last executing test programs: 3.518133509s ago: executing program 1 (id=8765): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x5a0, 0x0, 0xffffff80, 0x178, 0xd0040000, 0x178, 0x4d0, 0x22b, 0x258, 0x4d0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x368, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {0x0, 0x0, 0x1}, {0x0, 0x40}, {}, {0x0, 0x7, 0x8}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x4}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870, 0x0, 0x0, 0x7c}, {}, {}, {}, {0x2, 0xfe}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x3, 0x10}, {}, {}, {0xfffe, 0x7, 0x4}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {0x8, 0x8, 0x0, 0xfffffffc}, {}, {0x0, 0xfc, 0xe4}, {0x0, 0x0, 0xff}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x4, 0x8a}, {}, {}, {}, {0x0, 0x4}]}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1c, 0x7, 0x279, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x170}}}}, {{@ipv6={@private2, @empty, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xffffff00], 'vlan1\x00', 'pim6reg1\x00', {}, {0xff}, 0x0, 0x9, 0x1, 0x12}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) 3.337884072s ago: executing program 1 (id=8768): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) socket$key(0xf, 0x3, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) close(0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) sendmsg$nl_route(r0, &(0x7f00000195c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000019580)={&(0x7f00000002c0)=@ipv6_deladdrlabel={0x2c, 0x49, 0x100, 0x70bd25, 0x5, {0xa, 0x0, 0x18, 0x0, 0x0, 0x2}, [@IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_LABEL={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x4) sendmsg$alg(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8983, &(0x7f0000000180)={0x6, 'pimreg1\x00', {0x1ff}, 0x3}) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet6_buf(r2, 0x29, 0x2a, &(0x7f00000005c0)="411a211887569f887e5dd032f8d5952f03c76f49e46e127047a352e4f68c2417f0c0879ace1299145a6ba0574b61251f4631207c2e8e542d9fa7b69400096964ae6ed074e8105274d0d9c83bc3fcbbaf0a05c646a9fd0ec09dca33f336224cefcd7241277f8650184ae0805fa6dcb4e8639373082f2cfbb1696caa17b1bed06d5d672b7e1c7a599dab6f371d0aa6583eeb0c07716cbbb259da6a429ce008cf412d720603cca46a7556a6eacacd094223ae5c580f7a8cf1b8aa2a584d2dc84f69f5f09086c402399ec5c17ac38d72a24d7500a4e1d6236747278bae379ae1d21445c64b9f76f2bc2e2ddc", 0xea) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r5, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}], 0x1, 0x4000000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000100), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffff1cfe, 0x1c}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40000d0}, 0x24004804) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x15, 0x2, [@TCA_PIE_ECN={0x8}, @TCA_PIE_ECN={0x0, 0x6, 0x1}]}}]}, 0x40}}, 0x0) 3.171942677s ago: executing program 1 (id=8770): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=@delsa={0x64, 0x11, 0x100, 0x70bd27, 0x25dfdbfb, {@in=@multicast1, 0x4d4, 0xa, 0xff}, [@XFRMA_SET_MARK={0x8, 0x1d, 0xe4}, @proto={0x5, 0x19, 0xff}, @user_kmaddress={0x2c, 0x13, {@in6=@mcast1, @in=@private=0xa010101, 0x0, 0xa}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x841) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000400000000000000000000030000000003000000020000000000000000000000000000010500000008000000020000000000000c0000000000002e"], 0x0, 0x50}, 0x28) r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x0) syz_emit_ethernet(0xfffffe9b, &(0x7f00000005c0)={@local, @broadcast, @void, {@llc_tr={0x11, {@llc={0xfe, 0xa, "3ccf", "d56f0e829bc74f9b7181685c4069124ace5855d8c4e1a269a2d7892f77273a572ad6c078b7a1d6b96ca8d14574533cf67da1f119c52b1125c16fef5e134a17b7c137d375a5ccae81d5d83320a39b6c584908a06930c69f654d4e4344a4418d78220929284e32db1f06a60460f8f3578254e0c3aa46f4eafa429a2788c8b0d178d1d4968626f535d205ecf8f4d3c898df267c499e63876c194081da7077bfec4d063094bf9f01bdeb15c0828852ea54f19b02"}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000040c900000000000000000000626f6e64000000001c0002800800050000000000050001000600000005001d0005000000"], 0x4c}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 2.912296522s ago: executing program 1 (id=8776): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x10}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum64={0x4, 0x0, 0x0, 0x13, 0x0, 0x4}]}, {0x0, [0x61, 0x2e, 0x3e, 0x61]}}, 0x0, 0x2a, 0x0, 0x8, 0x1}, 0x28) 2.907741228s ago: executing program 2 (id=8777): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000000000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, &(0x7f0000000680), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @private1, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x3, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000540)={'veth1_to_hsr\x00', {0x2, 0x4e21, @multicast1}}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x80, r3, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1000, 0x23}}}}, [@NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x81}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x434}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x644}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2b5}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x12}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4040004}, 0x24044804) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e23, @multicast1}}, [0x4, 0x8, 0xe, 0x7, 0x80000000, 0x1, 0x3, 0x8, 0x4, 0xfff, 0x1, 0xf431, 0x5, 0x9, 0x20f]}, &(0x7f0000000180)=0x100) select(0x40, &(0x7f0000000880)={0x8, 0x16, 0x5, 0x7, 0x800000000008001, 0x3ff, 0x0, 0x6}, &(0x7f0000000580)={0x5, 0x7, 0x6, 0x2, 0xe3, 0x0, 0x0, 0xfffffffffffffffb}, &(0x7f0000000600)={0x5, 0x8, 0x401, 0x4000000000000004, 0x2, 0xf6, 0x4, 0x6}, &(0x7f0000000640)={0x77359400}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x4004880}, 0x4004000) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r8, 0x13, 0x1, 0xffff8001, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0]}, 0x40) 2.822710764s ago: executing program 3 (id=8779): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0xd8, 0x8, 0xfa04, 0xd8, 0x6c02, 0x1d8, 0x194, 0x194, 0x1d8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x32}, 0x0, 0x98, 0xd8, 0x0, {0x0, 0x74020000}, [@inet=@rpfilter={{0x28}, {0xd}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7d, 0x4, "744e0c8559c5a9128a6df634790dc3271e33969086733af137c08495d02d"}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x40, 0xc20, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x1, 0x10, [0x18, 0x2f, 0x22, 0x8, 0x1d, 0x18, 0x15, 0x2e, 0x29, 0x32, 0xe, 0x2, 0x1a, 0x31, 0x39, 0x3f], 0x0, 0x8e, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) (async) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000901ff80000000fe03000100000000", 0x1c) 2.799858694s ago: executing program 1 (id=8780): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001ec0)={0x78, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x50, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x24, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x78}, 0x1, 0x0, 0x300, 0x44001}, 0x4c020) 2.734103113s ago: executing program 2 (id=8781): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) (async) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000001000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$kcm(0x28, 0x1, 0x0) (async) r2 = socket$kcm(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3c, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040)=0x1ffffd, 0x4) 2.690481993s ago: executing program 3 (id=8782): r0 = socket$kcm(0x29, 0x5, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001f40)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, 0x0}}], 0x5, 0x8040) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0x8, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000480)={r0, r0, 0xffff, 0x29, &(0x7f0000000180)="ed1f0d498a5a9c6bf67d1438df4a8677074354e74b8fe3a48f0a77a286d3eb5e605eab984509e96adc", 0x2, 0x0, 0x7, 0x7, 0x9, 0x7, 0xffffffff, 'syz1\x00'}) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8073}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @empty}}, {{0xa, 0x0, 0xa4ffffff, @private2}}}, 0x108) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="40020000", @ANYRES16=r5, @ANYBLOB="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", @ANYBLOB='!'], 0x240}}, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f00000000c0)={0x2000}) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="120000000700000004000000feffffff00000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000003fc88c62ddeb1692ba17f7c390bd364b5a67fbdbd48db0c623714e8f03f95dad029e6e9cd7a54590bdfed7400b45aaf688918f6e0f95431f"], 0x50) getsockopt$llc_int(r8, 0x10c, 0x3, &(0x7f0000001b00), &(0x7f0000000000)=0x4) setsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f0000000100)="dc", 0x1) setsockopt$inet_opts(r7, 0x0, 0xc, &(0x7f00000000c0)="e0", 0x1) getsockopt$inet_opts(r7, 0x0, 0x400000000000009, &(0x7f0000000140)=""/19, &(0x7f0000000080)=0x13) 2.690179964s ago: executing program 1 (id=8783): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000080000000c0000000bffffffe9f1cf7f510000000000000700000000002e6130615f61005f00"], 0x0, 0x2e, 0x0, 0x1, 0x40003}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x48046}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000020303000000000000000011000000100800010001"], 0x1c}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x19, 0x101, 0x70bd28, 0x25dfdbfb, {0x2, 0x20, 0x80, 0x8, 0xfe, 0x0, 0xfd, 0x2, 0x100}, [@RTA_TABLE={0x8, 0xf, 0x2fe}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="20ffff00"], 0x20}, 0x1, 0x0, 0x0, 0x20008015}, 0x4040) poll(&(0x7f0000000180)=[{r4, 0x84}], 0x1, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYRESHEX=r7, @ANYRES32=r7, @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40008e4) 2.138764432s ago: executing program 4 (id=8785): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000020100b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.945769849s ago: executing program 0 (id=8786): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff", 0xd}], 0x1}], 0x1, 0x40800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}], 0x1, 0x40800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xcd750a53e8aca53f}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x14c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xfffffffffffffffa}, {0xc, 0x90, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x6602}, {0xc, 0x90, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x80000001}, {0xc, 0x90, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x6b}, {0xc, 0x90, 0x8}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x805}, 0x80) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r4, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 1.834580691s ago: executing program 4 (id=8787): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x28, 0x0, 0x7, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040080}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYRES16=r2], 0x28}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x8}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c80)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36513001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e455fe2bb24ef66970746c7f1f2a5c4c3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000d00)=""/301, 0x12d}, {&(0x7f0000002a40)=""/4044, 0xfcc}, {&(0x7f0000000380)=""/175, 0xaf}, {&(0x7f0000000a40)=""/204, 0xcc}, {&(0x7f0000000680)=""/192, 0xc0}, {&(0x7f0000000740)=""/256, 0x100}, {&(0x7f0000000440)=""/168, 0xa8}, {&(0x7f0000000280)=""/202, 0xca}], 0x8}, 0x31c2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) 1.732668183s ago: executing program 2 (id=8788): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) (async, rerun: 32) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000012000501000000000000000028001a000a01010200000000000000000000000000020000000000000000ffffe00000020a0066fa"], 0x38}}, 0x20040810) (async, rerun: 32) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="a38f", 0x2}], 0x1}], 0x1, 0x40800) splice(r3, 0x0, r0, 0x0, 0x9, 0x1200000000000000) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="a72d11a15c068c0a7d2eaebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff3", 0x11a}], 0x1}, 0x240009bd) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async) write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00'], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4008840) socket$netlink(0x10, 0x3, 0xb) 1.538152138s ago: executing program 2 (id=8789): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x2d, 0x2, 0x0, &(0x7f0000000200)) writev(r3, &(0x7f0000010700)=[{&(0x7f00000103c0)="64c2c5f6063ef80abf55c1e01d046bbcd59f73900de2cb79f3edf2065ca41305c785ff641c4b333a7c374edc3101188fb7ae27cb122cc332a500129e33cb8311d94b8203cd4d73349c59b7865dcaa674a190e6bc5e9531cad593d72e871498997f2d9fec334523a4e8608883c57e1fdde89dc407c0cf08a67b2736e8629ad7447eb6212fa11593d672589a2c0c01209e0aecd11bc29111b8fa9ed3cd5415c74f6e0a1a2b25802003bff44767022c5bc67a07e061fd8cfc85b66dd77f2f76b616ad1e4f2ccd19ffb4035c6370175e2353328edeaeb349429976d45a6c64c2140e0e30d7b4be4dd225f389013ed4a8", 0xee}, {&(0x7f00000104c0)="6d96ee34d54e034ae48b2b0cd603c3f22a0308ba7f67996205868db676545390ca934003b54f2df93280a64b1cdf072fe82167034c8328e45790a788516f6a48097a85e887bcae78806eb6f52cd4b9a37929473cc06d35af2a0fff4eeb47815d1aa328a03ba8c93bc44badd712fa13ce3137dc1e52bb5c88775d590e661df2ebddd0f18b4773d8ccf2d3ccd5c5cd3b3bd5db83e809625ffa8505b6aa57ca03ab9832e2b3e06f0e37252cd9c82ebdbd134d2935161a914d2f98cc4ed0fdf52f088937ae2ea55b2b85d7a36544cc835445f87ea4a24a744bdfe7f52072eadb02eb496058a04df921d8bca809c606", 0xed}, {&(0x7f00000105c0)="d9702c53a4710b55afd13789dff2e1b931207233333e336c6db8", 0x1a}, {&(0x7f0000010600)="e5de3a", 0x3}, {&(0x7f0000010640)="98ec154c5a8767daed94caef7e6f2f6f957a81dd229c4ccea3c28e45ede4e47bb9505e1b21e69911ab6fb9bfbbf894181891eb544a28dd29135f66a15d52ebefa60d59f5e6c96208ce3cea90c6fff3aa8854f75cfebbc403cf1ed9ab432311aa679845681efca468b243cfcfb342c245beeacbae497b7eb9fd216be577ea42ec3dbf82ef101acf04ceee5585e962a1eeafac3b08600d2338822e69a44f2d9cff3027150c67eeab8aa36fa25f4df90a88", 0xb0}], 0x5) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000010380)={&(0x7f0000010280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000010340)={&(0x7f00000108c0)={0x88, 0x1, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x40}, [@CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}, @CTA_PROTOINFO={0x60, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0xfffffffffffffda1, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0x0, 0x3, 0x1, 0x0, 0x8}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x1}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_DCCP_STATE={0x0, 0x1, 0x8}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x38}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xfffffffffffffdd5, 0x3, 0x1, 0x0, 0x8000003}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x4}]}}, @CTA_ID={0x0, 0xc, 0x1, 0x0, 0x3}]}, 0x88}, 0x1, 0x0, 0x0, 0x44}, 0x40000) bind$bt_hci(r1, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f00000006c0)="3b000000010006", 0x7) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, &(0x7f0000010200)={&(0x7f00000001c0)={0x10020, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x7, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000010780)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="8a2d8ebd7000000000000105000008000200020000003400048005000300060000000500030006000000050003000500000005540ef4401fc4f410b7d971f56edfd200000700020000000500030007000000050003000100000008000100020000009ea3f085914afeb8d4a9c5914112af06da22060a6d8bb4eef2702b74f96dfb707ed1c431a3a7f8fe13a9ddae1ce1ea33700d7123c9afc7bff2563c3ad9f150d0b29c829c9d82719085d528da86a36ede3f60d5ba815b82532d9901b3672a17375fda302eb29fe441cd8de848d60aea7578cc7baf864edaf3eaf02ce2dc425c91a74cb2e2c8a4b85cb8210a4e4fb38c0476"], 0x58}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) socket$inet(0x2, 0x1, 0xfffffffe) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xe) r7 = socket$packet(0x11, 0x3, 0x300) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000b340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='\x00', @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES8, @ANYRES32], 0x0, 0x50}}], 0x1, 0x4000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000f40000000000000020000018010000202070250000000000202020db1af8ff00000000bfa100000000000017010000f0ffffffb702000008000000b70300000080000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0xdd, &(0x7f0000000440)=""/221, 0x0, 0x40}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r9, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb81002c0008004500003880000000000107007f000001ac1414aa030490781203183f250000000000000000010000ffffffff7f000001a2ca81e0de095a51"], 0x0) 1.487734916s ago: executing program 4 (id=8790): r0 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000140)=0x7, &(0x7f00000001c0)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x18, r4, 0x301, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x880) bind$inet(r1, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r7, 0x0, 0x0, 0xf00) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0x14, 0x1c, 0x100, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x94) connect$netlink(r0, &(0x7f0000000180), 0xc) 1.374492083s ago: executing program 0 (id=8791): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000000000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, &(0x7f0000000680), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @private1, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x3, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000540)={'veth1_to_hsr\x00', {0x2, 0x4e21, @multicast1}}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x80, r3, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1000, 0x23}}}}, [@NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x81}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x434}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x644}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2b5}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x12}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4040004}, 0x24044804) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e23, @multicast1}}, [0x4, 0x8, 0xe, 0x7, 0x80000000, 0x1, 0x3, 0x8, 0x4, 0xfff, 0x1, 0xf431, 0x5, 0x9, 0x20f]}, &(0x7f0000000180)=0x100) select(0x40, &(0x7f0000000880)={0x8, 0x16, 0x5, 0x7, 0x800000000008001, 0x3ff, 0x0, 0x6}, &(0x7f0000000580)={0x5, 0x7, 0x6, 0x2, 0xe3, 0x0, 0x0, 0xfffffffffffffffb}, &(0x7f0000000600)={0x5, 0x8, 0x401, 0x4000000000000004, 0x2, 0xf6, 0x4, 0x6}, &(0x7f0000000640)={0x77359400}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff010000f5ffffffffffffff0000000114000400ff0200000000000000000000400000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da800068004000380080002006401010124000380060001004e230000060001004e230000060001004e21007d250c49004e24000008000200e000000234000315b0c313004e230000060002004e2400000600013a4e200000060002004e200000060002004e230000060001004e200000140004000000000000000000000000000000000008000200ac1414aa140005000000000000000000000000000000ff03000000000000000284000e"], 0x1e8}, 0x1, 0x0, 0x0, 0x4004880}, 0x4004000) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r8, 0x13, 0x1, 0xffff8001, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0]}, 0x40) 1.361582071s ago: executing program 3 (id=8792): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000000980)=[{{&(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000140)="136e701629c564a985f0db1217c3280dade0f1f5f8af0524344b3c01e0", 0x1d}], 0x1}}, {{&(0x7f0000000780)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000007c0)="a6e82f4006baa3c5c1fb8096a9b98e5cde8466bddeaf86deb41001b4f9514c9ebd221059", 0x24}], 0x1}}], 0x2, 0x800) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}}, 0x10) 1.320395895s ago: executing program 2 (id=8793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) syz_genetlink_get_family_id$team(&(0x7f0000000080), r1) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}}, 0x0) 1.146186495s ago: executing program 3 (id=8794): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711239000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xff80}, 0x94) 1.140911952s ago: executing program 4 (id=8795): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000013c0)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000080204e0000", 0x58}], 0x1) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x45, 0x0, 0x4, 0x80000000}, {0x80, 0x3}, {0x0, 0xfd}, {0x4, 0x0, 0xfe, 0x10000000}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x1c, 0x2e, 0x9, 0x70bd27, 0x25dfdbff, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup/syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000002dc0), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000002e00)={[{0x2b, 'memory'}]}, 0x8) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x11) sendto$inet(r5, &(0x7f0000000180)="8b", 0x1, 0x101, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000011c0)={&(0x7f0000000080), 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9c1d459ef242e2c4}, 0x38) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x7c, 0xfffd, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "d482449a"}}}}}}, 0x0) 1.040975803s ago: executing program 0 (id=8796): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x640, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) close(0x3) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000040)=0x2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r5}}, 0x40) (async) syz_open_procfs$namespace(r5, &(0x7f00000006c0)='ns/time_for_children\x00') (async) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c000000250009012cbd7000f9ffffff19000000200052801c0070c0080024800400df800c00ec00b61b0000000000000400de800800030047000000af0eb3b3997052d8de56731df24080f0695f7f966626422773296343e4937ea1b9ddbf02cb110812a614892ce445ac1ae361abb75eabb3cc88fcd3916e8d7f4dee1769b2c6ed1fe1d13735cb1f4fba39b0553c723993717fe2205e18d8eafb051ab9ce089b0d"], 0x3c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$nl_generic(r3, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002000000327bd70005ad60a0ae0e025fefcdbdf25170000000800f280", @ANYRES32=r5, @ANYBLOB], 0x24}}, 0x40004) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0x15}], 0x3}, 0xc854) setsockopt$sock_int(r10, 0x1, 0x22, &(0x7f0000000000)=0x9, 0x38) (async) sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[], 0xc8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000081725c976f55add0334d9fd76b7ae22f69122830f07c56edac0006a6e2dbd0eacfba10f1b54f1c4efec12aa97108e28cd4b0f5ed930c6fc6f7253a6b290bec6ddb4b69cb00000000000000", @ANYRES16=r7, @ANYBLOB="010025bd7000fedbdf25010000000e0001006e65742f6c326361700000000800020005000000"], 0x2c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x24000080) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x2, 0x1}, 0x20) 985.844436ms ago: executing program 2 (id=8797): r0 = socket(0x2b, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000210400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c289060000000000240012800b00010067656e6576650000140002800600050080b805dd9941599e05c28b4e2200000500080001000000"], 0x44}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448e3, &(0x7f0000000100)={0x0, 0x4000, '\x00', 0x2}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x20004800) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000380)=0x7894, 0x4e) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) r6 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0x2}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x805}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000240)={r8, 0x7fff, 0x9, 0x74, 0x100, 0x9, 0x10, 0x2, {r8, @in6={{0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}, 0x800, 0x6, 0x10, 0x1ff, 0x8000}}, &(0x7f00000001c0)=0xb0) 985.56188ms ago: executing program 3 (id=8798): r0 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) unshare(0x22020600) (rerun: 32) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e20, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x30, 0x1, 0x81, 0xfffff028}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) 768.145744ms ago: executing program 3 (id=8799): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000400)=@base={0x6, 0x7, 0xb4, 0x3, 0x0, 0xffffffffffffffff, 0x35, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000013c0)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000080204e0000", 0x58}], 0x1) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f0000000200)={0x0, 0xa00, 0x20}, &(0x7f0000002380)=0x18) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x45, 0x0, 0x4, 0x80000000}, {0x80, 0x3}, {0x0, 0xfd}, {0x4, 0x0, 0xfe, 0x10000000}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x1c, 0x2e, 0x9, 0x70bd27, 0x25dfdbff, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x7d}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup/syz0\x00', 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000002dc0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000002e00)={[{0x2b, 'memory'}]}, 0x8) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x11) sendto$inet(r8, &(0x7f0000000180)="8b", 0x1, 0x101, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000011c0)={&(0x7f0000000080), 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9c1d459ef242e2c4}, 0x38) 629.499545ms ago: executing program 0 (id=8800): socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x7, 'wg2\x00', {0x4}, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000080)=0x40000001) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd03000a000020140000006c07010033d43afffec00000000000000000000000000010ff0200000000000000000000a0ff0001"], 0x340a) 297.843433ms ago: executing program 0 (id=8801): socket(0xa, 0x2, 0x0) (async) r0 = socket(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r2, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2f, r2}) r3 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) (async) connect$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) getsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 157.481138ms ago: executing program 4 (id=8802): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x5a0, 0x0, 0xffffff80, 0x178, 0xd0040000, 0x178, 0x4d0, 0x22b, 0x258, 0x4d0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x368, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {0x0, 0x0, 0x1}, {0x0, 0x40}, {}, {0x0, 0x7, 0x8}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x4}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870, 0x0, 0x0, 0x300}, {}, {}, {}, {0x2, 0xfe}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x3, 0x10}, {}, {}, {0xfffe, 0x7, 0x4}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {0x8, 0x8, 0x0, 0xfffffffc}, {}, {0x0, 0xfc, 0xe4}, {0x0, 0x0, 0xff}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x4, 0x8a}, {}, {}, {}, {0x0, 0x4}]}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1c, 0x7, 0x279, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x170}}}}, {{@ipv6={@private2, @empty, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xffffff00], 'vlan1\x00', 'pim6reg1\x00', {}, {0xff}, 0x0, 0x9, 0x1, 0x12}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) 141.90135ms ago: executing program 0 (id=8803): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000001080)={{0x4, @loopback, 0x2, 0x0, 'wrr\x00', 0x1d, 0x0, 0x61}, {@private=0xa0100ff, 0x2, 0x2000, 0x7ffffff, 0x0, 0x20104}}, 0x44) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040)) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r1, 0x852ac000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000f40)=""/250, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) 0s ago: executing program 4 (id=8804): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40010160, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac004000202080002000600010009000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) setsockopt$sock_int(r1, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) (async) recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40010160, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac004000202080002000600010009000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) kernel console output (not intermixed with test programs): 7': attribute type 4 has an invalid length. [ 976.918281][ T738] tipc: Enabling of bearer rejected, already enabled [ 976.928306][ T740] syzkaller1: entered promiscuous mode [ 976.934272][ T740] syzkaller1: entered allmulticast mode [ 977.780278][ T754] vlan3: entered promiscuous mode [ 978.270304][ T763] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.309461][ T770] netlink: 'syz.3.7699': attribute type 4 has an invalid length. [ 978.326481][ T776] netlink: 'syz.3.7699': attribute type 4 has an invalid length. [ 978.350108][ T782] tipc: Enabling of bearer rejected, already enabled [ 978.442974][ T763] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.649133][ T763] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.808305][ T763] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.066539][ T58] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.126978][ T58] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.169424][T16016] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.201336][ T58] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.242482][ T808] __nla_validate_parse: 7 callbacks suppressed [ 979.242503][ T808] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7707'. [ 979.354935][ T816] tipc: Enabled bearer , priority 0 [ 979.378334][ T818] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7716'. [ 979.380460][ T816] syzkaller0: entered promiscuous mode [ 979.435839][ T816] syzkaller0: entered allmulticast mode [ 979.474520][ T816] tipc: Resetting bearer [ 979.516842][ T815] tipc: Resetting bearer [ 979.615135][ T815] tipc: Disabling bearer [ 979.678650][ T830] veth0: entered promiscuous mode [ 979.696947][ T829] bond0: entered promiscuous mode [ 979.723439][ T829] bond_slave_0: entered promiscuous mode [ 979.971395][ T840] nbd0: detected capacity change from 0 to 63 [ 979.994101][ T838] block nbd0: NBD_DISCONNECT [ 980.057600][ T838] block nbd0: Disconnected due to user request. [ 980.068090][ T844] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7720'. [ 980.077894][ T838] block nbd0: shutting down sockets [ 980.093780][T32166] blk_print_req_error: 136 callbacks suppressed [ 980.093797][T32166] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 980.134128][T32166] buffer_io_error: 138 callbacks suppressed [ 980.134147][T32166] Buffer I/O error on dev nbd0, logical block 3, async page read [ 980.176535][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 980.185714][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 980.194945][ C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 980.204054][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 980.212771][ C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 980.221886][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 980.233480][T32166] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 980.235382][ T846] netlink: 'syz.3.7722': attribute type 1 has an invalid length. [ 980.251469][T32166] Buffer I/O error on dev nbd0, logical block 0, async page read [ 980.251672][T32166] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 980.251699][T32166] Buffer I/O error on dev nbd0, logical block 1, async page read [ 980.251820][T32166] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 980.251861][T32166] Buffer I/O error on dev nbd0, logical block 2, async page read [ 980.251988][T32166] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 980.252013][T32166] Buffer I/O error on dev nbd0, logical block 3, async page read [ 980.252315][T32166] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 980.323601][ T846] netlink: 248 bytes leftover after parsing attributes in process `syz.3.7722'. [ 980.335908][ T848] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.7723'. [ 980.347128][T32166] Buffer I/O error on dev nbd0, logical block 0, async page read [ 980.363505][T32166] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 980.402061][ T827] bond0: left promiscuous mode [ 980.410419][T32166] Buffer I/O error on dev nbd0, logical block 1, async page read [ 980.418930][ T827] bond_slave_0: left promiscuous mode [ 980.419313][ T827] veth0: left promiscuous mode [ 980.461876][T32166] ldm_validate_partition_table(): Disk read failed. [ 980.470542][T32166] Dev nbd0: unable to read RDB block 0 [ 980.533438][T32166] nbd0: unable to read partition table [ 980.569666][ T855] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 980.575451][T32166] ldm_validate_partition_table(): Disk read failed. [ 980.600794][T32166] Dev nbd0: unable to read RDB block 0 [ 980.634160][T32166] nbd0: unable to read partition table [ 980.733687][ T856] xt_TPROXY: Can be used only with -p tcp or -p udp [ 980.752928][ T854] wg1 speed is unknown, defaulting to 1000 [ 980.761628][ T860] tc_dump_action: action bad kind [ 981.174268][ T870] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.349666][ T870] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.504265][ T861] wg1 speed is unknown, defaulting to 1000 [ 981.540494][ T884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7735'. [ 981.686811][ T870] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.879480][ T870] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.457157][T16016] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.730850][T16016] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.947679][ T58] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.970679][ T58] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.385689][ T952] FAULT_INJECTION: forcing a failure. [ 983.385689][ T952] name failslab, interval 1, probability 0, space 0, times 0 [ 983.419301][ T952] CPU: 0 UID: 0 PID: 952 Comm: syz.4.7754 Not tainted syzkaller #0 PREEMPT(full) [ 983.419330][ T952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 983.419342][ T952] Call Trace: [ 983.419354][ T952] [ 983.419363][ T952] dump_stack_lvl+0xe8/0x150 [ 983.419392][ T952] should_fail_ex+0x412/0x560 [ 983.419423][ T952] should_failslab+0xa8/0x100 [ 983.419455][ T952] ? skb_clone+0x212/0x3a0 [ 983.419483][ T952] kmem_cache_alloc_noprof+0x87/0x650 [ 983.419519][ T952] skb_clone+0x212/0x3a0 [ 983.419550][ T952] __netlink_deliver_tap+0x404/0x850 [ 983.419590][ T952] ? netlink_deliver_tap+0x2e/0x1b0 [ 983.419616][ T952] netlink_deliver_tap+0x19c/0x1b0 [ 983.419643][ T952] netlink_sendskb+0x68/0x140 [ 983.419668][ T952] netlink_rcv_skb+0x2b6/0x4b0 [ 983.419694][ T952] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 983.419721][ T952] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 983.419760][ T952] ? netlink_deliver_tap+0x2e/0x1b0 [ 983.419785][ T952] ? netlink_deliver_tap+0x2e/0x1b0 [ 983.419816][ T952] netlink_unicast+0x75c/0x8e0 [ 983.419867][ T952] netlink_sendmsg+0x813/0xb40 [ 983.419903][ T952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 983.419933][ T952] ? aa_sock_msg_perm+0xf1/0x1b0 [ 983.419961][ T952] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 983.419992][ T952] ____sys_sendmsg+0x972/0x9f0 [ 983.420018][ T952] ? __might_fault+0xaf/0x130 [ 983.420052][ T952] ? __pfx_____sys_sendmsg+0x10/0x10 [ 983.420106][ T952] ? import_iovec+0x73/0xa0 [ 983.420140][ T952] ___sys_sendmsg+0x2a5/0x360 [ 983.420166][ T952] ? __lock_acquire+0x6b5/0x2cf0 [ 983.420201][ T952] ? __pfx____sys_sendmsg+0x10/0x10 [ 983.420271][ T952] ? __fget_files+0x2a/0x420 [ 983.420295][ T952] ? __fget_files+0x3a0/0x420 [ 983.420333][ T952] __x64_sys_sendmsg+0x1bd/0x2a0 [ 983.420365][ T952] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 983.420405][ T952] ? __pfx_ksys_write+0x10/0x10 [ 983.420445][ T952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.420469][ T952] do_syscall_64+0x15f/0xf80 [ 983.420494][ T952] ? trace_irq_disable+0x3b/0x140 [ 983.420526][ T952] ? clear_bhb_loop+0x40/0x90 [ 983.420553][ T952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.420574][ T952] RIP: 0033:0x7f253bd9cdd9 [ 983.420594][ T952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 983.420613][ T952] RSP: 002b:00007f253cb8c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 983.420636][ T952] RAX: ffffffffffffffda RBX: 00007f253c015fa0 RCX: 00007f253bd9cdd9 [ 983.420652][ T952] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 983.420666][ T952] RBP: 00007f253cb8c090 R08: 0000000000000000 R09: 0000000000000000 [ 983.420679][ T952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 983.420692][ T952] R13: 00007f253c016038 R14: 00007f253c015fa0 R15: 00007ffe75c8c278 [ 983.420727][ T952] [ 984.123410][ T985] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 984.145445][ T986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 984.158745][ T977] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 984.184741][ T987] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 984.242624][ T991] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7765'. [ 984.251885][ T997] FAULT_INJECTION: forcing a failure. [ 984.251885][ T997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 984.258445][ T997] CPU: 0 UID: 0 PID: 997 Comm: syz.3.7767 Not tainted syzkaller #0 PREEMPT(full) [ 984.258520][ T997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 984.258551][ T997] Call Trace: [ 984.258578][ T997] [ 984.258592][ T997] dump_stack_lvl+0xe8/0x150 [ 984.258669][ T997] should_fail_ex+0x412/0x560 [ 984.258755][ T997] _copy_from_user+0x2d/0xb0 [ 984.258837][ T997] kstrtouint_from_user+0xd6/0x180 [ 984.258909][ T997] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 984.259030][ T997] proc_fail_nth_write+0x8e/0x210 [ 984.259100][ T997] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 984.259186][ T997] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 984.259262][ T997] vfs_write+0x29a/0xb90 [ 984.259360][ T997] ? __pfx_vfs_write+0x10/0x10 [ 984.259450][ T997] ? __fget_files+0x2a/0x420 [ 984.259559][ T997] ? __fget_files+0x3a0/0x420 [ 984.259618][ T997] ? __fget_files+0x2a/0x420 [ 984.259705][ T997] ksys_write+0x150/0x270 [ 984.259822][ T997] ? __pfx_ksys_write+0x10/0x10 [ 984.259921][ T997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.259986][ T997] do_syscall_64+0x15f/0xf80 [ 984.260056][ T997] ? trace_irq_disable+0x3b/0x140 [ 984.260141][ T997] ? clear_bhb_loop+0x40/0x90 [ 984.260188][ T997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.260245][ T997] RIP: 0033:0x7ff37515d60e [ 984.260295][ T997] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 984.260342][ T997] RSP: 002b:00007ff3760a7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 984.260402][ T997] RAX: ffffffffffffffda RBX: 00007ff3760a86c0 RCX: 00007ff37515d60e [ 984.260441][ T997] RDX: 0000000000000001 RSI: 00007ff3760a80a0 RDI: 0000000000000004 [ 984.260472][ T997] RBP: 00007ff3760a8090 R08: 0000000000000000 R09: 0000000000000000 [ 984.260510][ T997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 984.260540][ T997] R13: 00007ff375416038 R14: 00007ff375415fa0 R15: 00007ffc129da748 [ 984.260628][ T997] [ 984.646248][ T1005] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7768'. [ 984.653829][ T1009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7770'. [ 984.743686][ T1005] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7768'. [ 984.808767][ T1012] vlan4: entered allmulticast mode [ 984.825013][ T1012] bridge0: port 5(vlan4) entered blocking state [ 984.842667][ T1012] bridge0: port 5(vlan4) entered disabled state [ 984.858697][ T1012] vlan4: entered promiscuous mode [ 985.132619][ T1035] netlink: 'syz.2.7778': attribute type 4 has an invalid length. [ 985.156238][ T1035] netlink: 'syz.2.7778': attribute type 4 has an invalid length. [ 985.198491][ T1035] tipc: Enabling of bearer rejected, already enabled [ 985.405774][ T1039] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7780'. [ 985.441956][ T1039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7780'. [ 985.473672][ T1039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7780'. [ 985.502177][ T1039] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7780'. [ 985.672870][ T1064] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20004 [ 985.779660][ T1072] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7785'. [ 985.810499][ T1072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7785'. [ 985.835003][ T1072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7785'. [ 986.854768][ T1137] netlink: 'syz.0.7811': attribute type 49 has an invalid length. [ 987.571282][ T1167] syzkaller0: entered promiscuous mode [ 987.590959][ T1167] syzkaller0: entered allmulticast mode [ 987.626447][ T1167] FAULT_INJECTION: forcing a failure. [ 987.626447][ T1167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 987.663123][ T1175] netlink: 'syz.1.7821': attribute type 13 has an invalid length. [ 987.690102][ T1167] CPU: 1 UID: 0 PID: 1167 Comm: syz.4.7823 Not tainted syzkaller #0 PREEMPT(full) [ 987.690132][ T1167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 987.690146][ T1167] Call Trace: [ 987.690155][ T1167] [ 987.690164][ T1167] dump_stack_lvl+0xe8/0x150 [ 987.690194][ T1167] should_fail_ex+0x412/0x560 [ 987.690227][ T1167] _copy_from_iter+0x3b0/0x1670 [ 987.690268][ T1167] ? __pfx__copy_from_iter+0x10/0x10 [ 987.690302][ T1167] ? dev_get_by_index+0x22/0x2e0 [ 987.690333][ T1167] ? dev_get_by_index+0x22/0x2e0 [ 987.690371][ T1167] packet_sendmsg+0x2e19/0x4fb0 [ 987.690394][ T1167] ? __lock_acquire+0x6b5/0x2cf0 [ 987.690445][ T1167] ? unwind_next_frame+0xa6/0x2550 [ 987.690504][ T1167] ? __pfx_packet_sendmsg+0x10/0x10 [ 987.690525][ T1167] ? aa_sk_perm+0x6d5/0x900 [ 987.690559][ T1167] ? __pfx_aa_sk_perm+0x10/0x10 [ 987.690582][ T1167] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 987.690619][ T1167] ? aa_sock_msg_perm+0xf1/0x1b0 [ 987.690649][ T1167] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 987.690682][ T1167] ____sys_sendmsg+0x972/0x9f0 [ 987.690719][ T1167] ? __pfx_____sys_sendmsg+0x10/0x10 [ 987.690757][ T1167] ? import_iovec+0x73/0xa0 [ 987.690790][ T1167] ___sys_sendmsg+0x2a5/0x360 [ 987.690820][ T1167] ? __lock_acquire+0x6b5/0x2cf0 [ 987.690846][ T1167] ? __pfx____sys_sendmsg+0x10/0x10 [ 987.690911][ T1167] ? __fget_files+0x2a/0x420 [ 987.690936][ T1167] ? __fget_files+0x3a0/0x420 [ 987.690972][ T1167] __x64_sys_sendmsg+0x1bd/0x2a0 [ 987.691004][ T1167] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 987.691041][ T1167] ? __pfx_ksys_write+0x10/0x10 [ 987.691081][ T1167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.691105][ T1167] do_syscall_64+0x15f/0xf80 [ 987.691129][ T1167] ? trace_irq_disable+0x3b/0x140 [ 987.691161][ T1167] ? clear_bhb_loop+0x40/0x90 [ 987.691188][ T1167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.691209][ T1167] RIP: 0033:0x7f253bd9cdd9 [ 987.691230][ T1167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.691249][ T1167] RSP: 002b:00007f253cb8c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 987.691272][ T1167] RAX: ffffffffffffffda RBX: 00007f253c015fa0 RCX: 00007f253bd9cdd9 [ 987.691289][ T1167] RDX: 0000000000000005 RSI: 0000200000000000 RDI: 0000000000000008 [ 987.691303][ T1167] RBP: 00007f253cb8c090 R08: 0000000000000000 R09: 0000000000000000 [ 987.691317][ T1167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.691330][ T1167] R13: 00007f253c016038 R14: 00007f253c015fa0 R15: 00007ffe75c8c278 [ 987.691366][ T1167] [ 988.023054][ T1175] netlink: 'syz.1.7821': attribute type 17 has an invalid length. [ 988.433923][ T1171] bridge0: port 4(erspan0) entered disabled state [ 988.872517][ T1171] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.881337][ T1171] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.904696][ T1175] ip6_vti0: left allmulticast mode [ 991.007749][ T1175] bridge0: port 4(erspan0) entered blocking state [ 991.014463][ T1175] bridge0: port 4(erspan0) entered forwarding state [ 991.049313][ T1175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 991.096772][ T1179] Set syz1 is full, maxelem 65536 reached [ 991.140076][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.147351][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 991.160381][ T1175] bridge0: port 5(vlan4) entered blocking state [ 991.166874][ T1175] bridge0: port 5(vlan4) entered forwarding state [ 991.182608][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.189809][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.261785][ T1175] veth1_vlan: left promiscuous mode [ 991.268931][ T1175] veth0_vlan: left promiscuous mode [ 991.276391][ T1175] veth0_vlan: entered promiscuous mode [ 991.298031][ T1175] veth1_vlan: entered promiscuous mode [ 991.312095][ T1175] veth1_macvtap: left promiscuous mode [ 991.319320][ T1175] veth0_macvtap: left promiscuous mode [ 991.327459][ T1175] veth0_macvtap: entered promiscuous mode [ 991.337245][ T1175] veth1_macvtap: entered promiscuous mode [ 991.349188][ T1175] bridge0: port 3(vlan3) entered blocking state [ 991.355691][ T1175] bridge0: port 3(vlan3) entered forwarding state [ 991.389278][ T1175] 8021q: adding VLAN 0 to HW filter on device bond1 [ 991.414553][ T1175] 8021q: adding VLAN 0 to HW filter on device bond2 [ 991.458351][ T1175] 8021q: adding VLAN 0 to HW filter on device eth0 [ 991.477917][ T1175] 8021q: adding VLAN 0 to HW filter on device eth1 [ 991.495635][ T1175] 8021q: adding VLAN 0 to HW filter on device eth2 [ 991.513426][ C1] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 991.528806][ T1175] 8021q: adding VLAN 0 to HW filter on device eth3 [ 991.553036][ T1196] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 991.648846][ T1232] __nla_validate_parse: 7 callbacks suppressed [ 991.648868][ T1232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7833'. [ 991.723416][ C1] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 991.750826][ T1237] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7832'. [ 991.818522][ T1239] netlink: 88 bytes leftover after parsing attributes in process `syz.3.7832'. [ 992.270970][ C1] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 994.460678][ T1256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7838'. [ 994.658755][ T1261] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7840'. [ 994.730906][ T1261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7840'. [ 994.777250][ T1260] wg1 speed is unknown, defaulting to 1000 [ 994.790739][ T1261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7840'. [ 994.833815][ T1261] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7840'. [ 994.909038][ T1281] x_tables: duplicate underflow at hook 1 [ 994.935397][ T1281] syzkaller0: entered promiscuous mode [ 994.951943][ T1281] syzkaller0: entered allmulticast mode [ 994.972219][ T1282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7845'. [ 995.021644][ T1282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7845'. [ 995.109363][ T1286] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 996.608760][ T1345] netlink: ct family unspecified [ 996.620223][ T1345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 996.911709][ T1359] wg1 speed is unknown, defaulting to 1000 [ 996.960265][ T1365] __nla_validate_parse: 11 callbacks suppressed [ 996.960285][ T1365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7871'. [ 997.179079][ T1376] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7876'. [ 997.193021][ T1376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7876'. [ 997.205951][ T1376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7876'. [ 997.218673][ T1376] netlink: 100 bytes leftover after parsing attributes in process `syz.3.7876'. [ 997.372428][ T1379] vlan3: entered promiscuous mode [ 997.756207][ T1394] vlan3: entered promiscuous mode [ 998.179614][ T1386] netlink: 840 bytes leftover after parsing attributes in process `syz.4.7880'. [ 998.319274][ T1411] vlan3: entered promiscuous mode [ 998.347477][ T1409] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7887'. [ 998.586703][ T1418] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7890'. [ 998.600265][ T1418] netlink: 88 bytes leftover after parsing attributes in process `syz.1.7890'. [ 998.774989][ T1425] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7893'. [ 1000.255579][ T1486] bond5: option lacp_active: invalid value (8) [ 1000.315801][ T1486] bond5 (unregistering): Released all slaves [ 1000.768068][ T1514] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1000.814738][ T1520] syzkaller1: entered promiscuous mode [ 1000.831342][ T1520] syzkaller1: entered allmulticast mode [ 1001.088403][ T1536] netlink: 'syz.2.7923': attribute type 1 has an invalid length. [ 1001.238252][ T1536] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1001.958017][ T1577] syzkaller0: entered promiscuous mode [ 1001.963661][ T1577] syzkaller0: entered allmulticast mode [ 1001.978485][ T1577] __nla_validate_parse: 12 callbacks suppressed [ 1001.978505][ T1577] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7940'. [ 1002.003516][ T1577] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20000 [ 1002.018782][ T1585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1002.096762][ T1580] bond5 (unregistering): Released all slaves [ 1002.619645][ T1620] netlink: 'syz.3.7954': attribute type 1 has an invalid length. [ 1002.650230][ T1621] netlink: 'syz.3.7954': attribute type 1 has an invalid length. [ 1002.731843][ T1620] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7954'. [ 1002.741902][ T1621] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7954'. [ 1002.819488][ T1623] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1002.832440][ T1623] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 1002.971792][ T1644] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7955'. [ 1002.983167][ T1620] bond5: (slave bridge5): Enslaving as an active interface with a down link [ 1002.995135][ T1644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7955'. [ 1003.008343][ T1644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7955'. [ 1003.024944][ T1644] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7955'. [ 1003.064146][ T1621] bond5: (slave bridge6): Enslaving as an active interface with a down link [ 1003.105810][ T1646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7960'. [ 1003.115190][ T1646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7960'. [ 1003.126308][ T1646] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7960'. [ 1003.225486][ T1653] IPv6: sit1: Disabled Multicast RS [ 1003.285962][ T1657] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 1003.339231][ T1660] vlan5: entered promiscuous mode [ 1003.557569][ T1670] netlink: 'syz.3.7969': attribute type 4 has an invalid length. [ 1003.566898][ T1670] netlink: 'syz.3.7969': attribute type 4 has an invalid length. [ 1003.580726][ T1670] FAULT_INJECTION: forcing a failure. [ 1003.580726][ T1670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1003.595524][ T1670] CPU: 1 UID: 0 PID: 1670 Comm: syz.3.7969 Not tainted syzkaller #0 PREEMPT(full) [ 1003.595551][ T1670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1003.595565][ T1670] Call Trace: [ 1003.595574][ T1670] [ 1003.595583][ T1670] dump_stack_lvl+0xe8/0x150 [ 1003.595614][ T1670] should_fail_ex+0x412/0x560 [ 1003.595647][ T1670] _copy_from_user+0x2d/0xb0 [ 1003.595679][ T1670] ___sys_sendmsg+0x1c6/0x360 [ 1003.595706][ T1670] ? __lock_acquire+0x6b5/0x2cf0 [ 1003.595735][ T1670] ? __pfx____sys_sendmsg+0x10/0x10 [ 1003.595813][ T1670] ? __fget_files+0x2a/0x420 [ 1003.595837][ T1670] ? __fget_files+0x3a0/0x420 [ 1003.595871][ T1670] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1003.595900][ T1670] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1003.595936][ T1670] ? __pfx_ksys_write+0x10/0x10 [ 1003.595978][ T1670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.596000][ T1670] do_syscall_64+0x15f/0xf80 [ 1003.596024][ T1670] ? trace_irq_disable+0x3b/0x140 [ 1003.596054][ T1670] ? clear_bhb_loop+0x40/0x90 [ 1003.596079][ T1670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.596100][ T1670] RIP: 0033:0x7ff37519cdd9 [ 1003.596118][ T1670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1003.596136][ T1670] RSP: 002b:00007ff3760a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1003.596157][ T1670] RAX: ffffffffffffffda RBX: 00007ff375415fa0 RCX: 00007ff37519cdd9 [ 1003.596173][ T1670] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000b [ 1003.596186][ T1670] RBP: 00007ff3760a8090 R08: 0000000000000000 R09: 0000000000000000 [ 1003.596199][ T1670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1003.596211][ T1670] R13: 00007ff375416038 R14: 00007ff375415fa0 R15: 00007ffc129da748 [ 1003.596244][ T1670] [ 1004.030475][ T1682] syzkaller0: entered promiscuous mode [ 1004.048891][ T1682] syzkaller0: entered allmulticast mode [ 1004.455487][ T1699] bridge0: port 3(erspan0) entered blocking state [ 1004.462134][ T1699] bridge0: port 3(erspan0) entered forwarding state [ 1004.478190][ T1699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1004.495071][ T1699] 8021q: adding VLAN 0 to HW filter on device team0 [ 1004.514058][ T1699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1004.613412][ T1699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1004.630063][ T1699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1004.678113][ T1699] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1004.692625][ T1699] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1004.744782][ T1699] veth1_vlan: left promiscuous mode [ 1004.772857][ T1699] veth0_vlan: left promiscuous mode [ 1004.780272][ T1699] veth0_vlan: entered promiscuous mode [ 1004.798755][ T1699] veth1_vlan: entered promiscuous mode [ 1004.810906][ T1699] veth1_macvtap: left promiscuous mode [ 1004.817987][ T1699] veth0_macvtap: left promiscuous mode [ 1004.824727][ T1699] veth0_macvtap: entered promiscuous mode [ 1004.832025][ T1699] veth1_macvtap: entered promiscuous mode [ 1004.844131][ T1699] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1004.859612][ T1699] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1004.868705][ T1699] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1004.877532][ T1699] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1004.945475][ T1699] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1004.965510][ T1699] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1004.982753][ T1699] mac80211_hwsim hwsim112 wlan1: entered promiscuous mode [ 1004.994479][ T1699] batman_adv: batadv0: Interface activated: macvtap1 [ 1005.015483][ T1699] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1005.044637][ T1699] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1005.046078][T16019] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1005.082217][T16019] bond3: (slave bridge6): link status up again after 0 ms [ 1005.110799][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.118172][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1005.128315][T16019] bond3: (slave bridge6): link status up again after 0 ms [ 1005.153249][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.160874][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1005.174246][T16019] bond3: (slave bridge6): link status up again after 0 ms [ 1005.189137][T16019] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1005.218586][ T79] bridge10: port 2(veth0_to_bond) entered blocking state [ 1005.220774][T16019] bond3: (slave bridge6): link status up again after 0 ms [ 1005.226144][ T79] bridge10: port 2(veth0_to_bond) entered forwarding state [ 1005.261279][ T58] bond3: (slave bridge6): link status up again after 0 ms [ 1005.281869][ T58] bond3: (slave bridge6): link status up again after 0 ms [ 1005.301420][ T79] bridge10: port 1(veth3) entered blocking state [ 1005.307913][ T79] bridge10: port 1(veth3) entered forwarding state [ 1005.314838][ T58] bond3: (slave bridge6): link status up again after 0 ms [ 1005.347091][ T1706] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1005.357322][ T8719] wg1 speed is unknown, defaulting to 1000 [ 1005.363458][ T1719] netlink: 'syz.1.7986': attribute type 4 has an invalid length. [ 1005.372060][ T8719] syz0: Port: 1 Link ACTIVE [ 1005.378570][ T1721] netlink: 'syz.4.7987': attribute type 4 has an invalid length. [ 1005.389017][ T1722] netlink: 'syz.1.7986': attribute type 4 has an invalid length. [ 1005.413253][T31019] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1005.428181][T31019] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.441487][ T1725] netlink: 'syz.4.7987': attribute type 4 has an invalid length. [ 1005.449985][ T1729] tipc: Enabling of bearer rejected, already enabled [ 1005.482480][ T8719] wg1 speed is unknown, defaulting to 1000 [ 1005.482503][T31019] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1005.499904][ T8719] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1005.521437][T31019] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.540169][T31019] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1005.549637][T31019] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.578519][T31019] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1005.611167][T31019] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.647075][ T5809] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1005.687867][ T1751] netlink: 'syz.2.7992': attribute type 4 has an invalid length. [ 1005.762809][ T1749] batman_adv: batadv0: Adding interface: gretap4 [ 1005.779552][ T1749] batman_adv: batadv0: The MTU of interface gretap4 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.808673][ T1749] batman_adv: batadv0: Interface activated: gretap4 [ 1005.975118][ T1769] lo: entered allmulticast mode [ 1006.555976][ T8719] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1008.850947][ T1756] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1008.936665][ T1790] netlink: 'syz.0.8001': attribute type 4 has an invalid length. [ 1008.945490][ T1791] netlink: 'syz.0.8001': attribute type 4 has an invalid length. [ 1009.005064][ T5809] net_ratelimit: 28 callbacks suppressed [ 1009.005083][ T5809] bond3: (slave bridge6): failed to get link speed/duplex [ 1009.038850][ T1796] wg1 speed is unknown, defaulting to 1000 [ 1009.050223][ T178] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1009.096491][ T1803] netlink: 'syz.3.8004': attribute type 21 has an invalid length. [ 1009.124941][ T1803] __nla_validate_parse: 12 callbacks suppressed [ 1009.124979][ T1803] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8004'. [ 1009.172121][ T178] bond3: (slave bridge6): failed to get link speed/duplex [ 1009.198849][ T1803] netlink: 'syz.3.8004': attribute type 5 has an invalid length. [ 1009.224805][ T1803] netlink: 'syz.3.8004': attribute type 6 has an invalid length. [ 1009.251141][ T1803] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8004'. [ 1009.280718][ T1808] netlink: 'syz.2.8007': attribute type 4 has an invalid length. [ 1009.299983][ T1811] netlink: 'syz.2.8007': attribute type 4 has an invalid length. [ 1009.340796][ T1808] tipc: Enabling of bearer rejected, already enabled [ 1009.362265][T31019] bond3: (slave bridge6): failed to get link speed/duplex [ 1009.469166][ T1815] netlink: 240 bytes leftover after parsing attributes in process `syz.2.8010'. [ 1009.511244][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1009.520825][ T178] bond3: (slave bridge6): failed to get link speed/duplex [ 1009.584553][ T1823] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8011'. [ 1009.623365][ T1823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8011'. [ 1009.634375][T31019] bond3: (slave bridge6): failed to get link speed/duplex [ 1009.657457][ T1823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8011'. [ 1009.682594][ T1823] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8011'. [ 1009.697780][ T1834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8014'. [ 1009.870116][ T1838] FAULT_INJECTION: forcing a failure. [ 1009.870116][ T1838] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.892746][ T1838] CPU: 1 UID: 0 PID: 1838 Comm: syz.4.8015 Not tainted syzkaller #0 PREEMPT(full) [ 1009.892774][ T1838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1009.892787][ T1838] Call Trace: [ 1009.892795][ T1838] [ 1009.892804][ T1838] dump_stack_lvl+0xe8/0x150 [ 1009.892832][ T1838] should_fail_ex+0x412/0x560 [ 1009.892864][ T1838] should_failslab+0xa8/0x100 [ 1009.892897][ T1838] __kmalloc_noprof+0xe8/0x760 [ 1009.892926][ T1838] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1009.892969][ T1838] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1009.893000][ T1838] ? tomoyo_domain+0xd7/0x130 [ 1009.893034][ T1838] ? tomoyo_path_number_perm+0x219/0x630 [ 1009.893061][ T1838] tomoyo_path_number_perm+0x246/0x630 [ 1009.893087][ T1838] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1009.893110][ T1838] ? __lock_acquire+0x6b5/0x2cf0 [ 1009.893148][ T1838] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1009.893198][ T1838] ? __fget_files+0x2a/0x420 [ 1009.893224][ T1838] ? __fget_files+0x2a/0x420 [ 1009.893247][ T1838] ? __fget_files+0x3a0/0x420 [ 1009.893269][ T1838] ? __fget_files+0x2a/0x420 [ 1009.893297][ T1838] security_file_ioctl+0xc3/0x2a0 [ 1009.893321][ T1838] __se_sys_ioctl+0x47/0x170 [ 1009.893351][ T1838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.893373][ T1838] do_syscall_64+0x15f/0xf80 [ 1009.893396][ T1838] ? trace_irq_disable+0x3b/0x140 [ 1009.893426][ T1838] ? clear_bhb_loop+0x40/0x90 [ 1009.893451][ T1838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.893471][ T1838] RIP: 0033:0x7f253bd9cdd9 [ 1009.893489][ T1838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1009.893507][ T1838] RSP: 002b:00007f253cb8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1009.893529][ T1838] RAX: ffffffffffffffda RBX: 00007f253c015fa0 RCX: 00007f253bd9cdd9 [ 1009.893544][ T1838] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000003 [ 1009.893557][ T1838] RBP: 00007f253cb8c090 R08: 0000000000000000 R09: 0000000000000000 [ 1009.893569][ T1838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1009.893581][ T1838] R13: 00007f253c016038 R14: 00007f253c015fa0 R15: 00007ffe75c8c278 [ 1009.893614][ T1838] [ 1009.893698][ T1838] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1010.204798][ T79] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1010.237513][ T79] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1010.312147][ T58] bond3: (slave bridge6): failed to get link speed/duplex [ 1010.441613][ T5809] bond3: (slave bridge6): failed to get link speed/duplex [ 1010.570810][ T37] bond3: (slave bridge6): failed to get link speed/duplex [ 1010.761796][ T37] bond3: (slave bridge6): failed to get link speed/duplex [ 1010.901235][ T37] bond3: (slave bridge6): failed to get link speed/duplex [ 1010.952794][ T5875] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1010.988847][ T1884] lo: Caught tx_queue_len zero misconfig [ 1011.238467][ T1904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8034'. [ 1011.253002][ T1904] SET target dimension over the limit! [ 1011.284042][ T1904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8034'. [ 1011.569393][ T1922] syzkaller0: entered promiscuous mode [ 1011.579276][ T1922] syzkaller0: entered allmulticast mode [ 1011.771737][ T1933] tipc: Enabled bearer , priority 0 [ 1011.784661][ T1933] syzkaller0: entered promiscuous mode [ 1011.790888][ T1933] syzkaller0: entered allmulticast mode [ 1011.822063][ T1933] tipc: Resetting bearer [ 1011.834985][ T1930] tipc: Resetting bearer [ 1011.859407][ T1930] tipc: Disabling bearer [ 1012.064989][ T1946] tipc: Enabled bearer , priority 0 [ 1012.077504][ T1946] syzkaller0: entered promiscuous mode [ 1012.085188][ T1946] syzkaller0: entered allmulticast mode [ 1012.180097][ T1946] tipc: Resetting bearer [ 1012.247398][ T1941] tipc: Resetting bearer [ 1012.312971][ T1941] tipc: Disabling bearer [ 1012.737012][ T1972] netlink: 'syz.4.8060': attribute type 4 has an invalid length. [ 1012.776052][ T1972] netlink: 'syz.4.8060': attribute type 4 has an invalid length. [ 1012.799378][ T1972] tipc: Enabling of bearer rejected, already enabled [ 1012.807751][ T1972] FAULT_INJECTION: forcing a failure. [ 1012.807751][ T1972] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.832384][ T1972] CPU: 0 UID: 0 PID: 1972 Comm: syz.4.8060 Not tainted syzkaller #0 PREEMPT(full) [ 1012.832420][ T1972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1012.832434][ T1972] Call Trace: [ 1012.832442][ T1972] [ 1012.832451][ T1972] dump_stack_lvl+0xe8/0x150 [ 1012.832482][ T1972] should_fail_ex+0x412/0x560 [ 1012.832515][ T1972] should_failslab+0xa8/0x100 [ 1012.832550][ T1972] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1012.832581][ T1972] ? __alloc_skb+0x1d0/0x7d0 [ 1012.832608][ T1972] ? __local_bh_enable_ip+0xd0/0x130 [ 1012.832634][ T1972] __alloc_skb+0x1d0/0x7d0 [ 1012.832658][ T1972] ? netlink_ack_tlv_len+0x6c/0x210 [ 1012.832687][ T1972] netlink_ack+0x146/0xa50 [ 1012.832710][ T1972] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1012.832744][ T1972] ? __pfx_ref_tracker_free+0x10/0x10 [ 1012.832785][ T1972] netlink_rcv_skb+0x2b6/0x4b0 [ 1012.832813][ T1972] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1012.832848][ T1972] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1012.832892][ T1972] ? down_read+0x270/0x2e0 [ 1012.832917][ T1972] ? genl_rcv+0xd/0x40 [ 1012.832950][ T1972] genl_rcv+0x28/0x40 [ 1012.832979][ T1972] netlink_unicast+0x75c/0x8e0 [ 1012.833015][ T1972] netlink_sendmsg+0x813/0xb40 [ 1012.833053][ T1972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1012.833085][ T1972] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1012.833133][ T1972] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1012.833167][ T1972] ____sys_sendmsg+0x972/0x9f0 [ 1012.833195][ T1972] ? __might_fault+0xaf/0x130 [ 1012.833232][ T1972] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1012.833272][ T1972] ? import_iovec+0x73/0xa0 [ 1012.833309][ T1972] ___sys_sendmsg+0x2a5/0x360 [ 1012.833336][ T1972] ? __lock_acquire+0x6b5/0x2cf0 [ 1012.833365][ T1972] ? __pfx____sys_sendmsg+0x10/0x10 [ 1012.833442][ T1972] ? __fget_files+0x2a/0x420 [ 1012.833468][ T1972] ? __fget_files+0x3a0/0x420 [ 1012.833504][ T1972] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1012.833537][ T1972] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1012.833577][ T1972] ? __pfx_ksys_write+0x10/0x10 [ 1012.833619][ T1972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.833644][ T1972] do_syscall_64+0x15f/0xf80 [ 1012.833670][ T1972] ? trace_irq_disable+0x3b/0x140 [ 1012.833703][ T1972] ? clear_bhb_loop+0x40/0x90 [ 1012.833731][ T1972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.833753][ T1972] RIP: 0033:0x7f253bd9cdd9 [ 1012.833775][ T1972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1012.833793][ T1972] RSP: 002b:00007f253cb8c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1012.833816][ T1972] RAX: ffffffffffffffda RBX: 00007f253c015fa0 RCX: 00007f253bd9cdd9 [ 1012.833832][ T1972] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000b [ 1012.833846][ T1972] RBP: 00007f253cb8c090 R08: 0000000000000000 R09: 0000000000000000 [ 1012.833860][ T1972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1012.833873][ T1972] R13: 00007f253c016038 R14: 00007f253c015fa0 R15: 00007ffe75c8c278 [ 1012.833910][ T1972] [ 1013.071521][ T1978] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1013.426133][ T79] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1013.435082][ T79] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1013.443868][ T79] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1013.459718][ T79] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1013.967766][ T2011] netlink: 'syz.0.8073': attribute type 1 has an invalid length. [ 1013.991709][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1014.053986][ T5809] net_ratelimit: 22 callbacks suppressed [ 1014.054008][ T5809] bond3: (slave bridge6): failed to get link speed/duplex [ 1014.209893][ T2019] netlink: 'syz.2.8077': attribute type 4 has an invalid length. [ 1014.238080][ T2019] netlink: 'syz.2.8077': attribute type 4 has an invalid length. [ 1014.254909][ T5809] bond3: (slave bridge6): failed to get link speed/duplex [ 1014.282994][ T2019] tipc: Enabling of bearer rejected, already enabled [ 1014.301186][ T2019] FAULT_INJECTION: forcing a failure. [ 1014.301186][ T2019] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.338341][ T2019] CPU: 0 UID: 0 PID: 2019 Comm: syz.2.8077 Not tainted syzkaller #0 PREEMPT(full) [ 1014.338370][ T2019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1014.338384][ T2019] Call Trace: [ 1014.338394][ T2019] [ 1014.338404][ T2019] dump_stack_lvl+0xe8/0x150 [ 1014.338433][ T2019] should_fail_ex+0x412/0x560 [ 1014.338468][ T2019] should_failslab+0xa8/0x100 [ 1014.338500][ T2019] ? skb_clone+0x212/0x3a0 [ 1014.338537][ T2019] kmem_cache_alloc_noprof+0x87/0x650 [ 1014.338576][ T2019] skb_clone+0x212/0x3a0 [ 1014.338609][ T2019] __netlink_deliver_tap+0x404/0x850 [ 1014.338651][ T2019] ? netlink_deliver_tap+0x2e/0x1b0 [ 1014.338680][ T2019] netlink_deliver_tap+0x19c/0x1b0 [ 1014.338709][ T2019] netlink_sendskb+0x68/0x140 [ 1014.338736][ T2019] netlink_rcv_skb+0x2b6/0x4b0 [ 1014.338763][ T2019] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1014.338798][ T2019] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1014.338843][ T2019] ? down_read+0x270/0x2e0 [ 1014.338874][ T2019] ? genl_rcv+0xd/0x40 [ 1014.338908][ T2019] genl_rcv+0x28/0x40 [ 1014.338938][ T2019] netlink_unicast+0x75c/0x8e0 [ 1014.338974][ T2019] netlink_sendmsg+0x813/0xb40 [ 1014.339013][ T2019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1014.339044][ T2019] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1014.339074][ T2019] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1014.339107][ T2019] ____sys_sendmsg+0x972/0x9f0 [ 1014.339136][ T2019] ? __might_fault+0xaf/0x130 [ 1014.339170][ T2019] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1014.339208][ T2019] ? import_iovec+0x73/0xa0 [ 1014.339243][ T2019] ___sys_sendmsg+0x2a5/0x360 [ 1014.339270][ T2019] ? __lock_acquire+0x6b5/0x2cf0 [ 1014.339300][ T2019] ? __pfx____sys_sendmsg+0x10/0x10 [ 1014.339368][ T2019] ? __fget_files+0x2a/0x420 [ 1014.339416][ T2019] ? __fget_files+0x3a0/0x420 [ 1014.339456][ T2019] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1014.339490][ T2019] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1014.339540][ T2019] ? __pfx_ksys_write+0x10/0x10 [ 1014.339582][ T2019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.339605][ T2019] do_syscall_64+0x15f/0xf80 [ 1014.339629][ T2019] ? trace_irq_disable+0x3b/0x140 [ 1014.339662][ T2019] ? clear_bhb_loop+0x40/0x90 [ 1014.339690][ T2019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.339713][ T2019] RIP: 0033:0x7f368139cdd9 [ 1014.339733][ T2019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.339753][ T2019] RSP: 002b:00007f36821c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1014.339788][ T2019] RAX: ffffffffffffffda RBX: 00007f3681615fa0 RCX: 00007f368139cdd9 [ 1014.339804][ T2019] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000b [ 1014.339817][ T2019] RBP: 00007f36821c0090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.339830][ T2019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1014.339843][ T2019] R13: 00007f3681616038 R14: 00007f3681615fa0 R15: 00007ffda93b94f8 [ 1014.339879][ T2019] [ 1014.408041][ T5809] bond3: (slave bridge6): failed to get link speed/duplex [ 1014.792580][ T2039] __nla_validate_parse: 19 callbacks suppressed [ 1014.792606][ T2039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8082'. [ 1014.812058][ T5809] bond3: (slave bridge6): failed to get link speed/duplex [ 1014.864362][ T2042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8083'. [ 1014.910762][ T2044] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8084'. [ 1014.921872][ T178] bond3: (slave bridge6): failed to get link speed/duplex [ 1015.051313][ T5809] bond3: (slave bridge6): failed to get link speed/duplex [ 1015.165778][ T79] bond3: (slave bridge6): failed to get link speed/duplex [ 1015.302461][ T37] bond3: (slave bridge6): failed to get link speed/duplex [ 1015.327404][ T2069] netlink: 'syz.0.8092': attribute type 4 has an invalid length. [ 1015.366825][ T2069] netlink: 'syz.0.8092': attribute type 4 has an invalid length. [ 1015.411824][ T5809] bond3: (slave bridge6): failed to get link speed/duplex [ 1015.423943][ T2072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8095'. [ 1015.452838][ T2069] tipc: Enabling of bearer rejected, already enabled [ 1015.460780][ T2075] netlink: 'syz.2.8094': attribute type 4 has an invalid length. [ 1015.469463][ T2069] FAULT_INJECTION: forcing a failure. [ 1015.469463][ T2069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1015.488651][ T2075] netlink: 'syz.2.8094': attribute type 4 has an invalid length. [ 1015.499270][ T2069] CPU: 0 UID: 0 PID: 2069 Comm: syz.0.8092 Not tainted syzkaller #0 PREEMPT(full) [ 1015.499297][ T2069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1015.499310][ T2069] Call Trace: [ 1015.499318][ T2069] [ 1015.499327][ T2069] dump_stack_lvl+0xe8/0x150 [ 1015.499355][ T2069] should_fail_ex+0x412/0x560 [ 1015.499387][ T2069] _copy_from_user+0x2d/0xb0 [ 1015.499417][ T2069] kstrtouint_from_user+0xd6/0x180 [ 1015.499445][ T2069] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1015.499507][ T2069] proc_fail_nth_write+0x8e/0x210 [ 1015.499536][ T2069] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1015.499571][ T2069] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1015.499600][ T2069] vfs_write+0x29a/0xb90 [ 1015.499641][ T2069] ? __pfx_vfs_write+0x10/0x10 [ 1015.499673][ T2069] ? __fget_files+0x2a/0x420 [ 1015.499704][ T2069] ? __fget_files+0x3a0/0x420 [ 1015.499728][ T2069] ? __fget_files+0x2a/0x420 [ 1015.499762][ T2069] ksys_write+0x150/0x270 [ 1015.499804][ T2069] ? __pfx_ksys_write+0x10/0x10 [ 1015.499843][ T2069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.499866][ T2069] do_syscall_64+0x15f/0xf80 [ 1015.499892][ T2069] ? trace_irq_disable+0x3b/0x140 [ 1015.499924][ T2069] ? clear_bhb_loop+0x40/0x90 [ 1015.499951][ T2069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.499972][ T2069] RIP: 0033:0x7fecd395d60e [ 1015.499993][ T2069] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1015.500011][ T2069] RSP: 002b:00007fecd489dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1015.500044][ T2069] RAX: ffffffffffffffda RBX: 00007fecd489e6c0 RCX: 00007fecd395d60e [ 1015.500059][ T2069] RDX: 0000000000000001 RSI: 00007fecd489e0a0 RDI: 000000000000000e [ 1015.500071][ T2069] RBP: 00007fecd489e090 R08: 0000000000000000 R09: 0000000000000000 [ 1015.500084][ T2069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1015.500095][ T2069] R13: 00007fecd3c16038 R14: 00007fecd3c15fa0 R15: 00007fffe8001048 [ 1015.500129][ T2069] [ 1015.500811][ T2078] : renamed from team_slave_1 (while UP) [ 1015.775733][ T2075] tipc: Enabling of bearer rejected, already enabled [ 1015.961512][ T37] bond3: (slave bridge6): failed to get link speed/duplex [ 1016.094379][ T2102] syzkaller1: tun_chr_ioctl cmd 1074812117 [ 1016.113612][ T2102] syzkaller1: tun_chr_ioctl cmd 35108 [ 1016.148306][ T2107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8105'. [ 1016.235982][ T2110] syzkaller0: entered promiscuous mode [ 1016.247321][ T2110] syzkaller0: entered allmulticast mode [ 1016.303692][ T2113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8109'. [ 1016.380760][ T2121] netlink: 'syz.0.8107': attribute type 13 has an invalid length. [ 1016.389999][ T2121] netlink: 'syz.0.8107': attribute type 17 has an invalid length. [ 1016.652305][ T2135] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8113'. [ 1016.779713][ T2121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1016.790217][ T2121] 8021q: adding VLAN 0 to HW filter on device team0 [ 1016.815302][ T2121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1016.826288][ T2121] vxcan1: left promiscuous mode [ 1016.914958][ T2121] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1016.925817][ T2121] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1016.990837][ T2121] veth1_vlan: left promiscuous mode [ 1016.999360][ T2121] veth0_vlan: left promiscuous mode [ 1017.006389][ T2121] veth0_vlan: entered promiscuous mode [ 1017.037973][ T2121] veth1_vlan: entered promiscuous mode [ 1017.067858][ T2121] veth1_macvtap: left promiscuous mode [ 1017.083964][ T2121] veth0_macvtap: left promiscuous mode [ 1017.101384][ T2121] veth0_macvtap: entered promiscuous mode [ 1017.142315][ T2121] veth1_macvtap: entered promiscuous mode [ 1017.186852][ T2121] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1017.214041][ T2121] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1017.223737][ T2121] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1017.234969][ T2121] veth0_to_team: entered promiscuous mode [ 1017.248292][ T2121] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1017.265769][ T2121] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1017.283492][ T2121] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1017.302712][ T2121] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1017.318951][ T2121] ip6erspan0: left promiscuous mode [ 1017.333612][ T2121] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1017.350943][ T2128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8111'. [ 1017.380102][ T2130] tipc: Resetting bearer [ 1017.413138][T32730] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1017.667615][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.696483][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.737139][ T2151] vlan5: entered promiscuous mode [ 1017.780041][ T2164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8121'. [ 1017.831297][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1017.885180][ T2160] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8118'. [ 1017.919747][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.954623][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.155513][ T8722] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1018.402712][ T2190] wg1 speed is unknown, defaulting to 1000 [ 1018.480260][ T2199] netlink: 'syz.1.8127': attribute type 1 has an invalid length. [ 1018.992980][ T2214] vlan3: entered promiscuous mode [ 1019.040644][ T2189] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1019.067172][ T2189] syzkaller1: linktype set to 768 [ 1019.239973][ T2223] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1019.315368][ T5809] net_ratelimit: 38 callbacks suppressed [ 1019.315388][ T5809] bond3: (slave bridge6): failed to get link speed/duplex [ 1019.631895][ T37] bond3: (slave bridge6): failed to get link speed/duplex [ 1020.034505][ T2252] __nla_validate_parse: 5 callbacks suppressed [ 1020.034526][ T2252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8147'. [ 1020.302383][ T2259] FAULT_INJECTION: forcing a failure. [ 1020.302383][ T2259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1020.318941][ T2259] CPU: 1 UID: 0 PID: 2259 Comm: syz.3.8150 Not tainted syzkaller #0 PREEMPT(full) [ 1020.318968][ T2259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1020.318981][ T2259] Call Trace: [ 1020.318989][ T2259] [ 1020.318998][ T2259] dump_stack_lvl+0xe8/0x150 [ 1020.319027][ T2259] should_fail_ex+0x412/0x560 [ 1020.319058][ T2259] _copy_from_user+0x2d/0xb0 [ 1020.319087][ T2259] ___sys_sendmsg+0x1c6/0x360 [ 1020.319114][ T2259] ? __lock_acquire+0x6b5/0x2cf0 [ 1020.319141][ T2259] ? __pfx____sys_sendmsg+0x10/0x10 [ 1020.319204][ T2259] ? __fget_files+0x2a/0x420 [ 1020.319227][ T2259] ? __fget_files+0x3a0/0x420 [ 1020.319262][ T2259] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1020.319291][ T2259] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1020.319327][ T2259] ? __pfx_ksys_write+0x10/0x10 [ 1020.319364][ T2259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.319385][ T2259] do_syscall_64+0x15f/0xf80 [ 1020.319409][ T2259] ? trace_irq_disable+0x3b/0x140 [ 1020.319439][ T2259] ? clear_bhb_loop+0x40/0x90 [ 1020.319463][ T2259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.319484][ T2259] RIP: 0033:0x7ff37519cdd9 [ 1020.319502][ T2259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1020.319520][ T2259] RSP: 002b:00007ff3760a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1020.319542][ T2259] RAX: ffffffffffffffda RBX: 00007ff375415fa0 RCX: 00007ff37519cdd9 [ 1020.319557][ T2259] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1020.319569][ T2259] RBP: 00007ff3760a8090 R08: 0000000000000000 R09: 0000000000000000 [ 1020.319581][ T2259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1020.319593][ T2259] R13: 00007ff375416038 R14: 00007ff375415fa0 R15: 00007ffc129da748 [ 1020.319625][ T2259] [ 1020.521126][T31019] bond3: (slave bridge6): failed to get link speed/duplex [ 1020.668343][T31019] bond3: (slave bridge6): failed to get link speed/duplex [ 1020.781700][ T178] bond3: (slave bridge6): failed to get link speed/duplex [ 1020.896504][ T2280] netlink: 'syz.2.8158': attribute type 1 has an invalid length. [ 1020.911299][ T178] bond3: (slave bridge6): failed to get link speed/duplex [ 1020.933480][ T2280] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8158'. [ 1020.990366][ T2279] wg1 speed is unknown, defaulting to 1000 [ 1021.023918][ T2282] vxcan2: entered allmulticast mode [ 1021.098619][ T2286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8159'. [ 1021.261851][ T178] bond3: (slave bridge6): failed to get link speed/duplex [ 1021.394193][T31019] bond3: (slave bridge6): failed to get link speed/duplex [ 1021.510551][ T2289] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.8161'. [ 1021.521494][ T79] bond3: (slave bridge6): failed to get link speed/duplex [ 1021.606442][ T2289] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 1021.638675][ T2295] wg1 speed is unknown, defaulting to 1000 [ 1021.656657][ T2308] lo: entered allmulticast mode [ 1021.672081][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1021.688756][ T2308] lo: left allmulticast mode [ 1021.759380][ T2311] vlan3: entered promiscuous mode [ 1022.129534][ T2318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8172'. [ 1022.628034][ T2329] FAULT_INJECTION: forcing a failure. [ 1022.628034][ T2329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1022.652493][ T2326] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8174'. [ 1022.671799][ T2329] CPU: 0 UID: 0 PID: 2329 Comm: syz.0.8175 Not tainted syzkaller #0 PREEMPT(full) [ 1022.671845][ T2329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1022.671859][ T2329] Call Trace: [ 1022.671868][ T2329] [ 1022.671877][ T2329] dump_stack_lvl+0xe8/0x150 [ 1022.671907][ T2329] should_fail_ex+0x412/0x560 [ 1022.671939][ T2329] _copy_from_iter+0x1d3/0x1670 [ 1022.671974][ T2329] ? rcu_is_watching+0x15/0xb0 [ 1022.672007][ T2329] ? __pfx__copy_from_iter+0x10/0x10 [ 1022.672043][ T2329] ? netlink_sendmsg+0x650/0xb40 [ 1022.672069][ T2329] ? skb_put+0x11b/0x210 [ 1022.672098][ T2329] netlink_sendmsg+0x6c0/0xb40 [ 1022.672135][ T2329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1022.672167][ T2329] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1022.672196][ T2329] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1022.672228][ T2329] ____sys_sendmsg+0x972/0x9f0 [ 1022.672255][ T2329] ? __might_fault+0xaf/0x130 [ 1022.672290][ T2329] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1022.672329][ T2329] ? import_iovec+0x73/0xa0 [ 1022.672362][ T2329] ___sys_sendmsg+0x2a5/0x360 [ 1022.672388][ T2329] ? __lock_acquire+0x6b5/0x2cf0 [ 1022.672416][ T2329] ? __pfx____sys_sendmsg+0x10/0x10 [ 1022.672483][ T2329] ? __fget_files+0x2a/0x420 [ 1022.672507][ T2329] ? __fget_files+0x3a0/0x420 [ 1022.672544][ T2329] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1022.672576][ T2329] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1022.672622][ T2329] ? __pfx_ksys_write+0x10/0x10 [ 1022.672662][ T2329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.672686][ T2329] do_syscall_64+0x15f/0xf80 [ 1022.672711][ T2329] ? trace_irq_disable+0x3b/0x140 [ 1022.672742][ T2329] ? clear_bhb_loop+0x40/0x90 [ 1022.672768][ T2329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.672790][ T2329] RIP: 0033:0x7fecd399cdd9 [ 1022.672810][ T2329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1022.672828][ T2329] RSP: 002b:00007fecd489e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1022.672851][ T2329] RAX: ffffffffffffffda RBX: 00007fecd3c15fa0 RCX: 00007fecd399cdd9 [ 1022.672867][ T2329] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1022.672881][ T2329] RBP: 00007fecd489e090 R08: 0000000000000000 R09: 0000000000000000 [ 1022.672894][ T2329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1022.672907][ T2329] R13: 00007fecd3c16038 R14: 00007fecd3c15fa0 R15: 00007fffe8001048 [ 1022.672942][ T2329] [ 1023.442672][ T2345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8183'. [ 1023.456014][ T2341] netlink: 'syz.1.8181': attribute type 1 has an invalid length. [ 1023.540373][ T2349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8181'. [ 1023.627626][ T2353] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1023.670114][ T2353] syzkaller1: Refused to change device type [ 1023.687030][ T2355] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 1023.720016][ T2349] macvlan2: entered promiscuous mode [ 1023.727141][ T2349] macvlan2: entered allmulticast mode [ 1023.853226][ T2370] vlan2: entered promiscuous mode [ 1023.962889][ T2374] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8191'. [ 1023.989201][ T2364] wg1 speed is unknown, defaulting to 1000 [ 1023.995975][ T2374] netlink: 'syz.1.8191': attribute type 1 has an invalid length. [ 1024.004138][ T2374] netlink: 'syz.1.8191': attribute type 1 has an invalid length. [ 1024.025411][ T2374] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8191'. [ 1024.173022][ T2381] vti0: entered promiscuous mode [ 1024.332664][ T2391] tipc: Enabling of bearer rejected, already enabled [ 1024.421153][T31019] net_ratelimit: 14 callbacks suppressed [ 1024.421174][T31019] bond3: (slave bridge6): failed to get link speed/duplex [ 1024.592789][ T58] bond3: (slave bridge6): failed to get link speed/duplex [ 1024.722117][ T37] bond3: (slave bridge6): failed to get link speed/duplex [ 1024.935949][ T5809] bond3: (slave bridge6): failed to get link speed/duplex [ 1025.314406][ T2420] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.379370][ T2439] lo: entered allmulticast mode [ 1025.392059][ T79] bond3: (slave bridge6): failed to get link speed/duplex [ 1025.519942][ T2420] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.618633][ T2445] __nla_validate_parse: 7 callbacks suppressed [ 1025.618653][ T2445] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8215'. [ 1025.712757][T31019] bond3: (slave bridge6): failed to get link speed/duplex [ 1025.836451][ T2458] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8216'. [ 1025.846421][ T2458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8216'. [ 1025.856831][ T2458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8216'. [ 1025.867160][ T2458] netlink: 100 bytes leftover after parsing attributes in process `syz.3.8216'. [ 1025.915673][ T2420] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.077864][ T2420] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.169227][ T2468] vlan3: entered promiscuous mode [ 1026.366079][ T2470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1026.450566][ T2482] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8224'. [ 1026.644442][ T2470] batman_adv: batadv0: Interface deactivated: gretap4 [ 1026.701264][ T58] bond3: (slave bridge6): failed to get link speed/duplex [ 1026.719069][ T178] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1026.739943][ T178] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.772237][ T178] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1026.790909][ T178] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.812350][ T178] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1026.823533][ T178] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.855100][ T178] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1026.867812][ T178] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.934929][ T178] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.982865][ T178] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.992787][ T178] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.006968][ T2501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8228'. [ 1027.018813][ T2506] netlink: 876 bytes leftover after parsing attributes in process `syz.4.8229'. [ 1027.068074][ T2506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8229'. [ 1027.068980][ T178] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.144536][ T5809] bond3: (slave bridge6): failed to get link speed/duplex [ 1027.175764][ T2517] netlink: 'syz.2.8231': attribute type 10 has an invalid length. [ 1027.210312][ T2517] bridge0: port 4(netdevsim1) entered blocking state [ 1027.225600][ T2517] bridge0: port 4(netdevsim1) entered disabled state [ 1027.243539][ T2520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1027.256521][ T2517] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 1027.264053][ T2523] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8234'. [ 1027.334017][ T2517] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 1027.371307][T31019] bond3: (slave bridge6): failed to get link speed/duplex [ 1027.562839][ T2549] netlink: 'syz.0.8239': attribute type 7 has an invalid length. [ 1027.572093][ T2549] netlink: 'syz.0.8239': attribute type 8 has an invalid length. [ 1027.792092][ T2564] syzkaller0: entered promiscuous mode [ 1027.797769][ T2564] syzkaller0: entered allmulticast mode [ 1028.305550][ T2599] netlink: 'syz.2.8251': attribute type 1 has an invalid length. [ 1031.349665][ T2612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1031.365341][ T2612] 8021q: adding VLAN 0 to HW filter on device team0 [ 1031.376977][ T2612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1031.433725][ T2612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1031.448781][ T2612] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1031.466602][ T2627] net_ratelimit: 3 callbacks suppressed [ 1031.466621][ T2627] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1031.619008][ T37] bond3: (slave bridge6): failed to get link speed/duplex [ 1031.663108][ T2648] netlink: 'syz.0.8259': attribute type 4 has an invalid length. [ 1031.755499][ T13] bond3: (slave bridge6): failed to get link speed/duplex [ 1031.775736][ T2652] netlink: 'syz.1.8264': attribute type 1 has an invalid length. [ 1031.794588][ T2653] netlink: 'syz.1.8264': attribute type 1 has an invalid length. [ 1031.844730][ T2652] bond4: entered promiscuous mode [ 1031.850069][ T2652] bond4: entered allmulticast mode [ 1031.856275][ T2652] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1031.883099][ T13] bond3: (slave bridge6): failed to get link speed/duplex [ 1032.014409][ T13] bond3: (slave bridge6): failed to get link speed/duplex [ 1032.142496][ T37] bond3: (slave bridge6): failed to get link speed/duplex [ 1032.261771][ T178] bond3: (slave bridge6): failed to get link speed/duplex [ 1032.371927][ T37] bond3: (slave bridge6): failed to get link speed/duplex [ 1032.483636][ T2701] syzkaller0: entered promiscuous mode [ 1032.495096][ T2701] syzkaller0: entered allmulticast mode [ 1032.512412][ T37] bond3: (slave bridge6): failed to get link speed/duplex [ 1033.103869][ T2738] __nla_validate_parse: 71 callbacks suppressed [ 1033.103890][ T2738] netlink: 204 bytes leftover after parsing attributes in process `syz.3.8286'. [ 1033.191471][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1035.677828][ T13] bond3: (slave bridge6): failed to get link speed/duplex [ 1035.935956][ T2763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8293'. [ 1036.020536][ T2773] syzkaller0: entered promiscuous mode [ 1036.033511][ T2773] syzkaller0: entered allmulticast mode [ 1036.253927][ T2786] netlink: 'syz.2.8301': attribute type 2 has an invalid length. [ 1036.535880][ T2807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8309'. [ 1036.621348][ T178] net_ratelimit: 6 callbacks suppressed [ 1036.621369][ T178] bond3: (slave bridge6): failed to get link speed/duplex [ 1036.657993][ T2818] syzkaller0: entered promiscuous mode [ 1036.666236][ T2818] syzkaller0: entered allmulticast mode [ 1036.675265][ T2813] tipc: Enabling of bearer rejected, failed to enable media [ 1036.695135][ T2817] tipc: Enabled bearer , priority 0 [ 1036.753596][ T178] bond3: (slave bridge6): failed to get link speed/duplex [ 1036.820803][ T2817] tipc: Resetting bearer [ 1036.918510][ T2817] tipc: Disabling bearer [ 1036.961400][T16019] bond3: (slave bridge6): failed to get link speed/duplex [ 1036.986702][ T2848] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8318'. [ 1036.986834][ T2843] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8318'. [ 1037.041503][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1037.078612][ T2848] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8318'. [ 1037.091184][T16019] bond3: (slave bridge6): failed to get link speed/duplex [ 1037.233287][T16019] bond3: (slave bridge6): failed to get link speed/duplex [ 1037.244138][ T2869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8324'. [ 1037.267989][ T2852] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8320'. [ 1037.297011][ T2852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8320'. [ 1037.313765][ T2874] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8322'. [ 1037.364183][T16019] bond3: (slave bridge6): failed to get link speed/duplex [ 1037.392478][ T2877] netlink: 'syz.1.8325': attribute type 1 has an invalid length. [ 1037.496207][ T2877] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1037.516996][ T37] bond3: (slave bridge6): failed to get link speed/duplex [ 1037.641861][ T37] bond3: (slave bridge6): failed to get link speed/duplex [ 1037.794513][ T37] bond3: (slave bridge6): failed to get link speed/duplex [ 1037.921809][T16019] bond3: (slave bridge6): failed to get link speed/duplex [ 1038.113462][ T2920] FAULT_INJECTION: forcing a failure. [ 1038.113462][ T2920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1038.149181][ T2920] CPU: 0 UID: 0 PID: 2920 Comm: syz.4.8342 Not tainted syzkaller #0 PREEMPT(full) [ 1038.149211][ T2920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1038.149225][ T2920] Call Trace: [ 1038.149235][ T2920] [ 1038.149244][ T2920] dump_stack_lvl+0xe8/0x150 [ 1038.149278][ T2920] should_fail_ex+0x412/0x560 [ 1038.149319][ T2920] _copy_from_iter+0x1d3/0x1670 [ 1038.149351][ T2920] ? rcu_is_watching+0x15/0xb0 [ 1038.149383][ T2920] ? __pfx__copy_from_iter+0x10/0x10 [ 1038.149420][ T2920] ? netlink_sendmsg+0x650/0xb40 [ 1038.149447][ T2920] ? skb_put+0x11b/0x210 [ 1038.149477][ T2920] netlink_sendmsg+0x6c0/0xb40 [ 1038.149517][ T2920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1038.149549][ T2920] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1038.149579][ T2920] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1038.149612][ T2920] ____sys_sendmsg+0x972/0x9f0 [ 1038.149640][ T2920] ? __might_fault+0xaf/0x130 [ 1038.149675][ T2920] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1038.149714][ T2920] ? import_iovec+0x73/0xa0 [ 1038.149747][ T2920] ___sys_sendmsg+0x2a5/0x360 [ 1038.149773][ T2920] ? __lock_acquire+0x6b5/0x2cf0 [ 1038.149801][ T2920] ? __pfx____sys_sendmsg+0x10/0x10 [ 1038.149865][ T2920] ? __fget_files+0x2a/0x420 [ 1038.149889][ T2920] ? __fget_files+0x3a0/0x420 [ 1038.149926][ T2920] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1038.149957][ T2920] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1038.149995][ T2920] ? __pfx_ksys_write+0x10/0x10 [ 1038.150035][ T2920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.150058][ T2920] do_syscall_64+0x15f/0xf80 [ 1038.150084][ T2920] ? trace_irq_disable+0x3b/0x140 [ 1038.150115][ T2920] ? clear_bhb_loop+0x40/0x90 [ 1038.150142][ T2920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.150164][ T2920] RIP: 0033:0x7f253bd9cdd9 [ 1038.150184][ T2920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1038.150202][ T2920] RSP: 002b:00007f253cb8c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1038.150225][ T2920] RAX: ffffffffffffffda RBX: 00007f253c015fa0 RCX: 00007f253bd9cdd9 [ 1038.150241][ T2920] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1038.150255][ T2920] RBP: 00007f253cb8c090 R08: 0000000000000000 R09: 0000000000000000 [ 1038.150268][ T2920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1038.150288][ T2920] R13: 00007f253c016038 R14: 00007f253c015fa0 R15: 00007ffe75c8c278 [ 1038.150324][ T2920] [ 1038.586019][ T2943] __nla_validate_parse: 10 callbacks suppressed [ 1038.586038][ T2943] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8349'. [ 1038.659371][ T2937] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1038.710716][ T2937] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1038.738346][ T2937] netdevsim netdevsim3 eth0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1038.768576][ T2937] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1038.779273][ T2937] netdevsim netdevsim3 eth1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1038.794762][ T2937] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1038.807678][ T2937] netdevsim netdevsim3 eth2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1038.818903][ T2937] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1038.828018][ T2937] netdevsim netdevsim3 eth3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1038.838911][ T2937] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1038.856808][ T2937] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1038.866134][ T2937] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1038.877593][ T2937] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1039.000212][ T2953] wg1 speed is unknown, defaulting to 1000 [ 1039.010024][ T2959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8352'. [ 1039.220755][ T2962] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8354'. [ 1039.240744][ T2962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8354'. [ 1039.252590][ T2962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8354'. [ 1039.280325][ T2962] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8354'. [ 1039.322070][ T2969] netlink: 'syz.2.8356': attribute type 2 has an invalid length. [ 1039.497721][ T2977] tunl0: Caught tx_queue_len zero misconfig [ 1039.526639][ T2978] FAULT_INJECTION: forcing a failure. [ 1039.526639][ T2978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1039.556836][ T2978] CPU: 1 UID: 0 PID: 2978 Comm: syz.4.8359 Not tainted syzkaller #0 PREEMPT(full) [ 1039.556864][ T2978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1039.556877][ T2978] Call Trace: [ 1039.556885][ T2978] [ 1039.556893][ T2978] dump_stack_lvl+0xe8/0x150 [ 1039.556922][ T2978] should_fail_ex+0x412/0x560 [ 1039.556952][ T2978] _copy_from_iter+0x1d3/0x1670 [ 1039.556982][ T2978] ? rcu_is_watching+0x15/0xb0 [ 1039.557014][ T2978] ? __pfx__copy_from_iter+0x10/0x10 [ 1039.557048][ T2978] ? netlink_sendmsg+0x650/0xb40 [ 1039.557071][ T2978] ? skb_put+0x11b/0x210 [ 1039.557099][ T2978] netlink_sendmsg+0x6c0/0xb40 [ 1039.557132][ T2978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1039.557161][ T2978] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1039.557189][ T2978] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1039.557219][ T2978] ____sys_sendmsg+0x972/0x9f0 [ 1039.557246][ T2978] ? __might_fault+0xaf/0x130 [ 1039.557278][ T2978] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1039.557313][ T2978] ? import_iovec+0x73/0xa0 [ 1039.557345][ T2978] ___sys_sendmsg+0x2a5/0x360 [ 1039.557370][ T2978] ? __lock_acquire+0x6b5/0x2cf0 [ 1039.557396][ T2978] ? __pfx____sys_sendmsg+0x10/0x10 [ 1039.557466][ T2978] ? __fget_files+0x2a/0x420 [ 1039.557488][ T2978] ? __fget_files+0x3a0/0x420 [ 1039.557522][ T2978] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1039.557552][ T2978] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1039.557589][ T2978] ? __pfx_ksys_write+0x10/0x10 [ 1039.557626][ T2978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.557648][ T2978] do_syscall_64+0x15f/0xf80 [ 1039.557671][ T2978] ? trace_irq_disable+0x3b/0x140 [ 1039.557701][ T2978] ? clear_bhb_loop+0x40/0x90 [ 1039.557726][ T2978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.557746][ T2978] RIP: 0033:0x7f253bd9cdd9 [ 1039.557764][ T2978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1039.557782][ T2978] RSP: 002b:00007f253cb8c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1039.557803][ T2978] RAX: ffffffffffffffda RBX: 00007f253c015fa0 RCX: 00007f253bd9cdd9 [ 1039.557818][ T2978] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1039.557830][ T2978] RBP: 00007f253cb8c090 R08: 0000000000000000 R09: 0000000000000000 [ 1039.557842][ T2978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1039.557854][ T2978] R13: 00007f253c016038 R14: 00007f253c015fa0 R15: 00007ffe75c8c278 [ 1039.557886][ T2978] [ 1039.977884][ T2984] syzkaller0: entered promiscuous mode [ 1039.984142][ T2984] syzkaller0: entered allmulticast mode [ 1040.083828][ T2996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8366'. [ 1042.671957][ T37] net_ratelimit: 22 callbacks suppressed [ 1042.671981][ T37] bond3: (slave bridge6): failed to get link speed/duplex [ 1042.726983][ T37] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1042.821941][ T5809] bond3: (slave bridge6): failed to get link speed/duplex [ 1042.881687][ T5809] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1042.941877][ T5809] bond3: (slave bridge6): failed to get link speed/duplex [ 1043.024107][ T2573] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1043.102520][ T37] bond3: (slave bridge6): failed to get link speed/duplex [ 1043.141343][ T5809] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1043.226810][ T37] bond3: (slave bridge6): failed to get link speed/duplex [ 1043.251267][ T37] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1043.465720][ T3037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8378'. [ 1043.476007][ T30] audit: type=1804 audit(1777696121.625:26): pid=3035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.8377" name="/newroot/461/memory.events" dev="tmpfs" ino=2389 res=1 errno=0 [ 1043.502801][ T30] audit: type=1800 audit(1777696121.625:27): pid=3035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8377" name="memory.events" dev="tmpfs" ino=2389 res=0 errno=0 [ 1043.550879][ T3035] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1043.575139][ T3035] bond6 (unregistering): Released all slaves [ 1043.708914][ T3042] vlan5: entered promiscuous mode [ 1043.818701][ T3045] ip6tnl0: Caught tx_queue_len zero misconfig [ 1043.908489][ T3049] wg1 speed is unknown, defaulting to 1000 [ 1044.032274][ T3054] netlink: 'syz.1.8383': attribute type 11 has an invalid length. [ 1044.090730][ T3054] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8383'. [ 1044.287321][ T3065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8386'. [ 1044.455891][ T3066] bond6 (unregistering): Released all slaves [ 1044.556862][ T3065] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1044.795063][ T3087] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8391'. [ 1044.808427][ T3058] wg1 speed is unknown, defaulting to 1000 [ 1044.849225][ T3084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8390'. [ 1044.861951][ T3084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8390'. [ 1044.870960][ T3084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8390'. [ 1044.889197][ T3084] netlink: 100 bytes leftover after parsing attributes in process `syz.1.8390'. [ 1045.122956][ T3096] vlan5: entered promiscuous mode [ 1045.882798][ T3131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8405'. [ 1045.905334][ T3117] tipc: Enabling of bearer rejected, already enabled [ 1046.293282][ T3139] syzkaller0: entered promiscuous mode [ 1046.317388][ T3139] syzkaller0: entered allmulticast mode [ 1046.571862][ T3154] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1047.096820][ T3177] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8417'. [ 1047.149870][ T3180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8418'. [ 1047.684626][ T3203] xt_hashlimit: size too large, truncated to 1048576 [ 1050.532495][ T178] net_ratelimit: 2036 callbacks suppressed [ 1050.532515][ T178] bond3: (slave bridge6): failed to get link speed/duplex [ 1050.624458][ T3234] netlink: 88 bytes leftover after parsing attributes in process `syz.1.8428'. [ 1050.743033][T14675] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1050.771827][T14675] bond3: (slave bridge6): failed to get link speed/duplex [ 1050.861649][T14675] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1050.889053][ T3238] netlink: 'syz.4.8429': attribute type 1 has an invalid length. [ 1050.903274][T14675] bond3: (slave bridge6): failed to get link speed/duplex [ 1050.910528][ T3241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8431'. [ 1051.013559][ T3238] bond6: entered promiscuous mode [ 1051.019163][ T3238] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1051.104758][ T3248] bond6: (slave veth7): making interface the new active one [ 1051.114136][ T3248] veth7: entered promiscuous mode [ 1051.120679][ T3248] bond6: (slave veth7): Enslaving as an active interface with an up link [ 1051.130724][T16019] bond3: (slave bridge6): failed to get link speed/duplex [ 1051.182118][T14675] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1051.251920][T16019] bond3: (slave bridge6): failed to get link speed/duplex [ 1051.303658][T14675] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1051.381754][T14675] bond3: (slave bridge6): failed to get link speed/duplex [ 1051.645811][ T3277] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8442'. [ 1051.809177][ T3285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8444'. [ 1054.444942][ T3278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8442'. [ 1054.534385][ T3295] vlan5: entered promiscuous mode [ 1054.646797][ T3302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8448'. [ 1054.810495][ T3313] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8452'. [ 1054.835145][ T3318] netlink: 'syz.3.8454': attribute type 1 has an invalid length. [ 1054.845130][ T3318] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8454'. [ 1054.855715][ T3313] netlink: 88 bytes leftover after parsing attributes in process `syz.0.8452'. [ 1054.908617][ T3315] syzkaller0: entered promiscuous mode [ 1054.922697][ T3315] syzkaller0: entered allmulticast mode [ 1055.167584][ T3334] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8458'. [ 1055.183978][ T3326] wg1 speed is unknown, defaulting to 1000 [ 1055.530634][ T3343] vlan5: entered promiscuous mode [ 1055.632557][ T5809] net_ratelimit: 14 callbacks suppressed [ 1055.632577][ T5809] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1055.711729][ T178] bond3: (slave bridge6): failed to get link speed/duplex [ 1055.801754][ T2573] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1056.201222][ T13] bond3: (slave bridge6): failed to get link speed/duplex [ 1056.223147][ T3379] netlink: 'syz.1.8470': attribute type 1 has an invalid length. [ 1056.238598][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1056.353786][ T3387] __nla_validate_parse: 3 callbacks suppressed [ 1056.353801][ T3387] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8470'. [ 1056.413880][ T3393] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8470'. [ 1056.497284][ T3383] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1056.513021][ T3383] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 1056.576247][ T3393] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1056.604639][ T3387] bond7: (slave bridge5): Enslaving as an active interface with a down link [ 1056.671326][ T2573] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1056.695372][ T3397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8474'. [ 1056.755710][ T37] bond3: (slave bridge6): failed to get link speed/duplex [ 1056.842511][T14675] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1056.866966][ T3399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8475'. [ 1056.887815][ T178] bond3: (slave bridge6): failed to get link speed/duplex [ 1056.923196][ T3399] netlink: 88 bytes leftover after parsing attributes in process `syz.0.8475'. [ 1056.976859][ T5809] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1057.032104][ T3407] netlink: 'syz.4.8479': attribute type 1 has an invalid length. [ 1057.137109][ T3407] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1057.223295][ T3424] netlink: 'syz.3.8484': attribute type 1 has an invalid length. [ 1057.273130][ T3416] bond7: (slave veth9): Enslaving as an active interface with an up link [ 1057.348549][ T3424] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1057.396341][ T3429] vlan3: entered promiscuous mode [ 1057.408657][ T3429] bond6: entered promiscuous mode [ 1057.417344][ T3429] vlan3: entered allmulticast mode [ 1057.422940][ T3429] bond6: entered allmulticast mode [ 1057.547300][ T3429] bond6: (slave bridge13): making interface the new active one [ 1057.566984][ T3429] bridge13: entered promiscuous mode [ 1057.579665][ T3429] bridge13: entered allmulticast mode [ 1057.595869][ T3429] bond6: (slave bridge13): Enslaving as an active interface with an up link [ 1058.090156][ T3467] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8497'. [ 1058.265410][ T3478] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8501'. [ 1058.296324][ T3478] netlink: 88 bytes leftover after parsing attributes in process `syz.2.8501'. [ 1058.325717][ T3479] netlink: 'syz.1.8500': attribute type 4 has an invalid length. [ 1058.746706][ T3505] netlink: 'syz.1.8509': attribute type 13 has an invalid length. [ 1058.779846][ T3505] netlink: 'syz.1.8509': attribute type 17 has an invalid length. [ 1058.897949][ T3503] bridge0: port 4(erspan0) entered disabled state [ 1059.119426][ T3503] bridge0: port 5(vlan4) entered disabled state [ 1059.126006][ T3503] bridge0: port 3(vlan3) entered disabled state [ 1059.132568][ T3503] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.139849][ T3503] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.716126][ T3550] FAULT_INJECTION: forcing a failure. [ 1059.716126][ T3550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1059.736999][ T3550] CPU: 0 UID: 0 PID: 3550 Comm: syz.3.8514 Not tainted syzkaller #0 PREEMPT(full) [ 1059.737029][ T3550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1059.737043][ T3550] Call Trace: [ 1059.737051][ T3550] [ 1059.737062][ T3550] dump_stack_lvl+0xe8/0x150 [ 1059.737092][ T3550] should_fail_ex+0x412/0x560 [ 1059.737126][ T3550] _copy_from_iter+0x1d3/0x1670 [ 1059.737158][ T3550] ? rcu_is_watching+0x15/0xb0 [ 1059.737192][ T3550] ? __pfx__copy_from_iter+0x10/0x10 [ 1059.737231][ T3550] ? netlink_sendmsg+0x650/0xb40 [ 1059.737258][ T3550] ? skb_put+0x11b/0x210 [ 1059.737288][ T3550] netlink_sendmsg+0x6c0/0xb40 [ 1059.737324][ T3550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1059.737356][ T3550] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1059.737385][ T3550] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1059.737414][ T3550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1059.737443][ T3550] __sys_sendto+0x672/0x710 [ 1059.737471][ T3550] ? __pfx___sys_sendto+0x10/0x10 [ 1059.737525][ T3550] ? exc_page_fault+0x6a/0xc0 [ 1059.737553][ T3550] ? do_user_addr_fault+0xc6f/0x1340 [ 1059.737580][ T3550] __x64_sys_sendto+0xde/0x100 [ 1059.737607][ T3550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.737630][ T3550] do_syscall_64+0x15f/0xf80 [ 1059.737653][ T3550] ? trace_irq_disable+0x3b/0x140 [ 1059.737685][ T3550] ? clear_bhb_loop+0x40/0x90 [ 1059.737712][ T3550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.737740][ T3550] RIP: 0033:0x7ff37515d60e [ 1059.737760][ T3550] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1059.737777][ T3550] RSP: 002b:00007ff376085e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1059.737800][ T3550] RAX: ffffffffffffffda RBX: 00007ff3760876c0 RCX: 00007ff37515d60e [ 1059.737816][ T3550] RDX: 0000000000000020 RSI: 00007ff376086000 RDI: 0000000000000003 [ 1059.737829][ T3550] RBP: 0000000000000000 R08: 00007ff376085f04 R09: 000000000000000c [ 1059.737842][ T3550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1059.737854][ T3550] R13: 00007ff376085f58 R14: 00007ff376086000 R15: 0000000000000000 [ 1059.737889][ T3550] [ 1060.842669][ T3505] bridge0: port 4(erspan0) entered blocking state [ 1060.849243][ T3505] bridge0: port 4(erspan0) entered listening state [ 1060.859653][ T3505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.885814][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.893055][ T3505] bridge0: port 1(bridge_slave_0) entered listening state [ 1060.901857][ T3505] bridge0: port 5(vlan4) entered blocking state [ 1060.908249][ T3505] bridge0: port 5(vlan4) entered listening state [ 1060.917494][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.924712][ T3505] bridge0: port 2(bridge_slave_1) entered listening state [ 1060.955454][ T3505] veth1_vlan: left promiscuous mode [ 1060.962021][ T3505] veth0_vlan: left promiscuous mode [ 1060.968599][ T3505] veth0_vlan: entered promiscuous mode [ 1060.979104][ T3505] veth1_vlan: entered promiscuous mode [ 1060.989438][ T3505] veth1_macvtap: left promiscuous mode [ 1060.996538][ T3505] veth0_macvtap: left promiscuous mode [ 1061.003553][ T3505] veth0_macvtap: entered promiscuous mode [ 1061.010782][ T3505] veth1_macvtap: entered promiscuous mode [ 1061.023155][ T3505] bridge0: port 3(vlan3) entered blocking state [ 1061.029608][ T3505] bridge0: port 3(vlan3) entered listening state [ 1061.047782][ T3505] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1061.059015][ T3505] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1061.074508][ T3505] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1061.082740][ T3505] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1061.090499][ T3505] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1061.098754][ T3505] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1061.110633][ T3505] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1061.120772][ T3505] bond3: entered promiscuous mode [ 1061.126264][ T3505] macvlan2: left promiscuous mode [ 1061.131959][ T3505] macvlan2: left allmulticast mode [ 1061.137148][ T3505] bond3: entered allmulticast mode [ 1061.143909][ T3505] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1061.155107][ T3505] bond4: left promiscuous mode [ 1061.159888][ T3505] bond4: left allmulticast mode [ 1061.165571][ T3505] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1061.178220][ T3505] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1061.186774][ T3505] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1061.199962][ T3505] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1061.309610][ T3532] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8512'. [ 1061.410255][ T37] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1061.471999][T31019] net_ratelimit: 23 callbacks suppressed [ 1061.472020][T31019] bond3: (slave bridge6): failed to get link speed/duplex [ 1061.521638][ T37] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1061.595162][ T3562] batadv0: entered promiscuous mode [ 1061.630849][ T3562] macvlan2: entered allmulticast mode [ 1061.653482][ T3562] batadv0: entered allmulticast mode [ 1061.665848][ T3562] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1061.725486][ T3562] batadv0: left allmulticast mode [ 1061.738617][ T3562] batadv0: left promiscuous mode [ 1061.834748][ T3575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8523'. [ 1061.865955][ T3575] netlink: 88 bytes leftover after parsing attributes in process `syz.1.8523'. [ 1061.909981][ T3579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8525'. [ 1062.039572][ T3579] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1062.153707][ T37] bond3: (slave bridge6): failed to get link speed/duplex [ 1062.206020][ T37] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1062.307092][ T2573] bond3: (slave bridge6): failed to get link speed/duplex [ 1062.351310][ T2573] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1062.374480][ T3597] FAULT_INJECTION: forcing a failure. [ 1062.374480][ T3597] name failslab, interval 1, probability 0, space 0, times 0 [ 1062.387489][ T3568] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1062.387552][ T3568] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1062.412501][ T3597] CPU: 0 UID: 0 PID: 3597 Comm: syz.0.8529 Not tainted syzkaller #0 PREEMPT(full) [ 1062.412531][ T3597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1062.412546][ T3597] Call Trace: [ 1062.412555][ T3597] [ 1062.412564][ T3597] dump_stack_lvl+0xe8/0x150 [ 1062.412594][ T3597] should_fail_ex+0x412/0x560 [ 1062.412618][ T3597] should_failslab+0xa8/0x100 [ 1062.412641][ T3597] ? skb_clone+0x212/0x3a0 [ 1062.412661][ T3597] kmem_cache_alloc_noprof+0x87/0x650 [ 1062.412682][ T3597] ? __netlink_lookup+0xc6/0x8b0 [ 1062.412707][ T3597] skb_clone+0x212/0x3a0 [ 1062.412730][ T3597] __netlink_deliver_tap+0x404/0x850 [ 1062.412757][ T3597] ? netlink_deliver_tap+0x2e/0x1b0 [ 1062.412777][ T3597] netlink_deliver_tap+0x19c/0x1b0 [ 1062.412797][ T3597] netlink_unicast+0x730/0x8e0 [ 1062.412821][ T3597] netlink_sendmsg+0x813/0xb40 [ 1062.412848][ T3597] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1062.412869][ T3597] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1062.412891][ T3597] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1062.412911][ T3597] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1062.412931][ T3597] __sys_sendto+0x672/0x710 [ 1062.412951][ T3597] ? __pfx___sys_sendto+0x10/0x10 [ 1062.412967][ T3597] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1062.412996][ T3597] ? __fget_files+0x3a0/0x420 [ 1062.413022][ T3597] ? ksys_write+0x242/0x270 [ 1062.413046][ T3597] ? __pfx_ksys_write+0x10/0x10 [ 1062.413072][ T3597] __x64_sys_sendto+0xde/0x100 [ 1062.413113][ T3597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.413137][ T3597] do_syscall_64+0x15f/0xf80 [ 1062.413161][ T3597] ? trace_irq_disable+0x3b/0x140 [ 1062.413192][ T3597] ? clear_bhb_loop+0x40/0x90 [ 1062.413218][ T3597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.413259][ T3597] RIP: 0033:0x7fecd395d60e [ 1062.413278][ T3597] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1062.413302][ T3597] RSP: 002b:00007fecd489ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1062.413326][ T3597] RAX: ffffffffffffffda RBX: 00007fecd489e6c0 RCX: 00007fecd395d60e [ 1062.413341][ T3597] RDX: 0000000000000020 RSI: 00007fecd489d000 RDI: 0000000000000003 [ 1062.413355][ T3597] RBP: 0000000000000000 R08: 00007fecd489cf04 R09: 000000000000000c [ 1062.413369][ T3597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1062.413382][ T3597] R13: 00007fecd489cf58 R14: 00007fecd489d000 R15: 0000000000000000 [ 1062.413417][ T3597] [ 1062.663660][ T79] bond3: (slave bridge6): failed to get link speed/duplex [ 1062.671998][ T79] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1062.784436][ T79] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1062.885173][ T3603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8531'. [ 1062.904151][ T3604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8531'. [ 1062.914134][ T3602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8531'. [ 1062.948275][ T3568] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1062.955616][ T3568] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1062.985339][ T3611] FAULT_INJECTION: forcing a failure. [ 1062.985339][ T3611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1063.002566][ T3611] CPU: 1 UID: 0 PID: 3611 Comm: syz.3.8533 Not tainted syzkaller #0 PREEMPT(full) [ 1063.002593][ T3611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1063.002606][ T3611] Call Trace: [ 1063.002613][ T3611] [ 1063.002623][ T3611] dump_stack_lvl+0xe8/0x150 [ 1063.002651][ T3611] should_fail_ex+0x412/0x560 [ 1063.002683][ T3611] _copy_to_user+0x31/0xb0 [ 1063.002715][ T3611] simple_read_from_buffer+0xe1/0x170 [ 1063.002745][ T3611] proc_fail_nth_read+0x1bb/0x230 [ 1063.002774][ T3611] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1063.002803][ T3611] ? rw_verify_area+0x2a6/0x4d0 [ 1063.002829][ T3611] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1063.002854][ T3611] vfs_read+0x20c/0xa70 [ 1063.002885][ T3611] ? __pfx___mutex_lock+0x10/0x10 [ 1063.002909][ T3611] ? __pfx_vfs_read+0x10/0x10 [ 1063.002934][ T3611] ? __fget_files+0x2a/0x420 [ 1063.002957][ T3611] ? __fget_files+0x3a0/0x420 [ 1063.002978][ T3611] ? __fget_files+0x2a/0x420 [ 1063.003010][ T3611] ksys_read+0x150/0x270 [ 1063.003040][ T3611] ? __pfx_ksys_read+0x10/0x10 [ 1063.003075][ T3611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.003098][ T3611] do_syscall_64+0x15f/0xf80 [ 1063.003120][ T3611] ? trace_irq_disable+0x3b/0x140 [ 1063.003149][ T3611] ? clear_bhb_loop+0x40/0x90 [ 1063.003174][ T3611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.003193][ T3611] RIP: 0033:0x7ff37515d60e [ 1063.003213][ T3611] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1063.003231][ T3611] RSP: 002b:00007ff376086fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1063.003252][ T3611] RAX: ffffffffffffffda RBX: 00007ff3760876c0 RCX: 00007ff37515d60e [ 1063.003268][ T3611] RDX: 000000000000000f RSI: 00007ff3760870a0 RDI: 0000000000000005 [ 1063.003281][ T3611] RBP: 00007ff376087090 R08: 0000000000000000 R09: 0000000000000000 [ 1063.003293][ T3611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1063.003305][ T3611] R13: 00007ff375416128 R14: 00007ff375416090 R15: 00007ffc129da748 [ 1063.003338][ T3611] [ 1063.343783][ T3568] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1063.381878][ T3568] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1063.583561][ T3568] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1063.592289][ T3568] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1063.622196][ T3620] bridge0: port 5(vlan4) entered disabled state [ 1063.628738][ T3620] bridge0: port 4(erspan0) entered disabled state [ 1063.635413][ T3620] bridge0: port 3(vlan3) entered disabled state [ 1063.641904][ T3620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.649101][ T3620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.664811][ T3632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8541'. [ 1064.684867][ T3632] netlink: 88 bytes leftover after parsing attributes in process `syz.1.8541'. [ 1065.050190][ T3649] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8544'. [ 1065.191681][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1065.406017][ T3662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8550'. [ 1065.681139][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1065.835525][ T3686] SET target dimension over the limit! [ 1066.091355][ T3692] mac80211_hwsim hwsim110 syzkaller0: entered promiscuous mode [ 1066.122119][ T3692] mac80211_hwsim hwsim110 syzkaller0: entered allmulticast mode [ 1066.377083][ T3710] netlink: 'syz.2.8561': attribute type 5 has an invalid length. [ 1066.556881][ T37] net_ratelimit: 49 callbacks suppressed [ 1066.556903][ T37] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1066.582182][ T79] bond3: (slave bridge6): failed to get link speed/duplex [ 1066.691700][ T79] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1066.726189][ T3723] netlink: 'syz.2.8566': attribute type 3 has an invalid length. [ 1066.741132][ T79] bond3: (slave bridge6): failed to get link speed/duplex [ 1066.764824][ T3723] netlink: 'syz.2.8566': attribute type 2 has an invalid length. [ 1066.801693][ T3723] netlink: 'syz.2.8566': attribute type 2 has an invalid length. [ 1066.825671][ T37] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1066.861404][ T37] bond3: (slave bridge6): failed to get link speed/duplex [ 1066.965865][ T79] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1067.121412][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1067.122884][ T3729] __nla_validate_parse: 11 callbacks suppressed [ 1067.122937][ T3729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8568'. [ 1067.165756][ T3733] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8570'. [ 1067.175469][ T2573] bond3: (slave bridge6): failed to get link speed/duplex [ 1067.182880][ T3733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8570'. [ 1067.192586][ T3733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8570'. [ 1067.202215][ T2573] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1067.209919][ T3733] netlink: 100 bytes leftover after parsing attributes in process `syz.2.8570'. [ 1067.301546][ T37] bond3: (slave bridge6): failed to get link speed/duplex [ 1067.732458][ T3751] bond5: option tlb_dynamic_lb: invalid value (5) [ 1067.764569][ T3751] bond5 (unregistering): Released all slaves [ 1067.949151][ T3754] wg1 speed is unknown, defaulting to 1000 [ 1068.540270][ T3771] FAULT_INJECTION: forcing a failure. [ 1068.540270][ T3771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1068.628548][ T3771] CPU: 1 UID: 0 PID: 3771 Comm: syz.2.8582 Not tainted syzkaller #0 PREEMPT(full) [ 1068.628578][ T3771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1068.628593][ T3771] Call Trace: [ 1068.628602][ T3771] [ 1068.628611][ T3771] dump_stack_lvl+0xe8/0x150 [ 1068.628641][ T3771] should_fail_ex+0x412/0x560 [ 1068.628673][ T3771] _copy_from_user+0x2d/0xb0 [ 1068.628704][ T3771] ___sys_sendmsg+0x1c6/0x360 [ 1068.628730][ T3771] ? __lock_acquire+0x6b5/0x2cf0 [ 1068.628757][ T3771] ? __pfx____sys_sendmsg+0x10/0x10 [ 1068.628824][ T3771] ? __fget_files+0x2a/0x420 [ 1068.628847][ T3771] ? __fget_files+0x3a0/0x420 [ 1068.628881][ T3771] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1068.628910][ T3771] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1068.628947][ T3771] ? __pfx_ksys_write+0x10/0x10 [ 1068.628984][ T3771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.629006][ T3771] do_syscall_64+0x15f/0xf80 [ 1068.629030][ T3771] ? trace_irq_disable+0x3b/0x140 [ 1068.629060][ T3771] ? clear_bhb_loop+0x40/0x90 [ 1068.629085][ T3771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.629105][ T3771] RIP: 0033:0x7f368139cdd9 [ 1068.629124][ T3771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1068.629142][ T3771] RSP: 002b:00007f36821c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1068.629164][ T3771] RAX: ffffffffffffffda RBX: 00007f3681615fa0 RCX: 00007f368139cdd9 [ 1068.629179][ T3771] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 1068.629192][ T3771] RBP: 00007f36821c0090 R08: 0000000000000000 R09: 0000000000000000 [ 1068.629205][ T3771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1068.629217][ T3771] R13: 00007f3681616038 R14: 00007f3681615fa0 R15: 00007ffda93b94f8 [ 1068.629249][ T3771] [ 1069.320646][ T3784] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8586'. [ 1069.414922][ T3786] wg1 speed is unknown, defaulting to 1000 [ 1069.992752][ T3802] FAULT_INJECTION: forcing a failure. [ 1069.992752][ T3802] name failslab, interval 1, probability 0, space 0, times 0 [ 1070.020519][ T3802] CPU: 0 UID: 0 PID: 3802 Comm: syz.1.8592 Not tainted syzkaller #0 PREEMPT(full) [ 1070.020547][ T3802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1070.020559][ T3802] Call Trace: [ 1070.020567][ T3802] [ 1070.020577][ T3802] dump_stack_lvl+0xe8/0x150 [ 1070.020613][ T3802] should_fail_ex+0x412/0x560 [ 1070.020645][ T3802] should_failslab+0xa8/0x100 [ 1070.020678][ T3802] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1070.020708][ T3802] ? __alloc_skb+0x1d0/0x7d0 [ 1070.020729][ T3802] ? __local_bh_enable_ip+0xd0/0x130 [ 1070.020755][ T3802] __alloc_skb+0x1d0/0x7d0 [ 1070.020784][ T3802] ctrl_getfamily+0x3d0/0x5c0 [ 1070.020817][ T3802] ? __pfx_ctrl_getfamily+0x10/0x10 [ 1070.020848][ T3802] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1070.020888][ T3802] genl_family_rcv_msg_doit+0x22a/0x330 [ 1070.020920][ T3802] ? __asan_memcpy+0x40/0x70 [ 1070.020949][ T3802] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1070.021006][ T3802] genl_rcv_msg+0x61c/0x7a0 [ 1070.021043][ T3802] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1070.021073][ T3802] ? __pfx_ctrl_getfamily+0x10/0x10 [ 1070.021103][ T3802] ? __pfx_ref_tracker_free+0x10/0x10 [ 1070.021141][ T3802] netlink_rcv_skb+0x232/0x4b0 [ 1070.021168][ T3802] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1070.021199][ T3802] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1070.021241][ T3802] ? down_read+0x270/0x2e0 [ 1070.021266][ T3802] ? genl_rcv+0xd/0x40 [ 1070.021297][ T3802] genl_rcv+0x28/0x40 [ 1070.021323][ T3802] netlink_unicast+0x75c/0x8e0 [ 1070.021358][ T3802] netlink_sendmsg+0x813/0xb40 [ 1070.021393][ T3802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1070.021422][ T3802] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1070.021450][ T3802] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1070.021476][ T3802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1070.021502][ T3802] __sys_sendto+0x672/0x710 [ 1070.021530][ T3802] ? __pfx___sys_sendto+0x10/0x10 [ 1070.021549][ T3802] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1070.021587][ T3802] ? __fget_files+0x3a0/0x420 [ 1070.021628][ T3802] ? ksys_write+0x242/0x270 [ 1070.021658][ T3802] ? __pfx_ksys_write+0x10/0x10 [ 1070.021691][ T3802] __x64_sys_sendto+0xde/0x100 [ 1070.021713][ T3802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.021734][ T3802] do_syscall_64+0x15f/0xf80 [ 1070.021757][ T3802] ? trace_irq_disable+0x3b/0x140 [ 1070.021786][ T3802] ? clear_bhb_loop+0x40/0x90 [ 1070.021810][ T3802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.021830][ T3802] RIP: 0033:0x7fa8f035d60e [ 1070.021850][ T3802] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1070.021868][ T3802] RSP: 002b:00007fa8f12f7e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1070.021889][ T3802] RAX: ffffffffffffffda RBX: 00007fa8f12f96c0 RCX: 00007fa8f035d60e [ 1070.021904][ T3802] RDX: 0000000000000020 RSI: 00007fa8f12f8000 RDI: 0000000000000003 [ 1070.021916][ T3802] RBP: 0000000000000000 R08: 00007fa8f12f7f04 R09: 000000000000000c [ 1070.021928][ T3802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1070.021940][ T3802] R13: 00007fa8f12f7f58 R14: 00007fa8f12f8000 R15: 0000000000000000 [ 1070.021973][ T3802] [ 1070.806640][ T3809] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8594'. [ 1070.844755][ T3809] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8594'. [ 1070.928359][ T3809] bridge0: port 5(vlan4) entered blocking state [ 1070.934853][ T3809] bridge0: port 5(vlan4) entered listening state [ 1070.941521][ T3809] bridge0: port 4(erspan0) entered blocking state [ 1070.948100][ T3809] bridge0: port 4(erspan0) entered listening state [ 1070.954906][ T3809] bridge0: port 3(vlan3) entered blocking state [ 1070.961334][ T3809] bridge0: port 3(vlan3) entered listening state [ 1070.967986][ T3809] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.975206][ T3809] bridge0: port 2(bridge_slave_1) entered listening state [ 1070.982642][ T3809] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.989817][ T3809] bridge0: port 1(bridge_slave_0) entered listening state [ 1071.022571][ T3812] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8595'. [ 1071.030475][ T3809] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8594'. [ 1071.160956][ T3809] bridge0: port 5(vlan4) entered disabled state [ 1071.167674][ T3809] bridge0: port 4(erspan0) entered disabled state [ 1071.174421][ T3809] bridge0: port 3(vlan3) entered disabled state [ 1071.180875][ T3809] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.188155][ T3809] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.601666][T31015] net_ratelimit: 36 callbacks suppressed [ 1071.601688][T31015] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1071.673547][ T5809] bond3: (slave bridge6): failed to get link speed/duplex [ 1071.753467][ T79] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1071.767092][ T3830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1071.811788][T31015] bond3: (slave bridge6): failed to get link speed/duplex [ 1071.873407][T14675] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1071.945688][T14675] bond3: (slave bridge6): failed to get link speed/duplex [ 1072.015034][ T178] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1072.172915][T31015] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1072.213626][T31015] bond3: (slave bridge6): failed to get link speed/duplex [ 1072.338241][ T3852] __nla_validate_parse: 3 callbacks suppressed [ 1072.338259][ T3852] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8608'. [ 1072.480226][ T3863] wg1 speed is unknown, defaulting to 1000 [ 1073.546517][ T3910] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8622'. [ 1073.972827][ T3915] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1074.151567][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1074.342702][ T3920] vlan2: entered promiscuous mode [ 1074.391868][ T3921] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8625'. [ 1074.430424][ T3921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8625'. [ 1074.449635][ T3921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8625'. [ 1074.500535][ T3921] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8625'. [ 1074.638005][ T3933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8629'. [ 1074.732142][ T3938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8631'. [ 1075.012420][ T3951] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8636'. [ 1075.044152][ T3951] netlink: 88 bytes leftover after parsing attributes in process `syz.3.8636'. [ 1075.528351][ T3963] FAULT_INJECTION: forcing a failure. [ 1075.528351][ T3963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1075.571695][ T3963] CPU: 1 UID: 0 PID: 3963 Comm: syz.4.8641 Not tainted syzkaller #0 PREEMPT(full) [ 1075.571725][ T3963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1075.571738][ T3963] Call Trace: [ 1075.571750][ T3963] [ 1075.571761][ T3963] dump_stack_lvl+0xe8/0x150 [ 1075.571791][ T3963] should_fail_ex+0x412/0x560 [ 1075.571824][ T3963] _copy_to_user+0x31/0xb0 [ 1075.571858][ T3963] simple_read_from_buffer+0xe1/0x170 [ 1075.571890][ T3963] proc_fail_nth_read+0x1bb/0x230 [ 1075.571922][ T3963] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1075.571953][ T3963] ? rw_verify_area+0x2a6/0x4d0 [ 1075.571982][ T3963] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1075.572012][ T3963] vfs_read+0x20c/0xa70 [ 1075.572048][ T3963] ? __pfx___mutex_lock+0x10/0x10 [ 1075.572076][ T3963] ? __pfx_vfs_read+0x10/0x10 [ 1075.572107][ T3963] ? __fget_files+0x2a/0x420 [ 1075.572160][ T3963] ? __fget_files+0x3a0/0x420 [ 1075.572185][ T3963] ? __fget_files+0x2a/0x420 [ 1075.572221][ T3963] ksys_read+0x150/0x270 [ 1075.572253][ T3963] ? __pfx_ksys_read+0x10/0x10 [ 1075.572292][ T3963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.572316][ T3963] do_syscall_64+0x15f/0xf80 [ 1075.572341][ T3963] ? trace_irq_disable+0x3b/0x140 [ 1075.572373][ T3963] ? clear_bhb_loop+0x40/0x90 [ 1075.572400][ T3963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.572423][ T3963] RIP: 0033:0x7f253bd5d60e [ 1075.572444][ T3963] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1075.572463][ T3963] RSP: 002b:00007f253cb8bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1075.572486][ T3963] RAX: ffffffffffffffda RBX: 00007f253cb8c6c0 RCX: 00007f253bd5d60e [ 1075.572502][ T3963] RDX: 000000000000000f RSI: 00007f253cb8c0a0 RDI: 0000000000000006 [ 1075.572516][ T3963] RBP: 00007f253cb8c090 R08: 0000000000000000 R09: 0000000000000000 [ 1075.572529][ T3963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1075.572542][ T3963] R13: 00007f253c016038 R14: 00007f253c015fa0 R15: 00007ffe75c8c278 [ 1075.572578][ T3963] [ 1076.558739][ T3989] netlink: 'syz.1.8648': attribute type 15 has an invalid length. [ 1076.574979][ T3993] netlink: 'syz.1.8648': attribute type 15 has an invalid length. [ 1076.696062][T14675] net_ratelimit: 62 callbacks suppressed [ 1076.696083][T14675] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1076.762838][T14675] bond3: (slave bridge6): failed to get link speed/duplex [ 1076.891951][T14675] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1076.933251][T31015] bond3: (slave bridge6): failed to get link speed/duplex [ 1077.032442][T14675] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1077.391826][ T4006] bridge7: entered promiscuous mode [ 1077.481790][T31015] bond3: (slave bridge6): failed to get link speed/duplex [ 1077.511903][T31015] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1077.601284][T31019] bond3: (slave bridge6): failed to get link speed/duplex [ 1077.641827][ T5809] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1077.712328][T31015] bond3: (slave bridge6): failed to get link speed/duplex [ 1077.905666][ T4040] __nla_validate_parse: 8 callbacks suppressed [ 1077.905686][ T4040] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8665'. [ 1077.924522][ T4035] wg1 speed is unknown, defaulting to 1000 [ 1078.179841][ T30] audit: type=1107 audit(1777696156.335:28): pid=4046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='A+lfh' [ 1078.423193][ T4056] xt_hashlimit: size too large, truncated to 1048576 [ 1078.575407][ T4063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8670'. [ 1078.940820][ T4073] veth1_to_team: entered promiscuous mode [ 1078.960722][ T4073] macsec1: entered promiscuous mode [ 1078.984629][ T4073] macsec1: entered allmulticast mode [ 1079.008908][ T4073] veth1_to_team: entered allmulticast mode [ 1079.045099][ T4073] veth1_to_team: left allmulticast mode [ 1079.061794][ T4073] veth1_to_team: left promiscuous mode [ 1079.230180][ T4084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8679'. [ 1079.268940][ T4084] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8679'. [ 1079.478148][ T4084] vlan5: entered allmulticast mode [ 1079.506127][ T4084] veth0_to_bond: entered allmulticast mode [ 1079.513297][ T4089] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8681'. [ 1079.719968][ T4099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8680'. [ 1079.757017][ T4099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8680'. [ 1079.794299][ T4099] netlink: 580 bytes leftover after parsing attributes in process `syz.4.8680'. [ 1079.848976][ T4110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8685'. [ 1079.901159][ T4110] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8685'. [ 1080.532733][ T4123] bond5: option ad_actor_sys_prio: invalid value (0) [ 1080.539671][ T4123] bond5: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1080.557868][ T4123] bond5 (unregistering): Released all slaves [ 1081.087998][ T4139] tipc: Enabled bearer , priority 0 [ 1081.109601][ T4139] syzkaller0: entered promiscuous mode [ 1081.134041][ T4139] syzkaller0: entered allmulticast mode [ 1081.329920][ T4139] tipc: Resetting bearer [ 1081.460764][ T4138] tipc: Resetting bearer [ 1081.522678][ T4138] tipc: Disabling bearer [ 1081.718649][ T4159] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1081.791739][T14675] net_ratelimit: 39 callbacks suppressed [ 1081.791760][T14675] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1081.861683][T14675] bond3: (slave bridge6): failed to get link speed/duplex [ 1081.962437][T31019] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1082.001089][ T79] bond3: (slave bridge6): failed to get link speed/duplex [ 1082.037155][ T4180] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1082.085142][ T79] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1082.142693][ T79] bond3: (slave bridge6): failed to get link speed/duplex [ 1083.116634][ T4201] __nla_validate_parse: 11 callbacks suppressed [ 1083.116658][ T4201] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8714'. [ 1083.363292][ T4208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8716'. [ 1083.455507][ T4208] geneve3: entered promiscuous mode [ 1083.461698][ T4208] geneve3: entered allmulticast mode [ 1083.481756][ T5809] bond3: (slave bridge6): failed to get link speed/duplex [ 1083.523307][T31015] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.537528][T31015] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.550064][ T4212] netlink: 'syz.1.8718': attribute type 8 has an invalid length. [ 1083.565609][T31015] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.584325][T31015] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.701949][ T4220] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8720'. [ 1083.714020][ T4220] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8720'. [ 1083.731527][T14675] bond3: (slave bridge6): failed to get link speed/duplex [ 1083.773821][ T4224] netlink: 'syz.0.8721': attribute type 1 has an invalid length. [ 1083.900710][ T4224] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1084.028568][ T4227] vlan2: entered promiscuous mode [ 1084.035370][ T4227] bond5: entered promiscuous mode [ 1084.040732][ T4227] vlan2: entered allmulticast mode [ 1084.048318][ T4227] bond5: entered allmulticast mode [ 1084.111315][T14675] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1084.254169][T31019] bond3: (slave bridge6): failed to get link speed/duplex [ 1084.266859][ T4245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8726'. [ 1084.892882][ T4268] netlink: 'syz.2.8731': attribute type 1 has an invalid length. [ 1084.918456][ T4268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8731'. [ 1084.986239][ T4268] ip6tnl3: entered allmulticast mode [ 1085.011907][ T79] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1085.382091][ T4286] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8736'. [ 1085.450333][ T4294] netlink: 'syz.2.8742': attribute type 1 has an invalid length. [ 1085.463463][ T4289] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8740'. [ 1085.484532][ T4289] netlink: 245 bytes leftover after parsing attributes in process `syz.0.8740'. [ 1085.573835][ T4294] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1085.656568][ T4299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8740'. [ 1086.142020][ T4316] netlink: 'syz.1.8746': attribute type 2 has an invalid length. [ 1086.794217][ T4337] macsec1: entered promiscuous mode [ 1086.799741][ T4337] bridge0: entered promiscuous mode [ 1086.934595][ T79] net_ratelimit: 36 callbacks suppressed [ 1086.934616][ T79] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1086.982639][ T79] bond3: (slave bridge6): failed to get link speed/duplex [ 1087.093304][T31019] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1087.137612][T31019] bond3: (slave bridge6): failed to get link speed/duplex [ 1087.331488][T14675] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1087.412228][ T79] bond3: (slave bridge6): failed to get link speed/duplex [ 1087.542796][T31019] bond3: (slave bridge6): failed to get link speed/duplex [ 1087.562025][T31019] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1087.664064][ T79] bond3: (slave bridge6): failed to get link speed/duplex [ 1087.701424][ T79] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1088.290828][ T5634] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1088.308419][ T5634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1088.318351][ T5634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1088.327715][ T5634] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1088.336551][ T5634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1088.515313][ T5638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1088.527224][ T5638] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1088.535989][ T5638] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1088.550664][ T5638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1088.560565][ T5638] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1089.020125][ T4435] bridge17: the hash_elasticity option has been deprecated and is always 16 [ 1089.053496][ T4439] __nla_validate_parse: 13 callbacks suppressed [ 1089.053535][ T4439] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8787'. [ 1089.100830][ T4435] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8787'. [ 1089.271256][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1089.389394][ T5809] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.473733][ T4451] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8791'. [ 1089.501726][ T4451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8791'. [ 1089.529306][ T4451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8791'. [ 1089.571157][ T4451] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8791'. [ 1089.706456][ T5809] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.778466][ T4470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8797'. [ 1089.897040][ T4470] geneve3: entered promiscuous mode [ 1089.983163][ T5809] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.032634][ T4418] wg1 speed is unknown, defaulting to 1000 [ 1090.188427][ T5809] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.552736][ T5809] vlan4: left allmulticast mode [ 1090.595169][ T5809] vlan4: left promiscuous mode [ 1090.608045][ T5809] bridge0: port 5(vlan4) entered disabled state [ 1090.634798][ T5638] Bluetooth: hci2: command tx timeout [ 1090.657679][ T5809] erspan0: left allmulticast mode [ 1090.679999][ T5809] erspan0: left promiscuous mode [ 1090.692265][ C1] ------------[ cut here ]------------ [ 1090.699998][ C1] ODEBUG: free active (active state 0) object: ffff8880564eda78 object type: timer_list hint: br_ip6_multicast_port_query_expired+0x0/0x380 [ 1090.714399][ C1] WARNING: lib/debugobjects.c:632 at debug_check_no_obj_freed+0x405/0x550, CPU#1: syz-executor/4496 [ 1090.725286][ C1] Modules linked in: [ 1090.731341][ C1] CPU: 1 UID: 0 PID: 4496 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1090.740850][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1090.751101][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 1090.757502][ C1] Code: 89 44 24 20 e8 47 58 74 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 20 b2 28 8c 48 c7 c2 a0 b7 28 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 1090.777210][ C1] RSP: 0018:ffffc90000a08c70 EFLAGS: 00010246 [ 1090.783363][ C1] RAX: ffffffff8a7da740 RBX: ffffffff9a65def8 RCX: 0000000000000000 [ 1090.791427][ C1] RDX: ffffffff8c28b7a0 RSI: ffffffff8c28b220 RDI: ffffffff903b85e0 [ 1090.799446][ C1] RBP: ffffffff8bcf3a20 R08: ffff8880564eda78 R09: ffffffff8bcf4d80 [ 1090.804406][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1090.807597][ C1] R10: dffffc0000000000 R11: ffffffff81b20990 R12: ffff8880564edc00 [ 1090.823015][ C1] R13: ffffffff903b85e0 R14: ffff8880564ed000 R15: ffff8880564eda78 [ 1090.831084][ C1] FS: 0000555584fd7500(0000) GS:ffff888125390000(0000) knlGS:0000000000000000 [ 1090.840068][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1090.846739][ C1] CR2: 00007f253bdada40 CR3: 000000004ae6a000 CR4: 00000000003526f0 [ 1090.854802][ C1] Call Trace: [ 1090.858123][ C1] [ 1090.861042][ C1] ? __pfx_br_ip6_multicast_port_query_expired+0x10/0x10 [ 1090.868127][ C1] kfree+0x13e/0x640 [ 1090.872123][ C1] ? __se_sys_symlinkat+0x4e/0x2b0 [ 1090.877287][ C1] ? kobject_put+0x228/0x560 [ 1090.881970][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.888095][ C1] kobject_put+0x228/0x560 [ 1090.892610][ C1] ? rcu_core+0x751/0x1070 [ 1090.897075][ C1] ? __pfx_destroy_nbp_rcu+0x10/0x10 [ 1090.902469][ C1] rcu_core+0x7cd/0x1070 [ 1090.906778][ C1] ? __pfx_rcu_core+0x10/0x10 [ 1090.911575][ C1] handle_softirqs+0x22a/0x840 [ 1090.916398][ C1] ? __irq_exit_rcu+0xca/0x220 [ 1090.921267][ C1] __irq_exit_rcu+0xca/0x220 [ 1090.925921][ C1] irq_exit_rcu+0x9/0x30 [ 1090.930240][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1090.935969][ C1] [ 1090.938939][ C1] [ 1090.941952][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1090.947985][ C1] RIP: 0010:generic_permission+0x7/0x690 [ 1090.953718][ C1] Code: c1 7c b9 4c 89 f7 e8 68 5b eb ff eb af 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 <41> 56 41 55 41 54 53 48 83 ec 30 41 89 d4 49 89 f5 48 89 7c 24 08 [ 1090.973422][ C1] RSP: 0018:ffffc900038579b8 EFLAGS: 00000293 [ 1090.979541][ C1] RAX: ffffffff82459483 RBX: 1ffff11007b5b6f1 RCX: ffff88802f7dbd80 [ 1090.987605][ C1] RDX: 0000000000000081 RSI: ffff88803dadb788 RDI: ffffffff8eae9ac0 [ 1090.995703][ C1] RBP: 0000000000000001 R08: ffff88802f7dbd80 R09: 0000000000000002 [ 1091.003764][ C1] R10: 000000000000002f R11: 0000000000000000 R12: ffff88803dadb78a [ 1091.011832][ C1] R13: ffff8880a432a000 R14: ffff88803dadb788 R15: 0000000000000081 [ 1091.019868][ C1] ? inode_permission+0x233/0x5f0 [ 1091.025024][ C1] inode_permission+0x243/0x5f0 [ 1091.029938][ C1] link_path_walk+0xc2d/0x18d0 [ 1091.034838][ C1] __filename_parentat+0x27f/0x6f0 [ 1091.040007][ C1] ? __pfx___filename_parentat+0x10/0x10 [ 1091.045809][ C1] filename_create+0xd9/0x370 [ 1091.050562][ C1] ? __pfx_filename_create+0x10/0x10 [ 1091.055966][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.062112][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.068227][ C1] filename_symlinkat+0xf7/0x410 [ 1091.073261][ C1] ? __pfx_filename_symlinkat+0x10/0x10 [ 1091.078861][ C1] ? do_getname+0x151/0x250 [ 1091.083444][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.089553][ C1] __se_sys_symlinkat+0x4e/0x2b0 [ 1091.094574][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.100684][ C1] do_syscall_64+0x15f/0xf80 [ 1091.105382][ C1] ? trace_irq_disable+0x3b/0x140 [ 1091.110470][ C1] ? clear_bhb_loop+0x40/0x90 [ 1091.115246][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.121219][ C1] RIP: 0033:0x7f253bd9be97 [ 1091.125684][ C1] Code: 44 00 00 48 89 f2 31 c9 48 89 fe bf 9c ff ff ff e9 8e f5 ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1091.145393][ C1] RSP: 002b:00007ffe75c8c5d8 EFLAGS: 00000206 ORIG_RAX: 000000000000010a [ 1091.153915][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f253bd9be97 [ 1091.161994][ C1] RDX: 00007f253be33d22 RSI: 00000000ffffff9c RDI: 00007ffe75c8c670 [ 1091.170013][ C1] RBP: 00007ffe75c8c61c R08: 0000000000000001 R09: 00000000ffffffff [ 1091.178080][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000023f [ 1091.186166][ C1] R13: 00000000000927c0 R14: 000000000010a41d R15: 00007ffe75c8c670 [ 1091.194269][ C1] [ 1091.197375][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1091.204700][ C1] CPU: 1 UID: 0 PID: 4496 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1091.214199][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1091.224291][ C1] Call Trace: [ 1091.227596][ C1] [ 1091.230462][ C1] vpanic+0x56c/0xa60 [ 1091.234484][ C1] ? __pfx__printk+0x10/0x10 [ 1091.239099][ C1] ? __pfx_vpanic+0x10/0x10 [ 1091.243624][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 1091.248928][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1091.254151][ C1] panic+0xc5/0xd0 [ 1091.257902][ C1] ? __pfx_panic+0x10/0x10 [ 1091.262353][ C1] __warn+0x315/0x4c0 [ 1091.266352][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 1091.272094][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 1091.277840][ C1] __report_bug+0x29a/0x540 [ 1091.282370][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1091.287503][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 1091.293248][ C1] ? __pfx___report_bug+0x10/0x10 [ 1091.298295][ C1] ? do_syscall_64+0x15f/0xf80 [ 1091.303082][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.309184][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1091.315381][ C1] report_bug_entry+0x19a/0x290 [ 1091.320254][ C1] ? debug_check_no_obj_freed+0x44a/0x550 [ 1091.326000][ C1] ? debug_check_no_obj_freed+0x44f/0x550 [ 1091.331753][ C1] handle_bug+0xce/0x200 [ 1091.336020][ C1] exc_invalid_op+0x1a/0x50 [ 1091.340556][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1091.345421][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 1091.351768][ C1] Code: 89 44 24 20 e8 47 58 74 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 20 b2 28 8c 48 c7 c2 a0 b7 28 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 1091.371388][ C1] RSP: 0018:ffffc90000a08c70 EFLAGS: 00010246 [ 1091.377478][ C1] RAX: ffffffff8a7da740 RBX: ffffffff9a65def8 RCX: 0000000000000000 [ 1091.385466][ C1] RDX: ffffffff8c28b7a0 RSI: ffffffff8c28b220 RDI: ffffffff903b85e0 [ 1091.393452][ C1] RBP: ffffffff8bcf3a20 R08: ffff8880564eda78 R09: ffffffff8bcf4d80 [ 1091.401455][ C1] R10: dffffc0000000000 R11: ffffffff81b20990 R12: ffff8880564edc00 [ 1091.409454][ C1] R13: ffffffff903b85e0 R14: ffff8880564ed000 R15: ffff8880564eda78 [ 1091.417447][ C1] ? __pfx_timer_debug_hint+0x10/0x10 [ 1091.422843][ C1] ? __pfx_br_ip6_multicast_port_query_expired+0x10/0x10 [ 1091.429906][ C1] ? __pfx_br_ip6_multicast_port_query_expired+0x10/0x10 [ 1091.436962][ C1] kfree+0x13e/0x640 [ 1091.440879][ C1] ? __se_sys_symlinkat+0x4e/0x2b0 [ 1091.446004][ C1] ? kobject_put+0x228/0x560 [ 1091.450613][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.456711][ C1] kobject_put+0x228/0x560 [ 1091.461182][ C1] ? rcu_core+0x751/0x1070 [ 1091.465635][ C1] ? __pfx_destroy_nbp_rcu+0x10/0x10 [ 1091.470950][ C1] rcu_core+0x7cd/0x1070 [ 1091.475236][ C1] ? __pfx_rcu_core+0x10/0x10 [ 1091.479947][ C1] handle_softirqs+0x22a/0x840 [ 1091.484739][ C1] ? __irq_exit_rcu+0xca/0x220 [ 1091.489532][ C1] __irq_exit_rcu+0xca/0x220 [ 1091.494145][ C1] irq_exit_rcu+0x9/0x30 [ 1091.498410][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1091.504077][ C1] [ 1091.507024][ C1] [ 1091.509970][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1091.515976][ C1] RIP: 0010:generic_permission+0x7/0x690 [ 1091.521629][ C1] Code: c1 7c b9 4c 89 f7 e8 68 5b eb ff eb af 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 <41> 56 41 55 41 54 53 48 83 ec 30 41 89 d4 49 89 f5 48 89 7c 24 08 [ 1091.541250][ C1] RSP: 0018:ffffc900038579b8 EFLAGS: 00000293 [ 1091.547340][ C1] RAX: ffffffff82459483 RBX: 1ffff11007b5b6f1 RCX: ffff88802f7dbd80 [ 1091.555351][ C1] RDX: 0000000000000081 RSI: ffff88803dadb788 RDI: ffffffff8eae9ac0 [ 1091.563368][ C1] RBP: 0000000000000001 R08: ffff88802f7dbd80 R09: 0000000000000002 [ 1091.571378][ C1] R10: 000000000000002f R11: 0000000000000000 R12: ffff88803dadb78a [ 1091.579386][ C1] R13: ffff8880a432a000 R14: ffff88803dadb788 R15: 0000000000000081 [ 1091.587413][ C1] ? inode_permission+0x233/0x5f0 [ 1091.592506][ C1] inode_permission+0x243/0x5f0 [ 1091.597405][ C1] link_path_walk+0xc2d/0x18d0 [ 1091.602222][ C1] __filename_parentat+0x27f/0x6f0 [ 1091.607384][ C1] ? __pfx___filename_parentat+0x10/0x10 [ 1091.613090][ C1] filename_create+0xd9/0x370 [ 1091.617810][ C1] ? __pfx_filename_create+0x10/0x10 [ 1091.623139][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.629232][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.635325][ C1] filename_symlinkat+0xf7/0x410 [ 1091.640297][ C1] ? __pfx_filename_symlinkat+0x10/0x10 [ 1091.645866][ C1] ? do_getname+0x151/0x250 [ 1091.650389][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.656551][ C1] __se_sys_symlinkat+0x4e/0x2b0 [ 1091.661513][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.667606][ C1] do_syscall_64+0x15f/0xf80 [ 1091.672224][ C1] ? trace_irq_disable+0x3b/0x140 [ 1091.677280][ C1] ? clear_bhb_loop+0x40/0x90 [ 1091.681986][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.687907][ C1] RIP: 0033:0x7f253bd9be97 [ 1091.692350][ C1] Code: 44 00 00 48 89 f2 31 c9 48 89 fe bf 9c ff ff ff e9 8e f5 ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1091.712069][ C1] RSP: 002b:00007ffe75c8c5d8 EFLAGS: 00000206 ORIG_RAX: 000000000000010a [ 1091.720525][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f253bd9be97 [ 1091.728537][ C1] RDX: 00007f253be33d22 RSI: 00000000ffffff9c RDI: 00007ffe75c8c670 [ 1091.736537][ C1] RBP: 00007ffe75c8c61c R08: 0000000000000001 R09: 00000000ffffffff [ 1091.744530][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000023f [ 1091.752518][ C1] R13: 00000000000927c0 R14: 000000000010a41d R15: 00007ffe75c8c670 [ 1091.760527][ C1] [ 1091.764456][ C1] Kernel Offset: disabled [ 1091.768784][ C1] Rebooting in 86400 seconds..