] ? clear_bhb_loop+0x60/0xb0 [ 105.361164][ T4832] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.367070][ T4832] RIP: 0033:0x7f7bf879de99 [ 105.371502][ T4832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.391130][ T4832] RSP: 002b:00007f7bf9710028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 105.399545][ T4832] RAX: ffffffffffffffda RBX: 00007f7bf8a25fa0 RCX: 00007f7bf879de99 [ 105.407520][ T4832] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 105.415487][ T4832] RBP: 00007f7bf9710090 R08: 0000000000000000 R09: 0000000000000000 [ 105.423452][ T4832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 105.431415][ T4832] R13: 00007f7bf8a26038 R14: 00007f7bf8a25fa0 R15: 00007ffc1597dfe8 [ 105.439395][ T4832] [ 105.463326][ T4823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.512743][ T4835] netlink: 'syz.3.169': attribute type 39 has an invalid length. [ 105.541945][ T4835] device veth0_macvtap left promiscuous mode [ 105.718384][ T4839] netlink: 60 bytes leftover after parsing attributes in process `syz.4.170'. [ 105.973460][ T4841] netlink: 'syz.0.171': attribute type 11 has an invalid length. [ 106.045992][ T4845] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 106.064678][ T4840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.110634][ T4850] FAULT_INJECTION: forcing a failure. [ 106.110634][ T4850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.125762][ T4850] CPU: 1 PID: 4850 Comm: syz.1.175 Not tainted syzkaller #0 [ 106.133071][ T4850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 106.143126][ T4850] Call Trace: [ 106.146402][ T4850] [ 106.149328][ T4850] dump_stack_lvl+0x188/0x24e [ 106.154011][ T4850] ? show_regs_print_info+0x12/0x12 [ 106.159209][ T4850] ? load_image+0x410/0x410 [ 106.163722][ T4850] ? __lock_acquire+0x7c40/0x7c40 [ 106.168750][ T4850] ? snprintf+0xe5/0x140 [ 106.172990][ T4850] should_fail_ex+0x390/0x4c0 [ 106.177667][ T4850] _copy_to_user+0x2c/0x130 [ 106.182165][ T4850] simple_read_from_buffer+0xe3/0x150 [ 106.187535][ T4850] proc_fail_nth_read+0x1a6/0x220 [ 106.192556][ T4850] ? proc_fault_inject_write+0x310/0x310 [ 106.198184][ T4850] ? fsnotify_perm+0x248/0x550 [ 106.202944][ T4850] ? proc_fault_inject_write+0x310/0x310 [ 106.208571][ T4850] vfs_read+0x2db/0x960 [ 106.212750][ T4850] ? kernel_read+0x1e0/0x1e0 [ 106.217339][ T4850] ? __fget_files+0x28/0x460 [ 106.221930][ T4850] ? __fget_files+0x3fc/0x460 [ 106.226609][ T4850] ? __fdget_pos+0x2ae/0x360 [ 106.231197][ T4850] ? ksys_read+0x70/0x260 [ 106.235524][ T4850] ksys_read+0x14d/0x260 [ 106.239776][ T4850] ? vfs_write+0x9a0/0x9a0 [ 106.244196][ T4850] ? lockdep_hardirqs_on+0x94/0x140 [ 106.249393][ T4850] do_syscall_64+0x4c/0xa0 [ 106.253804][ T4850] ? clear_bhb_loop+0x60/0xb0 [ 106.258482][ T4850] ? clear_bhb_loop+0x60/0xb0 [ 106.263153][ T4850] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.269065][ T4850] RIP: 0033:0x7f7cd2b5e6ce [ 106.273489][ T4850] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 106.293122][ T4850] RSP: 002b:00007f7cd3a9ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 106.302096][ T4850] RAX: ffffffffffffffda RBX: 00007f7cd3aa06c0 RCX: 00007f7cd2b5e6ce [ 106.310331][ T4850] RDX: 000000000000000f RSI: 00007f7cd3aa00a0 RDI: 0000000000000009 [ 106.318305][ T4850] RBP: 00007f7cd3aa0090 R08: 0000000000000000 R09: 0000000000000000 [ 106.326292][ T4850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.334272][ T4850] R13: 00007f7cd2e26038 R14: 00007f7cd2e25fa0 R15: 00007ffd33fad4a8 [ 106.342257][ T4850] [ 106.417326][ T4848] netlink: 'syz.2.174': attribute type 1 has an invalid length. [ 106.620443][ T4857] netlink: 'syz.4.178': attribute type 10 has an invalid length. [ 106.651768][ T4857] device dummy0 entered promiscuous mode [ 106.699502][ T4857] bridge0: port 4(dummy0) entered blocking state [ 106.779915][ T4857] bridge0: port 4(dummy0) entered disabled state [ 106.838816][ T4857] bridge0: port 4(dummy0) entered blocking state [ 106.845637][ T4857] bridge0: port 4(dummy0) entered forwarding state [ 106.886348][ T4865] netlink: 'syz.2.181': attribute type 11 has an invalid length. [ 107.601002][ T4886] __nla_validate_parse: 6 callbacks suppressed [ 107.601019][ T4886] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.189'. [ 107.708211][ T4888] netlink: 'syz.0.188': attribute type 11 has an invalid length. [ 107.725873][ T4888] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.188'. [ 107.799623][ T4893] FAULT_INJECTION: forcing a failure. [ 107.799623][ T4893] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 107.814149][ T4893] CPU: 1 PID: 4893 Comm: syz.1.191 Not tainted syzkaller #0 [ 107.821452][ T4893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 107.831496][ T4893] Call Trace: [ 107.834766][ T4893] [ 107.837694][ T4893] dump_stack_lvl+0x188/0x24e [ 107.842364][ T4893] ? show_regs_print_info+0x12/0x12 [ 107.847552][ T4893] ? load_image+0x410/0x410 [ 107.852040][ T4893] ? __lock_acquire+0x7c40/0x7c40 [ 107.857060][ T4893] should_fail_ex+0x390/0x4c0 [ 107.861733][ T4893] prepare_alloc_pages+0x1e1/0x5b0 [ 107.866939][ T4893] __alloc_pages+0x130/0x4f0 [ 107.871538][ T4893] ? kasan_populate_vmalloc_pte+0xa4/0xf0 [ 107.877252][ T4893] ? zone_statistics+0x170/0x170 [ 107.882203][ T4893] ? __rwlock_init+0x140/0x140 [ 107.886971][ T4893] ? do_raw_spin_unlock+0x11d/0x230 [ 107.892170][ T4893] __get_free_pages+0x8/0x30 [ 107.896761][ T4893] kasan_populate_vmalloc_pte+0x31/0xf0 [ 107.902320][ T4893] ? __apply_to_page_range+0x97b/0xd10 [ 107.907782][ T4893] __apply_to_page_range+0x98d/0xd10 [ 107.913067][ T4893] ? kasan_populate_vmalloc+0x70/0x70 [ 107.918439][ T4893] alloc_vmap_area+0x179f/0x18d0 [ 107.923384][ T4893] ? vm_map_ram+0xab0/0xab0 [ 107.927888][ T4893] ? rcu_is_watching+0x11/0xa0 [ 107.932658][ T4893] __get_vm_area_node+0x158/0x330 [ 107.937687][ T4893] __vmalloc_node_range+0x357/0x1380 [ 107.942970][ T4893] ? htab_map_alloc+0x385/0x1100 [ 107.947912][ T4893] ? is_kernel_percpu_address+0x18f/0x1b0 [ 107.953638][ T4893] ? free_vm_area+0x50/0x50 [ 107.958136][ T4893] ? bpf_map_area_alloc+0x47/0xe0 [ 107.963156][ T4893] ? rcu_is_watching+0x11/0xa0 [ 107.967921][ T4893] bpf_map_area_alloc+0xd4/0xe0 [ 107.972767][ T4893] ? htab_map_alloc+0x385/0x1100 [ 107.977699][ T4893] htab_map_alloc+0x385/0x1100 [ 107.982455][ T4893] ? fput+0x150/0x1a0 [ 107.986434][ T4893] htab_of_map_alloc+0x51/0xc0 [ 107.991198][ T4893] map_create+0x524/0xff0 [ 107.995523][ T4893] ? security_bpf+0x7a/0xa0 [ 108.000026][ T4893] __sys_bpf+0x38b/0x780 [ 108.004270][ T4893] ? bpf_link_show_fdinfo+0x380/0x380 [ 108.009650][ T4893] ? lock_chain_count+0x20/0x20 [ 108.014502][ T4893] __x64_sys_bpf+0x78/0x90 [ 108.018914][ T4893] do_syscall_64+0x4c/0xa0 [ 108.023325][ T4893] ? clear_bhb_loop+0x60/0xb0 [ 108.027996][ T4893] ? clear_bhb_loop+0x60/0xb0 [ 108.032670][ T4893] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.038556][ T4893] RIP: 0033:0x7f7cd2b9de99 [ 108.042965][ T4893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.062559][ T4893] RSP: 002b:00007f7cd3aa0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 108.070969][ T4893] RAX: ffffffffffffffda RBX: 00007f7cd2e25fa0 RCX: 00007f7cd2b9de99 [ 108.078940][ T4893] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 0000000000000000 [ 108.086903][ T4893] RBP: 00007f7cd3aa0090 R08: 0000000000000000 R09: 0000000000000000 [ 108.094864][ T4893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.102823][ T4893] R13: 00007f7cd2e26038 R14: 00007f7cd2e25fa0 R15: 00007ffd33fad4a8 [ 108.110797][ T4893] [ 108.154953][ T4880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.460390][ T4902] netlink: 'syz.0.195': attribute type 11 has an invalid length. [ 108.482760][ T4902] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.195'. [ 108.494691][ T4911] netlink: 60 bytes leftover after parsing attributes in process `syz.3.197'. [ 108.504045][ T4911] netlink: 60 bytes leftover after parsing attributes in process `syz.3.197'. [ 108.568142][ T4911] netlink: 60 bytes leftover after parsing attributes in process `syz.3.197'. [ 108.635705][ T4335] wlan1: Trigger new scan to find an IBSS to join [ 108.945621][ T4924] netlink: 'syz.3.201': attribute type 13 has an invalid length. [ 109.360039][ T4926] device syzkaller0 entered promiscuous mode [ 109.865217][ T4939] netlink: 'syz.2.205': attribute type 11 has an invalid length. [ 109.926632][ T4939] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.205'. [ 110.030106][ T4938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.067319][ T4954] netlink: 'syz.4.211': attribute type 11 has an invalid length. [ 111.124594][ T4954] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.211'. [ 112.634561][ T76] wlan1: Trigger new scan to find an IBSS to join [ 113.694966][ T4335] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 114.271679][ T4976] net_ratelimit: 3256 callbacks suppressed [ 114.271699][ T4976] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 114.286854][ T4976] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 114.296025][ T4976] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 114.305169][ T4976] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 114.314327][ T4976] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 114.323424][ T4976] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 114.332594][ T4976] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 114.341741][ T4976] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 114.350915][ T4976] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 114.360062][ T4976] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 115.826372][ T4948] netlink: 144 bytes leftover after parsing attributes in process `syz.1.209'. [ 115.841062][ T4977] netlink: 'syz.4.217': attribute type 10 has an invalid length. [ 115.852914][ T4977] netlink: 40 bytes leftover after parsing attributes in process `syz.4.217'. [ 116.581328][ T4991] netlink: 'syz.1.221': attribute type 10 has an invalid length. [ 116.602079][ T4991] netlink: 'syz.1.221': attribute type 25 has an invalid length. [ 116.757338][ T4994] netlink: 'syz.3.233': attribute type 11 has an invalid length. [ 116.771726][ T4994] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.233'. [ 116.937795][ T4993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.381688][ T5008] netlink: 'syz.3.225': attribute type 11 has an invalid length. [ 117.435612][ T5008] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.225'. [ 118.057622][ T5024] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.230'. [ 118.340230][ T5032] netlink: 144 bytes leftover after parsing attributes in process `syz.2.236'. [ 118.741571][ T5041] netlink: 'syz.3.237': attribute type 11 has an invalid length. [ 118.771527][ T5041] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.237'. [ 118.959502][ T5039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.121406][ T5048] netlink: 'syz.4.241': attribute type 13 has an invalid length. [ 119.276297][ T5051] net_ratelimit: 3576 callbacks suppressed [ 119.276316][ T5051] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 119.291351][ T5051] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 119.300597][ T5051] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 119.309731][ T5051] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 119.318856][ T5051] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 119.327987][ T5051] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 119.337118][ T5051] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 119.346249][ T5051] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 119.355495][ T5051] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 119.364637][ T5051] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 119.530666][ T5062] netlink: 'syz.0.243': attribute type 11 has an invalid length. [ 119.556512][ T5062] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.243'. [ 120.550703][ T5078] netlink: 144 bytes leftover after parsing attributes in process `syz.4.249'. [ 121.542184][ T5098] netlink: 'syz.4.252': attribute type 11 has an invalid length. [ 121.599823][ T5098] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.252'. [ 121.770397][ T5095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.093104][ T5103] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 122.126671][ T5103] device syzkaller0 entered promiscuous mode [ 122.149466][ T5108] tun0: tun_chr_ioctl cmd 1074025675 [ 122.162539][ T5108] tun0: persist enabled [ 122.174774][ T5108] tun0: tun_chr_ioctl cmd 1074025675 [ 122.190376][ T5108] tun0: persist enabled [ 122.200859][ T5108] tun0: tun_chr_ioctl cmd 35108 [ 122.271240][ T5112] FAULT_INJECTION: forcing a failure. [ 122.271240][ T5112] name failslab, interval 1, probability 0, space 0, times 0 [ 122.331717][ T5112] CPU: 1 PID: 5112 Comm: syz.2.255 Not tainted syzkaller #0 [ 122.339058][ T5112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 122.349138][ T5112] Call Trace: [ 122.352421][ T5112] [ 122.355342][ T5112] dump_stack_lvl+0x188/0x24e [ 122.360011][ T5112] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 122.366157][ T5112] ? show_regs_print_info+0x12/0x12 [ 122.371358][ T5112] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 122.377526][ T5112] should_fail_ex+0x390/0x4c0 [ 122.382214][ T5112] should_failslab+0x5/0x20 [ 122.386733][ T5112] slab_pre_alloc_hook+0x59/0x300 [ 122.391781][ T5112] kmem_cache_alloc+0x56/0x2f0 [ 122.396557][ T5112] ? skb_clone+0x1e7/0x370 [ 122.400995][ T5112] skb_clone+0x1e7/0x370 [ 122.405256][ T5112] bpf_clone_redirect+0x169/0x4a0 [ 122.410304][ T5112] bpf_prog_973cd02a7a0e8181+0x56/0x5b [ 122.415775][ T5112] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 122.421772][ T5112] ? __lock_acquire+0x7c40/0x7c40 [ 122.426817][ T5112] ? lock_chain_count+0x20/0x20 [ 122.431685][ T5112] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 122.437950][ T5112] ? lockdep_hardirqs_on+0x94/0x140 [ 122.443165][ T5112] ? ktime_get+0x7b/0x270 [ 122.447501][ T5112] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 122.453741][ T5112] ? ktime_get_real_ts64+0x440/0x440 [ 122.459025][ T5112] ? read_lock_is_recursive+0x10/0x10 [ 122.464401][ T5112] ? __cant_sleep+0x220/0x220 [ 122.469075][ T5112] ? bpf_test_timer_continue+0x142/0x380 [ 122.474712][ T5112] bpf_test_run+0x2b6/0x830 [ 122.479226][ T5112] ? dst_hold+0xb0/0xb0 [ 122.483377][ T5112] ? eth_get_headlen+0x200/0x200 [ 122.488308][ T5112] ? __build_skb+0x24b/0x3b0 [ 122.492900][ T5112] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 122.498279][ T5112] ? cpu_online+0xa0/0xa0 [ 122.502607][ T5112] bpf_prog_test_run+0x31c/0x390 [ 122.507544][ T5112] __sys_bpf+0x62b/0x780 [ 122.511787][ T5112] ? bpf_link_show_fdinfo+0x380/0x380 [ 122.517167][ T5112] ? lock_chain_count+0x20/0x20 [ 122.522021][ T5112] __x64_sys_bpf+0x78/0x90 [ 122.526436][ T5112] do_syscall_64+0x4c/0xa0 [ 122.530991][ T5112] ? clear_bhb_loop+0x60/0xb0 [ 122.535694][ T5112] ? clear_bhb_loop+0x60/0xb0 [ 122.540369][ T5112] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.546267][ T5112] RIP: 0033:0x7f59bed9de99 [ 122.550674][ T5112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.570281][ T5112] RSP: 002b:00007f59bfcfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 122.578693][ T5112] RAX: ffffffffffffffda RBX: 00007f59bf025fa0 RCX: 00007f59bed9de99 [ 122.586656][ T5112] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 122.594619][ T5112] RBP: 00007f59bfcfd090 R08: 0000000000000000 R09: 0000000000000000 [ 122.602582][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 122.610549][ T5112] R13: 00007f59bf026038 R14: 00007f59bf025fa0 R15: 00007fffac372488 [ 122.618527][ T5112] [ 122.700426][ T5118] netlink: 'syz.3.258': attribute type 11 has an invalid length. [ 122.713487][ T5118] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.258'. [ 125.150805][ T5136] Driver unsupported XDP return value 0 on prog (id 233) dev N/A, expect packet loss! [ 125.246622][ T5142] netlink: 144 bytes leftover after parsing attributes in process `syz.0.265'. [ 125.307173][ T5145] netlink: 'syz.3.269': attribute type 11 has an invalid length. [ 125.365795][ T5145] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.269'. [ 125.469876][ T5144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.818442][ T5161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.270'. [ 125.847037][ T5161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.270'. [ 125.858764][ T5151] netlink: 'syz.1.273': attribute type 11 has an invalid length. [ 125.881295][ T5161] netlink: 33 bytes leftover after parsing attributes in process `syz.4.270'. [ 125.901009][ T5151] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.273'. [ 125.923208][ T5161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.270'. [ 125.976778][ T5161] netlink: 33 bytes leftover after parsing attributes in process `syz.4.270'. [ 126.910291][ T5180] device syzkaller0 entered promiscuous mode [ 127.535063][ T5194] netlink: 'syz.1.281': attribute type 11 has an invalid length. [ 127.543629][ T5194] __nla_validate_parse: 2 callbacks suppressed [ 127.543651][ T5194] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.281'. [ 127.589512][ T5193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.254521][ T5209] netlink: 'syz.0.288': attribute type 11 has an invalid length. [ 129.269421][ T5209] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.288'. [ 129.561178][ T5217] net_ratelimit: 2999 callbacks suppressed [ 129.561199][ T5217] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 129.609691][ T5217] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 129.618907][ T5217] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 129.628100][ T5217] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 129.637265][ T5217] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 129.646438][ T5217] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 129.655612][ T5217] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 129.664785][ T5217] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 129.673926][ T5217] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 129.683141][ T5217] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 129.808072][ T5219] netlink: 'syz.0.292': attribute type 11 has an invalid length. [ 129.857983][ T5219] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.292'. [ 132.536295][ T5235] FAULT_INJECTION: forcing a failure. [ 132.536295][ T5235] name failslab, interval 1, probability 0, space 0, times 0 [ 132.625298][ T5235] CPU: 1 PID: 5235 Comm: syz.3.300 Not tainted syzkaller #0 [ 132.632642][ T5235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 132.642708][ T5235] Call Trace: [ 132.645999][ T5235] [ 132.648959][ T5235] dump_stack_lvl+0x188/0x24e [ 132.653667][ T5235] ? show_regs_print_info+0x12/0x12 [ 132.658890][ T5235] ? load_image+0x410/0x410 [ 132.663407][ T5235] ? __lock_acquire+0x7c40/0x7c40 [ 132.668443][ T5235] should_fail_ex+0x390/0x4c0 [ 132.673137][ T5235] should_failslab+0x5/0x20 [ 132.677646][ T5235] slab_pre_alloc_hook+0x59/0x300 [ 132.682665][ T5235] ? perf_trace_preemptirq_template+0xa8/0x320 [ 132.688826][ T5235] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 132.694392][ T5235] __kmem_cache_alloc_node+0x4f/0x270 [ 132.699773][ T5235] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 132.705324][ T5235] __kmalloc+0xa3/0x240 [ 132.709490][ T5235] bpf_prog_test_run_skb+0x23e/0x18e0 [ 132.714862][ T5235] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 132.721049][ T5235] ? lockdep_hardirqs_on+0x94/0x140 [ 132.726245][ T5235] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 132.732405][ T5235] ? cpu_online+0xa0/0xa0 [ 132.736729][ T5235] bpf_prog_test_run+0x31c/0x390 [ 132.741673][ T5235] __sys_bpf+0x62b/0x780 [ 132.745914][ T5235] ? bpf_link_show_fdinfo+0x380/0x380 [ 132.751295][ T5235] ? lock_chain_count+0x20/0x20 [ 132.756151][ T5235] __x64_sys_bpf+0x78/0x90 [ 132.760585][ T5235] do_syscall_64+0x4c/0xa0 [ 132.765007][ T5235] ? clear_bhb_loop+0x60/0xb0 [ 132.769683][ T5235] ? clear_bhb_loop+0x60/0xb0 [ 132.774366][ T5235] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 132.780258][ T5235] RIP: 0033:0x7f4b1739de99 [ 132.784668][ T5235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.804270][ T5235] RSP: 002b:00007f4b1832f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 132.812681][ T5235] RAX: ffffffffffffffda RBX: 00007f4b17625fa0 RCX: 00007f4b1739de99 [ 132.820651][ T5235] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 132.829049][ T5235] RBP: 00007f4b1832f090 R08: 0000000000000000 R09: 0000000000000000 [ 132.837013][ T5235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.844974][ T5235] R13: 00007f4b17626038 R14: 00007f4b17625fa0 R15: 00007ffc2f777558 [ 132.852948][ T5235] [ 132.861597][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.867954][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.193188][ T5263] netlink: 'syz.1.307': attribute type 10 has an invalid length. [ 134.769167][ T5263] team0: Device vxcan1 is of different type [ 135.096683][ T5265] netlink: 'syz.4.308': attribute type 21 has an invalid length. [ 135.123770][ T5265] netlink: 'syz.4.308': attribute type 12 has an invalid length. [ 135.143122][ T5265] netlink: 'syz.4.308': attribute type 13 has an invalid length. [ 135.174258][ T5265] netlink: 'syz.4.308': attribute type 14 has an invalid length. [ 135.182023][ T5265] netlink: 'syz.4.308': attribute type 15 has an invalid length. [ 135.232161][ T5265] netlink: 'syz.4.308': attribute type 16 has an invalid length. [ 135.254389][ T5263] syz.1.307 (5263) used greatest stack depth: 19152 bytes left [ 135.267747][ T5265] netlink: 'syz.4.308': attribute type 19 has an invalid length. [ 135.294450][ T5265] netlink: 'syz.4.308': attribute type 6 has an invalid length. [ 135.311196][ T5265] netlink: 9618 bytes leftover after parsing attributes in process `syz.4.308'. [ 135.409146][ T5276] netlink: 'syz.0.312': attribute type 29 has an invalid length. [ 135.642029][ T5287] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.316'. [ 136.325486][ T5299] netlink: 'syz.0.321': attribute type 11 has an invalid length. [ 136.410048][ T5299] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.321'. [ 136.710503][ T5303] netlink: 'syz.4.323': attribute type 11 has an invalid length. [ 136.737145][ T5303] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.323'. [ 136.799824][ T5298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.369570][ T5319] netlink: 'syz.4.328': attribute type 11 has an invalid length. [ 137.394478][ T5319] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.328'. [ 138.415032][ T5346] netlink: 'syz.1.338': attribute type 11 has an invalid length. [ 138.479584][ T5346] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.338'. [ 138.580056][ T5349] netlink: 'syz.0.340': attribute type 11 has an invalid length. [ 138.597588][ T5349] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.340'. [ 139.254876][ T5348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.493158][ T5361] netlink: 'syz.3.344': attribute type 11 has an invalid length. [ 139.533322][ T5361] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.344'. [ 140.356258][ T5383] device wlan1 entered promiscuous mode [ 140.477135][ T5386] netlink: 'syz.4.355': attribute type 11 has an invalid length. [ 140.514848][ T5386] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.355'. [ 140.807194][ T5399] netlink: 'syz.0.357': attribute type 11 has an invalid length. [ 140.817554][ T5399] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.357'. [ 141.055075][ T5392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.360386][ T4287] Bluetooth: hci4: unexpected event 0x20 length: 15 > 7 [ 141.466552][ T5411] netlink: 'syz.0.364': attribute type 11 has an invalid length. [ 141.503299][ T5411] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.364'. [ 141.525409][ T5415] validate_nla: 4 callbacks suppressed [ 141.525426][ T5415] netlink: 'syz.2.366': attribute type 2 has an invalid length. [ 141.811018][ T5419] IPv6: NLM_F_CREATE should be specified when creating new route [ 141.973243][ T5428] netlink: 'syz.0.371': attribute type 11 has an invalid length. [ 142.014568][ T5428] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.371'. [ 142.470712][ T5436] netlink: 'syz.0.375': attribute type 11 has an invalid length. [ 142.510798][ T5436] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.375'. [ 142.564700][ T5435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.684449][ T5445] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.377'. [ 142.770573][ T5445] netlink: 'syz.1.377': attribute type 4 has an invalid length. [ 142.786938][ T5445] netlink: 152 bytes leftover after parsing attributes in process `syz.1.377'. [ 142.823399][ T5456] netlink: 'syz.0.381': attribute type 16 has an invalid length. [ 142.888126][ T5456] netlink: 'syz.0.381': attribute type 3 has an invalid length. [ 142.952449][ T5456] netlink: 132 bytes leftover after parsing attributes in process `syz.0.381'. [ 145.035101][ T5501] netlink: 'syz.4.395': attribute type 10 has an invalid length. [ 145.045532][ T5496] netlink: 'syz.0.392': attribute type 11 has an invalid length. [ 145.053730][ T5496] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.392'. [ 145.242734][ T5501] team0: Device vxcan1 is of different type [ 145.479404][ T5512] netlink: 'syz.3.397': attribute type 3 has an invalid length. [ 145.506830][ T5512] netlink: 'syz.3.397': attribute type 1 has an invalid length. [ 145.537107][ T5512] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.397'. [ 145.722160][ T5495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.180853][ T5516] device wlan1 entered promiscuous mode [ 146.301802][ T5522] netlink: 'syz.3.402': attribute type 11 has an invalid length. [ 146.317962][ T5522] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.402'. [ 146.745879][ T5541] netlink: 'syz.3.408': attribute type 11 has an invalid length. [ 146.761758][ T5541] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.408'. [ 147.327471][ T5536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.599611][ T5550] netlink: 60 bytes leftover after parsing attributes in process `syz.0.411'. [ 147.610308][ T5550] netlink: 60 bytes leftover after parsing attributes in process `syz.0.411'. [ 147.706145][ T5552] netlink: 'syz.3.412': attribute type 2 has an invalid length. [ 147.804820][ T5558] netlink: 'syz.0.411': attribute type 2 has an invalid length. [ 147.812646][ T5558] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.411'. [ 147.923746][ T5550] netlink: 60 bytes leftover after parsing attributes in process `syz.0.411'. [ 148.363393][ T5564] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.413'. [ 148.942463][ T5569] netlink: 'syz.4.416': attribute type 7 has an invalid length. [ 149.717407][ T5579] netlink: 'syz.0.421': attribute type 10 has an invalid length. [ 149.749865][ T5577] netlink: 'syz.1.419': attribute type 2 has an invalid length. [ 149.798785][ T5577] netlink: 10 bytes leftover after parsing attributes in process `syz.1.419'. [ 149.824929][ T5576] device wlan1 entered promiscuous mode [ 150.003495][ T5581] syzkaller0: create flow: hash 3713706039 index 2 [ 150.360678][ T4317] syzkaller0: tun_net_xmit 76 [ 150.374380][ T4317] syzkaller0: tun_net_xmit 48 [ 150.384388][ T22] syzkaller0: tun_net_xmit 76 [ 150.424461][ T5575] syzkaller0: delete flow: hash 3713706039 index 2 [ 150.441593][ T5593] device syzkaller0 entered promiscuous mode [ 150.464751][ T4317] syzkaller0: tun_net_xmit 76 [ 150.695587][ T5601] netlink: 'syz.4.428': attribute type 16 has an invalid length. [ 150.740893][ T5601] netlink: 'syz.4.428': attribute type 3 has an invalid length. [ 150.762883][ T5601] netlink: 132 bytes leftover after parsing attributes in process `syz.4.428'. [ 152.757778][ T5621] device wlan1 entered promiscuous mode [ 152.837635][ T5626] netlink: 'syz.3.435': attribute type 3 has an invalid length. [ 152.846658][ T5626] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.435'. [ 153.238355][ T5631] netlink: 'syz.1.437': attribute type 2 has an invalid length. [ 155.531321][ T5643] netlink: 'syz.0.441': attribute type 1 has an invalid length. [ 155.574869][ T5654] netlink: 'syz.0.441': attribute type 29 has an invalid length. [ 155.583021][ T5654] netlink: 'syz.0.441': attribute type 29 has an invalid length. [ 155.631781][ T5643] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.441'. [ 155.842245][ T5660] netlink: 'syz.0.447': attribute type 10 has an invalid length. [ 155.893033][ T5661] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.446'. [ 155.914374][ T5660] netlink: 2 bytes leftover after parsing attributes in process `syz.0.447'. [ 155.976196][ T5660] bridge0: port 4(dummy0) entered disabled state [ 155.983432][ T5660] bridge0: port 3(ip6gretap0) entered disabled state [ 155.990352][ T5660] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.039537][ T5660] bridge0: port 4(dummy0) entered blocking state [ 156.045999][ T5660] bridge0: port 4(dummy0) entered forwarding state [ 156.052733][ T5660] bridge0: port 3(ip6gretap0) entered blocking state [ 156.059585][ T5660] bridge0: port 3(ip6gretap0) entered forwarding state [ 156.066620][ T5660] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.073733][ T5660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.096669][ T5660] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 156.110311][ T5664] netlink: 'syz.1.448': attribute type 21 has an invalid length. [ 156.120069][ T5664] netlink: 132 bytes leftover after parsing attributes in process `syz.1.448'. [ 156.129465][ T5664] netlink: 'syz.1.448': attribute type 1 has an invalid length. [ 158.853192][ T5702] netlink: 'syz.4.460': attribute type 2 has an invalid length. [ 158.936602][ T5709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.956873][ T5709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.947678][ T5709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.964730][ T5709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.837442][ T5745] FAULT_INJECTION: forcing a failure. [ 161.837442][ T5745] name failslab, interval 1, probability 0, space 0, times 0 [ 161.860482][ T5745] CPU: 0 PID: 5745 Comm: syz.0.485 Not tainted syzkaller #0 [ 161.867824][ T5745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 161.877898][ T5745] Call Trace: [ 161.881194][ T5745] [ 161.884139][ T5745] dump_stack_lvl+0x188/0x24e [ 161.888837][ T5745] ? show_regs_print_info+0x12/0x12 [ 161.894044][ T5745] ? load_image+0x410/0x410 [ 161.898547][ T5745] ? __might_sleep+0xd0/0xd0 [ 161.903133][ T5745] ? __lock_acquire+0x7c40/0x7c40 [ 161.908159][ T5745] should_fail_ex+0x390/0x4c0 [ 161.912839][ T5745] should_failslab+0x5/0x20 [ 161.917336][ T5745] slab_pre_alloc_hook+0x59/0x300 [ 161.922354][ T5745] ? __lock_acquire+0x138a/0x7c40 [ 161.927377][ T5745] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 161.933092][ T5745] __kmem_cache_alloc_node+0x4f/0x270 [ 161.938460][ T5745] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 161.944184][ T5745] __kmalloc+0xa3/0x240 [ 161.948343][ T5745] tomoyo_realpath_from_path+0xe2/0x5c0 [ 161.953884][ T5745] ? tomoyo_domain+0xd2/0x120 [ 161.958568][ T5745] ? tomoyo_path_number_perm+0x205/0x650 [ 161.964555][ T5745] tomoyo_path_number_perm+0x22f/0x650 [ 161.970022][ T5745] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 161.975576][ T5745] ? ksys_write+0x1ce/0x260 [ 161.980089][ T5745] ? common_file_perm+0x171/0x1c0 [ 161.985164][ T5745] ? __fget_files+0x28/0x460 [ 161.989761][ T5745] security_file_ioctl+0x6c/0xa0 [ 161.994696][ T5745] __se_sys_ioctl+0x48/0x170 [ 161.999289][ T5745] do_syscall_64+0x4c/0xa0 [ 162.003708][ T5745] ? clear_bhb_loop+0x60/0xb0 [ 162.008390][ T5745] ? clear_bhb_loop+0x60/0xb0 [ 162.013065][ T5745] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.018951][ T5745] RIP: 0033:0x7f7bf879de99 [ 162.023360][ T5745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.042981][ T5745] RSP: 002b:00007f7bf9710028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.051388][ T5745] RAX: ffffffffffffffda RBX: 00007f7bf8a25fa0 RCX: 00007f7bf879de99 [ 162.060395][ T5745] RDX: 0000200000000040 RSI: 00000000000089f2 RDI: 0000000000000003 [ 162.068392][ T5745] RBP: 00007f7bf9710090 R08: 0000000000000000 R09: 0000000000000000 [ 162.076375][ T5745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.084358][ T5745] R13: 00007f7bf8a26038 R14: 00007f7bf8a25fa0 R15: 00007ffc1597dfe8 [ 162.092713][ T5745] [ 162.265222][ T5745] ERROR: Out of memory at tomoyo_realpath_from_path. [ 163.370660][ T5780] netlink: 44 bytes leftover after parsing attributes in process `syz.3.488'. [ 164.367392][ T5794] bond0: (slave bridge_slave_1): Error: Slave has XDP program loaded, please unload before enslaving [ 165.050552][ T5825] netlink: 'syz.2.499': attribute type 11 has an invalid length. [ 165.063300][ T5825] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.499'. [ 166.220264][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.246615][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.258240][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.266197][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.468949][ T5849] netlink: 'syz.2.508': attribute type 3 has an invalid length. [ 166.490979][ T5849] netlink: 152 bytes leftover after parsing attributes in process `syz.2.508'. [ 166.839067][ T5859] netlink: 132 bytes leftover after parsing attributes in process `syz.1.515'. [ 166.903840][ T5857] netlink: 'syz.3.513': attribute type 11 has an invalid length. [ 166.913854][ T5857] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.513'. [ 167.179430][ T5868] FAULT_INJECTION: forcing a failure. [ 167.179430][ T5868] name failslab, interval 1, probability 0, space 0, times 0 [ 167.242661][ T5868] CPU: 0 PID: 5868 Comm: syz.3.519 Not tainted syzkaller #0 [ 167.250008][ T5868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 167.260089][ T5868] Call Trace: [ 167.263377][ T5868] [ 167.266316][ T5868] dump_stack_lvl+0x188/0x24e [ 167.271016][ T5868] ? show_regs_print_info+0x12/0x12 [ 167.276227][ T5868] ? load_image+0x410/0x410 [ 167.280740][ T5868] ? __might_sleep+0xd0/0xd0 [ 167.285342][ T5868] ? __lock_acquire+0x7c40/0x7c40 [ 167.290373][ T5868] ? copy_from_kernel_nofault_allowed+0xb9/0x130 [ 167.296719][ T5868] should_fail_ex+0x390/0x4c0 [ 167.301418][ T5868] should_failslab+0x5/0x20 [ 167.305926][ T5868] slab_pre_alloc_hook+0x59/0x300 [ 167.310956][ T5868] ? tomoyo_encode+0x28a/0x550 [ 167.315726][ T5868] __kmem_cache_alloc_node+0x4f/0x270 [ 167.321109][ T5868] ? tomoyo_encode+0x28a/0x550 [ 167.325881][ T5868] __kmalloc+0xa3/0x240 [ 167.330064][ T5868] tomoyo_encode+0x28a/0x550 [ 167.334679][ T5868] tomoyo_realpath_from_path+0x578/0x5c0 [ 167.340326][ T5868] ? tomoyo_domain+0xd2/0x120 [ 167.345025][ T5868] ? tomoyo_path_number_perm+0x205/0x650 [ 167.350666][ T5868] tomoyo_path_number_perm+0x22f/0x650 [ 167.356132][ T5868] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 167.361626][ T5868] ? __lock_acquire+0x7c40/0x7c40 [ 167.366680][ T5868] ? hook_path_mkdir+0x3a0/0x460 [ 167.371631][ T5868] ? lookup_one_qstr_excl+0x11c/0x240 [ 167.377015][ T5868] tomoyo_path_mkdir+0xad/0xf0 [ 167.381784][ T5868] ? tomoyo_path_unlink+0xf0/0xf0 [ 167.386817][ T5868] ? kern_path_create+0x50/0x50 [ 167.391669][ T5868] ? __virt_addr_valid+0x44f/0x540 [ 167.396792][ T5868] security_path_mkdir+0xe0/0x130 [ 167.401822][ T5868] do_mkdirat+0x15e/0x440 [ 167.406165][ T5868] ? vfs_mkdir+0x570/0x570 [ 167.410623][ T5868] __x64_sys_mkdirat+0x85/0x90 [ 167.415399][ T5868] do_syscall_64+0x4c/0xa0 [ 167.419825][ T5868] ? clear_bhb_loop+0x60/0xb0 [ 167.424518][ T5868] ? clear_bhb_loop+0x60/0xb0 [ 167.429202][ T5868] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.435099][ T5868] RIP: 0033:0x7f4b1739de99 [ 167.439517][ T5868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.459123][ T5868] RSP: 002b:00007f4b1832f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 167.467541][ T5868] RAX: ffffffffffffffda RBX: 00007f4b17625fa0 RCX: 00007f4b1739de99 [ 167.475517][ T5868] RDX: 00000000000001ff RSI: 00002000000000c0 RDI: 000000000000000a [ 167.483579][ T5868] RBP: 00007f4b1832f090 R08: 0000000000000000 R09: 0000000000000000 [ 167.491779][ T5868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.499765][ T5868] R13: 00007f4b17626038 R14: 00007f4b17625fa0 R15: 00007ffc2f777558 [ 167.507853][ T5868] [ 167.534561][ T5868] ERROR: Out of memory at tomoyo_realpath_from_path. [ 168.051895][ T5890] netlink: 'syz.0.525': attribute type 4 has an invalid length. [ 168.096039][ T5890] netlink: 152 bytes leftover after parsing attributes in process `syz.0.525'. [ 168.779007][ T5902] netlink: 'syz.4.531': attribute type 11 has an invalid length. [ 168.834369][ T5902] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.531'. [ 168.961525][ T5910] netlink: 'syz.0.534': attribute type 4 has an invalid length. [ 168.983353][ T5910] netlink: 152 bytes leftover after parsing attributes in process `syz.0.534'. [ 169.098436][ T5910] net_ratelimit: 6585 callbacks suppressed [ 169.098448][ T5910] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 169.536824][ T5931] netlink: 188 bytes leftover after parsing attributes in process `syz.4.542'. [ 169.993264][ T5948] netlink: 'syz.1.549': attribute type 11 has an invalid length. [ 170.010907][ T5948] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.549'. [ 170.069840][ T5952] netlink: 143932 bytes leftover after parsing attributes in process `syz.2.550'. [ 170.099677][ T5952] netlink: zone id is out of range [ 170.124415][ T5952] netlink: zone id is out of range [ 170.148045][ T5952] netlink: zone id is out of range [ 170.153472][ T5952] netlink: zone id is out of range [ 170.201259][ T5952] netlink: zone id is out of range [ 170.241487][ T5952] netlink: zone id is out of range [ 170.269637][ T5952] netlink: zone id is out of range [ 170.279759][ T5952] netlink: zone id is out of range [ 170.303341][ T5952] netlink: zone id is out of range [ 170.400568][ T5956] netlink: 'syz.0.551': attribute type 19 has an invalid length. [ 170.414475][ T5956] netlink: 14552 bytes leftover after parsing attributes in process `syz.0.551'. [ 171.388933][ T5985] netlink: 'syz.0.562': attribute type 11 has an invalid length. [ 171.445974][ T5985] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.562'. [ 171.613580][ T5997] netlink: 'syz.2.566': attribute type 10 has an invalid length. [ 171.666905][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.689354][ T5997] device bridge_slave_1 left promiscuous mode [ 171.705631][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.743383][ T6002] FAULT_INJECTION: forcing a failure. [ 171.743383][ T6002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.806636][ T6002] CPU: 0 PID: 6002 Comm: syz.3.569 Not tainted syzkaller #0 [ 171.813982][ T6002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 171.824060][ T6002] Call Trace: [ 171.827349][ T6002] [ 171.830290][ T6002] dump_stack_lvl+0x188/0x24e [ 171.835000][ T6002] ? show_regs_print_info+0x12/0x12 [ 171.840220][ T6002] ? load_image+0x410/0x410 [ 171.844742][ T6002] ? __lock_acquire+0x7c40/0x7c40 [ 171.849790][ T6002] should_fail_ex+0x390/0x4c0 [ 171.854487][ T6002] _copy_from_user+0x2c/0x170 [ 171.859182][ T6002] bpf_test_init+0xde/0x140 [ 171.863714][ T6002] bpf_prog_test_run_xdp+0x488/0xf80 [ 171.869015][ T6002] ? __lock_acquire+0x7c40/0x7c40 [ 171.874050][ T6002] ? dev_put+0x80/0x80 [ 171.878126][ T6002] ? dev_put+0x80/0x80 [ 171.882188][ T6002] bpf_prog_test_run+0x31c/0x390 [ 171.887126][ T6002] __sys_bpf+0x62b/0x780 [ 171.891366][ T6002] ? bpf_link_show_fdinfo+0x380/0x380 [ 171.896750][ T6002] ? lock_chain_count+0x20/0x20 [ 171.901603][ T6002] __x64_sys_bpf+0x78/0x90 [ 171.906020][ T6002] do_syscall_64+0x4c/0xa0 [ 171.910433][ T6002] ? clear_bhb_loop+0x60/0xb0 [ 171.915113][ T6002] ? clear_bhb_loop+0x60/0xb0 [ 171.919789][ T6002] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.925676][ T6002] RIP: 0033:0x7f4b1739de99 [ 171.930088][ T6002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.949691][ T6002] RSP: 002b:00007f4b1832f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 171.958097][ T6002] RAX: ffffffffffffffda RBX: 00007f4b17625fa0 RCX: 00007f4b1739de99 [ 171.966061][ T6002] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 171.974021][ T6002] RBP: 00007f4b1832f090 R08: 0000000000000000 R09: 0000000000000000 [ 171.981982][ T6002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.989944][ T6002] R13: 00007f4b17626038 R14: 00007f4b17625fa0 R15: 00007ffc2f777558 [ 171.997918][ T6002] [ 173.336109][ T6032] netlink: 'syz.4.578': attribute type 29 has an invalid length. [ 173.351503][ T6032] netlink: 'syz.4.578': attribute type 29 has an invalid length. [ 173.380136][ T6032] netlink: 'syz.4.578': attribute type 29 has an invalid length. [ 173.397709][ T6032] netlink: 'syz.4.578': attribute type 29 has an invalid length. [ 173.880253][ T6045] netlink: 'syz.3.579': attribute type 11 has an invalid length. [ 173.914351][ T6045] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.579'. [ 175.350261][ T6079] FAULT_INJECTION: forcing a failure. [ 175.350261][ T6079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.449995][ T6079] CPU: 0 PID: 6079 Comm: syz.3.590 Not tainted syzkaller #0 [ 175.457346][ T6079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 175.467414][ T6079] Call Trace: [ 175.470705][ T6079] [ 175.473671][ T6079] dump_stack_lvl+0x188/0x24e [ 175.478648][ T6079] ? show_regs_print_info+0x12/0x12 [ 175.483937][ T6079] ? load_image+0x410/0x410 [ 175.488736][ T6079] ? __lock_acquire+0x7c40/0x7c40 [ 175.493786][ T6079] ? snprintf+0xe5/0x140 [ 175.498052][ T6079] should_fail_ex+0x390/0x4c0 [ 175.502754][ T6079] _copy_to_user+0x2c/0x130 [ 175.507279][ T6079] simple_read_from_buffer+0xe3/0x150 [ 175.513284][ T6079] proc_fail_nth_read+0x1a6/0x220 [ 175.518336][ T6079] ? proc_fault_inject_write+0x310/0x310 [ 175.523992][ T6079] ? fsnotify_perm+0x248/0x550 [ 175.528781][ T6079] ? proc_fault_inject_write+0x310/0x310 [ 175.534433][ T6079] vfs_read+0x2db/0x960 [ 175.538628][ T6079] ? kernel_read+0x1e0/0x1e0 [ 175.543244][ T6079] ? __fget_files+0x28/0x460 [ 175.547851][ T6079] ? __fget_files+0x3fc/0x460 [ 175.552560][ T6079] ? __fdget_pos+0x2ae/0x360 [ 175.557170][ T6079] ? ksys_read+0x70/0x260 [ 175.561610][ T6079] ksys_read+0x14d/0x260 [ 175.565874][ T6079] ? vfs_write+0x9a0/0x9a0 [ 175.570312][ T6079] ? lockdep_hardirqs_on+0x94/0x140 [ 175.575533][ T6079] do_syscall_64+0x4c/0xa0 [ 175.579994][ T6079] ? clear_bhb_loop+0x60/0xb0 [ 175.584687][ T6079] ? clear_bhb_loop+0x60/0xb0 [ 175.589384][ T6079] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.595295][ T6079] RIP: 0033:0x7f4b1735e6ce [ 175.599726][ T6079] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 175.619349][ T6079] RSP: 002b:00007f4b182ecfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 175.627784][ T6079] RAX: ffffffffffffffda RBX: 00007f4b182ed6c0 RCX: 00007f4b1735e6ce [ 175.635772][ T6079] RDX: 000000000000000f RSI: 00007f4b182ed0a0 RDI: 000000000000000b [ 175.643753][ T6079] RBP: 00007f4b182ed090 R08: 0000000000000000 R09: 0000000000000000 [ 175.651733][ T6079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.659712][ T6079] R13: 00007f4b17626218 R14: 00007f4b17626180 R15: 00007ffc2f777558 [ 175.667724][ T6079] [ 175.750558][ T6071] netlink: 'syz.2.591': attribute type 10 has an invalid length. [ 175.822720][ T6071] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 176.812859][ T6093] netlink: 'syz.1.597': attribute type 11 has an invalid length. [ 176.896829][ T6093] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.597'. [ 176.942709][ T6099] netlink: 'syz.2.601': attribute type 10 has an invalid length. [ 176.998349][ T6102] FAULT_INJECTION: forcing a failure. [ 176.998349][ T6102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.019331][ T6102] CPU: 1 PID: 6102 Comm: syz.4.602 Not tainted syzkaller #0 [ 177.026669][ T6102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 177.036734][ T6102] Call Trace: [ 177.040016][ T6102] [ 177.042948][ T6102] dump_stack_lvl+0x188/0x24e [ 177.047642][ T6102] ? show_regs_print_info+0x12/0x12 [ 177.052849][ T6102] ? load_image+0x410/0x410 [ 177.057370][ T6102] ? __lock_acquire+0x7c40/0x7c40 [ 177.063401][ T6102] should_fail_ex+0x390/0x4c0 [ 177.068161][ T6102] _copy_from_user+0x2c/0x170 [ 177.073304][ T6102] ___sys_recvmsg+0x170/0x590 [ 177.078021][ T6102] ? __sys_recvmsg+0x2a0/0x2a0 [ 177.082798][ T6102] ? trace_call_bpf+0xbf/0x6b0 [ 177.087578][ T6102] ? trace_call_bpf+0x5d6/0x6b0 [ 177.092638][ T6102] ? __fget_files+0x3fc/0x460 [ 177.097433][ T6102] __x64_sys_recvmsg+0x20d/0x2e0 [ 177.102399][ T6102] ? perf_trace_preemptirq_template+0x268/0x320 [ 177.108841][ T6102] ? ___sys_recvmsg+0x590/0x590 [ 177.113852][ T6102] ? lockdep_hardirqs_on+0x94/0x140 [ 177.119941][ T6102] do_syscall_64+0x4c/0xa0 [ 177.124362][ T6102] ? clear_bhb_loop+0x60/0xb0 [ 177.129051][ T6102] ? clear_bhb_loop+0x60/0xb0 [ 177.133740][ T6102] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.139639][ T6102] RIP: 0033:0x7fef2cf9de99 [ 177.144056][ T6102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.163667][ T6102] RSP: 002b:00007fef2ddb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 177.172103][ T6102] RAX: ffffffffffffffda RBX: 00007fef2d225fa0 RCX: 00007fef2cf9de99 [ 177.180081][ T6102] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 177.188052][ T6102] RBP: 00007fef2ddb4090 R08: 0000000000000000 R09: 0000000000000000 [ 177.196017][ T6102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.203982][ T6102] R13: 00007fef2d226038 R14: 00007fef2d225fa0 R15: 00007ffdc4dbf338 [ 177.211958][ T6102] [ 177.222160][ T6107] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 177.229934][ T6107] IPv6: NLM_F_CREATE should be set when creating new route [ 177.237449][ T6107] IPv6: NLM_F_CREATE should be set when creating new route [ 177.244965][ T6107] IPv6: NLM_F_CREATE should be set when creating new route [ 177.260666][ T6107] netlink: 'syz.3.603': attribute type 2 has an invalid length. [ 177.269668][ T6107] netlink: 60 bytes leftover after parsing attributes in process `syz.3.603'. [ 178.209256][ T6132] netlink: 'syz.3.613': attribute type 10 has an invalid length. [ 178.222506][ T6132] netlink: 168 bytes leftover after parsing attributes in process `syz.3.613'. [ 178.738163][ T6140] netlink: 'syz.2.617': attribute type 11 has an invalid length. [ 178.746883][ T6140] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.617'. [ 180.521639][ T6185] netlink: 'syz.3.633': attribute type 29 has an invalid length. [ 180.547308][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.633'. [ 180.612962][ T6185] netlink: 'syz.3.633': attribute type 29 has an invalid length. [ 180.679431][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.633'. [ 180.966971][ T6196] netlink: 'syz.1.634': attribute type 11 has an invalid length. [ 180.979449][ T6196] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.634'. [ 182.277821][ T6218] netlink: 'syz.3.642': attribute type 3 has an invalid length. [ 182.308163][ T6218] netlink: 105108 bytes leftover after parsing attributes in process `syz.3.642'. [ 182.510990][ T6229] FAULT_INJECTION: forcing a failure. [ 182.510990][ T6229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.534861][ T6229] CPU: 0 PID: 6229 Comm: syz.3.648 Not tainted syzkaller #0 [ 182.542314][ T6229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 182.552397][ T6229] Call Trace: [ 182.555700][ T6229] [ 182.558646][ T6229] dump_stack_lvl+0x188/0x24e [ 182.563352][ T6229] ? show_regs_print_info+0x12/0x12 [ 182.568578][ T6229] ? load_image+0x410/0x410 [ 182.573118][ T6229] ? __lock_acquire+0x7c40/0x7c40 [ 182.578197][ T6229] ? snprintf+0xe5/0x140 [ 182.582464][ T6229] should_fail_ex+0x390/0x4c0 [ 182.587182][ T6229] _copy_to_user+0x2c/0x130 [ 182.591809][ T6229] simple_read_from_buffer+0xe3/0x150 [ 182.597214][ T6229] proc_fail_nth_read+0x1a6/0x220 [ 182.602278][ T6229] ? proc_fault_inject_write+0x310/0x310 [ 182.607943][ T6229] ? fsnotify_perm+0x248/0x550 [ 182.612733][ T6229] ? proc_fault_inject_write+0x310/0x310 [ 182.618401][ T6229] vfs_read+0x2db/0x960 [ 182.622594][ T6229] ? kernel_read+0x1e0/0x1e0 [ 182.627214][ T6229] ? __fget_files+0x28/0x460 [ 182.631845][ T6229] ? __fget_files+0x3fc/0x460 [ 182.636567][ T6229] ? __fdget_pos+0x2ae/0x360 [ 182.641189][ T6229] ? ksys_read+0x70/0x260 [ 182.645547][ T6229] ksys_read+0x14d/0x260 [ 182.649820][ T6229] ? vfs_write+0x9a0/0x9a0 [ 182.654264][ T6229] ? lockdep_hardirqs_on+0x94/0x140 [ 182.659489][ T6229] do_syscall_64+0x4c/0xa0 [ 182.663931][ T6229] ? clear_bhb_loop+0x60/0xb0 [ 182.668639][ T6229] ? clear_bhb_loop+0x60/0xb0 [ 182.673349][ T6229] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.679279][ T6229] RIP: 0033:0x7f4b1735e6ce [ 182.683714][ T6229] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 182.703358][ T6229] RSP: 002b:00007f4b1832efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 182.711806][ T6229] RAX: ffffffffffffffda RBX: 00007f4b1832f6c0 RCX: 00007f4b1735e6ce [ 182.719811][ T6229] RDX: 000000000000000f RSI: 00007f4b1832f0a0 RDI: 0000000000000005 [ 182.727823][ T6229] RBP: 00007f4b1832f090 R08: 0000000000000000 R09: 0000000000000000 [ 182.735828][ T6229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.743834][ T6229] R13: 00007f4b17626038 R14: 00007f4b17625fa0 R15: 00007ffc2f777558 [ 182.751862][ T6229] [ 183.081061][ T6234] netlink: 'syz.3.650': attribute type 11 has an invalid length. [ 183.144513][ T6234] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.650'. [ 184.432633][ T6260] netlink: 132 bytes leftover after parsing attributes in process `syz.2.659'. [ 185.041778][ T6281] netlink: 'syz.4.665': attribute type 3 has an invalid length. [ 185.054899][ T6281] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.665'. [ 185.731291][ T6283] netlink: 'syz.2.666': attribute type 11 has an invalid length. [ 185.812780][ T6283] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.666'. [ 186.908198][ T6306] FAULT_INJECTION: forcing a failure. [ 186.908198][ T6306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.982463][ T6306] CPU: 0 PID: 6306 Comm: syz.3.676 Not tainted syzkaller #0 [ 186.989807][ T6306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 186.999876][ T6306] Call Trace: [ 187.003163][ T6306] [ 187.006099][ T6306] dump_stack_lvl+0x188/0x24e [ 187.010797][ T6306] ? show_regs_print_info+0x12/0x12 [ 187.016009][ T6306] ? load_image+0x410/0x410 [ 187.020518][ T6306] ? __lock_acquire+0x7c40/0x7c40 [ 187.025549][ T6306] should_fail_ex+0x390/0x4c0 [ 187.030231][ T6306] _copy_from_user+0x2c/0x170 [ 187.034906][ T6306] ___sys_sendmsg+0x1c3/0x360 [ 187.039586][ T6306] ? __sys_sendmsg+0x2a0/0x2a0 [ 187.044372][ T6306] ? __lock_acquire+0x7c40/0x7c40 [ 187.049419][ T6306] __se_sys_sendmsg+0x1c3/0x2b0 [ 187.054275][ T6306] ? ct_nmi_exit+0x145/0x1c0 [ 187.058865][ T6306] ? __x64_sys_sendmsg+0x80/0x80 [ 187.063826][ T6306] ? lockdep_hardirqs_on+0x94/0x140 [ 187.069026][ T6306] do_syscall_64+0x4c/0xa0 [ 187.073447][ T6306] ? clear_bhb_loop+0x60/0xb0 [ 187.078134][ T6306] ? clear_bhb_loop+0x60/0xb0 [ 187.082823][ T6306] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.088721][ T6306] RIP: 0033:0x7f4b1739de99 [ 187.093135][ T6306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.113098][ T6306] RSP: 002b:00007f4b1832f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.121515][ T6306] RAX: ffffffffffffffda RBX: 00007f4b17625fa0 RCX: 00007f4b1739de99 [ 187.129487][ T6306] RDX: 0000000000000040 RSI: 0000200000001640 RDI: 0000000000000003 [ 187.137474][ T6306] RBP: 00007f4b1832f090 R08: 0000000000000000 R09: 0000000000000000 [ 187.145444][ T6306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.153424][ T6306] R13: 00007f4b17626038 R14: 00007f4b17625fa0 R15: 00007ffc2f777558 [ 187.161410][ T6306] [ 187.552307][ T6327] sock: sock_timestamping_bind_phc: sock not bind to device [ 187.880984][ T6330] netlink: 'syz.1.685': attribute type 11 has an invalid length. [ 187.929271][ T6330] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.685'. [ 188.375960][ T6343] netlink: 'syz.2.691': attribute type 29 has an invalid length. [ 188.711896][ T6343] netlink: 'syz.2.691': attribute type 29 has an invalid length. [ 189.441956][ T6360] FAULT_INJECTION: forcing a failure. [ 189.441956][ T6360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.484860][ T6360] CPU: 1 PID: 6360 Comm: syz.1.696 Not tainted syzkaller #0 [ 189.492210][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 189.502292][ T6360] Call Trace: [ 189.505619][ T6360] [ 189.508566][ T6360] dump_stack_lvl+0x188/0x24e [ 189.513278][ T6360] ? show_regs_print_info+0x12/0x12 [ 189.518503][ T6360] ? load_image+0x410/0x410 [ 189.523032][ T6360] ? __lock_acquire+0x7c40/0x7c40 [ 189.528085][ T6360] should_fail_ex+0x390/0x4c0 [ 189.532799][ T6360] _copy_from_user+0x2c/0x170 [ 189.537505][ T6360] ___sys_sendmsg+0x1c3/0x360 [ 189.542212][ T6360] ? __sys_sendmsg+0x2a0/0x2a0 [ 189.547022][ T6360] ? __lock_acquire+0x7c40/0x7c40 [ 189.552092][ T6360] __se_sys_sendmsg+0x1c3/0x2b0 [ 189.556966][ T6360] ? __x64_sys_sendmsg+0x80/0x80 [ 189.561938][ T6360] ? lockdep_hardirqs_on+0x94/0x140 [ 189.567157][ T6360] do_syscall_64+0x4c/0xa0 [ 189.571592][ T6360] ? clear_bhb_loop+0x60/0xb0 [ 189.576293][ T6360] ? clear_bhb_loop+0x60/0xb0 [ 189.580995][ T6360] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.586909][ T6360] RIP: 0033:0x7f7cd2b9de99 [ 189.591339][ T6360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.610959][ T6360] RSP: 002b:00007f7cd3a7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.619433][ T6360] RAX: ffffffffffffffda RBX: 00007f7cd2e26090 RCX: 00007f7cd2b9de99 [ 189.627422][ T6360] RDX: 0000000000008810 RSI: 0000200000000000 RDI: 0000000000000004 [ 189.635412][ T6360] RBP: 00007f7cd3a7f090 R08: 0000000000000000 R09: 0000000000000000 [ 189.643413][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.651419][ T6360] R13: 00007f7cd2e26128 R14: 00007f7cd2e26090 R15: 00007ffd33fad4a8 [ 189.659438][ T6360] [ 190.026106][ T6375] netlink: 'syz.4.702': attribute type 11 has an invalid length. [ 190.055724][ T6375] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.702'. [ 191.211888][ T6397] netlink: 60 bytes leftover after parsing attributes in process `syz.0.709'. [ 191.255288][ T6397] netlink: 60 bytes leftover after parsing attributes in process `syz.0.709'. [ 191.267384][ T6401] netlink: 60 bytes leftover after parsing attributes in process `syz.0.709'. [ 191.281979][ T6397] netlink: 60 bytes leftover after parsing attributes in process `syz.0.709'. [ 191.653948][ T6412] netlink: 'syz.0.717': attribute type 11 has an invalid length. [ 191.699028][ T6412] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.717'. [ 191.884059][ T6423] netlink: 36 bytes leftover after parsing attributes in process `syz.3.721'. [ 191.907028][ T6423] : renamed from caif0 [ 191.922237][ T6423] net_ratelimit: 3661 callbacks suppressed [ 191.922247][ T6423] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 193.518993][ T6442] netlink: 132 bytes leftover after parsing attributes in process `syz.2.729'. [ 193.627596][ T6443] netlink: 'syz.0.725': attribute type 3 has an invalid length. [ 193.823288][ T6443] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.725'. [ 194.351661][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.359142][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.438432][ T6443] device wlan1 left promiscuous mode [ 194.457118][ T6443] netlink: 10 bytes leftover after parsing attributes in process `syz.0.725'. [ 194.550031][ T6463] netlink: 'syz.4.734': attribute type 11 has an invalid length. [ 194.595378][ T6463] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.734'. [ 194.654817][ T6465] FAULT_INJECTION: forcing a failure. [ 194.654817][ T6465] name failslab, interval 1, probability 0, space 0, times 0 [ 194.667813][ T6465] CPU: 0 PID: 6465 Comm: syz.1.736 Not tainted syzkaller #0 [ 194.675119][ T6465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 194.685187][ T6465] Call Trace: [ 194.688471][ T6465] [ 194.691406][ T6465] dump_stack_lvl+0x188/0x24e [ 194.696094][ T6465] ? __kernel_text_address+0x9/0x30 [ 194.701993][ T6465] ? show_regs_print_info+0x12/0x12 [ 194.707196][ T6465] ? load_image+0x410/0x410 [ 194.711709][ T6465] should_fail_ex+0x390/0x4c0 [ 194.716395][ T6465] should_failslab+0x5/0x20 [ 194.720894][ T6465] slab_pre_alloc_hook+0x59/0x300 [ 194.725920][ T6465] kmem_cache_alloc_node+0x5a/0x310 [ 194.731194][ T6465] ? tipc_own_addr+0x45/0x2a0 [ 194.735881][ T6465] ? __alloc_skb+0xf9/0x7d0 [ 194.740411][ T6465] __alloc_skb+0xf9/0x7d0 [ 194.744764][ T6465] tipc_msg_create+0x46/0x4b0 [ 194.749447][ T6465] ? tipc_own_addr+0x45/0x2a0 [ 194.754125][ T6465] tipc_group_create_event+0x11f/0x960 [ 194.759596][ T6465] tipc_sk_proto_rcv+0x6c5/0x1810 [ 194.764626][ T6465] ? lockdep_hardirqs_on+0x94/0x140 [ 194.769840][ T6465] ? is_dynamic_key+0x260/0x260 [ 194.774709][ T6465] ? trace_tipc_sk_dump+0x280/0x280 [ 194.779912][ T6465] ? mark_lock+0x94/0x320 [ 194.784251][ T6465] ? __lock_acquire+0x1465/0x7c40 [ 194.789279][ T6465] ? tipc_sk_filtering+0x138/0x510 [ 194.794396][ T6465] tipc_sk_filter_rcv+0x2f98/0x3250 [ 194.799598][ T6465] ? mark_lock+0x94/0x320 [ 194.803941][ T6465] ? verify_lock_unused+0x140/0x140 [ 194.810019][ T6465] ? tipc_sk_lookup+0xb5/0x920 [ 194.814786][ T6465] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 194.821550][ T6465] ? tipc_sk_publish+0x420/0x420 [ 194.826482][ T6465] ? tipc_sk_rcv+0x798/0x2bc0 [ 194.831154][ T6465] ? __local_bh_enable_ip+0x136/0x1c0 [ 194.836713][ T6465] tipc_sk_rcv+0x8cc/0x2bc0 [ 194.841232][ T6465] ? verify_lock_unused+0x140/0x140 [ 194.846471][ T6465] ? __skb_queue_purge+0x160/0x160 [ 194.851587][ T6465] ? memset+0x1e/0x40 [ 194.855580][ T6465] ? lockdep_init_map_type+0x98/0x8d0 [ 194.860973][ T6465] ? net_generic+0x1e/0x240 [ 194.865481][ T6465] ? __raw_spin_lock_init+0x41/0x100 [ 194.870767][ T6465] tipc_node_xmit+0x22e/0xfc0 [ 194.875451][ T6465] ? kasan_set_track+0x60/0x70 [ 194.880235][ T6465] ? kasan_set_track+0x4b/0x70 [ 194.885006][ T6465] ? ____kasan_slab_free+0x126/0x1f0 [ 194.890289][ T6465] ? slab_free_freelist_hook+0x133/0x1b0 [ 194.895932][ T6465] ? __kmem_cache_free+0xb6/0x200 [ 194.900962][ T6465] ? tipc_sk_leave+0x150/0x4d0 [ 194.905723][ T6465] ? tipc_release+0x325/0x2090 [ 194.910489][ T6465] ? tipc_node_get_linkname+0x190/0x190 [ 194.916035][ T6465] ? exit_to_user_mode_loop+0xe6/0x110 [ 194.921495][ T6465] ? exit_to_user_mode_prepare+0xee/0x180 [ 194.927217][ T6465] ? syscall_exit_to_user_mode+0x16/0x40 [ 194.932844][ T6465] ? do_syscall_64+0x58/0xa0 [ 194.937431][ T6465] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.943511][ T6465] ? mark_lock+0x94/0x320 [ 194.947864][ T6465] tipc_node_distr_xmit+0x2c7/0x3f0 [ 194.953101][ T6465] ? tipc_node_xmit_skb+0x190/0x190 [ 194.962804][ T6465] ? tipc_group_delete+0x3b3/0x4b0 [ 194.973763][ T6465] ? __kmem_cache_free+0xb6/0x200 [ 194.978823][ T6465] tipc_group_delete+0x3eb/0x4b0 [ 194.983816][ T6465] ? tipc_group_update_member+0x350/0x350 [ 194.989613][ T6465] ? tipc_group_self+0x22/0x1c0 [ 194.994482][ T6465] tipc_sk_leave+0x150/0x4d0 [ 194.999098][ T6465] ? __tipc_shutdown+0x1590/0x1590 [ 195.004212][ T6465] ? _local_bh_enable+0xa0/0xa0 [ 195.009073][ T6465] tipc_release+0x325/0x2090 [ 195.013671][ T6465] ? tipc_sock_destruct+0x170/0x170 [ 195.018876][ T6465] sock_close+0xbf/0x210 [ 195.023115][ T6465] ? sock_mmap+0x90/0x90 [ 195.027350][ T6465] __fput+0x20a/0x8b0 [ 195.031340][ T6465] task_work_run+0x1d0/0x260 [ 195.035931][ T6465] ? task_work_cancel+0x220/0x220 [ 195.040961][ T6465] ? exit_to_user_mode_loop+0x3b/0x110 [ 195.046422][ T6465] exit_to_user_mode_loop+0xe6/0x110 [ 195.051710][ T6465] exit_to_user_mode_prepare+0xee/0x180 [ 195.057264][ T6465] syscall_exit_to_user_mode+0x16/0x40 [ 195.062720][ T6465] do_syscall_64+0x58/0xa0 [ 195.067165][ T6465] ? clear_bhb_loop+0x60/0xb0 [ 195.071841][ T6465] ? clear_bhb_loop+0x60/0xb0 [ 195.076518][ T6465] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.082412][ T6465] RIP: 0033:0x7f7cd2b9de99 [ 195.086824][ T6465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.106425][ T6465] RSP: 002b:00007f7cd3aa0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 195.114837][ T6465] RAX: 0000000000000000 RBX: 00007f7cd2e25fa0 RCX: 00007f7cd2b9de99 [ 195.122805][ T6465] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 195.130801][ T6465] RBP: 00007f7cd3aa0090 R08: 0000000000000000 R09: 0000000000000000 [ 195.138768][ T6465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.146739][ T6465] R13: 00007f7cd2e26038 R14: 00007f7cd2e25fa0 R15: 00007ffd33fad4a8 [ 195.154728][ T6465] [ 195.697368][ T6481] netlink: 'syz.1.742': attribute type 2 has an invalid length. [ 195.966975][ T6490] : renamed from caif0 [ 196.089318][ T6490] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 196.140616][ T6496] netlink: 'syz.1.748': attribute type 3 has an invalid length. [ 196.154348][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 196.160388][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 196.214835][ T6496] __nla_validate_parse: 2 callbacks suppressed [ 196.214872][ T6496] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.748'. [ 196.394343][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 196.401065][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 196.407973][ T4271] Bluetooth: hci2: command 0x0406 tx timeout [ 196.423641][ T6503] netlink: 'syz.0.751': attribute type 11 has an invalid length. [ 196.444759][ T6503] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.751'. [ 196.596740][ T6513] netlink: 'syz.1.753': attribute type 21 has an invalid length. [ 196.644292][ T6513] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.753'. [ 196.689462][ T6515] netlink: 132 bytes leftover after parsing attributes in process `syz.1.753'. [ 198.660989][ T6534] netlink: 'syz.2.760': attribute type 4 has an invalid length. [ 198.729201][ T6534] netlink: 152 bytes leftover after parsing attributes in process `syz.2.760'. [ 198.799858][ T6534] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 199.853163][ T6548] netlink: 'syz.1.766': attribute type 11 has an invalid length. [ 199.879219][ T6548] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.766'. [ 199.945700][ T6554] netlink: 132 bytes leftover after parsing attributes in process `syz.4.768'. [ 199.974336][ T6554] FAULT_INJECTION: forcing a failure. [ 199.974336][ T6554] name failslab, interval 1, probability 0, space 0, times 0 [ 199.995081][ T6554] CPU: 0 PID: 6554 Comm: syz.4.768 Not tainted syzkaller #0 [ 200.002413][ T6554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 200.012480][ T6554] Call Trace: [ 200.015780][ T6554] [ 200.018734][ T6554] dump_stack_lvl+0x188/0x24e [ 200.023434][ T6554] ? show_regs_print_info+0x12/0x12 [ 200.028653][ T6554] ? load_image+0x410/0x410 [ 200.033170][ T6554] ? __might_sleep+0xd0/0xd0 [ 200.037756][ T6554] ? __lock_acquire+0x7c40/0x7c40 [ 200.042822][ T6554] should_fail_ex+0x390/0x4c0 [ 200.047520][ T6554] should_failslab+0x5/0x20 [ 200.052022][ T6554] slab_pre_alloc_hook+0x59/0x300 [ 200.057156][ T6554] ? ipv6_add_addr+0x42d/0xfc0 [ 200.061926][ T6554] __kmem_cache_alloc_node+0x4f/0x270 [ 200.067494][ T6554] ? ipv6_add_addr+0x42d/0xfc0 [ 200.072461][ T6554] kmalloc_trace+0x26/0xe0 [ 200.077602][ T6554] ipv6_add_addr+0x42d/0xfc0 [ 200.082903][ T6554] ? ipv6_count_addresses+0x190/0x190 [ 200.088294][ T6554] ? ipv6_mc_config+0x82/0xc0 [ 200.093532][ T6554] inet6_addr_add+0x43e/0x9c0 [ 200.098610][ T6554] inet6_rtm_newaddr+0x6c9/0x8f0 [ 200.103576][ T6554] ? inet6_dump_ifinfo+0x950/0x950 [ 200.108795][ T6554] ? inet6_dump_ifinfo+0x950/0x950 [ 200.113929][ T6554] rtnetlink_rcv_msg+0x863/0xfb0 [ 200.118972][ T6554] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 200.124580][ T6554] ? rtnetlink_bind+0x80/0x80 [ 200.129265][ T6554] ? __local_bh_enable_ip+0x136/0x1c0 [ 200.135289][ T6554] ? lockdep_hardirqs_on+0x94/0x140 [ 200.141731][ T6554] ? __local_bh_enable_ip+0x136/0x1c0 [ 200.147556][ T6554] ? _local_bh_enable+0xa0/0xa0 [ 200.152428][ T6554] ? __dev_queue_xmit+0x281/0x3810 [ 200.157543][ T6554] ? __dev_queue_xmit+0x281/0x3810 [ 200.162658][ T6554] ? __dev_queue_xmit+0x1d84/0x3810 [ 200.167879][ T6554] ? __dev_queue_xmit+0x281/0x3810 [ 200.173008][ T6554] ? perf_trace_lock+0xf8/0x390 [ 200.177860][ T6554] ? trace_event_raw_event_lock+0x230/0x230 [ 200.183754][ T6554] ? __copy_skb_header+0x3ba/0x4f0 [ 200.188866][ T6554] ? __skb_clone+0x446/0x6c0 [ 200.193460][ T6554] netlink_rcv_skb+0x1ef/0x440 [ 200.198227][ T6554] ? rtnetlink_bind+0x80/0x80 [ 200.203168][ T6554] ? netlink_ack+0x1160/0x1160 [ 200.207941][ T6554] ? netlink_deliver_tap+0x2e/0x1b0 [ 200.213228][ T6554] netlink_unicast+0x7ad/0x920 [ 200.218033][ T6554] netlink_sendmsg+0x8ad/0xbd0 [ 200.222801][ T6554] ? netlink_getsockopt+0x550/0x550 [ 200.228000][ T6554] ? apparmor_socket_sendmsg+0x8a/0x330 [ 200.233546][ T6554] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 200.238830][ T6554] ? security_socket_sendmsg+0x7c/0xa0 [ 200.244283][ T6554] ? netlink_getsockopt+0x550/0x550 [ 200.249480][ T6554] ____sys_sendmsg+0x5ed/0x9a0 [ 200.254275][ T6554] ? __sys_sendmsg_sock+0x30/0x30 [ 200.259301][ T6554] ? __import_iovec+0x306/0x510 [ 200.264154][ T6554] ? import_iovec+0x6f/0xa0 [ 200.268668][ T6554] ___sys_sendmsg+0x2a2/0x360 [ 200.273349][ T6554] ? __sys_sendmsg+0x2a0/0x2a0 [ 200.278131][ T6554] ? __lock_acquire+0x7c40/0x7c40 [ 200.283168][ T6554] __se_sys_sendmsg+0x1c3/0x2b0 [ 200.288017][ T6554] ? __x64_sys_sendmsg+0x80/0x80 [ 200.292972][ T6554] ? lockdep_hardirqs_on+0x94/0x140 [ 200.298167][ T6554] do_syscall_64+0x4c/0xa0 [ 200.302580][ T6554] ? clear_bhb_loop+0x60/0xb0 [ 200.307252][ T6554] ? clear_bhb_loop+0x60/0xb0 [ 200.311926][ T6554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.317816][ T6554] RIP: 0033:0x7fef2cf9de99 [ 200.322225][ T6554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.341826][ T6554] RSP: 002b:00007fef2ddb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.350233][ T6554] RAX: ffffffffffffffda RBX: 00007fef2d225fa0 RCX: 00007fef2cf9de99 [ 200.358198][ T6554] RDX: 0000000000000c04 RSI: 0000200000000080 RDI: 0000000000000003 [ 200.366163][ T6554] RBP: 00007fef2ddb4090 R08: 0000000000000000 R09: 0000000000000000 [ 200.374145][ T6554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.382201][ T6554] R13: 00007fef2d226038 R14: 00007fef2d225fa0 R15: 00007ffdc4dbf338 [ 200.390191][ T6554] [ 201.814846][ T6583] netlink: 'syz.1.780': attribute type 11 has an invalid length. [ 201.822963][ T6583] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.780'. [ 201.915325][ T6586] device syzkaller0 entered promiscuous mode [ 202.620885][ T6600] netlink: 184 bytes leftover after parsing attributes in process `syz.2.786'. [ 202.774907][ T6582] syz.4.779 (6582) used greatest stack depth: 18704 bytes left [ 204.557917][ T6614] netlink: 'syz.0.791': attribute type 21 has an invalid length. [ 204.579090][ T6614] netlink: 'syz.0.791': attribute type 12 has an invalid length. [ 204.604303][ T6614] netlink: 'syz.0.791': attribute type 13 has an invalid length. [ 204.612080][ T6614] netlink: 'syz.0.791': attribute type 14 has an invalid length. [ 204.639648][ T6614] netlink: 'syz.0.791': attribute type 15 has an invalid length. [ 204.669436][ T6614] netlink: 'syz.0.791': attribute type 16 has an invalid length. [ 204.699135][ T6614] netlink: 'syz.0.791': attribute type 19 has an invalid length. [ 204.753041][ T6624] netlink: 'syz.1.795': attribute type 3 has an invalid length. [ 204.755090][ T6614] netlink: 'syz.0.791': attribute type 6 has an invalid length. [ 204.771384][ T6624] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.795'. [ 204.841212][ T6614] netlink: 9618 bytes leftover after parsing attributes in process `syz.0.791'. [ 204.868896][ T6623] netlink: 36 bytes leftover after parsing attributes in process `syz.4.794'. [ 204.905524][ T6625] netlink: 'syz.1.795': attribute type 10 has an invalid length. [ 205.083769][ T6637] IPv6: NLM_F_CREATE should be specified when creating new route [ 205.243737][ T6634] netlink: 'syz.2.798': attribute type 11 has an invalid length. [ 205.259847][ T6634] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.798'. [ 206.281959][ T6665] FAULT_INJECTION: forcing a failure. [ 206.281959][ T6665] name failslab, interval 1, probability 0, space 0, times 0 [ 206.296177][ T6665] CPU: 0 PID: 6665 Comm: syz.2.809 Not tainted syzkaller #0 [ 206.303490][ T6665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 206.313541][ T6665] Call Trace: [ 206.316813][ T6665] [ 206.319734][ T6665] dump_stack_lvl+0x188/0x24e [ 206.324416][ T6665] ? show_regs_print_info+0x12/0x12 [ 206.329607][ T6665] ? load_image+0x410/0x410 [ 206.334102][ T6665] ? __might_sleep+0xd0/0xd0 [ 206.338698][ T6665] ? __lock_acquire+0x7c40/0x7c40 [ 206.343766][ T6665] should_fail_ex+0x390/0x4c0 [ 206.348473][ T6665] should_failslab+0x5/0x20 [ 206.352971][ T6665] slab_pre_alloc_hook+0x59/0x300 [ 206.357996][ T6665] ? cfg80211_sinfo_alloc_tid_stats+0x70/0xf0 [ 206.364054][ T6665] __kmem_cache_alloc_node+0x4f/0x270 [ 206.369447][ T6665] ? cfg80211_sinfo_alloc_tid_stats+0x70/0xf0 [ 206.375505][ T6665] kmalloc_trace+0x26/0xe0 [ 206.379919][ T6665] cfg80211_sinfo_alloc_tid_stats+0x70/0xf0 [ 206.385810][ T6665] sta_set_sinfo+0x1df9/0x4530 [ 206.390585][ T6665] __sta_info_destroy_part2+0x262/0x3f0 [ 206.396138][ T6665] __sta_info_flush+0x3ab/0x450 [ 206.401024][ T6665] ? sta_info_stop+0x40/0x40 [ 206.405628][ T6665] ieee80211_ibss_disconnect+0x25a/0x700 [ 206.411281][ T6665] ieee80211_ibss_leave+0x21/0x130 [ 206.416397][ T6665] __cfg80211_leave_ibss+0x1da/0x450 [ 206.421700][ T6665] cfg80211_ibss_wext_siwessid+0x15f/0x390 [ 206.427516][ T6665] __cfg80211_wext_siwessid+0xd4/0x120 [ 206.432981][ T6665] ioctl_standard_iw_point+0x823/0xd50 [ 206.438444][ T6665] ? rcu_is_watching+0x11/0xa0 [ 206.443244][ T6665] ? __cfg80211_wext_giwscan+0x30/0x30 [ 206.448716][ T6665] ? iw_handler_get_iwstats+0x240/0x240 [ 206.454272][ T6665] ? wext_ioctl_dispatch+0xaf/0x470 [ 206.459476][ T6665] ? mutex_lock_nested+0x10/0x10 [ 206.464419][ T6665] ? full_name_hash+0x8e/0xe0 [ 206.469103][ T6665] ioctl_standard_call+0xaa/0x250 [ 206.474136][ T6665] ? __cfg80211_wext_giwscan+0x30/0x30 [ 206.479604][ T6665] ? __cfg80211_wext_giwscan+0x30/0x30 [ 206.485063][ T6665] wext_ioctl_dispatch+0x3da/0x470 [ 206.490175][ T6665] ? wext_ioctl_dispatch+0x470/0x470 [ 206.495544][ T6665] ? iw_handler_get_private+0x1e0/0x1e0 [ 206.501088][ T6665] wext_handle_ioctl+0x114/0x1d0 [ 206.506055][ T6665] ? call_commit_handler+0xf0/0xf0 [ 206.511210][ T6665] sock_ioctl+0x143/0x700 [ 206.515562][ T6665] ? sock_poll+0x420/0x420 [ 206.520006][ T6665] ? bpf_lsm_file_ioctl+0x5/0x10 [ 206.524959][ T6665] ? security_file_ioctl+0x7c/0xa0 [ 206.530083][ T6665] ? sock_poll+0x420/0x420 [ 206.534503][ T6665] __se_sys_ioctl+0xfa/0x170 [ 206.539118][ T6665] do_syscall_64+0x4c/0xa0 [ 206.543546][ T6665] ? clear_bhb_loop+0x60/0xb0 [ 206.548236][ T6665] ? clear_bhb_loop+0x60/0xb0 [ 206.552928][ T6665] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.558848][ T6665] RIP: 0033:0x7f59bed9de99 [ 206.563270][ T6665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.582873][ T6665] RSP: 002b:00007f59bfcfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 206.591291][ T6665] RAX: ffffffffffffffda RBX: 00007f59bf025fa0 RCX: 00007f59bed9de99 [ 206.599262][ T6665] RDX: 0000200000000000 RSI: 0000000000008b1a RDI: 0000000000000003 [ 206.607229][ T6665] RBP: 00007f59bfcfd090 R08: 0000000000000000 R09: 0000000000000000 [ 206.615196][ T6665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.623162][ T6665] R13: 00007f59bf026038 R14: 00007f59bf025fa0 R15: 00007fffac372488 [ 206.631147][ T6665] [ 206.902505][ T6678] FAULT_INJECTION: forcing a failure. [ 206.902505][ T6678] name failslab, interval 1, probability 0, space 0, times 0 [ 206.947817][ T6678] CPU: 0 PID: 6678 Comm: syz.0.815 Not tainted syzkaller #0 [ 206.955164][ T6678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 206.965244][ T6678] Call Trace: [ 206.968539][ T6678] [ 206.971491][ T6678] dump_stack_lvl+0x188/0x24e [ 206.976203][ T6678] ? show_regs_print_info+0x12/0x12 [ 206.981422][ T6678] ? load_image+0x410/0x410 [ 206.985948][ T6678] ? __might_sleep+0xd0/0xd0 [ 206.990560][ T6678] ? __lock_acquire+0x7c40/0x7c40 [ 206.995616][ T6678] should_fail_ex+0x390/0x4c0 [ 207.000327][ T6678] should_failslab+0x5/0x20 [ 207.004848][ T6678] slab_pre_alloc_hook+0x59/0x300 [ 207.009898][ T6678] kmem_cache_alloc+0x56/0x2f0 [ 207.014682][ T6678] ? __alloc_file+0x25/0x230 [ 207.019292][ T6678] __alloc_file+0x25/0x230 [ 207.023729][ T6678] alloc_empty_file+0x90/0x180 [ 207.030599][ T6678] alloc_file+0x5b/0x5f0 [ 207.034866][ T6678] alloc_file_pseudo+0x180/0x200 [ 207.039815][ T6678] ? alloc_empty_file_noaccount+0x80/0x80 [ 207.045562][ T6678] anon_inode_getfile+0xc1/0x1a0 [ 207.050533][ T6678] __se_sys_perf_event_open+0xc2a/0x1ec0 [ 207.056187][ T6678] ? __fget_files+0x3fc/0x460 [ 207.060887][ T6678] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 207.066558][ T6678] ? lockdep_hardirqs_on+0x94/0x140 [ 207.071770][ T6678] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 207.077428][ T6678] do_syscall_64+0x4c/0xa0 [ 207.081862][ T6678] ? clear_bhb_loop+0x60/0xb0 [ 207.086540][ T6678] ? clear_bhb_loop+0x60/0xb0 [ 207.091228][ T6678] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 207.097126][ T6678] RIP: 0033:0x7f7bf879de99 [ 207.101538][ T6678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.121143][ T6678] RSP: 002b:00007f7bf9710028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 207.129555][ T6678] RAX: ffffffffffffffda RBX: 00007f7bf8a25fa0 RCX: 00007f7bf879de99 [ 207.137522][ T6678] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000800 [ 207.145484][ T6678] RBP: 00007f7bf9710090 R08: 0000000000000000 R09: 0000000000000000 [ 207.153447][ T6678] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 207.161412][ T6678] R13: 00007f7bf8a26038 R14: 00007f7bf8a25fa0 R15: 00007ffc1597dfe8 [ 207.169389][ T6678] [ 207.332239][ T6687] netlink: 'syz.3.817': attribute type 11 has an invalid length. [ 207.377706][ T6687] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.817'. [ 207.443746][ T14] syzkaller0: tun_net_xmit 76 [ 207.454747][ T14] syzkaller0: tun_net_xmit 48 [ 207.474435][ T4319] syzkaller0: tun_net_xmit 76 [ 207.502732][ T6689] syzkaller0: create flow: hash 3713706039 index 2 [ 207.689311][ T6688] syzkaller0: delete flow: hash 3713706039 index 2 [ 207.704526][ T22] syzkaller0: tun_net_xmit 76 [ 208.463406][ T6729] syz.4.832 uses obsolete (PF_INET,SOCK_PACKET) [ 211.402310][ T6770] pimreg0: tun_chr_ioctl cmd 1074025677 [ 211.445608][ T6770] pimreg0: linktype set to 778 [ 212.091783][ T6806] device syzkaller1 entered promiscuous mode [ 214.890627][ T6886] validate_nla: 1 callbacks suppressed [ 214.890644][ T6886] netlink: 'syz.3.902': attribute type 10 has an invalid length. [ 214.904275][ T6886] netlink: 'syz.3.902': attribute type 4 has an invalid length. [ 214.911926][ T6886] netlink: 116 bytes leftover after parsing attributes in process `syz.3.902'. [ 214.941158][ T6886] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 215.542960][ T6907] device syzkaller0 entered promiscuous mode [ 217.529116][ T6923] device bridge_slave_1 left promiscuous mode [ 217.535641][ T6923] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.548577][ T6923] device bridge_slave_0 left promiscuous mode [ 217.561030][ T6923] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.928991][ T6934] netlink: 60 bytes leftover after parsing attributes in process `syz.3.923'. [ 217.939068][ T6934] netlink: 60 bytes leftover after parsing attributes in process `syz.3.923'. [ 217.952584][ T6934] netlink: 60 bytes leftover after parsing attributes in process `syz.3.923'. [ 218.523378][ T6955] device syzkaller0 entered promiscuous mode [ 219.536323][ T6977] netlink: 60 bytes leftover after parsing attributes in process `syz.3.940'. [ 220.682202][ T6972] netlink: 'syz.0.939': attribute type 10 has an invalid length. [ 220.826470][ T6977] netlink: 60 bytes leftover after parsing attributes in process `syz.3.940'. [ 221.169746][ T6984] device syzkaller0 entered promiscuous mode [ 223.361890][ T6996] device syzkaller0 entered promiscuous mode [ 223.415317][ T7015] device syzkaller0 entered promiscuous mode [ 223.661620][ T7026] ================================================================== [ 223.670631][ T7026] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 223.679503][ T7026] Write of size 56 at addr ffff88802fb98290 by task syz.2.953/7026 [ 223.689183][ T7026] [ 223.691593][ T7026] CPU: 0 PID: 7026 Comm: syz.2.953 Not tainted syzkaller #0 [ 223.699650][ T7026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 223.711297][ T7026] Call Trace: [ 223.714997][ T7026] [ 223.719288][ T7026] dump_stack_lvl+0x188/0x24e [ 223.726077][ T7026] ? __lock_acquire+0x7c40/0x7c40 [ 223.731736][ T7026] ? show_regs_print_info+0x12/0x12 [ 223.740347][ T7026] ? load_image+0x410/0x410 [ 223.745719][ T7026] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 223.752779][ T7026] ? __virt_addr_valid+0x188/0x540 [ 223.758754][ T7026] ? __virt_addr_valid+0x467/0x540 [ 223.764538][ T7026] ? __bpf_get_stackid+0x6c9/0x920 [ 223.770138][ T7026] print_report+0xa8/0x210 [ 223.774639][ T7026] kasan_report+0x10b/0x140 [ 223.780051][ T7026] ? __bpf_get_stackid+0x6c9/0x920 [ 223.785521][ T7026] kasan_check_range+0x235/0x290 [ 223.790835][ T7026] ? __bpf_get_stackid+0x6c9/0x920 [ 223.796741][ T7026] memcpy+0x3c/0x60 [ 223.800716][ T7026] __bpf_get_stackid+0x6c9/0x920 [ 223.807164][ T7026] bpf_get_stackid_pe+0x33f/0x400 [ 223.812462][ T7026] bpf_prog_282a5593b1ef8d13+0x21/0x36 [ 223.818456][ T7026] bpf_overflow_handler+0x50b/0x790 [ 223.824309][ T7026] ? bpf_overflow_handler+0xd9/0x790 [ 223.829798][ T7026] ? perf_swevent_overflow+0x230/0x230 [ 223.835413][ T7026] ? __perf_event_account_interrupt+0x187/0x280 [ 223.842559][ T7026] __perf_event_overflow+0x457/0x630 [ 223.849191][ T7026] ? perf_swevent_event+0x1d5/0x570 [ 223.854962][ T7026] perf_swevent_event+0x315/0x570 [ 223.859983][ T7026] ? perf_tp_event+0xc10/0xc10 [ 223.864755][ T7026] ___perf_sw_event+0x498/0x6d0 [ 223.869637][ T7026] ? ___perf_sw_event+0x184/0x6d0 [ 223.874658][ T7026] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 223.881064][ T7026] ? __lock_acquire+0x1465/0x7c40 [ 223.886099][ T7026] ? verify_lock_unused+0x140/0x140 [ 223.891330][ T7026] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 223.897388][ T7026] ? lock_chain_count+0x20/0x20 [ 223.902223][ T7026] __perf_sw_event+0x135/0x260 [ 223.907084][ T7026] do_user_addr_fault+0x497/0xb20 [ 223.912118][ T7026] ? trace_hardirqs_off_finish+0x86/0x180 [ 223.917837][ T7026] exc_page_fault+0x60/0x100 [ 223.922429][ T7026] asm_exc_page_fault+0x22/0x30 [ 223.927279][ T7026] RIP: 0010:strncpy_from_user+0x148/0x340 [ 223.932998][ T7026] Code: 00 00 00 4c 89 e6 e8 a7 2d 45 fd 49 83 fc 07 0f 86 9a 00 00 00 4c 89 74 24 08 48 c7 44 24 10 f8 ff ff ff 45 31 ed 4c 89 3c 24 <4f> 8b 3c 2f 48 b8 ff fe fe fe fe fe fe fe 49 8d 2c 07 4d 89 fe 49 [ 223.952603][ T7026] RSP: 0018:ffffc90004357b50 EFLAGS: 00050246 [ 223.958663][ T7026] RAX: ffffffff843d0a29 RBX: ffffc90004357c70 RCX: ffff88801c330000 [ 223.966635][ T7026] RDX: 0000000000000002 RSI: 000000000000007f RDI: 0000000000000007 [ 223.974607][ T7026] RBP: 0000000000000000 R08: ffff88801c330000 R09: 0000000000000003 [ 223.982567][ T7026] R10: 0000000000000002 R11: 0000000000000002 R12: 000000000000007f [ 223.990546][ T7026] R13: 0000000000000000 R14: 000000000000007f R15: 0000000000000000 [ 223.998514][ T7026] ? strncpy_from_user+0x129/0x340 [ 224.003618][ T7026] bpf_prog_load+0x200/0x1530 [ 224.008286][ T7026] ? map_freeze+0x390/0x390 [ 224.012785][ T7026] ? __might_fault+0xa6/0x120 [ 224.017447][ T7026] ? __might_fault+0xa6/0x120 [ 224.022127][ T7026] ? __might_fault+0xc2/0x120 [ 224.026832][ T7026] ? __might_fault+0xa6/0x120 [ 224.031501][ T7026] ? bpf_lsm_bpf+0x5/0x10 [ 224.035821][ T7026] ? security_bpf+0x7a/0xa0 [ 224.040315][ T7026] __sys_bpf+0x5b8/0x780 [ 224.044557][ T7026] ? bpf_link_show_fdinfo+0x380/0x380 [ 224.049970][ T7026] ? lock_chain_count+0x20/0x20 [ 224.054815][ T7026] __x64_sys_bpf+0x78/0x90 [ 224.059218][ T7026] do_syscall_64+0x4c/0xa0 [ 224.063621][ T7026] ? clear_bhb_loop+0x60/0xb0 [ 224.068304][ T7026] ? clear_bhb_loop+0x60/0xb0 [ 224.072982][ T7026] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.078893][ T7026] RIP: 0033:0x7f59bed9de99 [ 224.083526][ T7026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.104710][ T7026] RSP: 002b:00007f59bfcfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 224.113132][ T7026] RAX: ffffffffffffffda RBX: 00007f59bf025fa0 RCX: 00007f59bed9de99 [ 224.121111][ T7026] RDX: 0000000000000094 RSI: 0000200000000640 RDI: 0000000000000005 [ 224.129070][ T7026] RBP: 00007f59bee33eaf R08: 0000000000000000 R09: 0000000000000000 [ 224.137024][ T7026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.145001][ T7026] R13: 00007f59bf026038 R14: 00007f59bf025fa0 R15: 00007fffac372488 [ 224.152993][ T7026] [ 224.156005][ T7026] [ 224.158325][ T7026] Allocated by task 7026: [ 224.162636][ T7026] kasan_set_track+0x4b/0x70 [ 224.167215][ T7026] __kasan_kmalloc+0x8e/0xa0 [ 224.171790][ T7026] __kmalloc_node+0xb2/0x240 [ 224.176373][ T7026] bpf_map_area_alloc+0x47/0xe0 [ 224.181208][ T7026] prealloc_elems_and_freelist+0x86/0x1c0 [ 224.186913][ T7026] stack_map_alloc+0x386/0x510 [ 224.191659][ T7026] map_create+0x524/0xff0 [ 224.195975][ T7026] __sys_bpf+0x38b/0x780 [ 224.200240][ T7026] __x64_sys_bpf+0x78/0x90 [ 224.204668][ T7026] do_syscall_64+0x4c/0xa0 [ 224.209103][ T7026] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.214981][ T7026] [ 224.217288][ T7026] The buggy address belongs to the object at ffff88802fb98280 [ 224.217288][ T7026] which belongs to the cache kmalloc-cg-64 of size 64 [ 224.231410][ T7026] The buggy address is located 16 bytes inside of [ 224.231410][ T7026] 64-byte region [ffff88802fb98280, ffff88802fb982c0) [ 224.244884][ T7026] [ 224.247220][ T7026] The buggy address belongs to the physical page: [ 224.253627][ T7026] page:ffffea0000bee600 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802fb98b00 pfn:0x2fb98 [ 224.265106][ T7026] memcg:ffff88807a17b401 [ 224.269424][ T7026] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 224.277011][ T7026] raw: 00fff00000000200 0000000000000000 dead000000000001 ffff888017442780 [ 224.285599][ T7026] raw: ffff88802fb98b00 000000008020001e 00000001ffffffff ffff88807a17b401 [ 224.294197][ T7026] page dumped because: kasan: bad access detected [ 224.300638][ T7026] page_owner tracks the page as allocated [ 224.306338][ T7026] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4274, tgid 4274 (syz-executor), ts 189984401179, free_ts 189983889927 [ 224.324745][ T7026] post_alloc_hook+0x173/0x1a0 [ 224.329556][ T7026] get_page_from_freelist+0x206b/0x2180 [ 224.335090][ T7026] __alloc_pages+0x1ec/0x4f0 [ 224.339666][ T7026] alloc_slab_page+0x5d/0x180 [ 224.344344][ T7026] new_slab+0x87/0x2d0 [ 224.348413][ T7026] ___slab_alloc+0xbc5/0x1240 [ 224.353070][ T7026] __kmem_cache_alloc_node+0x126/0x270 [ 224.358518][ T7026] kmalloc_trace+0x26/0xe0 [ 224.362955][ T7026] alloc_fdtable+0xca/0x2c0 [ 224.367456][ T7026] dup_fd+0x743/0xa20 [ 224.371428][ T7026] copy_files+0x72/0xe0 [ 224.375575][ T7026] copy_process+0x1862/0x40c0 [ 224.380239][ T7026] kernel_clone+0x24b/0x900 [ 224.384733][ T7026] __x64_sys_clone+0x1a7/0x220 [ 224.389496][ T7026] do_syscall_64+0x4c/0xa0 [ 224.393910][ T7026] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.399798][ T7026] page last free stack trace: [ 224.404462][ T7026] free_unref_page_prepare+0x8e5/0x9e0 [ 224.409947][ T7026] free_unref_page+0x2e/0x3f0 [ 224.414613][ T7026] __vunmap+0x874/0xa40 [ 224.418754][ T7026] __do_replace+0x86d/0x980 [ 224.423239][ T7026] do_ip6t_set_ctl+0xb3d/0xe10 [ 224.427986][ T7026] nf_setsockopt+0x25f/0x280 [ 224.432578][ T7026] __sys_setsockopt+0x2bf/0x3d0 [ 224.437426][ T7026] __x64_sys_setsockopt+0xb1/0xc0 [ 224.442457][ T7026] do_syscall_64+0x4c/0xa0 [ 224.446857][ T7026] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.452737][ T7026] [ 224.455042][ T7026] Memory state around the buggy address: [ 224.460648][ T7026] ffff88802fb98180: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 224.468717][ T7026] ffff88802fb98200: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 224.476759][ T7026] >ffff88802fb98280: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 224.484813][ T7026] ^ [ 224.490179][ T7026] ffff88802fb98300: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 224.498242][ T7026] ffff88802fb98380: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 224.506297][ T7026] ================================================================== [ 224.514510][ T7026] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 224.521696][ T7026] CPU: 0 PID: 7026 Comm: syz.2.953 Not tainted syzkaller #0 [ 224.528969][ T7026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 224.539015][ T7026] Call Trace: [ 224.542283][ T7026] [ 224.545231][ T7026] dump_stack_lvl+0x188/0x24e [ 224.549942][ T7026] ? memcpy+0x3c/0x60 [ 224.553915][ T7026] ? show_regs_print_info+0x12/0x12 [ 224.559980][ T7026] ? load_image+0x410/0x410 [ 224.564490][ T7026] panic+0x2d3/0x710 [ 224.568847][ T7026] ? __lock_acquire+0x7c40/0x7c40 [ 224.574317][ T7026] ? bpf_jit_dump+0xd0/0xd0 [ 224.579892][ T7026] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 224.586919][ T7026] ? _raw_spin_unlock+0x40/0x40 [ 224.592732][ T7026] check_panic_on_warn+0x80/0xa0 [ 224.601322][ T7026] ? __bpf_get_stackid+0x6c9/0x920 [ 224.610262][ T7026] end_report+0x66/0x110 [ 224.617963][ T7026] kasan_report+0x118/0x140 [ 224.624233][ T7026] ? __bpf_get_stackid+0x6c9/0x920 [ 224.632972][ T7026] kasan_check_range+0x235/0x290 [ 224.638312][ T7026] ? __bpf_get_stackid+0x6c9/0x920 [ 224.643416][ T7026] memcpy+0x3c/0x60 [ 224.647212][ T7026] __bpf_get_stackid+0x6c9/0x920 [ 224.652138][ T7026] bpf_get_stackid_pe+0x33f/0x400 [ 224.657151][ T7026] bpf_prog_282a5593b1ef8d13+0x21/0x36 [ 224.662682][ T7026] bpf_overflow_handler+0x50b/0x790 [ 224.667888][ T7026] ? bpf_overflow_handler+0xd9/0x790 [ 224.673170][ T7026] ? perf_swevent_overflow+0x230/0x230 [ 224.678624][ T7026] ? __perf_event_account_interrupt+0x187/0x280 [ 224.684861][ T7026] __perf_event_overflow+0x457/0x630 [ 224.690166][ T7026] ? perf_swevent_event+0x1d5/0x570 [ 224.695363][ T7026] perf_swevent_event+0x315/0x570 [ 224.700396][ T7026] ? perf_tp_event+0xc10/0xc10 [ 224.705181][ T7026] ___perf_sw_event+0x498/0x6d0 [ 224.710052][ T7026] ? ___perf_sw_event+0x184/0x6d0 [ 224.715086][ T7026] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 224.721532][ T7026] ? __lock_acquire+0x1465/0x7c40 [ 224.726576][ T7026] ? verify_lock_unused+0x140/0x140 [ 224.731786][ T7026] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 224.737755][ T7026] ? lock_chain_count+0x20/0x20 [ 224.742612][ T7026] __perf_sw_event+0x135/0x260 [ 224.747373][ T7026] do_user_addr_fault+0x497/0xb20 [ 224.752387][ T7026] ? trace_hardirqs_off_finish+0x86/0x180 [ 224.758141][ T7026] exc_page_fault+0x60/0x100 [ 224.762728][ T7026] asm_exc_page_fault+0x22/0x30 [ 224.767581][ T7026] RIP: 0010:strncpy_from_user+0x148/0x340 [ 224.773295][ T7026] Code: 00 00 00 4c 89 e6 e8 a7 2d 45 fd 49 83 fc 07 0f 86 9a 00 00 00 4c 89 74 24 08 48 c7 44 24 10 f8 ff ff ff 45 31 ed 4c 89 3c 24 <4f> 8b 3c 2f 48 b8 ff fe fe fe fe fe fe fe 49 8d 2c 07 4d 89 fe 49 [ 224.792896][ T7026] RSP: 0018:ffffc90004357b50 EFLAGS: 00050246 [ 224.798993][ T7026] RAX: ffffffff843d0a29 RBX: ffffc90004357c70 RCX: ffff88801c330000 [ 224.806956][ T7026] RDX: 0000000000000002 RSI: 000000000000007f RDI: 0000000000000007 [ 224.814911][ T7026] RBP: 0000000000000000 R08: ffff88801c330000 R09: 0000000000000003 [ 224.822863][ T7026] R10: 0000000000000002 R11: 0000000000000002 R12: 000000000000007f [ 224.830837][ T7026] R13: 0000000000000000 R14: 000000000000007f R15: 0000000000000000 [ 224.838797][ T7026] ? strncpy_from_user+0x129/0x340 [ 224.843897][ T7026] bpf_prog_load+0x200/0x1530 [ 224.848566][ T7026] ? map_freeze+0x390/0x390 [ 224.853056][ T7026] ? __might_fault+0xa6/0x120 [ 224.857720][ T7026] ? __might_fault+0xa6/0x120 [ 224.862375][ T7026] ? __might_fault+0xc2/0x120 [ 224.867055][ T7026] ? __might_fault+0xa6/0x120 [ 224.871715][ T7026] ? bpf_lsm_bpf+0x5/0x10 [ 224.876051][ T7026] ? security_bpf+0x7a/0xa0 [ 224.880564][ T7026] __sys_bpf+0x5b8/0x780 [ 224.884803][ T7026] ? bpf_link_show_fdinfo+0x380/0x380 [ 224.890182][ T7026] ? lock_chain_count+0x20/0x20 [ 224.895020][ T7026] __x64_sys_bpf+0x78/0x90 [ 224.899944][ T7026] do_syscall_64+0x4c/0xa0 [ 224.904384][ T7026] ? clear_bhb_loop+0x60/0xb0 [ 224.909068][ T7026] ? clear_bhb_loop+0x60/0xb0 [ 224.913729][ T7026] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.919604][ T7026] RIP: 0033:0x7f59bed9de99 [ 224.924002][ T7026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.943678][ T7026] RSP: 002b:00007f59bfcfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 224.952172][ T7026] RAX: ffffffffffffffda RBX: 00007f59bf025fa0 RCX: 00007f59bed9de99 [ 224.960139][ T7026] RDX: 0000000000000094 RSI: 0000200000000640 RDI: 0000000000000005 [ 224.968098][ T7026] RBP: 00007f59bee33eaf R08: 0000000000000000 R09: 0000000000000000 [ 224.976066][ T7026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.984101][ T7026] R13: 00007f59bf026038 R14: 00007f59bf025fa0 R15: 00007fffac372488 [ 224.992071][ T7026] [ 224.995361][ T7026] Kernel Offset: disabled [ 224.999673][ T7026] Rebooting in 86400 seconds..