last executing test programs: 2.673431672s ago: executing program 1 (id=1521): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffcf0, &(0x7f0000000980)={&(0x7f0000000e80)=ANY=[@ANYBLOB="aff8ccf460bc056519bd0500276b40c9b54b0004c7bdd89fc783071b96d4046e13ea6d6474d60a6428aba977127dd10e4391c4268a8d22f8cdc7b7179f7c35af2b5d643bfb9eff77d82312840145d72f64b3e09291cc60241514ddef76f1e92cf299f197b107c251dc2766e0c48202479e3da5d3d5beb909e270a826010f0facfa2cf2a4026e11d61a9dc70e0524beb24d16429b22549ee39ead50fe492f5ade1767965d00000000000400000000a96704459cbd178f", @ANYRES16=r2, @ANYBLOB="010ffcffffff009cd1febf71f79a57baeef29efa5555970099000002000049000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000028000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090785835"], 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="a0eb6360d8234fc4c7712c4cff7fdf", @ANYRES16=r2, @ANYBLOB="000028000300605015b0df81603d7725a626cb2431acdac18b06acdf1bd40c3013ae9d7cda3015f89b29d618e6b486c687ec0eec22739e207dbf6b58e6f29c93bdbd8b0816c6ec959f19523aab84a8047d45496eedd73e39b479f42e431236e8fe29603fb9cdb733f260bab260840cef0d793d1de1a200"/129, @ANYRES32=r3, @ANYBLOB="0c009900050000001c0000000a00060050505050505000000a000600ffffffffffff00000a00060008021100000100000a0006006699fe9c37b600000a00060086b5b08afb9300000a00060008021100000000000a00060008021100000000000a00060088fa248f414c00000a00060050505050505000000a0006000802110000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x891}, 0x20004000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000280)='bic\x00', 0x4) getsockopt$inet_tcp_buf(r7, 0x6, 0x1a, 0x0, &(0x7f0000000300)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000c80)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_INTERFACE(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000840)=ANY=[@ANYRES64, @ANYRES64=r1, @ANYBLOB="010200000000000000000800000008000300", @ANYRESDEC=r3, @ANYBLOB="052fd3bb9fb0983d136cf8a00a1e706b6d2a8e75f72447d8112dd5c6a83503847b7391d0764787adb2e8876ecb1af49bfed0922655b27ad931e2b9e0fbda843f4640951a59f82088a8614d87d2a152bdc8344841eb1339f1e41ee27238149e2ea90e771182bf2b106aa2154c7aaa2554e89e71df3965bb88195630af23caf6cc0b033001666e8ab70b81847014a3a693057125efa8b3c5f429ae6d1244f6bd6de784f8db3cc16a64b44f3fa955fd4e3eeb309f39e823896639e611abc901332ee225a412a5db41a6a23557879b855193be7dd6bec1f6"], 0x1c}, 0x1, 0x0, 0x0, 0x48840}, 0xc800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5421, &(0x7f0000000000)=0xffffffffffffffff) connect$unix(r8, &(0x7f0000000540)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f00000000c0)={'#! ', './file0', [{0x20, 'bic\x00'}, {0x20, '&\\'}, {0x20, '\'#\xee/&-)'}]}, 0x1b) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'ip6erspan0\x00', 0x400}) recvmsg(r9, &(0x7f0000000640)={&(0x7f00000009c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000740), 0x0, &(0x7f00000005c0)=""/104, 0x68}, 0x40000001) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x0, 0x2, 0x0) 2.433812352s ago: executing program 1 (id=1524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x2, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000040), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4], 0x7c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000980)={0x350, r2, 0x0, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x32a, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @broadcast, @random="f853879cd0b2", {0x6, 0x2}}, 0x8, @random=0x5, 0x400a, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x1}, {0x6c, 0x1}, {0x16, 0x1}]}, @void, @val={0x4, 0x6, {0x81, 0x3, 0xa, 0x382}}, @val={0x6, 0x2, 0xc6d3}, @void, @void, @void, [{0xdd, 0x1f, "4bb85ceae1f8acfc49f303d08bca7f67f2667e2447d4aa1c8ef2ab08094a23"}, {0xdd, 0x66, "3b3f2cfaf6a0551764f316b1d27f487929bba9f43825109ed7c15bc49779374f607da68503c3deeddf231f612ffd3471152d29aa668d26d9dda0c9b8ae1b9f9c8430be176ef9b866ba0ccf056e008fa3ba19bb6c4fb6ece4a0afcc36a2b6a05b9eb7964e34a0"}, {0xdd, 0x60, "1f511462dcc4a26c33e64473ced2fe271f33b27d85a5eca13b46b9bdaadb271f518014fbbc7c9bc54b26af20d1dda32a6d59737c4f9f933b49dc2a8e40ec436ee88e80ea0545b89a4174b43209fadcfc7f2363801cd6a56e10217e524f3b1d79"}, {0xdd, 0xd5, "cf7506765ece1b1ff90ede070668ccae991c809bd1f06bd2dfccf278f4a6704b3ffe2842a14e072c3d9f06a3a61f8bebe0e8c6beb07f62bd1435d2bca09e8b4cb85a3dcd6808aeb4fac7a57e4f63213fdb6c9788c4f5c736613ec4f46d8b0876c31cfe0969ff63722c310307a9359ba16d22223bc3ed61922e45a7c5fbbaf591aee767ed6fa42cb740d945c2a8a98b51009133cc5e2e43a1a756eca58c5e741dc45a1a29df66ed607146b0b8a8a13756262d5ee1e0ff5858f731c3d1c2182a7bd227971098673f6c76b5de2c9c6a72e675701d32b8"}, {0xdd, 0x38, "65fbbbba54cd98fce074a226300bfb5ec20108eda7a2a29f2d8e8f2151957bdb7815c60db3f0357c51e274d7dccfe86ced8ea6e69595a3c7"}, {0xdd, 0xeb, "67b58f98732a2d3b6bca282011e0cbbbfec37e63bdcf876d9b4c1303569a99800a8b68ef3883ab00bb28098f8b0fd55bf34af70f6e752507d735ff1a096089a15f0bc20baebd3753cd050419cc22bda22d9c9f225796f1a9b5bf5b5dd1480b5d8708227bc6b8f5c366e7220c96fba97aa78566535b9e740e0aa9bfe61e0aa1718cd0d89772c41c41577eae652e1b98386c70e0e60413d84c73000000000000000000df08682842c07528e932fc1e2b580bc6af47877a832fe98ac5c9caf5ce57c17d78a18d0682f6eed0f764d4a025a7cf368933e1e7af47a6249027f8951e5729891ae277729bd78dd667"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x350}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) connect$rxrpc(r6, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x3}}, 0x24) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000180)="080027226da0d6c1", 0x8}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @private}}}], 0x20}, 0x31c467c443849ffc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0xc388}, 0x1c) socket(0xa, 0x2, 0x0) 2.412478496s ago: executing program 0 (id=1526): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100039040000000000000000000003e4", @ANYRES32=0x0, @ANYBLOB="00000000000000003000128008000100737774002400028006000d000700000008000300ac00"/56], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000010000000000000000000000791208000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100039040000000000000000000003e4", @ANYRES32=0x0, @ANYBLOB="00000000000000003000128008000100737774002400028006000d000700000008000300ac00"/56], 0x50}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000010000000000000000000000791208000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) 2.366874491s ago: executing program 4 (id=1527): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="cb7de55a397bd5915d0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800400120008000500200000000800040000000000"], 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0xc, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001640)=ANY=[@ANYRESHEX=r2], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4000003}, 0x8}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) socket$packet(0x11, 0x2, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfffffffffffffe25, 0x24, 0x3, [@enum={0x5, 0x3, 0x0, 0x6, 0x4, [{0x9, 0x3}, {0xd, 0x4}, {0x0, 0x9}]}]}, {0x0, [0x0]}}, 0x0, 0x3f, 0x0, 0x8}, 0x20) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) setsockopt(r1, 0xd37, 0x6f, &(0x7f0000000180)="1a00020002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES64], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x1}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r7, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1800003, 0x40010, r5, 0xffffe000) r8 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r8, 0x10d, 0xe7, 0x0, &(0x7f00000000c0)) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00006dbffc), 0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000200), &(0x7f0000000300)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x10, &(0x7f0000000440)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x1, 0x3, 0x7, 0xb, 0xffffffffffffffc0, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x2, 0x7, 0x1, 0xffffffffffffffc0, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @generic={0x7, 0xd, 0xf, 0xd8, 0x1}, @exit, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @ldst={0x2, 0x1, 0x0, 0xb, 0xa, 0x10}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x3}], &(0x7f0000000100)='GPL\x00'}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000700)={'batadv_slave_0\x00'}) 2.181682332s ago: executing program 2 (id=1528): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003b0007010000000020000000047c0000040000001400018006000600800a0000080016"], 0x2c}}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in=@empty, @in6=@remote, 0x4e22, 0x8000, 0x4e24, 0x2, 0xa, 0xa0, 0x100, 0xff}, {0xffffffffffffffff, 0x81, 0xffffffffffffffff, 0x1f99c78c, 0x5, 0x0, 0xea6, 0x1}, {0x4e3, 0xffffffffffffffff, 0x5, 0xfffffffffffffffc}, 0x6, 0x6e6bb8, 0x1, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x4d5, 0x2b}, 0xa, @in=@broadcast, 0x3502, 0x3, 0x2, 0x11, 0x1}}, 0xe8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0}}], 0x2, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c, 0x40000) r2 = syz_genetlink_get_family_id$ethtool(0x0, r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000980)={'gre0\x00', 0x0, 0x80, 0x700, 0x6, 0x3, {{0x6, 0x4, 0x3, 0x7, 0x18, 0x65, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@ra={0x94, 0x4}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000005c0)={@remote, @rand_addr, 0x0}, &(0x7f0000000600)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x8000, 0x40, 0x4, 0x1, {{0x1c, 0x4, 0x0, 0x8, 0x70, 0x64, 0x0, 0xbb, 0x2f, 0x0, @multicast2, @local, {[@lsrr={0x83, 0x23, 0xaf, [@multicast2, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @private=0xa010102]}, @noop, @generic={0xc7, 0xd, "95f2ea114ea7847078fce7"}, @lsrr={0x83, 0x1f, 0x29, [@private=0xa010101, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local, @dev={0xac, 0x14, 0x14, 0x3a}, @broadcast]}, @generic={0x82, 0x3, "94"}, @rr={0x7, 0x7, 0x93, [@private=0xa010102]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x7, 0x41, 0x4, @private0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x700, 0x7, 0x8b8, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wg0\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000840)={@rand_addr, @broadcast, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000b00)={0x1d0, r2, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x279065807727c60d}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x40080}, 0x4008020) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'lo\x00'}) 2.181408697s ago: executing program 0 (id=1529): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x584}}, 0x44) 2.042895958s ago: executing program 2 (id=1531): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000200095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) close(0xffffffffffffffff) close(r1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001439) 1.984869104s ago: executing program 1 (id=1532): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x11, 0x3, 0x9) getsockopt$bt_BT_SECURITY(r3, 0x107, 0x11, 0x0, 0x20000002) socket$igmp6(0xa, 0x3, 0x2) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ec0)={0x114, r4, 0xe701ac47a3d23ecd, 0x0, 0x0, {0x1, 0x0, 0xa00}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x8}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x50c, 0x1004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 1.955922286s ago: executing program 0 (id=1533): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000d00)=ANY=[@ANYBLOB="400000000b14010027bd7000fddbdf2508003f00030000000800030002000000080003000100000008003f000100000008003f00000000000800010085000000008b566b91c0739ceffc012979f4dbb3de7e36994abcf8b6199801ac4ed7ba56d5eb38509cf50f000000000000465f6358bbf9bf043ca9f5000000d35fbce6b5b8cf47f5a8b0132fe5d4526d7f4b39768739491afe2286c5ad30f78759dbfea34c31757a3d3b"], 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x24000010) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r2 = getpid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc, 0x80000}, 0xc, &(0x7f00000003c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="10429000"/16], 0x10}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x8c0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x3, 0x1, 0x97f, 0x48, 0xffffffffffffffff, 0xdd, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x20000005, 0xb}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="1801000000bae3000000000000000000850000007b00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r8 = socket(0x1, 0x2, 0x0) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r7) sendmsg$DEVLINK_CMD_SB_POOL_SET(r7, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="50000000d830b76ffcae4cf5ce8df99889d2797e8aeade2430551dc9d84cd178e8594ef31e72a6de8a28f5c22365c7066ed8d61ce1d88df11eb9dd8af3d873d12178270acc536720087cba7d33895fd1505d76a66395f4b416177684fec6ed017d45ac565b50829ed464efdd4cccf8f6fa1738b0f713b3ef3adae47dde897710b8d7b4cbea302a052ec9f9afd4a42afb73bb7e894b7fbe1c6cdee973dee22963ff7477e496da00"/176, @ANYRES16=r9, @ANYBLOB="100027bd7000fddbdf2510000000080001007063690011000200303030303a30303a31302e300000000008000b0004000000060011000000000008001300ff0100000500140000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 1.829891792s ago: executing program 2 (id=1535): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, &(0x7f0000000100)=""/70, &(0x7f0000000040)=0x46) 1.829645914s ago: executing program 1 (id=1536): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000100", @ANYRES32=r2, @ANYBLOB="3c000200240001"], 0x58}, 0x1, 0xf000}, 0x0) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b000100000000000000001808"], 0x114}], 0x1}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) close(r3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xc, 0x4, 0x7, 0x8, 0x1000}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80001003}, 0x90) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_mreq(r7, 0x29, 0x1d, 0x0, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r8, 0x0) (async) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async) recvmmsg(r9, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/80, 0x50}], 0x1}}], 0x1, 0x0, 0x0) shutdown(r9, 0x0) (async) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000600)={0x6, [0x3, 0x8], 0x3}, 0x10) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0xfffffffd, @loopback={0xfec0ffff00000000}, 0x20000}, 0x1c) (async) syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="bbd28ddcfbbbaaaaaaaaaa0086dd60003a0400043a00f58000000000000000000000000000bbff020000000000000000000000000001"], 0x0) (async) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000790c8b319e988653def3146999431b90000000400000000000000000000c5f900"], 0x24}, 0x1, 0x1000000}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) 1.753317527s ago: executing program 3 (id=1537): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x7}}}, 0x24}}, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000120005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="e30435750703fce5f0abcdb8f3b658917430c350664fcc25e0196e6ee48946363ceaa03c6433bad3d204d9dc3a824183941dae8e2e7b5c5d1ed5ebe24d25bd8c4d790fbad1e47a77a447772d3c41d5e4bb638a50c3ee4011ef6ecdd7eb36255a84930863ae34be52779685c8cd10b4481e13ac93b36c2c46712d7cd505afe43b78f987f1fec1c86bed505e9a74afeef5f87411fb14fa0c95837d7ed3fcf227a8"], 0x50}}, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000c80)={0x4, 0x6}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$inet6(r7, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="82", 0x1}], 0x1}}], 0x1, 0x6000c000) r9 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) accept(r9, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=ANY=[@ANYBLOB="440100001000130100000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYBLOB="04"], 0x144}}, 0x0) 1.739532728s ago: executing program 2 (id=1538): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x2, 0x3}, 0x6) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001540)=""/68, 0x44}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)}}], 0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="2508007a0000000000000700000008000300", @ANYBLOB], 0x54}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000009000038008000240000000007c00038014000100626f6e64300000000000000000000000140001006970766c616e31000000000000000000140001006970766c616e300000000000000000001400010073697430000000000000fbffffffffffffff0100776c616e300000000000000000000000140001006772653000000000000000000000040008000140000000005c000000180a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626f6e643000000000000000000000001400"], 0x4b0}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="4600030007"], 0xd) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x10, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYRESDEC], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffdeb) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000140)={0x0, 0x3, 0x8, 0x101}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x6}, 0x8) sendto$inet6(r5, &(0x7f0000000580)="03", 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 1.724418669s ago: executing program 0 (id=1539): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket(0x1d, 0x2, 0x6) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x0, 0x0}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5}, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r5 = socket$inet6(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1e, &(0x7f0000000080)={@loopback, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x20) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x3, {{0x2, 0x4e23, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x2d, &(0x7f0000000500)={0x0, {{0x2, 0x0, @dev}}}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x25, 0xa, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x3}, [@snprintf={{}, {}, {}, {0x3, 0x3, 0x6, 0x3, 0x8, 0xfff0, 0xf1}, {}, {}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe02}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000380), 0x208e24b) 1.584596064s ago: executing program 1 (id=1540): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0d03000000000000000003"], 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats={0x1e}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) sendfile(r3, r5, 0x0, 0xffffffff002) shutdown(r3, 0x1) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$nl_xfrm(r6, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_linger(r7, 0x1, 0xd, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x0, 0x8, 0x8, 0x48, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 1.583838001s ago: executing program 3 (id=1541): setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000040)={0xa180, 0x200}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048011) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@dev, 0x200, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5e}, {@in=@private, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x96}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0]}}]}, 0x158}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000003a80), 0x0, 0x2c000011) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x38) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r6, @ANYBLOB="7240146c00000000340012800c0001006d6163766c616e00240002800800010010000000100009"], 0x54}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xe, &(0x7f0000000340)={@mcast1, 0x0}, &(0x7f0000000380)=0x14) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r11, @ANYBLOB="800202000a00020057"], 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000440)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'gretap0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x8000, 0x1, 0x9, 0x5, {{0x34, 0x4, 0x3, 0x8, 0xd0, 0x68, 0x0, 0x4, 0x29, 0x0, @broadcast, @private=0xa010102, {[@cipso={0x86, 0x46, 0x0, [{0x0, 0x2}, {0x79e2f249f69ad56c, 0xb, "7ae528e9c5e8472d5b"}, {0x1, 0x5, "971c1d"}, {0x6, 0x9, "c44e92845b7424"}, {0x0, 0x12, "2785112cf977995c50193c8a3b725fe4"}, {0x5, 0x6, "3dd7ad85"}, {0x1, 0x2}, {0x1, 0xb, "31d4b2c1fc0c51c5ea"}]}, @timestamp_prespec={0x44, 0x24, 0x79, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf395}, {@remote, 0x4}, {@remote, 0x4}, {@private=0xa010100, 0x6}]}, @rr={0x7, 0x7, 0xeb, [@rand_addr=0x64010100]}, @ssrr={0x89, 0x1f, 0xac, [@private=0xa010101, @rand_addr=0x64010101, @rand_addr=0x64010102, @multicast2, @empty, @private=0xa010102, @multicast2]}, @generic={0x7, 0x5, "fc3dd2"}, @noop, @timestamp={0x44, 0x24, 0xf6, 0x0, 0x4, [0x2000, 0x8, 0x6, 0xe7400, 0x9, 0x81, 0x478, 0x8]}]}}}}}) r14 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r16, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5}]}}]}, 0x40}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0], 0x0, 0x3a, &(0x7f0000000680)=[{}, {}], 0x10, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xdf, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="dc000000", @ANYRES16=0x0, @ANYRES32=r6, @ANYBLOB="080003000100000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="14000200776c616e31000000000000000000000008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="6c00018008000100", @ANYRES32=r16, @ANYBLOB="0800030000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020070696d7265670000000000000000000008000100", @ANYRES32=r17, @ANYBLOB="08000300010000001400070076657468300000008000f200000000534ffaea00b7c6a490feb87412208004000000"], 0xdc}, 0x1, 0x0, 0x0, 0x8000000}, 0x40000) 1.384968565s ago: executing program 4 (id=1542): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x2, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000040), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4], 0x7c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000980)={0x350, r2, 0x0, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x32a, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @broadcast, @random="f853879cd0b2", {0x6, 0x2}}, 0x8, @random=0x5, 0x400a, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x1}, {0x6c, 0x1}, {0x16, 0x1}]}, @void, @val={0x4, 0x6, {0x81, 0x3, 0xa, 0x382}}, @val={0x6, 0x2, 0xc6d3}, @void, @void, @void, [{0xdd, 0x1f, "4bb85ceae1f8acfc49f303d08bca7f67f2667e2447d4aa1c8ef2ab08094a23"}, {0xdd, 0x66, "3b3f2cfaf6a0551764f316b1d27f487929bba9f43825109ed7c15bc49779374f607da68503c3deeddf231f612ffd3471152d29aa668d26d9dda0c9b8ae1b9f9c8430be176ef9b866ba0ccf056e008fa3ba19bb6c4fb6ece4a0afcc36a2b6a05b9eb7964e34a0"}, {0xdd, 0x60, "1f511462dcc4a26c33e64473ced2fe271f33b27d85a5eca13b46b9bdaadb271f518014fbbc7c9bc54b26af20d1dda32a6d59737c4f9f933b49dc2a8e40ec436ee88e80ea0545b89a4174b43209fadcfc7f2363801cd6a56e10217e524f3b1d79"}, {0xdd, 0xd5, "cf7506765ece1b1ff90ede070668ccae991c809bd1f06bd2dfccf278f4a6704b3ffe2842a14e072c3d9f06a3a61f8bebe0e8c6beb07f62bd1435d2bca09e8b4cb85a3dcd6808aeb4fac7a57e4f63213fdb6c9788c4f5c736613ec4f46d8b0876c31cfe0969ff63722c310307a9359ba16d22223bc3ed61922e45a7c5fbbaf591aee767ed6fa42cb740d945c2a8a98b51009133cc5e2e43a1a756eca58c5e741dc45a1a29df66ed607146b0b8a8a13756262d5ee1e0ff5858f731c3d1c2182a7bd227971098673f6c76b5de2c9c6a72e675701d32b8"}, {0xdd, 0x38, "65fbbbba54cd98fce074a226300bfb5ec20108eda7a2a29f2d8e8f2151957bdb7815c60db3f0357c51e274d7dccfe86ced8ea6e69595a3c7"}, {0xdd, 0xeb, "67b58f98732a2d3b6bca282011e0cbbbfec37e63bdcf876d9b4c1303569a99800a8b68ef3883ab00bb28098f8b0fd55bf34af70f6e752507d735ff1a096089a15f0bc20baebd3753cd050419cc22bda22d9c9f225796f1a9b5bf5b5dd1480b5d8708227bc6b8f5c366e7220c96fba97aa78566535b9e740e0aa9bfe61e0aa1718cd0d89772c41c41577eae652e1b98386c70e0e60413d84c73000000000000000000df08682842c07528e932fc1e2b580bc6af47877a832fe98ac5c9caf5ce57c17d78a18d0682f6eed0f764d4a025a7cf368933e1e7af47a6249027f8951e5729891ae277729bd78dd667"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x350}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) connect$rxrpc(r6, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x3}}, 0x24) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000180)="080027226da0d6c1", 0x8}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @private}}}], 0x20}, 0x31c467c443849ffc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0xc388}, 0x1c) socket(0xa, 0x2, 0x0) 1.349432059s ago: executing program 3 (id=1543): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3800004, 0x3032, 0xffffffffffffffff, 0xd063c000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000300000d0a00000007"], &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0x2}, 0x20) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "080080", 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback, @local, [@srh]}}}}}}}, 0x0) 1.103607728s ago: executing program 4 (id=1544): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000001ac0), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipmr_delroute={0x4c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_ENCAP={0x1c, 0x16, 0x0, 0x1, @LWT_BPF_IN={0x18, 0x1, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x13, 0x2, 'batadv_slave_0\x00'}}}, @RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_MULTIPATH={0xc}]}, 0x4c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{}]}]}}, 0x0, 0x32}, 0x20) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r5) syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@link_local={0x5}, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x3580}}}}}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000240)=r0, 0x4) sendmsg$inet(r1, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x4e1f, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x89, 0x9, "04630b4d7d113b"}]}}}, @ip_tos_int={{0x14}}], 0x38, 0x5}, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) 978.033311ms ago: executing program 3 (id=1545): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407200904001f00000000020000000000000800040001000000", 0x24) 887.059517ms ago: executing program 3 (id=1546): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x11, 0x3, 0x9) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000200)=0x1e) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xb8410608002e4972, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=@newnexthop={0x34, 0x68, 0x901, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6}, @NHA_GROUP={0x14, 0x2, [{0xfffffffd}, {}]}]}, 0x34}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="460a000000000007791000000007bdac51cad398678ba747f50b9365cdac470d6aa67db1aba282ee00baf4132f7445fb10da45a0d24fa9dcfbdb2de10fa9950929cd3d5290ab582727db06"], &(0x7f0000000980)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffde}, 0x1) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="3c75c2015e8724b5a4c586f2ae924b277f0443ec773eab27570e28988217c9b0", 0x20) r8 = accept$alg(r5, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, &(0x7f00000003c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000780)) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000001314010100000000000000000800010000000000795ad6ec360e2c41"], 0x18}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x5c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x85}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x24084) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xf, &(0x7f0000000080)=ANY=[@ANYRES8=r7, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000000bb000000b7000000000001009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth1_to_hsr\x00'}) getsockopt$bt_BT_SECURITY(r2, 0x107, 0x11, 0x0, 0x20000002) socket$igmp6(0xa, 0x3, 0x2) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b00)=ANY=[@ANYBLOB="14010000", @ANYRES16=r9, @ANYBLOB="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"], 0x114}}, 0x4000) 870.482462ms ago: executing program 4 (id=1547): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000a9de51", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) recvmsg$can_bcm(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x9b69}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 705.546202ms ago: executing program 2 (id=1548): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000380)='contention_end\x00', r5}, 0x10) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) write(r1, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x1, 'macsec0\x00', {}, 0x9}) writev(r8, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, 0x0, 0x0) 641.907806ms ago: executing program 0 (id=1549): socket$isdn(0x22, 0x2, 0x22) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000003200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f7fc70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cb64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f440af2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719a674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea00020000cf4591c926abfb076719237c8d0e60b0eea24490a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb72fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28d5271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1fcff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969cc1595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6d372ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee99de7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2eaa6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000100000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed90868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e0700000005bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba68df304a8bd66fcdf240430a537a395dc73bda1b7bf12cb2d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0d482ac3750e0170da9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422636f949e2ab8f162d7e3f855e378f4a1f40bc96fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e73970413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c28fd4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5001000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7e661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428713b4218821176d8067997527230fa67d26950d3e4f2750fa7c8720000000001000000b08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373eaea36546791d04f1f0da240455a0980b1882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca005d0000000000000000001a462fe02852f49e1fb5f1fec6893f9ae8af00"/3226], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x84}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @multicast2=0xac14140a}}) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) close(0xffffffffffffffff) unshare(0x40600) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "0400", "0d07080d7f4fcf00007f0eff0400", '\x00', "8657e2b7e43b34e4"}, 0x28) sendto$inet6(r2, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 638.837657ms ago: executing program 4 (id=1550): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d7e00000000000000002a00000008002f00000000000c0005000000000000000000050037000000000008000200", @ANYRES32=r0, @ANYBLOB="050036"], 0x40}, 0x4, 0x700000000000000}, 0x0) (fail_nth: 8) 607.191204ms ago: executing program 3 (id=1551): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x2500, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x2f, 0x0, @empty, @private}}}}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000faffffffffffffff00001a120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000000000008500000039000000b7000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0xd, &(0x7f0000000000)=0xffffffff, 0x4) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r2, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/51, 0x33}}], 0x1, 0x2020, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{0x0, 0xe0}], 0x1}, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x10, &(0x7f00000000c0), 0x8) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) 498.480978ms ago: executing program 1 (id=1552): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="cb7de55a397bd5915d0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800400120008000500200000000800040000000000"], 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0xc, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001640)=ANY=[@ANYRESHEX=r2], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4000003}, 0x8}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000b80)=[{{&(0x7f0000000080)=@phonet={0x23, 0x0, 0x0, 0xa}, 0x80, 0x0}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfffffffffffffe25, 0x24, 0x3, [@enum={0x5, 0x3, 0x0, 0x6, 0x4, [{0x9, 0x3}, {0xd, 0x4}, {0x0, 0x9}]}]}, {0x0, [0x0]}}, 0x0, 0x3f, 0x0, 0x8}, 0x20) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) setsockopt(r1, 0xd37, 0x6f, &(0x7f0000000180)="1a00020002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES64], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x1}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r7, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1800003, 0x40010, r5, 0xffffe000) r8 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r8, 0x10d, 0xe7, 0x0, &(0x7f00000000c0)) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00006dbffc), 0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000200), &(0x7f0000000300)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x10, &(0x7f0000000440)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x1, 0x3, 0x7, 0xb, 0xffffffffffffffc0, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x2, 0x7, 0x1, 0xffffffffffffffc0, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @generic={0x7, 0xd, 0xf, 0xd8, 0x1}, @exit, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @ldst={0x2, 0x1, 0x0, 0xb, 0xa, 0x10}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x3}], &(0x7f0000000100)='GPL\x00'}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000700)={'batadv_slave_0\x00'}) 181.877382ms ago: executing program 2 (id=1553): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r3) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) 138.063319ms ago: executing program 4 (id=1554): syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, 0x0}, 0x90) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r0, 0x0, 0xb) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x2}}, 0x10, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="34ff970007"], 0xd) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x3, 0x0, &(0x7f0000000140)) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r4 = socket(0x2b, 0x1, 0x1) sendmmsg$sock(r4, 0x0, 0x0, 0x20000001) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast1, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[], 0xfdef) 0s ago: executing program 0 (id=1555): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x20}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x1c}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): T7572] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.716150][ T7572] ? __pfx__printk+0x10/0x10 [ 199.720783][ T7572] ? __pfx_lock_release+0x10/0x10 [ 199.725852][ T7572] ? rcu_is_watching+0x15/0xb0 [ 199.730667][ T7572] should_fail_ex+0x3b0/0x4e0 [ 199.735385][ T7572] _copy_from_iter+0x1f6/0x1960 [ 199.740292][ T7572] ? alloc_pages_mpol_noprof+0x417/0x680 [ 199.745972][ T7572] ? __pfx__copy_from_iter+0x10/0x10 [ 199.751304][ T7572] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 199.757342][ T7572] ? alloc_pages_noprof+0xef/0x170 [ 199.762690][ T7572] ? page_copy_sane+0x46/0x260 [ 199.767507][ T7572] copy_page_from_iter+0x7a/0x100 [ 199.772580][ T7572] tun_get_user+0x1f7d/0x4720 [ 199.777301][ T7572] ? tun_get_user+0x871/0x4720 [ 199.782154][ T7572] ? __lock_acquire+0x137a/0x2040 [ 199.787236][ T7572] ? __pfx_tun_get_user+0x10/0x10 [ 199.792325][ T7572] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 199.797828][ T7572] ? tun_get+0x1e/0x2f0 [ 199.802038][ T7572] ? __pfx_lock_release+0x10/0x10 [ 199.807138][ T7572] ? tun_get+0x1e/0x2f0 [ 199.811338][ T7572] ? tun_get+0x27d/0x2f0 [ 199.815626][ T7572] tun_chr_write_iter+0x113/0x1f0 [ 199.820703][ T7572] vfs_write+0xa72/0xc90 [ 199.825094][ T7572] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 199.830715][ T7572] ? __pfx_vfs_write+0x10/0x10 [ 199.835550][ T7572] ksys_write+0x1a0/0x2c0 [ 199.839936][ T7572] ? __pfx_ksys_write+0x10/0x10 [ 199.844831][ T7572] ? do_syscall_64+0x100/0x230 [ 199.849753][ T7572] ? do_syscall_64+0xb6/0x230 [ 199.854476][ T7572] do_syscall_64+0xf3/0x230 [ 199.859022][ T7572] ? clear_bhb_loop+0x35/0x90 [ 199.863748][ T7572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.869683][ T7572] RIP: 0033:0x7f85443789df [ 199.874135][ T7572] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 199.893771][ T7572] RSP: 002b:00007f854523a000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 199.902198][ T7572] RAX: ffffffffffffffda RBX: 00007f8544515f80 RCX: 00007f85443789df [ 199.910307][ T7572] RDX: 000000000000006e RSI: 0000000020000080 RDI: 00000000000000c8 [ 199.918299][ T7572] RBP: 00007f854523a090 R08: 0000000000000000 R09: 0000000000000000 [ 199.926381][ T7572] R10: 000000000000006e R11: 0000000000000293 R12: 0000000000000001 [ 199.934391][ T7572] R13: 0000000000000001 R14: 00007f8544515f80 R15: 00007fffbd4aad08 [ 199.942419][ T7572] [ 200.359300][ T7587] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.504443][ T7593] siw: device registration error -23 [ 200.546325][ T7587] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.705558][ T7587] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.917054][ T7615] delete_channel: no stack [ 200.940569][ T7587] team0: Port device netdevsim0 removed [ 200.965188][ T7587] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.200197][ T7587] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.241863][ T7587] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.305140][ T7587] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.354139][ T7587] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.555824][ T29] audit: type=1107 audit(1724905477.752:15): pid=7637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<|KÏüÑ,÷íÂ-øÐ"5³)ÛõK©XÎ骵$âý‚÷‚}« R¾˜…¹,¼`’ [ 201.555824][ T29] =õ·¤˜°J,PV"’«÷%öøa›]ØŽZ”îTe¤¡u­Mûz˜;ÑXëd­ò²bÚÔráP¤z›ýa±ù׌ðg$W©pk)Ï' [ 202.550170][ T7679] netlink: 'syz.3.632': attribute type 1 has an invalid length. [ 202.560005][ T7679] __nla_validate_parse: 5 callbacks suppressed [ 202.560026][ T7679] netlink: 224 bytes leftover after parsing attributes in process `syz.3.632'. [ 202.765485][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.633'. [ 202.784804][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.633'. [ 203.047279][ T7686] syzkaller0: renamed from bridge_slave_1 (while UP) [ 203.163849][ T7686] siw: device registration error -23 [ 203.301983][ T29] audit: type=1107 audit(1724905479.492:16): pid=7695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<|KÏüÑ,÷íÂ-øÐ"5³)ÛõK©XÎ骵$âý‚÷‚}« R¾˜…¹,¼`’ [ 203.301983][ T29] =õ·¤˜°J,PV"’«÷%öøa›]ØŽZ”îTe¤¡u­Mûz˜;ÑXëd­ò²bÚÔráP¤z›ýa±ù׌ðg$W©pk)Ï' [ 203.308367][ T7696] netlink: 96 bytes leftover after parsing attributes in process `syz.1.639'. [ 203.379845][ T7697] siw: device registration error -23 [ 203.390465][ T7699] pim6reg527: entered allmulticast mode [ 203.477613][ T7703] ipt_REJECT: TCP_RESET invalid for non-tcp [ 203.661949][ C1] net_ratelimit: 20 callbacks suppressed [ 203.661972][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 203.711054][ T7708] netlink: 36 bytes leftover after parsing attributes in process `syz.3.643'. [ 203.753277][ T7710] macvlan2: entered promiscuous mode [ 203.758637][ T7710] vlan0: entered promiscuous mode [ 203.790065][ T7710] vlan0: left promiscuous mode [ 203.825333][ T7718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'. [ 204.552054][ T7749] openvswitch: netlink: ct_state flags 00008300 unsupported [ 205.107535][ T7770] netlink: 'syz.2.657': attribute type 10 has an invalid length. [ 205.168111][ T7775] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 205.175131][ T7770] team0: Port device netdevsim0 added [ 205.197067][ T7753] delete_channel: no stack [ 205.243992][ T7777] netlink: 232 bytes leftover after parsing attributes in process `syz.0.659'. [ 205.264636][ T7777] netlink: 72 bytes leftover after parsing attributes in process `syz.0.659'. [ 205.463176][ T7785] netlink: 'syz.4.661': attribute type 10 has an invalid length. [ 205.580398][ T7793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.660594][ T7797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.666'. [ 205.670246][ T7789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.783256][ T7800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.668'. [ 205.812098][ T7800] FAULT_INJECTION: forcing a failure. [ 205.812098][ T7800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.835706][ T7800] CPU: 1 UID: 0 PID: 7800 Comm: syz.4.668 Not tainted 6.11.0-rc4-syzkaller-00686-ge24a6c874601 #0 [ 205.846469][ T7800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 205.856566][ T7800] Call Trace: [ 205.859880][ T7800] [ 205.862843][ T7800] dump_stack_lvl+0x241/0x360 [ 205.867609][ T7800] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.872851][ T7800] ? __pfx__printk+0x10/0x10 [ 205.877474][ T7800] ? __pfx_lock_release+0x10/0x10 [ 205.882536][ T7800] should_fail_ex+0x3b0/0x4e0 [ 205.887233][ T7800] _copy_to_iter+0x43a/0x1960 [ 205.891929][ T7800] ? __virt_addr_valid+0x183/0x530 [ 205.897064][ T7800] ? __pfx__copy_to_iter+0x10/0x10 [ 205.902197][ T7800] ? __virt_addr_valid+0x183/0x530 [ 205.907317][ T7800] ? __virt_addr_valid+0x183/0x530 [ 205.912450][ T7800] ? __virt_addr_valid+0x45f/0x530 [ 205.917598][ T7800] ? __phys_addr_symbol+0x2f/0x70 [ 205.922639][ T7800] ? __check_object_size+0x49c/0x900 [ 205.927952][ T7800] __skb_datagram_iter+0x112/0x890 [ 205.933097][ T7800] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 205.938778][ T7800] skb_copy_datagram_iter+0xd1/0x250 [ 205.944101][ T7800] netlink_recvmsg+0x2d0/0x11d0 [ 205.948981][ T7800] ? __pfx_netlink_recvmsg+0x10/0x10 [ 205.954285][ T7800] ? iovec_from_user+0x87/0x240 [ 205.959161][ T7800] ? iovec_from_user+0x87/0x240 [ 205.964041][ T7800] ? iovec_from_user+0x87/0x240 [ 205.968919][ T7800] ? __pfx_aa_sk_perm+0x10/0x10 [ 205.973790][ T7800] ? aa_sock_msg_perm+0x91/0x160 [ 205.978746][ T7800] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 205.984051][ T7800] ? security_socket_recvmsg+0x90/0xb0 [ 205.989539][ T7800] ? __pfx_netlink_recvmsg+0x10/0x10 [ 205.994840][ T7800] sock_recvmsg+0x22f/0x280 [ 205.999356][ T7800] ____sys_recvmsg+0x1db/0x470 [ 206.004144][ T7800] ? __pfx_____sys_recvmsg+0x10/0x10 [ 206.009461][ T7800] __sys_recvmsg+0x2f0/0x3e0 [ 206.014070][ T7800] ? __pfx___sys_recvmsg+0x10/0x10 [ 206.019397][ T7800] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 206.025760][ T7800] ? do_syscall_64+0x100/0x230 [ 206.030541][ T7800] ? do_syscall_64+0xb6/0x230 [ 206.035231][ T7800] do_syscall_64+0xf3/0x230 [ 206.039747][ T7800] ? clear_bhb_loop+0x35/0x90 [ 206.044462][ T7800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.050369][ T7800] RIP: 0033:0x7f8544379ef9 [ 206.054800][ T7800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.074416][ T7800] RSP: 002b:00007f854523a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 206.082842][ T7800] RAX: ffffffffffffffda RBX: 00007f8544515f80 RCX: 00007f8544379ef9 [ 206.090820][ T7800] RDX: 0000000000000000 RSI: 0000000020002d40 RDI: 000000000000000b [ 206.098802][ T7800] RBP: 00007f854523a090 R08: 0000000000000000 R09: 0000000000000000 [ 206.106787][ T7800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.114774][ T7800] R13: 0000000000000000 R14: 00007f8544515f80 R15: 00007fffbd4aad08 [ 206.122775][ T7800] [ 206.260889][ T7810] openvswitch: netlink: ct_state flags 00008300 unsupported [ 206.610752][ T7827] netlink: 'syz.3.674': attribute type 10 has an invalid length. [ 206.704534][ T7827] netlink: 'syz.3.674': attribute type 10 has an invalid length. [ 206.723156][ T7827] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 206.764736][ T7827] team0: Port device netdevsim0 removed [ 206.877828][ T7839] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.037378][ T7848] macvlan3: entered allmulticast mode [ 207.148017][ T7839] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.266018][ T7839] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.400249][ T7839] team0: Port device netdevsim0 removed [ 207.420307][ T7839] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.871973][ T7863] openvswitch: netlink: ct_state flags 00008300 unsupported [ 208.148828][ T7876] __nla_validate_parse: 3 callbacks suppressed [ 208.148851][ T7876] netlink: 96 bytes leftover after parsing attributes in process `syz.1.690'. [ 208.193485][ T7876] netlink: 16 bytes leftover after parsing attributes in process `syz.1.690'. [ 208.247249][ T29] audit: type=1107 audit(1724905484.442:17): pid=7875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<|KÏüÑ,÷íÂ-øÐ"5³)ÛõK©XÎ骵$âý‚÷‚}« R¾˜…¹,¼`’ [ 208.247249][ T29] =õ·¤˜°J,PV"’«÷%öøa›]ØŽZ”îTe¤¡u­Mûz˜;ÑXëd­ò²bÚÔráP¤z›ýa±ù׌ðg$W©pk)Ï' [ 208.276417][ T7878] netlink: 96 bytes leftover after parsing attributes in process `syz.4.691'. [ 208.871553][ T7901] FAULT_INJECTION: forcing a failure. [ 208.871553][ T7901] name failslab, interval 1, probability 0, space 0, times 0 [ 208.898443][ T7901] CPU: 1 UID: 0 PID: 7901 Comm: syz.1.699 Not tainted 6.11.0-rc4-syzkaller-00686-ge24a6c874601 #0 [ 208.909145][ T7901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 208.919706][ T7901] Call Trace: [ 208.923019][ T7901] [ 208.925982][ T7901] dump_stack_lvl+0x241/0x360 [ 208.930705][ T7901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.935940][ T7901] ? __pfx__printk+0x10/0x10 [ 208.940579][ T7901] should_fail_ex+0x3b0/0x4e0 [ 208.945302][ T7901] ? ___neigh_create+0x691/0x2470 [ 208.950375][ T7901] should_failslab+0xac/0x100 [ 208.955106][ T7901] ? ___neigh_create+0x691/0x2470 [ 208.960178][ T7901] __kmalloc_noprof+0xd8/0x400 [ 208.964992][ T7901] ___neigh_create+0x691/0x2470 [ 208.969920][ T7901] ip_neigh_gw4+0x366/0x500 [ 208.974471][ T7901] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 208.979631][ T7901] ? ip_finish_output2+0x45f/0x1390 [ 208.984881][ T7901] ip_finish_output2+0x10c5/0x1390 [ 208.990037][ T7901] ? __pfx_ip_finish_output+0x10/0x10 [ 208.995459][ T7901] ? __pfx_ip_finish_output2+0x10/0x10 [ 209.000970][ T7901] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 209.005868][ T7901] ? __ip_finish_output+0x349/0x400 [ 209.011112][ T7901] ip_send_skb+0x74/0x100 [ 209.015481][ T7901] udp_send_skb+0xacf/0x1650 [ 209.020137][ T7901] udp_sendmsg+0x1c21/0x2a60 [ 209.024787][ T7901] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 209.030375][ T7901] ? __pfx_udp_sendmsg+0x10/0x10 [ 209.035381][ T7901] ? aa_sk_perm+0x96d/0xab0 [ 209.039979][ T7901] ? __pfx_aa_sk_perm+0x10/0x10 [ 209.044870][ T7901] ? iovec_from_user+0x61/0x240 [ 209.049777][ T7901] ? inet_sendmsg+0x2ba/0x390 [ 209.054505][ T7901] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 209.059837][ T7901] ? security_socket_sendmsg+0x87/0xb0 [ 209.065358][ T7901] __sock_sendmsg+0x1a6/0x270 [ 209.070069][ T7901] ____sys_sendmsg+0x525/0x7d0 [ 209.074884][ T7901] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.080244][ T7901] __sys_sendmmsg+0x3b2/0x740 [ 209.084983][ T7901] ? __pfx___sys_sendmmsg+0x10/0x10 [ 209.090269][ T7901] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 209.096216][ T7901] ? ksys_write+0x23e/0x2c0 [ 209.100769][ T7901] ? __pfx_lock_release+0x10/0x10 [ 209.105856][ T7901] ? vfs_write+0x7c4/0xc90 [ 209.110327][ T7901] ? __mutex_unlock_slowpath+0x21d/0x750 [ 209.116009][ T7901] ? __pfx_vfs_write+0x10/0x10 [ 209.120858][ T7901] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 209.126878][ T7901] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 209.133245][ T7901] ? do_syscall_64+0x100/0x230 [ 209.138060][ T7901] __x64_sys_sendmmsg+0xa0/0xb0 [ 209.142962][ T7901] do_syscall_64+0xf3/0x230 [ 209.147500][ T7901] ? clear_bhb_loop+0x35/0x90 [ 209.152220][ T7901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.158149][ T7901] RIP: 0033:0x7fe6d1579ef9 [ 209.162656][ T7901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.182305][ T7901] RSP: 002b:00007fe6d23f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 209.190775][ T7901] RAX: ffffffffffffffda RBX: 00007fe6d1715f80 RCX: 00007fe6d1579ef9 [ 209.198788][ T7901] RDX: 0400000000000077 RSI: 0000000020000180 RDI: 0000000000000003 [ 209.206800][ T7901] RBP: 00007fe6d23f3090 R08: 0000000000000000 R09: 0000000000000000 [ 209.214811][ T7901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.222815][ T7901] R13: 0000000000000000 R14: 00007fe6d1715f80 R15: 00007ffdb16d1788 [ 209.230842][ T7901] [ 209.373076][ T7913] openvswitch: netlink: ct_state flags 00008300 unsupported [ 209.454403][ T7916] FAULT_INJECTION: forcing a failure. [ 209.454403][ T7916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.503806][ T7916] CPU: 0 UID: 0 PID: 7916 Comm: syz.4.703 Not tainted 6.11.0-rc4-syzkaller-00686-ge24a6c874601 #0 [ 209.514472][ T7916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 209.524570][ T7916] Call Trace: [ 209.527887][ T7916] [ 209.530857][ T7916] dump_stack_lvl+0x241/0x360 [ 209.535583][ T7916] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.540829][ T7916] ? __pfx__printk+0x10/0x10 [ 209.545465][ T7916] ? __pfx_lock_release+0x10/0x10 [ 209.550545][ T7916] should_fail_ex+0x3b0/0x4e0 [ 209.555277][ T7916] _copy_from_user+0x2f/0xe0 [ 209.559921][ T7916] copy_msghdr_from_user+0xae/0x680 [ 209.565159][ T7916] ? __pfx___might_resched+0x10/0x10 [ 209.570577][ T7916] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 209.576431][ T7916] ? __might_fault+0xaa/0x120 [ 209.581169][ T7916] __sys_sendmmsg+0x374/0x740 [ 209.585907][ T7916] ? __pfx___sys_sendmmsg+0x10/0x10 [ 209.591194][ T7916] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 209.597153][ T7916] ? ksys_write+0x23e/0x2c0 [ 209.601706][ T7916] ? __pfx_lock_release+0x10/0x10 [ 209.606867][ T7916] ? vfs_write+0x7c4/0xc90 [ 209.611366][ T7916] ? __mutex_unlock_slowpath+0x21d/0x750 [ 209.617046][ T7916] ? __pfx_vfs_write+0x10/0x10 [ 209.621862][ T7916] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 209.627864][ T7916] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 209.634237][ T7916] ? do_syscall_64+0x100/0x230 [ 209.639020][ T7916] __x64_sys_sendmmsg+0xa0/0xb0 [ 209.643888][ T7916] do_syscall_64+0xf3/0x230 [ 209.648407][ T7916] ? clear_bhb_loop+0x35/0x90 [ 209.653102][ T7916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.659007][ T7916] RIP: 0033:0x7f8544379ef9 [ 209.663434][ T7916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.683142][ T7916] RSP: 002b:00007f854523a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 209.691566][ T7916] RAX: ffffffffffffffda RBX: 00007f8544515f80 RCX: 00007f8544379ef9 [ 209.699543][ T7916] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 209.707517][ T7916] RBP: 00007f854523a090 R08: 0000000000000000 R09: 0000000000000000 [ 209.715495][ T7916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.723480][ T7916] R13: 0000000000000000 R14: 00007f8544515f80 R15: 00007fffbd4aad08 [ 209.731474][ T7916] [ 209.769431][ T7924] netlink: 96 bytes leftover after parsing attributes in process `syz.1.704'. [ 209.812302][ T7924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.704'. [ 210.198197][ T7945] netlink: 2096 bytes leftover after parsing attributes in process `syz.3.713'. [ 210.211018][ T7940] siw: device registration error -23 [ 210.218083][ T7945] netlink: 58 bytes leftover after parsing attributes in process `syz.3.713'. [ 210.237326][ T7945] netlink: 58 bytes leftover after parsing attributes in process `syz.3.713'. [ 210.713225][ T7962] netlink: 96 bytes leftover after parsing attributes in process `syz.3.717'. [ 210.764451][ T7962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.717'. [ 211.064428][ T7981] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 211.102859][ T7981] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 211.311839][ T7998] openvswitch: netlink: ct_state flags 00008300 unsupported [ 211.489156][ T8000] openvswitch: netlink: ct_state flags 00008300 unsupported [ 211.759227][ T8019] netlink: 'syz.3.735': attribute type 1 has an invalid length. [ 211.884683][ T8021] netlink: 'syz.0.736': attribute type 3 has an invalid length. [ 211.977534][ T8025] openvswitch: netlink: ct_state flags 00008300 unsupported [ 212.268083][ T8040] openvswitch: netlink: ct_state flags 00008300 unsupported [ 212.281595][ T8039] siw: device registration error -23 [ 212.428371][ T8047] netlink: 'syz.3.744': attribute type 4 has an invalid length. [ 212.646829][ T8057] netlink: 'syz.4.747': attribute type 1 has an invalid length. [ 212.712733][ T29] audit: type=1107 audit(1724905488.902:18): pid=8063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<|KÏüÑ,÷íÂ-øÐ"5³)ÛõK©XÎ骵$âý‚÷‚}« R¾˜…¹,¼`’ [ 212.712733][ T29] =õ·¤˜°J,PV"’«÷%öøa›]ØŽZ”îTe¤¡u­Mûz˜;ÑXëd­ò²bÚÔráP¤z›ýa±ù׌ðg$W©pk)Ï' [ 212.992646][ T8078] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 213.046265][ T8075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.228302][ T8085] __nla_validate_parse: 8 callbacks suppressed [ 213.228326][ T8085] netlink: 20 bytes leftover after parsing attributes in process `syz.4.758'. [ 213.444073][ T8099] netlink: 'syz.3.761': attribute type 1 has an invalid length. [ 213.453382][ T8099] netlink: 224 bytes leftover after parsing attributes in process `syz.3.761'. [ 213.646711][ T29] audit: type=1107 audit(1724905489.842:19): pid=8101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<|KÏüÑ,÷íÂ-øÐ"5³)ÛõK©XÎ骵$âý‚÷‚}« R¾˜…¹,¼`’ [ 213.646711][ T29] =õ·¤˜°J,PV"’«÷%öøa›]ØŽZ”îTe¤¡u­Mûz˜;ÑXëd­ò²bÚÔráP¤z›ýa±ù׌ðg$W©pk)Ï' [ 213.673295][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.763'. [ 213.675743][ T8102] netlink: 96 bytes leftover after parsing attributes in process `syz.3.762'. [ 213.709643][ T8106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 213.819422][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.767'. [ 213.916442][ T8116] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 214.104747][ T8125] netlink: 'syz.2.772': attribute type 1 has an invalid length. [ 214.123114][ T8125] netlink: 224 bytes leftover after parsing attributes in process `syz.2.772'. [ 214.345315][ T29] audit: type=1107 audit(1724905490.542:20): pid=8137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<|KÏüÑ,÷íÂ-øÐ"5³)ÛõK©XÎ骵$âý‚÷‚}« R¾˜…¹,¼`’ [ 214.345315][ T29] =õ·¤˜°J,PV"’«÷%öøa›]ØŽZ”îTe¤¡u­Mûz˜;ÑXëd­ò²bÚÔráP¤z›ýa±ù׌ðg$W©pk)Ï' [ 214.348025][ T8139] netlink: 96 bytes leftover after parsing attributes in process `syz.3.777'. [ 214.763883][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.784'. [ 214.809035][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.784'. [ 215.274234][ T29] audit: type=1107 audit(1724905491.462:21): pid=8166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<|KÏüÑ,÷íÂ-øÐ"5³)ÛõK©XÎ骵$âý‚÷‚}« R¾˜…¹,¼`’ [ 215.274234][ T29] =õ·¤˜°J,PV"’«÷%öøa›]ØŽZ”îTe¤¡u­Mûz˜;ÑXëd­ò²bÚÔráP¤z›ýa±ù׌ðg$W©pk)Ï' [ 215.938063][ T8189] gtp0: entered promiscuous mode [ 215.950291][ T8189] gtp0: entered allmulticast mode [ 216.246448][ T29] audit: type=1107 audit(1724905492.442:22): pid=8201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<|KÏüÑ,÷íÂ-øÐ"5³)ÛõK©XÎ骵$âý‚÷‚}« R¾˜…¹,¼`’ [ 216.246448][ T29] =õ·¤˜°J,PV"’«÷%öøa›]ØŽZ”îTe¤¡u­Mûz˜;ÑXëd­ò²bÚÔráP¤z›ýa±ù׌ðg$W©pk)Ï' [ 216.683385][ T5250] Bluetooth: hci0: command 0x0c20 tx timeout [ 216.799147][ T8221] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 216.901557][ T8228] macvlan2: entered allmulticast mode [ 216.960382][ T8228] bond0: entered promiscuous mode [ 216.967410][ T8228] bond_slave_0: entered promiscuous mode [ 216.980604][ T8228] bond_slave_1: entered promiscuous mode [ 217.098505][ T29] audit: type=1107 audit(1724905493.292:23): pid=8238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<|KÏüÑ,÷íÂ-øÐ"5³)ÛõK©XÎ骵$âý‚÷‚}« R¾˜…¹,¼`’ [ 217.098505][ T29] =õ·¤˜°J,PV"’«÷%öøa›]ØŽZ”îTe¤¡u­Mûz˜;ÑXëd­ò²bÚÔráP¤z›ýa±ù׌ðg$W©pk)Ï' [ 217.375818][ T8247] netlink: 'syz.1.818': attribute type 9 has an invalid length. [ 217.509663][ T8255] IPVS: length: 132 != 24 [ 217.793558][ T8264] netlink: 'syz.2.824': attribute type 1 has an invalid length. [ 217.833660][ T8265] ipt_REJECT: TCP_RESET invalid for non-tcp [ 217.918544][ T29] audit: type=1107 audit(1724905494.112:24): pid=8268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<|KÏüÑ,÷íÂ-øÐ"5³)ÛõK©XÎ骵$âý‚÷‚}« R¾˜…¹,¼`’ [ 217.918544][ T29] =õ·¤˜°J,PV"’«÷%öøa›]ØŽZ”îTe¤¡u­Mûz˜;ÑXëd­ò²bÚÔráP¤z›ýa±ù׌ðg$W©pk)Ï' [ 218.023553][ T8271] netlink: 'syz.2.828': attribute type 1 has an invalid length. [ 218.537930][ T8295] __nla_validate_parse: 24 callbacks suppressed [ 218.537951][ T8295] netlink: 224 bytes leftover after parsing attributes in process `syz.4.835'. [ 218.635754][ T8296] macvlan2: entered allmulticast mode [ 218.711993][ T8298] netlink: 'syz.4.836': attribute type 1 has an invalid length. [ 218.728967][ T8298] netlink: 224 bytes leftover after parsing attributes in process `syz.4.836'. [ 218.756491][ T5243] Bluetooth: hci0: command 0x0c20 tx timeout [ 218.764235][ T5250] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 218.779307][ T29] audit: type=1107 audit(1724905494.972:25): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<|KÏüÑ,÷íÂ-øÐ"5³)ÛõK©XÎ骵$âý‚÷‚}« R¾˜…¹,¼`’ [ 218.779307][ T29] =õ·¤˜°J,PV"’«÷%öøa›]ØŽZ”îTe¤¡u­Mûz˜;ÑXëd­ò²bÚÔráP¤z›ýa±ù׌ðg$W©pk)Ï' [ 218.789048][ T8301] netlink: 96 bytes leftover after parsing attributes in process `syz.0.838'. [ 218.944823][ T8305] netlink: 28 bytes leftover after parsing attributes in process `syz.0.840'. [ 218.962596][ T8306] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.839'. [ 218.998405][ T8306] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 219.030035][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.841'. [ 219.172027][ T8314] netlink: 96 bytes leftover after parsing attributes in process `syz.1.842'. [ 219.188130][ T8314] netlink: 16 bytes leftover after parsing attributes in process `syz.1.842'. [ 219.413802][ T8325] netlink: 'syz.0.846': attribute type 10 has an invalid length. [ 219.425216][ T8327] netlink: zone id is out of range [ 219.430484][ T8327] netlink: zone id is out of range [ 219.441119][ T8327] netlink: zone id is out of range [ 219.464300][ T8327] netlink: zone id is out of range [ 219.469485][ T8327] netlink: zone id is out of range [ 219.501542][ T8327] netlink: zone id is out of range [ 219.507500][ T8327] netlink: zone id is out of range [ 219.517640][ T8327] netlink: zone id is out of range [ 219.525225][ T8327] netlink: zone id is out of range [ 219.605100][ T29] audit: type=1107 audit(1724905495.802:26): pid=8332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<|KÏüÑ,÷íÂ-øÐ"5³)ÛõK©XÎ骵$âý‚÷‚}« R¾˜…¹,¼`’ [ 219.605100][ T29] =õ·¤˜°J,PV"’«÷%öøa›]ØŽZ”îTe¤¡u­Mûz˜;ÑXëd­ò²bÚÔráP¤z›ýa±ù׌ðg$W©pk)Ï' [ 219.631279][ T8334] netlink: 96 bytes leftover after parsing attributes in process `syz.0.850'. [ 219.663360][ T8335] netlink: 'syz.1.847': attribute type 15 has an invalid length. [ 219.808035][ T8340] netlink: 'syz.0.851': attribute type 1 has an invalid length. [ 219.822191][ T8341] macvlan3: entered allmulticast mode [ 219.827947][ T8340] netlink: 224 bytes leftover after parsing attributes in process `syz.0.851'. [ 220.180597][ T8357] netlink: 'syz.0.857': attribute type 9 has an invalid length. [ 220.490440][ T29] audit: type=1107 audit(1724905496.682:27): pid=8369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<|KÏüÑ,÷íÂ-øÐ"5³)ÛõK©XÎ骵$âý‚÷‚}« R¾˜…¹,¼`’ [ 220.490440][ T29] =õ·¤˜°J,PV"’«÷%öøa›]ØŽZ”îTe¤¡u­Mûz˜;ÑXëd­ò²bÚÔráP¤z›ýa±ù׌ðg$W©pk)Ï' [ 220.832754][ T5243] Bluetooth: hci0: command 0x0c20 tx timeout [ 220.850715][ T8381] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.893782][ T8381] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.919302][ T8381] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.938331][ T8381] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.298867][ T8392] FAULT_INJECTION: forcing a failure. [ 221.298867][ T8392] name failslab, interval 1, probability 0, space 0, times 0 [ 221.311827][ T8392] CPU: 0 UID: 0 PID: 8392 Comm: syz.2.868 Not tainted 6.11.0-rc4-syzkaller-00686-ge24a6c874601 #0 [ 221.322447][ T8392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 221.332530][ T8392] Call Trace: [ 221.335826][ T8392] [ 221.338767][ T8392] dump_stack_lvl+0x241/0x360 [ 221.343469][ T8392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.348686][ T8392] ? __pfx__printk+0x10/0x10 [ 221.353288][ T8392] should_fail_ex+0x3b0/0x4e0 [ 221.357988][ T8392] ? skb_clone+0x20c/0x390 [ 221.362424][ T8392] should_failslab+0xac/0x100 [ 221.367158][ T8392] ? skb_clone+0x20c/0x390 [ 221.371596][ T8392] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 221.376987][ T8392] skb_clone+0x20c/0x390 [ 221.381242][ T8392] ? dev_queue_xmit_nit+0x220/0xc10 [ 221.386463][ T8392] dev_queue_xmit_nit+0x419/0xc10 [ 221.391508][ T8392] ? dev_queue_xmit_nit+0x2b/0xc10 [ 221.396635][ T8392] ? validate_xmit_skb+0x9f9/0x1120 [ 221.401851][ T8392] dev_hard_start_xmit+0x15f/0x7e0 [ 221.407004][ T8392] ? __pfx_validate_xmit_skb+0x10/0x10 [ 221.412503][ T8392] __dev_queue_xmit+0x1b63/0x3e90 [ 221.417550][ T8392] ? kasan_save_track+0x51/0x80 [ 221.422426][ T8392] ? do_syscall_64+0xf3/0x230 [ 221.427120][ T8392] ? __dev_queue_xmit+0x2da/0x3e90 [ 221.432251][ T8392] ? __pfx___dev_queue_xmit+0x10/0x10 [ 221.437654][ T8392] ? __copy_skb_header+0x437/0x5b0 [ 221.442782][ T8392] ? __asan_memcpy+0x40/0x70 [ 221.447404][ T8392] ? skb_clone+0x240/0x390 [ 221.451838][ T8392] __netlink_deliver_tap+0x54d/0x7c0 [ 221.457164][ T8392] ? netlink_deliver_tap+0x2e/0x1b0 [ 221.462376][ T8392] netlink_deliver_tap+0x19d/0x1b0 [ 221.467512][ T8392] netlink_unicast+0x7c4/0x990 [ 221.472305][ T8392] ? __pfx_netlink_unicast+0x10/0x10 [ 221.477614][ T8392] ? __virt_addr_valid+0x183/0x530 [ 221.482738][ T8392] ? __check_object_size+0x49c/0x900 [ 221.488031][ T8392] ? bpf_lsm_netlink_send+0x9/0x10 [ 221.493159][ T8392] netlink_sendmsg+0x8e4/0xcb0 [ 221.497972][ T8392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.503277][ T8392] ? aa_sock_msg_perm+0x91/0x160 [ 221.508233][ T8392] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 221.513533][ T8392] ? security_socket_sendmsg+0x87/0xb0 [ 221.519015][ T8392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.524326][ T8392] __sock_sendmsg+0x221/0x270 [ 221.529035][ T8392] __sys_sendto+0x3a4/0x4f0 [ 221.533557][ T8392] ? __pfx___sys_sendto+0x10/0x10 [ 221.538614][ T8392] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 221.544614][ T8392] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 221.550959][ T8392] __x64_sys_sendto+0xde/0x100 [ 221.555742][ T8392] do_syscall_64+0xf3/0x230 [ 221.560257][ T8392] ? clear_bhb_loop+0x35/0x90 [ 221.564956][ T8392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.570870][ T8392] RIP: 0033:0x7f4c7fb7bd8c [ 221.575297][ T8392] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 221.594912][ T8392] RSP: 002b:00007f4c808d6ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 221.603344][ T8392] RAX: ffffffffffffffda RBX: 00007f4c808d6fc0 RCX: 00007f4c7fb7bd8c [ 221.611321][ T8392] RDX: 0000000000000020 RSI: 00007f4c808d7010 RDI: 0000000000000007 [ 221.619301][ T8392] RBP: 0000000000000000 R08: 00007f4c808d6f14 R09: 000000000000000c [ 221.627278][ T8392] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 221.635252][ T8392] R13: 00007f4c808d6f68 R14: 00007f4c808d7010 R15: 0000000000000000 [ 221.643250][ T8392] [ 221.921336][ T29] audit: type=1107 audit(1724905498.112:28): pid=8400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<|KÏüÑ,÷íÂ-øÐ"5³)ÛõK©XÎ骵$âý‚÷‚}« R¾˜…¹,¼`’ [ 221.921336][ T29] =õ·¤˜°J,PV"’«÷%öøa›]ØŽZ”îTe¤¡u­Mûz˜;ÑXëd­ò²bÚÔráP¤z›ýa±ù׌ðg$W©pk)Ï' [ 222.101358][ T8410] siw: device registration error -23 [ 222.149076][ T8411] netlink: 'syz.4.871': attribute type 9 has an invalid length. [ 222.368089][ T8422] delete_channel: no stack [ 222.912517][ T5250] Bluetooth: hci0: command 0x0c20 tx timeout [ 222.979963][ T29] audit: type=1107 audit(1724905499.172:29): pid=8444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<|KÏüÑ,÷íÂ-øÐ"5³)ÛõK©XÎ骵$âý‚÷‚}« R¾˜…¹,¼`’ [ 222.979963][ T29] =õ·¤˜°J,PV"’«÷%öøa›]ØŽZ”îTe¤¡u­Mûz˜;ÑXëd­ò²bÚÔráP¤z›ýa±ù׌ðg$W©pk)Ï' [ 223.137391][ T8450] netlink: 'syz.1.889': attribute type 9 has an invalid length. [ 223.275918][ T8456] siw: device registration error -23 [ 223.329476][ T8459] sctp: [Deprecated]: syz.1.892 (pid 8459) Use of int in maxseg socket option. [ 223.329476][ T8459] Use struct sctp_assoc_value instead [ 223.603896][ T8470] FAULT_INJECTION: forcing a failure. [ 223.603896][ T8470] name failslab, interval 1, probability 0, space 0, times 0 [ 223.640875][ T8470] CPU: 1 UID: 0 PID: 8470 Comm: syz.3.895 Not tainted 6.11.0-rc4-syzkaller-00686-ge24a6c874601 #0 [ 223.651536][ T8470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 223.661624][ T8470] Call Trace: [ 223.664935][ T8470] [ 223.667902][ T8470] dump_stack_lvl+0x241/0x360 [ 223.672626][ T8470] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.677864][ T8470] ? __pfx__printk+0x10/0x10 [ 223.682499][ T8470] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 223.687988][ T8470] ? __pfx___might_resched+0x10/0x10 [ 223.693289][ T8470] should_fail_ex+0x3b0/0x4e0 [ 223.695738][ T8475] __nla_validate_parse: 17 callbacks suppressed [ 223.695758][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.896'. [ 223.697974][ T8470] should_failslab+0xac/0x100 [ 223.717674][ T8470] ? nf_tables_newtable+0x52c/0x1e10 [ 223.722999][ T8470] __kmalloc_cache_noprof+0x6c/0x2c0 [ 223.728335][ T8470] ? nft_pernet+0x23/0x240 [ 223.732793][ T8470] nf_tables_newtable+0x52c/0x1e10 [ 223.737964][ T8470] ? nfnl_pernet+0x23/0x240 [ 223.742516][ T8470] ? __pfx_nf_tables_newtable+0x10/0x10 [ 223.748105][ T8470] ? __nla_parse+0x40/0x60 [ 223.752562][ T8470] nfnetlink_rcv+0x14dc/0x2ab0 [ 223.757380][ T8470] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 223.762573][ T8470] ? netlink_deliver_tap+0x2e/0x1b0 [ 223.767795][ T8470] ? skb_clone+0x240/0x390 [ 223.772220][ T8470] ? __pfx_lock_release+0x10/0x10 [ 223.777268][ T8470] ? netlink_deliver_tap+0x2e/0x1b0 [ 223.782487][ T8470] netlink_unicast+0x7f6/0x990 [ 223.787316][ T8470] ? __pfx_netlink_unicast+0x10/0x10 [ 223.792618][ T8470] ? __virt_addr_valid+0x183/0x530 [ 223.797770][ T8470] ? __check_object_size+0x49c/0x900 [ 223.803094][ T8470] ? bpf_lsm_netlink_send+0x9/0x10 [ 223.808253][ T8470] netlink_sendmsg+0x8e4/0xcb0 [ 223.813070][ T8470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.818407][ T8470] ? __import_iovec+0x536/0x820 [ 223.823383][ T8470] ? aa_sock_msg_perm+0x91/0x160 [ 223.828359][ T8470] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 223.833667][ T8470] ? security_socket_sendmsg+0x87/0xb0 [ 223.839178][ T8470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.844487][ T8470] __sock_sendmsg+0x221/0x270 [ 223.849174][ T8470] ____sys_sendmsg+0x525/0x7d0 [ 223.853971][ T8470] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.859295][ T8470] __sys_sendmsg+0x2b0/0x3a0 [ 223.863932][ T8470] ? __pfx___sys_sendmsg+0x10/0x10 [ 223.869065][ T8470] ? vfs_write+0x7c4/0xc90 [ 223.873551][ T8470] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 223.879914][ T8470] ? do_syscall_64+0x100/0x230 [ 223.884702][ T8470] ? do_syscall_64+0xb6/0x230 [ 223.889411][ T8470] do_syscall_64+0xf3/0x230 [ 223.893921][ T8470] ? clear_bhb_loop+0x35/0x90 [ 223.898608][ T8470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.904520][ T8470] RIP: 0033:0x7f6e64b79ef9 [ 223.908961][ T8470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.928598][ T8470] RSP: 002b:00007f6e6598b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.937121][ T8470] RAX: ffffffffffffffda RBX: 00007f6e64d15f80 RCX: 00007f6e64b79ef9 [ 223.945101][ T8470] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 223.953089][ T8470] RBP: 00007f6e6598b090 R08: 0000000000000000 R09: 0000000000000000 [ 223.961089][ T8470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.969159][ T8470] R13: 0000000000000000 R14: 00007f6e64d15f80 R15: 00007ffc9b9c5f48 [ 223.977152][ T8470] [ 223.990911][ T8478] netlink: 28 bytes leftover after parsing attributes in process `syz.4.898'. [ 224.204467][ T29] audit: type=1107 audit(1724905500.402:30): pid=8483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<|KÏüÑ,÷íÂ-øÐ"5³)ÛõK©XÎ骵$âý‚÷‚}« R¾˜…¹,¼`’ [ 224.204467][ T29] =õ·¤˜°J,PV"’«÷%öøa›]ØŽZ”îTe¤¡u­Mûz˜;ÑXëd­ò²bÚÔráP¤z›ýa±ù׌ðg$W©pk)Ï' [ 224.236441][ T8485] netlink: 96 bytes leftover after parsing attributes in process `syz.0.900'. [ 224.347912][ T8490] netlink: 'syz.4.901': attribute type 11 has an invalid length. [ 224.440336][ T8494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.903'. [ 224.463065][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.903'. [ 224.482865][ T8492] netlink: 'syz.0.902': attribute type 9 has an invalid length. [ 224.491419][ T8494] netlink: 44 bytes leftover after parsing attributes in process `syz.2.903'. [ 224.497865][ T8492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.902'. [ 224.576607][ T8492] netlink: 32 bytes leftover after parsing attributes in process `syz.0.902'. [ 225.016710][ T29] audit: type=1107 audit(1724905501.212:31): pid=8519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<|KÏüÑ,÷íÂ-øÐ"5³)ÛõK©XÎ骵$âý‚÷‚}« R¾˜…¹,¼`’ [ 225.016710][ T29] =õ·¤˜°J,PV"’«÷%öøa›]ØŽZ”îTe¤¡u­Mûz˜;ÑXëd­ò²bÚÔráP¤z›ýa±ù׌ðg$W©pk)Ï' [ 225.048105][ T8520] netlink: 96 bytes leftover after parsing attributes in process `syz.0.912'. [ 225.232966][ T8533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.914'. [ 226.658290][ T8531] netlink: 'syz.2.915': attribute type 4 has an invalid length. [ 226.669992][ T8536] netlink: 'syz.3.918': attribute type 9 has an invalid length. [ 226.719922][ T8538] FAULT_INJECTION: forcing a failure. [ 226.719922][ T8538] name failslab, interval 1, probability 0, space 0, times 0 [ 226.742597][ T8538] CPU: 0 UID: 0 PID: 8538 Comm: syz.1.919 Not tainted 6.11.0-rc4-syzkaller-00686-ge24a6c874601 #0 [ 226.753252][ T8538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 226.763338][ T8538] Call Trace: [ 226.766659][ T8538] [ 226.769615][ T8538] dump_stack_lvl+0x241/0x360 [ 226.774338][ T8538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.779610][ T8538] ? __pfx__printk+0x10/0x10 [ 226.784246][ T8538] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 226.789742][ T8538] ? __pfx___might_resched+0x10/0x10 [ 226.795071][ T8538] should_fail_ex+0x3b0/0x4e0 [ 226.799798][ T8538] should_failslab+0xac/0x100 [ 226.804524][ T8538] ? netlbl_mgmt_add_common+0xa89/0x1320 [ 226.810199][ T8538] __kmalloc_cache_noprof+0x6c/0x2c0 [ 226.815524][ T8538] netlbl_mgmt_add_common+0xa89/0x1320 [ 226.821053][ T8538] netlbl_mgmt_add+0x312/0x3a0 [ 226.825864][ T8538] ? __nla_parse+0x40/0x60 [ 226.830321][ T8538] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 226.835636][ T8538] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 226.841996][ T8538] genl_rcv_msg+0xb14/0xec0 [ 226.846543][ T8538] ? mark_lock+0x9a/0x350 [ 226.850909][ T8538] ? __pfx_genl_rcv_msg+0x10/0x10 [ 226.855981][ T8538] ? __pfx_lock_acquire+0x10/0x10 [ 226.861031][ T8538] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 226.866332][ T8538] ? __pfx___might_resched+0x10/0x10 [ 226.871643][ T8538] netlink_rcv_skb+0x1e3/0x430 [ 226.876427][ T8538] ? __pfx_genl_rcv_msg+0x10/0x10 [ 226.881474][ T8538] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 226.886799][ T8538] genl_rcv+0x28/0x40 [ 226.890882][ T8538] netlink_unicast+0x7f6/0x990 [ 226.895672][ T8538] ? __pfx_netlink_unicast+0x10/0x10 [ 226.900992][ T8538] ? __virt_addr_valid+0x183/0x530 [ 226.906116][ T8538] ? __check_object_size+0x49c/0x900 [ 226.911419][ T8538] ? bpf_lsm_netlink_send+0x9/0x10 [ 226.916544][ T8538] netlink_sendmsg+0x8e4/0xcb0 [ 226.921330][ T8538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.926630][ T8538] ? __import_iovec+0x536/0x820 [ 226.931523][ T8538] ? aa_sock_msg_perm+0x91/0x160 [ 226.936496][ T8538] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 226.941804][ T8538] ? security_socket_sendmsg+0x87/0xb0 [ 226.947290][ T8538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.952599][ T8538] __sock_sendmsg+0x221/0x270 [ 226.957312][ T8538] ____sys_sendmsg+0x525/0x7d0 [ 226.962111][ T8538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.967519][ T8538] __sys_sendmsg+0x2b0/0x3a0 [ 226.972133][ T8538] ? __pfx___sys_sendmsg+0x10/0x10 [ 226.977265][ T8538] ? vfs_write+0x7c4/0xc90 [ 226.981742][ T8538] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 226.988094][ T8538] ? do_syscall_64+0x100/0x230 [ 226.992873][ T8538] ? do_syscall_64+0xb6/0x230 [ 226.997575][ T8538] do_syscall_64+0xf3/0x230 [ 227.002093][ T8538] ? clear_bhb_loop+0x35/0x90 [ 227.006793][ T8538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.012704][ T8538] RIP: 0033:0x7fe6d1579ef9 [ 227.017238][ T8538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.036979][ T8538] RSP: 002b:00007fe6d23f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.045415][ T8538] RAX: ffffffffffffffda RBX: 00007fe6d1715f80 RCX: 00007fe6d1579ef9 [ 227.053398][ T8538] RDX: 0000000000004000 RSI: 0000000020000480 RDI: 0000000000000005 [ 227.061385][ T8538] RBP: 00007fe6d23f3090 R08: 0000000000000000 R09: 0000000000000000 [ 227.069458][ T8538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.077436][ T8538] R13: 0000000000000000 R14: 00007fe6d1715f80 R15: 00007ffdb16d1788 [ 227.085452][ T8538] [ 227.092795][ T8546] netlink: 'syz.4.920': attribute type 3 has an invalid length. [ 227.376805][ T29] audit: type=1107 audit(1724905503.572:32): pid=8557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<|KÏüÑ,÷íÂ-øÐ"5³)ÛõK©XÎ骵$âý‚÷‚}« R¾˜…¹,¼`’ [ 227.376805][ T29] =õ·¤˜°J,PV"’«÷%öøa›]ØŽZ”îTe¤¡u­Mûz˜;ÑXëd­ò²bÚÔráP¤z›ýa±ù׌ðg$W©pk)Ï' [ 227.986751][ T8589] netlink: 'syz.1.936': attribute type 9 has an invalid length. [ 228.130934][ T8593] : entered promiscuous mode [ 228.146514][ T29] audit: type=1107 audit(1724905504.342:33): pid=8594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<|KÏüÑ,÷íÂ-øÐ"5³)ÛõK©XÎ骵$âý‚÷‚}« R¾˜…¹,¼`’ [ 228.146514][ T29] =õ·¤˜°J,PV"’«÷%öøa›]ØŽZ”îTe¤¡u­Mûz˜;ÑXëd­ò²bÚÔráP¤z›ýa±ù׌ðg$W©pk)Ï' [ 228.486917][ T8604] IPv6: sit1: Disabled Multicast RS [ 228.616751][ T8606] netlink: 'syz.2.944': attribute type 5 has an invalid length. [ 228.747324][ T8617] __nla_validate_parse: 14 callbacks suppressed [ 228.747344][ T8617] netlink: 16 bytes leftover after parsing attributes in process `syz.1.947'. [ 228.777549][ T8617] FAULT_INJECTION: forcing a failure. [ 228.777549][ T8617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.815243][ T8617] CPU: 0 UID: 0 PID: 8617 Comm: syz.1.947 Not tainted 6.11.0-rc4-syzkaller-00686-ge24a6c874601 #0 [ 228.825892][ T8617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 228.835981][ T8617] Call Trace: [ 228.839291][ T8617] [ 228.842263][ T8617] dump_stack_lvl+0x241/0x360 [ 228.846984][ T8617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.852218][ T8617] ? __pfx__printk+0x10/0x10 [ 228.856850][ T8617] ? snprintf+0xda/0x120 [ 228.861135][ T8617] should_fail_ex+0x3b0/0x4e0 [ 228.865855][ T8617] _copy_to_user+0x2f/0xb0 [ 228.870318][ T8617] simple_read_from_buffer+0xca/0x150 [ 228.875732][ T8617] proc_fail_nth_read+0x1ec/0x260 [ 228.880809][ T8617] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 228.886396][ T8617] ? rw_verify_area+0x520/0x6b0 [ 228.891282][ T8617] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 228.896873][ T8617] vfs_read+0x204/0xbc0 [ 228.901065][ T8617] ? __pfx_lock_release+0x10/0x10 [ 228.906157][ T8617] ? __pfx_vfs_read+0x10/0x10 [ 228.910889][ T8617] ? __fget_files+0x29/0x470 [ 228.915522][ T8617] ? __fget_files+0x3f6/0x470 [ 228.920258][ T8617] ksys_read+0x1a0/0x2c0 [ 228.924564][ T8617] ? __pfx_ksys_read+0x10/0x10 [ 228.929343][ T8617] ? do_syscall_64+0x100/0x230 [ 228.934121][ T8617] ? do_syscall_64+0xb6/0x230 [ 228.938817][ T8617] do_syscall_64+0xf3/0x230 [ 228.943333][ T8617] ? clear_bhb_loop+0x35/0x90 [ 228.948035][ T8617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.953945][ T8617] RIP: 0033:0x7fe6d157893c [ 228.958370][ T8617] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 228.977993][ T8617] RSP: 002b:00007fe6d23f3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 228.986418][ T8617] RAX: ffffffffffffffda RBX: 00007fe6d1715f80 RCX: 00007fe6d157893c [ 228.994397][ T8617] RDX: 000000000000000f RSI: 00007fe6d23f30a0 RDI: 0000000000000004 [ 229.002471][ T8617] RBP: 00007fe6d23f3090 R08: 0000000000000000 R09: 0000000000000000 [ 229.010554][ T8617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.018632][ T8617] R13: 0000000000000000 R14: 00007fe6d1715f80 R15: 00007ffdb16d1788 [ 229.026635][ T8617] [ 229.079037][ T8624] netlink: 'syz.3.950': attribute type 9 has an invalid length. [ 229.092459][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.950'. [ 229.121411][ T8626] wlan1 speed is unknown, defaulting to 1000 [ 229.121431][ T8624] netlink: 32 bytes leftover after parsing attributes in process `syz.3.950'. [ 229.222281][ T8620] syzkaller0: entered promiscuous mode [ 229.237082][ T29] audit: type=1107 audit(1724905505.432:34): pid=8627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<|KÏüÑ,÷íÂ-øÐ"5³)ÛõK©XÎ骵$âý‚÷‚}« R¾˜…¹,¼`’ [ 229.237082][ T29] =õ·¤˜°J,PV"’«÷%öøa›]ØŽZ”îTe¤¡u­Mûz˜;ÑXëd­ò²bÚÔráP¤z›ýa±ù׌ðg$W©pk)Ï' [ 229.264885][ T8628] netlink: 96 bytes leftover after parsing attributes in process `syz.1.952'. [ 229.285021][ T8620] syzkaller0: entered allmulticast mode [ 229.297190][ T8626] wlan1 speed is unknown, defaulting to 1000 [ 229.464980][ T8632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.953'. [ 229.478268][ T8626] wlan1 speed is unknown, defaulting to 1000 [ 229.520444][ T8626] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 230.910952][ T8642] netlink: 36 bytes leftover after parsing attributes in process `syz.3.954'. [ 230.920937][ T8626] wlan1 speed is unknown, defaulting to 1000 [ 230.945098][ T8648] netlink: 16 bytes leftover after parsing attributes in process `syz.1.956'. [ 231.072270][ T8655] net_ratelimit: 497 callbacks suppressed [ 231.072293][ T8655] openvswitch: netlink: ct_state flags 00008300 unsupported [ 231.078822][ T8626] wlan1 speed is unknown, defaulting to 1000 [ 231.100066][ T8626] wlan1 speed is unknown, defaulting to 1000 [ 231.125634][ T8659] netlink: 96 bytes leftover after parsing attributes in process `syz.3.958'. [ 231.134050][ T8626] wlan1 speed is unknown, defaulting to 1000 [ 231.151898][ T8626] wlan1 speed is unknown, defaulting to 1000 [ 231.202762][ T8659] netlink: 16 bytes leftover after parsing attributes in process `syz.3.958'. [ 231.359761][ T8664] netlink: 64 bytes leftover after parsing attributes in process `syz.1.962'. [ 231.563977][ T8671] netlink: 'syz.0.964': attribute type 9 has an invalid length. [ 231.578056][ T29] audit: type=1107 audit(1724905507.762:35): pid=8672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<|KÏüÑ,÷íÂ-øÐ"5³)ÛõK©XÎ骵$âý‚÷‚}« R¾˜…¹,¼`’ [ 231.578056][ T29] =õ·¤˜°J,PV"’«÷%öøa›]ØŽZ”îTe¤¡u­Mûz˜;ÑXëd­ò²bÚÔráP¤z›ýa±ù׌ðg$W©pk)Ï' [ 232.065242][ T8690] netlink: 'syz.1.969': attribute type 10 has an invalid length. [ 232.165863][ T8690] team0: Port device netdevsim0 added [ 232.186429][ T8699] openvswitch: netlink: ct_state flags 00008300 unsupported [ 232.219817][ T8697] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 232.238717][ T8697] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 232.386968][ T29] audit: type=1107 audit(1724905508.582:36): pid=8707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<|KÏüÑ,÷íÂ-øÐ"5³)ÛõK©XÎ骵$âý‚÷‚}« R¾˜…¹,¼`’ [ 232.386968][ T29] =õ·¤˜°J,PV"’«÷%öøa›]ØŽZ”îTe¤¡u­Mûz˜;ÑXëd­ò²bÚÔráP¤z›ýa±ù׌ðg$W©pk)Ï' [ 232.672065][ T8720] netlink: 'syz.0.979': attribute type 9 has an invalid length. [ 232.890252][ T8734] openvswitch: netlink: ct_state flags 00008300 unsupported [ 232.909322][ T8730] syzkaller0: entered promiscuous mode [ 232.921516][ T8730] syzkaller0: entered allmulticast mode [ 233.150198][ T29] audit: type=1107 audit(1724905509.342:37): pid=8742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<|KÏüÑ,÷íÂ-øÐ"5³)ÛõK©XÎ骵$âý‚÷‚}« R¾˜…¹,¼`’ [ 233.150198][ T29] =õ·¤˜°J,PV"’«÷%öøa›]ØŽZ”îTe¤¡u­Mûz˜;ÑXëd­ò²bÚÔráP¤z›ýa±ù׌ðg$W©pk)Ï' [ 234.741988][ T8740] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.936466][ T8740] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.959492][ T8761] __nla_validate_parse: 13 callbacks suppressed [ 234.959514][ T8761] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.994'. [ 235.054909][ T8765] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.994'. [ 235.066529][ T8765] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 235.077935][ T8766] netlink: 36 bytes leftover after parsing attributes in process `syz.0.993'. [ 235.099466][ T8765] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 235.200933][ T8740] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.328840][ T8740] team0: Port device netdevsim0 removed [ 235.349957][ T8740] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.377603][ T8772] netlink: 16 bytes leftover after parsing attributes in process `syz.0.997'. [ 235.398438][ T8772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.997'. [ 235.557039][ T8740] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.580832][ T8740] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.610228][ T8740] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.656265][ T8740] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.968590][ T8789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1003'. [ 236.029394][ T8784] syzkaller0: entered promiscuous mode [ 236.037961][ T8784] syzkaller0: entered allmulticast mode [ 236.046099][ T8791] netlink: 'syz.4.1004': attribute type 15 has an invalid length. [ 236.488653][ T8808] Cannot find map_set index 63 as target [ 237.940103][ T8811] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1007'. [ 238.155806][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1012'. [ 238.200657][ T8827] Cannot find add_set index 0 as target [ 238.224388][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1014'. [ 238.272569][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1014'. [ 238.365545][ T8833] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 238.543750][ T8847] openvswitch: netlink: ct_state flags 00008300 unsupported [ 238.619344][ T8851] netlink: 'syz.4.1021': attribute type 10 has an invalid length. [ 238.980422][ T8861] syzkaller1: entered promiscuous mode [ 239.012520][ T8861] syzkaller1: entered allmulticast mode [ 239.616705][ T8884] openvswitch: netlink: ct_state flags 00008300 unsupported [ 239.899447][ T8896] sctp: [Deprecated]: syz.1.1038 (pid 8896) Use of int in max_burst socket option. [ 239.899447][ T8896] Use struct sctp_assoc_value instead [ 240.114156][ T8909] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.230244][ T8909] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.314832][ T8909] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.337091][ T8916] netlink: 'syz.1.1043': attribute type 15 has an invalid length. [ 240.357654][ T8915] __nla_validate_parse: 8 callbacks suppressed [ 240.357674][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1044'. [ 240.383381][ T8915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1044'. [ 240.408879][ T8909] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.434942][ T5250] Bluetooth: hci0: command tx timeout [ 240.548144][ T8919] pim6reg527: entered allmulticast mode [ 240.617595][ T8924] openvswitch: netlink: ct_state flags 00008300 unsupported [ 240.646223][ T8909] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.684594][ T8909] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.701706][ T8926] FAULT_INJECTION: forcing a failure. [ 240.701706][ T8926] name failslab, interval 1, probability 0, space 0, times 0 [ 240.725541][ T8926] CPU: 1 UID: 0 PID: 8926 Comm: syz.1.1048 Not tainted 6.11.0-rc4-syzkaller-00686-ge24a6c874601 #0 [ 240.731787][ T8909] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.736249][ T8926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 240.736309][ T8926] Call Trace: [ 240.736321][ T8926] [ 240.736333][ T8926] dump_stack_lvl+0x241/0x360 [ 240.736371][ T8926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.736399][ T8926] ? __pfx__printk+0x10/0x10 [ 240.736428][ T8926] ? __kmalloc_noprof+0xb0/0x400 [ 240.736455][ T8926] ? __pfx___might_resched+0x10/0x10 [ 240.736501][ T8926] should_fail_ex+0x3b0/0x4e0 [ 240.736532][ T8926] ? tls_get_rec+0xca/0x540 [ 240.794868][ T8926] should_failslab+0xac/0x100 [ 240.799603][ T8926] ? tls_get_rec+0xca/0x540 [ 240.803558][ T8909] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.804131][ T8926] __kmalloc_noprof+0xd8/0x400 [ 240.804172][ T8926] tls_get_rec+0xca/0x540 [ 240.821434][ T8926] tls_sw_sendmsg+0x50f/0x2890 [ 240.826290][ T8926] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 240.831546][ T8926] ? __pfx_aa_sk_perm+0x10/0x10 [ 240.836430][ T8926] ? sock_rps_record_flow+0x1a/0x400 [ 240.841794][ T8926] ? inet_send_prepare+0x21/0x260 [ 240.846869][ T8926] ? inet_send_prepare+0x5a/0x260 [ 240.851954][ T8926] __sock_sendmsg+0xef/0x270 [ 240.856588][ T8926] __sys_sendto+0x3a4/0x4f0 [ 240.861143][ T8926] ? __pfx___sys_sendto+0x10/0x10 [ 240.866235][ T8926] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 240.872260][ T8926] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 240.878637][ T8926] __x64_sys_sendto+0xde/0x100 [ 240.883451][ T8926] do_syscall_64+0xf3/0x230 [ 240.888001][ T8926] ? clear_bhb_loop+0x35/0x90 [ 240.892727][ T8926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.898664][ T8926] RIP: 0033:0x7fe6d1579ef9 [ 240.903116][ T8926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.922760][ T8926] RSP: 002b:00007fe6d23f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 240.931220][ T8926] RAX: ffffffffffffffda RBX: 00007fe6d1715f80 RCX: 00007fe6d1579ef9 [ 240.939228][ T8926] RDX: fffffffffffffede RSI: 00000000200001c0 RDI: 0000000000000004 [ 240.947239][ T8926] RBP: 00007fe6d23f3090 R08: 0000000000000000 R09: 0000000003000137 [ 240.955247][ T8926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 240.963251][ T8926] R13: 0000000000000000 R14: 00007fe6d1715f80 R15: 00007ffdb16d1788 [ 240.971281][ T8926] [ 241.019031][ T8925] delete_channel: no stack [ 243.297857][ T8972] siw: device registration error -23 [ 243.676226][ T8994] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1069'. [ 243.692714][ T8994] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1069'. [ 243.713719][ T8994] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1069'. [ 243.745426][ T8994] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 243.910316][ T9004] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.1073'. [ 244.383183][ T9020] xt_CT: You must specify a L4 protocol and not use inversions on it [ 244.402167][ T9020] FAULT_INJECTION: forcing a failure. [ 244.402167][ T9020] name failslab, interval 1, probability 0, space 0, times 0 [ 244.432089][ T9020] CPU: 0 UID: 0 PID: 9020 Comm: syz.0.1080 Not tainted 6.11.0-rc4-syzkaller-00686-ge24a6c874601 #0 [ 244.442829][ T9020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 244.452893][ T9020] Call Trace: [ 244.456216][ T9020] [ 244.459157][ T9020] dump_stack_lvl+0x241/0x360 [ 244.463852][ T9020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.469086][ T9020] ? __pfx__printk+0x10/0x10 [ 244.473696][ T9020] ? __kmalloc_node_noprof+0xb7/0x440 [ 244.479099][ T9020] ? __pfx___might_resched+0x10/0x10 [ 244.484407][ T9020] should_fail_ex+0x3b0/0x4e0 [ 244.489099][ T9020] should_failslab+0xac/0x100 [ 244.493795][ T9020] __kmalloc_node_noprof+0xdf/0x440 [ 244.499005][ T9020] ? __kvmalloc_node_noprof+0x72/0x190 [ 244.504484][ T9020] __kvmalloc_node_noprof+0x72/0x190 [ 244.509871][ T9020] __nf_hook_entries_try_shrink+0x330/0x730 [ 244.515791][ T9020] __nf_unregister_net_hook+0x5cf/0x800 [ 244.521369][ T9020] nf_unregister_net_hooks+0xd0/0x140 [ 244.526788][ T9020] nf_ct_netns_put+0x3bc/0x510 [ 244.531568][ T9020] xt_ct_tg_check+0xa62/0xdf0 [ 244.536263][ T9020] ? __pfx_lock_release+0x10/0x10 [ 244.541309][ T9020] ? __pfx_xt_ct_tg_check+0x10/0x10 [ 244.546521][ T9020] ? trace_contention_end+0x3c/0x120 [ 244.551899][ T9020] ? __mutex_lock+0x2ef/0xd70 [ 244.556594][ T9020] xt_check_target+0x3b9/0xa40 [ 244.561383][ T9020] ? __pfx_xt_check_target+0x10/0x10 [ 244.566699][ T9020] ? xt_find_target+0x1cf/0x200 [ 244.571574][ T9020] translate_table+0x19b3/0x2260 [ 244.576547][ T9020] ? __pfx_translate_table+0x10/0x10 [ 244.581843][ T9020] ? __might_fault+0xaa/0x120 [ 244.586565][ T9020] ? __pfx_lock_release+0x10/0x10 [ 244.591612][ T9020] ? __might_fault+0xc6/0x120 [ 244.596306][ T9020] ? _copy_from_user+0xa6/0xe0 [ 244.601087][ T9020] ? copy_from_sockptr_offset+0x6b/0xb0 [ 244.606643][ T9020] do_ipt_set_ctl+0xe3d/0x1250 [ 244.611419][ T9020] ? __pfx___might_resched+0x10/0x10 [ 244.616717][ T9020] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 244.621924][ T9020] ? __pfx_lock_release+0x10/0x10 [ 244.626987][ T9020] ? __mutex_unlock_slowpath+0x21d/0x750 [ 244.632634][ T9020] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 244.638029][ T9020] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 244.644039][ T9020] ? __pfx_aa_sk_perm+0x10/0x10 [ 244.648900][ T9020] ? module_put+0x13a/0x2d0 [ 244.653415][ T9020] nf_setsockopt+0x295/0x2c0 [ 244.658027][ T9020] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 244.663930][ T9020] do_sock_setsockopt+0x3af/0x720 [ 244.668973][ T9020] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 244.674533][ T9020] ? __fget_files+0x29/0x470 [ 244.679139][ T9020] ? __fget_files+0x3f6/0x470 [ 244.683840][ T9020] __sys_setsockopt+0x1ae/0x250 [ 244.688710][ T9020] __x64_sys_setsockopt+0xb5/0xd0 [ 244.693752][ T9020] do_syscall_64+0xf3/0x230 [ 244.698265][ T9020] ? clear_bhb_loop+0x35/0x90 [ 244.702962][ T9020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.708868][ T9020] RIP: 0033:0x7f375c979ef9 [ 244.713291][ T9020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.732902][ T9020] RSP: 002b:00007f375d845038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 244.741326][ T9020] RAX: ffffffffffffffda RBX: 00007f375cb15f80 RCX: 00007f375c979ef9 [ 244.749324][ T9020] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 244.757321][ T9020] RBP: 00007f375d845090 R08: 00000000000002a0 R09: 0000000000000000 [ 244.765306][ T9020] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000002 [ 244.773291][ T9020] R13: 0000000000000000 R14: 00007f375cb15f80 R15: 00007ffc8a4ee678 [ 244.781288][ T9020] [ 245.221771][ T9046] x_tables: unsorted entry at hook 1 [ 245.387394][ T9055] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 245.418301][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1091'. [ 245.652597][ T9071] netlink: 'syz.4.1098': attribute type 9 has an invalid length. [ 245.660397][ T9071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1098'. [ 245.691639][ T9071] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1098'. [ 245.792630][ T5243] Bluetooth: hci0: command tx timeout [ 245.853976][ T9078] siw: device registration error -23 [ 245.859289][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1103'. [ 245.969764][ T9088] openvswitch: netlink: ct_state flags 00008300 unsupported [ 246.243451][ T9097] FAULT_INJECTION: forcing a failure. [ 246.243451][ T9097] name failslab, interval 1, probability 0, space 0, times 0 [ 246.264096][ T9097] CPU: 0 UID: 0 PID: 9097 Comm: syz.2.1107 Not tainted 6.11.0-rc4-syzkaller-00686-ge24a6c874601 #0 [ 246.274829][ T9097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 246.285013][ T9097] Call Trace: [ 246.288316][ T9097] [ 246.291245][ T9097] dump_stack_lvl+0x241/0x360 [ 246.295943][ T9097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.301148][ T9097] ? __pfx__printk+0x10/0x10 [ 246.305746][ T9097] ? fs_reclaim_acquire+0x93/0x140 [ 246.310887][ T9097] ? __pfx___might_resched+0x10/0x10 [ 246.316197][ T9097] should_fail_ex+0x3b0/0x4e0 [ 246.320906][ T9097] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 246.326669][ T9097] should_failslab+0xac/0x100 [ 246.331400][ T9097] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 246.337164][ T9097] __kmalloc_noprof+0xd8/0x400 [ 246.341962][ T9097] ? kfree+0x4e/0x360 [ 246.345994][ T9097] tomoyo_realpath_from_path+0xcf/0x5e0 [ 246.351593][ T9097] tomoyo_path_number_perm+0x23a/0x880 [ 246.357094][ T9097] ? tomoyo_path_number_perm+0x208/0x880 [ 246.362764][ T9097] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 246.368794][ T9097] ? __fget_files+0x29/0x470 [ 246.373403][ T9097] ? __fget_files+0x3f6/0x470 [ 246.378105][ T9097] ? __fget_files+0x29/0x470 [ 246.382759][ T9097] security_file_ioctl+0x75/0xb0 [ 246.387715][ T9097] __se_sys_ioctl+0x47/0x170 [ 246.392323][ T9097] do_syscall_64+0xf3/0x230 [ 246.396843][ T9097] ? clear_bhb_loop+0x35/0x90 [ 246.401537][ T9097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.407442][ T9097] RIP: 0033:0x7f4c7fb79ef9 [ 246.411867][ T9097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.431481][ T9097] RSP: 002b:00007f4c808d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.439905][ T9097] RAX: ffffffffffffffda RBX: 00007f4c7fd15f80 RCX: 00007f4c7fb79ef9 [ 246.447887][ T9097] RDX: 00000000200002c0 RSI: 00000000000089f0 RDI: 0000000000000003 [ 246.455866][ T9097] RBP: 00007f4c808d8090 R08: 0000000000000000 R09: 0000000000000000 [ 246.463842][ T9097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.471817][ T9097] R13: 0000000000000000 R14: 00007f4c7fd15f80 R15: 00007ffe7baf0598 [ 246.479812][ T9097] [ 246.492484][ T9097] ERROR: Out of memory at tomoyo_realpath_from_path. [ 246.558623][ T9098] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1108'. [ 246.587833][ T9098] netlink: 'syz.3.1108': attribute type 10 has an invalid length. [ 246.639691][ T9108] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1112'. [ 246.649329][ T9108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1112'. [ 246.662769][ T9098] team0: Port device team_slave_0 removed [ 246.694512][ T9109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1111'. [ 246.776968][ T9109] macvlan2: entered allmulticast mode [ 246.857718][ T9117] FAULT_INJECTION: forcing a failure. [ 246.857718][ T9117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.876538][ T9117] CPU: 1 UID: 0 PID: 9117 Comm: syz.0.1115 Not tainted 6.11.0-rc4-syzkaller-00686-ge24a6c874601 #0 [ 246.887283][ T9117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 246.897367][ T9117] Call Trace: [ 246.900657][ T9117] [ 246.903619][ T9117] dump_stack_lvl+0x241/0x360 [ 246.908345][ T9117] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.913558][ T9117] ? __pfx__printk+0x10/0x10 [ 246.918170][ T9117] ? __pfx_lock_release+0x10/0x10 [ 246.923228][ T9117] should_fail_ex+0x3b0/0x4e0 [ 246.927921][ T9117] _copy_from_iter+0x1f6/0x1960 [ 246.932792][ T9117] ? __virt_addr_valid+0x183/0x530 [ 246.937913][ T9117] ? __pfx_lock_release+0x10/0x10 [ 246.942971][ T9117] ? __alloc_skb+0x28f/0x440 [ 246.947573][ T9117] ? __pfx__copy_from_iter+0x10/0x10 [ 246.952872][ T9117] ? __virt_addr_valid+0x183/0x530 [ 246.957994][ T9117] ? __virt_addr_valid+0x183/0x530 [ 246.963111][ T9117] ? __virt_addr_valid+0x45f/0x530 [ 246.968229][ T9117] ? __check_object_size+0x49c/0x900 [ 246.973524][ T9117] netlink_sendmsg+0x73d/0xcb0 [ 246.978309][ T9117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.983623][ T9117] ? __import_iovec+0x536/0x820 [ 246.988504][ T9117] ? aa_sock_msg_perm+0x91/0x160 [ 246.993480][ T9117] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 246.998802][ T9117] ? security_socket_sendmsg+0x87/0xb0 [ 247.004287][ T9117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.009585][ T9117] __sock_sendmsg+0x221/0x270 [ 247.014272][ T9117] ____sys_sendmsg+0x525/0x7d0 [ 247.019058][ T9117] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.024372][ T9117] __sys_sendmsg+0x2b0/0x3a0 [ 247.028986][ T9117] ? __pfx___sys_sendmsg+0x10/0x10 [ 247.034111][ T9117] ? vfs_write+0x7c4/0xc90 [ 247.038577][ T9117] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 247.044923][ T9117] ? do_syscall_64+0x100/0x230 [ 247.049703][ T9117] ? do_syscall_64+0xb6/0x230 [ 247.054391][ T9117] do_syscall_64+0xf3/0x230 [ 247.058903][ T9117] ? clear_bhb_loop+0x35/0x90 [ 247.063616][ T9117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.069540][ T9117] RIP: 0033:0x7f375c979ef9 [ 247.073973][ T9117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.093586][ T9117] RSP: 002b:00007f375d845038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.102019][ T9117] RAX: ffffffffffffffda RBX: 00007f375cb15f80 RCX: 00007f375c979ef9 [ 247.110000][ T9117] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 247.117979][ T9117] RBP: 00007f375d845090 R08: 0000000000000000 R09: 0000000000000000 [ 247.125954][ T9117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.133936][ T9117] R13: 0000000000000000 R14: 00007f375cb15f80 R15: 00007ffc8a4ee678 [ 247.141931][ T9117] [ 247.193674][ T9119] openvswitch: netlink: ct_state flags 00008300 unsupported [ 247.441278][ T9126] siw: device registration error -23 [ 247.562946][ T5243] Bluetooth: hci6: command 0x0405 tx timeout [ 247.909574][ T9147] netlink: 'syz.1.1124': attribute type 1 has an invalid length. [ 247.980029][ T9147] bond1: entered promiscuous mode [ 247.987244][ T9155] lo: entered promiscuous mode [ 247.995743][ T9155] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 248.100823][ T9155] bond1: (slave lo): making interface the new active one [ 248.113506][ T9155] bond1: (slave lo): Enslaving as an active interface with an up link [ 248.133142][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1126'. [ 248.156893][ T9163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1126'. [ 248.230989][ T9168] netlink: 'syz.4.1130': attribute type 1 has an invalid length. [ 248.506240][ T9182] siw: device registration error -23 [ 248.757777][ T9196] netlink: 'syz.2.1140': attribute type 11 has an invalid length. [ 249.115744][ T9208] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.700449][ T9233] siw: device registration error -23 [ 249.969062][ T9251] FAULT_INJECTION: forcing a failure. [ 249.969062][ T9251] name failslab, interval 1, probability 0, space 0, times 0 [ 250.038989][ T9251] CPU: 1 UID: 0 PID: 9251 Comm: syz.0.1156 Not tainted 6.11.0-rc4-syzkaller-00686-ge24a6c874601 #0 [ 250.049752][ T9251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 250.059844][ T9251] Call Trace: [ 250.063154][ T9251] [ 250.066134][ T9251] dump_stack_lvl+0x241/0x360 [ 250.070857][ T9251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.076117][ T9251] ? __pfx__printk+0x10/0x10 [ 250.080752][ T9251] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 250.086342][ T9251] ? __pfx___might_resched+0x10/0x10 [ 250.091678][ T9251] should_fail_ex+0x3b0/0x4e0 [ 250.096375][ T9251] ? skb_clone+0x20c/0x390 [ 250.100809][ T9251] should_failslab+0xac/0x100 [ 250.105510][ T9251] ? skb_clone+0x20c/0x390 [ 250.109945][ T9251] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 250.115327][ T9251] ? __pfx_lock_release+0x10/0x10 [ 250.120393][ T9251] skb_clone+0x20c/0x390 [ 250.124684][ T9251] pfkey_broadcast_one+0x99/0x330 [ 250.129752][ T9251] ? pfkey_broadcast+0x45/0x400 [ 250.134629][ T9251] pfkey_broadcast+0x3ca/0x400 [ 250.139419][ T9251] ? pfkey_broadcast+0x45/0x400 [ 250.144292][ T9251] pfkey_sendmsg+0xe10/0x1050 [ 250.149004][ T9251] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 250.154145][ T9251] ? __might_fault+0xaa/0x120 [ 250.158894][ T9251] ? __pfx_lock_release+0x10/0x10 [ 250.163935][ T9251] ? __import_iovec+0x536/0x820 [ 250.168805][ T9251] ? aa_sock_msg_perm+0x91/0x160 [ 250.173761][ T9251] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 250.179060][ T9251] ? security_socket_sendmsg+0x87/0xb0 [ 250.184542][ T9251] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 250.189667][ T9251] __sock_sendmsg+0x221/0x270 [ 250.194359][ T9251] ____sys_sendmsg+0x525/0x7d0 [ 250.199168][ T9251] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.204479][ T9251] ? __might_fault+0xaa/0x120 [ 250.209177][ T9251] __sys_sendmmsg+0x3b2/0x740 [ 250.213875][ T9251] ? __pfx___sys_sendmmsg+0x10/0x10 [ 250.219119][ T9251] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 250.225033][ T9251] ? ksys_write+0x23e/0x2c0 [ 250.229550][ T9251] ? __pfx_lock_release+0x10/0x10 [ 250.234596][ T9251] ? vfs_write+0x7c4/0xc90 [ 250.239034][ T9251] ? __mutex_unlock_slowpath+0x21d/0x750 [ 250.244679][ T9251] ? __pfx_vfs_write+0x10/0x10 [ 250.249476][ T9251] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 250.255565][ T9251] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 250.261910][ T9251] ? do_syscall_64+0x100/0x230 [ 250.266684][ T9251] __x64_sys_sendmmsg+0xa0/0xb0 [ 250.271555][ T9251] do_syscall_64+0xf3/0x230 [ 250.276072][ T9251] ? clear_bhb_loop+0x35/0x90 [ 250.280770][ T9251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.286675][ T9251] RIP: 0033:0x7f375c979ef9 [ 250.291100][ T9251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.310828][ T9251] RSP: 002b:00007f375d845038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 250.319268][ T9251] RAX: ffffffffffffffda RBX: 00007f375cb15f80 RCX: 00007f375c979ef9 [ 250.327254][ T9251] RDX: 001c15e33101f29d RSI: 0000000020000180 RDI: 0000000000000003 [ 250.335239][ T9251] RBP: 00007f375d845090 R08: 0000000000000000 R09: 0000000000000000 [ 250.343224][ T9251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 250.351222][ T9251] R13: 0000000000000000 R14: 00007f375cb15f80 R15: 00007ffc8a4ee678 [ 250.359226][ T9251] [ 250.437430][ T9258] Cannot find set identified by id 0 to match [ 250.477065][ T9260] __nla_validate_parse: 11 callbacks suppressed [ 250.477088][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1160'. [ 250.551524][ T9268] netlink: zone id is out of range [ 250.567624][ T9268] FAULT_INJECTION: forcing a failure. [ 250.567624][ T9268] name failslab, interval 1, probability 0, space 0, times 0 [ 250.601071][ T9268] CPU: 0 UID: 0 PID: 9268 Comm: syz.3.1162 Not tainted 6.11.0-rc4-syzkaller-00686-ge24a6c874601 #0 [ 250.611909][ T9268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 250.621998][ T9268] Call Trace: [ 250.625301][ T9268] [ 250.628256][ T9268] dump_stack_lvl+0x241/0x360 [ 250.632978][ T9268] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.638212][ T9268] ? __pfx__printk+0x10/0x10 [ 250.642840][ T9268] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 250.648338][ T9268] ? __pfx___might_resched+0x10/0x10 [ 250.653679][ T9268] should_fail_ex+0x3b0/0x4e0 [ 250.658388][ T9268] should_failslab+0xac/0x100 [ 250.663089][ T9268] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 250.668476][ T9268] __kmalloc_cache_noprof+0x6c/0x2c0 [ 250.673779][ T9268] ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 250.679038][ T9268] genl_rcv_msg+0xb14/0xec0 [ 250.683574][ T9268] ? mark_lock+0x9a/0x350 [ 250.687930][ T9268] ? __pfx_genl_rcv_msg+0x10/0x10 [ 250.692990][ T9268] ? __pfx_lock_acquire+0x10/0x10 [ 250.698026][ T9268] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 250.703766][ T9268] ? __pfx___might_resched+0x10/0x10 [ 250.709073][ T9268] netlink_rcv_skb+0x1e3/0x430 [ 250.713847][ T9268] ? __pfx_genl_rcv_msg+0x10/0x10 [ 250.718888][ T9268] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 250.724193][ T9268] ? __netlink_deliver_tap+0x77e/0x7c0 [ 250.729673][ T9268] genl_rcv+0x28/0x40 [ 250.733668][ T9268] netlink_unicast+0x7f6/0x990 [ 250.738457][ T9268] ? __pfx_netlink_unicast+0x10/0x10 [ 250.743754][ T9268] ? __virt_addr_valid+0x183/0x530 [ 250.748874][ T9268] ? __check_object_size+0x49c/0x900 [ 250.754166][ T9268] ? bpf_lsm_netlink_send+0x9/0x10 [ 250.759307][ T9268] netlink_sendmsg+0x8e4/0xcb0 [ 250.764092][ T9268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.769384][ T9268] ? __import_iovec+0x536/0x820 [ 250.774244][ T9268] ? aa_sock_msg_perm+0x91/0x160 [ 250.779194][ T9268] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 250.784492][ T9268] ? security_socket_sendmsg+0x87/0xb0 [ 250.789976][ T9268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.795270][ T9268] __sock_sendmsg+0x221/0x270 [ 250.799958][ T9268] ____sys_sendmsg+0x525/0x7d0 [ 250.804867][ T9268] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.810183][ T9268] __sys_sendmsg+0x2b0/0x3a0 [ 250.814794][ T9268] ? __pfx___sys_sendmsg+0x10/0x10 [ 250.819916][ T9268] ? vfs_write+0x7c4/0xc90 [ 250.824409][ T9268] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 250.830774][ T9268] ? do_syscall_64+0x100/0x230 [ 250.835657][ T9268] ? do_syscall_64+0xb6/0x230 [ 250.840353][ T9268] do_syscall_64+0xf3/0x230 [ 250.844890][ T9268] ? clear_bhb_loop+0x35/0x90 [ 250.849606][ T9268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.855516][ T9268] RIP: 0033:0x7f6e64b79ef9 [ 250.859941][ T9268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.879558][ T9268] RSP: 002b:00007f6e6598b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.887990][ T9268] RAX: ffffffffffffffda RBX: 00007f6e64d15f80 RCX: 00007f6e64b79ef9 [ 250.895973][ T9268] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000007 [ 250.904048][ T9268] RBP: 00007f6e6598b090 R08: 0000000000000000 R09: 0000000000000000 [ 250.912025][ T9268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 250.920003][ T9268] R13: 0000000000000000 R14: 00007f6e64d15f80 R15: 00007ffc9b9c5f48 [ 250.927997][ T9268] [ 251.347169][ T9287] siw: device registration error -23 [ 251.395023][ T9293] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1169'. [ 251.424524][ T9293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1169'. [ 251.968339][ T9315] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1178'. [ 252.144620][ T9323] FAULT_INJECTION: forcing a failure. [ 252.144620][ T9323] name failslab, interval 1, probability 0, space 0, times 0 [ 252.192619][ T9323] CPU: 1 UID: 0 PID: 9323 Comm: syz.4.1181 Not tainted 6.11.0-rc4-syzkaller-00686-ge24a6c874601 #0 [ 252.203365][ T9323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 252.211865][ T9329] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1182'. [ 252.213430][ T9323] Call Trace: [ 252.213444][ T9323] [ 252.213456][ T9323] dump_stack_lvl+0x241/0x360 [ 252.213494][ T9323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.213528][ T9323] ? __pfx__printk+0x10/0x10 [ 252.213555][ T9323] ? vma_is_secretmem+0xd/0x50 [ 252.213580][ T9323] ? check_vma_flags+0x500/0x5a0 [ 252.213627][ T9323] should_fail_ex+0x3b0/0x4e0 [ 252.213659][ T9323] ? skcipher_next_slow+0x117/0x480 [ 252.213685][ T9323] should_failslab+0xac/0x100 [ 252.244043][ T9329] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1182'. [ 252.248057][ T9323] ? skcipher_next_slow+0x117/0x480 [ 252.248093][ T9323] __kmalloc_noprof+0xd8/0x400 [ 252.248124][ T9323] skcipher_next_slow+0x117/0x480 [ 252.248158][ T9323] skcipher_walk_next+0x634/0xba0 [ 252.296733][ T9323] gcm_encrypt_aesni_avx+0x98b/0xe30 [ 252.302062][ T9323] ? __pfx_gcm_encrypt_aesni_avx+0x10/0x10 [ 252.307919][ T9323] ? __pfx_lock_acquire+0x10/0x10 [ 252.312994][ T9323] ? simd_aead_encrypt+0x55/0x130 [ 252.318055][ T9323] ? __asan_memcpy+0x40/0x70 [ 252.322686][ T9323] ? irq_fpu_usable+0x87/0xa0 [ 252.327393][ T9323] ? cryptd_aead_child+0xd/0x40 [ 252.332302][ T9323] tls_push_record+0x19a7/0x3790 [ 252.337294][ T9323] bpf_exec_tx_verdict+0xb7b/0x1260 [ 252.342574][ T9323] ? get_user_pages_fast+0xcc/0x160 [ 252.347825][ T9323] ? __pfx_get_user_pages_fast+0x10/0x10 [ 252.353497][ T9323] ? __pfx_bpf_exec_tx_verdict+0x10/0x10 [ 252.359224][ T9323] ? sk_msg_alloc+0xab1/0xb60 [ 252.363926][ T9323] ? __phys_addr+0xba/0x170 [ 252.368472][ T9323] tls_sw_sendmsg+0x1cc6/0x2890 [ 252.373423][ T9323] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 252.378656][ T9323] ? __pfx_aa_sk_perm+0x10/0x10 [ 252.383529][ T9323] ? sock_rps_record_flow+0x1a/0x400 [ 252.388848][ T9323] ? inet_send_prepare+0x21/0x260 [ 252.393903][ T9323] ? inet_send_prepare+0x5a/0x260 [ 252.399003][ T9323] __sock_sendmsg+0xef/0x270 [ 252.403632][ T9323] __sys_sendto+0x3a4/0x4f0 [ 252.408179][ T9323] ? __pfx___sys_sendto+0x10/0x10 [ 252.413276][ T9323] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 252.419301][ T9323] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 252.425667][ T9323] __x64_sys_sendto+0xde/0x100 [ 252.430461][ T9323] do_syscall_64+0xf3/0x230 [ 252.434987][ T9323] ? clear_bhb_loop+0x35/0x90 [ 252.439709][ T9323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.445661][ T9323] RIP: 0033:0x7f8544379ef9 [ 252.450079][ T9323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.469704][ T9323] RSP: 002b:00007f854523a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 252.478156][ T9323] RAX: ffffffffffffffda RBX: 00007f8544515f80 RCX: 00007f8544379ef9 [ 252.486162][ T9323] RDX: fffffffffffffede RSI: 00000000200001c0 RDI: 0000000000000004 [ 252.494164][ T9323] RBP: 00007f854523a090 R08: 0000000000000000 R09: 0000000003000137 [ 252.502164][ T9323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 252.510162][ T9323] R13: 0000000000000000 R14: 00007f8544515f80 R15: 00007fffbd4aad08 [ 252.518187][ T9323] [ 252.557468][ T9321] delete_channel: no stack [ 253.498279][ T9360] FAULT_INJECTION: forcing a failure. [ 253.498279][ T9360] name failslab, interval 1, probability 0, space 0, times 0 [ 253.542108][ T9360] CPU: 1 UID: 0 PID: 9360 Comm: syz.3.1192 Not tainted 6.11.0-rc4-syzkaller-00686-ge24a6c874601 #0 [ 253.552855][ T9360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 253.562950][ T9360] Call Trace: [ 253.566259][ T9360] [ 253.569219][ T9360] dump_stack_lvl+0x241/0x360 [ 253.573942][ T9360] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.579168][ T9360] ? __pfx__printk+0x10/0x10 [ 253.583792][ T9360] should_fail_ex+0x3b0/0x4e0 [ 253.588511][ T9360] should_failslab+0xac/0x100 [ 253.593233][ T9360] ? sctp_add_bind_addr+0x89/0x3a0 [ 253.598379][ T9360] __kmalloc_cache_noprof+0x6c/0x2c0 [ 253.603691][ T9360] sctp_add_bind_addr+0x89/0x3a0 [ 253.607357][ T9339] delete_channel: no stack [ 253.608657][ T9360] sctp_copy_local_addr_list+0x311/0x500 [ 253.618774][ T9360] ? sctp_copy_local_addr_list+0xab/0x500 [ 253.624563][ T9360] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 253.630762][ T9360] ? sctp_v6_is_any+0x60/0x70 [ 253.635488][ T9360] sctp_bind_addr_copy+0xad/0x3b0 [ 253.640552][ T9360] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 253.646939][ T9360] sctp_connect_new_asoc+0x2f3/0x6c0 [ 253.652265][ T9360] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 253.658117][ T9360] ? sctp_sendmsg+0xbb9/0x3520 [ 253.662927][ T9360] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 253.668521][ T9360] ? security_sctp_bind_connect+0x90/0xb0 [ 253.674285][ T9360] sctp_sendmsg+0x219a/0x3520 [ 253.679051][ T9360] ? __pfx_sctp_sendmsg+0x10/0x10 [ 253.684126][ T9360] ? __pfx_aa_sk_perm+0x10/0x10 [ 253.689022][ T9360] ? inet_sendmsg+0x330/0x390 [ 253.693752][ T9360] __sock_sendmsg+0x1a6/0x270 [ 253.698471][ T9360] __sys_sendto+0x3a4/0x4f0 [ 253.703016][ T9360] ? __pfx___sys_sendto+0x10/0x10 [ 253.708108][ T9360] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 253.714154][ T9360] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 253.720530][ T9360] __x64_sys_sendto+0xde/0x100 [ 253.725340][ T9360] do_syscall_64+0xf3/0x230 [ 253.729903][ T9360] ? clear_bhb_loop+0x35/0x90 [ 253.734621][ T9360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.740546][ T9360] RIP: 0033:0x7f6e64b79ef9 [ 253.744986][ T9360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.764632][ T9360] RSP: 002b:00007f6e6598b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 253.773086][ T9360] RAX: ffffffffffffffda RBX: 00007f6e64d15f80 RCX: 00007f6e64b79ef9 [ 253.781090][ T9360] RDX: 0000000000034000 RSI: 0000000020000580 RDI: 0000000000000003 [ 253.789096][ T9360] RBP: 00007f6e6598b090 R08: 0000000020000100 R09: 000000000000001c [ 253.797101][ T9360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 253.805103][ T9360] R13: 0000000000000000 R14: 00007f6e64d15f80 R15: 00007ffc9b9c5f48 [ 253.813125][ T9360] [ 253.897394][ T9363] sctp: [Deprecated]: syz.2.1193 (pid 9363) Use of int in maxseg socket option. [ 253.897394][ T9363] Use struct sctp_assoc_value instead [ 254.005546][ T9365] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.1194'. [ 254.032748][ T9365] openvswitch: netlink: Actions may not be safe on all matching packets [ 254.239677][ T9378] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1196'. [ 254.278994][ T9378] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1196'. [ 254.336218][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1197'. [ 254.424232][ T9382] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 254.518790][ T9384] netlink: 'syz.3.1199': attribute type 1 has an invalid length. [ 255.009568][ T9404] macvlan4: entered allmulticast mode [ 255.640658][ T9422] __nla_validate_parse: 2 callbacks suppressed [ 255.640679][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1210'. [ 255.640701][ T9429] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1211'. [ 255.736302][ T9424] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1211'. [ 255.829305][ T9433] netlink: 'syz.2.1213': attribute type 1 has an invalid length. [ 255.847949][ T9433] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1213'. [ 255.937604][ T9437] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 255.938572][ T9436] ieee802154 phy0 wpan0: encryption failed: -126 [ 256.117064][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.268515][ T9448] sctp: [Deprecated]: syz.3.1218 (pid 9448) Use of int in max_burst socket option deprecated. [ 256.268515][ T9448] Use struct sctp_assoc_value instead [ 256.700986][ T9457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1223'. [ 256.815726][ T9463] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1224'. [ 256.877736][ T9456] syzkaller0: entered promiscuous mode [ 256.894878][ T9468] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1224'. [ 256.905242][ T9456] syzkaller0: entered allmulticast mode [ 257.031311][ T9470] netlink: 'syz.2.1226': attribute type 1 has an invalid length. [ 257.047637][ T9470] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1226'. [ 257.392208][ T29] audit: type=1107 audit(1724905533.592:38): pid=9486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<|KÏüÑ,÷íÂ-øÐ"5³)ÛõK©XÎ骵$âý‚÷‚}« R¾˜…¹,¼`’ [ 257.392208][ T29] =õ·¤˜°J,PV"’«÷%öøa›]ØŽZ”îTe¤¡u­Mûz˜;ÑXëd­ò²bÚÔráP¤z›ýa±ù׌ðg$W©pk)Ï' [ 259.052676][ T9482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1228'. [ 259.340782][ T9510] netlink: 'syz.3.1237': attribute type 10 has an invalid length. [ 259.367201][ T9510] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 259.388682][ T9510] team0: Port device netdevsim0 added [ 259.414153][ T9516] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1238'. [ 259.654527][ T9522] netlink: 'syz.1.1239': attribute type 1 has an invalid length. [ 259.837393][ T9532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.939068][ T9532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.109205][ T9539] macvlan4: entered allmulticast mode [ 260.321366][ C1] Unknown status report in ack skb [ 260.404703][ T9550] ieee802154 phy0 wpan0: encryption failed: -126 [ 260.592208][ T9557] netlink: 'syz.2.1253': attribute type 1 has an invalid length. [ 260.676961][ T9560] FAULT_INJECTION: forcing a failure. [ 260.676961][ T9560] name failslab, interval 1, probability 0, space 0, times 0 [ 260.708216][ T9560] CPU: 0 UID: 0 PID: 9560 Comm: syz.4.1254 Not tainted 6.11.0-rc4-syzkaller-00686-ge24a6c874601 #0 [ 260.718951][ T9560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 260.729051][ T9560] Call Trace: [ 260.732368][ T9560] [ 260.735341][ T9560] dump_stack_lvl+0x241/0x360 [ 260.740074][ T9560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.745335][ T9560] ? __pfx__printk+0x10/0x10 [ 260.749966][ T9560] ? __kmalloc_noprof+0xb0/0x400 [ 260.754945][ T9560] ? __pfx___might_resched+0x10/0x10 [ 260.760282][ T9560] should_fail_ex+0x3b0/0x4e0 [ 260.765003][ T9560] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 260.771266][ T9560] should_failslab+0xac/0x100 [ 260.775963][ T9560] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 260.782215][ T9560] __kmalloc_noprof+0xd8/0x400 [ 260.786993][ T9560] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 260.793081][ T9560] genl_rcv_msg+0x802/0xec0 [ 260.797592][ T9560] ? mark_lock+0x9a/0x350 [ 260.801943][ T9560] ? __pfx_genl_rcv_msg+0x10/0x10 [ 260.807007][ T9560] ? __pfx_lock_acquire+0x10/0x10 [ 260.812043][ T9560] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 260.817433][ T9560] ? __pfx___might_resched+0x10/0x10 [ 260.822757][ T9560] netlink_rcv_skb+0x1e3/0x430 [ 260.827536][ T9560] ? __pfx_genl_rcv_msg+0x10/0x10 [ 260.832574][ T9560] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 260.837884][ T9560] ? __netlink_deliver_tap+0x77e/0x7c0 [ 260.843365][ T9560] genl_rcv+0x28/0x40 [ 260.847358][ T9560] netlink_unicast+0x7f6/0x990 [ 260.852151][ T9560] ? __pfx_netlink_unicast+0x10/0x10 [ 260.857454][ T9560] ? __virt_addr_valid+0x183/0x530 [ 260.862580][ T9560] ? __check_object_size+0x49c/0x900 [ 260.867889][ T9560] ? bpf_lsm_netlink_send+0x9/0x10 [ 260.873018][ T9560] netlink_sendmsg+0x8e4/0xcb0 [ 260.877805][ T9560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.883103][ T9560] ? __import_iovec+0x536/0x820 [ 260.887967][ T9560] ? aa_sock_msg_perm+0x91/0x160 [ 260.892920][ T9560] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 260.898216][ T9560] ? security_socket_sendmsg+0x87/0xb0 [ 260.903693][ T9560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.909002][ T9560] __sock_sendmsg+0x221/0x270 [ 260.913690][ T9560] ____sys_sendmsg+0x525/0x7d0 [ 260.918479][ T9560] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.923793][ T9560] __sys_sendmsg+0x2b0/0x3a0 [ 260.928399][ T9560] ? __pfx___sys_sendmsg+0x10/0x10 [ 260.933527][ T9560] ? vfs_write+0x7c4/0xc90 [ 260.937992][ T9560] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 260.944424][ T9560] ? do_syscall_64+0x100/0x230 [ 260.949196][ T9560] ? do_syscall_64+0xb6/0x230 [ 260.953884][ T9560] do_syscall_64+0xf3/0x230 [ 260.958397][ T9560] ? clear_bhb_loop+0x35/0x90 [ 260.963090][ T9560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.968996][ T9560] RIP: 0033:0x7f8544379ef9 [ 260.973440][ T9560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.993075][ T9560] RSP: 002b:00007f854523a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.001536][ T9560] RAX: ffffffffffffffda RBX: 00007f8544515f80 RCX: 00007f8544379ef9 [ 261.009522][ T9560] RDX: 0000000000040000 RSI: 0000000020000000 RDI: 0000000000000003 [ 261.017504][ T9560] RBP: 00007f854523a090 R08: 0000000000000000 R09: 0000000000000000 [ 261.025489][ T9560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.033471][ T9560] R13: 0000000000000000 R14: 00007f8544515f80 R15: 00007fffbd4aad08 [ 261.041476][ T9560] [ 261.330649][ T9574] sctp: [Deprecated]: syz.4.1259 (pid 9574) Use of int in maxseg socket option. [ 261.330649][ T9574] Use struct sctp_assoc_value instead [ 261.369831][ T9582] ieee802154 phy0 wpan0: encryption failed: -126 [ 261.505987][ T9588] __nla_validate_parse: 11 callbacks suppressed [ 261.506008][ T9588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1264'. [ 261.566285][ T9591] netlink: 'syz.2.1266': attribute type 1 has an invalid length. [ 261.612780][ T9591] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1266'. [ 262.257048][ T9612] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1273'. [ 262.338275][ T9612] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1273'. [ 262.453603][ T9623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1277'. [ 262.613102][ T9627] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 262.672604][ T9633] netlink: 'syz.2.1280': attribute type 1 has an invalid length. [ 262.690716][ T9633] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1280'. [ 262.715746][ T9629] syzkaller0: entered promiscuous mode [ 262.726161][ T9629] syzkaller0: entered allmulticast mode [ 262.741943][ T9632] netlink: 'syz.3.1281': attribute type 10 has an invalid length. [ 263.316472][ T5239] Bluetooth: hci1: command 0x0406 tx timeout [ 263.316492][ T5249] Bluetooth: hci6: command 0x0405 tx timeout [ 263.323639][ T5239] Bluetooth: hci2: command 0x0406 tx timeout [ 263.328768][ T5247] Bluetooth: hci5: command 0x0406 tx timeout [ 264.447336][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1285'. [ 264.461787][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1285'. [ 264.478667][ T9655] ieee802154 phy0 wpan0: encryption failed: -126 [ 264.662028][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1290'. [ 264.798404][ T9671] netlink: 'syz.2.1293': attribute type 1 has an invalid length. [ 264.826591][ T9671] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1293'. [ 265.157775][ T9686] FAULT_INJECTION: forcing a failure. [ 265.157775][ T9686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.176171][ T9686] CPU: 1 UID: 0 PID: 9686 Comm: syz.0.1299 Not tainted 6.11.0-rc4-syzkaller-00686-ge24a6c874601 #0 [ 265.186939][ T9686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 265.197029][ T9686] Call Trace: [ 265.200378][ T9686] [ 265.203344][ T9686] dump_stack_lvl+0x241/0x360 [ 265.208076][ T9686] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.213317][ T9686] ? __pfx__printk+0x10/0x10 [ 265.218045][ T9686] ? __pfx_lock_release+0x10/0x10 [ 265.223126][ T9686] should_fail_ex+0x3b0/0x4e0 [ 265.227867][ T9686] _copy_from_iter+0x1f6/0x1960 [ 265.232771][ T9686] ? __virt_addr_valid+0x183/0x530 [ 265.237918][ T9686] ? __pfx_lock_release+0x10/0x10 [ 265.242995][ T9686] ? __alloc_skb+0x28f/0x440 [ 265.247619][ T9686] ? __pfx__copy_from_iter+0x10/0x10 [ 265.252945][ T9686] ? __virt_addr_valid+0x183/0x530 [ 265.258087][ T9686] ? __virt_addr_valid+0x183/0x530 [ 265.263234][ T9686] ? __virt_addr_valid+0x45f/0x530 [ 265.268390][ T9686] ? __check_object_size+0x49c/0x900 [ 265.273717][ T9686] netlink_sendmsg+0x73d/0xcb0 [ 265.278531][ T9686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.283854][ T9686] ? __import_iovec+0x536/0x820 [ 265.288749][ T9686] ? aa_sock_msg_perm+0x91/0x160 [ 265.293726][ T9686] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 265.299044][ T9686] ? security_socket_sendmsg+0x87/0xb0 [ 265.304550][ T9686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.309862][ T9686] __sock_sendmsg+0x221/0x270 [ 265.314570][ T9686] ____sys_sendmsg+0x525/0x7d0 [ 265.319384][ T9686] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.324711][ T9686] __sys_sendmsg+0x2b0/0x3a0 [ 265.329318][ T9686] ? __pfx___sys_sendmsg+0x10/0x10 [ 265.334455][ T9686] ? vfs_write+0x7c4/0xc90 [ 265.338960][ T9686] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 265.345302][ T9686] ? do_syscall_64+0x100/0x230 [ 265.350070][ T9686] ? do_syscall_64+0xb6/0x230 [ 265.354752][ T9686] do_syscall_64+0xf3/0x230 [ 265.359259][ T9686] ? clear_bhb_loop+0x35/0x90 [ 265.363944][ T9686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.369840][ T9686] RIP: 0033:0x7f375c979ef9 [ 265.374273][ T9686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.393902][ T9686] RSP: 002b:00007f375d845038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.402421][ T9686] RAX: ffffffffffffffda RBX: 00007f375cb15f80 RCX: 00007f375c979ef9 [ 265.410415][ T9686] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 265.418404][ T9686] RBP: 00007f375d845090 R08: 0000000000000000 R09: 0000000000000000 [ 265.426407][ T9686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.434411][ T9686] R13: 0000000000000000 R14: 00007f375cb15f80 R15: 00007ffc8a4ee678 [ 265.442439][ T9686] [ 265.491761][ T9692] netpci0: tun_chr_ioctl cmd 2148553947 [ 265.523554][ T9693] netlink: 'syz.4.1302': attribute type 10 has an invalid length. [ 265.864529][ T9708] netlink: 'syz.2.1307': attribute type 1 has an invalid length. [ 266.069659][ T9718] openvswitch: netlink: ct_state flags 00008300 unsupported [ 266.098276][ T9717] netlink: 'syz.3.1314': attribute type 10 has an invalid length. [ 266.203286][ T9717] team0: Port device wlan1 added [ 266.233315][ T9724] tap0: tun_chr_ioctl cmd 1074025677 [ 266.269308][ T9724] tap0: linktype set to 804 [ 266.597266][ T9737] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 266.946733][ T9745] netlink: 'syz.4.1321': attribute type 1 has an invalid length. [ 266.977849][ T9745] __nla_validate_parse: 5 callbacks suppressed [ 266.977883][ T9745] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1321'. [ 267.388909][ T9756] netlink: 'syz.4.1325': attribute type 4 has an invalid length. [ 267.617324][ T9764] openvswitch: netlink: ct_state flags 00008300 unsupported [ 268.067309][ T9791] netlink: 'syz.0.1334': attribute type 1 has an invalid length. [ 268.075669][ T9791] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1334'. [ 268.089804][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1333'. [ 268.657344][ T9808] ieee802154 phy0 wpan0: encryption failed: -126 [ 268.672705][ T5243] Bluetooth: hci0: command tx timeout [ 268.703456][ T9810] openvswitch: netlink: ct_state flags 00008300 unsupported [ 268.792011][ T9813] FAULT_INJECTION: forcing a failure. [ 268.792011][ T9813] name failslab, interval 1, probability 0, space 0, times 0 [ 268.870459][ T9813] CPU: 1 UID: 0 PID: 9813 Comm: syz.3.1344 Not tainted 6.11.0-rc4-syzkaller-00686-ge24a6c874601 #0 [ 268.882824][ T9813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 268.892912][ T9813] Call Trace: [ 268.896205][ T9813] [ 268.899144][ T9813] dump_stack_lvl+0x241/0x360 [ 268.903848][ T9813] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.910209][ T9813] ? __pfx__printk+0x10/0x10 [ 268.914828][ T9813] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 268.920840][ T9813] ? __pfx___might_resched+0x10/0x10 [ 268.926165][ T9813] should_fail_ex+0x3b0/0x4e0 [ 268.930897][ T9813] should_failslab+0xac/0x100 [ 268.935616][ T9813] ? __alloc_skb+0x1c3/0x440 [ 268.940241][ T9813] kmem_cache_alloc_node_noprof+0x71/0x320 [ 268.946076][ T9813] ? stack_trace_save+0x118/0x1d0 [ 268.951121][ T9813] __alloc_skb+0x1c3/0x440 [ 268.955565][ T9813] ? __pfx___alloc_skb+0x10/0x10 [ 268.960531][ T9813] alloc_skb_with_frags+0xc3/0x770 [ 268.965662][ T9813] ? gcm_encrypt_aesni_avx+0x889/0xe30 [ 268.971132][ T9813] ? tls_push_record+0x19a7/0x3790 [ 268.976266][ T9813] ? bpf_exec_tx_verdict+0xb7b/0x1260 [ 268.981658][ T9813] ? tls_sw_sendmsg+0x1cc6/0x2890 [ 268.986695][ T9813] ? __sock_sendmsg+0xef/0x270 [ 268.991500][ T9813] ? __sys_sendto+0x3a4/0x4f0 [ 268.996343][ T9813] ? __x64_sys_sendto+0xde/0x100 [ 269.001328][ T9813] ? do_syscall_64+0xf3/0x230 [ 269.006045][ T9813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.012143][ T9813] tcp_send_rcvq+0x17d/0x610 [ 269.016761][ T9813] ? __pfx_tcp_send_rcvq+0x10/0x10 [ 269.021978][ T9813] ? mark_lock+0x20/0x350 [ 269.026343][ T9813] ? tcp_rate_check_app_limited+0x1e5/0x360 [ 269.032259][ T9813] tcp_sendmsg_locked+0x4926/0x4e10 [ 269.037480][ T9813] ? scatterwalk_copychunks+0x43c/0x460 [ 269.043054][ T9813] ? scatterwalk_map_and_copy+0x1b3/0x260 [ 269.048793][ T9813] ? __pfx_scatterwalk_map_and_copy+0x10/0x10 [ 269.054882][ T9813] ? skcipher_walk_done+0x7d1/0xc50 [ 269.060105][ T9813] ? kernel_fpu_end+0x51/0x80 [ 269.064796][ T9813] ? gcm_encrypt_aesni_avx+0xb4a/0xe30 [ 269.070276][ T9813] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 269.075865][ T9813] ? iov_iter_bvec+0x4e/0x180 [ 269.080560][ T9813] tls_push_sg+0x2e3/0x9d0 [ 269.085009][ T9813] ? __pfx_tls_push_sg+0x10/0x10 [ 269.089962][ T9813] ? __asan_memcpy+0x40/0x70 [ 269.094569][ T9813] ? cryptd_aead_child+0xd/0x40 [ 269.099460][ T9813] tls_tx_records+0x32f/0x560 [ 269.104182][ T9813] bpf_exec_tx_verdict+0xb7b/0x1260 [ 269.109413][ T9813] ? get_user_pages_fast+0xcc/0x160 [ 269.114641][ T9813] ? __pfx_get_user_pages_fast+0x10/0x10 [ 269.120307][ T9813] ? __pfx_bpf_exec_tx_verdict+0x10/0x10 [ 269.126070][ T9813] ? sk_msg_alloc+0xab1/0xb60 [ 269.130776][ T9813] ? __phys_addr+0xba/0x170 [ 269.135309][ T9813] tls_sw_sendmsg+0x1cc6/0x2890 [ 269.140225][ T9813] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 269.145454][ T9813] ? __pfx_aa_sk_perm+0x10/0x10 [ 269.150325][ T9813] ? sock_rps_record_flow+0x1a/0x400 [ 269.155637][ T9813] ? inet_send_prepare+0x21/0x260 [ 269.160698][ T9813] ? inet_send_prepare+0x5a/0x260 [ 269.165759][ T9813] __sock_sendmsg+0xef/0x270 [ 269.170363][ T9813] __sys_sendto+0x3a4/0x4f0 [ 269.174887][ T9813] ? __pfx___sys_sendto+0x10/0x10 [ 269.179951][ T9813] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 269.185963][ T9813] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 269.192323][ T9813] __x64_sys_sendto+0xde/0x100 [ 269.197113][ T9813] do_syscall_64+0xf3/0x230 [ 269.201626][ T9813] ? clear_bhb_loop+0x35/0x90 [ 269.206324][ T9813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.212234][ T9813] RIP: 0033:0x7f6e64b79ef9 [ 269.216661][ T9813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.236286][ T9813] RSP: 002b:00007f6e6598b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 269.244716][ T9813] RAX: ffffffffffffffda RBX: 00007f6e64d15f80 RCX: 00007f6e64b79ef9 [ 269.252698][ T9813] RDX: fffffffffffffede RSI: 00000000200001c0 RDI: 0000000000000004 [ 269.260677][ T9813] RBP: 00007f6e6598b090 R08: 0000000000000000 R09: 0000000003000137 [ 269.268677][ T9813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 269.276669][ T9813] R13: 0000000000000000 R14: 00007f6e64d15f80 R15: 00007ffc9b9c5f48 [ 269.284680][ T9813] [ 269.340144][ T9811] delete_channel: no stack [ 269.442821][ T9820] netlink: 'syz.1.1345': attribute type 1 has an invalid length. [ 269.467276][ T9820] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1345'. [ 269.522847][ T9825] netlink: 'syz.2.1347': attribute type 10 has an invalid length. [ 270.059639][ T9846] netlink: 'syz.4.1357': attribute type 9 has an invalid length. [ 270.078890][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1357'. [ 270.125553][ T9848] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 270.157624][ T9846] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1357'. [ 270.219747][ T9849] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 270.413837][ T9862] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1359'. [ 270.547359][ T9867] FAULT_INJECTION: forcing a failure. [ 270.547359][ T9867] name failslab, interval 1, probability 0, space 0, times 0 [ 270.564593][ T9869] openvswitch: netlink: ct_state flags 00008300 unsupported [ 270.602750][ T9867] CPU: 1 UID: 0 PID: 9867 Comm: syz.2.1361 Not tainted 6.11.0-rc4-syzkaller-00686-ge24a6c874601 #0 [ 270.613519][ T9867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 270.623610][ T9867] Call Trace: [ 270.626918][ T9867] [ 270.629876][ T9867] dump_stack_lvl+0x241/0x360 [ 270.634593][ T9867] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.639805][ T9867] ? __pfx__printk+0x10/0x10 [ 270.644413][ T9867] ? __pfx_lock_acquire+0x10/0x10 [ 270.649458][ T9867] ? nf_ct_pernet+0x45/0x270 [ 270.654067][ T9867] should_fail_ex+0x3b0/0x4e0 [ 270.658766][ T9867] ? __nf_conntrack_alloc+0x8f/0x380 [ 270.664079][ T9867] should_failslab+0xac/0x100 [ 270.668776][ T9867] ? __nf_conntrack_alloc+0x8f/0x380 [ 270.674068][ T9867] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 270.679457][ T9867] __nf_conntrack_alloc+0x8f/0x380 [ 270.684592][ T9867] ctnetlink_new_conntrack+0x665/0x2250 [ 270.690154][ T9867] ? __mutex_trylock_common+0x183/0x2e0 [ 270.695709][ T9867] ? __pfx___might_resched+0x10/0x10 [ 270.701020][ T9867] ? __pfx_ctnetlink_new_conntrack+0x10/0x10 [ 270.707015][ T9867] ? rcu_is_watching+0x15/0xb0 [ 270.711795][ T9867] ? trace_contention_end+0x3c/0x120 [ 270.717091][ T9867] ? __mutex_lock+0x2ef/0xd70 [ 270.721786][ T9867] ? __pfx___mutex_lock+0x10/0x10 [ 270.726832][ T9867] ? nfnetlink_rcv_msg+0x225/0x1180 [ 270.732044][ T9867] nfnetlink_rcv_msg+0xbec/0x1180 [ 270.737072][ T9867] ? kernel_text_address+0xa7/0xe0 [ 270.742190][ T9867] ? nfnetlink_rcv_msg+0x225/0x1180 [ 270.747414][ T9867] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 270.752933][ T9867] ? netlink_deliver_tap+0x19d/0x1b0 [ 270.758229][ T9867] ? netlink_unicast+0x7c4/0x990 [ 270.763181][ T9867] ? netlink_sendmsg+0x8e4/0xcb0 [ 270.768126][ T9867] ? __sock_sendmsg+0x221/0x270 [ 270.772982][ T9867] ? ____sys_sendmsg+0x525/0x7d0 [ 270.777925][ T9867] ? __sys_sendmsg+0x2b0/0x3a0 [ 270.782702][ T9867] ? do_syscall_64+0xf3/0x230 [ 270.787386][ T9867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.793478][ T9867] netlink_rcv_skb+0x1e3/0x430 [ 270.798253][ T9867] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 270.803724][ T9867] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 270.809027][ T9867] ? apparmor_capable+0x13b/0x1b0 [ 270.814069][ T9867] ? bpf_lsm_capable+0x9/0x10 [ 270.818753][ T9867] ? security_capable+0x90/0xb0 [ 270.823621][ T9867] nfnetlink_rcv+0x297/0x2ab0 [ 270.828315][ T9867] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 270.834049][ T9867] ? __dev_queue_xmit+0x2da/0x3e90 [ 270.839171][ T9867] ? __dev_queue_xmit+0x1763/0x3e90 [ 270.844389][ T9867] ? kasan_save_track+0x51/0x80 [ 270.849253][ T9867] ? do_syscall_64+0xf3/0x230 [ 270.853954][ T9867] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 270.859085][ T9867] ? __dev_queue_xmit+0x2da/0x3e90 [ 270.864216][ T9867] ? __pfx___dev_queue_xmit+0x10/0x10 [ 270.869615][ T9867] ? ref_tracker_free+0x643/0x7e0 [ 270.874656][ T9867] ? __asan_memcpy+0x40/0x70 [ 270.879286][ T9867] ? __pfx_ref_tracker_free+0x10/0x10 [ 270.884689][ T9867] ? netlink_deliver_tap+0x2e/0x1b0 [ 270.889895][ T9867] ? skb_clone+0x240/0x390 [ 270.894321][ T9867] ? __pfx_lock_release+0x10/0x10 [ 270.899358][ T9867] ? __netlink_deliver_tap+0x77e/0x7c0 [ 270.904834][ T9867] ? netlink_deliver_tap+0x2e/0x1b0 [ 270.910038][ T9867] netlink_unicast+0x7f6/0x990 [ 270.914843][ T9867] ? __pfx_netlink_unicast+0x10/0x10 [ 270.920143][ T9867] ? __virt_addr_valid+0x183/0x530 [ 270.925262][ T9867] ? __check_object_size+0x49c/0x900 [ 270.930551][ T9867] ? bpf_lsm_netlink_send+0x9/0x10 [ 270.935674][ T9867] netlink_sendmsg+0x8e4/0xcb0 [ 270.940470][ T9867] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.945766][ T9867] ? __import_iovec+0x536/0x820 [ 270.950625][ T9867] ? aa_sock_msg_perm+0x91/0x160 [ 270.955578][ T9867] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 270.960880][ T9867] ? security_socket_sendmsg+0x87/0xb0 [ 270.966367][ T9867] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.971658][ T9867] __sock_sendmsg+0x221/0x270 [ 270.976347][ T9867] ____sys_sendmsg+0x525/0x7d0 [ 270.981163][ T9867] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.986498][ T9867] __sys_sendmsg+0x2b0/0x3a0 [ 270.991125][ T9867] ? __pfx___sys_sendmsg+0x10/0x10 [ 270.996268][ T9867] ? vfs_write+0x7c4/0xc90 [ 271.000749][ T9867] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 271.007094][ T9867] ? do_syscall_64+0x100/0x230 [ 271.011877][ T9867] ? do_syscall_64+0xb6/0x230 [ 271.016568][ T9867] do_syscall_64+0xf3/0x230 [ 271.021085][ T9867] ? clear_bhb_loop+0x35/0x90 [ 271.025780][ T9867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.031684][ T9867] RIP: 0033:0x7f4c7fb79ef9 [ 271.036104][ T9867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.055722][ T9867] RSP: 002b:00007f4c808d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.064154][ T9867] RAX: ffffffffffffffda RBX: 00007f4c7fd15f80 RCX: 00007f4c7fb79ef9 [ 271.072132][ T9867] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000005 [ 271.080120][ T9867] RBP: 00007f4c808d8090 R08: 0000000000000000 R09: 0000000000000000 [ 271.088105][ T9867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.096084][ T9867] R13: 0000000000000000 R14: 00007f4c7fd15f80 R15: 00007ffe7baf0598 [ 271.104079][ T9867] [ 271.521939][ T9889] netlink: 'syz.1.1369': attribute type 9 has an invalid length. [ 271.530358][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1369'. [ 271.560136][ T9889] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1369'. [ 272.162536][ T9908] openvswitch: netlink: ct_state flags 00008300 unsupported [ 272.571649][ T9913] netlink: 'syz.0.1378': attribute type 1 has an invalid length. [ 272.624890][ T9913] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1378'. [ 272.981045][ T9928] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1383'. [ 273.071057][ T9938] openvswitch: netlink: ct_state flags 00008300 unsupported [ 273.091449][ T9940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1388'. [ 273.307916][ T9945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1389'. [ 273.470083][ T9955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1393'. [ 273.498163][ T9955] netlink: 'syz.0.1393': attribute type 15 has an invalid length. [ 273.519596][ T9955] netlink: 'syz.0.1393': attribute type 18 has an invalid length. [ 273.557710][ T9955] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.566136][ T9955] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.574589][ T9955] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.582849][ T9955] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.609796][ T9955] vxlan0: entered promiscuous mode [ 273.621584][ T9958] FAULT_INJECTION: forcing a failure. [ 273.621584][ T9958] name failslab, interval 1, probability 0, space 0, times 0 [ 273.643479][ T9958] CPU: 1 UID: 0 PID: 9958 Comm: syz.2.1394 Not tainted 6.11.0-rc4-syzkaller-00686-ge24a6c874601 #0 [ 273.654203][ T9958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 273.660869][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1390'. [ 273.664266][ T9958] Call Trace: [ 273.664295][ T9958] [ 273.664307][ T9958] dump_stack_lvl+0x241/0x360 [ 273.664344][ T9958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.664371][ T9958] ? __pfx__printk+0x10/0x10 [ 273.693957][ T9958] ? ref_tracker_alloc+0x332/0x490 [ 273.699120][ T9958] should_fail_ex+0x3b0/0x4e0 [ 273.703860][ T9958] ? skb_clone+0x20c/0x390 [ 273.708322][ T9958] should_failslab+0xac/0x100 [ 273.713047][ T9958] ? skb_clone+0x20c/0x390 [ 273.717594][ T9958] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 273.723016][ T9958] skb_clone+0x20c/0x390 [ 273.727304][ T9958] __netlink_deliver_tap+0x3cc/0x7c0 [ 273.732642][ T9958] ? netlink_deliver_tap+0x2e/0x1b0 [ 273.737875][ T9958] netlink_deliver_tap+0x19d/0x1b0 [ 273.743031][ T9958] netlink_unicast+0x7c4/0x990 [ 273.747865][ T9958] ? __pfx_netlink_unicast+0x10/0x10 [ 273.753192][ T9958] ? __virt_addr_valid+0x183/0x530 [ 273.758339][ T9958] ? __check_object_size+0x49c/0x900 [ 273.763672][ T9958] ? bpf_lsm_netlink_send+0x9/0x10 [ 273.768829][ T9958] netlink_sendmsg+0x8e4/0xcb0 [ 273.773647][ T9958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.778985][ T9958] ? __import_iovec+0x536/0x820 [ 273.783874][ T9958] ? aa_sock_msg_perm+0x91/0x160 [ 273.788858][ T9958] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 273.794189][ T9958] ? security_socket_sendmsg+0x87/0xb0 [ 273.799702][ T9958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.805027][ T9958] __sock_sendmsg+0x221/0x270 [ 273.809760][ T9958] ____sys_sendmsg+0x525/0x7d0 [ 273.814580][ T9958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.819914][ T9958] ? __might_fault+0xaa/0x120 [ 273.824638][ T9958] __sys_sendmmsg+0x3b2/0x740 [ 273.829369][ T9958] ? __pfx___sys_sendmmsg+0x10/0x10 [ 273.834636][ T9958] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 273.840550][ T9958] ? ksys_write+0x23e/0x2c0 [ 273.845075][ T9958] ? __pfx_lock_release+0x10/0x10 [ 273.850203][ T9958] ? vfs_write+0x7c4/0xc90 [ 273.854697][ T9958] ? __mutex_unlock_slowpath+0x21d/0x750 [ 273.860342][ T9958] ? __pfx_vfs_write+0x10/0x10 [ 273.865138][ T9958] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 273.871408][ T9958] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 273.877786][ T9958] ? do_syscall_64+0x100/0x230 [ 273.882597][ T9958] __x64_sys_sendmmsg+0xa0/0xb0 [ 273.887487][ T9958] do_syscall_64+0xf3/0x230 [ 273.892024][ T9958] ? clear_bhb_loop+0x35/0x90 [ 273.896715][ T9958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.902653][ T9958] RIP: 0033:0x7f4c7fb79ef9 [ 273.907105][ T9958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.926747][ T9958] RSP: 002b:00007f4c808d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 273.935210][ T9958] RAX: ffffffffffffffda RBX: 00007f4c7fd15f80 RCX: 00007f4c7fb79ef9 [ 273.943218][ T9958] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 273.951227][ T9958] RBP: 00007f4c808d8090 R08: 0000000000000000 R09: 0000000000000000 [ 273.959234][ T9958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 273.967235][ T9958] R13: 0000000000000000 R14: 00007f4c7fd15f80 R15: 00007ffe7baf0598 [ 273.975232][ T9958] [ 274.371156][ T9982] openvswitch: netlink: ct_state flags 00008300 unsupported [ 274.526893][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1404'. [ 274.555238][ T9990] ipt_REJECT: TCP_RESET invalid for non-tcp [ 274.781526][T10000] siw: device registration error -23 [ 274.949874][T10004] bridge0: port 2(syzkaller0) entered disabled state [ 274.958853][T10004] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.010702][T10004] bond0: left promiscuous mode [ 275.032534][T10004] bond_slave_0: left promiscuous mode [ 275.051843][T10004] bond_slave_1: left promiscuous mode [ 275.460714][T10004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.504800][T10004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.864903][T10004] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.904145][T10004] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.914505][T10004] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.923780][T10004] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.950508][T10033] openvswitch: netlink: ct_state flags 00008300 unsupported [ 276.052192][T10004] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.061539][T10004] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.070535][T10004] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.080078][T10004] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.110588][T10004] vxlan0: left promiscuous mode [ 276.141983][T10004] macvlan2: left allmulticast mode [ 276.164773][T10016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1414'. [ 276.319331][T10040] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 276.591291][T10054] xt_CT: You must specify a L4 protocol and not use inversions on it [ 276.670830][T10054] FAULT_INJECTION: forcing a failure. [ 276.670830][T10054] name failslab, interval 1, probability 0, space 0, times 0 [ 276.682258][T10059] openvswitch: netlink: ct_state flags 00008300 unsupported [ 276.746406][T10054] CPU: 0 UID: 0 PID: 10054 Comm: syz.0.1425 Not tainted 6.11.0-rc4-syzkaller-00686-ge24a6c874601 #0 [ 276.757236][T10054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 276.767330][T10054] Call Trace: [ 276.767375][T10062] ieee802154 phy0 wpan0: encryption failed: -126 [ 276.770615][T10054] [ 276.779907][T10054] dump_stack_lvl+0x241/0x360 [ 276.784632][T10054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.789875][T10054] ? __pfx__printk+0x10/0x10 [ 276.794512][T10054] ? __kmalloc_node_noprof+0xb7/0x440 [ 276.799933][T10054] ? __pfx___might_resched+0x10/0x10 [ 276.805274][T10054] should_fail_ex+0x3b0/0x4e0 [ 276.809998][T10054] should_failslab+0xac/0x100 [ 276.814726][T10054] __kmalloc_node_noprof+0xdf/0x440 [ 276.819956][T10054] ? __kvmalloc_node_noprof+0x72/0x190 [ 276.825462][T10054] __kvmalloc_node_noprof+0x72/0x190 [ 276.830792][T10054] __nf_hook_entries_try_shrink+0x330/0x730 [ 276.836746][T10054] __nf_unregister_net_hook+0x5cf/0x800 [ 276.842342][T10054] nf_unregister_net_hooks+0xd0/0x140 [ 276.847767][T10054] nf_defrag_ipv4_disable+0x97/0xe0 [ 276.853014][T10054] nf_ct_netns_put+0x3c4/0x510 [ 276.857827][T10054] xt_ct_tg_check+0xa62/0xdf0 [ 276.862544][T10054] ? __pfx_lock_release+0x10/0x10 [ 276.867620][T10054] ? __pfx_xt_ct_tg_check+0x10/0x10 [ 276.872865][T10054] ? trace_contention_end+0x3c/0x120 [ 276.878186][T10054] ? __mutex_lock+0x2ef/0xd70 [ 276.882910][T10054] xt_check_target+0x3b9/0xa40 [ 276.887728][T10054] ? __pfx_xt_check_target+0x10/0x10 [ 276.893075][T10054] ? xt_find_target+0x1cf/0x200 [ 276.897979][T10054] translate_table+0x19b3/0x2260 [ 276.902989][T10054] ? __pfx_translate_table+0x10/0x10 [ 276.908307][T10054] ? __might_fault+0xaa/0x120 [ 276.913033][T10054] ? __pfx_lock_release+0x10/0x10 [ 276.918113][T10054] ? __might_fault+0xc6/0x120 [ 276.922848][T10054] ? _copy_from_user+0xa6/0xe0 [ 276.927654][T10054] ? copy_from_sockptr_offset+0x6b/0xb0 [ 276.933236][T10054] do_ipt_set_ctl+0xe3d/0x1250 [ 276.938053][T10054] ? __pfx___might_resched+0x10/0x10 [ 276.943374][T10054] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 276.948608][T10054] ? __pfx_lock_release+0x10/0x10 [ 276.953702][T10054] ? __mutex_unlock_slowpath+0x21d/0x750 [ 276.959390][T10054] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 276.964805][T10054] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 276.970846][T10054] ? __pfx_aa_sk_perm+0x10/0x10 [ 276.975730][T10054] ? module_put+0x13a/0x2d0 [ 276.980265][T10054] nf_setsockopt+0x295/0x2c0 [ 276.984893][T10054] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 276.990818][T10054] do_sock_setsockopt+0x3af/0x720 [ 276.995980][T10054] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 277.001565][T10054] ? __fget_files+0x29/0x470 [ 277.006202][T10054] ? __fget_files+0x3f6/0x470 [ 277.010952][T10054] __sys_setsockopt+0x1ae/0x250 [ 277.015856][T10054] __x64_sys_setsockopt+0xb5/0xd0 [ 277.020923][T10054] do_syscall_64+0xf3/0x230 [ 277.025466][T10054] ? clear_bhb_loop+0x35/0x90 [ 277.030191][T10054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.036125][T10054] RIP: 0033:0x7f375c979ef9 [ 277.040571][T10054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.060215][T10054] RSP: 002b:00007f375d845038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 277.068663][T10054] RAX: ffffffffffffffda RBX: 00007f375cb15f80 RCX: 00007f375c979ef9 [ 277.076673][T10054] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 277.084682][T10054] RBP: 00007f375d845090 R08: 00000000000002a0 R09: 0000000000000000 [ 277.092681][T10054] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000002 [ 277.100696][T10054] R13: 0000000000000000 R14: 00007f375cb15f80 R15: 00007ffc8a4ee678 [ 277.108727][T10054] [ 277.141799][T10065] siw: device registration error -23 [ 277.500541][T10074] syzkaller0: entered promiscuous mode [ 277.522525][T10074] syzkaller0: entered allmulticast mode [ 277.802482][T10092] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1438'. [ 279.603486][T10118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1445'. [ 279.623340][T10118] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 279.640932][T10118] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 279.784704][T10125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1448'. [ 279.801825][T10126] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1449'. [ 279.845268][T10128] ieee802154 phy0 wpan0: encryption failed: -126 [ 279.994670][T10132] netlink: 'syz.1.1452': attribute type 1 has an invalid length. [ 280.033478][T10135] netlink: 'syz.3.1453': attribute type 4 has an invalid length. [ 280.473221][T10149] siw: device registration error -23 [ 280.697603][T10158] tipc: Can't bind to reserved service type 2 [ 280.735940][T10160] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1462'. [ 280.842192][T10162] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1463'. [ 280.947351][T10165] wlan1 speed is unknown, defaulting to 1000 [ 280.956703][T10167] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1465'. [ 280.980452][T10167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1465'. [ 281.107425][T10174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1467'. [ 281.388613][T10178] syzkaller0: entered promiscuous mode [ 281.416839][T10178] syzkaller0: entered allmulticast mode [ 282.328090][T10205] dccp_invalid_packet: P.Data Offset(100) too large [ 282.421630][T10208] ieee802154 phy0 wpan0: encryption failed: -126 [ 283.826916][T10192] netlink: 'syz.3.1472': attribute type 10 has an invalid length. [ 284.191908][T10242] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 284.550505][T10259] netlink: 'syz.3.1492': attribute type 10 has an invalid length. [ 284.723088][T10273] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 284.740115][T10261] syzkaller0: entered promiscuous mode [ 284.772750][T10261] syzkaller0: entered allmulticast mode [ 284.795091][T10267] netlink: 'syz.4.1494': attribute type 1 has an invalid length. [ 284.911181][T10263] netlink: 'syz.4.1494': attribute type 8 has an invalid length. [ 284.942009][T10274] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1494'. [ 286.194581][ T5243] Bluetooth: hci0: command tx timeout [ 286.507127][T10287] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.713127][T10298] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1503'. [ 286.751361][T10287] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.847346][T10305] netlink: 'syz.4.1506': attribute type 10 has an invalid length. [ 286.886607][T10287] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.981640][T10287] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.176151][T10287] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.208816][T10287] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.248505][T10287] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.289504][T10287] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.537325][T10342] delete_channel: no stack [ 287.665954][T10349] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1517'. [ 287.773829][T10356] netlink: 'syz.4.1519': attribute type 10 has an invalid length. [ 288.244116][T10375] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1524'. [ 288.294309][T10375] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1524'. [ 288.375695][T10385] openvswitch: netlink: ct_state flags 00008300 unsupported [ 288.425290][T10388] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1529'. [ 288.515965][T10390] netlink: 'syz.3.1530': attribute type 10 has an invalid length. [ 288.713708][T10402] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1536'. [ 288.753316][T10402] netlink: 'syz.1.1536': attribute type 1 has an invalid length. [ 288.785319][T10402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1536'. [ 289.009553][T10418] netlink: 'syz.3.1541': attribute type 9 has an invalid length. [ 289.042559][T10418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1541'. [ 289.064477][T10418] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1541'. [ 289.505691][T10432] netlink: 'syz.4.1544': attribute type 10 has an invalid length. [ 289.953385][T10442] FAULT_INJECTION: forcing a failure. [ 289.953385][T10442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.008281][T10442] CPU: 1 UID: 0 PID: 10442 Comm: syz.4.1550 Not tainted 6.11.0-rc4-syzkaller-00686-ge24a6c874601 #0 [ 290.019370][T10442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 290.029453][T10442] Call Trace: [ 290.032748][T10442] [ 290.035693][T10442] dump_stack_lvl+0x241/0x360 [ 290.040389][T10442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.045709][T10442] ? __pfx__printk+0x10/0x10 [ 290.050314][T10442] ? snprintf+0xda/0x120 [ 290.054706][T10442] should_fail_ex+0x3b0/0x4e0 [ 290.059423][T10442] _copy_to_user+0x2f/0xb0 [ 290.063863][T10442] simple_read_from_buffer+0xca/0x150 [ 290.069251][T10442] proc_fail_nth_read+0x1ec/0x260 [ 290.074292][T10442] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.079853][T10442] ? rw_verify_area+0x520/0x6b0 [ 290.084718][T10442] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.090283][T10442] vfs_read+0x204/0xbc0 [ 290.094471][T10442] ? __pfx_lock_release+0x10/0x10 [ 290.099517][T10442] ? __pfx_vfs_read+0x10/0x10 [ 290.104211][T10442] ? __fget_files+0x29/0x470 [ 290.108820][T10442] ? __fget_files+0x3f6/0x470 [ 290.113523][T10442] ksys_read+0x1a0/0x2c0 [ 290.117802][T10442] ? __pfx_ksys_read+0x10/0x10 [ 290.122595][T10442] ? do_syscall_64+0x100/0x230 [ 290.127396][T10442] ? do_syscall_64+0xb6/0x230 [ 290.132098][T10442] do_syscall_64+0xf3/0x230 [ 290.136646][T10442] ? clear_bhb_loop+0x35/0x90 [ 290.141355][T10442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.147272][T10442] RIP: 0033:0x7f854437893c [ 290.151698][T10442] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 290.171323][T10442] RSP: 002b:00007f854523a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 290.179753][T10442] RAX: ffffffffffffffda RBX: 00007f8544515f80 RCX: 00007f854437893c [ 290.187733][T10442] RDX: 000000000000000f RSI: 00007f854523a0a0 RDI: 0000000000000003 [ 290.195722][T10442] RBP: 00007f854523a090 R08: 0000000000000000 R09: 0000000000000000 [ 290.203703][T10442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.211686][T10442] R13: 0000000000000000 R14: 00007f8544515f80 R15: 00007fffbd4aad08 [ 290.219685][T10442] [ 290.296614][T10445] sctp: [Deprecated]: syz.3.1551 (pid 10445) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.296614][T10445] Use struct sctp_sack_info instead [ 290.492908][T10452] delete_channel: no stack [ 290.511112][T10455] netlink: 'syz.4.1554': attribute type 4 has an invalid length. [ 290.613621][T10459] bond1: Unknown bonding mode 6 for xdp xmit [ 290.620483][T10459] ------------[ cut here ]------------ [ 290.626064][T10459] WARNING: CPU: 0 PID: 10459 at drivers/net/bonding/bond_main.c:5494 bond_xdp_get_xmit_slave+0x519/0x690 [ 290.637353][T10459] Modules linked in: [ 290.641265][T10459] CPU: 0 UID: 0 PID: 10459 Comm: syz.1.1552 Not tainted 6.11.0-rc4-syzkaller-00686-ge24a6c874601 #0 [ 290.652130][T10459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 290.662246][T10459] RIP: 0010:bond_xdp_get_xmit_slave+0x519/0x690 [ 290.668592][T10459] Code: be 61 13 00 00 48 c7 c2 60 37 96 8c e8 f0 ae 14 fb eb 98 e8 59 0a 38 fb 4c 89 e7 48 c7 c6 60 58 96 8c 89 da e8 38 63 5b 05 90 <0f> 0b 90 eb a6 e8 3d 0a 38 fb 48 85 db 74 0a e8 33 0a 38 fb e9 72 [ 290.688290][T10459] RSP: 0018:ffffc9000f7d7848 EFLAGS: 00010246 [ 290.694553][T10459] RAX: 0a7e8ee11a4fe500 RBX: 0000000000000006 RCX: 0a7e8ee11a4fe500 [ 290.702615][T10459] RDX: ffffc90016801000 RSI: 0000000000001e5b RDI: 0000000000001e5c [ 290.710630][T10459] RBP: ffffc9000f7d7c60 R08: ffffffff8174034c R09: 1ffff92001efae84 [ 290.718737][T10459] R10: dffffc0000000000 R11: fffff52001efae85 R12: ffff88807f8d4000 [ 290.726803][T10459] R13: ffff88807f8d4000 R14: ffff88807f8d4cc0 R15: dffffc0000000000 [ 290.734870][T10459] FS: 00007fe6d23d26c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 290.743883][T10459] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 290.750502][T10459] CR2: 000000110c350ccd CR3: 000000002c06a000 CR4: 00000000003506f0 [ 290.758584][T10459] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 290.766631][T10459] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 290.774692][T10459] Call Trace: [ 290.778004][T10459] [ 290.780969][T10459] ? __warn+0x163/0x4e0 [ 290.785230][T10459] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 290.790914][T10459] ? report_bug+0x2b3/0x500 [ 290.795522][T10459] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 290.801211][T10459] ? handle_bug+0x3e/0x70 [ 290.805646][T10459] ? exc_invalid_op+0x1a/0x50 [ 290.810376][T10459] ? asm_exc_invalid_op+0x1a/0x20 [ 290.815520][T10459] ? __wake_up_klogd+0xcc/0x110 [ 290.820433][T10459] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 290.826181][T10459] ? bond_xdp_get_xmit_slave+0x518/0x690 [ 290.831865][T10459] xdp_master_redirect+0x143/0x2d0 [ 290.837099][T10459] bpf_test_run+0x8cf/0xa90 [ 290.841657][T10459] ? bpf_test_run+0x370/0xa90 [ 290.846503][T10459] ? __pfx_bpf_test_run+0x10/0x10 [ 290.851633][T10459] ? _copy_from_user+0xa6/0xe0 [ 290.856493][T10459] ? bpf_test_init+0x15a/0x180 [ 290.861286][T10459] ? xdp_convert_md_to_buff+0x1bf/0x330 [ 290.866913][T10459] bpf_prog_test_run_xdp+0x7e3/0x11b0 [ 290.872393][T10459] ? __pfx_lock_release+0x10/0x10 [ 290.877463][T10459] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 290.883355][T10459] ? __fget_files+0x29/0x470 [ 290.887998][T10459] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 290.893879][T10459] bpf_prog_test_run+0x33a/0x3b0 [ 290.898872][T10459] __sys_bpf+0x48d/0x810 [ 290.903211][T10459] ? __pfx___sys_bpf+0x10/0x10 [ 290.908020][T10459] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 290.914078][T10459] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 290.920452][T10459] ? do_syscall_64+0x100/0x230 [ 290.925299][T10459] __x64_sys_bpf+0x7c/0x90 [ 290.929764][T10459] do_syscall_64+0xf3/0x230 [ 290.934361][T10459] ? clear_bhb_loop+0x35/0x90 [ 290.939093][T10459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.945115][T10459] RIP: 0033:0x7fe6d1579ef9 [ 290.949568][T10459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.969264][T10459] RSP: 002b:00007fe6d23d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 290.977787][T10459] RAX: ffffffffffffffda RBX: 00007fe6d1716058 RCX: 00007fe6d1579ef9 [ 290.985826][T10459] RDX: 0000000000000050 RSI: 0000000020000040 RDI: 000000000000000a [ 290.993876][T10459] RBP: 00007fe6d15e793e R08: 0000000000000000 R09: 0000000000000000 [ 291.001896][T10459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.009960][T10459] R13: 0000000000000000 R14: 00007fe6d1716058 R15: 00007ffdb16d1788 [ 291.018062][T10459] [ 291.021138][T10459] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 291.028451][T10459] CPU: 0 UID: 0 PID: 10459 Comm: syz.1.1552 Not tainted 6.11.0-rc4-syzkaller-00686-ge24a6c874601 #0 [ 291.039252][T10459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 291.049342][T10459] Call Trace: [ 291.052644][T10459] [ 291.055600][T10459] dump_stack_lvl+0x241/0x360 [ 291.060289][T10459] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.065496][T10459] ? __pfx__printk+0x10/0x10 [ 291.070109][T10459] ? vscnprintf+0x5d/0x90 [ 291.074479][T10459] panic+0x349/0x860 [ 291.078420][T10459] ? __warn+0x172/0x4e0 [ 291.082611][T10459] ? __pfx_panic+0x10/0x10 [ 291.087181][T10459] __warn+0x346/0x4e0 [ 291.091200][T10459] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 291.096882][T10459] report_bug+0x2b3/0x500 [ 291.101253][T10459] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 291.106933][T10459] handle_bug+0x3e/0x70 [ 291.111155][T10459] exc_invalid_op+0x1a/0x50 [ 291.115702][T10459] asm_exc_invalid_op+0x1a/0x20 [ 291.120609][T10459] RIP: 0010:bond_xdp_get_xmit_slave+0x519/0x690 [ 291.126866][T10459] Code: be 61 13 00 00 48 c7 c2 60 37 96 8c e8 f0 ae 14 fb eb 98 e8 59 0a 38 fb 4c 89 e7 48 c7 c6 60 58 96 8c 89 da e8 38 63 5b 05 90 <0f> 0b 90 eb a6 e8 3d 0a 38 fb 48 85 db 74 0a e8 33 0a 38 fb e9 72 [ 291.146499][T10459] RSP: 0018:ffffc9000f7d7848 EFLAGS: 00010246 [ 291.152586][T10459] RAX: 0a7e8ee11a4fe500 RBX: 0000000000000006 RCX: 0a7e8ee11a4fe500 [ 291.160588][T10459] RDX: ffffc90016801000 RSI: 0000000000001e5b RDI: 0000000000001e5c [ 291.168617][T10459] RBP: ffffc9000f7d7c60 R08: ffffffff8174034c R09: 1ffff92001efae84 [ 291.176642][T10459] R10: dffffc0000000000 R11: fffff52001efae85 R12: ffff88807f8d4000 [ 291.184656][T10459] R13: ffff88807f8d4000 R14: ffff88807f8d4cc0 R15: dffffc0000000000 [ 291.192679][T10459] ? __wake_up_klogd+0xcc/0x110 [ 291.197587][T10459] ? bond_xdp_get_xmit_slave+0x518/0x690 [ 291.203261][T10459] xdp_master_redirect+0x143/0x2d0 [ 291.208423][T10459] bpf_test_run+0x8cf/0xa90 [ 291.212974][T10459] ? bpf_test_run+0x370/0xa90 [ 291.217706][T10459] ? __pfx_bpf_test_run+0x10/0x10 [ 291.222795][T10459] ? _copy_from_user+0xa6/0xe0 [ 291.227605][T10459] ? bpf_test_init+0x15a/0x180 [ 291.232405][T10459] ? xdp_convert_md_to_buff+0x1bf/0x330 [ 291.237992][T10459] bpf_prog_test_run_xdp+0x7e3/0x11b0 [ 291.243412][T10459] ? __pfx_lock_release+0x10/0x10 [ 291.248491][T10459] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 291.254321][T10459] ? __fget_files+0x29/0x470 [ 291.258933][T10459] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 291.264751][T10459] bpf_prog_test_run+0x33a/0x3b0 [ 291.269724][T10459] __sys_bpf+0x48d/0x810 [ 291.274004][T10459] ? __pfx___sys_bpf+0x10/0x10 [ 291.278824][T10459] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 291.284853][T10459] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 291.291219][T10459] ? do_syscall_64+0x100/0x230 [ 291.296046][T10459] __x64_sys_bpf+0x7c/0x90 [ 291.300507][T10459] do_syscall_64+0xf3/0x230 [ 291.305070][T10459] ? clear_bhb_loop+0x35/0x90 [ 291.309798][T10459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.315728][T10459] RIP: 0033:0x7fe6d1579ef9 [ 291.320177][T10459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.339818][T10459] RSP: 002b:00007fe6d23d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 291.348272][T10459] RAX: ffffffffffffffda RBX: 00007fe6d1716058 RCX: 00007fe6d1579ef9 [ 291.356282][T10459] RDX: 0000000000000050 RSI: 0000000020000040 RDI: 000000000000000a [ 291.364377][T10459] RBP: 00007fe6d15e793e R08: 0000000000000000 R09: 0000000000000000 [ 291.372383][T10459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.380374][T10459] R13: 0000000000000000 R14: 00007fe6d1716058 R15: 00007ffdb16d1788 [ 291.388362][T10459] [ 291.391663][T10459] Kernel Offset: disabled [ 291.395992][T10459] Rebooting in 86400 seconds..