last executing test programs: 4.841976848s ago: executing program 0 (id=3094): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000040)={0xffffffffffffffff}) unshare(0x20000400) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x5761, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_icmp(0xa, 0x2, 0x3a) socket(0x2b, 0x80801, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) socket$netlink(0x10, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x4c}}, 0x0) (fail_nth: 21) 4.285651708s ago: executing program 0 (id=3098): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000002000000008000300", @ANYRES32=r2], 0x1c}}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0xffffffffffffffff) sendmsg$NFT_MSG_GETOBJ(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x80002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socket$packet(0x11, 0x2, 0x300) 3.771135746s ago: executing program 0 (id=3108): socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x48, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) 3.270043769s ago: executing program 3 (id=3113): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@volatile={0x0, 0x0, 0x0, 0x2}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x1, 0x1000000}]}]}}, &(0x7f0000000340)=""/184, 0x3e, 0xb8, 0x1}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xffffffff, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x3, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 3.190756683s ago: executing program 0 (id=3116): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x200000, 0xffbf, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe20, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x1, 0x3, 0x6}]}, &(0x7f0000000d40)='syzkaller\x00', 0x10, 0x0, 0x0, 0x40f00, 0xe}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0)='P', &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000000c0), 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x4040600) r4 = socket(0xa, 0x3, 0x9) ioctl$SIOCGSTAMP(r4, 0x8901, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r7 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r7, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) r8 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_init_net_socket$ax25(0x27, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000006800010000000000000000000a00000000000000280008802400010000000000000000000000040000000000fe8000000000000000000000000000aa060007000500000008000500", @ANYRES32=r6], 0x50}}, 0x0) 3.128195427s ago: executing program 1 (id=3117): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x54, 0x140f, 0x300, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x180}, 0xc0c0) sendto$inet6(r1, 0x0, 0x0, 0x20048004, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000001b00)={0x0, 0x9, 0x0, [0x7, 0x6, 0x3, 0x6, 0xfffffffffffffffe], [0x7, 0x3, 0x2, 0x3, 0xcbf0, 0x3, 0x6, 0x24cb, 0x76, 0x40, 0x1a0c, 0x3, 0x7, 0x5, 0x800, 0x9, 0x5, 0x7, 0x8, 0x835, 0x0, 0xfe, 0x4, 0x8, 0xfffffffffffeffff, 0x3, 0x8, 0x9, 0x0, 0x7fffffff, 0x100000001, 0x1, 0x6, 0xc6d, 0x3, 0x5, 0x5, 0x9, 0xfffffffffffffffa, 0x30d5, 0x20, 0x5, 0x744d, 0x9, 0x4, 0x2, 0x9, 0xffffffff, 0x6, 0x6, 0x2, 0x9, 0x80, 0xc74, 0x0, 0x80000000, 0x2700, 0xb7c8, 0x869b, 0x0, 0x3, 0x20, 0x4, 0x1, 0x1, 0x3f, 0x9b9, 0x7fff, 0xc51d, 0x4, 0x8561, 0x100000000, 0x4, 0xfffffffffffffff9, 0x80000001, 0x9, 0x9, 0x81, 0xffffffffffffffff, 0x0, 0x7, 0x8, 0x9, 0x2, 0x9, 0x194, 0x3f, 0x3, 0x3, 0x9, 0x4, 0x8000000000000000, 0x1000, 0x0, 0x0, 0x8de6, 0x9e, 0x7fffffff, 0x8, 0x6f00, 0x8, 0x400000000000, 0x2, 0x1, 0x80, 0xd, 0x1000, 0x2d, 0x7, 0x31, 0x8, 0xffffffffffffff7f, 0x80, 0x6, 0x1, 0xfffffffffffffff7, 0x800, 0x3ff, 0x0, 0x6]}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000080)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}, @algo_auth={0x48, 0x1, {{'crc32c-generic\x00'}}}]}, 0x180}}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000400)={0xffffffffffffffff, 0x1, 0xfffffffffffffffc, 0x361}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) 2.982036631s ago: executing program 3 (id=3119): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000140)=0x6b5a, 0x4) sendmsg$can_raw(r2, &(0x7f0000000300)={&(0x7f0000000800)={0x1d, r1, 0x7000000}, 0x10, &(0x7f0000000880)={&(0x7f0000000840)=@can={{}, 0x0, 0x0, 0x0, 0x0, "ded27feeba7ca62a"}, 0x10}}, 0x0) 2.953448656s ago: executing program 1 (id=3121): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0)='4', 0x1) tee(r2, r1, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x300}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 2.944585355s ago: executing program 3 (id=3122): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @dev}}}, 0x9c) 2.677662535s ago: executing program 2 (id=3124): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x7}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050001de0000"], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r5 = socket(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) write(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="e5ff5a00"], 0x20}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x30, r2, 0x200, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f0000000440)=@device_b, &(0x7f00000009c0)=ANY=[], 0x5d) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00'}, 0x3516d84baa52081c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x1, 0x54ba, 0x19, @mcast1, @private1, 0x8000, 0x0, 0x8}}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x8, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0xf, '\x00', r9, 0xffffffffffffffff, 0x5, 0x1, 0x5, 0xe}, 0x48) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x35) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000001580)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000880)="ad56b6c5820fae9dcd3292ea54c7beef915d564c90c200f7fd67cbb48fad05a3730bdb741ed5b707c2b3d7431ec4b51ae13602a6072630ccf2ec52042fa6f0aa6b72c342db24d7b5154bffbe2b29a3a4d58b525fdf04000000000000007d4ba2a924f68bdd17a5ba53fd10998d51609fa4a7d3904e324643ed8d44028d326a9231602ec6ae0104e9166e54eef03bb66c7ec6e3c3c0a577811c458391b98869c378000a48025312204a009c4ce5b9cc5adafbce374fdedbe654483cf1bcc9cff49ea90787b1bc5d37a2ea00fd7af0306bfbc68b3f2f125a83bbda5c14e9c24854fba91f7bb4e9ad6dc1ab504dfa85f35ceb898a570000000000000000", 0xfc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa, 0x0, 0x2}, [@exit]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) 2.280501612s ago: executing program 0 (id=3126): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x4}, 0x2) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x7fd}, 0xe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000040)=0x4, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r1, 0x1, 0x10, 0x8}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000010140)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, '][%#[\\$#*'}, {0x20, '#! '}, {0x20, '\xaa\xaa\xaa\xaa\xaa'}, {0x20, '*{.\x00'}, {0x20, '{*%'}, {0x20, '\xaa\xaa\xaa\xaa\xaa'}]}, 0x1002d) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140), 0x4) 2.135417801s ago: executing program 4 (id=3127): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000440)=[@in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e22, 0x2, @mcast2, 0x9}, @in6={0xa, 0x4e24, 0x3, @private0, 0xffff}, @in6={0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, '\x00', 0x11}, 0x4}], 0x64) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001440), &(0x7f0000001480)=0xc) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001440), &(0x7f0000001480)=0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) (async) r3 = openat$cgroup_procs(r2, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000880), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x600) (async) unshare(0x600) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x800, 0x3e) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x32, 0x0, 0x0) r6 = openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000380), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x70}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x5d}) socket(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRESHEX, @ANYRES16=r0, @ANYRESOCT=r2, @ANYRES8=r0, @ANYBLOB="800000007063490011000200300000300000000008008c00040000000800010070636900180446e444302e300000000000000000b5db7eda6fb0c1efebd82f71371f6daaef431e6754a4e6c42b45bf3e9a48cd79811047c41b863c33a12d8699f14697dcf25df01b2dd4c2d415941798ca1273395278073b916d25ee54a46cdba29c84ee056e326f101f36bb3aac43e283bd020e03a53d53e805cfde55327658f62b52b4542e7041c21ab08f804a3a9df1ac015085f9c0d2b16baab6f577d42e6643"], 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x8090) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000010008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774da0a040059a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000010008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774da0a040059a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 1.975957531s ago: executing program 3 (id=3128): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf8, 0x30, 0x1, 0x0, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x74, 0x2, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe01}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf8}}, 0x0) (fail_nth: 6) 1.975382326s ago: executing program 1 (id=3129): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) listen(r0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f332460916e6e893f1eeb0b723043c47c896ce0bce66a245ad99b8173d98cd824498949714ffaaca9f39817beb2de45406fb6db714e4b94bdae214fa68a0157eb3c00000000b6fc89398f2b9000f224891060017cfa6fa26fa7a34700458c60897d4a6148a1c11428607c40de60beac671e8e8fdecb03598aa623fa71f31bf0f871ab5c2ff88afc6002084e5b52710aee410e3e554d090d95983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0xe}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x5}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r3, &(0x7f0000003240), &(0x7f0000000100)=@tcp6=r4, 0x2}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0012800a00142603600e1208000f0000000406a80016c0080003400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x4044000) 1.97379156s ago: executing program 2 (id=3130): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079107500000000669775953a1a5c2d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0}, 0x8040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x40000) syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000002280)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYRESDEC, @ANYRESDEC], 0x2b) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x18, @local, @mcast1, 0x7800, 0x40, 0x8, 0x10000}}) socket$netlink(0x10, 0x3, 0x91cc6ae7ef4da6e7) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) 1.588870759s ago: executing program 4 (id=3131): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x54, 0x140f, 0x300, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x180}, 0xc0c0) sendto$inet6(r1, 0x0, 0x0, 0x20048004, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000001b00)={0x0, 0x9, 0x0, [0x7, 0x6, 0x3, 0x6, 0xfffffffffffffffe], [0x7, 0x3, 0x2, 0x3, 0xcbf0, 0x3, 0x6, 0x24cb, 0x76, 0x40, 0x1a0c, 0x3, 0x7, 0x5, 0x800, 0x9, 0x5, 0x7, 0x8, 0x835, 0x0, 0xfe, 0x4, 0x8, 0xfffffffffffeffff, 0x3, 0x8, 0x9, 0x0, 0x7fffffff, 0x100000001, 0x1, 0x6, 0xc6d, 0x3, 0x5, 0x5, 0x9, 0xfffffffffffffffa, 0x30d5, 0x20, 0x5, 0x744d, 0x9, 0x4, 0x2, 0x9, 0xffffffff, 0x6, 0x6, 0x2, 0x9, 0x80, 0xc74, 0x0, 0x80000000, 0x2700, 0xb7c8, 0x869b, 0x0, 0x3, 0x20, 0x4, 0x1, 0x1, 0x3f, 0x9b9, 0x7fff, 0xc51d, 0x4, 0x8561, 0x100000000, 0x4, 0xfffffffffffffff9, 0x80000001, 0x9, 0x9, 0x81, 0x0, 0x2, 0x7, 0x8, 0x9, 0x2, 0x9, 0x194, 0x3f, 0x3, 0x3, 0x9, 0x4, 0x8000000000000000, 0x1000, 0x0, 0x0, 0x8de6, 0x9e, 0x7fffffff, 0x8, 0x6f00, 0x8, 0x400000000000, 0x2, 0x1, 0x80, 0xd, 0x1000, 0x2d, 0x7, 0x31, 0x8, 0xffffffffffffff7f, 0x80, 0x6, 0x1, 0xfffffffffffffff7, 0x800, 0x3ff, 0x0, 0x6]}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000080)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}, @algo_auth={0x48, 0x1, {{'crc32c-generic\x00'}}}]}, 0x180}}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000400)={0xffffffffffffffff, 0x1, 0xfffffffffffffffc, 0x361}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) 1.464586778s ago: executing program 3 (id=3132): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x110, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}, @IFLA_WEIGHT={0x8, 0xf, 0x6}, @IFLA_PROP_LIST={0xcc, 0x34, 0x0, 0x1, [{0x14, 0x35, 'geneve0\x00'}, {0x14}, {0x14, 0x35, 'veth1_to_bond\x00'}, {0x14, 0x35, 'wlan0\x00'}, {0x14, 0x35, 'ipvlan1\x00'}, {0x14, 0x35, 'veth1\x00'}, {0x14, 0x35, 'geneve0\x00'}, {0x14, 0x35, 'nicvf0\x00'}, {0x14, 0x35, 'veth0_to_batadv\x00'}, {0x14, 0x35, 'hsr0\x00'}]}]}, 0x110}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x110, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}, @IFLA_WEIGHT={0x8, 0xf, 0x6}, @IFLA_PROP_LIST={0xcc, 0x34, 0x0, 0x1, [{0x14, 0x35, 'geneve0\x00'}, {0x14}, {0x14, 0x35, 'veth1_to_bond\x00'}, {0x14, 0x35, 'wlan0\x00'}, {0x14, 0x35, 'ipvlan1\x00'}, {0x14, 0x35, 'veth1\x00'}, {0x14, 0x35, 'geneve0\x00'}, {0x14, 0x35, 'nicvf0\x00'}, {0x14, 0x35, 'veth0_to_batadv\x00'}, {0x14, 0x35, 'hsr0\x00'}]}]}, 0x110}}, 0x0) (async) 1.462953164s ago: executing program 1 (id=3133): syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_emit_ethernet(0x8e, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8c18cffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x400000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}, 0x90) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x100000000000000, 0xb, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@private1, @in, 0x2}]}, 0x38}}, 0x800) 1.424997971s ago: executing program 4 (id=3134): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}}, 0x0) (fail_nth: 5) 1.128910399s ago: executing program 0 (id=3135): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "5cb0af660108edd6", "bf8ac580ada9d31b450e315a389f3d2f462f5152594c3c4f4b381b0684e2e95d", "00000004", "021d4a4ed752980a"}, 0x38) recvmmsg(r5, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/33, 0x21}], 0x1}}], 0x2, 0x0, 0x0) r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) connect$packet(r6, &(0x7f0000000240)={0x11, 0xf7, r7, 0x1, 0x4, 0x6, @local}, 0x14) recvfrom$inet6(r5, 0x0, 0x0, 0x10040, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r11 = accept4$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000340)=0x1c, 0x800) getsockname$inet6(r11, &(0x7f0000000400)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000004c0)=0x1c) socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r12, {}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0xfc], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffc]}}]}}]}, 0x8c}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001700000008000300", @ANYRES32=r10, @ANYBLOB="2c00308014000400403a050c5bae9c544ef2b6d713459ab086b5f45da07c3700300000000500020000000000"], 0x48}}, 0x0) 1.128484688s ago: executing program 3 (id=3136): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) openat$cgroup(r0, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0xba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd603000bb00842b00fc020000000000000000000000f40000fe8000000000000000000000000000aa3c000ec9680000003b02070100001000fee50000000000000000000000000101000000000064907802000000000000000000000082f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108402fa83b1d661c18462075368a1860929ddeb8f71aa23d391b8fa99e9816af2d040876a663a86d97f46b9665cc18492b"], 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000440)={'#! ', '', [], 0xa, "6bdf436f33631a595dc5624b8d48cde87db596302011efafde9801aebaad9d00000000d2ac56c78670aa203b1e1f503fb0a79095e9243b7fbab280ec2bfee76984cc912d703b529b4961d9a165244e1b080806e01830e040825069bd00141e201cb2e29528aa8bf429e74122390208bd38fcefb125caa797e9e8d450a100"/136}, 0x8c) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000002c0)="c6195fade5b1802f125f3a5d3d3df61c61b39991f3593602a4e39b7a66bd40c35be71fcc0d89ee8c6a194753a97c004762890b12c032cba13bc34345a8b7bacca1ae907e3b260ffa8d8352f23a7faa2b7b1e94b52c445c5afd8d4fae0da0719d9b311e5173717633c1143c14", 0x6c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x200, 0x5, 0x9, 0x1a00, r2, 0x9, '\x00', 0x0, r1, 0x5, 0x2, 0x4}, 0x15) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="8f", 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000001c0)='kfree\x00', r4}, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"/293], 0x50}, 0x1, 0x0, 0x0, 0x2004c850}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000001000000000000ce8f220008000300", @ANYRES32=r7, @ANYBLOB="38003300c01008000802110000010802110000015050505050500b001f008c18eb0e3b1fc45b7eb9b350bc4332fbfd684a7e86d6e82d19ae"], 0x54}}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pwritev(r8, 0x0, 0x0, 0x0, 0x0) r9 = socket$kcm(0x29, 0x1, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r9, 0x119, 0x1, &(0x7f0000000040), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r10) 998.349811ms ago: executing program 4 (id=3137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) 898.423159ms ago: executing program 2 (id=3138): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x7, 0x2, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f0000000180)='syzkaller\x00'}, 0x90) epoll_create1(0x0) r3 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000000)=0x100) pipe(&(0x7f0000000380)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000001380)) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3, 0x0, 0x0, 0xfffffdef}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) epoll_create1(0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x7}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 777.550977ms ago: executing program 4 (id=3139): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x2, 0x0, 0x0, 0xdc0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 597.98208ms ago: executing program 1 (id=3140): socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) listen(0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000009c0), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x0) (fail_nth: 12) 597.617378ms ago: executing program 2 (id=3141): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="24a324f8b30001000010000000000000020000fc000000000035000008000100ac1414bbc27883f49150b6a25ab8950cbd87d0f6c6e8f86478c1202019ba7f46e8bf57d5588cb784339d44ca9b4ebd2e003ee121d90df1ab1492338cfd05ecfe54520343f2169a67741a7eaf8fdc9e90026564a50d1d9a03e8db941adb5c8ae65a5b6d6b48993bd08934dd8b11917565ae69ec0c0544d5ddf84cf0a349f3d678e68a6c6429a88a8ec300c21800b6c22b80572165cdf0e206067fd80e9e77f6f4ff72e53a458369cec9a045cb951b074e3246c87362098bc7478db98addf551b81313a00d00d5ef8cae4ed838a4564a60be69cfd037ac6f2031dd6047e56a361a5befc147c78704c69b7556db562fd5865fc23d69"], 0x24}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f96f24fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01000100f3ff000000002b000000080002"], 0x1c}}, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e34, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) sendmmsg(r0, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x2c000011) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r3) 534.546113ms ago: executing program 4 (id=3142): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) (async) accept4(r0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x81, '\x00', 0x0, r1}, 0x48) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async, rerun: 64) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000800000000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0908000000000055090100000000009500000000000000b702000000000000db9a00fe00000000b6090800000000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000001500000076000000bd9800000000000056020000000000008500000007000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$key(0xf, 0x3, 0x2) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYBLOB="f110a33cdbbebcc0676176fe7bb3e67d2aec1cf0cc4c137e087f4bc444d6692ccea1e84cc16552edef5fcd83c8f0e4d1112b9921f937365e3e07e2e9500f9d45289884340c53eb1c0da7759aa3e8d521c7caab66ccbe8c4e8fdd57a1f5d514f97c13cf90e3efcc586e2f"], 0x4c}}, 0x0) 491.820882ms ago: executing program 2 (id=3143): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000300)='Y', 0x1}], 0x1}}], 0x1, 0x41) (fail_nth: 4) 386.353141ms ago: executing program 1 (id=3144): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x54, 0x140f, 0x300, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x180}, 0xc0c0) sendto$inet6(r1, 0x0, 0x0, 0x20048004, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000001b00)={0x0, 0x9, 0x0, [0x7, 0x6, 0x3, 0x6, 0xfffffffffffffffe], [0x7, 0x3, 0x2, 0x3, 0xcbf0, 0x3, 0x6, 0x24cb, 0x76, 0x40, 0x1a0c, 0x3, 0x7, 0x5, 0x800, 0x9, 0x5, 0x7, 0x8, 0x835, 0x0, 0xfe, 0x4, 0x8, 0xfffffffffffeffff, 0x3, 0x8, 0x9, 0x0, 0x7fffffff, 0x100000001, 0x1, 0x6, 0xc6d, 0x3, 0x5, 0x5, 0x9, 0xfffffffffffffffa, 0x30d5, 0x20, 0x5, 0x744d, 0x9, 0x4, 0x2, 0x9, 0xffffffff, 0x6, 0x6, 0x2, 0x9, 0x80, 0xc74, 0x0, 0x80000000, 0x2700, 0xb7c8, 0x869b, 0x0, 0x3, 0x20, 0x4, 0x1, 0x1, 0x3f, 0x9b9, 0x7fff, 0xc51d, 0x4, 0x8561, 0x100000000, 0x4, 0xfffffffffffffff9, 0x80000001, 0x9, 0x9, 0x81, 0x0, 0x2, 0x7, 0x8, 0x9, 0x2, 0x9, 0x194, 0x3f, 0x3, 0x3, 0x9, 0x4, 0x8000000000000000, 0x1000, 0x0, 0x0, 0x8de6, 0x9e, 0x7fffffff, 0x8, 0x6f00, 0x8, 0x400000000000, 0x2, 0x1, 0x80, 0xd, 0x1000, 0x2d, 0x7, 0x31, 0x8, 0xffffffffffffff7f, 0x80, 0x6, 0x1, 0xfffffffffffffff7, 0x800, 0x3ff, 0x0, 0x6]}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000080)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}, @algo_auth={0x48, 0x1, {{'crc32c-generic\x00'}}}]}, 0x180}}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000400)={0xffffffffffffffff, 0x1, 0xfffffffffffffffc, 0x361}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) 0s ago: executing program 2 (id=3145): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)="11acbde55bda41fb1ddf074b11407ef543", 0x11}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0005000200142603600e1208001e007f370401a8001600200006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000007f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010162, 0x0) read(r0, &(0x7f0000000500)=""/161, 0xa1) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x2c, 0x28, 0x107, 0x0, 0x0, {0x9}, [@nested={0x10, 0x1, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='!])&\x00'}]}, @typed={0x8, 0x2, 0x0, 0x0, @uid}]}, 0x2c}}, 0x0) kernel console output (not intermixed with test programs): bability 0, space 0, times 0 [ 213.125876][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.166934][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.174173][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.175587][T10790] CPU: 0 PID: 10790 Comm: syz.1.1661 Not tainted 6.10.0-rc5-syzkaller-00197-g8eb301bd7b0f #0 [ 213.191623][T10790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 213.201698][T10790] Call Trace: [ 213.204997][T10790] [ 213.207954][T10790] dump_stack_lvl+0x241/0x360 [ 213.212664][T10790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.217889][T10790] ? __pfx__printk+0x10/0x10 [ 213.222507][T10790] ? __pfx_lock_release+0x10/0x10 [ 213.227563][T10790] should_fail_ex+0x3b0/0x4e0 [ 213.232443][T10790] _copy_from_user+0x2f/0xe0 [ 213.237062][T10790] copy_msghdr_from_user+0xae/0x680 [ 213.242300][T10790] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 213.248155][T10790] __sys_sendmsg+0x23d/0x3a0 [ 213.252789][T10790] ? __pfx___sys_sendmsg+0x10/0x10 [ 213.257936][T10790] ? vfs_write+0x7c4/0xc90 [ 213.262425][T10790] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 213.268787][T10790] ? do_syscall_64+0x100/0x230 [ 213.273584][T10790] ? do_syscall_64+0xb6/0x230 [ 213.278642][T10790] do_syscall_64+0xf3/0x230 [ 213.283192][T10790] ? clear_bhb_loop+0x35/0x90 [ 213.287891][T10790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.293811][T10790] RIP: 0033:0x7fa6b4b75bd9 [ 213.298243][T10790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.317872][T10790] RSP: 002b:00007fa6b5957048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.326322][T10790] RAX: ffffffffffffffda RBX: 00007fa6b4d03f60 RCX: 00007fa6b4b75bd9 [ 213.334321][T10790] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 213.342322][T10790] RBP: 00007fa6b59570a0 R08: 0000000000000000 R09: 0000000000000000 [ 213.350320][T10790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.358427][T10790] R13: 000000000000004d R14: 00007fa6b4d03f60 R15: 00007ffdb8f2f2f8 [ 213.366451][T10790] [ 213.473785][T10797] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 213.630422][T10552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.713705][ T51] team0: left promiscuous mode [ 213.725822][ T51] team_slave_1: left promiscuous mode [ 213.741145][ T51] veth1_macvtap: left promiscuous mode [ 213.747704][ T51] veth0_macvtap: left promiscuous mode [ 213.767091][ T51] veth1_vlan: left promiscuous mode [ 213.782785][ T51] veth0_vlan: left allmulticast mode [ 213.793723][ T51] veth0_vlan: left promiscuous mode [ 214.222736][ T51] team0 (unregistering): Port device vlan1 removed [ 214.454152][ T51] team0 (unregistering): Port device team_slave_1 removed [ 214.696658][ T5104] Bluetooth: hci0: command tx timeout [ 214.783246][T10811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1667'. [ 214.793051][T10818] team0: left allmulticast mode [ 214.798717][T10818] team_slave_0: left allmulticast mode [ 214.804212][T10818] team_slave_1: left allmulticast mode [ 214.814882][T10818] bridge0: port 3(team0) entered disabled state [ 214.823344][T10818] bridge_slave_1: left allmulticast mode [ 214.829345][T10818] bridge_slave_1: left promiscuous mode [ 214.835298][T10818] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.844805][T10818] bridge_slave_0: left allmulticast mode [ 214.851762][T10818] bridge_slave_0: left promiscuous mode [ 214.858977][T10818] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.054817][T10552] veth0_vlan: entered promiscuous mode [ 215.111838][T10552] veth1_vlan: entered promiscuous mode [ 215.335235][T10552] veth0_macvtap: entered promiscuous mode [ 215.351860][T10552] veth1_macvtap: entered promiscuous mode [ 215.429173][T10552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.460346][T10552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.479805][T10552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.504389][T10552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.532247][T10552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.579808][T10552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.610559][T10552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.640235][T10847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.684032][T10849] lo: entered promiscuous mode [ 215.695169][T10552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.737762][T10552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.760579][T10552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.779262][T10552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.790379][T10552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.801776][T10552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.822940][T10552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.848925][T10848] lo: left promiscuous mode [ 215.876116][T10552] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.903098][T10552] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.917522][T10552] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.933157][T10552] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.027105][T10868] xt_hashlimit: max too large, truncated to 1048576 [ 216.087067][T10868] bond0: entered promiscuous mode [ 216.092158][T10868] bond_slave_0: entered promiscuous mode [ 216.138159][T10868] bond_slave_1: entered promiscuous mode [ 216.396723][T10874] netlink: 'syz.2.1681': attribute type 1 has an invalid length. [ 216.414248][T10866] bond0: left promiscuous mode [ 216.446607][T10866] bond_slave_0: left promiscuous mode [ 216.457558][T10866] bond_slave_1: left promiscuous mode [ 216.628785][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.642066][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.738299][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.763531][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.971584][T10904] syz_tun: entered promiscuous mode [ 217.019897][T10904] syz_tun: left promiscuous mode [ 218.302906][T10981] syzkaller1: entered promiscuous mode [ 218.310908][T10981] syzkaller1: entered allmulticast mode [ 218.908142][T11000] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 219.323984][T11018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.010195][T11034] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1731'. [ 220.580714][T11062] RDS: rds_bind could not find a transport for 2000::, load rds_tcp or rds_rdma? [ 220.875942][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1745'. [ 220.958019][T11068] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.095414][T11080] FAULT_INJECTION: forcing a failure. [ 221.095414][T11080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.126706][T11080] CPU: 1 PID: 11080 Comm: syz.3.1748 Not tainted 6.10.0-rc5-syzkaller-00197-g8eb301bd7b0f #0 [ 221.136904][T11080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 221.146966][T11080] Call Trace: [ 221.150672][T11080] [ 221.153597][T11080] dump_stack_lvl+0x241/0x360 [ 221.158285][T11080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.163483][T11080] ? __pfx__printk+0x10/0x10 [ 221.168076][T11080] ? snprintf+0xda/0x120 [ 221.172313][T11080] should_fail_ex+0x3b0/0x4e0 [ 221.176993][T11080] _copy_to_user+0x2f/0xb0 [ 221.181407][T11080] simple_read_from_buffer+0xca/0x150 [ 221.186871][T11080] proc_fail_nth_read+0x1e9/0x250 [ 221.191887][T11080] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 221.197423][T11080] ? rw_verify_area+0x514/0x6b0 [ 221.202265][T11080] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 221.207800][T11080] vfs_read+0x204/0xbd0 [ 221.211948][T11080] ? __pfx_lock_release+0x10/0x10 [ 221.217057][T11080] ? __pfx_vfs_read+0x10/0x10 [ 221.221723][T11080] ? bpf_prog_test_run+0x352/0x3b0 [ 221.226826][T11080] ? __fget_files+0x29/0x470 [ 221.231409][T11080] ? __fget_files+0x3f6/0x470 [ 221.236089][T11080] ksys_read+0x1a0/0x2c0 [ 221.240328][T11080] ? __pfx_ksys_read+0x10/0x10 [ 221.245082][T11080] ? do_syscall_64+0x100/0x230 [ 221.249845][T11080] ? do_syscall_64+0xb6/0x230 [ 221.254516][T11080] do_syscall_64+0xf3/0x230 [ 221.259018][T11080] ? clear_bhb_loop+0x35/0x90 [ 221.263688][T11080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.269580][T11080] RIP: 0033:0x7f73d1d746bc [ 221.273986][T11080] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 221.293674][T11080] RSP: 002b:00007f73d2ab1040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 221.302093][T11080] RAX: ffffffffffffffda RBX: 00007f73d1f03f60 RCX: 00007f73d1d746bc [ 221.310071][T11080] RDX: 000000000000000f RSI: 00007f73d2ab10b0 RDI: 0000000000000004 [ 221.318134][T11080] RBP: 00007f73d2ab10a0 R08: 0000000000000000 R09: 0000000000000000 [ 221.326099][T11080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.334152][T11080] R13: 000000000000000b R14: 00007f73d1f03f60 R15: 00007ffdbc6e6c18 [ 221.342143][T11080] [ 221.785865][T11097] x_tables: duplicate underflow at hook 2 [ 222.600628][T11135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1767'. [ 222.788065][T11139] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 222.878799][T11138] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.594468][T11170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.935963][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1781'. [ 224.259125][T11187] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.267947][T11187] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.276894][T11187] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.285706][T11187] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.295745][T11187] vxlan0: entered promiscuous mode [ 224.301729][T11187] vxlan0: entered allmulticast mode [ 224.314643][T11187] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.323772][T11187] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.332925][T11187] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.341902][T11187] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.295346][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1793'. [ 225.423695][T11220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.552854][T11223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.529844][T11243] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.539000][T11243] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.548862][T11243] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.557994][T11243] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.627193][T11243] vxlan0: entered promiscuous mode [ 226.632372][T11243] vxlan0: entered allmulticast mode [ 226.696374][T11243] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.705295][T11243] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.714662][T11243] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.723717][T11243] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.192926][T11261] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 227.283894][T11266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1811'. [ 227.351635][T11268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.423693][T11273] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.263637][T11295] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.272864][T11295] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.282329][T11295] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.291483][T11295] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.327548][T11295] vxlan0: entered promiscuous mode [ 228.336346][T11295] vxlan0: entered allmulticast mode [ 228.354470][T11295] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.363592][T11295] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.372552][T11295] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.381558][T11295] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.629383][T11303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1822'. [ 228.744875][T11310] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.796658][T11312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.404000][T11330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1832'. [ 229.537616][T11334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.023426][T11343] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.032548][T11343] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.041390][T11343] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.050331][T11343] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.071714][T11343] vxlan0: entered promiscuous mode [ 230.118910][T11343] vxlan0: entered allmulticast mode [ 230.141879][T11343] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.151206][T11343] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.160325][T11343] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.169310][T11343] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.595419][T11355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.719550][T11365] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 232.462863][T11420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.581270][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1867'. [ 232.725600][T11427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.357065][T11472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.546130][T11478] netlink: 'syz.3.1882': attribute type 11 has an invalid length. [ 234.665921][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1883'. [ 234.757653][T11483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.683796][T11516] netlink: 'syz.1.1895': attribute type 11 has an invalid length. [ 235.927442][T11525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.313400][T11544] syz_tun: entered promiscuous mode [ 236.334491][T11544] syz_tun: left promiscuous mode [ 236.545077][T11555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1908'. [ 236.651897][T11557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.794717][T11562] netlink: 'syz.1.1910': attribute type 11 has an invalid length. [ 237.540006][T11580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.192745][T11610] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 238.330168][T11616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1932'. [ 238.517698][T11619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.813204][T11627] syz_tun: entered promiscuous mode [ 238.853877][T11627] syz_tun: left promiscuous mode [ 239.642169][T11650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.930820][T11662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.143538][T11702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.534437][T11719] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.295424][T11733] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1971'. [ 242.503721][T11740] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 242.793270][T11749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.945978][T11758] syz_tun: entered promiscuous mode [ 242.964244][T11758] syz_tun: left promiscuous mode [ 243.238399][T11775] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.567301][T11780] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1986'. [ 243.970217][T11785] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 244.443945][T11804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.512737][T11813] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1997'. [ 244.557146][T11814] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 245.288400][T11838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2006'. [ 245.850338][T11857] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2011'. [ 245.978256][T11859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.414725][T11881] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.643928][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2022'. [ 247.109373][T11899] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2027'. [ 247.439447][T11905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.686093][T11919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2036'. [ 248.041098][T11937] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2041'. [ 248.124404][T11940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.177303][T11969] netlink: 'syz.4.2049': attribute type 11 has an invalid length. [ 249.253714][T11972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.853061][T12000] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.066841][T12010] netlink: 'syz.0.2064': attribute type 11 has an invalid length. [ 250.869195][T12031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.149295][T12043] netlink: 'syz.1.2077': attribute type 11 has an invalid length. [ 251.648395][T12065] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.401502][T12093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.835069][T12111] syz_tun: entered promiscuous mode [ 252.852498][T12111] syz_tun: left promiscuous mode [ 253.214410][T12128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2105'. [ 253.284321][T12129] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.345127][T12130] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.516470][T12159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.820444][T12174] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.998340][T12185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2126'. [ 255.090029][T12188] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.983041][T12219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.063022][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.072520][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.494865][T12234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.997318][T12258] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.927568][T12292] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.021965][T12299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.182984][T12340] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.856595][T12358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.155922][T12373] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.190221][T12375] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 261.506409][T12426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.651942][T12430] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 262.476931][T12456] syz_tun: entered promiscuous mode [ 262.536034][T12456] syz_tun: left promiscuous mode [ 262.960250][T12476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.997229][T12475] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.762145][T12504] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 263.964556][T12509] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.806102][T12530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.274761][T12551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.565074][T12599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.160882][T12621] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.312460][T12661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.366557][T12669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.457579][T12672] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.801536][T12719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.040961][T12729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.474671][T12744] netlink: 173 bytes leftover after parsing attributes in process `syz.0.2311'. [ 271.025699][T12763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.283236][T12771] netlink: 173 bytes leftover after parsing attributes in process `syz.3.2325'. [ 271.692875][T12794] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.458935][T12816] netlink: 173 bytes leftover after parsing attributes in process `syz.0.2337'. [ 272.673454][T12820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.333290][T12847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 273.427915][T12849] netlink: 173 bytes leftover after parsing attributes in process `syz.0.2352'. [ 274.346366][T12882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.682822][T12896] netlink: 173 bytes leftover after parsing attributes in process `syz.2.2364'. [ 274.860360][T12905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 275.430999][T12919] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 275.900229][T12936] netlink: 173 bytes leftover after parsing attributes in process `syz.1.2378'. [ 276.022775][T12940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.302964][T12953] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.767128][T12999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.135908][T13007] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.870565][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2405'. [ 279.043129][T13022] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.324124][T13034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.134830][T13053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.151736][T13081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.298028][T13083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2430'. [ 281.423578][T13086] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 282.343390][T13105] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 282.635354][T13112] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.106440][T13124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.761851][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2448'. [ 283.889054][T13141] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.866093][T13165] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 285.076790][T13170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.738616][T13217] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.823509][T13220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.701931][T13273] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.890973][T13278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.304126][T13285] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.729321][T13332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.894311][T13341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.539821][T13348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.542176][T13365] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 292.858219][T13378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.072002][T13385] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.510531][T13400] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.025829][T13432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.243981][T13440] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.447804][T13448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.626867][T13457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.909440][T13491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.684929][T13508] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.899507][T13515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.192309][T13524] syz_tun: entered promiscuous mode [ 298.566572][T13535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.049659][T13579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.117995][T13580] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 300.598957][T13591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.644844][T13627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.761426][T13632] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.744252][T13659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.271115][T13684] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.842740][T13698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.565831][T13724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.766703][T13742] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.379976][T13755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.990506][T13780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.016835][T13783] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 306.951364][T13824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.356552][T13837] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 307.586878][T13842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.387882][T13870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.577368][T13876] netlink: 'syz.1.2682': attribute type 3 has an invalid length. [ 308.593127][T13876] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2682'. [ 308.678927][T13883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 308.801728][T13890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.805053][T13924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.946608][T13927] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 310.102998][T13931] netlink: 'syz.1.2701': attribute type 3 has an invalid length. [ 310.125050][T13931] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2701'. [ 310.146136][T13933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.082908][T13973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.328610][T13982] netlink: 'syz.3.2718': attribute type 3 has an invalid length. [ 311.343616][T13982] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2718'. [ 311.524977][T13987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.023272][T13998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.655779][T14020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.807746][T14026] netlink: 'syz.2.2736': attribute type 3 has an invalid length. [ 312.815756][T14026] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2736'. [ 312.925344][T14032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.600491][T14052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.110169][ T5094] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 314.115742][T14067] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2748'. [ 314.128426][ T5094] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 314.144619][ T5094] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 314.156570][ T5094] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 314.163335][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.180584][ T5094] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 314.189789][ T5094] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 314.355600][T14076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.372093][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.461054][T14078] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2749'. [ 314.510284][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.551909][T14074] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 314.659222][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.925925][ T62] team0: left allmulticast mode [ 314.932077][ T62] team_slave_0: left allmulticast mode [ 314.939010][ T62] team_slave_1: left allmulticast mode [ 314.944868][ T62] bridge0: port 4(team0) entered disabled state [ 314.954931][ T62] bond2: left allmulticast mode [ 314.962723][ T62] bond2: left promiscuous mode [ 314.981452][ T62] bridge0: port 1(bond2) entered disabled state [ 315.008535][ T62] bridge_slave_1: left allmulticast mode [ 315.028816][ T62] bridge_slave_1: left promiscuous mode [ 315.034631][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.374368][ T62] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 315.693580][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.705082][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.715723][ T62] bond0 (unregistering): Released all slaves [ 315.729013][ T62] bond1 (unregistering): Released all slaves [ 315.741422][ T62] bond2 (unregistering): Released all slaves [ 315.757565][ T62] bond3 (unregistering): Released all slaves [ 315.775503][ T62] bond4 (unregistering): (slave lo): Releasing active interface [ 315.784175][ T62] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 315.796073][ T62] bond4 (unregistering): Released all slaves [ 315.810756][T14065] chnl_net:caif_netlink_parms(): no params data found [ 315.953074][T14112] FAULT_INJECTION: forcing a failure. [ 315.953074][T14112] name failslab, interval 1, probability 0, space 0, times 0 [ 315.970660][T14112] CPU: 0 PID: 14112 Comm: syz.4.2760 Not tainted 6.10.0-rc5-syzkaller-00197-g8eb301bd7b0f #0 [ 315.980959][T14112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 315.991042][T14112] Call Trace: [ 315.994343][T14112] [ 315.997290][T14112] dump_stack_lvl+0x241/0x360 [ 316.001998][T14112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.007218][T14112] ? __pfx__printk+0x10/0x10 [ 316.011833][T14112] ? ref_tracker_alloc+0x332/0x490 [ 316.016974][T14112] should_fail_ex+0x3b0/0x4e0 [ 316.021686][T14112] ? skb_clone+0x20c/0x390 [ 316.026127][T14112] should_failslab+0x9/0x20 [ 316.030652][T14112] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 316.036036][T14112] skb_clone+0x20c/0x390 [ 316.040278][T14112] __netlink_deliver_tap+0x3cc/0x7c0 [ 316.045570][T14112] ? netlink_deliver_tap+0x2e/0x1b0 [ 316.050771][T14112] netlink_deliver_tap+0x19d/0x1b0 [ 316.055894][T14112] netlink_unicast+0x7b8/0x980 [ 316.060661][T14112] ? __pfx_netlink_unicast+0x10/0x10 [ 316.065934][T14112] ? __virt_addr_valid+0x183/0x520 [ 316.071040][T14112] ? __check_object_size+0x49c/0x900 [ 316.076327][T14112] ? bpf_lsm_netlink_send+0x9/0x10 [ 316.081449][T14112] netlink_sendmsg+0x8db/0xcb0 [ 316.086215][T14112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.091516][T14112] ? __import_iovec+0x536/0x820 [ 316.096354][T14112] ? aa_sock_msg_perm+0x91/0x160 [ 316.101285][T14112] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 316.106555][T14112] ? security_socket_sendmsg+0x87/0xb0 [ 316.112005][T14112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.117279][T14112] __sock_sendmsg+0x221/0x270 [ 316.121953][T14112] ____sys_sendmsg+0x525/0x7d0 [ 316.126716][T14112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 316.132003][T14112] __sys_sendmsg+0x2b0/0x3a0 [ 316.136585][T14112] ? __pfx___sys_sendmsg+0x10/0x10 [ 316.141711][T14112] ? vfs_write+0x7c4/0xc90 [ 316.146154][T14112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 316.152487][T14112] ? do_syscall_64+0x100/0x230 [ 316.157258][T14112] ? do_syscall_64+0xb6/0x230 [ 316.161931][T14112] do_syscall_64+0xf3/0x230 [ 316.166435][T14112] ? clear_bhb_loop+0x35/0x90 [ 316.171101][T14112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.177005][T14112] RIP: 0033:0x7fd9d9b75bd9 [ 316.181457][T14112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.201056][T14112] RSP: 002b:00007fd9da9e2048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.209461][T14112] RAX: ffffffffffffffda RBX: 00007fd9d9d03f60 RCX: 00007fd9d9b75bd9 [ 316.217429][T14112] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 316.225509][T14112] RBP: 00007fd9da9e20a0 R08: 0000000000000000 R09: 0000000000000000 [ 316.233476][T14112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.241443][T14112] R13: 000000000000000b R14: 00007fd9d9d03f60 R15: 00007fff5dc287b8 [ 316.249431][T14112] [ 316.268453][ T5104] Bluetooth: hci4: command tx timeout [ 316.352614][ T62] tipc: Left network mode [ 316.707974][T14125] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.724265][T14130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.864993][T14065] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.882625][T14065] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.913079][T14065] bridge_slave_0: entered allmulticast mode [ 316.934551][T14065] bridge_slave_0: entered promiscuous mode [ 316.980351][ T62] hsr_slave_0: left promiscuous mode [ 316.993348][ T62] hsr_slave_1: left promiscuous mode [ 317.002953][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.016852][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.029640][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.045187][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.086375][ T62] veth1_macvtap: left promiscuous mode [ 317.099024][ T62] veth0_macvtap: left promiscuous mode [ 317.121216][ T62] veth1_vlan: left promiscuous mode [ 317.143083][ T62] veth0_vlan: left promiscuous mode [ 317.501734][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.508890][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.309998][ T5104] Bluetooth: hci4: command tx timeout [ 318.333286][ T62] team_slave_1 (unregistering): left promiscuous mode [ 318.354212][ T62] team0 (unregistering): Port device team_slave_1 removed [ 318.414947][ T62] team_slave_0 (unregistering): left promiscuous mode [ 318.423354][ T62] team0 (unregistering): Port device team_slave_0 removed [ 318.666102][T14065] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.675568][T14065] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.683235][T14065] bridge_slave_1: entered allmulticast mode [ 318.693803][T14065] bridge_slave_1: entered promiscuous mode [ 318.704882][T14141] syz_tun: entered promiscuous mode [ 318.731301][T14159] vlan2: entered promiscuous mode [ 318.747023][T14159] batadv0: entered promiscuous mode [ 318.757490][T14159] batadv0: left promiscuous mode [ 318.828903][T14165] FAULT_INJECTION: forcing a failure. [ 318.828903][T14165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.842750][T14165] CPU: 0 PID: 14165 Comm: syz.0.2775 Not tainted 6.10.0-rc5-syzkaller-00197-g8eb301bd7b0f #0 [ 318.853025][T14165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 318.863097][T14165] Call Trace: [ 318.866368][T14165] [ 318.869292][T14165] dump_stack_lvl+0x241/0x360 [ 318.873982][T14165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.879187][T14165] ? __pfx__printk+0x10/0x10 [ 318.883776][T14165] ? snprintf+0xda/0x120 [ 318.888046][T14165] should_fail_ex+0x3b0/0x4e0 [ 318.892733][T14165] _copy_to_user+0x2f/0xb0 [ 318.897166][T14165] simple_read_from_buffer+0xca/0x150 [ 318.902578][T14165] proc_fail_nth_read+0x1e9/0x250 [ 318.907622][T14165] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.913165][T14165] ? rw_verify_area+0x514/0x6b0 [ 318.918013][T14165] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.923550][T14165] vfs_read+0x204/0xbd0 [ 318.927871][T14165] ? __pfx_lock_release+0x10/0x10 [ 318.932887][T14165] ? __pfx_vfs_read+0x10/0x10 [ 318.937574][T14165] ? __fget_files+0x29/0x470 [ 318.942163][T14165] ? __fget_files+0x3f6/0x470 [ 318.946856][T14165] ksys_read+0x1a0/0x2c0 [ 318.951127][T14165] ? __pfx_ksys_read+0x10/0x10 [ 318.955907][T14165] ? do_syscall_64+0x100/0x230 [ 318.960685][T14165] ? do_syscall_64+0xb6/0x230 [ 318.965351][T14165] do_syscall_64+0xf3/0x230 [ 318.969862][T14165] ? clear_bhb_loop+0x35/0x90 [ 318.974552][T14165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.980450][T14165] RIP: 0033:0x7f5a3ef746bc [ 318.984852][T14165] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 319.004482][T14165] RSP: 002b:00007f5a3fc98040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 319.012906][T14165] RAX: ffffffffffffffda RBX: 00007f5a3f103f60 RCX: 00007f5a3ef746bc [ 319.020871][T14165] RDX: 000000000000000f RSI: 00007f5a3fc980b0 RDI: 0000000000000003 [ 319.028840][T14165] RBP: 00007f5a3fc980a0 R08: 0000000000000000 R09: 0000000000000000 [ 319.036829][T14165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.044809][T14165] R13: 000000000000000b R14: 00007f5a3f103f60 R15: 00007ffcf24aca58 [ 319.052807][T14165] [ 319.208510][T14065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.243062][T14065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.347889][T14181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.398554][T14168] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.588927][T14065] team0: Port device team_slave_0 added [ 319.621809][T14065] team0: Port device team_slave_1 added [ 319.768342][T14065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.796029][T14065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.844677][T14065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.883994][ T62] IPVS: stop unused estimator thread 0... [ 319.886632][T14065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.906661][T14065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.951417][T14065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.150612][T14065] hsr_slave_0: entered promiscuous mode [ 320.182351][T14065] hsr_slave_1: entered promiscuous mode [ 320.197080][T14065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.226376][T14065] Cannot create hsr debugfs directory [ 320.376625][ T5104] Bluetooth: hci4: command tx timeout [ 321.351574][T14065] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 321.474204][T14065] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 321.506468][T14240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.514036][T14065] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 321.552184][T14065] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 321.663721][T14247] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.963430][T14065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.008376][T14065] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.049602][ T4877] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.056826][ T4877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.093408][ T4877] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.100625][ T4877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.456506][ T5104] Bluetooth: hci4: command tx timeout [ 322.867941][T14288] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2798'. [ 322.957862][T14065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.180090][T14065] veth0_vlan: entered promiscuous mode [ 323.214869][T14065] veth1_vlan: entered promiscuous mode [ 323.239141][T14304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.290357][T14303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2802'. [ 323.381659][T14065] veth0_macvtap: entered promiscuous mode [ 323.415233][T14065] veth1_macvtap: entered promiscuous mode [ 323.468116][T14065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.484777][T14065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.495653][T14065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.509394][T14065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.522718][T14065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.533696][T14065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.552125][T14065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.588255][T14065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.616251][T14065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.666317][T14065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.716299][T14065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.736708][T14065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.776291][T14065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.812246][T14065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.846135][T14065] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.875881][T14065] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.909335][T14065] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.939808][T14065] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.183377][T10931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.201515][T10931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.283996][T10918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.299017][T10918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.510450][T14351] veth1_macvtap: left promiscuous mode [ 324.534228][T14351] macsec0: entered promiscuous mode [ 324.593245][T14354] veth1_macvtap: entered promiscuous mode [ 324.603918][T14354] macsec0: left promiscuous mode [ 324.613886][T14354] macsec0: entered allmulticast mode [ 324.641640][T14354] veth1_macvtap: entered allmulticast mode [ 324.980393][T14371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.509669][T14397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2819'. [ 326.073437][T14417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.082596][T14420] FAULT_INJECTION: forcing a failure. [ 326.082596][T14420] name failslab, interval 1, probability 0, space 0, times 0 [ 326.101602][T14420] CPU: 1 PID: 14420 Comm: syz.4.2825 Not tainted 6.10.0-rc5-syzkaller-00197-g8eb301bd7b0f #0 [ 326.111784][T14420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 326.121835][T14420] Call Trace: [ 326.125113][T14420] [ 326.128033][T14420] dump_stack_lvl+0x241/0x360 [ 326.132754][T14420] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.137963][T14420] ? __pfx__printk+0x10/0x10 [ 326.142561][T14420] should_fail_ex+0x3b0/0x4e0 [ 326.147245][T14420] ? skb_clone+0x20c/0x390 [ 326.151662][T14420] should_failslab+0x9/0x20 [ 326.156168][T14420] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 326.161547][T14420] skb_clone+0x20c/0x390 [ 326.165781][T14420] ? dev_queue_xmit_nit+0x220/0xc10 [ 326.170974][T14420] dev_queue_xmit_nit+0x419/0xc10 [ 326.175995][T14420] ? dev_queue_xmit_nit+0x2b/0xc10 [ 326.181102][T14420] ? validate_xmit_skb+0xa04/0x1120 [ 326.186298][T14420] dev_hard_start_xmit+0x15f/0x7e0 [ 326.191402][T14420] ? __pfx_validate_xmit_skb+0x10/0x10 [ 326.196949][T14420] __dev_queue_xmit+0x1b0e/0x3d30 [ 326.201976][T14420] ? __dev_queue_xmit+0x2d2/0x3d30 [ 326.207085][T14420] ? __pfx___dev_queue_xmit+0x10/0x10 [ 326.212446][T14420] ? __copy_skb_header+0x437/0x5b0 [ 326.217552][T14420] ? __asan_memcpy+0x40/0x70 [ 326.222131][T14420] ? __copy_skb_header+0x437/0x5b0 [ 326.227246][T14420] ? __skb_clone+0x454/0x6c0 [ 326.231857][T14420] ? skb_clone+0x240/0x390 [ 326.236267][T14420] __netlink_deliver_tap+0x54d/0x7c0 [ 326.241554][T14420] ? netlink_deliver_tap+0x2e/0x1b0 [ 326.246750][T14420] netlink_deliver_tap+0x19d/0x1b0 [ 326.251858][T14420] netlink_unicast+0x7b8/0x980 [ 326.256623][T14420] ? __pfx_netlink_unicast+0x10/0x10 [ 326.261911][T14420] ? __virt_addr_valid+0x183/0x520 [ 326.267019][T14420] ? __check_object_size+0x49c/0x900 [ 326.272297][T14420] ? bpf_lsm_netlink_send+0x9/0x10 [ 326.277404][T14420] netlink_sendmsg+0x8db/0xcb0 [ 326.282169][T14420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.287452][T14420] ? __import_iovec+0x536/0x820 [ 326.292293][T14420] ? aa_sock_msg_perm+0x91/0x160 [ 326.297226][T14420] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 326.302497][T14420] ? security_socket_sendmsg+0x87/0xb0 [ 326.307947][T14420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.313226][T14420] __sock_sendmsg+0x221/0x270 [ 326.317907][T14420] ____sys_sendmsg+0x525/0x7d0 [ 326.322845][T14420] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.328134][T14420] __sys_sendmsg+0x2b0/0x3a0 [ 326.332717][T14420] ? __pfx___sys_sendmsg+0x10/0x10 [ 326.337818][T14420] ? vfs_write+0x7c4/0xc90 [ 326.342260][T14420] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 326.348579][T14420] ? do_syscall_64+0x100/0x230 [ 326.353351][T14420] ? do_syscall_64+0xb6/0x230 [ 326.358024][T14420] do_syscall_64+0xf3/0x230 [ 326.362522][T14420] ? clear_bhb_loop+0x35/0x90 [ 326.367190][T14420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.373073][T14420] RIP: 0033:0x7fd9d9b75bd9 [ 326.377478][T14420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.397075][T14420] RSP: 002b:00007fd9da9c1048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.405481][T14420] RAX: ffffffffffffffda RBX: 00007fd9d9d04038 RCX: 00007fd9d9b75bd9 [ 326.413439][T14420] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000003 [ 326.421398][T14420] RBP: 00007fd9da9c10a0 R08: 0000000000000000 R09: 0000000000000000 [ 326.429357][T14420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.437314][T14420] R13: 000000000000006e R14: 00007fd9d9d04038 R15: 00007fff5dc287b8 [ 326.445287][T14420] [ 326.915993][T14442] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 327.163547][T14451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.281551][T14456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2833'. [ 327.306641][T14456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2833'. [ 327.552652][T14464] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2835'. [ 327.577689][T14464] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 327.932997][T14478] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 327.998174][T14482] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2840'. [ 328.019506][T14482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2840'. [ 328.064249][T14482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2840'. [ 328.104832][T14482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2840'. [ 328.130661][T14483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.263829][T14491] FAULT_INJECTION: forcing a failure. [ 328.263829][T14491] name failslab, interval 1, probability 0, space 0, times 0 [ 328.307153][T14491] CPU: 1 PID: 14491 Comm: syz.4.2844 Not tainted 6.10.0-rc5-syzkaller-00197-g8eb301bd7b0f #0 [ 328.317469][T14491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 328.327542][T14491] Call Trace: [ 328.330836][T14491] [ 328.333777][T14491] dump_stack_lvl+0x241/0x360 [ 328.338487][T14491] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.343722][T14491] ? __pfx__printk+0x10/0x10 [ 328.348347][T14491] ? __pfx___might_resched+0x10/0x10 [ 328.350270][T14493] netlink: 'syz.3.2845': attribute type 1 has an invalid length. [ 328.353665][T14491] should_fail_ex+0x3b0/0x4e0 [ 328.353709][T14491] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 328.353732][T14491] should_failslab+0x9/0x20 [ 328.376933][T14491] __kmalloc_noprof+0xd8/0x400 [ 328.381744][T14491] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 328.387844][T14491] genl_rcv_msg+0x802/0xec0 [ 328.392342][T14491] ? mark_lock+0x9a/0x350 [ 328.396672][T14491] ? __pfx_genl_rcv_msg+0x10/0x10 [ 328.401704][T14491] ? __pfx_lock_acquire+0x10/0x10 [ 328.406720][T14491] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 328.412257][T14491] ? __pfx___might_resched+0x10/0x10 [ 328.417540][T14491] netlink_rcv_skb+0x1e3/0x430 [ 328.422314][T14491] ? __pfx_genl_rcv_msg+0x10/0x10 [ 328.427422][T14491] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 328.432731][T14491] genl_rcv+0x28/0x40 [ 328.436794][T14491] netlink_unicast+0x7ea/0x980 [ 328.441560][T14491] ? __pfx_netlink_unicast+0x10/0x10 [ 328.446836][T14491] ? __virt_addr_valid+0x183/0x520 [ 328.451950][T14491] ? __check_object_size+0x49c/0x900 [ 328.457233][T14491] ? bpf_lsm_netlink_send+0x9/0x10 [ 328.462345][T14491] netlink_sendmsg+0x8db/0xcb0 [ 328.467116][T14491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.472421][T14491] ? __import_iovec+0x536/0x820 [ 328.477295][T14491] ? aa_sock_msg_perm+0x91/0x160 [ 328.482231][T14491] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 328.487504][T14491] ? security_socket_sendmsg+0x87/0xb0 [ 328.492954][T14491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.498231][T14491] __sock_sendmsg+0x221/0x270 [ 328.502907][T14491] ____sys_sendmsg+0x525/0x7d0 [ 328.507757][T14491] ? __pfx_____sys_sendmsg+0x10/0x10 [ 328.513132][T14491] __sys_sendmsg+0x2b0/0x3a0 [ 328.517715][T14491] ? __pfx___sys_sendmsg+0x10/0x10 [ 328.522823][T14491] ? vfs_write+0x7c4/0xc90 [ 328.527264][T14491] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 328.533584][T14491] ? do_syscall_64+0x100/0x230 [ 328.538350][T14491] ? do_syscall_64+0xb6/0x230 [ 328.543024][T14491] do_syscall_64+0xf3/0x230 [ 328.547523][T14491] ? clear_bhb_loop+0x35/0x90 [ 328.552193][T14491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.558100][T14491] RIP: 0033:0x7fd9d9b75bd9 [ 328.562511][T14491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.582194][T14491] RSP: 002b:00007fd9da9e2048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.590597][T14491] RAX: ffffffffffffffda RBX: 00007fd9d9d03f60 RCX: 00007fd9d9b75bd9 [ 328.598556][T14491] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 328.606514][T14491] RBP: 00007fd9da9e20a0 R08: 0000000000000000 R09: 0000000000000000 [ 328.614469][T14491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.622439][T14491] R13: 000000000000000b R14: 00007fd9d9d03f60 R15: 00007fff5dc287b8 [ 328.630432][T14491] [ 328.851622][T14500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.829402][ T5094] Bluetooth: hci0: command 0x0406 tx timeout [ 330.201484][T14543] tipc: Started in network mode [ 330.219458][T14543] tipc: Node identity ffffffff, cluster identity 4711 [ 330.246038][T14543] tipc: Node number set to 4294967295 [ 330.262998][T14543] tipc: Enabled bearer , priority 0 [ 330.388969][T14548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.798460][T14525] syz.4.2854 (14525) used greatest stack depth: 18384 bytes left [ 331.016092][T14567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.221516][T14575] ip6t_srh: unknown srh invflags A757 [ 331.314114][T14577] wireguard1: entered promiscuous mode [ 331.323580][T14577] wireguard1: entered allmulticast mode [ 331.791872][T14598] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2878'. [ 331.968567][T14604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.986994][T14608] sctp: [Deprecated]: syz.1.2882 (pid 14608) Use of struct sctp_assoc_value in delayed_ack socket option. [ 331.986994][T14608] Use struct sctp_sack_info instead [ 332.033745][T14608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2882'. [ 332.605895][T14598] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 332.900668][T14635] sctp: [Deprecated]: syz.0.2892 (pid 14635) Use of int in maxseg socket option. [ 332.900668][T14635] Use struct sctp_assoc_value instead [ 333.066078][T14647] netem: change failed [ 333.353916][T14655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.895839][T14670] sctp: [Deprecated]: syz.3.2905 (pid 14670) Use of int in maxseg socket option. [ 333.895839][T14670] Use struct sctp_assoc_value instead [ 334.200843][T14683] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2910'. [ 334.269034][T14686] FAULT_INJECTION: forcing a failure. [ 334.269034][T14686] name failslab, interval 1, probability 0, space 0, times 0 [ 334.318697][T14686] CPU: 0 PID: 14686 Comm: syz.0.2911 Not tainted 6.10.0-rc5-syzkaller-00197-g8eb301bd7b0f #0 [ 334.328912][T14686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 334.339010][T14686] Call Trace: [ 334.342309][T14686] [ 334.345259][T14686] dump_stack_lvl+0x241/0x360 [ 334.349973][T14686] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.355192][T14686] ? __pfx__printk+0x10/0x10 [ 334.359810][T14686] ? __pfx___might_resched+0x10/0x10 [ 334.365129][T14686] should_fail_ex+0x3b0/0x4e0 [ 334.369837][T14686] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 334.376097][T14686] should_failslab+0x9/0x20 [ 334.380707][T14686] __kmalloc_noprof+0xd8/0x400 [ 334.385498][T14686] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 334.391601][T14686] genl_rcv_msg+0x802/0xec0 [ 334.396117][T14686] ? mark_lock+0x9a/0x350 [ 334.400474][T14686] ? __pfx_genl_rcv_msg+0x10/0x10 [ 334.405537][T14686] ? __pfx_lock_acquire+0x10/0x10 [ 334.410576][T14686] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 334.416316][T14686] ? __pfx___might_resched+0x10/0x10 [ 334.421632][T14686] netlink_rcv_skb+0x1e3/0x430 [ 334.426429][T14686] ? __pfx_genl_rcv_msg+0x10/0x10 [ 334.431483][T14686] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 334.436839][T14686] genl_rcv+0x28/0x40 [ 334.440854][T14686] netlink_unicast+0x7ea/0x980 [ 334.445661][T14686] ? __pfx_netlink_unicast+0x10/0x10 [ 334.451064][T14686] ? __virt_addr_valid+0x183/0x520 [ 334.456211][T14686] ? __check_object_size+0x49c/0x900 [ 334.461617][T14686] ? bpf_lsm_netlink_send+0x9/0x10 [ 334.466762][T14686] netlink_sendmsg+0x8db/0xcb0 [ 334.471549][T14686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.476840][T14686] ? __import_iovec+0x536/0x820 [ 334.481685][T14686] ? aa_sock_msg_perm+0x91/0x160 [ 334.486617][T14686] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 334.491897][T14686] ? security_socket_sendmsg+0x87/0xb0 [ 334.497346][T14686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.502620][T14686] __sock_sendmsg+0x221/0x270 [ 334.507292][T14686] ____sys_sendmsg+0x525/0x7d0 [ 334.512056][T14686] ? __pfx_____sys_sendmsg+0x10/0x10 [ 334.517346][T14686] __sys_sendmsg+0x2b0/0x3a0 [ 334.521931][T14686] ? __pfx___sys_sendmsg+0x10/0x10 [ 334.527038][T14686] ? vfs_write+0x7c4/0xc90 [ 334.531478][T14686] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 334.537796][T14686] ? do_syscall_64+0x100/0x230 [ 334.542597][T14686] ? do_syscall_64+0xb6/0x230 [ 334.547271][T14686] do_syscall_64+0xf3/0x230 [ 334.551768][T14686] ? clear_bhb_loop+0x35/0x90 [ 334.556434][T14686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.562319][T14686] RIP: 0033:0x7f5a3ef75bd9 [ 334.566723][T14686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.586325][T14686] RSP: 002b:00007f5a3fc98048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.594731][T14686] RAX: ffffffffffffffda RBX: 00007f5a3f103f60 RCX: 00007f5a3ef75bd9 [ 334.602689][T14686] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 334.610646][T14686] RBP: 00007f5a3fc980a0 R08: 0000000000000000 R09: 0000000000000000 [ 334.618604][T14686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.626563][T14686] R13: 000000000000000b R14: 00007f5a3f103f60 R15: 00007ffcf24aca58 [ 334.634537][T14686] [ 334.696977][T14691] netlink: 'syz.4.2913': attribute type 33 has an invalid length. [ 334.845892][T14697] netlink: 'syz.4.2916': attribute type 7 has an invalid length. [ 334.891875][T14697] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.2916'. [ 335.062717][T14713] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2921'. [ 335.079982][T14713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 335.175142][T14715] sctp: [Deprecated]: syz.0.2920 (pid 14715) Use of int in maxseg socket option. [ 335.175142][T14715] Use struct sctp_assoc_value instead [ 335.317842][T14725] FAULT_INJECTION: forcing a failure. [ 335.317842][T14725] name failslab, interval 1, probability 0, space 0, times 0 [ 335.330999][T14725] CPU: 0 PID: 14725 Comm: syz.0.2925 Not tainted 6.10.0-rc5-syzkaller-00197-g8eb301bd7b0f #0 [ 335.341184][T14725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 335.351265][T14725] Call Trace: [ 335.354557][T14725] [ 335.357503][T14725] dump_stack_lvl+0x241/0x360 [ 335.362207][T14725] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.367431][T14725] ? __pfx__printk+0x10/0x10 [ 335.372043][T14725] ? ref_tracker_alloc+0x332/0x490 [ 335.377184][T14725] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 335.382674][T14725] should_fail_ex+0x3b0/0x4e0 [ 335.387382][T14725] ? skb_clone+0x20c/0x390 [ 335.391825][T14725] should_failslab+0x9/0x20 [ 335.396347][T14725] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 335.401740][T14725] skb_clone+0x20c/0x390 [ 335.405998][T14725] __netlink_deliver_tap+0x3cc/0x7c0 [ 335.408353][T14727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 335.411291][T14725] ? netlink_deliver_tap+0x2e/0x1b0 [ 335.431578][T14725] netlink_deliver_tap+0x19d/0x1b0 [ 335.436721][T14725] netlink_sendskb+0x68/0x140 [ 335.441436][T14725] netlink_unicast+0x39d/0x980 [ 335.446226][T14725] ? __asan_memcpy+0x40/0x70 [ 335.450848][T14725] ? __pfx_netlink_unicast+0x10/0x10 [ 335.456161][T14725] netlink_rcv_skb+0x262/0x430 [ 335.460951][T14725] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 335.466433][T14725] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 335.471758][T14725] ? apparmor_capable+0x138/0x1b0 [ 335.476836][T14725] ? bpf_lsm_capable+0x9/0x10 [ 335.481522][T14725] ? security_capable+0x90/0xb0 [ 335.486397][T14725] nfnetlink_rcv+0x297/0x2a80 [ 335.491095][T14725] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 335.497445][T14725] ? __local_bh_enable_ip+0x168/0x200 [ 335.502846][T14725] ? lockdep_hardirqs_on+0x99/0x150 [ 335.508061][T14725] ? __local_bh_enable_ip+0x168/0x200 [ 335.513536][T14725] ? dev_hard_start_xmit+0x773/0x7e0 [ 335.518840][T14725] ? __dev_queue_xmit+0x2d2/0x3d30 [ 335.523975][T14725] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 335.529726][T14725] ? __dev_queue_xmit+0x2d2/0x3d30 [ 335.534870][T14725] ? __dev_queue_xmit+0x16c9/0x3d30 [ 335.540092][T14725] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 335.545245][T14725] ? __dev_queue_xmit+0x2d2/0x3d30 [ 335.550402][T14725] ? ref_tracker_free+0x643/0x7e0 [ 335.555454][T14725] ? __asan_memcpy+0x40/0x70 [ 335.560065][T14725] ? __pfx_ref_tracker_free+0x10/0x10 [ 335.565479][T14725] ? netlink_deliver_tap+0x2e/0x1b0 [ 335.570699][T14725] ? skb_clone+0x240/0x390 [ 335.575139][T14725] ? __pfx_lock_release+0x10/0x10 [ 335.580185][T14725] ? __netlink_deliver_tap+0x77e/0x7c0 [ 335.585685][T14725] ? netlink_deliver_tap+0x2e/0x1b0 [ 335.590904][T14725] netlink_unicast+0x7ea/0x980 [ 335.595696][T14725] ? __pfx_netlink_unicast+0x10/0x10 [ 335.600998][T14725] ? __virt_addr_valid+0x183/0x520 [ 335.606132][T14725] ? __check_object_size+0x49c/0x900 [ 335.611434][T14725] ? bpf_lsm_netlink_send+0x9/0x10 [ 335.616566][T14725] netlink_sendmsg+0x8db/0xcb0 [ 335.621363][T14725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.626673][T14725] ? __import_iovec+0x536/0x820 [ 335.631546][T14725] ? aa_sock_msg_perm+0x91/0x160 [ 335.636513][T14725] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 335.641821][T14725] ? security_socket_sendmsg+0x87/0xb0 [ 335.647310][T14725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.652622][T14725] __sock_sendmsg+0x221/0x270 [ 335.657332][T14725] ____sys_sendmsg+0x525/0x7d0 [ 335.662134][T14725] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.667463][T14725] __sys_sendmsg+0x2b0/0x3a0 [ 335.672081][T14725] ? __pfx___sys_sendmsg+0x10/0x10 [ 335.677218][T14725] ? vfs_write+0x7c4/0xc90 [ 335.681695][T14725] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 335.688039][T14725] ? do_syscall_64+0x100/0x230 [ 335.692829][T14725] ? do_syscall_64+0xb6/0x230 [ 335.697527][T14725] do_syscall_64+0xf3/0x230 [ 335.702052][T14725] ? clear_bhb_loop+0x35/0x90 [ 335.706745][T14725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.712667][T14725] RIP: 0033:0x7f5a3ef75bd9 [ 335.717095][T14725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.736898][T14725] RSP: 002b:00007f5a3fc98048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.745343][T14725] RAX: ffffffffffffffda RBX: 00007f5a3f103f60 RCX: 00007f5a3ef75bd9 [ 335.753341][T14725] RDX: 0000000000000000 RSI: 0000000020001140 RDI: 0000000000000003 [ 335.761336][T14725] RBP: 00007f5a3fc980a0 R08: 0000000000000000 R09: 0000000000000000 [ 335.769420][T14725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.777418][T14725] R13: 000000000000000b R14: 00007f5a3f103f60 R15: 00007ffcf24aca58 [ 335.785439][T14725] [ 336.443891][T14752] FAULT_INJECTION: forcing a failure. [ 336.443891][T14752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.462031][T14752] CPU: 1 PID: 14752 Comm: syz.3.2934 Not tainted 6.10.0-rc5-syzkaller-00197-g8eb301bd7b0f #0 [ 336.472232][T14752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 336.482307][T14752] Call Trace: [ 336.485603][T14752] [ 336.488545][T14752] dump_stack_lvl+0x241/0x360 [ 336.493246][T14752] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.498468][T14752] ? __pfx__printk+0x10/0x10 [ 336.504034][T14752] ? __pfx_lock_release+0x10/0x10 [ 336.509081][T14752] should_fail_ex+0x3b0/0x4e0 [ 336.513787][T14752] _copy_from_user+0x2f/0xe0 [ 336.518397][T14752] copy_msghdr_from_user+0xae/0x680 [ 336.523626][T14752] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 336.529477][T14752] __sys_sendmsg+0x23d/0x3a0 [ 336.534096][T14752] ? __pfx___sys_sendmsg+0x10/0x10 [ 336.539234][T14752] ? vfs_write+0x7c4/0xc90 [ 336.543715][T14752] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 336.550072][T14752] ? do_syscall_64+0x100/0x230 [ 336.554959][T14752] ? do_syscall_64+0xb6/0x230 [ 336.559708][T14752] do_syscall_64+0xf3/0x230 [ 336.564242][T14752] ? clear_bhb_loop+0x35/0x90 [ 336.568943][T14752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.574864][T14752] RIP: 0033:0x7f73d1d75bd9 [ 336.579302][T14752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.598928][T14752] RSP: 002b:00007f73d2a90048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.607363][T14752] RAX: ffffffffffffffda RBX: 00007f73d1f04038 RCX: 00007f73d1d75bd9 [ 336.615359][T14752] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000007 [ 336.623360][T14752] RBP: 00007f73d2a900a0 R08: 0000000000000000 R09: 0000000000000000 [ 336.631361][T14752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.639361][T14752] R13: 000000000000006e R14: 00007f73d1f04038 R15: 00007ffdbc6e6c18 [ 336.647552][T14752] [ 336.781952][T14761] sctp: [Deprecated]: syz.3.2936 (pid 14761) Use of int in maxseg socket option. [ 336.781952][T14761] Use struct sctp_assoc_value instead [ 337.251032][T14780] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.301368][T14783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2944'. [ 338.720242][T14853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 338.825537][T14860] FAULT_INJECTION: forcing a failure. [ 338.825537][T14860] name failslab, interval 1, probability 0, space 0, times 0 [ 338.865320][T14862] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 338.893139][T14860] CPU: 1 PID: 14860 Comm: syz.0.2964 Not tainted 6.10.0-rc5-syzkaller-00197-g8eb301bd7b0f #0 [ 338.903458][T14860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 338.913532][T14860] Call Trace: [ 338.916828][T14860] [ 338.919777][T14860] dump_stack_lvl+0x241/0x360 [ 338.924494][T14860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.929725][T14860] ? __pfx__printk+0x10/0x10 [ 338.934355][T14860] ? ref_tracker_alloc+0x332/0x490 [ 338.939505][T14860] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 338.945001][T14860] should_fail_ex+0x3b0/0x4e0 [ 338.949704][T14860] ? skb_clone+0x20c/0x390 [ 338.954122][T14860] should_failslab+0x9/0x20 [ 338.958622][T14860] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 338.964010][T14860] skb_clone+0x20c/0x390 [ 338.968264][T14860] __netlink_deliver_tap+0x3cc/0x7c0 [ 338.973588][T14860] ? netlink_deliver_tap+0x2e/0x1b0 [ 338.978793][T14860] netlink_deliver_tap+0x19d/0x1b0 [ 338.983903][T14860] netlink_sendskb+0x68/0x140 [ 338.988577][T14860] netlink_unicast+0x39d/0x980 [ 338.993334][T14860] ? __asan_memcpy+0x40/0x70 [ 338.997922][T14860] ? __pfx_netlink_unicast+0x10/0x10 [ 339.003204][T14860] netlink_rcv_skb+0x262/0x430 [ 339.007960][T14860] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 339.013415][T14860] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 339.018719][T14860] ? netlink_deliver_tap+0x2e/0x1b0 [ 339.023913][T14860] netlink_unicast+0x7ea/0x980 [ 339.028692][T14860] ? __pfx_netlink_unicast+0x10/0x10 [ 339.033989][T14860] ? __virt_addr_valid+0x183/0x520 [ 339.039109][T14860] ? __check_object_size+0x49c/0x900 [ 339.044404][T14860] ? bpf_lsm_netlink_send+0x9/0x10 [ 339.049521][T14860] netlink_sendmsg+0x8db/0xcb0 [ 339.054288][T14860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.059575][T14860] ? aa_sock_msg_perm+0x91/0x160 [ 339.064508][T14860] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 339.069791][T14860] ? security_socket_sendmsg+0x87/0xb0 [ 339.075245][T14860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.080540][T14860] __sock_sendmsg+0x221/0x270 [ 339.085218][T14860] sock_write_iter+0x2dd/0x400 [ 339.089980][T14860] ? __pfx_sock_write_iter+0x10/0x10 [ 339.095278][T14860] do_iter_readv_writev+0x5a4/0x800 [ 339.100473][T14860] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 339.106192][T14860] ? bpf_lsm_file_permission+0x9/0x10 [ 339.111572][T14860] ? security_file_permission+0x7f/0xa0 [ 339.117124][T14860] ? rw_verify_area+0x1d2/0x6b0 [ 339.121986][T14860] vfs_writev+0x395/0xbe0 [ 339.126335][T14860] ? __pfx_vfs_writev+0x10/0x10 [ 339.131188][T14860] ? vfs_write+0x7c4/0xc90 [ 339.135610][T14860] ? __fget_files+0x29/0x470 [ 339.140207][T14860] do_writev+0x1b1/0x350 [ 339.144453][T14860] ? __pfx_do_writev+0x10/0x10 [ 339.149210][T14860] ? do_syscall_64+0x100/0x230 [ 339.153970][T14860] ? do_syscall_64+0xb6/0x230 [ 339.158642][T14860] do_syscall_64+0xf3/0x230 [ 339.163140][T14860] ? clear_bhb_loop+0x35/0x90 [ 339.167806][T14860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.173700][T14860] RIP: 0033:0x7f5a3ef75bd9 [ 339.178107][T14860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.197806][T14860] RSP: 002b:00007f5a3fc98048 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 339.206214][T14860] RAX: ffffffffffffffda RBX: 00007f5a3f103f60 RCX: 00007f5a3ef75bd9 [ 339.214176][T14860] RDX: 0000000000000002 RSI: 0000000020000580 RDI: 0000000000000003 [ 339.222135][T14860] RBP: 00007f5a3fc980a0 R08: 0000000000000000 R09: 0000000000000000 [ 339.230108][T14860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.238065][T14860] R13: 000000000000000b R14: 00007f5a3f103f60 R15: 00007ffcf24aca58 [ 339.246036][T14860] [ 339.276783][T14861] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 339.571832][T14871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2965'. [ 339.597292][T14873] FAULT_INJECTION: forcing a failure. [ 339.597292][T14873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.627421][T14871] vlan2: entered promiscuous mode [ 339.653367][T14871] team0: entered promiscuous mode [ 339.663083][T14871] team_slave_0: entered promiscuous mode [ 339.679736][T14873] CPU: 1 PID: 14873 Comm: syz.1.2966 Not tainted 6.10.0-rc5-syzkaller-00197-g8eb301bd7b0f #0 [ 339.689937][T14873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 339.693115][T14871] team_slave_1: entered promiscuous mode [ 339.699999][T14873] Call Trace: [ 339.700013][T14873] [ 339.700023][T14873] dump_stack_lvl+0x241/0x360 [ 339.700057][T14873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.700080][T14873] ? __pfx__printk+0x10/0x10 [ 339.700105][T14873] ? __pfx_lock_release+0x10/0x10 [ 339.700132][T14873] should_fail_ex+0x3b0/0x4e0 [ 339.700161][T14873] _copy_from_user+0x2f/0xe0 [ 339.700182][T14873] copy_msghdr_from_user+0xae/0x680 [ 339.700215][T14873] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 339.700256][T14873] __sys_sendmsg+0x23d/0x3a0 [ 339.756401][T14873] ? __pfx___sys_sendmsg+0x10/0x10 [ 339.761517][T14873] ? vfs_write+0x7c4/0xc90 [ 339.766043][T14873] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 339.772374][T14873] ? do_syscall_64+0x100/0x230 [ 339.777139][T14873] ? do_syscall_64+0xb6/0x230 [ 339.781808][T14873] do_syscall_64+0xf3/0x230 [ 339.786310][T14873] ? clear_bhb_loop+0x35/0x90 [ 339.790977][T14873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.796880][T14873] RIP: 0033:0x7fa6b4b75bd9 [ 339.801307][T14873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.821014][T14873] RSP: 002b:00007fa6b5957048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.829429][T14873] RAX: ffffffffffffffda RBX: 00007fa6b4d03f60 RCX: 00007fa6b4b75bd9 [ 339.837397][T14873] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000010 [ 339.845446][T14873] RBP: 00007fa6b59570a0 R08: 0000000000000000 R09: 0000000000000000 [ 339.853409][T14873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.861371][T14873] R13: 000000000000004d R14: 00007fa6b4d03f60 R15: 00007ffdb8f2f2f8 [ 339.869346][T14873] [ 339.898741][T14871] team0: left promiscuous mode [ 339.916927][T14871] team_slave_0: left promiscuous mode [ 339.933447][T14871] team_slave_1: left promiscuous mode [ 340.048503][T14883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2967'. [ 340.074092][T14883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2967'. [ 340.108953][T14886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2967'. [ 340.133173][T14886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2967'. [ 340.235396][T14886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2967'. [ 340.248310][T14886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2967'. [ 340.284172][T14886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2967'. [ 340.328794][T14886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2967'. [ 340.356760][T14886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2967'. [ 340.499703][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 340.608977][T14911] xt_CT: You must specify a L4 protocol and not use inversions on it [ 340.872376][T14925] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 342.415165][T14983] netlink: 'syz.0.2997': attribute type 31 has an invalid length. [ 342.427050][T14981] FAULT_INJECTION: forcing a failure. [ 342.427050][T14981] name failslab, interval 1, probability 0, space 0, times 0 [ 342.439736][T14981] CPU: 0 PID: 14981 Comm: syz.4.2995 Not tainted 6.10.0-rc5-syzkaller-00197-g8eb301bd7b0f #0 [ 342.449911][T14981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 342.459997][T14981] Call Trace: [ 342.463300][T14981] [ 342.466256][T14981] dump_stack_lvl+0x241/0x360 [ 342.470967][T14981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.476205][T14981] ? __pfx__printk+0x10/0x10 [ 342.480828][T14981] ? fib6_nh_init+0x789/0x2180 [ 342.485613][T14981] ? __pfx_validate_chain+0x10/0x10 [ 342.490833][T14981] should_fail_ex+0x3b0/0x4e0 [ 342.495538][T14981] ? __alloc_skb+0x1c3/0x440 [ 342.500243][T14981] should_failslab+0x9/0x20 [ 342.504765][T14981] kmem_cache_alloc_node_noprof+0x71/0x320 [ 342.510595][T14981] ? fib6_nh_init+0xe2e/0x2180 [ 342.515388][T14981] __alloc_skb+0x1c3/0x440 [ 342.519833][T14981] ? rt6_nlmsg_size+0x2a3/0x450 [ 342.524705][T14981] ? __pfx___alloc_skb+0x10/0x10 [ 342.529667][T14981] ? fib6_add_1+0x783/0x13c0 [ 342.534293][T14981] inet6_rt_notify+0xdf/0x290 [ 342.538999][T14981] fib6_add+0x1e33/0x4430 [ 342.543389][T14981] ? __pfx_fib6_add+0x10/0x10 [ 342.548093][T14981] ? do_raw_spin_lock+0x14f/0x370 [ 342.553145][T14981] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 342.558974][T14981] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 342.564376][T14981] ? ip6_route_add+0x76/0x160 [ 342.569080][T14981] ip6_route_add+0x8b/0x160 [ 342.573599][T14981] addrconf_add_dev+0x35b/0x540 [ 342.578463][T14981] ? __pfx_addrconf_add_dev+0x10/0x10 [ 342.583837][T14981] ? ipv6_get_ifaddr+0x708/0x770 [ 342.588767][T14981] inet6_addr_add+0x258/0xb00 [ 342.593456][T14981] inet6_rtm_newaddr+0x8a3/0xc80 [ 342.598412][T14981] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 342.603907][T14981] ? __pfx___mutex_lock+0x10/0x10 [ 342.608961][T14981] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 342.614446][T14981] rtnetlink_rcv_msg+0x89b/0x1180 [ 342.619554][T14981] ? rtnetlink_rcv_msg+0x208/0x1180 [ 342.624786][T14981] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 342.630296][T14981] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 342.636301][T14981] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 342.642671][T14981] ? __local_bh_enable_ip+0x168/0x200 [ 342.648068][T14981] ? lockdep_hardirqs_on+0x99/0x150 [ 342.653299][T14981] ? __local_bh_enable_ip+0x168/0x200 [ 342.658708][T14981] ? dev_hard_start_xmit+0x773/0x7e0 [ 342.664022][T14981] ? __dev_queue_xmit+0x2d2/0x3d30 [ 342.669266][T14981] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 342.675017][T14981] ? __dev_queue_xmit+0x2d2/0x3d30 [ 342.680159][T14981] ? __dev_queue_xmit+0x16c9/0x3d30 [ 342.685394][T14981] ? __dev_queue_xmit+0x2d2/0x3d30 [ 342.690541][T14981] ? ref_tracker_free+0x643/0x7e0 [ 342.695597][T14981] netlink_rcv_skb+0x1e3/0x430 [ 342.700478][T14981] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 342.705968][T14981] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 342.711299][T14981] ? netlink_deliver_tap+0x2e/0x1b0 [ 342.716531][T14981] netlink_unicast+0x7ea/0x980 [ 342.721330][T14981] ? __pfx_netlink_unicast+0x10/0x10 [ 342.726814][T14981] ? __virt_addr_valid+0x183/0x520 [ 342.731972][T14981] ? __check_object_size+0x49c/0x900 [ 342.737302][T14981] ? bpf_lsm_netlink_send+0x9/0x10 [ 342.742452][T14981] netlink_sendmsg+0x8db/0xcb0 [ 342.747260][T14981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.752573][T14981] ? __import_iovec+0x536/0x820 [ 342.757444][T14981] ? aa_sock_msg_perm+0x91/0x160 [ 342.762403][T14981] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 342.767709][T14981] ? security_socket_sendmsg+0x87/0xb0 [ 342.773193][T14981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.778502][T14981] __sock_sendmsg+0x221/0x270 [ 342.783210][T14981] ____sys_sendmsg+0x525/0x7d0 [ 342.788010][T14981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.793334][T14981] __sys_sendmsg+0x2b0/0x3a0 [ 342.797949][T14981] ? __pfx___sys_sendmsg+0x10/0x10 [ 342.803080][T14981] ? vfs_write+0x7c4/0xc90 [ 342.807579][T14981] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 342.813934][T14981] ? do_syscall_64+0x100/0x230 [ 342.818732][T14981] ? do_syscall_64+0xb6/0x230 [ 342.823439][T14981] do_syscall_64+0xf3/0x230 [ 342.827976][T14981] ? clear_bhb_loop+0x35/0x90 [ 342.832705][T14981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.838630][T14981] RIP: 0033:0x7fd9d9b75bd9 [ 342.843066][T14981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.862869][T14981] RSP: 002b:00007fd9da9e2048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.871321][T14981] RAX: ffffffffffffffda RBX: 00007fd9d9d03f60 RCX: 00007fd9d9b75bd9 [ 342.879319][T14981] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 000000000000000b [ 342.887312][T14981] RBP: 00007fd9da9e20a0 R08: 0000000000000000 R09: 0000000000000000 [ 342.895307][T14981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.903299][T14981] R13: 000000000000000b R14: 00007fd9d9d03f60 R15: 00007fff5dc287b8 [ 342.911313][T14981] [ 343.163145][T14991] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.005004][T15042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.565173][T15060] xt_CT: You must specify a L4 protocol and not use inversions on it [ 344.797098][T15078] __nla_validate_parse: 16 callbacks suppressed [ 344.797118][T15078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3029'. [ 344.882487][T15084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3029'. [ 345.173374][T15099] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3033'. [ 345.301021][T15100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 345.603528][T15114] FAULT_INJECTION: forcing a failure. [ 345.603528][T15114] name failslab, interval 1, probability 0, space 0, times 0 [ 345.657546][T15114] CPU: 0 PID: 15114 Comm: syz.0.3040 Not tainted 6.10.0-rc5-syzkaller-00197-g8eb301bd7b0f #0 [ 345.667749][T15114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 345.677798][T15114] Call Trace: [ 345.681067][T15114] [ 345.683985][T15114] dump_stack_lvl+0x241/0x360 [ 345.688666][T15114] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.693860][T15114] ? __pfx__printk+0x10/0x10 [ 345.698450][T15114] should_fail_ex+0x3b0/0x4e0 [ 345.703123][T15114] ? __alloc_skb+0x1c3/0x440 [ 345.707710][T15114] should_failslab+0x9/0x20 [ 345.712217][T15114] kmem_cache_alloc_node_noprof+0x71/0x320 [ 345.718023][T15114] __alloc_skb+0x1c3/0x440 [ 345.722435][T15114] ? __pfx___alloc_skb+0x10/0x10 [ 345.727367][T15114] __pskb_copy_fclone+0xb7/0x11d0 [ 345.732393][T15114] tipc_clone_to_loopback+0xf7/0x4a0 [ 345.737853][T15114] tipc_node_xmit+0xde1/0x1010 [ 345.742617][T15114] ? __pfx_validate_chain+0x10/0x10 [ 345.747828][T15114] ? __pfx_tipc_node_xmit+0x10/0x10 [ 345.753044][T15114] ? look_up_lock_class+0x77/0x160 [ 345.758185][T15114] tipc_node_distr_xmit+0x30d/0x450 [ 345.763386][T15114] ? __pfx_tipc_node_distr_xmit+0x10/0x10 [ 345.769106][T15114] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 345.775079][T15114] tipc_sk_backlog_rcv+0x1a2/0x230 [ 345.780187][T15114] ? __pfx_tipc_sk_backlog_rcv+0x10/0x10 [ 345.785817][T15114] ? do_raw_spin_unlock+0x13c/0x8b0 [ 345.791044][T15114] ? __pfx_tipc_sk_backlog_rcv+0x10/0x10 [ 345.796667][T15114] __release_sock+0x243/0x350 [ 345.801351][T15114] release_sock+0x61/0x1f0 [ 345.805757][T15114] tipc_send_group_bcast+0x45a/0xbd0 [ 345.811076][T15114] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 345.816912][T15114] ? __pfx_woken_wake_function+0x10/0x10 [ 345.822572][T15114] __tipc_sendmsg+0x24c7/0x35f0 [ 345.827438][T15114] ? __pfx___tipc_sendmsg+0x10/0x10 [ 345.832628][T15114] ? validate_chain+0x11e/0x5900 [ 345.837567][T15114] ? __pfx_lock_acquire+0x10/0x10 [ 345.842580][T15114] ? __pfx_validate_chain+0x10/0x10 [ 345.847791][T15114] ? aa_label_sk_perm+0x4f0/0x6d0 [ 345.852826][T15114] ? mark_lock+0x9a/0x350 [ 345.857150][T15114] ? __lock_acquire+0x1346/0x1fd0 [ 345.862174][T15114] ? mark_lock+0x9a/0x350 [ 345.866520][T15114] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 345.872508][T15114] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 345.878857][T15114] ? __local_bh_enable_ip+0x168/0x200 [ 345.884233][T15114] ? tipc_sendmsg+0x47/0x70 [ 345.888731][T15114] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 345.894438][T15114] ? do_raw_spin_unlock+0x13c/0x8b0 [ 345.899636][T15114] ? __pfx_tipc_sendmsg+0x10/0x10 [ 345.904648][T15114] tipc_sendmsg+0x55/0x70 [ 345.908975][T15114] __sock_sendmsg+0x221/0x270 [ 345.913648][T15114] ____sys_sendmsg+0x525/0x7d0 [ 345.918448][T15114] ? __pfx_____sys_sendmsg+0x10/0x10 [ 345.923732][T15114] ? rcu_read_lock_any_held+0xb7/0x160 [ 345.929201][T15114] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 345.935110][T15114] __sys_sendmsg+0x2b0/0x3a0 [ 345.939723][T15114] ? __pfx___sys_sendmsg+0x10/0x10 [ 345.944866][T15114] ? vfs_write+0x7c4/0xc90 [ 345.949308][T15114] ? do_sys_openat2+0x17a/0x1d0 [ 345.954185][T15114] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 345.960510][T15114] ? do_syscall_64+0x100/0x230 [ 345.965276][T15114] ? do_syscall_64+0xb6/0x230 [ 345.969952][T15114] do_syscall_64+0xf3/0x230 [ 345.974452][T15114] ? clear_bhb_loop+0x35/0x90 [ 345.979120][T15114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.985020][T15114] RIP: 0033:0x7f5a3ef75bd9 [ 345.989427][T15114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.009023][T15114] RSP: 002b:00007f5a3fc98048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.017435][T15114] RAX: ffffffffffffffda RBX: 00007f5a3f103f60 RCX: 00007f5a3ef75bd9 [ 346.025395][T15114] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000008 [ 346.033353][T15114] RBP: 00007f5a3fc980a0 R08: 0000000000000000 R09: 0000000000000000 [ 346.041317][T15114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 346.049374][T15114] R13: 000000000000000b R14: 00007f5a3f103f60 R15: 00007ffcf24aca58 [ 346.057346][T15114] [ 347.308612][T15167] netlink: 'syz.3.3056': attribute type 1 has an invalid length. [ 347.767336][T15195] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3064'. [ 347.958822][T15209] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 348.072804][T15216] FAULT_INJECTION: forcing a failure. [ 348.072804][T15216] name failslab, interval 1, probability 0, space 0, times 0 [ 348.138744][T15216] CPU: 0 PID: 15216 Comm: syz.2.3070 Not tainted 6.10.0-rc5-syzkaller-00197-g8eb301bd7b0f #0 [ 348.148951][T15216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 348.159118][T15216] Call Trace: [ 348.162419][T15216] [ 348.165364][T15216] dump_stack_lvl+0x241/0x360 [ 348.170076][T15216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.175303][T15216] ? __pfx__printk+0x10/0x10 [ 348.179926][T15216] ? __pfx___might_resched+0x10/0x10 [ 348.185238][T15216] ? __kasan_kmalloc+0x98/0xb0 [ 348.190024][T15216] ? __genradix_ptr_alloc+0x196/0x460 [ 348.195422][T15216] should_fail_ex+0x3b0/0x4e0 [ 348.200127][T15216] ? sctp_auth_asoc_copy_shkeys+0x13b/0x580 [ 348.206043][T15216] should_failslab+0x9/0x20 [ 348.210575][T15216] kmalloc_trace_noprof+0x6c/0x2c0 [ 348.215717][T15216] sctp_auth_asoc_copy_shkeys+0x13b/0x580 [ 348.221471][T15216] sctp_association_new+0x15aa/0x23f0 [ 348.226880][T15216] sctp_connect_new_asoc+0x2d8/0x6c0 [ 348.232196][T15216] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 348.238027][T15216] ? sctp_sendmsg+0xbb9/0x3520 [ 348.242838][T15216] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 348.248412][T15216] ? security_sctp_bind_connect+0x90/0xb0 [ 348.254169][T15216] sctp_sendmsg+0x219a/0x3520 [ 348.258880][T15216] ? __pfx_sctp_sendmsg+0x10/0x10 [ 348.263921][T15216] ? __pfx_aa_sk_perm+0x10/0x10 [ 348.268783][T15216] ? inet_sendmsg+0x330/0x390 [ 348.273454][T15216] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 348.278725][T15216] ? security_socket_sendmsg+0x87/0xb0 [ 348.284172][T15216] __sock_sendmsg+0x1a6/0x270 [ 348.288845][T15216] ____sys_sendmsg+0x525/0x7d0 [ 348.293607][T15216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.298901][T15216] __sys_sendmsg+0x2b0/0x3a0 [ 348.303487][T15216] ? __pfx___sys_sendmsg+0x10/0x10 [ 348.308587][T15216] ? vfs_write+0x7c4/0xc90 [ 348.313024][T15216] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 348.319345][T15216] ? do_syscall_64+0x100/0x230 [ 348.324104][T15216] ? do_syscall_64+0xb6/0x230 [ 348.328797][T15216] do_syscall_64+0xf3/0x230 [ 348.333294][T15216] ? clear_bhb_loop+0x35/0x90 [ 348.337961][T15216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.343847][T15216] RIP: 0033:0x7f1ee5375bd9 [ 348.348262][T15216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.367857][T15216] RSP: 002b:00007f1ee60e9048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.376263][T15216] RAX: ffffffffffffffda RBX: 00007f1ee5503f60 RCX: 00007f1ee5375bd9 [ 348.384221][T15216] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 348.392175][T15216] RBP: 00007f1ee60e90a0 R08: 0000000000000000 R09: 0000000000000000 [ 348.400137][T15216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.408099][T15216] R13: 000000000000000b R14: 00007f1ee5503f60 R15: 00007ffe24e2d8b8 [ 348.416072][T15216] [ 348.478130][T15228] FAULT_INJECTION: forcing a failure. [ 348.478130][T15228] name failslab, interval 1, probability 0, space 0, times 0 [ 348.562852][T15228] CPU: 1 PID: 15228 Comm: syz.4.3075 Not tainted 6.10.0-rc5-syzkaller-00197-g8eb301bd7b0f #0 [ 348.573056][T15228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 348.583163][T15228] Call Trace: [ 348.586459][T15228] [ 348.589393][T15228] dump_stack_lvl+0x241/0x360 [ 348.594097][T15228] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.599318][T15228] ? __pfx__printk+0x10/0x10 [ 348.603937][T15228] ? __lock_acquire+0x1346/0x1fd0 [ 348.608983][T15228] should_fail_ex+0x3b0/0x4e0 [ 348.613682][T15228] ? __alloc_skb+0x1c3/0x440 [ 348.618300][T15228] should_failslab+0x9/0x20 [ 348.622836][T15228] kmem_cache_alloc_node_noprof+0x71/0x320 [ 348.628788][T15228] __alloc_skb+0x1c3/0x440 [ 348.633234][T15228] ? __pfx___alloc_skb+0x10/0x10 [ 348.638198][T15228] ? __mutex_trylock_common+0x183/0x2e0 [ 348.643770][T15228] netlink_dump+0x233/0xe50 [ 348.648308][T15228] ? rcu_is_watching+0x15/0xb0 [ 348.653102][T15228] ? trace_contention_end+0x3c/0x120 [ 348.658420][T15228] ? __pfx_netlink_dump+0x10/0x10 [ 348.663490][T15228] ? __pfx_lock_acquire+0x10/0x10 [ 348.668550][T15228] __netlink_dump_start+0x59d/0x780 [ 348.673791][T15228] rtnetlink_rcv_msg+0xda2/0x1180 [ 348.678858][T15228] ? __pfx_rtnl_dump_all+0x10/0x10 [ 348.683987][T15228] ? rtnetlink_rcv_msg+0x208/0x1180 [ 348.689212][T15228] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 348.694694][T15228] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 348.700717][T15228] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 348.707067][T15228] ? __local_bh_enable_ip+0x168/0x200 [ 348.712468][T15228] ? lockdep_hardirqs_on+0x99/0x150 [ 348.717691][T15228] ? __local_bh_enable_ip+0x168/0x200 [ 348.723083][T15228] ? dev_hard_start_xmit+0x773/0x7e0 [ 348.728385][T15228] ? __dev_queue_xmit+0x2d2/0x3d30 [ 348.733518][T15228] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 348.739261][T15228] ? __dev_queue_xmit+0x2d2/0x3d30 [ 348.744393][T15228] ? __dev_queue_xmit+0x16c9/0x3d30 [ 348.749630][T15228] ? __dev_queue_xmit+0x2d2/0x3d30 [ 348.754799][T15228] ? __pfx_rtnl_dump_all+0x10/0x10 [ 348.759947][T15228] ? ref_tracker_free+0x643/0x7e0 [ 348.765019][T15228] netlink_rcv_skb+0x1e3/0x430 [ 348.769809][T15228] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 348.775279][T15228] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 348.780587][T15228] ? netlink_deliver_tap+0x2e/0x1b0 [ 348.785786][T15228] netlink_unicast+0x7ea/0x980 [ 348.790556][T15228] ? __pfx_netlink_unicast+0x10/0x10 [ 348.795921][T15228] ? __virt_addr_valid+0x183/0x520 [ 348.801030][T15228] ? __check_object_size+0x49c/0x900 [ 348.806319][T15228] ? bpf_lsm_netlink_send+0x9/0x10 [ 348.811457][T15228] netlink_sendmsg+0x8db/0xcb0 [ 348.816401][T15228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.821727][T15228] ? aa_sock_msg_perm+0x91/0x160 [ 348.826679][T15228] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 348.831963][T15228] ? security_socket_sendmsg+0x87/0xb0 [ 348.837420][T15228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.842702][T15228] __sock_sendmsg+0x221/0x270 [ 348.847381][T15228] sock_write_iter+0x2dd/0x400 [ 348.852142][T15228] ? __pfx_sock_write_iter+0x10/0x10 [ 348.857430][T15228] ? bpf_lsm_file_permission+0x9/0x10 [ 348.862796][T15228] ? security_file_permission+0x7f/0xa0 [ 348.868343][T15228] vfs_write+0xa72/0xc90 [ 348.872583][T15228] ? __pfx_sock_write_iter+0x10/0x10 [ 348.877863][T15228] ? __pfx_vfs_write+0x10/0x10 [ 348.882745][T15228] ksys_write+0x1a0/0x2c0 [ 348.887097][T15228] ? __pfx_ksys_write+0x10/0x10 [ 348.891953][T15228] ? do_syscall_64+0x100/0x230 [ 348.896726][T15228] ? do_syscall_64+0xb6/0x230 [ 348.901397][T15228] do_syscall_64+0xf3/0x230 [ 348.905895][T15228] ? clear_bhb_loop+0x35/0x90 [ 348.910567][T15228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.916459][T15228] RIP: 0033:0x7fd9d9b75bd9 [ 348.920868][T15228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.940465][T15228] RSP: 002b:00007fd9da9e2048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 348.948874][T15228] RAX: ffffffffffffffda RBX: 00007fd9d9d03f60 RCX: 00007fd9d9b75bd9 [ 348.956847][T15228] RDX: 0000000000000024 RSI: 0000000020000000 RDI: 0000000000000003 [ 348.964809][T15228] RBP: 00007fd9da9e20a0 R08: 0000000000000000 R09: 0000000000000000 [ 348.972768][T15228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.980726][T15228] R13: 000000000000000b R14: 00007fd9d9d03f60 R15: 00007fff5dc287b8 [ 348.988699][T15228] [ 349.206934][T15248] FAULT_INJECTION: forcing a failure. [ 349.206934][T15248] name failslab, interval 1, probability 0, space 0, times 0 [ 349.246337][T15248] CPU: 0 PID: 15248 Comm: syz.4.3080 Not tainted 6.10.0-rc5-syzkaller-00197-g8eb301bd7b0f #0 [ 349.256545][T15248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 349.266797][T15248] Call Trace: [ 349.270102][T15248] [ 349.273052][T15248] dump_stack_lvl+0x241/0x360 [ 349.277762][T15248] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.282990][T15248] ? __pfx__printk+0x10/0x10 [ 349.287613][T15248] ? __pfx___might_resched+0x10/0x10 [ 349.292944][T15248] should_fail_ex+0x3b0/0x4e0 [ 349.297649][T15248] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 349.303918][T15248] should_failslab+0x9/0x20 [ 349.308449][T15248] __kmalloc_noprof+0xd8/0x400 [ 349.313245][T15248] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 349.319341][T15248] genl_rcv_msg+0x802/0xec0 [ 349.323871][T15248] ? mark_lock+0x9a/0x350 [ 349.328260][T15248] ? __pfx_genl_rcv_msg+0x10/0x10 [ 349.333420][T15248] ? __pfx_lock_acquire+0x10/0x10 [ 349.338507][T15248] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 349.344093][T15248] ? __pfx___might_resched+0x10/0x10 [ 349.349421][T15248] netlink_rcv_skb+0x1e3/0x430 [ 349.354222][T15248] ? __pfx_genl_rcv_msg+0x10/0x10 [ 349.359279][T15248] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 349.364629][T15248] genl_rcv+0x28/0x40 [ 349.368643][T15248] netlink_unicast+0x7ea/0x980 [ 349.373455][T15248] ? __pfx_netlink_unicast+0x10/0x10 [ 349.378772][T15248] ? __virt_addr_valid+0x183/0x520 [ 349.383917][T15248] ? __check_object_size+0x49c/0x900 [ 349.389236][T15248] ? bpf_lsm_netlink_send+0x9/0x10 [ 349.394383][T15248] netlink_sendmsg+0x8db/0xcb0 [ 349.399195][T15248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.404515][T15248] ? __import_iovec+0x536/0x820 [ 349.409389][T15248] ? aa_sock_msg_perm+0x91/0x160 [ 349.414354][T15248] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 349.419656][T15248] ? security_socket_sendmsg+0x87/0xb0 [ 349.425154][T15248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.430476][T15248] __sock_sendmsg+0x221/0x270 [ 349.435198][T15248] ____sys_sendmsg+0x525/0x7d0 [ 349.440002][T15248] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.445331][T15248] __sys_sendmsg+0x2b0/0x3a0 [ 349.449949][T15248] ? __pfx___sys_sendmsg+0x10/0x10 [ 349.455094][T15248] ? vfs_write+0x7c4/0xc90 [ 349.459586][T15248] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 349.465939][T15248] ? do_syscall_64+0x100/0x230 [ 349.470731][T15248] ? do_syscall_64+0xb6/0x230 [ 349.475440][T15248] do_syscall_64+0xf3/0x230 [ 349.479976][T15248] ? clear_bhb_loop+0x35/0x90 [ 349.484687][T15248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.490611][T15248] RIP: 0033:0x7fd9d9b75bd9 [ 349.495050][T15248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.514695][T15248] RSP: 002b:00007fd9da9e2048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.523140][T15248] RAX: ffffffffffffffda RBX: 00007fd9d9d03f60 RCX: 00007fd9d9b75bd9 [ 349.531137][T15248] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 349.539134][T15248] RBP: 00007fd9da9e20a0 R08: 0000000000000000 R09: 0000000000000000 [ 349.547139][T15248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.555146][T15248] R13: 000000000000000b R14: 00007fd9d9d03f60 R15: 00007fff5dc287b8 [ 349.563164][T15248] [ 349.902218][T15274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3090'. [ 350.076368][T15279] ipvlan1: entered allmulticast mode [ 350.081723][T15279] veth0_vlan: entered allmulticast mode [ 350.104292][T15281] FAULT_INJECTION: forcing a failure. [ 350.104292][T15281] name failslab, interval 1, probability 0, space 0, times 0 [ 350.145597][T15281] CPU: 1 PID: 15281 Comm: syz.0.3094 Not tainted 6.10.0-rc5-syzkaller-00197-g8eb301bd7b0f #0 [ 350.155815][T15281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 350.165911][T15281] Call Trace: [ 350.169210][T15281] [ 350.172156][T15281] dump_stack_lvl+0x241/0x360 [ 350.176893][T15281] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.182121][T15281] ? __pfx__printk+0x10/0x10 [ 350.186736][T15281] ? dev_prep_valid_name+0x916/0xa40 [ 350.192056][T15281] should_fail_ex+0x3b0/0x4e0 [ 350.196768][T15281] ? register_netdevice+0x4e2/0x19e0 [ 350.202078][T15281] should_failslab+0x9/0x20 [ 350.206604][T15281] kmalloc_trace_noprof+0x6c/0x2c0 [ 350.211750][T15281] register_netdevice+0x4e2/0x19e0 [ 350.216901][T15281] ? __pfx_register_netdevice+0x10/0x10 [ 350.222474][T15281] ? __kasan_kmalloc+0x98/0xb0 [ 350.227260][T15281] ? register_vlan_dev+0x342/0x810 [ 350.232402][T15281] register_vlan_dev+0x38c/0x810 [ 350.237369][T15281] vlan_newlink+0x476/0x5c0 [ 350.241904][T15281] ? __pfx_vlan_newlink+0x10/0x10 [ 350.246955][T15281] rtnl_newlink+0x158f/0x20a0 [ 350.251689][T15281] ? __pfx_rtnl_newlink+0x10/0x10 [ 350.256744][T15281] ? do_raw_spin_unlock+0x13c/0x8b0 [ 350.261976][T15281] ? __mutex_lock+0x9a5/0xd70 [ 350.266678][T15281] ? __mutex_lock+0x527/0xd70 [ 350.271402][T15281] ? __pfx_rtnl_newlink+0x10/0x10 [ 350.276452][T15281] rtnetlink_rcv_msg+0x89b/0x1180 [ 350.281505][T15281] ? rtnetlink_rcv_msg+0x208/0x1180 [ 350.286730][T15281] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 350.292217][T15281] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 350.298220][T15281] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 350.304580][T15281] ? __local_bh_enable_ip+0x168/0x200 [ 350.309977][T15281] ? lockdep_hardirqs_on+0x99/0x150 [ 350.315209][T15281] ? __local_bh_enable_ip+0x168/0x200 [ 350.320610][T15281] ? dev_hard_start_xmit+0x773/0x7e0 [ 350.325924][T15281] ? __dev_queue_xmit+0x2d2/0x3d30 [ 350.331057][T15281] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 350.336803][T15281] ? __dev_queue_xmit+0x2d2/0x3d30 [ 350.341951][T15281] ? __dev_queue_xmit+0x16c9/0x3d30 [ 350.347199][T15281] ? __dev_queue_xmit+0x2d2/0x3d30 [ 350.352352][T15281] ? ref_tracker_free+0x643/0x7e0 [ 350.357410][T15281] netlink_rcv_skb+0x1e3/0x430 [ 350.362211][T15281] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 350.367707][T15281] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 350.373036][T15281] ? netlink_deliver_tap+0x2e/0x1b0 [ 350.378264][T15281] netlink_unicast+0x7ea/0x980 [ 350.383037][T15281] ? __pfx_netlink_unicast+0x10/0x10 [ 350.388314][T15281] ? __virt_addr_valid+0x183/0x520 [ 350.393430][T15281] ? __check_object_size+0x49c/0x900 [ 350.398711][T15281] ? bpf_lsm_netlink_send+0x9/0x10 [ 350.403819][T15281] netlink_sendmsg+0x8db/0xcb0 [ 350.408604][T15281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.413887][T15281] ? __import_iovec+0x536/0x820 [ 350.418731][T15281] ? aa_sock_msg_perm+0x91/0x160 [ 350.423681][T15281] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 350.428953][T15281] ? security_socket_sendmsg+0x87/0xb0 [ 350.434407][T15281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.439703][T15281] __sock_sendmsg+0x221/0x270 [ 350.444384][T15281] ____sys_sendmsg+0x525/0x7d0 [ 350.449155][T15281] ? __pfx_____sys_sendmsg+0x10/0x10 [ 350.454435][T15281] ? rcu_read_lock_any_held+0xb7/0x160 [ 350.459889][T15281] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 350.465782][T15281] __sys_sendmsg+0x2b0/0x3a0 [ 350.470367][T15281] ? __pfx___sys_sendmsg+0x10/0x10 [ 350.475469][T15281] ? vfs_write+0x7c4/0xc90 [ 350.479889][T15281] ? do_sys_openat2+0x17a/0x1d0 [ 350.484758][T15281] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 350.491074][T15281] ? do_syscall_64+0x100/0x230 [ 350.495835][T15281] ? do_syscall_64+0xb6/0x230 [ 350.500508][T15281] do_syscall_64+0xf3/0x230 [ 350.505009][T15281] ? clear_bhb_loop+0x35/0x90 [ 350.509675][T15281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.515560][T15281] RIP: 0033:0x7f5a3ef75bd9 [ 350.519981][T15281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.539583][T15281] RSP: 002b:00007f5a3fc98048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.547996][T15281] RAX: ffffffffffffffda RBX: 00007f5a3f103f60 RCX: 00007f5a3ef75bd9 [ 350.555956][T15281] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000010 [ 350.563916][T15281] RBP: 00007f5a3fc980a0 R08: 0000000000000000 R09: 0000000000000000 [ 350.571881][T15281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 350.579838][T15281] R13: 000000000000000b R14: 00007f5a3f103f60 R15: 00007ffcf24aca58 [ 350.587812][T15281] [ 350.676596][T15300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3096'. [ 350.896373][T15317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3100'. [ 350.935184][T15317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.973093][T15317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.240200][T15336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3107'. [ 351.704314][T15365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3113'. [ 351.785726][T15365] 8021q: adding VLAN 0 to HW filter on device team1 [ 351.797966][T15365] bond0: (slave team1): Enslaving as an active interface with an up link [ 352.032050][T15383] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3120'. [ 352.070748][T15383] netlink: 'syz.2.3120': attribute type 1 has an invalid length. [ 352.082705][T15383] netlink: 'syz.2.3120': attribute type 2 has an invalid length. [ 352.094039][T15390] netlink: 'syz.1.3121': attribute type 4 has an invalid length. [ 352.133861][T15383] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3120'. [ 352.293194][T15395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3124'. [ 352.324466][T15395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.354059][T15395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.824962][T15410] netlink: 'syz.4.3127': attribute type 10 has an invalid length. [ 352.833205][T15410] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3127'. [ 352.849448][T15410] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 352.857104][T15410] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 352.875713][T15410] team0: Port device virt_wifi0 added [ 352.881904][T15411] netlink: 'syz.4.3127': attribute type 10 has an invalid length. [ 352.897191][T15411] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3127'. [ 352.934952][T15413] FAULT_INJECTION: forcing a failure. [ 352.934952][T15413] name failslab, interval 1, probability 0, space 0, times 0 [ 352.953467][T15413] CPU: 1 PID: 15413 Comm: syz.3.3128 Not tainted 6.10.0-rc5-syzkaller-00197-g8eb301bd7b0f #0 [ 352.963675][T15413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 352.973752][T15413] Call Trace: [ 352.977050][T15413] [ 352.979988][T15413] dump_stack_lvl+0x241/0x360 [ 352.984687][T15413] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.989901][T15413] ? __pfx__printk+0x10/0x10 [ 352.994516][T15413] should_fail_ex+0x3b0/0x4e0 [ 352.999225][T15413] ? tcf_action_init_1+0x1d6/0x890 [ 353.004359][T15413] should_failslab+0x9/0x20 [ 353.008876][T15413] kmalloc_trace_noprof+0x6c/0x2c0 [ 353.014002][T15413] tcf_action_init_1+0x1d6/0x890 [ 353.018946][T15413] ? nla_strscpy+0x100/0x180 [ 353.023556][T15413] ? __pfx_tcf_action_init_1+0x10/0x10 [ 353.029026][T15413] ? _raw_read_unlock+0x28/0x50 [ 353.033879][T15413] ? tc_action_load_ops+0x26d/0x590 [ 353.039106][T15413] ? __nla_parse+0x40/0x60 [ 353.043634][T15413] tcf_action_init+0x2e4/0x940 [ 353.048444][T15413] ? __pfx_tcf_action_init+0x10/0x10 [ 353.053820][T15413] ? apparmor_capable+0x138/0x1b0 [ 353.058889][T15413] tc_ctl_action+0x47d/0xcf0 [ 353.063517][T15413] ? __kernel_text_address+0xd/0x40 [ 353.064739][T15418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.068732][T15413] ? __pfx_tc_ctl_action+0x10/0x10 [ 353.068791][T15413] ? trace_contention_end+0x3c/0x120 [ 353.068814][T15413] ? __mutex_lock+0x2ef/0xd70 [ 353.068845][T15413] ? __pfx___mutex_lock+0x10/0x10 [ 353.068877][T15413] ? __pfx_tc_ctl_action+0x10/0x10 [ 353.103770][T15413] rtnetlink_rcv_msg+0x89b/0x1180 [ 353.108829][T15413] ? rtnetlink_rcv_msg+0x208/0x1180 [ 353.114055][T15413] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 353.119549][T15413] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 353.125599][T15413] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 353.131964][T15413] ? __local_bh_enable_ip+0x168/0x200 [ 353.137368][T15413] ? lockdep_hardirqs_on+0x99/0x150 [ 353.142611][T15413] ? __local_bh_enable_ip+0x168/0x200 [ 353.148004][T15413] ? dev_hard_start_xmit+0x773/0x7e0 [ 353.153320][T15413] ? __dev_queue_xmit+0x2d2/0x3d30 [ 353.158467][T15413] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 353.164218][T15413] ? __dev_queue_xmit+0x2d2/0x3d30 [ 353.169341][T15413] ? __dev_queue_xmit+0x16c9/0x3d30 [ 353.174540][T15413] ? __dev_queue_xmit+0x2d2/0x3d30 [ 353.179671][T15413] ? ref_tracker_free+0x643/0x7e0 [ 353.184712][T15413] netlink_rcv_skb+0x1e3/0x430 [ 353.189482][T15413] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 353.194950][T15413] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 353.200261][T15413] ? netlink_deliver_tap+0x2e/0x1b0 [ 353.205468][T15413] netlink_unicast+0x7ea/0x980 [ 353.210224][T15413] ? __pfx_netlink_unicast+0x10/0x10 [ 353.215501][T15413] ? __virt_addr_valid+0x183/0x520 [ 353.220627][T15413] ? __check_object_size+0x49c/0x900 [ 353.225908][T15413] ? bpf_lsm_netlink_send+0x9/0x10 [ 353.231015][T15413] netlink_sendmsg+0x8db/0xcb0 [ 353.235783][T15413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.241077][T15413] ? __import_iovec+0x536/0x820 [ 353.245939][T15413] ? aa_sock_msg_perm+0x91/0x160 [ 353.250875][T15413] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 353.256160][T15413] ? security_socket_sendmsg+0x87/0xb0 [ 353.261641][T15413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.266955][T15413] __sock_sendmsg+0x221/0x270 [ 353.271666][T15413] ____sys_sendmsg+0x525/0x7d0 [ 353.276459][T15413] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.281758][T15413] __sys_sendmsg+0x2b0/0x3a0 [ 353.286351][T15413] ? __pfx___sys_sendmsg+0x10/0x10 [ 353.291467][T15413] ? vfs_write+0x7c4/0xc90 [ 353.295909][T15413] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 353.302225][T15413] ? do_syscall_64+0x100/0x230 [ 353.306991][T15413] ? do_syscall_64+0xb6/0x230 [ 353.311801][T15413] do_syscall_64+0xf3/0x230 [ 353.316324][T15413] ? clear_bhb_loop+0x35/0x90 [ 353.321192][T15413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.327110][T15413] RIP: 0033:0x7f73d1d75bd9 [ 353.331533][T15413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.351240][T15413] RSP: 002b:00007f73d2ab1048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.359673][T15413] RAX: ffffffffffffffda RBX: 00007f73d1f03f60 RCX: 00007f73d1d75bd9 [ 353.367650][T15413] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 353.375638][T15413] RBP: 00007f73d2ab10a0 R08: 0000000000000000 R09: 0000000000000000 [ 353.383632][T15413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.391609][T15413] R13: 000000000000000b R14: 00007f73d1f03f60 R15: 00007ffdbc6e6c18 [ 353.399580][T15413] [ 353.532664][T15429] FAULT_INJECTION: forcing a failure. [ 353.532664][T15429] name failslab, interval 1, probability 0, space 0, times 0 [ 353.546746][T15429] CPU: 1 PID: 15429 Comm: syz.4.3134 Not tainted 6.10.0-rc5-syzkaller-00197-g8eb301bd7b0f #0 [ 353.556938][T15429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 353.567029][T15429] Call Trace: [ 353.570331][T15429] [ 353.573284][T15429] dump_stack_lvl+0x241/0x360 [ 353.577995][T15429] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.583230][T15429] ? __pfx__printk+0x10/0x10 [ 353.587851][T15429] ? __pfx___might_resched+0x10/0x10 [ 353.593169][T15429] should_fail_ex+0x3b0/0x4e0 [ 353.597881][T15429] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 353.604144][T15429] should_failslab+0x9/0x20 [ 353.608671][T15429] __kmalloc_noprof+0xd8/0x400 [ 353.613465][T15429] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 353.619565][T15429] genl_rcv_msg+0x802/0xec0 [ 353.624094][T15429] ? mark_lock+0x9a/0x350 [ 353.628466][T15429] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.633541][T15429] ? __pfx_lock_acquire+0x10/0x10 [ 353.638592][T15429] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 353.644179][T15429] ? __pfx___might_resched+0x10/0x10 [ 353.649516][T15429] netlink_rcv_skb+0x1e3/0x430 [ 353.654415][T15429] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.659475][T15429] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 353.664848][T15429] genl_rcv+0x28/0x40 [ 353.668859][T15429] netlink_unicast+0x7ea/0x980 [ 353.673680][T15429] ? __pfx_netlink_unicast+0x10/0x10 [ 353.678989][T15429] ? __virt_addr_valid+0x183/0x520 [ 353.684134][T15429] ? __check_object_size+0x49c/0x900 [ 353.689451][T15429] ? bpf_lsm_netlink_send+0x9/0x10 [ 353.694594][T15429] netlink_sendmsg+0x8db/0xcb0 [ 353.699404][T15429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.704719][T15429] ? __import_iovec+0x536/0x820 [ 353.709594][T15429] ? aa_sock_msg_perm+0x91/0x160 [ 353.714562][T15429] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 353.719872][T15429] ? security_socket_sendmsg+0x87/0xb0 [ 353.725386][T15429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.730703][T15429] __sock_sendmsg+0x221/0x270 [ 353.735428][T15429] ____sys_sendmsg+0x525/0x7d0 [ 353.740249][T15429] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.745609][T15429] __sys_sendmsg+0x2b0/0x3a0 [ 353.750229][T15429] ? __pfx___sys_sendmsg+0x10/0x10 [ 353.755357][T15429] ? vfs_write+0x7c4/0xc90 [ 353.759811][T15429] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 353.766148][T15429] ? do_syscall_64+0x100/0x230 [ 353.770965][T15429] ? do_syscall_64+0xb6/0x230 [ 353.775657][T15429] do_syscall_64+0xf3/0x230 [ 353.780189][T15429] ? clear_bhb_loop+0x35/0x90 [ 353.784862][T15429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.790761][T15429] RIP: 0033:0x7fd9d9b75bd9 [ 353.795175][T15429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.814774][T15429] RSP: 002b:00007fd9da9e2048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.823273][T15429] RAX: ffffffffffffffda RBX: 00007fd9d9d03f60 RCX: 00007fd9d9b75bd9 [ 353.831340][T15429] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 353.839308][T15429] RBP: 00007fd9da9e20a0 R08: 0000000000000000 R09: 0000000000000000 [ 353.847276][T15429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.855238][T15429] R13: 000000000000000b R14: 00007fd9d9d03f60 R15: 00007fff5dc287b8 [ 353.863614][T15429] [ 354.008497][T15442] netlink: 'syz.0.3135': attribute type 1 has an invalid length. [ 354.244972][T15451] bond1: (slave gretap1): making interface the new active one [ 354.286803][T15451] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 354.504990][T15465] FAULT_INJECTION: forcing a failure. [ 354.504990][T15465] name failslab, interval 1, probability 0, space 0, times 0 [ 354.520351][T15465] CPU: 1 PID: 15465 Comm: syz.2.3143 Not tainted 6.10.0-rc5-syzkaller-00197-g8eb301bd7b0f #0 [ 354.530562][T15465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 354.540639][T15465] Call Trace: [ 354.543942][T15465] [ 354.546885][T15465] dump_stack_lvl+0x241/0x360 [ 354.551622][T15465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.556847][T15465] ? __pfx__printk+0x10/0x10 [ 354.561455][T15465] ? sctp_get_port_local+0xe13/0x1740 [ 354.566825][T15465] ? __pfx_lock_release+0x10/0x10 [ 354.571844][T15465] should_fail_ex+0x3b0/0x4e0 [ 354.576522][T15465] ? sctp_add_bind_addr+0x89/0x3a0 [ 354.581627][T15465] should_failslab+0x9/0x20 [ 354.586122][T15465] kmalloc_trace_noprof+0x6c/0x2c0 [ 354.591234][T15465] ? __pfx_sctp_get_port_local+0x10/0x10 [ 354.596859][T15465] sctp_add_bind_addr+0x89/0x3a0 [ 354.601786][T15465] ? sctp_v6_available+0x76/0x3e0 [ 354.606807][T15465] sctp_do_bind+0x5d2/0x950 [ 354.611305][T15465] sctp_connect_new_asoc+0x277/0x6c0 [ 354.616589][T15465] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 354.622396][T15465] ? sctp_sendmsg+0xbb9/0x3520 [ 354.627166][T15465] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 354.632704][T15465] ? security_sctp_bind_connect+0x90/0xb0 [ 354.638417][T15465] sctp_sendmsg+0x219a/0x3520 [ 354.644254][T15465] ? __pfx_sctp_sendmsg+0x10/0x10 [ 354.649821][T15465] ? __pfx_aa_sk_perm+0x10/0x10 [ 354.654687][T15465] ? inet_sendmsg+0x330/0x390 [ 354.659363][T15465] __sock_sendmsg+0x1a6/0x270 [ 354.664130][T15465] ____sys_sendmsg+0x525/0x7d0 [ 354.668892][T15465] ? __pfx_____sys_sendmsg+0x10/0x10 [ 354.674185][T15465] __sys_sendmmsg+0x3b2/0x740 [ 354.678865][T15465] ? __pfx___sys_sendmmsg+0x10/0x10 [ 354.684083][T15465] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 354.690001][T15465] ? ksys_write+0x23e/0x2c0 [ 354.694505][T15465] ? __pfx_lock_release+0x10/0x10 [ 354.699530][T15465] ? vfs_write+0x7c4/0xc90 [ 354.703945][T15465] ? __mutex_unlock_slowpath+0x21d/0x750 [ 354.709590][T15465] ? __pfx_vfs_write+0x10/0x10 [ 354.714377][T15465] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 354.720367][T15465] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 354.726700][T15465] ? do_syscall_64+0x100/0x230 [ 354.731467][T15465] __x64_sys_sendmmsg+0xa0/0xb0 [ 354.736318][T15465] do_syscall_64+0xf3/0x230 [ 354.740818][T15465] ? clear_bhb_loop+0x35/0x90 [ 354.745490][T15465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.751448][T15465] RIP: 0033:0x7f1ee5375bd9 [ 354.755888][T15465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.775510][T15465] RSP: 002b:00007f1ee60e9048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 354.783931][T15465] RAX: ffffffffffffffda RBX: 00007f1ee5503f60 RCX: 00007f1ee5375bd9 [ 354.791909][T15465] RDX: 0000000000000001 RSI: 00000000200007c0 RDI: 0000000000000003 [ 354.799875][T15465] RBP: 00007f1ee60e90a0 R08: 0000000000000000 R09: 0000000000000000 [ 354.807875][T15465] R10: 0000000000000041 R11: 0000000000000246 R12: 0000000000000001 [ 354.815860][T15465] R13: 000000000000000b R14: 00007f1ee5503f60 R15: 00007ffe24e2d8b8 [ 354.823846][T15465] [ 354.863530][ T1106] ------------[ cut here ]------------ [ 354.869863][ T1106] WARNING: CPU: 1 PID: 1106 at net/wireless/sme.c:846 __cfg80211_connect_result+0x19ea/0x21d0 [ 354.880373][ T1106] Modules linked in: [ 354.884291][ T1106] CPU: 1 PID: 1106 Comm: kworker/u8:7 Not tainted 6.10.0-rc5-syzkaller-00197-g8eb301bd7b0f #0 [ 354.894689][ T1106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 354.904868][ T1106] Workqueue: cfg80211 cfg80211_event_work [ 354.911216][ T1106] RIP: 0010:__cfg80211_connect_result+0x19ea/0x21d0 [ 354.918595][ T1106] Code: a3 00 89 c3 31 ff 89 c6 e8 d3 06 b4 f6 85 db 74 29 e8 4a 32 9a f6 84 c0 74 27 e8 81 02 b4 f6 e9 84 00 00 00 e8 77 02 b4 f6 90 <0f> 0b 90 4c 89 ff 4c 89 f6 e8 68 23 00 00 eb 91 e8 61 02 b4 f6 eb [ 354.938646][ T1106] RSP: 0018:ffffc90004ab79e0 EFLAGS: 00010293 [ 354.944760][ T1106] RAX: ffffffff8ae224f9 RBX: 0000000000000000 RCX: ffff88802268bc00 [ 354.953592][ T1106] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 354.962234][ T1106] RBP: ffffc90004ab7b00 R08: ffffffff8ae220c9 R09: 1ffffffff25f50bd [ 354.970361][ T1106] R10: dffffc0000000000 R11: fffffbfff25f50be R12: ffff88802cd1d898 [ 354.978623][ T1106] R13: dffffc0000000000 R14: ffff88802cd1d818 R15: ffff8880498ff000 [ 354.986752][ T1106] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 354.988874][T15471] netlink: 'syz.2.3145': attribute type 5 has an invalid length. [ 354.995690][ T1106] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.010251][ T1106] CR2: 00007fbc74c5425c CR3: 00000000774c2000 CR4: 00000000003506f0 [ 355.018351][ T1106] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 355.026440][ T1106] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 355.034526][ T1106] Call Trace: [ 355.037884][ T1106] [ 355.040840][ T1106] ? __warn+0x163/0x4e0 [ 355.045026][ T1106] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 355.051619][ T1106] ? report_bug+0x2b3/0x500 [ 355.056700][ T1106] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 355.062726][ T1106] ? handle_bug+0x3e/0x70 [ 355.067480][ T1106] ? exc_invalid_op+0x1a/0x50 [ 355.072181][ T1106] ? asm_exc_invalid_op+0x1a/0x20 [ 355.077295][ T1106] ? __cfg80211_connect_result+0x15b9/0x21d0 [ 355.080964][T15472] netlink: 'syz.2.3145': attribute type 1 has an invalid length. [ 355.083282][ T1106] ? __cfg80211_connect_result+0x19e9/0x21d0 [ 355.083315][ T1106] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 355.100347][T15472] __nla_validate_parse: 1 callbacks suppressed [ 355.100363][T15472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3145'. [ 355.103184][ T1106] ? __pfx___cfg80211_connect_result+0x10/0x10 [ 355.124479][ T1106] ? lockdep_hardirqs_on+0x99/0x150 [ 355.129811][ T1106] cfg80211_process_wdev_events+0x356/0x510 [ 355.135743][ T1106] cfg80211_process_rdev_events+0xac/0x110 [ 355.141649][ T1106] ? process_scheduled_works+0x945/0x1830 [ 355.147450][ T1106] cfg80211_event_work+0x2f/0x40 [ 355.152416][ T1106] process_scheduled_works+0xa2c/0x1830 [ 355.158598][ T1106] ? __pfx_process_scheduled_works+0x10/0x10 [ 355.164627][ T1106] ? assign_work+0x364/0x3d0 [ 355.169801][ T1106] worker_thread+0x86d/0xd50 [ 355.174444][ T1106] ? __kthread_parkme+0x169/0x1d0 [ 355.179763][ T1106] ? __pfx_worker_thread+0x10/0x10 [ 355.184904][ T1106] kthread+0x2f0/0x390 [ 355.189081][ T1106] ? __pfx_worker_thread+0x10/0x10 [ 355.194221][ T1106] ? __pfx_kthread+0x10/0x10 [ 355.198894][ T1106] ret_from_fork+0x4b/0x80 [ 355.203332][ T1106] ? __pfx_kthread+0x10/0x10 [ 355.207979][ T1106] ret_from_fork_asm+0x1a/0x30 [ 355.212785][ T1106] [ 355.215820][ T1106] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 355.223113][ T1106] CPU: 1 PID: 1106 Comm: kworker/u8:7 Not tainted 6.10.0-rc5-syzkaller-00197-g8eb301bd7b0f #0 [ 355.233375][ T1106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 355.243457][ T1106] Workqueue: cfg80211 cfg80211_event_work [ 355.249218][ T1106] Call Trace: [ 355.252519][ T1106] [ 355.255458][ T1106] dump_stack_lvl+0x241/0x360 [ 355.260174][ T1106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.265833][ T1106] ? __pfx__printk+0x10/0x10 [ 355.270458][ T1106] ? vscnprintf+0x5d/0x90 [ 355.274809][ T1106] panic+0x349/0x860 [ 355.278724][ T1106] ? __warn+0x172/0x4e0 [ 355.282878][ T1106] ? __pfx_panic+0x10/0x10 [ 355.287298][ T1106] ? ret_from_fork_asm+0x1a/0x30 [ 355.292235][ T1106] __warn+0x346/0x4e0 [ 355.296214][ T1106] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 355.302191][ T1106] report_bug+0x2b3/0x500 [ 355.306520][ T1106] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 355.312497][ T1106] handle_bug+0x3e/0x70 [ 355.316640][ T1106] exc_invalid_op+0x1a/0x50 [ 355.321131][ T1106] asm_exc_invalid_op+0x1a/0x20 [ 355.325981][ T1106] RIP: 0010:__cfg80211_connect_result+0x19ea/0x21d0 [ 355.332561][ T1106] Code: a3 00 89 c3 31 ff 89 c6 e8 d3 06 b4 f6 85 db 74 29 e8 4a 32 9a f6 84 c0 74 27 e8 81 02 b4 f6 e9 84 00 00 00 e8 77 02 b4 f6 90 <0f> 0b 90 4c 89 ff 4c 89 f6 e8 68 23 00 00 eb 91 e8 61 02 b4 f6 eb [ 355.352181][ T1106] RSP: 0018:ffffc90004ab79e0 EFLAGS: 00010293 [ 355.358258][ T1106] RAX: ffffffff8ae224f9 RBX: 0000000000000000 RCX: ffff88802268bc00 [ 355.366233][ T1106] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 355.374225][ T1106] RBP: ffffc90004ab7b00 R08: ffffffff8ae220c9 R09: 1ffffffff25f50bd [ 355.382191][ T1106] R10: dffffc0000000000 R11: fffffbfff25f50be R12: ffff88802cd1d898 [ 355.390152][ T1106] R13: dffffc0000000000 R14: ffff88802cd1d818 R15: ffff8880498ff000 [ 355.398122][ T1106] ? __cfg80211_connect_result+0x15b9/0x21d0 [ 355.404142][ T1106] ? __cfg80211_connect_result+0x19e9/0x21d0 [ 355.410130][ T1106] ? __pfx___cfg80211_connect_result+0x10/0x10 [ 355.416283][ T1106] ? lockdep_hardirqs_on+0x99/0x150 [ 355.421481][ T1106] cfg80211_process_wdev_events+0x356/0x510 [ 355.427375][ T1106] cfg80211_process_rdev_events+0xac/0x110 [ 355.433179][ T1106] ? process_scheduled_works+0x945/0x1830 [ 355.438904][ T1106] cfg80211_event_work+0x2f/0x40 [ 355.443875][ T1106] process_scheduled_works+0xa2c/0x1830 [ 355.449460][ T1106] ? __pfx_process_scheduled_works+0x10/0x10 [ 355.455451][ T1106] ? assign_work+0x364/0x3d0 [ 355.460040][ T1106] worker_thread+0x86d/0xd50 [ 355.464642][ T1106] ? __kthread_parkme+0x169/0x1d0 [ 355.469666][ T1106] ? __pfx_worker_thread+0x10/0x10 [ 355.474774][ T1106] kthread+0x2f0/0x390 [ 355.478837][ T1106] ? __pfx_worker_thread+0x10/0x10 [ 355.483936][ T1106] ? __pfx_kthread+0x10/0x10 [ 355.488519][ T1106] ret_from_fork+0x4b/0x80 [ 355.492933][ T1106] ? __pfx_kthread+0x10/0x10 [ 355.497515][ T1106] ret_from_fork_asm+0x1a/0x30 [ 355.502282][ T1106] [ 355.505514][ T1106] Kernel Offset: disabled [ 355.509909][ T1106] Rebooting in 86400 seconds..