last executing test programs: 9.675429137s ago: executing program 4 (id=7928): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="540100001000130760000000000000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1914aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000d00000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ccd700000000001c0004"], 0x154}}, 0x0) 9.550662131s ago: executing program 4 (id=7933): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x24, &(0x7f00000000c0)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="850000007900000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) 9.367165836s ago: executing program 4 (id=7936): socket(0x2, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2b, 0x801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24004800, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @private, 0x0, 0x4000000, 'wrr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001c40)={{{@in6=@dev, @in=@empty}}, {{@in6=@ipv4={""/10, ""/2, @multicast2}}, 0x0, @in=@dev}}, &(0x7f0000001d80)=0xe8) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000041c0)=ANY=[@ANYBLOB="240000002d000100000000000300000008000000", @ANYRES32=r2, @ANYBLOB="0bd5916e1e72a4c0bba23f00"], 0x24}], 0x1}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001440)={0x0, 0x0, 0x0}, &(0x7f0000001480)=0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r5) r6 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001900)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f0000001a00)=0xe8) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001a40)={r3, r7, r4}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r6) socket(0x15, 0x4, 0xff) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10) r10 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r10, r9, 0x0, 0x5, &(0x7f0000000140)='&#\'*\x00'}, 0x30) 8.88280553s ago: executing program 4 (id=7941): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x12000000, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0xb000000, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) 8.714589018s ago: executing program 4 (id=7944): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0xffffffe1}]}}}]}, 0x3c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) (async) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYRES32=r2], 0x20}}, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@ifindex, 0xffffffffffffffff, 0xb, 0x29, 0xffffffffffffffff, @link_id=0xffffffffffffffff}, 0x20) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB='c *:* rw'], 0x9) socket$inet6(0xa, 0x800, 0x2) (async) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'veth1_macvtap\x00', &(0x7f0000000e80)=@ethtool_perm_addr={0x4b, 0x50}}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xb98}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 8.118832353s ago: executing program 4 (id=7950): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xa3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 3.194841523s ago: executing program 3 (id=8003): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4000, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 2.936750764s ago: executing program 3 (id=8008): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newqdisc={0xfdef, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) 2.781290173s ago: executing program 3 (id=8012): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_delroute={0x154, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0x20}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "0eab47bba92e9b2c"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0x5, 0x0, 0x0, 0x0, 0x0, "ec058cdecf0fa4f69652b23bf9968d372a0ddfe196faa30f83514813d0527685407bc8366e8338397d6abc25347799ac708b65efffdb10e1376a4f6d4ab9949126160165e8ba5eb7c19e9795658578feb8f3cce47f43a42919c288f7d5430ffc022613991686ef6a978312dd970e64629d7cd799c5e08b64de41458eb8951a54a7cf29a810823e869f5c087d15d9d3bae1c089701f970f8e7ce8cabe52e849ba044253654222f07959e7cdcfcb27332cb82016ccd91be54e588f6ea7b5c35a62c0ceaa0e90b29c3edc16f20db3d7fb4d6236232de07ccd7d7301f46a287dd2d6abe9baba499721311e1597853a2d0c7e1e64f827d31e6917175792398e0edaa9", 0x0, "c9ebbf8ac1d7b60600"}}]}, 0x154}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@loopback, r1}, 0x14) sendto$inet6(r0, &(0x7f0000000400)="800034ca269bb23c", 0x8, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newsa={0x158, 0x10, 0x413, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "25cac5216d1c8af0a976902918bf448c5d9f5459"}}, @XFRMA_SET_MARK={0x8}]}, 0x158}}, 0x0) 2.076487121s ago: executing program 0 (id=8018): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001d80)=[{{&(0x7f00000002c0)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)='(', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="1c0080"], 0x110}}], 0x2, 0x0) (fail_nth: 18) 2.059247585s ago: executing program 3 (id=8019): socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @local, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}, {@local}]}, @cipso={0x86, 0x6}, @timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) 1.898259598s ago: executing program 1 (id=8020): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x2c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r9 = socket$inet6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r8, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, r8, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004801}, 0x8000) sendto$packet(r6, 0x0, 0x0, 0xd1, &(0x7f0000003340)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$unix(r0, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000200)="f2d387b38d1b40456929bb86a5ac0f38c7a4c77b817fe17e7d1ff49a3c5f68cd564cbe3f601d49246a7af976cbf357873c429a822079223262a303ae897fc20d617fecc71bbe758779e4d6fcbe61745bcf42611fb2d0cd05120ad6de313d581250c70d9257169c40112db1829d90ec45947ea73e8d90001f4f1d4c06dc8e0a6166eebcbf5a3f27df33744b610ef6959de2df9a261f456647b74eda49219a488b0f3ff0f757e4d8112981de3fab5466966b5ebbd20b74916693691f76e68db3a562f3064e2ce13e7ca77686deeddf53526c80a648da88df80036a2869", 0xdc}], 0x1, 0x0, 0x0, 0x20000000}, 0x40) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r13 = accept4$unix(r1, &(0x7f0000000440), &(0x7f00000004c0)=0x6e, 0x800) r14 = gettid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000700)=0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0}, &(0x7f0000000780)=0xc) r18 = getgid() sendmsg$unix(r13, &(0x7f0000000880)={&(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000580)="96560bad66c2f3e721e81b56380ce89d160217a7c0c1705908daa8688653722c0fccef0af1da38eb39a9dcba8f92c06a8555f2af3df04f6787557002eb8846337df4d3aacab6f831ac53511ff583e7649a3a229fdf797ea2790dd829a8c76224483a790bfa96df29e08b3db6506b8a13cdf64e8e93c4f802e92bfd12a726bd17988bdbd0814a04085d52181359fc9ca9e44dbb859457eeb30592b3476a", 0x9d}], 0x1, &(0x7f00000007c0)=[@rights={{0x28, 0x1, 0x1, [r12, r11, r11, r12, r11, r1]}}, @cred={{0x1c, 0x1, 0x2, {r14, 0xffffffffffffffff, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @rights={{0x10}}, @rights={{0x10}}], 0x88, 0x4}, 0x800) 1.630553464s ago: executing program 3 (id=8021): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xf4240, &(0x7f00000037c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.539137901s ago: executing program 0 (id=8022): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x2) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x68, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_CIDR={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) sendto$inet6(r1, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000001c0)=@raw=[@ldst={0x1, 0x0, 0x6, 0xa, 0x5, 0x0, 0xfffffffffffffffc}, @ldst={0x3, 0x1, 0x3, 0x4, 0x8, 0x2, 0x10}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000200)='syzkaller\x00', 0x40, 0x4e, &(0x7f0000000240)=""/78, 0x41100, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0xa, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000340)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x0, 0x2, 0x9, 0x3}, {0x2, 0x5, 0x7, 0xcd84d90982b72245}, {0x3, 0x4, 0x9, 0xa}, {0x3, 0x3, 0x3, 0x5}, {0x3, 0x4, 0xc, 0x2}, {0x2, 0x5, 0x3, 0x1}], 0x10, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='spmi_read_begin\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) accept(0xffffffffffffffff, &(0x7f0000000300)=@ax25={{0x3, @netrom}, [@remote, @rose, @bcast, @bcast, @rose, @bcast, @remote, @null]}, &(0x7f0000000280)=0x80) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000000c0)={@mcast1, @mcast1, @dev, 0x0, 0x0, 0x0, 0x0, 0x9}) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) close(r4) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000060018"], 0x50}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x3, 0x200}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x101}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x11}]}]}, 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x64}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4020095}, 0x0) 1.504439103s ago: executing program 1 (id=8023): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=@newlink={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VF_PORTS={0x4}]}, 0x24}}, 0x0) (fail_nth: 4) 1.118842245s ago: executing program 2 (id=8024): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=@getsa={0x34, 0x12, 0x1, 0x0, 0x11, {@in=@dev, 0x0, 0x0, 0x32}, [@mark={0xc}]}, 0x34}}, 0x0) 1.117994856s ago: executing program 2 (id=8025): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001740)=@allocspi={0xf8, 0x16, 0x1, 0xf0ff, 0x0, {{{@in=@multicast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@in6=@ipv4={'\x00', '\xff\xff', @local}}, @in6=@private2}}}, 0xf8}}, 0x0) 1.117496629s ago: executing program 2 (id=8026): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x7000000}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8}]}], {0x14}}, 0x64}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@enum={0x0, 0x4, 0x0, 0x6, 0x4, [{0x1, 0x20000}, {0x10, 0xffffff81}, {0x7, 0x3000}, {0x6, 0x4}]}]}, {0x0, [0x61, 0x30]}}, &(0x7f0000001800)=""/4083, 0x48, 0xff3, 0x9}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@enum={0x0, 0x4, 0x0, 0x6, 0x4, [{0x1, 0x20000}, {0x10, 0xffffff81}, {0x7, 0x3000}, {0x6, 0x4}]}]}, {0x0, [0x61, 0x30]}}, &(0x7f0000001800)=""/4083, 0x48, 0xff3, 0x9}, 0x20) 1.058453852s ago: executing program 2 (id=8027): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r1}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_delvlan={0x70, 0x71, 0x10, 0x70bd26, 0x25dfdbfd, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x40, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xc}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x24, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x80}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) 978.069678ms ago: executing program 1 (id=8028): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x24, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x6040000}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x24}}, 0x0) 976.271169ms ago: executing program 0 (id=8029): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1, 0x0, 0x500}, 0x0) 871.355516ms ago: executing program 2 (id=8030): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000780)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@dstopts={{0x30, 0x29, 0x2, {0x0, 0x2, '\x00', [@padn, @calipso={0x7, 0x10, {0x0, 0x2, 0x4, 0x0, [0x0]}}]}}}], 0x30}}], 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r1}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000080), &(0x7f0000000100)=0x4) socket$inet6(0xa, 0x3, 0x8000000003c) (async) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) (async) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) sendmmsg$inet6(r1, &(0x7f0000000780)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@dstopts={{0x30, 0x29, 0x2, {0x0, 0x2, '\x00', [@padn, @calipso={0x7, 0x10, {0x0, 0x2, 0x4, 0x0, [0x0]}}]}}}], 0x30}}], 0x2, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r1}) (async) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000080), &(0x7f0000000100)=0x4) (async) 806.280695ms ago: executing program 1 (id=8031): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtaction={0x4c, 0x1e, 0x111, 0x0, 0x0, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x6, 0x6, 'Z_'}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0) 774.667527ms ago: executing program 0 (id=8032): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0'}, 0xb) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x38, 0x0, &(0x7f00000001c0)) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async, rerun: 64) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000240)=""/65, 0x41}], 0x1}}], 0x1, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) pipe(&(0x7f0000000100)={0xffffffffffffffff}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 703.015257ms ago: executing program 2 (id=8033): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000600)={0x2, 0x0, 0x0, @dev}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000003c0)=ANY=[@ANYBLOB="0803000008021100eaff070211000000fec9887801980000080211000001cab9eac84421a23248b36351b75469357df78f3968f7968f85750dcaf70d9dc915ab5532805a577f1aa74b977883cba1902001000f7dca497a046e9a09931611561d113e129a368e1a625411439a97003b51733f27fa8218f17ff1997500a1a6bf6d7f364de7028c47c6265e9f5890be924cf3fe9950f8b2e61e8471d26d63de3f6ab144a0f6d2038bf46846d9f5a62cfdce35dfd9fcab8168980f2dc651bb6a8842ee4fb2f6b1a6ac231c122c93bf69406c1938535d874a25c5bfc6e824420fbf523caf2c88326f7cb3b12cff1ae64c0edfd9b2a51e2e3253897b6aaa98d7f4ab05ad631edcb703453d70c81e5370fff259bd9c01ba8437e41aee570a2194ddcfa56c8a9dc031"], 0x1e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x48, 0xb, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3ff}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xb}, @NFTA_SET_USERDATA={0x0, 0xd, 0x1, 0x0, "84a0c48b47f33f8d6b249be46cbffe376ff86eac65a4659602099ac2c8e24f742b859da3e94290b54d320c91022e6497c74a215477fb0fa59a2474882ef7915075920c02fe9bd576d54a704d61b30487bba83a9d1c75df7115c9b97a9af341479f171f8987832ae76676f223f3b73f25f6f790e1882a4f0d95aa9b"}]}, @NFT_MSG_NEWTABLE={0x147, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xfc, 0x6, "8ea73d3d0af2ec51c43ab660134253f1f856a676bd933e6a775c256adbf392c11e777cb3adf43aea3a986c87cc046e42c3d08859bb895bc6acd249a305e8b1ec9d381f72906ae48470cbbeba9386356f8dfa335771244b038e8da80a93f6a64c2a7052178d090d4052ca546b7a984d8486362290cfa00736b10e923b8dccfe97843540da666952adf424e55651cd2a5364feae958b0a9506c576229fc648aaa100ac6120d5782784e440f1f1dd4ac199bac1b81fd275e7f596ef4e2509d11767035c4ed712c6f55afab84bedd7e56d7e11325ed4e2281a60d13b9dea742e19f64c549ac8d7925d8160c67e34cbe93b169977585b2f560c4a"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x250, 0x5, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_CHAIN_USERDATA={0x6a, 0xc, "189affe83feab56ebc43d2fadd350083f1b09f77bef0fb12010cec9572486214aa14a6a4aa38ba625dfdd5232fbba9a3ca85bfe4c0fd3a4141aa6a55f885898f7900cb2a2bead60dd7fa0e41ccef7e15bd3b4191ed8c697ba33ce3b41289663c7892fcb4f3d0"}, @NFTA_CHAIN_USERDATA={0x1d, 0xc, "be791c6dd0e6eea4a44077f0bd33a94f160d7c020000003b7f"}, @NFTA_CHAIN_USERDATA={0x11, 0xc, "dce39b771e8bce820018efd89f"}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_NAME={0x0, 0x3, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xcd, 0xc, "4a28b6d3d932a5ff8dcb9def27b3179d96075b168c27208c277c9ef7949db49a83768d9b24837eaddfe50249bd5310a1264ad69f21733a40cc8f470c3b7bf8256cd083877545caaa0246fe16bf597a7881bcc8cf258db7420dbd1c2f22c17c8cf84ea5288ced02c12d53912ebb0f560d57b238d2b551f5961a367acb5ecf087dd2fd2a034147419d164ddd5039448668bad538545de61636bd338ce90eb6d8a7acd2b282cf3d4a513acf079a8389cabc9f28aa5cff81a0af23298c1282f24996596d9da6a3128694c3"}, @NFTA_CHAIN_HOOK={0x54, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x57291635}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0xff3d, 0x3, 'veth1_virt_wifi\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'gre0\x00'}]}, @NFTA_CHAIN_HOOK={0x40, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x410}, 0x1, 0x0, 0x0, 0x855}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(r9, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000040)={0x10}, 0x10}, {&(0x7f0000000340)={0x10, 0x20, 0x100}, 0x10}], 0x2}, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r11], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f3100000a000100be"], 0x40}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2f}]}], {0x14}}, 0x7c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000001300)=@data_frame={@msdu=@type11={{0x0, 0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {}, @device_a, @broadcast, @device_a, {0xe, 0xff8}}, @a_msdu=[{@device_b, @device_b, 0x69, "cb502ce4fcd815d3abaa917dab174020c2a155c09a2cf46f46e85fcbc998a00c7d629e4f9838505c4249abedcfa83e7169ab29120fd27f7c13c20bb6984fdb09fb64daff7153a65167387408b9bc2bf7b643fef685d6fd189b18378e9be85630ac3a355b56d32215b0"}, {@device_b, @device_b, 0x21, "1b9e6c582545e5f8c9c3620ae35d7384e615b7e93a5221e0ad76253fe4cec1fcb3"}, {@broadcast, @broadcast, 0xb2, "80c382419171571b1960a249e5a09fcd6643715402aba6a25c3124e3fa61f9233adadb1c3e47ef43d409873c110fd44cf054d99bb4ff83754f9d947b7b62022ea68859ed9dd17da64a983851768a80a6e883d9efdf0ca00434d37cfdeace99ec44f399ecff3f4c3fb89dbf724603ee0e369463180bb2845fabee1274c10a5761be9e566d7f6ca47fae548c79d6a0e2894b75f89653f55903aa37a9e0ccbcb8ea6917c0ed7f8486753d384d60143e276ae843"}, {@device_b, @device_a, 0x88, "56c222cc4fbfc263a878ceeaee08b71cf29658fa6d89c8a90d6a02126c1faf5acefcefc6263a3f9b4059d09e94f1e599a70c80b39ce6f1395d33435d2ba2e00ba8df72c736d2a6497fc36188f2a7334beeb67aae54b63d2f9351c939b39edc347538f5aee8a236915c87039883006cdde70b484049f5f8d5693f1c5b991a5175b0e4aadec6079b4d"}, {@device_b, @broadcast, 0x3, "5d3aee"}, {@broadcast, @broadcast, 0xf8, "24d8387c689af15d51c6e42d5cc27c52e30a234ed6eadbc6e7d0eb73b355b57d3ba0ae2f395893cbc804547e120afa224e6b4a0b373a7c59e236dcd41b8f1f75b87d6c3a86e8d953f709c9b2456a5e63f334ac1ecc567fc0a2c6d401a506f39799547a9b7221476ecdefc7b5bf0fbe718d4986760bbf6240ce78135ffc8b989feba760818da196999a34c709d779bd0fdf8944395e7258547e7b24669cfb4488d88e3378aa2de1dd9cd269504bf21c4810044830b2bf70eeae97a4f7bb7bc29bada5bad26ab3ef2a1b3b05aae2726497b534b5694fe1d5ccd56bd05d8f265a23d791e72faa1848d0847cd40927e7aca21b3dbb6209e0bda3"}, {@broadcast, @device_b, 0x9, "96b1d7434108b035d3"}, {@broadcast, @broadcast, 0x8a, "b83feadc82cea8e1fd8dfe0b62f382d88a91473fde718d7247a4d838b0df34c4e9091475d213b848288899470b3122b73a6011d6315865ac2c72b00b9ad7baac13c2dfd6762475b0134a7dbcd4ee74da95a1a6465fcc42ca08d42104de653241be8e0b0e47ae1a2e7f527e8205757c57bd0b6fd76ef353d8be4e0eff59aa43081f20e30f15053fb4765d"}, {@device_a, @device_b, 0xaf, "c1128fae5709ac4ad77ece9d46dc104591799d906b1a60612348a68899533086376e3173ed7fe1770559c6c40a3a85fe561d88bd58bca6470ed25da54ffb2d40c29eb77bbc008527a368bf24b56099be18ebb7cd3e092e6a2b8955bcc4ce9edb7971febf34839eafa58e5bfb01933cf8c1b1d09189580a8e2fbf2be32829d253887453f2f389b8b744e1d7ab76a141f34f0adb221548acbc5998bb88eece30854873e144a32fc647c49cf3064ea1e2"}, {@device_a, @device_b, 0xf2, "ec636e10209185cd3198af2f730f3714adb43d273d08a20cd5c6cf9fdf12c3b07f7d6c2d2fb7b67e5d899e3f7f14617a1722d7d74c029941894ca0d070bf888ff788c8baa4d028f34e6d83b8d7177d8e07f937071fcef1f9e1bcc7e6c85bdfdfe62e18ab721ed923d591dd7565bf2cecbfd7d9e85028d807b5460be07a0dae7af0d62d4e598a6555515daa262c5ed7ab2a53f156db0f18a9d7635edbb685fcfd29d4107f004b0a05bb683e3927f29096e5ae1ba600d37cd547d80cdea224a924be30233135539d49d6be9c41e2b2941b8380b3744693d9a19d48bfde0708f1c335c8c05e2487a270fd069978d3da7eb4f46b"}]}, 0x5aa) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0202ff00000000000ec00058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000000010000000000", 0x58}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x40}, @IFLA_BROADCAST={0xa}, @IFLA_WEIGHT={0x8, 0xf, 0x4}, @IFLA_PHYS_SWITCH_ID={0x15, 0x24, "4ca121a16da446f079ec4737b94c327f52"}, @IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x6}]}, 0x70}}, 0x0) 465.142314ms ago: executing program 0 (id=8034): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x900000000000000}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x0, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f00000005c0), 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000280)=@can={{}, 0x0, 0x0, 0x0, 0x0, "400000008b20aaf0"}, 0x10}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001300)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001340)={'batadv0\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="74000000100003050000000000000a1a90e30000", @ANYRES32=0x0, @ANYBLOB="00000000010000004c0012800c0001006d6163766c616e003c00028008000100100000001c0005800a000400aaaaaaaaaabb000002000400d8928a2ced1fe60008000300030000000a000400aaaaccaaaabb000008000500", @ANYRES32=r5], 0x74}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001500)={&(0x7f0000001580)=ANY=[@ANYBLOB="b0000000", @ANYRES16=0x0, @ANYBLOB="00022abd0018000180140033c6000000000000000000000000010000000500020004000000f79fc7d1a9669594e5ff8e6ed4a986e25e3f2a59c5a716004b5bf7a9a38a97075dcfc509ee941a79e0d16ff3d6057426f2e31adde9ac17df1c480a2f310acf0d48c9286700"/120, @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="080003000300000008000100", @ANYRES32=r3, @ANYBLOB="140002007465616d5f736c6176655f310000000008000100", @ANYRES32=r5, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f68737200000000080003000100000005000600030000000500070002000000050006007a000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20000}, 0x40001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c0000040000001c00018008000000", @ANYRES32=0x0, @ANYBLOB="08000ba530c427"], 0x34}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001ac0)={0x0, 0x0}, &(0x7f0000001b00)=0xc) r10 = getgid() accept(0xffffffffffffffff, &(0x7f0000001b40), 0x0) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001c00)={0xffffffffffffffff, 0x8, 0x8}, 0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000000c0)}, {&(0x7f0000000240)="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", 0xf80}], 0x2, &(0x7f0000001280)=ANY=[@ANYRES64=r8, @ANYRES32, @ANYBLOB="000000002400000000000000010000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="06f27d00"], 0x40, 0x10}}, {{&(0x7f0000001940)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001a40)=[{&(0x7f00000019c0)="78997a937123be8ce1f32cc20047a4593f05b74d191e9495b8d3423d9514bdef9132765e29e64b854ce9bc6024b0dc1df918f6f6ce806a8d3334b9bd6e8af4531c6aaa3819cd2076d0e00021c1173be95350f5ea520e04aa43b9acaf8eaf70415857a05fb5e0b2dd4d49c788693f1766ec23ea970d05a20e43c642883e23f1", 0x7f}], 0x1, &(0x7f0000001380)=ANY=[@ANYBLOB="2000000000000000012d2185b04483330ec98c0900"/31, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r11, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r11, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES8=r8, @ANYBLOB='\x00\x00\x00\x00'], 0x90, 0x8001}}], 0x2, 0x10) getuid() sendmsg$nl_xfrm(r0, &(0x7f0000000380)={&(0x7f0000000040), 0xc, 0x0}, 0x40000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1f00, 0x42073, 0xffffffffffffffff, 0x0) 408.005231ms ago: executing program 1 (id=8035): socket$nl_netfilter(0x10, 0x3, 0xc) 267.182327ms ago: executing program 1 (id=8036): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$inet_sctp(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)="0cc4c53e52cd4f1e2787e1cd1e55684e749d3b21ae068680fadc5cc648c79186f3d98ccd3a5b1732936dcf74538ffc97a9f82112023f2567972515712c7ec4e0ed2220f5425ba6ed76928e28b07ec50b135954b94c32030210aa0e2f4645f46be81d746c6b", 0x65}, {&(0x7f0000000340)="9c89ca312f027074ae7d79f183f678fc695c50a34d0e4133881f084b6d440ab6868186a9eabf0b8e5760adbc5a349da9d1620af787745bee2d6d2e6a84ee1fe7132e692fed0e0fe948d775263f5b67a91c4bd74ceeb68e733b2389262377b79861ddf5d86ca1a6388ab7257d5f1271a35a8c79a96e3e28f094fdfa96736ef41516bd3fbec3fd955247007a18dd527d224592b6fc09a05d5628e73b", 0x7fffef9b}], 0x2}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="7118e1aa11b2bda0ddcface98478bfe618ad425b35eb9be9832b753d1303e2b42d15c1ea4583b89601c3a43d97f26fa162c840e816e9a7221b9a3dfba92107074c70e98f1d8d6447acc5ca5e5aacdc9f609bc22114c60e7f96b15053e06673ebade79b1482115b8227fa106848ff4ff8a148d5dac9ba1243246ae03ffbac46680ebbed8db080b91b9bf80da0fdec7a0b98ec27fc3bb2a92ae2dc7eba80dca450497f205117", @ANYRES8=r4, @ANYRES64=r1, @ANYRES32=r5, @ANYRESOCT=r1], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x4, 0x2000003) r6 = socket(0x1, 0x5, 0x0) socket$l2tp(0x2, 0x2, 0x73) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1f, 0x42, 0x6, 0x0, 0x1900, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="6c0000001000090600"/20, @ANYRES32=r7, @ANYRESHEX=r6, @ANYRES32=r10, @ANYRES64=r5, @ANYRES16], 0x6c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1800000071000100000000000000190007000000", @ANYRES32=r12], 0x18}}, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1a}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYRES16=0x0], 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) 186.067901ms ago: executing program 0 (id=8037): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00}'], 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000b00)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_PHYS_SWITCH_ID={0x5, 0x24, '`'}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x38}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000280)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=0xac1414aa}}}}}}, 0x0) 0s ago: executing program 3 (id=8038): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000e20000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0xe2, &(0x7f00000001c0)=""/226}, 0x90) kernel console output (not intermixed with test programs): tdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.799500][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.819271][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.886732][ T9543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.900620][ T9543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.955943][T24644] netlink: 'syz.4.7037': attribute type 3 has an invalid length. [ 604.981646][T24644] netlink: 'syz.4.7037': attribute type 1 has an invalid length. [ 605.014185][T24644] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.7037'. [ 605.035792][T24647] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7036'. [ 605.711939][T24681] block nbd0: not configured, cannot reconfigure [ 605.732013][T24681] tap0: tun_chr_ioctl cmd 1074025673 [ 606.156502][T24705] netlink: 'syz.4.7053': attribute type 1 has an invalid length. [ 606.269537][T24707] macvlan2: entered allmulticast mode [ 606.311860][T24707] mac80211_hwsim hwsim56 wlan0: entered promiscuous mode [ 606.349608][T24707] mac80211_hwsim hwsim56 wlan0: entered allmulticast mode [ 606.412647][T24707] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 606.492408][T24717] bond0: entered promiscuous mode [ 606.499997][T24717] bond_slave_0: entered promiscuous mode [ 606.505907][T24717] bond_slave_1: entered promiscuous mode [ 606.512149][T24717] macvlan2: entered promiscuous mode [ 606.613378][T24721] __nla_validate_parse: 5 callbacks suppressed [ 606.613400][T24721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7057'. [ 606.706191][T24722] netlink: 'syz.3.7054': attribute type 25 has an invalid length. [ 606.736127][T24722] netlink: 'syz.3.7054': attribute type 7 has an invalid length. [ 607.091369][T24750] FAULT_INJECTION: forcing a failure. [ 607.091369][T24750] name failslab, interval 1, probability 0, space 0, times 0 [ 607.140897][T24750] CPU: 0 PID: 24750 Comm: syz.1.7065 Not tainted 6.10.0-rc7-syzkaller-00132-g503757c80928 #0 [ 607.151191][T24750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 607.161299][T24750] Call Trace: [ 607.164618][T24750] [ 607.167582][T24750] dump_stack_lvl+0x241/0x360 [ 607.172349][T24750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 607.177582][T24750] ? __pfx__printk+0x10/0x10 [ 607.182232][T24750] should_fail_ex+0x3b0/0x4e0 [ 607.186959][T24750] ? sctp_add_bind_addr+0x89/0x3a0 [ 607.192126][T24750] should_failslab+0x9/0x20 [ 607.196676][T24750] kmalloc_trace_noprof+0x6c/0x2c0 [ 607.202048][T24750] sctp_add_bind_addr+0x89/0x3a0 [ 607.207048][T24750] sctp_copy_local_addr_list+0x311/0x500 [ 607.212793][T24750] ? sctp_copy_local_addr_list+0xab/0x500 [ 607.218534][T24750] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 607.224706][T24750] ? sctp_v6_is_any+0x60/0x70 [ 607.229401][T24750] sctp_bind_addr_copy+0xad/0x3b0 [ 607.234442][T24750] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 607.240786][T24750] sctp_connect_new_asoc+0x2f3/0x6c0 [ 607.246124][T24750] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 607.251966][T24750] ? sctp_get_af_specific+0x2a/0x80 [ 607.257191][T24750] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 607.263027][T24750] __sctp_connect+0x66d/0xe30 [ 607.267734][T24750] ? __pfx___sctp_connect+0x10/0x10 [ 607.272952][T24750] ? __might_fault+0xc6/0x120 [ 607.277665][T24750] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 607.283310][T24750] ? security_sctp_bind_connect+0x90/0xb0 [ 607.289052][T24750] sctp_getsockopt_connectx3+0x46f/0x730 [ 607.294704][T24750] ? __local_bh_enable_ip+0x168/0x200 [ 607.300094][T24750] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 607.306268][T24750] ? __local_bh_enable_ip+0x168/0x200 [ 607.311649][T24750] ? sctp_getsockopt+0x13a/0xbb0 [ 607.316601][T24750] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 607.322340][T24750] sctp_getsockopt+0x8de/0xbb0 [ 607.327119][T24750] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 607.333047][T24750] do_sock_getsockopt+0x373/0x850 [ 607.338104][T24750] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 607.343660][T24750] ? __fget_files+0x3f6/0x470 [ 607.348457][T24750] __sys_getsockopt+0x271/0x330 [ 607.353329][T24750] ? __pfx___sys_getsockopt+0x10/0x10 [ 607.358716][T24750] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 607.365143][T24750] ? do_syscall_64+0x100/0x230 [ 607.369929][T24750] __x64_sys_getsockopt+0xb5/0xd0 [ 607.375011][T24750] do_syscall_64+0xf3/0x230 [ 607.379536][T24750] ? clear_bhb_loop+0x35/0x90 [ 607.384248][T24750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.390158][T24750] RIP: 0033:0x7f7c61d75bd9 [ 607.394698][T24750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.414333][T24750] RSP: 002b:00007f7c62b0f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 607.422762][T24750] RAX: ffffffffffffffda RBX: 00007f7c61f03f60 RCX: 00007f7c61d75bd9 [ 607.430742][T24750] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 607.438738][T24750] RBP: 00007f7c62b0f0a0 R08: 0000000020000140 R09: 0000000000000000 [ 607.446714][T24750] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000002 [ 607.454708][T24750] R13: 000000000000000b R14: 00007f7c61f03f60 R15: 00007ffdad0e45f8 [ 607.462800][T24750] [ 607.605021][T24763] FAULT_INJECTION: forcing a failure. [ 607.605021][T24763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.641951][T24763] CPU: 0 PID: 24763 Comm: syz.1.7071 Not tainted 6.10.0-rc7-syzkaller-00132-g503757c80928 #0 [ 607.652182][T24763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 607.662317][T24763] Call Trace: [ 607.665635][T24763] [ 607.668633][T24763] dump_stack_lvl+0x241/0x360 [ 607.673368][T24763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 607.678620][T24763] ? __pfx__printk+0x10/0x10 [ 607.683260][T24763] ? __pfx_lock_release+0x10/0x10 [ 607.688340][T24763] should_fail_ex+0x3b0/0x4e0 [ 607.693070][T24763] _copy_from_user+0x2f/0xe0 [ 607.697700][T24763] copy_msghdr_from_user+0xae/0x680 [ 607.702945][T24763] ? __pfx___might_resched+0x10/0x10 [ 607.708275][T24763] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 607.714125][T24763] ? __might_fault+0xaa/0x120 [ 607.718848][T24763] do_recvmmsg+0x40f/0xae0 [ 607.723292][T24763] ? __pfx_lock_release+0x10/0x10 [ 607.728331][T24763] ? __pfx_do_recvmmsg+0x10/0x10 [ 607.733299][T24763] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 607.739207][T24763] ? ksys_write+0x23e/0x2c0 [ 607.743722][T24763] ? __pfx_lock_release+0x10/0x10 [ 607.748764][T24763] ? vfs_write+0x7c4/0xc90 [ 607.753204][T24763] ? __mutex_unlock_slowpath+0x21d/0x750 [ 607.758882][T24763] ? __fget_files+0x3f6/0x470 [ 607.763590][T24763] __x64_sys_recvmmsg+0x199/0x250 [ 607.768637][T24763] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 607.774202][T24763] ? do_syscall_64+0x100/0x230 [ 607.779253][T24763] ? do_syscall_64+0xb6/0x230 [ 607.783951][T24763] do_syscall_64+0xf3/0x230 [ 607.788474][T24763] ? clear_bhb_loop+0x35/0x90 [ 607.793160][T24763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.799075][T24763] RIP: 0033:0x7f7c61d75bd9 [ 607.803499][T24763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.823208][T24763] RSP: 002b:00007f7c62b0f048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 607.831645][T24763] RAX: ffffffffffffffda RBX: 00007f7c61f03f60 RCX: 00007f7c61d75bd9 [ 607.839800][T24763] RDX: 000000000000049f RSI: 0000000020006100 RDI: 0000000000000009 [ 607.847969][T24763] RBP: 00007f7c62b0f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 607.855967][T24763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 607.863956][T24763] R13: 000000000000000b R14: 00007f7c61f03f60 R15: 00007ffdad0e45f8 [ 607.871958][T24763] [ 608.023592][T24775] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7073'. [ 608.689698][T24794] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7080'. [ 608.722261][T24794] netlink: 'syz.4.7080': attribute type 39 has an invalid length. [ 609.080102][T24800] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7082'. [ 609.219524][T24809] netlink: 'syz.1.7085': attribute type 1 has an invalid length. [ 609.469991][T24820] netlink: 'syz.0.7087': attribute type 10 has an invalid length. [ 609.505730][T24820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.539892][T24820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.634149][T24820] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 609.747887][T24834] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7091'. [ 610.254757][T24862] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7102'. [ 610.443188][T24866] xt_CT: You must specify a L4 protocol and not use inversions on it [ 610.582555][T24871] netlink: 'syz.0.7106': attribute type 6 has an invalid length. [ 610.760582][T24876] netlink: 'syz.1.7107': attribute type 10 has an invalid length. [ 610.836710][T24880] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7110'. [ 611.288406][T24906] openvswitch: netlink: Unknown nsh attribute 0 [ 611.370025][T24860] dvmrp0: entered allmulticast mode [ 611.404970][T24906] team_slave_1: mtu greater than device maximum [ 611.423061][T24906] team0: Device team_slave_1 failed to change mtu [ 612.601917][T24942] xt_CT: You must specify a L4 protocol and not use inversions on it [ 612.652911][T24946] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 612.759667][T24950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7134'. [ 612.841523][T24954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7136'. [ 613.043184][T24962] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7140'. [ 613.105253][T24967] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7140'. [ 613.264147][T24970] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7142'. [ 613.398455][T24979] syz.0.7144: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 613.428251][T24979] CPU: 0 PID: 24979 Comm: syz.0.7144 Not tainted 6.10.0-rc7-syzkaller-00132-g503757c80928 #0 [ 613.435212][T24984] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.7146'. [ 613.438452][T24979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 613.438537][T24979] Call Trace: [ 613.438551][T24979] [ 613.438562][T24979] dump_stack_lvl+0x241/0x360 [ 613.438607][T24979] ? __pfx_dump_stack_lvl+0x10/0x10 [ 613.438644][T24979] ? __pfx__printk+0x10/0x10 [ 613.438683][T24979] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 613.438719][T24979] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 613.438759][T24979] warn_alloc+0x278/0x410 [ 613.438802][T24979] ? __pfx_warn_alloc+0x10/0x10 [ 613.438851][T24979] ? xskq_create+0xb6/0x170 [ 613.438885][T24979] ? __get_vm_area_node+0x23d/0x270 [ 613.438919][T24979] __vmalloc_node_range_noprof+0x69f/0x1460 [ 613.438983][T24979] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 613.439017][T24979] ? __kasan_kmalloc+0x98/0xb0 [ 613.439046][T24979] ? xskq_create+0x54/0x170 [ 613.439090][T24979] vmalloc_user_noprof+0x74/0x80 [ 613.439117][T24979] ? xskq_create+0xb6/0x170 [ 613.439149][T24979] xskq_create+0xb6/0x170 [ 613.439185][T24979] xsk_init_queue+0xa1/0x100 [ 613.439222][T24979] xsk_setsockopt+0x4ea/0x950 [ 613.439258][T24979] ? __pfx_xsk_setsockopt+0x10/0x10 [ 613.439295][T24979] ? __pfx_lock_acquire+0x10/0x10 [ 613.439322][T24979] ? aa_sock_opt_perm+0x79/0x120 [ 613.439368][T24979] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 613.439392][T24979] ? security_socket_setsockopt+0x87/0xb0 [ 613.439426][T24979] ? __pfx_xsk_setsockopt+0x10/0x10 [ 613.439455][T24979] do_sock_setsockopt+0x3af/0x720 [ 613.439502][T24979] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 613.439532][T24979] ? __fget_files+0x29/0x470 [ 613.439567][T24979] ? __fget_files+0x3f6/0x470 [ 613.439614][T24979] __sys_setsockopt+0x1ae/0x250 [ 613.439651][T24979] __x64_sys_setsockopt+0xb5/0xd0 [ 613.439691][T24979] do_syscall_64+0xf3/0x230 [ 613.439725][T24979] ? clear_bhb_loop+0x35/0x90 [ 613.439754][T24979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.439788][T24979] RIP: 0033:0x7f1bfe775bd9 [ 613.459137][T24979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.459166][T24979] RSP: 002b:00007f1bff4be048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 613.459195][T24979] RAX: ffffffffffffffda RBX: 00007f1bfe903f60 RCX: 00007f1bfe775bd9 [ 613.459214][T24979] RDX: 0000000000000005 RSI: 000000000000011b RDI: 0000000000000005 [ 613.682214][T24979] RBP: 00007f1bfe7e4e60 R08: 000000000000002c R09: 0000000000000000 [ 613.690232][T24979] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 613.698322][T24979] R13: 000000000000000b R14: 00007f1bfe903f60 R15: 00007ffd86bcf4d8 [ 613.706340][T24979] [ 613.724033][T24979] Mem-Info: [ 613.729781][T24979] active_anon:7945 inactive_anon:0 isolated_anon:0 [ 613.729781][T24979] active_file:1845 inactive_file:38373 isolated_file:0 [ 613.729781][T24979] unevictable:768 dirty:205 writeback:0 [ 613.729781][T24979] slab_reclaimable:9818 slab_unreclaimable:111183 [ 613.729781][T24979] mapped:13451 shmem:1245 pagetables:652 [ 613.729781][T24979] sec_pagetables:0 bounce:0 [ 613.729781][T24979] kernel_misc_reclaimable:0 [ 613.729781][T24979] free:1384167 free_pcp:378 free_cma:0 [ 613.800761][T24979] Node 0 active_anon:31680kB inactive_anon:0kB active_file:7380kB inactive_file:153420kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:53804kB dirty:816kB writeback:0kB shmem:3444kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11384kB pagetables:2508kB sec_pagetables:0kB all_unreclaimable? no [ 613.867990][T24979] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 613.901681][T24979] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 613.933266][T24979] lowmem_reserve[]: 0 2571 2571 0 0 [ 613.939674][T24979] Node 0 DMA32 free:1572692kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:31440kB inactive_anon:0kB active_file:7380kB inactive_file:153100kB unevictable:1536kB writepending:812kB present:3129332kB managed:2659864kB mlocked:0kB bounce:0kB free_pcp:2040kB local_pcp:1152kB free_cma:0kB [ 613.977501][T24995] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 614.029098][T24999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7153'. [ 614.038420][T24979] lowmem_reserve[]: 0 0 0 0 0 [ 614.043227][T24979] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:320kB unevictable:0kB writepending:4kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 614.127560][T24979] lowmem_reserve[]: 0 0 0 0 0 [ 614.132392][T24979] Node 1 Normal free:3949908kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 614.173090][T24979] lowmem_reserve[]: 0 0 0 0 0 [ 614.179412][T24979] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 614.192892][T24979] Node 0 DMA32: 429*4kB (UM) 353*8kB (UME) 308*16kB (UME) 210*32kB (UM) 188*64kB (UME) 72*128kB (UME) 44*256kB (UM) 29*512kB (UME) 5*1024kB (UM) 5*2048kB (UM) 365*4096kB (M) = 1573948kB [ 614.222532][T25010] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 614.258044][T24979] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 614.280999][T24979] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 5*16kB (UM) 3*32kB (UM) 8*64kB (U) 5*128kB (U) 2*256kB (UM) 5*512kB (UM) 3*1024kB (U) 3*2048kB (U) 961*4096kB (M) = 3949908kB [ 614.299825][T25014] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7158'. [ 614.333197][T25010] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7158'. [ 614.342922][T24979] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 614.354752][T24979] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 614.377655][T24979] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 614.392707][T25014] Êü: entered promiscuous mode [ 614.394681][T24979] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 614.419151][T24979] 41463 total pagecache pages [ 614.424109][T24979] 0 pages in swap cache [ 614.429071][T24979] Free swap = 124996kB [ 614.435904][T24979] Total swap = 124996kB [ 614.440608][T24979] 2097051 pages RAM [ 614.444663][T24979] 0 pages HighMem/MovableOnly [ 614.473583][T24979] 400875 pages reserved [ 614.483666][T24979] 0 pages cma reserved [ 614.536380][T25022] netlink: 'syz.3.7162': attribute type 2 has an invalid length. [ 614.556557][T25022] netlink: 'syz.3.7162': attribute type 8 has an invalid length. [ 614.570956][T25022] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7162'. [ 614.612560][T25026] bridge0: entered promiscuous mode [ 614.619523][T25026] bridge0: left promiscuous mode [ 614.693708][T25033] netlink: 'syz.3.7165': attribute type 1 has an invalid length. [ 614.823923][T25036] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 614.867394][T25038] netlink: 'syz.1.7167': attribute type 3 has an invalid length. [ 615.063770][T25047] netlink: 'syz.1.7170': attribute type 27 has an invalid length. [ 615.094133][T25047] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 615.427201][T25063] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 615.502779][T25065] netlink: 'syz.1.7179': attribute type 1 has an invalid length. [ 615.717174][T25074] netlink: 'syz.4.7182': attribute type 4 has an invalid length. [ 616.669541][T25096] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 617.495697][T25113] sctp: [Deprecated]: syz.1.7194 (pid 25113) Use of int in max_burst socket option. [ 617.495697][T25113] Use struct sctp_assoc_value instead [ 617.658026][T25124] netlink: 'syz.1.7199': attribute type 1 has an invalid length. [ 617.666109][T25124] netlink: 'syz.1.7199': attribute type 4 has an invalid length. [ 617.816589][T25131] __nla_validate_parse: 10 callbacks suppressed [ 617.816612][T25131] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7202'. [ 617.935116][T25135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7203'. [ 618.026349][T25139] netlink: 'syz.0.7204': attribute type 3 has an invalid length. [ 618.824589][T25180] netlink: 277 bytes leftover after parsing attributes in process `syz.4.7217'. [ 618.908284][T25177] batadv0: entered promiscuous mode [ 618.913981][T25177] macvlan2: entered allmulticast mode [ 618.927425][T25177] batadv0: entered allmulticast mode [ 618.944513][T25177] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 618.976378][T25177] batadv0: left allmulticast mode [ 618.994825][T25177] batadv0: left promiscuous mode [ 619.588959][T25213] tipc: Started in network mode [ 619.619828][T25213] tipc: Node identity , cluster identity 4711 [ 619.652065][T25213] tipc: Failed to set node id, please configure manually [ 619.694718][T25213] tipc: Enabling of bearer rejected, failed to enable media [ 619.892801][T25221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.927267][T25221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7232'. [ 620.047484][T25227] bridge_slave_1: left promiscuous mode [ 620.072921][T25227] bridge65: port 1(bridge_slave_1) entered disabled state [ 620.113074][T25227] bridge68: port 1(bridge_slave_1) entered blocking state [ 620.125331][T25227] bridge68: port 1(bridge_slave_1) entered disabled state [ 620.159476][T25234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.170887][T25227] bridge_slave_1: entered promiscuous mode [ 620.503523][T25248] validate_nla: 1 callbacks suppressed [ 620.503545][T25248] netlink: 'syz.0.7241': attribute type 4 has an invalid length. [ 620.615980][T25255] netlink: 'syz.0.7241': attribute type 4 has an invalid length. [ 620.970941][T25265] syzkaller1: entered promiscuous mode [ 620.976504][T25265] syzkaller1: entered allmulticast mode [ 620.989204][T25269] FAULT_INJECTION: forcing a failure. [ 620.989204][T25269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 621.016076][T25269] CPU: 1 PID: 25269 Comm: syz.4.7247 Not tainted 6.10.0-rc7-syzkaller-00132-g503757c80928 #0 [ 621.026307][T25269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 621.036403][T25269] Call Trace: [ 621.039720][T25269] [ 621.042684][T25269] dump_stack_lvl+0x241/0x360 [ 621.047414][T25269] ? __pfx_dump_stack_lvl+0x10/0x10 [ 621.052666][T25269] ? __pfx__printk+0x10/0x10 [ 621.057313][T25269] ? __pfx_lock_release+0x10/0x10 [ 621.062380][T25269] should_fail_ex+0x3b0/0x4e0 [ 621.067101][T25269] _copy_from_iter+0x1f6/0x1960 [ 621.072020][T25269] ? __virt_addr_valid+0x183/0x530 [ 621.077188][T25269] ? __pfx_lock_release+0x10/0x10 [ 621.082267][T25269] ? __alloc_skb+0x28f/0x440 [ 621.086906][T25269] ? __pfx__copy_from_iter+0x10/0x10 [ 621.092231][T25269] ? __virt_addr_valid+0x183/0x530 [ 621.097371][T25269] ? __virt_addr_valid+0x183/0x530 [ 621.102525][T25269] ? __virt_addr_valid+0x45f/0x530 [ 621.107689][T25269] ? __check_object_size+0x49c/0x900 [ 621.113035][T25269] netlink_sendmsg+0x743/0xcb0 [ 621.117865][T25269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 621.123212][T25269] ? __import_iovec+0x536/0x820 [ 621.128087][T25269] ? aa_sock_msg_perm+0x91/0x160 [ 621.133059][T25269] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 621.138359][T25269] ? security_socket_sendmsg+0x87/0xb0 [ 621.143838][T25269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 621.149150][T25269] __sock_sendmsg+0x221/0x270 [ 621.153841][T25269] ____sys_sendmsg+0x525/0x7d0 [ 621.158630][T25269] ? __pfx_____sys_sendmsg+0x10/0x10 [ 621.163943][T25269] __sys_sendmsg+0x2b0/0x3a0 [ 621.168559][T25269] ? __pfx___sys_sendmsg+0x10/0x10 [ 621.173680][T25269] ? vfs_write+0x7c4/0xc90 [ 621.178149][T25269] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 621.184487][T25269] ? do_syscall_64+0x100/0x230 [ 621.189275][T25269] ? do_syscall_64+0xb6/0x230 [ 621.193973][T25269] do_syscall_64+0xf3/0x230 [ 621.198495][T25269] ? clear_bhb_loop+0x35/0x90 [ 621.203180][T25269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.209097][T25269] RIP: 0033:0x7f2f08175bd9 [ 621.213521][T25269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.233230][T25269] RSP: 002b:00007f2f08eee048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 621.241683][T25269] RAX: ffffffffffffffda RBX: 00007f2f08303f60 RCX: 00007f2f08175bd9 [ 621.249662][T25269] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 621.257685][T25269] RBP: 00007f2f08eee0a0 R08: 0000000000000000 R09: 0000000000000000 [ 621.265694][T25269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.273773][T25269] R13: 000000000000000b R14: 00007f2f08303f60 R15: 00007ffe8ca9b9d8 [ 621.281791][T25269] [ 621.538383][T25272] vlan2: entered promiscuous mode [ 621.797664][T25287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.827997][T25293] FAULT_INJECTION: forcing a failure. [ 621.827997][T25293] name failslab, interval 1, probability 0, space 0, times 0 [ 621.856298][T25287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7255'. [ 621.877150][T25293] CPU: 0 PID: 25293 Comm: syz.3.7258 Not tainted 6.10.0-rc7-syzkaller-00132-g503757c80928 #0 [ 621.887377][T25293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 621.897467][T25293] Call Trace: [ 621.900784][T25293] [ 621.903745][T25293] dump_stack_lvl+0x241/0x360 [ 621.908481][T25293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 621.913733][T25293] ? __pfx__printk+0x10/0x10 [ 621.918367][T25293] ? __pfx___might_resched+0x10/0x10 [ 621.923769][T25293] ? validate_chain+0x11e/0x5900 [ 621.928730][T25293] should_fail_ex+0x3b0/0x4e0 [ 621.933442][T25293] should_failslab+0x9/0x20 [ 621.937975][T25293] kmalloc_node_trace_noprof+0x74/0x300 [ 621.943574][T25293] ? __get_vm_area_node+0x113/0x270 [ 621.948815][T25293] __get_vm_area_node+0x113/0x270 [ 621.953906][T25293] __vmalloc_node_range_noprof+0x3bc/0x1460 [ 621.959838][T25293] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 621.965431][T25293] ? mark_lock+0x9a/0x350 [ 621.966742][T25287] bridge_slave_1: left allmulticast mode [ 621.969805][T25293] ? aa_get_newest_label+0xff/0x6f0 [ 621.969860][T25293] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 621.975746][T25287] bridge_slave_1: left promiscuous mode [ 621.980687][T25293] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 621.980719][T25293] __vmalloc_noprof+0x79/0x90 [ 621.998284][T25287] bridge18: port 1(bridge_slave_1) entered disabled state [ 622.002962][T25293] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 622.015775][T25293] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 622.021291][T25293] ? bpf_prog_alloc+0x28/0x1b0 [ 622.026089][T25293] bpf_prog_alloc+0x3a/0x1b0 [ 622.030701][T25293] bpf_prog_load+0x7f7/0x20f0 [ 622.035404][T25293] ? __pfx_bpf_prog_load+0x10/0x10 [ 622.040551][T25293] ? __pfx___might_resched+0x10/0x10 [ 622.045905][T25293] ? __might_fault+0xc6/0x120 [ 622.050617][T25293] ? bpf_lsm_bpf+0x9/0x10 [ 622.054954][T25293] ? security_bpf+0x87/0xb0 [ 622.059475][T25293] __sys_bpf+0x4ee/0x810 [ 622.063736][T25293] ? __pfx___sys_bpf+0x10/0x10 [ 622.068545][T25293] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 622.074907][T25293] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 622.081241][T25293] ? do_syscall_64+0x100/0x230 [ 622.086025][T25293] __x64_sys_bpf+0x7c/0x90 [ 622.090478][T25293] do_syscall_64+0xf3/0x230 [ 622.095032][T25293] ? clear_bhb_loop+0x35/0x90 [ 622.099747][T25293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.105676][T25293] RIP: 0033:0x7f450e775bd9 [ 622.110100][T25293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.129730][T25293] RSP: 002b:00007f450f5e0048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 622.130099][T25298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.138170][T25293] RAX: ffffffffffffffda RBX: 00007f450e903f60 RCX: 00007f450e775bd9 [ 622.138195][T25293] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005 [ 622.138210][T25293] RBP: 00007f450f5e00a0 R08: 0000000000000000 R09: 0000000000000000 [ 622.138226][T25293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.138241][T25293] R13: 000000000000000b R14: 00007f450e903f60 R15: 00007ffdc78138a8 [ 622.138277][T25293] [ 622.265258][T25287] bridge20: port 1(bridge_slave_1) entered blocking state [ 622.285766][T25287] bridge20: port 1(bridge_slave_1) entered disabled state [ 622.295844][T25287] bridge_slave_1: entered allmulticast mode [ 622.308054][T25287] bridge_slave_1: entered promiscuous mode [ 622.325721][T25299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7260'. [ 623.264944][T25333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7272'. [ 623.275783][T25333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7272'. [ 623.327630][T25310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 623.337756][T25310] bond_slave_0: left promiscuous mode [ 623.364595][T25310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 623.388642][T25310] bond_slave_1: left promiscuous mode [ 623.418673][T25310] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 623.439667][T25310] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 623.448263][T25310] bond0 (unregistering): Released all slaves [ 623.577702][T25332] tap0: tun_chr_ioctl cmd 35108 [ 623.681054][T25347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7276'. [ 623.820788][T25356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.845238][T25356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7280'. [ 623.898166][T25356] bridge_slave_1: left allmulticast mode [ 623.914469][T25356] bridge_slave_1: left promiscuous mode [ 623.924726][T25356] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.093038][T25371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.144026][T25365] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 624.651702][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.688934][T25356] bridge1: port 1(bridge_slave_1) entered blocking state [ 624.714621][T25356] bridge1: port 1(bridge_slave_1) entered disabled state [ 624.749256][T25356] bridge_slave_1: entered allmulticast mode [ 624.756571][T25356] bridge_slave_1: entered promiscuous mode [ 624.793411][T25363] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7283'. [ 624.905639][T25379] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7286'. [ 625.052669][T25390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7292'. [ 625.084887][T25393] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 625.104579][T25391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7291'. [ 625.127878][T25391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7291'. [ 625.254133][T25397] bridge0: port 2(gretap0) entered blocking state [ 625.272635][T25397] bridge0: port 2(gretap0) entered disabled state [ 625.288450][T25397] gretap0: entered allmulticast mode [ 625.317620][T25397] gretap0: entered promiscuous mode [ 625.324360][T25397] bridge0: port 2(gretap0) entered blocking state [ 625.331035][T25397] bridge0: port 2(gretap0) entered forwarding state [ 625.383794][T25404] gretap0: left allmulticast mode [ 625.407282][T25404] gretap0: left promiscuous mode [ 625.428951][T25404] bridge0: port 2(gretap0) entered disabled state [ 625.468939][T25414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7301'. [ 625.492644][T25414] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 625.737932][T25434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.817333][T25439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.858014][T25434] bridge_slave_1: left allmulticast mode [ 625.870337][T25434] bridge_slave_1: left promiscuous mode [ 625.876440][T25434] bridge15: port 1(bridge_slave_1) entered disabled state [ 625.898521][T25434] bridge17: port 1(bridge_slave_1) entered blocking state [ 625.911625][T25434] bridge17: port 1(bridge_slave_1) entered disabled state [ 625.925975][T25434] bridge_slave_1: entered allmulticast mode [ 625.946235][T25434] bridge_slave_1: entered promiscuous mode [ 625.995221][T25439] bridge_slave_1: left allmulticast mode [ 626.024666][T25439] bridge_slave_1: left promiscuous mode [ 626.033560][T25439] bridge1: port 1(bridge_slave_1) entered disabled state [ 626.063041][T25439] bridge2: port 1(bridge_slave_1) entered blocking state [ 626.097489][T25439] bridge2: port 1(bridge_slave_1) entered disabled state [ 626.104851][T25439] bridge_slave_1: entered allmulticast mode [ 626.153312][T25439] bridge_slave_1: entered promiscuous mode [ 626.198423][T25434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.231291][T25454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.809384][T25474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.844716][T25474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.911585][T25477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.363581][T25494] netlink: 'syz.3.7327': attribute type 10 has an invalid length. [ 627.400277][T25494] bridge0: port 3(dummy0) entered blocking state [ 627.410157][T25494] bridge0: port 3(dummy0) entered disabled state [ 627.416818][T25494] dummy0: entered allmulticast mode [ 627.435252][T25494] dummy0: entered promiscuous mode [ 627.508106][T25494] bridge0: port 3(dummy0) entered blocking state [ 627.514633][T25494] bridge0: port 3(dummy0) entered forwarding state [ 627.604463][T25508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.725317][T25508] bridge_slave_1: left allmulticast mode [ 627.733503][T25508] bridge_slave_1: left promiscuous mode [ 627.739911][T25508] bridge17: port 1(bridge_slave_1) entered disabled state [ 627.790437][T25508] bridge18: port 1(bridge_slave_1) entered blocking state [ 627.814340][T25508] bridge18: port 1(bridge_slave_1) entered disabled state [ 627.833157][T25508] bridge_slave_1: entered allmulticast mode [ 627.862719][T25508] bridge_slave_1: entered promiscuous mode [ 627.910803][T25523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.071942][T25529] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 628.094189][T25529] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 628.112437][T25533] FAULT_INJECTION: forcing a failure. [ 628.112437][T25533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 628.164965][T25533] CPU: 1 PID: 25533 Comm: syz.3.7338 Not tainted 6.10.0-rc7-syzkaller-00132-g503757c80928 #0 [ 628.175201][T25533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 628.185302][T25533] Call Trace: [ 628.188619][T25533] [ 628.191582][T25533] dump_stack_lvl+0x241/0x360 [ 628.196323][T25533] ? __pfx_dump_stack_lvl+0x10/0x10 [ 628.201580][T25533] ? __pfx__printk+0x10/0x10 [ 628.206217][T25533] ? __pfx_lock_release+0x10/0x10 [ 628.211308][T25533] should_fail_ex+0x3b0/0x4e0 [ 628.216048][T25533] _copy_to_user+0x2f/0xb0 [ 628.220572][T25533] ethtool_get_link_ksettings+0x386/0x550 [ 628.226339][T25533] ? __pfx_ethtool_get_link_ksettings+0x10/0x10 [ 628.232879][T25533] ? __kasan_kmalloc+0x98/0xb0 [ 628.237695][T25533] ? full_name_hash+0x93/0xe0 [ 628.242425][T25533] dev_ethtool+0x95a/0x1bc0 [ 628.246983][T25533] ? __pfx_dev_ethtool+0x10/0x10 [ 628.251990][T25533] ? dev_load+0x21/0x1f0 [ 628.256329][T25533] dev_ioctl+0x785/0x1340 [ 628.260713][T25533] sock_do_ioctl+0x240/0x460 [ 628.265338][T25533] ? __pfx_sock_do_ioctl+0x10/0x10 [ 628.270497][T25533] sock_ioctl+0x629/0x8e0 [ 628.274851][T25533] ? __pfx_sock_ioctl+0x10/0x10 [ 628.279725][T25533] ? __fget_files+0x29/0x470 [ 628.284335][T25533] ? __fget_files+0x3f6/0x470 [ 628.289053][T25533] ? __fget_files+0x29/0x470 [ 628.293671][T25533] ? bpf_lsm_file_ioctl+0x9/0x10 [ 628.298618][T25533] ? security_file_ioctl+0x87/0xb0 [ 628.303844][T25533] ? __pfx_sock_ioctl+0x10/0x10 [ 628.308717][T25533] __se_sys_ioctl+0xfc/0x170 [ 628.313325][T25533] do_syscall_64+0xf3/0x230 [ 628.317847][T25533] ? clear_bhb_loop+0x35/0x90 [ 628.322579][T25533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.328518][T25533] RIP: 0033:0x7f450e775bd9 [ 628.332942][T25533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.352568][T25533] RSP: 002b:00007f450f5e0048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 628.361016][T25533] RAX: ffffffffffffffda RBX: 00007f450e903f60 RCX: 00007f450e775bd9 [ 628.368998][T25533] RDX: 00000000200003c0 RSI: 0000000000008946 RDI: 000000000000000b [ 628.376985][T25533] RBP: 00007f450f5e00a0 R08: 0000000000000000 R09: 0000000000000000 [ 628.384973][T25533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.392961][T25533] R13: 000000000000000b R14: 00007f450e903f60 R15: 00007ffdc78138a8 [ 628.400963][T25533] [ 628.861622][T25557] __nla_validate_parse: 9 callbacks suppressed [ 628.861645][T25557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7348'. [ 628.902850][T25555] delete_channel: no stack [ 629.012334][T25572] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7353'. [ 629.388792][T25587] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7360'. [ 629.426486][T25587] netlink: 980 bytes leftover after parsing attributes in process `syz.0.7360'. [ 629.582413][T25595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7363'. [ 629.608310][T25595] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7363'. [ 629.854985][T25603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.895192][T25603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7367'. [ 629.966303][T25603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7367'. [ 630.089563][T25603] bridge_slave_1: left allmulticast mode [ 630.117550][T25603] bridge_slave_1: left promiscuous mode [ 630.123443][T25603] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.217715][T25603] bridge1: port 1(bridge_slave_1) entered blocking state [ 630.224975][T25603] bridge1: port 1(bridge_slave_1) entered disabled state [ 630.238188][T25603] bridge_slave_1: entered allmulticast mode [ 630.259825][T25617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.333051][T25603] bridge_slave_1: entered promiscuous mode [ 630.504011][ T5096] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 630.518811][ T5096] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 630.529811][ T5096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 630.547777][ T5096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 630.555663][ T5096] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 630.563349][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 630.589515][T25624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7375'. [ 630.599370][T25626] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7375'. [ 631.176168][T25625] chnl_net:caif_netlink_parms(): no params data found [ 631.410893][T25625] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.420679][T25625] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.435559][T25625] bridge_slave_0: entered allmulticast mode [ 631.443830][T25625] bridge_slave_0: entered promiscuous mode [ 631.469062][T25625] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.486561][T25625] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.494303][T25625] bridge_slave_1: entered allmulticast mode [ 631.512717][T25625] bridge_slave_1: entered promiscuous mode [ 631.583496][T25625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.605035][T25625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.703600][T25625] team0: Port device team_slave_0 added [ 631.714137][T25625] team0: Port device team_slave_1 added [ 631.773715][T25625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.782656][T25625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.814311][T25625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.829932][T25625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.838258][T25625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.882968][T25625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.010164][T25625] hsr_slave_0: entered promiscuous mode [ 632.030502][T25625] hsr_slave_1: entered promiscuous mode [ 632.046395][T25625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 632.071415][T25625] Cannot create hsr debugfs directory [ 632.649925][ T5105] Bluetooth: hci2: command tx timeout [ 632.738399][T25625] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.750918][T25625] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 632.966781][T25625] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.026706][T25625] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 633.224424][T25625] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.242107][T25625] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 633.369015][T25625] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 633.405515][T25625] team0: Port device netdevsim0 removed [ 633.424673][T25625] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.445328][T25625] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 633.557288][T25755] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 633.762635][T25764] FAULT_INJECTION: forcing a failure. [ 633.762635][T25764] name failslab, interval 1, probability 0, space 0, times 0 [ 633.792327][T25764] CPU: 1 PID: 25764 Comm: syz.2.7424 Not tainted 6.10.0-rc7-syzkaller-00132-g503757c80928 #0 [ 633.802559][T25764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 633.812656][T25764] Call Trace: [ 633.815978][T25764] [ 633.818949][T25764] dump_stack_lvl+0x241/0x360 [ 633.823709][T25764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 633.828973][T25764] ? __pfx__printk+0x10/0x10 [ 633.833610][T25764] ? __pfx___might_resched+0x10/0x10 [ 633.838935][T25764] should_fail_ex+0x3b0/0x4e0 [ 633.843666][T25764] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 633.849945][T25764] should_failslab+0x9/0x20 [ 633.854478][T25764] __kmalloc_noprof+0xd8/0x400 [ 633.859282][T25764] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 633.865491][T25764] genl_rcv_msg+0x802/0xec0 [ 633.870011][T25764] ? mark_lock+0x9a/0x350 [ 633.874365][T25764] ? __pfx_genl_rcv_msg+0x10/0x10 [ 633.879427][T25764] ? __pfx_lock_acquire+0x10/0x10 [ 633.884460][T25764] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 633.890024][T25764] ? __pfx___might_resched+0x10/0x10 [ 633.895336][T25764] netlink_rcv_skb+0x1e3/0x430 [ 633.900122][T25764] ? __pfx_genl_rcv_msg+0x10/0x10 [ 633.905158][T25764] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 633.910491][T25764] genl_rcv+0x28/0x40 [ 633.914482][T25764] netlink_unicast+0x7ea/0x980 [ 633.919279][T25764] ? __pfx_netlink_unicast+0x10/0x10 [ 633.924581][T25764] ? __virt_addr_valid+0x183/0x530 [ 633.930081][T25764] ? __check_object_size+0x49c/0x900 [ 633.935388][T25764] ? bpf_lsm_netlink_send+0x9/0x10 [ 633.940520][T25764] netlink_sendmsg+0x8db/0xcb0 [ 633.945316][T25764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 633.950622][T25764] ? __import_iovec+0x536/0x820 [ 633.955492][T25764] ? aa_sock_msg_perm+0x91/0x160 [ 633.960450][T25764] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 633.965752][T25764] ? security_socket_sendmsg+0x87/0xb0 [ 633.971227][T25764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 633.976533][T25764] __sock_sendmsg+0x221/0x270 [ 633.981226][T25764] ____sys_sendmsg+0x525/0x7d0 [ 633.986016][T25764] ? __pfx_____sys_sendmsg+0x10/0x10 [ 633.991333][T25764] __sys_sendmsg+0x2b0/0x3a0 [ 633.995964][T25764] ? __pfx___sys_sendmsg+0x10/0x10 [ 634.001110][T25764] ? vfs_write+0x7c4/0xc90 [ 634.005617][T25764] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 634.011989][T25764] ? do_syscall_64+0x100/0x230 [ 634.016792][T25764] ? do_syscall_64+0xb6/0x230 [ 634.021501][T25764] do_syscall_64+0xf3/0x230 [ 634.026053][T25764] ? clear_bhb_loop+0x35/0x90 [ 634.030749][T25764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.036668][T25764] RIP: 0033:0x7f5011975bd9 [ 634.041137][T25764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.060772][T25764] RSP: 002b:00007f501273c048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 634.069207][T25764] RAX: ffffffffffffffda RBX: 00007f5011b03f60 RCX: 00007f5011975bd9 [ 634.077195][T25764] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 634.085183][T25764] RBP: 00007f501273c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 634.093162][T25764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.101146][T25764] R13: 000000000000000b R14: 00007f5011b03f60 R15: 00007ffca7458838 [ 634.109148][T25764] [ 634.152683][T25760] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 634.186106][T25625] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 634.267616][T25625] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 634.315052][T25625] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 634.351073][T25770] netlink: 'syz.2.7429': attribute type 11 has an invalid length. [ 634.352818][T25625] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 634.422744][T25774] xt_TPROXY: Can be used only with -p tcp or -p udp [ 634.547411][T25779] netlink: 'syz.4.7432': attribute type 3 has an invalid length. [ 634.603391][T25782] vlan1: entered allmulticast mode [ 634.609637][T25782] gretap0: entered allmulticast mode [ 634.616739][T25782] bridge0: port 2(vlan1) entered blocking state [ 634.623986][T25782] bridge0: port 2(vlan1) entered disabled state [ 634.635819][T25782] vlan1: entered promiscuous mode [ 634.641816][T25782] gretap0: entered promiscuous mode [ 634.699381][T25790] __nla_validate_parse: 12 callbacks suppressed [ 634.699405][T25790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7434'. [ 634.725022][T25790] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7434'. [ 634.739376][ T5105] Bluetooth: hci2: command 0x041b tx timeout [ 634.924035][T25625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.036153][T25625] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.078876][T25799] netlink: 'syz.2.7437': attribute type 1 has an invalid length. [ 635.101285][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.108543][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.119691][T25799] netlink: 244 bytes leftover after parsing attributes in process `syz.2.7437'. [ 635.218226][T25801] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 635.260250][T16785] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.267541][T16785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.929297][T25625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 636.154948][T25625] veth0_vlan: entered promiscuous mode [ 636.230112][T25625] veth1_vlan: entered promiscuous mode [ 636.280963][T25830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7446'. [ 636.307871][T25830] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7446'. [ 636.340892][T25625] veth0_macvtap: entered promiscuous mode [ 636.365143][T25625] veth1_macvtap: entered promiscuous mode [ 636.452649][T25625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.467897][T25836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 636.494270][T25625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.504068][T25836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7448'. [ 636.518536][T25625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.541312][T25625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.555420][T25625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 636.586832][T25836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7448'. [ 636.646643][T25840] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 636.678655][T25836] bridge_slave_1: left allmulticast mode [ 636.695837][T25836] bridge_slave_1: left promiscuous mode [ 636.703271][T25836] bridge18: port 1(bridge_slave_1) entered disabled state [ 636.725959][T25836] bridge19: port 1(bridge_slave_1) entered blocking state [ 636.733759][T25836] bridge19: port 1(bridge_slave_1) entered disabled state [ 636.747341][T25836] bridge_slave_1: entered allmulticast mode [ 636.756421][T25845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 636.770286][T25836] bridge_slave_1: entered promiscuous mode [ 636.808055][ T5096] Bluetooth: hci2: command 0x041b tx timeout [ 636.845249][T25625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.876902][T25625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.906910][T25625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.924083][T25625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.950488][T25625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.964930][T25625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.975374][T25625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.986925][T25625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.998909][T25625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.012252][T25625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.022372][T25625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.044217][T25625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.056313][T25625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.080234][T25625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.101698][T25625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 637.154628][T25625] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.184732][T25625] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.207414][T25625] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.222704][T25625] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.435644][T25860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7457'. [ 637.455700][T25860] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7457'. [ 637.508023][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.529165][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.597663][T18309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.619760][T18309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.625103][T25865] netlink: 'syz.0.7460': attribute type 10 has an invalid length. [ 637.688180][T25865] bond0: (slave netdevsim0): no link monitoring support [ 637.732380][T25865] bond0: (slave netdevsim0): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 637.939121][T25877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7464'. [ 637.978927][T25877] netlink: 'syz.2.7464': attribute type 14 has an invalid length. [ 637.986807][T25877] netlink: 'syz.2.7464': attribute type 11 has an invalid length. [ 638.044537][T25877] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.053838][T25877] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.062672][T25877] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.071459][T25877] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.100457][T25877] vxlan0: entered promiscuous mode [ 638.265032][T25897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.359622][T25897] bridge_slave_1: left allmulticast mode [ 638.375579][T25897] bridge_slave_1: left promiscuous mode [ 638.383840][T25897] bridge19: port 1(bridge_slave_1) entered disabled state [ 638.426554][T25897] bridge20: port 1(bridge_slave_1) entered blocking state [ 638.455656][T25897] bridge20: port 1(bridge_slave_1) entered disabled state [ 638.476030][T25897] bridge_slave_1: entered allmulticast mode [ 638.498941][T25897] bridge_slave_1: entered promiscuous mode [ 638.554574][T25897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.734923][T25917] netlink: 'syz.0.7478': attribute type 1 has an invalid length. [ 638.748553][T25917] FAULT_INJECTION: forcing a failure. [ 638.748553][T25917] name failslab, interval 1, probability 0, space 0, times 0 [ 638.795312][T25917] CPU: 1 PID: 25917 Comm: syz.0.7478 Not tainted 6.10.0-rc7-syzkaller-00132-g503757c80928 #0 [ 638.805540][T25917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 638.815642][T25917] Call Trace: [ 638.818960][T25917] [ 638.821929][T25917] dump_stack_lvl+0x241/0x360 [ 638.826659][T25917] ? __pfx_dump_stack_lvl+0x10/0x10 [ 638.831906][T25917] ? __pfx__printk+0x10/0x10 [ 638.836553][T25917] should_fail_ex+0x3b0/0x4e0 [ 638.841263][T25917] ? __alloc_skb+0x1c3/0x440 [ 638.845890][T25917] should_failslab+0x9/0x20 [ 638.850430][T25917] kmem_cache_alloc_node_noprof+0x71/0x320 [ 638.856404][T25917] ? __asan_memset+0x23/0x50 [ 638.861026][T25917] __alloc_skb+0x1c3/0x440 [ 638.865501][T25917] ? __pfx___alloc_skb+0x10/0x10 [ 638.870504][T25917] fou_nl_get_doit+0x218/0x8c0 [ 638.875317][T25917] ? __pfx_fou_nl_get_doit+0x10/0x10 [ 638.880644][T25917] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 638.887027][T25917] genl_rcv_msg+0xb14/0xec0 [ 638.887508][ T5096] Bluetooth: hci2: command 0x041b tx timeout [ 638.891550][T25917] ? mark_lock+0x9a/0x350 [ 638.901919][T25917] ? __pfx_genl_rcv_msg+0x10/0x10 [ 638.907014][T25917] ? __pfx_lock_acquire+0x10/0x10 [ 638.912088][T25917] ? __pfx_fou_nl_get_doit+0x10/0x10 [ 638.917394][T25917] ? __pfx___might_resched+0x10/0x10 [ 638.922709][T25917] netlink_rcv_skb+0x1e3/0x430 [ 638.927598][T25917] ? __pfx_genl_rcv_msg+0x10/0x10 [ 638.932643][T25917] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 638.937967][T25917] ? __netlink_deliver_tap+0x77e/0x7c0 [ 638.943464][T25917] genl_rcv+0x28/0x40 [ 638.947460][T25917] netlink_unicast+0x7ea/0x980 [ 638.952248][T25917] ? __pfx_netlink_unicast+0x10/0x10 [ 638.957549][T25917] ? __virt_addr_valid+0x183/0x530 [ 638.962779][T25917] ? __check_object_size+0x49c/0x900 [ 638.968089][T25917] ? bpf_lsm_netlink_send+0x9/0x10 [ 638.973226][T25917] netlink_sendmsg+0x8db/0xcb0 [ 638.978027][T25917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 638.983333][T25917] ? __import_iovec+0x536/0x820 [ 638.988200][T25917] ? aa_sock_msg_perm+0x91/0x160 [ 638.993160][T25917] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 638.998454][T25917] ? security_socket_sendmsg+0x87/0xb0 [ 639.003943][T25917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 639.009246][T25917] __sock_sendmsg+0x221/0x270 [ 639.013940][T25917] ____sys_sendmsg+0x525/0x7d0 [ 639.018736][T25917] ? __pfx_____sys_sendmsg+0x10/0x10 [ 639.024077][T25917] __sys_sendmsg+0x2b0/0x3a0 [ 639.028692][T25917] ? __pfx___sys_sendmsg+0x10/0x10 [ 639.033817][T25917] ? vfs_write+0x7c4/0xc90 [ 639.038319][T25917] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 639.044665][T25917] ? do_syscall_64+0x100/0x230 [ 639.049473][T25917] ? do_syscall_64+0xb6/0x230 [ 639.054194][T25917] do_syscall_64+0xf3/0x230 [ 639.058731][T25917] ? clear_bhb_loop+0x35/0x90 [ 639.063429][T25917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.069345][T25917] RIP: 0033:0x7f1bfe775bd9 [ 639.073770][T25917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.093394][T25917] RSP: 002b:00007f1bff4be048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 639.101824][T25917] RAX: ffffffffffffffda RBX: 00007f1bfe903f60 RCX: 00007f1bfe775bd9 [ 639.109826][T25917] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 639.117818][T25917] RBP: 00007f1bff4be0a0 R08: 0000000000000000 R09: 0000000000000000 [ 639.125836][T25917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.133817][T25917] R13: 000000000000000b R14: 00007f1bfe903f60 R15: 00007ffd86bcf4d8 [ 639.141825][T25917] [ 639.711791][T25946] openvswitch: netlink: Key 3 has unexpected len 2 expected 4 [ 639.945455][T25959] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 639.986790][T25959] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 640.498235][T25988] ebt_limit: overflow, try lower: 0/0 [ 640.602958][T25993] __nla_validate_parse: 7 callbacks suppressed [ 640.602975][T25993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7504'. [ 640.856541][T26005] netlink: 'syz.1.7509': attribute type 33 has an invalid length. [ 640.971950][ T5096] Bluetooth: hci2: command 0x041b tx timeout [ 641.325568][T26027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 641.358150][T26031] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 641.378567][T26031] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 641.464938][T26038] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 641.704740][T26045] team0: Port device macvlan1 added [ 641.727862][T26047] team_slave_0: entered promiscuous mode [ 641.734045][T26047] team_slave_1: entered promiscuous mode [ 641.747692][T26047] vlan2: entered promiscuous mode [ 641.754252][T26047] team0: entered promiscuous mode [ 641.762370][T26047] macvlan1: entered promiscuous mode [ 641.771834][T26047] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 641.995125][T26051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 642.018838][T26051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7526'. [ 642.033548][T26051] bridge_slave_1: left allmulticast mode [ 642.041078][T26051] bridge_slave_1: left promiscuous mode [ 642.051217][T26051] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.085363][T26051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 642.200521][T26055] unsupported nlmsg_type 40 [ 642.360254][T26061] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7531'. [ 642.392003][T26061] IPv6: Can't replace route, no match found [ 642.605672][T26069] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 642.690029][T26074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 642.762012][T26079] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7540'. [ 643.175096][T26099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 643.204597][T26099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7549'. [ 643.241479][T26099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 643.418586][T26103] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 643.611946][ T5105] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 643.628081][ T5105] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 643.645359][ T5105] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 643.668351][ T5105] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 643.678690][ T5105] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 643.707262][ T5105] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 643.791325][T26115] FAULT_INJECTION: forcing a failure. [ 643.791325][T26115] name failslab, interval 1, probability 0, space 0, times 0 [ 643.804207][T26115] CPU: 1 PID: 26115 Comm: syz.4.7556 Not tainted 6.10.0-rc7-syzkaller-00132-g503757c80928 #0 [ 643.814403][T26115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 643.824590][T26115] Call Trace: [ 643.827905][T26115] [ 643.830870][T26115] dump_stack_lvl+0x241/0x360 [ 643.835607][T26115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 643.840859][T26115] ? __pfx__printk+0x10/0x10 [ 643.845514][T26115] ? netlink_insert+0x10b7/0x14b0 [ 643.850594][T26115] should_fail_ex+0x3b0/0x4e0 [ 643.855341][T26115] ? __alloc_skb+0x1c3/0x440 [ 643.859981][T26115] should_failslab+0x9/0x20 [ 643.864529][T26115] kmem_cache_alloc_node_noprof+0x71/0x320 [ 643.870427][T26115] __alloc_skb+0x1c3/0x440 [ 643.874892][T26115] ? __pfx___alloc_skb+0x10/0x10 [ 643.879880][T26115] ? netlink_autobind+0xd6/0x2f0 [ 643.884868][T26115] ? netlink_autobind+0x2b0/0x2f0 [ 643.889933][T26115] netlink_sendmsg+0x631/0xcb0 [ 643.894724][T26115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.900043][T26115] ? __import_iovec+0x536/0x820 [ 643.904932][T26115] ? aa_sock_msg_perm+0x91/0x160 [ 643.909917][T26115] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 643.915225][T26115] ? security_socket_sendmsg+0x87/0xb0 [ 643.920717][T26115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.926059][T26115] __sock_sendmsg+0x221/0x270 [ 643.930784][T26115] ____sys_sendmsg+0x525/0x7d0 [ 643.935608][T26115] ? __pfx_____sys_sendmsg+0x10/0x10 [ 643.940967][T26115] __sys_sendmsg+0x2b0/0x3a0 [ 643.945611][T26115] ? __pfx___sys_sendmsg+0x10/0x10 [ 643.950765][T26115] ? vfs_write+0x7c4/0xc90 [ 643.955280][T26115] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 643.961643][T26115] ? do_syscall_64+0x100/0x230 [ 643.966478][T26115] ? do_syscall_64+0xb6/0x230 [ 643.971214][T26115] do_syscall_64+0xf3/0x230 [ 643.975782][T26115] ? clear_bhb_loop+0x35/0x90 [ 643.980500][T26115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.986444][T26115] RIP: 0033:0x7f2f08175bd9 [ 643.990904][T26115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.010560][T26115] RSP: 002b:00007f2f08eee048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 644.019349][T26115] RAX: ffffffffffffffda RBX: 00007f2f08303f60 RCX: 00007f2f08175bd9 [ 644.027341][T26115] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 644.035515][T26115] RBP: 00007f2f08eee0a0 R08: 0000000000000000 R09: 0000000000000000 [ 644.043520][T26115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.051599][T26115] R13: 000000000000000b R14: 00007f2f08303f60 R15: 00007ffe8ca9b9d8 [ 644.059609][T26115] [ 644.168869][ T2456] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.204271][ T2456] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.273977][T26126] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 644.372245][ T2456] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.398487][ T2456] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.502550][T26135] netlink: 'syz.3.7563': attribute type 2 has an invalid length. [ 644.513632][ T2456] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.515039][T26136] netlink: 'syz.3.7563': attribute type 3 has an invalid length. [ 644.532066][ T2456] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.553812][T26133] netlink: 'syz.1.7562': attribute type 10 has an invalid length. [ 644.559467][T26135] netlink: 'syz.3.7563': attribute type 1 has an invalid length. [ 644.595318][T26136] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7563'. [ 644.626202][T26133] team0: Port device geneve1 added [ 644.681670][ T2456] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.692358][ T2456] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.855489][T26144] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7565'. [ 644.868829][T26149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 644.898349][T26149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7566'. [ 644.926251][T26149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7566'. [ 644.986749][T26149] bridge_slave_1: left allmulticast mode [ 645.018078][T26149] bridge_slave_1: left promiscuous mode [ 645.027532][T26149] bridge1: port 1(bridge_slave_1) entered disabled state [ 645.049265][T26149] bridge2: port 1(bridge_slave_1) entered blocking state [ 645.066488][T26149] bridge2: port 1(bridge_slave_1) entered disabled state [ 645.078902][T26149] bridge_slave_1: entered allmulticast mode [ 645.091785][T26149] bridge_slave_1: entered promiscuous mode [ 645.107268][T26154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 645.152480][T26106] chnl_net:caif_netlink_parms(): no params data found [ 645.160233][T26149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 645.192804][T26154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7567'. [ 645.371958][T26154] bridge_slave_1: left allmulticast mode [ 645.379906][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 645.397262][T26154] bridge_slave_1: left promiscuous mode [ 645.403182][T26154] bridge20: port 1(bridge_slave_1) entered disabled state [ 645.696709][T26154] bridge21: port 1(bridge_slave_1) entered blocking state [ 645.715925][T26154] bridge21: port 1(bridge_slave_1) entered disabled state [ 645.726751][T26154] bridge_slave_1: entered allmulticast mode [ 645.748901][T26154] bridge_slave_1: entered promiscuous mode [ 645.769619][ T5105] Bluetooth: hci4: command tx timeout [ 645.806124][ T2456] bridge_slave_0: left allmulticast mode [ 645.825682][ T2456] bridge_slave_0: left promiscuous mode [ 645.844694][ T2456] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.974606][ T2456] bridge_slave_1: left allmulticast mode [ 645.987101][ T2456] bridge_slave_1: left promiscuous mode [ 646.000547][ T2456] bridge20: port 1(bridge_slave_1) entered disabled state [ 646.384330][ T2456] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 647.441655][ T2456] bond1 (unregistering): Released all slaves [ 647.459300][ T2456] bond2 (unregistering): Released all slaves [ 647.532625][T26168] netlink: 312 bytes leftover after parsing attributes in process `syz.0.7572'. [ 647.725152][T26178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7575'. [ 647.770307][T26177] netlink: 184 bytes leftover after parsing attributes in process `syz.4.7573'. [ 647.857363][ T5105] Bluetooth: hci4: command tx timeout [ 648.020492][T26106] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.038797][T26106] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.075518][T26106] bridge_slave_0: entered allmulticast mode [ 648.089029][T26192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.100206][T26106] bridge_slave_0: entered promiscuous mode [ 648.119622][T26106] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.122960][T26192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7579'. [ 648.126794][T26106] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.163134][T26106] bridge_slave_1: entered allmulticast mode [ 648.171413][T26106] bridge_slave_1: entered promiscuous mode [ 648.217812][T26192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7579'. [ 648.294179][T26199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.351293][T26201] ebt_limit: overflow, try lower: 0/0 [ 648.403974][T26204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.645668][T26207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.813135][T26203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7582'. [ 648.863616][T26106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.883188][T26205] bridge_slave_1: left allmulticast mode [ 648.917590][T26205] bridge_slave_1: left promiscuous mode [ 648.923477][T26205] bridge21: port 1(bridge_slave_1) entered disabled state [ 649.041519][T26205] bridge22: port 1(bridge_slave_1) entered blocking state [ 649.058549][T26205] bridge22: port 1(bridge_slave_1) entered disabled state [ 649.065963][T26205] bridge_slave_1: entered allmulticast mode [ 649.082288][T26205] bridge_slave_1: entered promiscuous mode [ 649.110747][T26212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7583'. [ 649.146804][T26106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.160303][T26209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7583'. [ 649.217263][T26214] netlink: 'syz.3.7584': attribute type 7 has an invalid length. [ 649.230186][T26214] netlink: 'syz.3.7584': attribute type 1 has an invalid length. [ 649.267138][T26214] (unnamed net_device) (uninitialized): option ad_select: invalid value (253) [ 649.348686][T26106] team0: Port device team_slave_0 added [ 649.361851][T26106] team0: Port device team_slave_1 added [ 649.493009][ T2456] hsr_slave_0: left promiscuous mode [ 649.508801][ T2456] hsr_slave_1: left promiscuous mode [ 649.515302][ T2456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.535853][ T2456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 649.544641][ T2456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.576779][ T2456] dummy0: left promiscuous mode [ 649.582392][ T2456] veth1_macvtap: left promiscuous mode [ 649.592555][ T2456] veth0_macvtap: left promiscuous mode [ 649.604829][ T2456] b[rhGö: left promiscuous mode [ 649.629775][ T2456] veth0_vlan: left promiscuous mode [ 649.927318][ T5105] Bluetooth: hci4: command tx timeout [ 651.108907][ T2456] team0 (unregistering): Port device team_slave_1 removed [ 651.190528][ T2456] team0 (unregistering): Port device team_slave_0 removed [ 651.865275][T26221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7588'. [ 651.879254][T26221] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 651.897764][T26106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.946932][T26106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 651.986283][T26106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.007246][ T5105] Bluetooth: hci4: command tx timeout [ 652.013208][T26227] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7590'. [ 652.100309][T26106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.122972][T26106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.150722][T26247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 652.207451][T26106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.388643][T26247] bridge1: port 1(bridge_slave_1) entered blocking state [ 652.407561][T26247] bridge1: port 1(bridge_slave_1) entered disabled state [ 652.416634][T26247] bridge_slave_1: entered allmulticast mode [ 652.434536][T26258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 652.456655][T26247] bridge_slave_1: entered promiscuous mode [ 652.849722][T26106] hsr_slave_0: entered promiscuous mode [ 652.918171][T26106] hsr_slave_1: entered promiscuous mode [ 653.007838][T26106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 653.015483][T26106] Cannot create hsr debugfs directory [ 653.331002][T26272] netlink: 'syz.1.7605': attribute type 8 has an invalid length. [ 653.347269][T26272] __nla_validate_parse: 6 callbacks suppressed [ 653.347294][T26272] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7605'. [ 653.374117][T26272] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 653.636301][ T2456] IPVS: stop unused estimator thread 0... [ 653.667081][T26287] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7608'. [ 653.909457][T26293] syz.4.7613[26293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 653.909635][T26293] syz.4.7613[26293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 653.993132][T26296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 654.038897][T26298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7614'. [ 654.096481][T26296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7614'. [ 654.190080][T26298] bridge_slave_1: left allmulticast mode [ 654.230494][T26298] bridge_slave_1: left promiscuous mode [ 654.237730][T26298] bridge2: port 1(bridge_slave_1) entered disabled state [ 654.263671][T26298] bridge4: port 1(bridge_slave_1) entered blocking state [ 654.281973][T26298] bridge4: port 1(bridge_slave_1) entered disabled state [ 654.312149][T26298] bridge_slave_1: entered allmulticast mode [ 654.335280][T26304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 654.351046][T26298] bridge_slave_1: entered promiscuous mode [ 654.700163][T26106] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 654.761717][T26106] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 654.845125][T26106] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 654.868334][T26106] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 654.891956][T26320] netlink: 'syz.4.7622': attribute type 4 has an invalid length. [ 654.909763][T26320] netlink: 'syz.4.7622': attribute type 4 has an invalid length. [ 655.208596][T26328] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 655.439696][T26335] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7628'. [ 655.508586][T26106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.572158][T26106] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.628479][T16785] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.635695][T16785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.708431][T16785] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.715679][T16785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.841547][T26349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.896439][T26349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7635'. [ 655.958926][T26349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7635'. [ 656.036544][T26349] bridge_slave_1: left allmulticast mode [ 656.070709][T26360] netlink: 'syz.4.7637': attribute type 10 has an invalid length. [ 656.073400][T26349] bridge_slave_1: left promiscuous mode [ 656.094161][T26360] netlink: 212848 bytes leftover after parsing attributes in process `syz.4.7637'. [ 656.124163][T26349] bridge1: port 1(bridge_slave_1) entered disabled state [ 656.172804][T26349] bridge2: port 1(bridge_slave_1) entered blocking state [ 656.187385][T26349] bridge2: port 1(bridge_slave_1) entered disabled state [ 656.194721][T26349] bridge_slave_1: entered allmulticast mode [ 656.228591][T26363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 656.236642][T26349] bridge_slave_1: entered promiscuous mode [ 656.306506][T26362] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 656.519199][T26106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.677250][T26106] veth0_vlan: entered promiscuous mode [ 656.721914][T26106] veth1_vlan: entered promiscuous mode [ 656.822818][T26106] veth0_macvtap: entered promiscuous mode [ 656.872794][T26106] veth1_macvtap: entered promiscuous mode [ 656.927197][T26106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.951840][T26106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.991455][T26379] Bluetooth: MGMT ver 1.22 [ 656.994267][T26106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.016919][T26106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.043269][T26106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.074674][T26106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.100737][T26106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.147273][T26106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.185169][T26106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.222257][T26106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.256994][T26106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.284991][T26106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.316997][T26106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.336546][T26106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.360245][T26106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.401551][T26106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.447533][T26106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.469505][T26106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.480181][T26106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.490563][T26106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.502601][T26106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.514836][T26106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.537095][T26395] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7649'. [ 657.636450][T26106] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.653826][T26106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.663692][T26106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.677658][T26106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.734349][T26411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.780622][T26411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7654'. [ 657.915325][T26411] bridge_slave_1: left allmulticast mode [ 657.938637][T26411] bridge_slave_1: left promiscuous mode [ 657.944584][T26411] bridge22: port 1(bridge_slave_1) entered disabled state [ 657.991697][T26411] bridge24: port 1(bridge_slave_1) entered blocking state [ 658.023690][T26411] bridge24: port 1(bridge_slave_1) entered disabled state [ 658.044121][T26411] bridge_slave_1: entered allmulticast mode [ 658.063412][T26411] bridge_slave_1: entered promiscuous mode [ 658.130534][T26411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 658.212141][T18310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.234143][T18310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.264184][T26426] ebt_among: src integrity fail: 30a [ 658.342325][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.359240][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.340599][T26458] __nla_validate_parse: 1 callbacks suppressed [ 659.340623][T26458] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7669'. [ 659.872874][T26472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7674'. [ 660.760411][T26512] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7691'. [ 660.794512][T26513] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7693'. [ 660.832218][T26513] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7693'. [ 660.852831][T26513] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7693'. [ 661.431119][T26533] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7699'. [ 661.774709][T26537] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 662.633563][T26582] block nbd0: not configured, cannot reconfigure [ 662.683707][T26585] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7714'. [ 663.191262][T26602] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.7721'. [ 663.327472][T26603] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.7721'. [ 663.752863][T26626] FAULT_INJECTION: forcing a failure. [ 663.752863][T26626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 663.783536][T26626] CPU: 0 PID: 26626 Comm: syz.1.7727 Not tainted 6.10.0-rc7-syzkaller-00132-g503757c80928 #0 [ 663.793776][T26626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 663.803885][T26626] Call Trace: [ 663.807203][T26626] [ 663.810168][T26626] dump_stack_lvl+0x241/0x360 [ 663.814892][T26626] ? __pfx_dump_stack_lvl+0x10/0x10 [ 663.820131][T26626] ? __pfx__printk+0x10/0x10 [ 663.824782][T26626] ? __pfx_lock_release+0x10/0x10 [ 663.829846][T26626] ? __local_bh_enable_ip+0x168/0x200 [ 663.835246][T26626] ? copy_fpstate_to_sigframe+0x175/0xd90 [ 663.840999][T26626] should_fail_ex+0x3b0/0x4e0 [ 663.845703][T26626] copy_fpstate_to_sigframe+0xa87/0xd90 [ 663.851326][T26626] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 663.857433][T26626] ? fpu__alloc_mathframe+0xab/0x130 [ 663.862736][T26626] get_sigframe+0x55d/0x700 [ 663.867277][T26626] ? __pfx_get_sigframe+0x10/0x10 [ 663.872472][T26626] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 663.878468][T26626] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 663.884840][T26626] ? _raw_spin_lock_irq+0xdf/0x120 [ 663.889971][T26626] x64_setup_rt_frame+0x180/0xcc0 [ 663.895012][T26626] ? lockdep_hardirqs_on+0x99/0x150 [ 663.900232][T26626] ? _raw_spin_unlock_irq+0x2e/0x50 [ 663.905641][T26626] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 663.911207][T26626] ? __sys_bpf+0x459/0x810 [ 663.915659][T26626] arch_do_signal_or_restart+0x458/0x860 [ 663.921326][T26626] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 663.927503][T26626] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 663.933523][T26626] ? syscall_exit_to_user_mode+0xa3/0x360 [ 663.939288][T26626] syscall_exit_to_user_mode+0xc9/0x360 [ 663.944906][T26626] do_syscall_64+0x100/0x230 [ 663.949540][T26626] ? clear_bhb_loop+0x35/0x90 [ 663.954243][T26626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.960271][T26626] RIP: 0033:0x7f38c3775bd9 [ 663.964711][T26626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 663.984341][T26626] RSP: 002b:00007f38c447b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 663.992812][T26626] RAX: fffffffffffffffe RBX: 00007f38c3903f60 RCX: 00007f38c3775bd9 [ 664.000800][T26626] RDX: 0000000000000004 RSI: 0000000020000000 RDI: 0000000000000013 [ 664.008793][T26626] RBP: 00007f38c447b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 664.016776][T26626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.024757][T26626] R13: 000000000000000b R14: 00007f38c3903f60 R15: 00007fffd2847ba8 [ 664.032771][T26626] [ 664.190050][T26632] gtp0: entered promiscuous mode [ 664.205852][T26632] gtp0: entered allmulticast mode [ 665.087360][T26646] __nla_validate_parse: 34 callbacks suppressed [ 665.087386][T26646] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7733'. [ 665.283991][T26661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 665.332006][T26661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7738'. [ 665.369220][T26661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7738'. [ 665.458367][T26661] bridge_slave_1: left allmulticast mode [ 665.464091][T26661] bridge_slave_1: left promiscuous mode [ 665.486410][T26661] bridge2: port 1(bridge_slave_1) entered disabled state [ 665.516567][T26661] bridge3: port 1(bridge_slave_1) entered blocking state [ 665.537706][T26661] bridge3: port 1(bridge_slave_1) entered disabled state [ 665.547012][T26661] bridge_slave_1: entered allmulticast mode [ 665.560527][T26661] bridge_slave_1: entered promiscuous mode [ 665.649230][T26661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 665.876770][T26694] netlink: 244 bytes leftover after parsing attributes in process `syz.4.7750'. [ 665.891871][T26694] xt_CT: You must specify a L4 protocol and not use inversions on it [ 666.046541][T26702] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7752'. [ 666.144420][T26705] FAULT_INJECTION: forcing a failure. [ 666.144420][T26705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 666.173667][T26705] CPU: 1 PID: 26705 Comm: syz.0.7754 Not tainted 6.10.0-rc7-syzkaller-00132-g503757c80928 #0 [ 666.183904][T26705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 666.194023][T26705] Call Trace: [ 666.197321][T26705] [ 666.200264][T26705] dump_stack_lvl+0x241/0x360 [ 666.204968][T26705] ? __pfx_dump_stack_lvl+0x10/0x10 [ 666.210186][T26705] ? __pfx__printk+0x10/0x10 [ 666.214798][T26705] ? __pfx_lock_release+0x10/0x10 [ 666.219850][T26705] should_fail_ex+0x3b0/0x4e0 [ 666.224553][T26705] _copy_from_user+0x2f/0xe0 [ 666.229200][T26705] ____sys_sendmsg+0x2e4/0x7d0 [ 666.233991][T26705] ? __pfx_____sys_sendmsg+0x10/0x10 [ 666.239309][T26705] __sys_sendmsg+0x2b0/0x3a0 [ 666.244006][T26705] ? __pfx___sys_sendmsg+0x10/0x10 [ 666.249162][T26705] ? vfs_write+0x7c4/0xc90 [ 666.253686][T26705] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 666.260043][T26705] ? do_syscall_64+0x100/0x230 [ 666.264846][T26705] ? do_syscall_64+0xb6/0x230 [ 666.269548][T26705] do_syscall_64+0xf3/0x230 [ 666.274079][T26705] ? clear_bhb_loop+0x35/0x90 [ 666.278786][T26705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.284809][T26705] RIP: 0033:0x7f1bfe775bd9 [ 666.289235][T26705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.308954][T26705] RSP: 002b:00007f1bff4be048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 666.317383][T26705] RAX: ffffffffffffffda RBX: 00007f1bfe903f60 RCX: 00007f1bfe775bd9 [ 666.325365][T26705] RDX: 0000000000000000 RSI: 0000000020001180 RDI: 0000000000000003 [ 666.333345][T26705] RBP: 00007f1bff4be0a0 R08: 0000000000000000 R09: 0000000000000000 [ 666.341366][T26705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.349347][T26705] R13: 000000000000000b R14: 00007f1bfe903f60 R15: 00007ffd86bcf4d8 [ 666.357345][T26705] [ 666.484979][T26707] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 666.719912][T26716] netlink: 300 bytes leftover after parsing attributes in process `syz.2.7760'. [ 666.809849][T26718] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7757'. [ 666.908609][T26724] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7763'. [ 666.994028][T26730] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7764'. [ 667.002930][T26728] vlan2: entered promiscuous mode [ 667.016302][T26728] mac80211_hwsim hwsim59 wlan1: entered promiscuous mode [ 667.029022][T26728] vlan2: entered allmulticast mode [ 667.034595][T26728] mac80211_hwsim hwsim59 wlan1: entered allmulticast mode [ 667.064229][T26736] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7765'. [ 667.690287][ T5105] Bluetooth: hci4: command tx timeout [ 668.306716][T26786] netlink: 'syz.0.7781': attribute type 10 has an invalid length. [ 668.410351][T26540] bond0: (slave batadv_slave_0): link status definitely down, disabling slave [ 669.617733][T26852] xt_hashlimit: overflow, rate too high: 0 [ 669.955934][T26862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.381710][T26879] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 670.593447][T26890] __nla_validate_parse: 9 callbacks suppressed [ 670.593472][T26890] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7813'. [ 670.707588][T26899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7817'. [ 670.771050][T26903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.937999][T26911] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7821'. [ 671.015472][T26913] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 671.500306][T26931] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7825'. [ 671.999480][T26961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7835'. [ 672.421905][T26984] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7841'. [ 672.631446][T26993] netlink: 'syz.4.7847': attribute type 1 has an invalid length. [ 672.786101][T27010] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7849'. [ 672.786388][T27004] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7847'. [ 672.850680][T27004] 8021q: adding VLAN 0 to HW filter on device bond1 [ 673.146178][T27029] netlink: 'syz.3.7853': attribute type 4 has an invalid length. [ 673.259688][T27032] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7855'. [ 673.295751][T27032] erspan0: entered promiscuous mode [ 673.333275][T27032] erspan0: entered allmulticast mode [ 673.478463][T27044] netlink: 'syz.0.7858': attribute type 2 has an invalid length. [ 673.560823][T27056] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7859'. [ 673.685941][T27061] netlink: 'syz.0.7864': attribute type 1 has an invalid length. [ 673.957397][T27073] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 674.058996][T27075] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 675.544060][T27152] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 675.580097][T27152] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 675.647077][T27156] __nla_validate_parse: 6 callbacks suppressed [ 675.647100][T27156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7898'. [ 675.953200][T27168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7902'. [ 676.021636][T27157] delete_channel: no stack [ 676.117653][T27168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7902'. [ 676.139205][T27182] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7906'. [ 676.151453][T27168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7902'. [ 676.240139][T27168] netlink: 'syz.0.7902': attribute type 4 has an invalid length. [ 676.277961][T27168] tc_dump_action: action bad kind [ 677.343963][T27233] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7922'. [ 677.752936][T27219] delete_channel: no stack [ 679.371248][T27264] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7934'. [ 679.478703][T27272] FAULT_INJECTION: forcing a failure. [ 679.478703][T27272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 679.526886][T27272] CPU: 1 PID: 27272 Comm: syz.3.7935 Not tainted 6.10.0-rc7-syzkaller-00132-g503757c80928 #0 [ 679.537118][T27272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 679.547232][T27272] Call Trace: [ 679.550558][T27272] [ 679.553529][T27272] dump_stack_lvl+0x241/0x360 [ 679.558276][T27272] ? __pfx_dump_stack_lvl+0x10/0x10 [ 679.563539][T27272] ? __pfx__printk+0x10/0x10 [ 679.568191][T27272] ? __pfx_lock_release+0x10/0x10 [ 679.573280][T27272] should_fail_ex+0x3b0/0x4e0 [ 679.578028][T27272] _copy_from_user+0x2f/0xe0 [ 679.582671][T27272] copy_msghdr_from_user+0xae/0x680 [ 679.587930][T27272] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 679.593889][T27272] __sys_sendmsg+0x23d/0x3a0 [ 679.598623][T27272] ? __pfx___sys_sendmsg+0x10/0x10 [ 679.603797][T27272] ? vfs_write+0x7c4/0xc90 [ 679.608317][T27272] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 679.614690][T27272] ? do_syscall_64+0x100/0x230 [ 679.619514][T27272] ? do_syscall_64+0xb6/0x230 [ 679.624266][T27272] do_syscall_64+0xf3/0x230 [ 679.628850][T27272] ? clear_bhb_loop+0x35/0x90 [ 679.633631][T27272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.639634][T27272] RIP: 0033:0x7f450e775bd9 [ 679.644062][T27272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.663687][T27272] RSP: 002b:00007f450f5bf048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 679.672293][T27272] RAX: ffffffffffffffda RBX: 00007f450e904038 RCX: 00007f450e775bd9 [ 679.680291][T27272] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000005 [ 679.688274][T27272] RBP: 00007f450f5bf0a0 R08: 0000000000000000 R09: 0000000000000000 [ 679.696261][T27272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.704255][T27272] R13: 000000000000006e R14: 00007f450e904038 R15: 00007ffdc78138a8 [ 679.712348][T27272] [ 679.805600][T16782] IPVS: starting estimator thread 0... [ 679.907276][T27286] IPVS: using max 17 ests per chain, 40800 per kthread [ 680.089730][T27303] netlink: 'syz.1.7943': attribute type 3 has an invalid length. [ 680.099732][T27303] netlink: 'syz.1.7943': attribute type 1 has an invalid length. [ 680.113437][T27303] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.7943'. [ 680.123435][T27303] FAULT_INJECTION: forcing a failure. [ 680.123435][T27303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.137065][T27303] CPU: 1 PID: 27303 Comm: syz.1.7943 Not tainted 6.10.0-rc7-syzkaller-00132-g503757c80928 #0 [ 680.147364][T27303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 680.157457][T27303] Call Trace: [ 680.160751][T27303] [ 680.163697][T27303] dump_stack_lvl+0x241/0x360 [ 680.168406][T27303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 680.173632][T27303] ? __pfx__printk+0x10/0x10 [ 680.178247][T27303] ? snprintf+0xda/0x120 [ 680.182504][T27303] should_fail_ex+0x3b0/0x4e0 [ 680.187216][T27303] _copy_to_user+0x2f/0xb0 [ 680.191736][T27303] simple_read_from_buffer+0xca/0x150 [ 680.197199][T27303] proc_fail_nth_read+0x1e9/0x250 [ 680.202328][T27303] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 680.207897][T27303] ? rw_verify_area+0x520/0x6b0 [ 680.212853][T27303] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 680.218413][T27303] vfs_read+0x204/0xbc0 [ 680.222581][T27303] ? __pfx_lock_release+0x10/0x10 [ 680.227632][T27303] ? __pfx_vfs_read+0x10/0x10 [ 680.232338][T27303] ? __fget_files+0x29/0x470 [ 680.236955][T27303] ? __fget_files+0x3f6/0x470 [ 680.241669][T27303] ksys_read+0x1a0/0x2c0 [ 680.245946][T27303] ? __pfx_ksys_read+0x10/0x10 [ 680.250723][T27303] ? do_syscall_64+0x100/0x230 [ 680.255513][T27303] ? do_syscall_64+0xb6/0x230 [ 680.260211][T27303] do_syscall_64+0xf3/0x230 [ 680.264758][T27303] ? clear_bhb_loop+0x35/0x90 [ 680.269466][T27303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.275397][T27303] RIP: 0033:0x7f38c37746bc [ 680.279831][T27303] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 680.299631][T27303] RSP: 002b:00007f38c447b040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 680.308159][T27303] RAX: ffffffffffffffda RBX: 00007f38c3903f60 RCX: 00007f38c37746bc [ 680.316144][T27303] RDX: 000000000000000f RSI: 00007f38c447b0b0 RDI: 0000000000000004 [ 680.324128][T27303] RBP: 00007f38c447b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 680.332127][T27303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.340199][T27303] R13: 000000000000000b R14: 00007f38c3903f60 R15: 00007fffd2847ba8 [ 680.348391][T27303] [ 680.577857][T27312] xt_cgroup: invalid path, errno=-2 [ 680.694321][T27320] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7948'. [ 680.859038][T27325] FAULT_INJECTION: forcing a failure. [ 680.859038][T27325] name failslab, interval 1, probability 0, space 0, times 0 [ 680.939406][T27325] CPU: 1 PID: 27325 Comm: syz.3.7953 Not tainted 6.10.0-rc7-syzkaller-00132-g503757c80928 #0 [ 680.949658][T27325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 680.959773][T27325] Call Trace: [ 680.963101][T27325] [ 680.966073][T27325] dump_stack_lvl+0x241/0x360 [ 680.970814][T27325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 680.976154][T27325] ? __pfx__printk+0x10/0x10 [ 680.980793][T27325] ? __asan_memset+0x23/0x50 [ 680.985462][T27325] ? lockdep_init_map_type+0xa1/0x910 [ 680.990887][T27325] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 680.996744][T27325] should_fail_ex+0x3b0/0x4e0 [ 681.001520][T27325] ? slab_build_skb+0x52/0x450 [ 681.006420][T27325] should_failslab+0x9/0x20 [ 681.010983][T27325] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 681.016420][T27325] slab_build_skb+0x52/0x450 [ 681.021089][T27325] bpf_prog_test_run_skb+0x3b6/0x13a0 [ 681.026601][T27325] ? __pfx_lock_release+0x10/0x10 [ 681.031806][T27325] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 681.037672][T27325] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 681.039579][T27333] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7955'. [ 681.043508][T27325] bpf_prog_test_run+0x33a/0x3b0 [ 681.043546][T27325] __sys_bpf+0x48d/0x810 [ 681.061696][T27325] ? __pfx___sys_bpf+0x10/0x10 [ 681.066591][T27325] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 681.072590][T27325] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 681.078939][T27325] ? do_syscall_64+0x100/0x230 [ 681.083730][T27325] __x64_sys_bpf+0x7c/0x90 [ 681.088214][T27325] do_syscall_64+0xf3/0x230 [ 681.092746][T27325] ? clear_bhb_loop+0x35/0x90 [ 681.097457][T27325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.103512][T27325] RIP: 0033:0x7f450e775bd9 [ 681.107952][T27325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 681.127599][T27325] RSP: 002b:00007f450f5e0048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 681.136040][T27325] RAX: ffffffffffffffda RBX: 00007f450e903f60 RCX: 00007f450e775bd9 [ 681.144116][T27325] RDX: 0000000000000050 RSI: 0000000020001240 RDI: 000000000000000a [ 681.152125][T27325] RBP: 00007f450f5e00a0 R08: 0000000000000000 R09: 0000000000000000 [ 681.160206][T27325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.168213][T27325] R13: 000000000000004d R14: 00007f450e903f60 R15: 00007ffdc78138a8 [ 681.176213][T27325] [ 681.385213][T27340] delete_channel: no stack [ 681.480198][T27344] FAULT_INJECTION: forcing a failure. [ 681.480198][T27344] name failslab, interval 1, probability 0, space 0, times 0 [ 681.567409][T27344] CPU: 0 PID: 27344 Comm: syz.1.7959 Not tainted 6.10.0-rc7-syzkaller-00132-g503757c80928 #0 [ 681.577654][T27344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 681.587756][T27344] Call Trace: [ 681.591079][T27344] [ 681.594068][T27344] dump_stack_lvl+0x241/0x360 [ 681.598814][T27344] ? __pfx_dump_stack_lvl+0x10/0x10 [ 681.604163][T27344] ? __pfx__printk+0x10/0x10 [ 681.608830][T27344] should_fail_ex+0x3b0/0x4e0 [ 681.613567][T27344] ? sctp_add_bind_addr+0x89/0x3a0 [ 681.618735][T27344] should_failslab+0x9/0x20 [ 681.623290][T27344] kmalloc_trace_noprof+0x6c/0x2c0 [ 681.628472][T27344] sctp_add_bind_addr+0x89/0x3a0 [ 681.633482][T27344] sctp_copy_local_addr_list+0x311/0x500 [ 681.639273][T27344] ? sctp_copy_local_addr_list+0xab/0x500 [ 681.645052][T27344] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 681.651268][T27344] ? sctp_v4_is_any+0x35/0x60 [ 681.656012][T27344] sctp_bind_addr_copy+0xad/0x3b0 [ 681.661354][T27344] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 681.667746][T27344] sctp_connect_new_asoc+0x2f3/0x6c0 [ 681.673090][T27344] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 681.678951][T27344] ? sctp_sendmsg+0xbb9/0x3520 [ 681.683767][T27344] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 681.689352][T27344] ? security_sctp_bind_connect+0x90/0xb0 [ 681.695133][T27344] sctp_sendmsg+0x219a/0x3520 [ 681.699911][T27344] ? __pfx_sctp_sendmsg+0x10/0x10 [ 681.704983][T27344] ? __pfx_aa_sk_perm+0x10/0x10 [ 681.709898][T27344] ? inet_sendmsg+0x330/0x390 [ 681.714629][T27344] __sock_sendmsg+0x1a6/0x270 [ 681.716359][T27351] netlink: 209848 bytes leftover after parsing attributes in process `syz.3.7960'. [ 681.719327][T27344] __sys_sendto+0x3a4/0x4f0 [ 681.733245][T27344] ? __pfx___sys_sendto+0x10/0x10 [ 681.738354][T27344] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 681.744413][T27344] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 681.746457][T27351] openvswitch: netlink: Message has 2 unknown bytes. [ 681.750770][T27344] __x64_sys_sendto+0xde/0x100 [ 681.750813][T27344] do_syscall_64+0xf3/0x230 [ 681.750851][T27344] ? clear_bhb_loop+0x35/0x90 [ 681.750879][T27344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.777419][T27344] RIP: 0033:0x7f38c3775bd9 [ 681.781872][T27344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 681.801518][T27344] RSP: 002b:00007f38c447b048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 681.809961][T27344] RAX: ffffffffffffffda RBX: 00007f38c3903f60 RCX: 00007f38c3775bd9 [ 681.817943][T27344] RDX: 000000000001a000 RSI: 0000000020000300 RDI: 0000000000000003 [ 681.825925][T27344] RBP: 00007f38c447b0a0 R08: 0000000020000380 R09: 0000000000000010 [ 681.833931][T27344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 681.841950][T27344] R13: 000000000000000b R14: 00007f38c3903f60 R15: 00007fffd2847ba8 [ 681.850073][T27344] [ 681.898287][ T5096] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 681.920394][ T5096] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 681.931213][ T5096] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 681.946543][ T5096] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 681.955375][ T5096] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 681.964211][ T5096] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 682.079746][T15254] batman_adv: batadv0: Removing interface: vlan2 [ 682.479492][T27381] FAULT_INJECTION: forcing a failure. [ 682.479492][T27381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 682.544734][T27375] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7965'. [ 682.568807][T27381] CPU: 0 PID: 27381 Comm: syz.3.7966 Not tainted 6.10.0-rc7-syzkaller-00132-g503757c80928 #0 [ 682.579047][T27381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 682.589173][T27381] Call Trace: [ 682.592489][T27381] [ 682.595454][T27381] dump_stack_lvl+0x241/0x360 [ 682.600193][T27381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 682.605487][T27381] ? __pfx__printk+0x10/0x10 [ 682.610127][T27381] ? __pfx_lock_release+0x10/0x10 [ 682.615201][T27381] should_fail_ex+0x3b0/0x4e0 [ 682.619932][T27381] _copy_from_user+0x2f/0xe0 [ 682.624569][T27381] copy_msghdr_from_user+0xae/0x680 [ 682.629822][T27381] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 682.635686][T27381] __sys_sendmsg+0x23d/0x3a0 [ 682.640333][T27381] ? __pfx___sys_sendmsg+0x10/0x10 [ 682.645489][T27381] ? vfs_write+0x7c4/0xc90 [ 682.650005][T27381] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 682.656381][T27381] ? do_syscall_64+0x100/0x230 [ 682.661207][T27381] ? do_syscall_64+0xb6/0x230 [ 682.665944][T27381] do_syscall_64+0xf3/0x230 [ 682.670508][T27381] ? clear_bhb_loop+0x35/0x90 [ 682.675224][T27381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.681167][T27381] RIP: 0033:0x7f450e775bd9 [ 682.685624][T27381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 682.705272][T27381] RSP: 002b:00007f450f59e048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.713743][T27381] RAX: ffffffffffffffda RBX: 00007f450e904110 RCX: 00007f450e775bd9 [ 682.721757][T27381] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000007 [ 682.729768][T27381] RBP: 00007f450f59e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 682.737779][T27381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.745790][T27381] R13: 000000000000006e R14: 00007f450e904110 R15: 00007ffdc78138a8 [ 682.753823][T27381] [ 683.256152][T27348] chnl_net:caif_netlink_parms(): no params data found [ 683.579428][T27348] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.608079][T27348] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.635084][T27348] bridge_slave_0: entered allmulticast mode [ 683.654560][T27348] bridge_slave_0: entered promiscuous mode [ 683.691276][T27348] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.711101][T27348] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.739361][T27348] bridge_slave_1: entered allmulticast mode [ 683.753408][T27348] bridge_slave_1: entered promiscuous mode [ 683.969842][T27348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.014185][ T5096] Bluetooth: hci5: command tx timeout [ 684.024488][T27452] vlan0: entered promiscuous mode [ 684.087430][ T5096] Bluetooth: hci0: command tx timeout [ 684.099422][T27348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.273161][T27348] team0: Port device team_slave_0 added [ 684.300645][T27466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.306460][T27348] team0: Port device team_slave_1 added [ 684.496078][T27348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.518278][T27348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.555087][T27476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.591525][T27348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.658461][T27466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.680747][T27348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.700331][T27483] FAULT_INJECTION: forcing a failure. [ 684.700331][T27483] name failslab, interval 1, probability 0, space 0, times 0 [ 684.704614][T27348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.729745][T27483] CPU: 0 PID: 27483 Comm: syz.2.7995 Not tainted 6.10.0-rc7-syzkaller-00132-g503757c80928 #0 [ 684.750905][T27483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 684.756986][T27348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.760982][T27483] Call Trace: [ 684.760997][T27483] [ 684.777762][T27483] dump_stack_lvl+0x241/0x360 [ 684.782498][T27483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 684.787778][T27483] ? __pfx__printk+0x10/0x10 [ 684.792423][T27483] ? __pfx___might_resched+0x10/0x10 [ 684.797771][T27483] should_fail_ex+0x3b0/0x4e0 [ 684.802497][T27483] should_failslab+0x9/0x20 [ 684.807009][T27483] kmalloc_node_track_caller_noprof+0xda/0x440 [ 684.813195][T27483] ? __request_module+0x2d5/0x650 [ 684.818243][T27483] ? __request_module+0x2b9/0x650 [ 684.823292][T27483] kstrdup+0x3a/0x80 [ 684.827260][T27483] __request_module+0x2d5/0x650 [ 684.832142][T27483] ? crypto_alg_mod_lookup+0xac/0x720 [ 684.837585][T27483] ? __pfx___request_module+0x10/0x10 [ 684.843007][T27483] ? __up_read+0x2c2/0x6b0 [ 684.847484][T27483] ? __pfx___up_read+0x10/0x10 [ 684.852343][T27483] ? crypto_alg_lookup+0x2d6/0x360 [ 684.855650][T27476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.857489][T27483] crypto_alg_mod_lookup+0xe8/0x720 [ 684.857530][T27483] crypto_add_alg+0x1c0/0x310 [ 684.857556][T27483] ? __pfx_crypto_add_alg+0x10/0x10 [ 684.882371][T27483] crypto_user_rcv_msg+0x4f5/0x670 [ 684.887522][T27483] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 684.893192][T27483] ? __mutex_trylock_common+0x183/0x2e0 [ 684.898765][T27483] ? __pfx___might_resched+0x10/0x10 [ 684.904088][T27483] netlink_rcv_skb+0x1e3/0x430 [ 684.908905][T27483] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 684.914556][T27483] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 684.919894][T27483] crypto_netlink_rcv+0x2a/0x40 [ 684.924936][T27483] netlink_unicast+0x7ea/0x980 [ 684.929736][T27483] ? __pfx_netlink_unicast+0x10/0x10 [ 684.935041][T27483] ? __virt_addr_valid+0x183/0x530 [ 684.940192][T27483] ? __check_object_size+0x49c/0x900 [ 684.945537][T27483] ? bpf_lsm_netlink_send+0x9/0x10 [ 684.950701][T27483] netlink_sendmsg+0x8db/0xcb0 [ 684.955491][T27483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 684.960809][T27483] ? __import_iovec+0x536/0x820 [ 684.965664][T27483] ? aa_sock_msg_perm+0x91/0x160 [ 684.970620][T27483] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 684.975919][T27483] ? security_socket_sendmsg+0x87/0xb0 [ 684.981403][T27483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 684.986799][T27483] __sock_sendmsg+0x221/0x270 [ 684.991513][T27483] ____sys_sendmsg+0x525/0x7d0 [ 684.996327][T27483] ? __pfx_____sys_sendmsg+0x10/0x10 [ 685.001660][T27483] __sys_sendmsg+0x2b0/0x3a0 [ 685.006278][T27483] ? __pfx___sys_sendmsg+0x10/0x10 [ 685.011403][T27483] ? vfs_write+0x7c4/0xc90 [ 685.015878][T27483] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 685.022309][T27483] ? do_syscall_64+0x100/0x230 [ 685.027110][T27483] ? do_syscall_64+0xb6/0x230 [ 685.031826][T27483] do_syscall_64+0xf3/0x230 [ 685.036408][T27483] ? clear_bhb_loop+0x35/0x90 [ 685.041097][T27483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.047010][T27483] RIP: 0033:0x7efc88f75bd9 [ 685.051445][T27483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.071070][T27483] RSP: 002b:00007efc89d59048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 685.079580][T27483] RAX: ffffffffffffffda RBX: 00007efc89103f60 RCX: 00007efc88f75bd9 [ 685.087579][T27483] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000003 [ 685.095589][T27483] RBP: 00007efc89d590a0 R08: 0000000000000000 R09: 0000000000000000 [ 685.103585][T27483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.111580][T27483] R13: 000000000000000b R14: 00007efc89103f60 R15: 00007ffeff3e75f8 [ 685.119591][T27483] [ 685.208639][T27348] hsr_slave_0: entered promiscuous mode [ 685.237721][T27348] hsr_slave_1: entered promiscuous mode [ 685.260728][T27348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 685.275896][T27348] Cannot create hsr debugfs directory [ 685.281856][T27495] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7999'. [ 685.320220][T27492] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7998'. [ 685.873510][T27348] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.885328][T27348] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 686.083492][T27348] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.101725][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.104440][ T5096] Bluetooth: hci5: command tx timeout [ 686.137041][T27348] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 686.278465][T27348] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.299719][T27348] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 686.391038][T27524] xt_cgroup: invalid path, errno=-2 [ 686.431365][T27531] Cannot find add_set index 0 as target [ 686.492910][T27348] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.504960][T27348] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 686.783931][T27552] FAULT_INJECTION: forcing a failure. [ 686.783931][T27552] name failslab, interval 1, probability 0, space 0, times 0 [ 686.829152][T27552] CPU: 0 PID: 27552 Comm: syz.0.8018 Not tainted 6.10.0-rc7-syzkaller-00132-g503757c80928 #0 [ 686.839391][T27552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 686.849487][T27552] Call Trace: [ 686.852803][T27552] [ 686.853114][T27348] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 686.855757][T27552] dump_stack_lvl+0x241/0x360 [ 686.855805][T27552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 686.872422][T27552] ? __pfx__printk+0x10/0x10 [ 686.877082][T27552] should_fail_ex+0x3b0/0x4e0 [ 686.881815][T27552] ? sctp_add_bind_addr+0x89/0x3a0 [ 686.886981][T27552] should_failslab+0x9/0x20 [ 686.891549][T27552] kmalloc_trace_noprof+0x6c/0x2c0 [ 686.896708][T27552] sctp_add_bind_addr+0x89/0x3a0 [ 686.901671][T27552] sctp_copy_local_addr_list+0x311/0x500 [ 686.907328][T27552] ? sctp_copy_local_addr_list+0xab/0x500 [ 686.913066][T27552] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 686.919240][T27552] ? sctp_v4_is_any+0x35/0x60 [ 686.923942][T27552] sctp_bind_addr_copy+0xad/0x3b0 [ 686.928996][T27552] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 686.935369][T27552] sctp_connect_new_asoc+0x2f3/0x6c0 [ 686.940671][T27552] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 686.946500][T27552] ? sctp_sendmsg+0xbb9/0x3520 [ 686.951297][T27552] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 686.956858][T27552] ? security_sctp_bind_connect+0x90/0xb0 [ 686.962688][T27552] sctp_sendmsg+0x219a/0x3520 [ 686.967402][T27552] ? __pfx_sctp_sendmsg+0x10/0x10 [ 686.972442][T27552] ? __pfx_aa_sk_perm+0x10/0x10 [ 686.977316][T27552] ? inet_sendmsg+0x330/0x390 [ 686.982009][T27552] __sock_sendmsg+0x1a6/0x270 [ 686.986699][T27552] ____sys_sendmsg+0x525/0x7d0 [ 686.991490][T27552] ? __pfx_____sys_sendmsg+0x10/0x10 [ 686.996803][T27552] __sys_sendmmsg+0x3b2/0x740 [ 687.001510][T27552] ? __pfx___sys_sendmmsg+0x10/0x10 [ 687.006760][T27552] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 687.012669][T27552] ? ksys_write+0x23e/0x2c0 [ 687.017209][T27552] ? __pfx_lock_release+0x10/0x10 [ 687.022276][T27552] ? vfs_write+0x7c4/0xc90 [ 687.026726][T27552] ? __mutex_unlock_slowpath+0x21d/0x750 [ 687.032388][T27552] ? __pfx_vfs_write+0x10/0x10 [ 687.037213][T27552] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 687.043229][T27552] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 687.049605][T27552] ? do_syscall_64+0x100/0x230 [ 687.054399][T27552] __x64_sys_sendmmsg+0xa0/0xb0 [ 687.059365][T27552] do_syscall_64+0xf3/0x230 [ 687.063890][T27552] ? clear_bhb_loop+0x35/0x90 [ 687.068580][T27552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.074493][T27552] RIP: 0033:0x7f1bfe775bd9 [ 687.078917][T27552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.098536][T27552] RSP: 002b:00007f1bff4be048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 687.106969][T27552] RAX: ffffffffffffffda RBX: 00007f1bfe903f60 RCX: 00007f1bfe775bd9 [ 687.115155][T27552] RDX: 0000000000000002 RSI: 0000000020001d80 RDI: 0000000000000003 [ 687.123146][T27552] RBP: 00007f1bff4be0a0 R08: 0000000000000000 R09: 0000000000000000 [ 687.131128][T27552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 687.139132][T27552] R13: 000000000000000b R14: 00007f1bfe903f60 R15: 00007ffd86bcf4d8 [ 687.147137][T27552] [ 687.192394][T27348] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 687.246006][T27348] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 687.285215][T27348] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 687.348491][T27560] FAULT_INJECTION: forcing a failure. [ 687.348491][T27560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 687.391864][T27560] CPU: 0 PID: 27560 Comm: syz.1.8023 Not tainted 6.10.0-rc7-syzkaller-00132-g503757c80928 #0 [ 687.402161][T27560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 687.412256][T27560] Call Trace: [ 687.415583][T27560] [ 687.418553][T27560] dump_stack_lvl+0x241/0x360 [ 687.423290][T27560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 687.428549][T27560] ? __pfx__printk+0x10/0x10 [ 687.433196][T27560] ? __pfx_lock_release+0x10/0x10 [ 687.438273][T27560] should_fail_ex+0x3b0/0x4e0 [ 687.443018][T27560] _copy_from_iter+0x1f6/0x1960 [ 687.447917][T27560] ? __virt_addr_valid+0x183/0x530 [ 687.453084][T27560] ? __pfx_lock_release+0x10/0x10 [ 687.458163][T27560] ? __alloc_skb+0x28f/0x440 [ 687.462792][T27560] ? __pfx__copy_from_iter+0x10/0x10 [ 687.468120][T27560] ? __virt_addr_valid+0x183/0x530 [ 687.473279][T27560] ? __virt_addr_valid+0x183/0x530 [ 687.478445][T27560] ? __virt_addr_valid+0x45f/0x530 [ 687.483607][T27560] ? __check_object_size+0x49c/0x900 [ 687.488949][T27560] netlink_sendmsg+0x743/0xcb0 [ 687.493780][T27560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 687.499128][T27560] ? __import_iovec+0x536/0x820 [ 687.504047][T27560] ? aa_sock_msg_perm+0x91/0x160 [ 687.509134][T27560] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 687.514466][T27560] ? security_socket_sendmsg+0x87/0xb0 [ 687.520012][T27560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 687.525360][T27560] __sock_sendmsg+0x221/0x270 [ 687.530119][T27560] ____sys_sendmsg+0x525/0x7d0 [ 687.534975][T27560] ? __pfx_____sys_sendmsg+0x10/0x10 [ 687.540343][T27560] __sys_sendmsg+0x2b0/0x3a0 [ 687.545035][T27560] ? __pfx___sys_sendmsg+0x10/0x10 [ 687.550378][T27560] ? vfs_write+0x7c4/0xc90 [ 687.554898][T27560] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 687.561281][T27560] ? do_syscall_64+0x100/0x230 [ 687.566110][T27560] ? do_syscall_64+0xb6/0x230 [ 687.570935][T27560] do_syscall_64+0xf3/0x230 [ 687.575503][T27560] ? clear_bhb_loop+0x35/0x90 [ 687.580226][T27560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.586176][T27560] RIP: 0033:0x7f38c3775bd9 [ 687.590636][T27560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.610288][T27560] RSP: 002b:00007f38c447b048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 687.618749][T27560] RAX: ffffffffffffffda RBX: 00007f38c3903f60 RCX: 00007f38c3775bd9 [ 687.626846][T27560] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 687.634855][T27560] RBP: 00007f38c447b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 687.642861][T27560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.650871][T27560] R13: 000000000000000b R14: 00007f38c3903f60 R15: 00007fffd2847ba8 [ 687.658899][T27560] [ 687.915042][T27348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.999727][T27348] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.024741][T16783] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.031978][T16783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.063863][T16783] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.071152][T16783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.142017][T27583] netlink: 'syz.1.8031': attribute type 9 has an invalid length. [ 688.150818][T27584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 688.170234][ T5096] Bluetooth: hci5: command tx timeout [ 688.173887][T27584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8033'. [ 688.191487][T27583] netlink: 'syz.1.8031': attribute type 7 has an invalid length. [ 688.254958][T27583] netlink: 'syz.1.8031': attribute type 8 has an invalid length. [ 688.304814][T27584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8033'. [ 688.380084][T27590] bridge_slave_1: left allmulticast mode [ 688.397886][T27590] bridge_slave_1: left promiscuous mode [ 688.403763][T27590] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.539071][T27590] bridge1: port 1(bridge_slave_1) entered blocking state [ 688.546250][T27590] bridge1: port 1(bridge_slave_1) entered disabled state [ 688.597998][T27596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 688.610555][T27590] bridge_slave_1: entered allmulticast mode [ 688.653230][T27590] bridge_slave_1: entered promiscuous mode [ 688.690790][T27600] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8036'. [ 688.817368][T27603] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 688.830020][T27603] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 688.838516][T27603] CPU: 0 PID: 27603 Comm: syz.0.8037 Not tainted 6.10.0-rc7-syzkaller-00132-g503757c80928 #0 [ 688.848793][T27603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 688.858909][T27603] RIP: 0010:dev_map_enqueue+0x31/0x3e0 [ 688.864439][T27603] Code: 41 56 41 55 41 54 53 48 83 ec 18 49 89 d4 49 89 f5 48 89 fd 49 be 00 00 00 00 00 fc ff df e8 06 9e d7 ff 48 89 e8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 ef e8 e0 63 3d 00 4c 8b 7d 00 48 83 c5 [ 688.884178][T27603] RSP: 0018:ffffc9000b9ef678 EFLAGS: 00010246 [ 688.890376][T27603] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 688.898381][T27603] RDX: ffffc90016298000 RSI: 0000000000003093 RDI: 0000000000003094 [ 688.906561][T27603] RBP: 0000000000000000 R08: ffffffff896206d6 R09: ffffffff89620693 [ 688.914567][T27603] R10: 0000000000000004 R11: ffff88806f0b9e00 R12: ffff88806c61a000 [ 688.918274][T27348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 688.922546][T27603] R13: ffff88802d84b070 R14: dffffc0000000000 R15: 0000000000000000 [ 688.922569][T27603] FS: 00007f1bff4be6c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 688.946257][T27603] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 688.952876][T27603] CR2: 0000001b32a17ff8 CR3: 000000006ea76000 CR4: 00000000003506f0 [ 688.960860][T27603] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 688.968857][T27603] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 688.976933][T27603] Call Trace: [ 688.980229][T27603] [ 688.983166][T27603] ? __die_body+0x88/0xe0 [ 688.987517][T27603] ? die_addr+0x108/0x140 [ 688.991866][T27603] ? exc_general_protection+0x3dd/0x5d0 [ 688.997433][T27603] ? asm_exc_general_protection+0x26/0x30 [ 689.003169][T27603] ? xdp_do_redirect_frame+0x243/0x660 [ 689.008646][T27603] ? xdp_do_redirect_frame+0x286/0x660 [ 689.014131][T27603] ? dev_map_enqueue+0x31/0x3e0 [ 689.019088][T27603] ? dev_map_enqueue+0x2a/0x3e0 [ 689.023960][T27603] xdp_do_redirect_frame+0x2a6/0x660 [ 689.029378][T27603] bpf_test_run_xdp_live+0xe60/0x1e60 [ 689.034826][T27603] ? bpf_test_run_xdp_live+0x724/0x1e60 [ 689.040390][T27603] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 689.046230][T27603] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 689.052145][T27603] ? __might_fault+0xaa/0x120 [ 689.056873][T27603] ? __might_fault+0xc6/0x120 [ 689.061569][T27603] ? _copy_from_user+0xa6/0xe0 [ 689.066362][T27603] ? bpf_test_init+0x15a/0x180 [ 689.071146][T27603] ? xdp_convert_md_to_buff+0x5b/0x330 [ 689.076616][T27603] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 689.082034][T27603] ? __pfx_lock_release+0x10/0x10 [ 689.087182][T27603] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 689.093064][T27603] ? __fget_files+0x29/0x470 [ 689.097790][T27603] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 689.103630][T27603] bpf_prog_test_run+0x33a/0x3b0 [ 689.108632][T27603] __sys_bpf+0x48d/0x810 [ 689.112902][T27603] ? __pfx___sys_bpf+0x10/0x10 [ 689.117697][T27603] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 689.123687][T27603] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 689.130029][T27603] ? do_syscall_64+0x100/0x230 [ 689.134815][T27603] __x64_sys_bpf+0x7c/0x90 [ 689.139269][T27603] do_syscall_64+0xf3/0x230 [ 689.143844][T27603] ? clear_bhb_loop+0x35/0x90 [ 689.148555][T27603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.154509][T27603] RIP: 0033:0x7f1bfe775bd9 [ 689.158944][T27603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.178568][T27603] RSP: 002b:00007f1bff4be048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 689.186996][T27603] RAX: ffffffffffffffda RBX: 00007f1bfe903f60 RCX: 00007f1bfe775bd9 [ 689.195018][T27603] RDX: 0000000000000050 RSI: 0000000020000240 RDI: 000000000000000a [ 689.203113][T27603] RBP: 00007f1bfe7e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 689.211089][T27603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 689.219073][T27603] R13: 000000000000000b R14: 00007f1bfe903f60 R15: 00007ffd86bcf4d8 [ 689.227078][T27603] [ 689.230196][T27603] Modules linked in: [ 689.234220][T27603] ---[ end trace 0000000000000000 ]--- [ 689.239747][T27603] RIP: 0010:dev_map_enqueue+0x31/0x3e0 [ 689.245261][T27603] Code: 41 56 41 55 41 54 53 48 83 ec 18 49 89 d4 49 89 f5 48 89 fd 49 be 00 00 00 00 00 fc ff df e8 06 9e d7 ff 48 89 e8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 ef e8 e0 63 3d 00 4c 8b 7d 00 48 83 c5 [ 689.264942][T27603] RSP: 0018:ffffc9000b9ef678 EFLAGS: 00010246 [ 689.271074][T27603] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 689.279111][T27603] RDX: ffffc90016298000 RSI: 0000000000003093 RDI: 0000000000003094 [ 689.287148][T27603] RBP: 0000000000000000 R08: ffffffff896206d6 R09: ffffffff89620693 [ 689.295161][T27603] R10: 0000000000000004 R11: ffff88806f0b9e00 R12: ffff88806c61a000 [ 689.303208][T27603] R13: ffff88802d84b070 R14: dffffc0000000000 R15: 0000000000000000 [ 689.311255][T27603] FS: 00007f1bff4be6c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 689.320252][T27603] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 689.326885][T27603] CR2: 0000001b32a17ff8 CR3: 000000006ea76000 CR4: 00000000003506f0 [ 689.334902][T27603] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 689.343041][T27603] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 689.351071][T27603] Kernel panic - not syncing: Fatal exception in interrupt [ 689.358623][T27603] Kernel Offset: disabled [ 689.362952][T27603] Rebooting in 86400 seconds..