last executing test programs: 6m12.587195224s ago: executing program 3 (id=5325): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000001480)=0x80000000003, 0x12) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x6, 0x4, 0x2, 0x4}, 0x50) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007300000018110000", @ANYRES8=r0, @ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f00000004c0)=0xa, 0x4) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x8, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x48) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r1) 6m12.421064929s ago: executing program 3 (id=5327): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100000000000000000000000019000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) 6m12.327829584s ago: executing program 3 (id=5332): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="174751d11114136ed13ac9300c1cbbf42ac414b5d6c8eee3f080bc81811fb2408cc7a5f6d7c0f9a3a74774001541e2773034296766f948f570257b68ce6d9d0afc088afec36d0f3bb8228022e542ba902667d3dffbf17d96231177008721bf67c201d1e46b3c3211355916bdabe74a5efe6e5b04368680cc9cf721453ea8f15e9194bebe292403cf34c1eebcdf7b14ed6b2a5d83b3082462b9a13a624f08a90b59978400c2d9f96fb3264dd9045b68c27a411668aace69461942dc2a86279bef17c86aeee422be901aa1cedce5056b6dcd153a642c8597102fc5551044447e2ed6810b1ef9ed4c", 0xe7}, {&(0x7f0000000080)="4aa29c13ce6407f6243901b74b828697e549190817ee8897723f3230141403a598969d", 0x23}, {&(0x7f0000000200)="b3b2900235f48724ca7f26c339db5bfcd469b4b2e79ee4c397daf234e216e08f90b43d7c2cdf283dffec578a5d7209cea2fc9e5f13c8187f5544f94afa3bde4d406828380721bb927f0e2f306ed0b9a74e124c0edf3eea642709bd0438dc282f322e6428a21a", 0x66}, {&(0x7f0000000380)="162afa96b35faadb9302919c6abb30dce61662ae4eca348b130f7565af5110f9c4727b580c67baecac79fd6c4da619a4f8f6c955b818a93b4c1669db81ecb5c768f559be76e01c383e0089b484bff604f54bf02a189a6f1965786a24935bc46312510a2511674a8ec7acdd09d847ab94be7c754bd3abe6614ab1b14d7aead885862547189f1159f05d9c275fe8132a7f5bd6640a65c3110c9635af51146566d3fbdc3d0cd20381848d2c67e985ac701a633862b60d9a009a92d8773323968cb9a6493c42182a699f2d82c39dafa121e3f35b383f102661a4edaeb34d4ec01f272df754aae022f6", 0xe7}], 0x4, 0x0, 0x0, 0x20008004}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000884}, 0x4000) 6m12.126590998s ago: executing program 3 (id=5335): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xf}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x140d, 0x8, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8010}, 0x20008014) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000007b80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 6m11.947230812s ago: executing program 3 (id=5340): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000004000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005000000000000000000000000000000000000000000333b228874c6c2f8cea21c2f678ad53ee89817d3458802c7abdd0f1b67f7f0ff3675fa6fc1a0e99c1a0eebfbc0afe7e9b552ba76c14c2964de866ba3d47c0ec0cd8399283a64e0b574d01dcd9dc36e9fb3edd4ddb08d27b39db77e87b3"], 0xfc}}, 0x0) (async) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000380)=@l2tp={0x2, 0x0, @broadcast, 0x4}, 0x80, 0x0}, 0x20000810) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x44b, 0x70bd28, 0x0, {0x7a, 0x0, 0x0, r6, 0x0, 0x12}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x1b}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x30008095}, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x8901, &(0x7f0000000040)) (async, rerun: 64) sendmsg$inet(r2, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000080)="90", 0x1}], 0x1}, 0x24004011) (rerun: 64) 6m11.760895346s ago: executing program 3 (id=5343): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)="de00c6f79b3f86d29434f16a537e2eb110c74b2756f3582898e368586b78337c307b0ad5b24758345939026904a63d965b894280ef336154daebc0a6988eb043f8d16be23ecb6d30e1582b0bd3fc07a7cbbb014616f530801d26079884ccaa7f11a930e192f2ff8d3524009c72a1ee91bcb34205c232619d88d285029f292a23c710145d5247ca628a131ea289b1ef7cc1c809c528c860b35d9ec62dd58ec354fa005ef0793149b42736182ea865ae66f47f6a3a7002e99a0541d5842bc33ee127e40a20ecfe430e7928a75e009217d40572cb62abfd22d4b76e1fb1888b00"/236, &(0x7f0000000100)="38f410b650220a8a7c41b00e51619c42e5f542638fd7d66f75313218186370680a36359abf5d1846c658dce6d4930c38935ce68757a3c3bf81dd19a08f1837e0e0078f9d96cba4683b0d42d9e33bcc0bf064c5966117fccfac6c3b8b79544e269ab14802e893fa74ef7b14ae8c3138f6d457550df43c5176c106a00e21658d62eb934dc8abe56b76c9", 0x4000619, r1}, 0x38) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800}, 0x38) 5m56.57175802s ago: executing program 32 (id=5343): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)="de00c6f79b3f86d29434f16a537e2eb110c74b2756f3582898e368586b78337c307b0ad5b24758345939026904a63d965b894280ef336154daebc0a6988eb043f8d16be23ecb6d30e1582b0bd3fc07a7cbbb014616f530801d26079884ccaa7f11a930e192f2ff8d3524009c72a1ee91bcb34205c232619d88d285029f292a23c710145d5247ca628a131ea289b1ef7cc1c809c528c860b35d9ec62dd58ec354fa005ef0793149b42736182ea865ae66f47f6a3a7002e99a0541d5842bc33ee127e40a20ecfe430e7928a75e009217d40572cb62abfd22d4b76e1fb1888b00"/236, &(0x7f0000000100)="38f410b650220a8a7c41b00e51619c42e5f542638fd7d66f75313218186370680a36359abf5d1846c658dce6d4930c38935ce68757a3c3bf81dd19a08f1837e0e0078f9d96cba4683b0d42d9e33bcc0bf064c5966117fccfac6c3b8b79544e269ab14802e893fa74ef7b14ae8c3138f6d457550df43c5176c106a00e21658d62eb934dc8abe56b76c9", 0x4000619, r1}, 0x38) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800}, 0x38) 2.630130111s ago: executing program 4 (id=9353): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) (async) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000010651fbe347b322b00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e23, 0xfffffffe, @mcast1, 0x87}}, 0x0, 0x0, 0x3a, 0x0, "276148cd1259e41d8f0ffd4be8b6d180a19ecb3e60c92e9fe908c95534a69b91fe9e2770ba387440609895d7fbb1c08bdfd96493f4fc1810d150cc3f2bbd548044dcec63bc8b2168c59e27175814071e"}, 0xd8) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r12) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r13, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x38}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 2.459308729s ago: executing program 2 (id=9355): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x17, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x2004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0x2, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) bind$802154_dgram(r1, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x24040080) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x28, r9, 0x60b, 0x74bd2d, 0x4000, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}]}, 0x28}, 0x1, 0x8000000, 0x0, 0x1}, 0x0) 2.423816633s ago: executing program 4 (id=9357): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000008001000040000000700000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x8, r2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r2}, 0x38) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f0000000500)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x25, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0x11, 0x0, @opaque="87fc4f59a62c5eadc8"}}}, 0x33) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000006a0083130000000000000000000000000000000008000500d768d9f8"], 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000008002800babc00005c0016805800018054000c"], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600fc000000000000000000000000000000ff02000000000000200000000000000100004001a7416530ea8da7fae882fa7d6a1ace6392d5a3fd", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000090780000"], 0x0) 2.258053411s ago: executing program 0 (id=9358): r0 = socket(0x25, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x3c0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xc0, 0x3e, 0x2, 0x70bd2b, 0x25dfdbff, {0x7}, [@typed={0xc, 0x6e, 0x0, 0x0, @u64=0x11f}, @typed={0xb, 0x139, 0x0, 0x0, @str='}+}^)/\x00'}, @generic="86cf5702f01aee3948c7d9aa931211b21044f9dfa67e3183ef21106252c5d8db6ff0d6b636a76df575727f0b70d10261d6c0830cf3d30c11bc08d53599f55df34c9cd76a44538b35c759e54f475574547597a92b54199ba8322037a70fcecb2bc488e3eebf4652d7b93491dbf3d487d9760f871760cb773266860899ebe931958c3b019b5950c8e2a6fe72430b0b3bd6f0d10b"]}, 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x69}}, &(0x7f0000000000)='GPL\x00'}, 0x90) bind$alg(r0, &(0x7f0000000a00)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) r3 = socket$kcm(0x29, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000680)) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000309000000000000004000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x40088c0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRES8, @ANYBLOB="f0401ee120ea0b51fd065ec41d04c86ec7b3b33167f04141f9aa732ba4afac8c9ac314342ab175d11ca49a377eef0b130dc6cd415268ff08c5ebc1d12a458a11c145ecfc7f5977c370723d43bd9704fd4bfab845814c3612c59272e04d2515befbae667a4978dfb4ee64fb02f3070070a15940316d141c1f3fcc696247090078dbba4a1822a84ffc68d0b8e7805702324d4fc658e1fa433ae64a85de13785afcb80cbf95038c0c1ba90a3fbb252d9297aa7bbbbaca688405b416d0640f2a550e351880b1c9a93e57bd1192d92347bc0715065179bc027458db37aabb7a6b33044c4678d1d2971ddfe7b43c5063019f", @ANYRESDEC=r6, @ANYRES32=r3], 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) recvmmsg$unix(r6, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000008c0)=""/89, 0x59}, {&(0x7f0000000200)=""/252, 0xfc}], 0x2}}], 0x2, 0x10000, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400030400000000000000542d"], 0x44}}, 0x0) 2.040807802s ago: executing program 2 (id=9361): syz_emit_ethernet(0x7e, &(0x7f0000000440)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x44, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, [@hopopts={0x11}], "bf0c7de8ed8f6ec5402a1859"}}}}}}}, 0x0) socketpair(0x15, 0x1, 0x24800000, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x4c, r2, 0x1, 0xfffffffd, 0x25dfdbfc, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab}}, {0x8}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x1) syz_emit_ethernet(0x5e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd00283a000000000072000000bbff0200000000000000000000000000018900907800000000fe8800000000000000000000000000010002122b472e41e24b11f343608816e5847bce9108"], 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5f}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xff}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004005}, 0x20004041) 1.96315448s ago: executing program 2 (id=9363): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) preadv(r0, &(0x7f0000002840)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x757b, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, 0x0, &(0x7f0000000000)=0xfffffffffffffea1) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSETELEM={0x954, 0xe, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x934, 0x3, 0x0, 0x1, [{0x30c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1000}, @NFTA_SET_ELEM_KEY_END={0x100, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x50, 0x1, "27cdc7aa1942dcdc56ba5379bda6f369b0ae7a88537d0e187d93b413a13205aef2fdb155f09b95174dce9375e5021c718d40442a2c7f6e9f72160c5cd9b978adc54897c4018aefa1bd8b0b1a"}, @NFTA_DATA_VALUE={0x25, 0x1, "134e246ac96269da1f85b3c115eac18a53c27785de08ce9433caab27b1cf2f7911"}, @NFTA_DATA_VALUE={0x1d, 0x1, "2b1b319412a085c11c6a5f53f3259c0b0c99e0b5fdc81207bf"}]}, @NFTA_SET_ELEM_KEY={0x1fc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe3, 0x1, "3299ce482f5c5dcc69bdaec2c93791c51ad23807458fd0e1ea8410b3ce3e6fa348e493366f9417a2e297647597a9e7533cb65162d1f3119c38ca2ad2c2b1104a37e04d4ea97c865d457ae4a5b48993e77736e5b0b3ff0c6021efe98a9c62116a1a5f47ed3e0fd93f780bf060fbef973867c04ff1d80be87af45feac93bf84b861134256408452077ca6e494f8edffcf7a9c8c0f7f4bb09ff017b94fb9368ef4cd903b77e7821c6287fc1ad2bd6a5854ed5740b890668203c54279564046c176bb64c3071943ba9a3f41e22a9de60e9dfb8df040644733546b733a5eb81c8ad"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xa7, 0x1, "81f95d6abac9f4cfc3405fc64e20eb6386453ddcda723e89b84afe6852e3d5e25a7db6c1fc200b1cc18a06a13e58e6d6436bca85d2b989ac83be0b8597e717a7cc2ce1f67e7a160e97240a065dbc173280092dd7294f5dd975a7d83fb79a38f8e9a9cdf5cc0635219cd851b1816318317d50b87d2abd5f20fcdeec1c8f26b20c9bb65df1021be567d101b89a63d0dbcf80747ef6aeb0e45da0e83f2585b1586965d2e1"}]}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3ff6fcf324fa281}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}, {0x378, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x2f4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x79, 0x1, "b3bf5ce3de5056a438a679271d8b206d144e43c238666de38e84e7184138d53fa9a7d93b0ea56103ca0ae1b3bf349a77de45bbad952a3d08219c0152c7c8334a9200cf0a1e5b0ae2083b11654b30ee30d59b2cd708cf2fa739a4fb175583ad802256d1bf27de150a357a3a58f1269e1438d75d7f92"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1e, 0x1, "0a5f2e93c3632851859c5c6b4b65a8e639e95a27f63fbc919757"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}]}, @NFTA_DATA_VALUE={0xd0, 0x1, "9d4b0ed15361c469bb0e1d8ba4685a81c335e1242a38bb18ba011bb4d49d480bc1d6b5fa4edd2dd612b4071bbeddad759815191bb37255fd3b707b40cfcc87d6a741db104680e4f5aaeb703ed1c5743b1e11723752e23246faf846b180cd66eec51c0a96551300a610a794853a4f880f19162292124b056ec43e1bbc8de87544908bbcf4ab0161273d1f14d4ffba7bca69cc1a7eb097cc79f8eb05bd9f622944b558c1a086fe5daf6131436dfd4499aabdfb26a783698ca2ec0a8a2735c765495ddbd7e2340ce2d355cf1c25"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x2a, 0x1, "991b45dafe9c7c0b4eb9abdc4ef987caa7796907518c8dccdb263f118f6bf1ccaebbcc5d97cf"}]}, @NFTA_SET_ELEM_USERDATA={0x9, 0x6, 0x1, 0x0, "9e0d255564"}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_KEY_END={0x30, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @socket={{0xb}, @void}}]}, {0x54, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x50, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, {0x240, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x10000}, @NFTA_SET_ELEM_USERDATA={0x32, 0x6, 0x1, 0x0, "b710a77f4d77c2946b74f14084774410c1a23e4324bfae347f5fb1ec72e3e49767b488e55c4d074f5d4e6482d575"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x65}, @NFTA_SET_ELEM_KEY_END={0x1d8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xa0, 0x1, "5b0bb26f61eeeca20f8080c8ae4a38a924b71b1a650b53ce71746a26657fb1a274c07683e020b2520877df15da797c5a6bd1933a5691656b536fc36727988238f908779e8315d05f19938e21aea5ca3cc837dad6fb6936b6e99c0c58cf9b511b9a3e0a32dfcfffde7dbd807fcc01e34699aa56aa68dadca6edeb9159c58967e086fc43cdf3b77eba76fea7d8c76790ca5c1bf43594b845c9aab8fae0"}, @NFTA_DATA_VALUE={0xde, 0x1, "a5ad2b702ad2b92af3364cac3e4ee204bcd128e5a036151f7cc8836d3d083e7f0d006bc392e993cbcd6b7641e6910c94d375e3c2f65a95f0ffa360ffca204510bd70372216a5aaa93196d91fa3774b3e5ddd7a81c6922c020092317fff64c4b6c282bb3558298609b3fc4ca2df2a3584bd0758462619ec7bc4aaa5aab2109c6a66735cadd2b245a7f7c333f576d83ede47dac9cc10c01922322b8049e3eb8be301fb46bf411e345d59b893a975dd539cf06d9e2067b17db7fd2301972afa5985ee84f7866daedc7657ce0e4a688e28917c3fdaa6b041f72e4e9c"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xc}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x97c}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000100)=""/45, &(0x7f0000000140)=0x2d) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002ac0)=@newtfilter={0x840, 0x2c, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x2}, {0x7, 0xf}, {0xfff2, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x810, 0x2, [@TCA_CGROUP_POLICE={0x80c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x13, 0x800, 0x4, 0x7, 0x8000, 0x73446b73, 0x7, 0x9, 0x6, 0x0, 0x1, 0x2, 0x7fff, 0x2, 0x5, 0x7, 0x5, 0x6, 0x3, 0xd, 0x2, 0xdc, 0x200, 0x5, 0xfffffff8, 0x401, 0x2, 0x2000, 0x4, 0x9, 0x1, 0x2, 0x48aa, 0xdd3, 0x400, 0x5404, 0x10000, 0x5, 0x4, 0xf, 0x0, 0x8, 0x4, 0x4, 0xffffff2d, 0x5, 0x200, 0x4, 0x7, 0x1d, 0x8, 0x6, 0x7, 0x240000, 0x2, 0x4, 0x1, 0x0, 0x4, 0x8, 0x1, 0x7ff, 0x10, 0x1, 0x9, 0x8, 0x0, 0xe3bb, 0x9, 0x4, 0x8, 0x81, 0x9, 0xac26, 0x9, 0x0, 0x5, 0x5, 0x3, 0x3, 0x7fff, 0x9, 0x1, 0x5, 0x7d8, 0xfe, 0x8, 0x2, 0x401, 0x100, 0x1, 0x2, 0x6, 0x5, 0x5dde, 0x3, 0xfe61, 0x9, 0x807f, 0x7, 0x1, 0xfffffffc, 0x4, 0x0, 0x2, 0xd2f, 0x7, 0xf, 0xa, 0x7631, 0x4, 0x80000000, 0x3, 0x3, 0x95c2, 0x5, 0x5, 0x3, 0x2, 0x362b, 0xd, 0x1, 0xc92, 0xfff, 0x375, 0xcb, 0xb, 0xb815, 0x5, 0x9, 0x7, 0x3, 0x33e, 0x3, 0x800, 0x4, 0x0, 0x401, 0x10000, 0x8e, 0x8, 0x7, 0xfffffc01, 0x9, 0xa2, 0x6, 0x7, 0x932, 0x6, 0x6a3, 0x2, 0x6, 0x8, 0x80, 0x10001, 0x2, 0x8, 0x7fff, 0x2, 0x4c, 0x2, 0x2c, 0x7, 0x0, 0x1, 0x7fffffff, 0x4d, 0x5a442e5c, 0x400001, 0x10000, 0x8, 0x8, 0x8001, 0x10001, 0xae, 0x7, 0xc8, 0x5, 0x81, 0x6, 0x433, 0x8, 0x2, 0x6, 0x4b25, 0x8001, 0x5, 0x4, 0x8, 0x0, 0x79e, 0x10000, 0x4, 0x7946, 0x8870, 0x100, 0x3, 0x9, 0x1, 0x5, 0x81, 0x3, 0x7ff, 0x8, 0xa2, 0x1, 0x0, 0xd, 0x7, 0x92b, 0x3, 0x8, 0x8, 0x0, 0x400, 0x2, 0x8ff3, 0x0, 0x3, 0x7fffffff, 0x7, 0x4, 0x9, 0xfffffff7, 0x1, 0x4, 0x4, 0x1, 0x7fff, 0x2, 0x9, 0x6, 0x5f9, 0x6, 0x401, 0x0, 0x1, 0x40, 0x7, 0x2f, 0x8, 0x1, 0x80000000, 0x1, 0x4, 0x81, 0x10000, 0x6, 0x92f, 0xb, 0xa3, 0x8, 0x62d4d7a3, 0x2, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x7, 0x4, 0x5, 0xfffffffc, 0x1, 0x9, 0x4, 0x4, 0x3, 0x3, 0x200, 0x0, 0x6, 0x3, 0x7, 0x0, 0x5ef, 0x9, 0x6, 0xfffffff8, 0x1, 0x2, 0x0, 0x4, 0x0, 0x5, 0x9, 0x0, 0x42, 0x8, 0x9, 0xe09, 0x800, 0x4, 0x1, 0x7ff, 0x0, 0x6, 0x10001, 0x0, 0x423e573a, 0x9, 0x7, 0x2, 0x1, 0x6, 0x6, 0x9, 0x2, 0xfff, 0x40, 0xffff7fff, 0x2, 0x6dc, 0x9f, 0x7fffffff, 0xa, 0xb, 0xe0000000, 0x3, 0x6, 0xf, 0x3, 0x10, 0x4000000, 0x0, 0x10000, 0x8001, 0x9, 0x3, 0x1, 0x1ff, 0x8d14, 0x401, 0xffff, 0x10002, 0x6, 0x3180, 0x8, 0x8, 0x1f1, 0xffff7fff, 0x8, 0x81, 0x40400, 0x0, 0x2, 0x150, 0x7, 0x9, 0x8, 0x9, 0x9fa0, 0x3, 0xd97c, 0xf, 0x4, 0xd7, 0x2, 0x4, 0x6, 0x7f, 0x6, 0xa, 0x2, 0x97, 0xfffffff8, 0x1, 0x3, 0xa, 0xffffffb5, 0x8, 0x8, 0x7, 0x10, 0x0, 0x990, 0x3, 0xff, 0x400, 0x6, 0x7, 0xfff, 0x3, 0x1, 0x7, 0xc9f, 0x7, 0x0, 0x2, 0x569, 0x9, 0xffffff59, 0x95, 0x2, 0x8, 0x1f0, 0x5, 0x4, 0x7, 0x163025b1, 0xffff, 0x3498, 0x7, 0x5, 0x4d3, 0xffffff0f, 0x8, 0x81c, 0x3, 0x1, 0x1, 0x401, 0xfffffffc, 0x7, 0x6a8, 0x9, 0x8, 0xb, 0x7fffffff, 0x3, 0x7502, 0x0, 0x40, 0x7fffffff, 0x10, 0xde, 0x0, 0x697f, 0xc, 0x2, 0x0, 0x40, 0x3, 0x8, 0xaed, 0x7, 0x12, 0xffffffff, 0x8, 0x8, 0x9, 0x80000000, 0xffffff98, 0x200, 0x4, 0x6, 0xfffffde1, 0x1, 0xc0c, 0x81, 0x7fffffff, 0x8, 0x9f0, 0x80000001, 0x5, 0xa, 0x8, 0x81, 0x9, 0x1, 0x10001, 0x1, 0xa, 0x80000000, 0xffffac00, 0xb, 0xd31, 0x4, 0x4, 0xaa8b, 0x6, 0x7fff, 0x3bc, 0x10000, 0x3d7b, 0x3c, 0xfffffffc, 0x1b, 0xffffffb3, 0xf, 0x3, 0x2, 0x0, 0x7f, 0x8000, 0x4dd4, 0x2, 0x800, 0x6, 0x1ff, 0x50, 0x109d, 0x10001, 0xe11, 0x1000000, 0x20d, 0xa88, 0x1ff, 0x24f, 0xc, 0x1, 0x100, 0x2, 0x5, 0xbc3d, 0x2, 0xfffffffa, 0x4, 0x2, 0x9, 0x5, 0x1, 0x101]}]}]}}]}, 0x840}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000080)={0x1, 0x5, 0xb, 0x2, 0xc0, 0x7, 0xea, 0x10, 0x0, 0x1, 0x2, 0x7, 0x0, 0x5}, 0xe) 1.836578632s ago: executing program 2 (id=9364): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="620ac4ff00000000711009000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600894f0000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000008800000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'dvmrp1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711219000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r6 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r6, &(0x7f0000000380)={0x2, 0x0, @rand_addr=0x64010101, 0x3}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "74016aff130000fd"}, 0x38) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01"], 0x100}, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r7, 0x29, 0x45, &(0x7f00000003c0)={'NETMAP\x00'}, &(0x7f0000000400)=0x1e) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) bind$tipc(r8, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%pB \x00'}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r9, 0x58, &(0x7f0000000280)}, 0x10) 1.749020636s ago: executing program 0 (id=9365): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xe, &(0x7f0000f59ffc)=0xc, 0x4) ioctl(r0, 0x8b26, &(0x7f0000000040)) 1.701482666s ago: executing program 4 (id=9366): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x7}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x5f}}, &(0x7f0000000380)='GPL\x00'}, 0x90) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, 0x0, &(0x7f00000000c0)) (async) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000080)=0x5, 0x4) 1.387538283s ago: executing program 0 (id=9369): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b000000000000000000e9ffff7f000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=0x0], 0x48) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000fc0)="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", 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0x14, &(0x7f0000000180)=@raw=[@exit, @map_idx={0x18, 0x4, 0x5, 0x0, 0x2}, @jmp={0x5, 0x0, 0xb, 0x1, 0x6, 0x80, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, r0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @exit], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xfffb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) setsockopt$packet_int(r1, 0x107, 0x3, &(0x7f0000000000)=0x8, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b000000000000000000e9ffff7f000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=0x0], 0x48) (async) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000fc0)="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", 0x1000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0x14, &(0x7f0000000180)=@raw=[@exit, @map_idx={0x18, 0x4, 0x5, 0x0, 0x2}, @jmp={0x5, 0x0, 0xb, 0x1, 0x6, 0x80, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, r0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @exit], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xfffb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (async) setsockopt$packet_int(r1, 0x107, 0x3, &(0x7f0000000000)=0x8, 0x4) (async) 1.235483929s ago: executing program 4 (id=9370): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x66}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x5, 0x4, 0x4, 0x9, 0x10, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r0) 1.182936041s ago: executing program 0 (id=9371): socket(0x2, 0x800, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x40, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) socketpair(0x28, 0x2, 0x0, &(0x7f0000000040)) 1.032396988s ago: executing program 1 (id=9372): socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x2d, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.020413914s ago: executing program 4 (id=9374): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000)="f495609056a82dab1787674dc7cddfdf7c28886b3fbb216a2609f7e23b7165e7daac", &(0x7f0000000080)=@udp=r0, 0x1}, 0x20) 977.982109ms ago: executing program 2 (id=9375): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES16=r1], 0x7c}, 0x1, 0x0, 0x0, 0x20004801}, 0x4044050) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) setsockopt$inet6_mtu(r2, 0x29, 0x1e, &(0x7f0000000040), 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0xc4, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0xa4, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x20}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x5}]}}}, {0x50, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x54, 0x2, 0xa, 0x801, 0x0, 0x0, {0xb, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x140}, 0x1, 0x0, 0x0, 0x1}, 0x880) socket$unix(0x1, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x15}]}}}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001020010000000000000000000300000a20000000160a01080000000000000000020000070900010073797f2211ba11d174ec0711616271b44a7a300000000014000b001100010000000000000000000100000af2cb55b184dc0a4c"], 0x48}, 0x1, 0x0, 0x0, 0x40850}, 0x40000c0) r3 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000700)={&(0x7f0000000380)=@tipc=@id={0x2d, 0x3, 0x3, {0x4e24, 0x3}}, 0x80, 0x0}, 0x850) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 861.394652ms ago: executing program 4 (id=9376): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x2000c890}, 0xc081) bind$inet6(r2, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x1, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r6, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) connect$rose(r6, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @default]}, 0x40) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) 842.01523ms ago: executing program 5 (id=9377): shutdown(0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x800) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000002128001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 841.298298ms ago: executing program 1 (id=9378): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r1) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x28, r2, 0x223, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback={0xe0ffff00000000}}]}, 0x28}}, 0x0) write$cgroup_devices(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$netlink(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r1) (async) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x28, r2, 0x223, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback={0xe0ffff00000000}}]}, 0x28}}, 0x0) (async) write$cgroup_devices(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) (async) 745.86852ms ago: executing program 2 (id=9379): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, r2, 0xb15, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10041}, 0x4) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, r2, 0xb15, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10041}, 0x4) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20002000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x4c, r2, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc011}, 0x24008804) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20002000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x4c, r2, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc011}, 0x24008804) sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f00000001c0)=0x5, 0x4) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f00000001c0)=0x5, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40040, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000300)={'veth0_to_hsr\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) ioctl$sock_TIOCOUTQ(r4, 0x5411, 0x0) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13edecbd59", 0x11}], 0x1}}], 0x1, 0x20008000) recvmsg(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/88, 0x58}], 0x1}, 0x40000121) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000005fdffffff1000320003000000000000000000eeff0f003300000000000000000000000000fc024000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r8, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r8, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r9, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r10, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="080029bd7000f3dbdf25270000000c0099000300000055000000"], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000020c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xd126a8577c57125b, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROTECT={0x5, 0x6, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040810) (async) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000020c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xd126a8577c57125b, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROTECT={0x5, 0x6, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040810) 635.288433ms ago: executing program 5 (id=9380): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="30aff520f53d6317000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bc7ef9642d29ba564165605dca29708efdf9b15a5c10a126121b2751f642635bcd9a8bf7a928a5d054b0d2c54d519ea75c52f41ed6f2886973626b684c8bd9108c0b0b2ea7e556948f0367aff4fbcede3294f6e73d06ad16dc2d26725ff833b5f83b499918e6a6ec245b781d41aee9624c847e2f2312d6b9db45bad354fc1a3f20407ffe406483a0524937ee7559e4bf70136746b37fdfbbb152758d37ed8bcac41fb7243bdcd536249c7996e898b61927eaa5a8790054ba13d3ade593220f96027090a34aaf7ea92f41aab73e7a85eef87e956bb7c5c76a347264fd99359f4e57b0dcc2bcc188ea880a4b11a8bb81eb22b0ddfc689e3218cf310dcc61cab354149d9107d8a88b0aa5b5661555f00443aee5e714009e52cee5e88f008148ddbc0fa81bf938bed4a1ac778d5337cc0311d0772eeac3eab38426e8d1472ff514aa5379ed21551790cc10148410b4fc27582fd7106a8887a9a0b613dfe10aee77542d887208f5534f5dce4d43f258fc9ef975834e1917666e2aff1cebfc3ce2c1e8ff66bba1d9050000000000000078db7024bf321636bede8651e672ed4f01ba5da2c3f9042a8552bd3f2c9ad546ad0ea20b4d35fb0a15c6239f67c7747a40fe26a88adf727fd1b801b4e56fbffcad99ce68fe2af0d94fdc78d27268de435021dca51acaa7a9e0944bdf579c170db6405944b6791a7713ee54f650fdf71b57c3629fb185efce700620ef5744623be08ec935dd563e6ba0b461bda98b364acf3dcdafa9b0e68c21ea509212c2938aa09cc31aa4ee5bfb8e507181909f5854b13997af4888cd61c8aab5fdfd701a16d546e5a533cd9b985dcc582b67979551dcc750fc51f2c9b6814edeffc76a86ea9f58b7c66fa24540daf14c2163d064f8cf0b4878f81e6b8bc4dabc10dac82b39e033963a6d02434cb783a198829d1373790a85c0e01a362d89e80165d280283af3c2060000000000000034b12a73b0c53bfae5d2f6e55728052247adfe0966c6c5eca57918c4540c979a70a281ba00e408c9fe1b20fa208976dd6a56f9bd9a74d81447c9b265d8c23f0e983e0b1d2d62d1e57c9188e4882634476e62ab1b7415a58208eaaf166d14720092f79a6197fe8b4ea7d5485cc6b3630afed8d3403cfa4d7bf48efb371706e0e65901eea3743c98261cbb7a246cf62f99bbc918741d32539ec0754e7d7f08dd45aaf49623342eabf466e54d8da4346e73da54ba2e4b5e2ae2823864d4147b490e55c9509f75c8828500ac32cab11b0262e75fa9e39e3792d01e0b210fdfb686bfffdc677432f6332c1a27502b43997060acdf7784c79fed0325e06f6b64b6434ebf4730509bcf95b9a1d0ba7c469d55351cc1dce6c90f5872e7ad5eed5f850d9d1f928b4e0263b241e8fe03e5e66252c8a3bd320e8deee5b91c653b8f22f58cff36c2ba4d6774f14229939595d2beb998c9312212de00468fc488591aca07ab75fba4a318d3ee4581711927b77a7f14dbcd639892f8cb0000000000000080411736eb1ee86eec338197a56293c9cdb72e84155681553b896d58b62a96852320e74dc4c9b41d6f90d2353dc573a94a092a84209c12da57f8c78e161b0899eb1c8b694d26c5fbf7f65fefacdbf39151f335dddc3b179a13f6de93ffb338e94738c86e35e9fcc654e4d6618dc1201cbd16e1281df911e6c699da16fbbb7a2e5c77966c98d3e7edd58cabfe6bf1bb7f6329084e3e4a2a36da07bbac3ebc00472f55b7966f250109fcce0ad5d4526d20ef74d1a634d724"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) getsockname$packet(r2, 0x0, &(0x7f0000000380)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x2, [@enum64={0x9, 0x6, 0x0, 0x13, 0x0, 0x1, [{0x9, 0x6, 0x4}, {0xe, 0x9, 0xfffff800}, {0x4, 0xffffff9d, 0xfffffffd}, {0xd, 0xf, 0xb4b2}, {0x6, 0x8, 0xb79}, {0x80000008, 0xd3d9, 0x80000001}]}]}}, &(0x7f0000000100)=""/141, 0x6e, 0x8d, 0x1, 0x7}, 0x28) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x10, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MODE={0x6, 0x1, 0x1}]}}}]}, 0x90}}, 0x20000000) r9 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4c000) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r13, @ANYRES32=r12, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r13, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r11}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x14, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x150f, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x1, 0x2, 0x2, 0x8, 0x5, 0x30, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x4, 0x1, 0x0, r13}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r1}, 0x94) 520.260823ms ago: executing program 1 (id=9381): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={&(0x7f0000000000)="b625ac34d9e1f635a0c1f519652b40c0a7ed3dcb20346fa69fc0430dabf69ec3125d4dbc16b60809092f44028e567a220d4d791cf32e168e5ef135b0eb474c5f1b6c4a4ba696b7b9f9ef1628ae62a329a419607235d24415a3675ff85dc96d5b2fbfca55645663ab6f4c25e30f607bf86c73aaa216c4eed11f354355379d2cb6e7f374b7be92af368c8b9e59897a6378483a290ec82732bef881", &(0x7f00000000c0)=""/41, &(0x7f0000000100)="5a0ca9a4f300485815", &(0x7f0000000140)="3f2620cdd686a7a0f4688db1f7b16ec51510a8b6ef4e49637febd0c8bfa78df8c787d3c4d3b6add2e5474e7c79dfd931e0e38c15f1c4899fe6cdc3b8704739beb960b640afcf78fa4fb2c0008de33829378d1eca0d4e61845f45ad866b850a1f10c51b8bfa6f4ca30fa6c02b4ed81ada57f97366231ace78159c52c0e805e6bf0762fa98a46c2166f1430ea4f3fd540d9a8ae0346ca888e67291b8a6479b8d22c011dfaf4b5ebe76027f3b6006", 0x1902, r0, 0x4}, 0x38) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, &(0x7f0000000400)) 470.679551ms ago: executing program 1 (id=9382): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000008000000071102f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) 386.885227ms ago: executing program 1 (id=9383): r0 = socket$netlink(0x10, 0x3, 0x2) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r1, 0x101, 0x7, &(0x7f0000000000)=0x2, 0x4) setsockopt$ax25_int(r1, 0x101, 0x1, &(0x7f0000000040)=0xe53, 0x4) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000180)) connect$netlink(r0, &(0x7f0000000000)=@unspec, 0xc) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="00000000000000002702000014000000b7030000000000008500000039000000bf0900000000000055090100000000009500000000000000bfb091000000000000b702000000000000850000006c000000b7000000000000009500000000000000d4cbd4f921b86085f3973919bd0f7778932b3816105aab28c5d007434fd7356f47460d2991e3e6d2b739fbd19476c2d2ae4dc6a79aabd531e3d2bf6ff1c95a46db252183ebf9cba3865056d2e78ee7fe8ac0a9360ca9117b"], &(0x7f0000000200)='GPL\x00'}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000301010200000000040f0000000000000800034000050000"], 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}], 0x3}, 0x1}], 0x1, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x4, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa, 0xef}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x2c}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}], 0x1c) 383.657297ms ago: executing program 5 (id=9384): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000040)) (async) socket(0x10, 0x2, 0x0) (async) write(0xffffffffffffffff, &(0x7f00000001c0)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498834e4309d4fa818fa235b4a441f9", 0x3a) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000), 0x6) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@o_path={&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x4000}, 0x18) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES8=r2, @ANYBLOB="2b0300000d000000180012809f1357c1677470000c00028008000100", @ANYRESOCT=r3, @ANYBLOB], 0x38}}, 0x8810) 144.239107ms ago: executing program 5 (id=9385): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x44}}, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000000)=0xc, 0x4) (async) writev(r2, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000000c0)="4c08c559bd", 0x5}, {0x0}], 0x3) (async) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x60, 0x8, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40840) (async) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_IP_PROTO={0x5}, @RTA_SPORT={0x6}]}, 0x2c}}, 0x0) 142.098632ms ago: executing program 0 (id=9386): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000340)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111ab00000000008510000002000000850000002a00000095000000000000009500a505000000008d8d72a4d2b0e866647a5563580154525990a711faae6b5efa82c515c097c645d4a49869490531e6fc004371de6a0e2aeb39db28a841fee433ca770c6799b28945ba973ff15b71d81a48f65b229efa31eb19c4d6945c8db59bf97ce0d74761c6ededcdebebfcd90759bd2cfe8b4253a9468fe5b0759b99a37a189ddd91f7bf447837"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000000)={0x1f, @fixed}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f00000012c0), 0x4) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvfrom$x25(r5, &(0x7f0000000380)=""/156, 0x9c, 0x2, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) syz_emit_ethernet(0x2b, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@cipso={0x86, 0x6}]}}, "e9"}}}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r8, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x22400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r8, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400000d5}, 0x85) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="740000004eb298709054bf8f3b1da83a0862a02c49290e17c8a86c7b6f55e9d216ecccc3eb038c915ab6983626c54c56fa4573ba3ed391f124f2", @ANYRES16=r6, @ANYBLOB="000425bd7000ffdbdf250200000008000500020000005800038008000500ffffffff06000400e4050000060007004e200000060007004e230000050008000d000000080005000a010102060004000200000006000400070000001400060000000000000000000000000000000001"], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x48880) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffffffffffffd5, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYRES64=r2, @ANYRES32=r3, @ANYRESDEC=r2, @ANYRESDEC=r2], 0x4c}}, 0x0) 98.079699ms ago: executing program 5 (id=9387): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@local, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe001, 0x2}}}}}, 0x0) 45.193216ms ago: executing program 1 (id=9388): socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x2d, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 286.928µs ago: executing program 0 (id=9389): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000006c0)=ANY=[@ANYRES64=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r3], 0x154}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x42073, 0xffffffffffffffff, 0x400000) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="24800008", @ANYRES16=r3, @ANYBLOB="010025bd7000fedbdf251d0000000c000600000000000000000004002f80"], 0x24}}, 0x8004) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf2527000000060006000100000005002b0000000000060006000000000008002c00030000000c0005000202aaaaaaaaaaaa08000200", @ANYRES32=r5, @ANYBLOB="f264663065aa259563b23b23847523cf45e5e047ff97323bb9ceb435f3367796249ac2906481a46501fda216da76b2fb2a8cd606627f39a604c6678a85ff3d843a75b70d1110c1c43d1848dfecd8a7db50fd020a45fb2865799d32ef24b470f020"], 0x48}, 0x1, 0x0, 0x0, 0x20000802}, 0x40090) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@empty, 0x0, 0x5, 0x2}, {@in6=@remote, 0x0, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x22}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffa}, {0x0, 0x0, 0x0, 0x3}, {0x8}}, 0x0, 0x5dfe}}, 0xf8}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x48) bpf$ENABLE_STATS(0x20, &(0x7f0000000500), 0x62) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000005a00010000000000000000d531000000040005"], 0x18}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x80, &(0x7f0000000380)=0x5, 0x4) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x200, 0x1000, 0x3, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0x6}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4000004}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x10080000, {0x0, 0x0, 0x0, r12, {0x0, 0xffe0}, {0x8, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c065}, 0x4008000) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="dc020000120000032cbd7000fbdbdf252a0402084e214e200900b200ff070000faffffff01000000020000000a00000004000000001000001072f7bb246d3ff9bf778caaa3e4a04ec3ff9eaa451d618bfa1209b86a695c7f1e645f27b7a9730f110e9f259251bdf9b906b25848ee6bb54977676f0afd0c3628ccb45d0b0c9d4a5e71dff2bf8164a8c4d63b7d32cc6b1e214aab1a75fc6fc409b7895833b5abdc250e13fa5d466602019c8d350f54318e69", @ANYRES32=r12, @ANYBLOB="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"], 0x2dc}}, 0x14008000) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x2329000, 0x800}, 0x20) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6ff6bda7a69cad00f8ee8675f868a821af1e5f096a98370000000000", @ANYRES16=r13, @ANYBLOB="00022cbd7000fcdbdf252100000009001f00706879310000000009001f0070687930000000000c0005000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x48880) 0s ago: executing program 5 (id=9390): shutdown(0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x800) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000002328001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): [ T1639] netlink: 'syz.4.7932': attribute type 1 has an invalid length. [ 948.626309][ T1640] netlink: 'syz.2.7930': attribute type 28 has an invalid length. [ 948.643244][ T1640] netlink: 'syz.2.7930': attribute type 3 has an invalid length. [ 948.655852][ T1636] veth1: entered promiscuous mode [ 948.673196][ T1647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7932'. [ 948.699279][ T1636] bond9: (slave veth1): Enslaving as a backup interface with a down link [ 948.711441][ T1640] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7930'. [ 948.822057][ T1639] 8021q: adding VLAN 0 to HW filter on device bond7 [ 948.886296][ T1662] netlink: 'syz.2.7934': attribute type 1 has an invalid length. [ 948.937889][ T1662] netlink: 'syz.2.7934': attribute type 7 has an invalid length. [ 948.974245][ T1662] netlink: 'syz.2.7934': attribute type 8 has an invalid length. [ 949.052486][ T1662] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7934'. [ 949.140324][T16618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.351979][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bbb5800: rx timeout, send abort [ 949.852118][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805946d000: rx timeout, send abort [ 949.860848][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bbb5800: abort rx timeout. Force session deactivation [ 950.029696][ T1718] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 950.129834][ T1717] 8021q: adding VLAN 0 to HW filter on device bond10 [ 950.156548][ T1725] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7949'. [ 950.181303][ T1717] bond0: (slave bond10): Enslaving as an active interface with a down link [ 950.187647][T16606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.360455][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805946d000: abort rx timeout. Force session deactivation [ 950.364437][ T1734] tipc: Enabled bearer , priority 0 [ 950.456925][ T1738] syzkaller0: entered promiscuous mode [ 950.487641][ T1738] syzkaller0: entered allmulticast mode [ 950.551169][ T1749] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 950.662183][ T1728] tipc: Resetting bearer [ 950.767171][ T1728] tipc: Disabling bearer [ 950.965644][ T1763] netlink: 'syz.4.7956': attribute type 1 has an invalid length. [ 950.980575][ T1763] netlink: 'syz.4.7956': attribute type 2 has an invalid length. [ 951.223217][ T1781] IPVS: set_ctl: invalid protocol: 92 172.30.1.3:0 [ 951.223567][T16606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.243304][ T1782] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 951.286322][ T1782] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 951.369506][ T1781] wlan0 speed is unknown, defaulting to 1000 [ 951.410724][ T1781] wg1 speed is unknown, defaulting to 1000 [ 951.956778][ T1819] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 951.964666][ T1819] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 952.257049][T16618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.741481][ T2220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.750014][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.011884][ T1872] syzkaller0: entered promiscuous mode [ 953.040914][ T1872] syzkaller0: entered allmulticast mode [ 953.297080][T16618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.468632][ T1900] __nla_validate_parse: 4 callbacks suppressed [ 953.468654][ T1900] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.7986'. [ 953.563168][ T1905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 953.618311][ T1906] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7985'. [ 953.726494][ T1914] sctp: [Deprecated]: syz.2.7988 (pid 1914) Use of int in maxseg socket option. [ 953.726494][ T1914] Use struct sctp_assoc_value instead [ 953.733201][ T1917] netlink: 'syz.0.7990': attribute type 1 has an invalid length. [ 954.072190][ T1932] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7993'. [ 954.103072][ T1935] netlink: 45 bytes leftover after parsing attributes in process `syz.0.7994'. [ 954.336759][T16606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.612657][ T1967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8002'. [ 954.666798][ T1972] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8003'. [ 954.691576][ T1972] netlink: 43 bytes leftover after parsing attributes in process `syz.1.8003'. [ 954.730827][ T1972] netlink: 'syz.1.8003': attribute type 6 has an invalid length. [ 954.761810][ T1972] netlink: 'syz.1.8003': attribute type 5 has an invalid length. [ 954.781518][ T1972] netlink: 43 bytes leftover after parsing attributes in process `syz.1.8003'. [ 955.055408][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.064231][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.178103][ T1996] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8010'. [ 955.214818][ T1996] netlink: 'syz.5.8010': attribute type 12 has an invalid length. [ 955.273599][ T1996] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8010'. [ 955.289604][ T2000] openvswitch: netlink: Flow key attr not present in new flow. [ 955.310133][ T1996] bridge_slave_1: left allmulticast mode [ 955.328652][ T1996] bridge_slave_1: left promiscuous mode [ 955.334502][ T1996] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.379292][T16618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.438345][ T1996] bridge_slave_0: left allmulticast mode [ 955.446871][ T1996] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.449218][ T2013] netlink: 'syz.4.8015': attribute type 1 has an invalid length. [ 956.012526][ T2045] netlink: 'syz.2.8023': attribute type 1 has an invalid length. [ 956.025246][ T2045] netlink: 'syz.2.8023': attribute type 4 has an invalid length. [ 956.286275][ T2066] netlink: 'syz.4.8026': attribute type 1 has an invalid length. [ 956.475416][ T2072] geneve3: entered promiscuous mode [ 956.480778][ T2072] geneve3: entered allmulticast mode [ 956.514114][ T2079] SET target dimension over the limit! [ 957.021679][ T2107] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 957.089560][ T2065] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 957.457069][T16618] net_ratelimit: 3 callbacks suppressed [ 957.457093][T16618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.467675][ T2125] syzkaller0: entered promiscuous mode [ 957.477131][ T2125] syzkaller0: entered allmulticast mode [ 957.799953][ T2129] netlink: 'syz.2.8046': attribute type 24 has an invalid length. [ 958.246773][ T2148] Cannot find add_set index 2 as target [ 958.337032][ T5842] Bluetooth: hci0: command 0x0405 tx timeout [ 958.501559][T16618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.509726][T12619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.518628][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.550026][T16618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.540233][ T2174] wlan0 speed is unknown, defaulting to 1000 [ 960.562116][ T2174] wg1 speed is unknown, defaulting to 1000 [ 960.571725][ T2177] syzkaller0: entered promiscuous mode [ 960.575470][T16606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.578505][ T2177] syzkaller0: entered allmulticast mode [ 960.692934][ T2184] netlink: 'syz.2.8054': attribute type 4 has an invalid length. [ 960.925626][ T2193] __nla_validate_parse: 6 callbacks suppressed [ 960.925650][ T2193] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8061'. [ 961.061533][ T2203] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8063'. [ 961.075863][ T2200] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8064'. [ 961.087629][ T2203] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8063'. [ 961.090525][ T2200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8064'. [ 961.236073][ T2196] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 961.246621][ T2209] netlink: 'syz.4.8066': attribute type 23 has an invalid length. [ 961.263231][ T2212] netlink: 116 bytes leftover after parsing attributes in process `syz.4.8066'. [ 961.341359][ T2215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8067'. [ 961.371165][ T2208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8065'. [ 961.407825][ T2208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 961.416992][ T2208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 961.434970][ T2208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 961.454740][ T2208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 961.624672][T16606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.743741][ T2238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.743852][ T2237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8074'. [ 961.752765][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.871037][ T2243] syzkaller0: entered promiscuous mode [ 961.881526][ T2243] syzkaller0: entered allmulticast mode [ 961.924434][ T2250] openvswitch: netlink: IP tunnel attribute has 67 unknown bytes. [ 962.191349][ T2267] netlink: 596 bytes leftover after parsing attributes in process `syz.1.8083'. [ 962.365822][ T2275] syzkaller0: entered promiscuous mode [ 962.380458][ T2275] syzkaller0: entered allmulticast mode [ 962.551389][ T2284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 962.696500][T16604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.791988][ T2300] netlink: 'syz.5.8092': attribute type 1 has an invalid length. [ 962.826224][ T2300] netlink: 'syz.5.8092': attribute type 1 has an invalid length. [ 962.846210][ T2300] netlink: 'syz.5.8092': attribute type 1 has an invalid length. [ 962.906935][ T2306] netlink: 'syz.0.8093': attribute type 2 has an invalid length. [ 962.925343][ T2306] netlink: 'syz.0.8093': attribute type 1 has an invalid length. [ 963.018401][ T2314] xt_CT: You must specify a L4 protocol and not use inversions on it [ 963.307419][ T2332] netlink: 'syz.2.8100': attribute type 1 has an invalid length. [ 963.556520][ T2337] xt_CT: You must specify a L4 protocol and not use inversions on it [ 963.780272][T16606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.813684][ T2332] hsr_slave_1 (unregistering): left promiscuous mode [ 963.832699][ T2362] veth0: entered promiscuous mode [ 963.853067][ T2363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 963.933141][ T2363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 964.074452][ T2349] veth0: left promiscuous mode [ 964.234920][ T2372] netlink: 'syz.5.8106': attribute type 11 has an invalid length. [ 964.264346][ T2220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.272921][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.567612][ T2392] syzkaller0: entered promiscuous mode [ 964.592696][ T2392] syzkaller0: entered allmulticast mode [ 964.813452][ T2407] syzkaller0: entered promiscuous mode [ 964.826355][T16604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.835660][ T2407] syzkaller0: entered allmulticast mode [ 964.959410][ T2421] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 965.218936][ T2420] syzkaller0: entered promiscuous mode [ 965.271891][ T2420] syzkaller0: entered allmulticast mode [ 965.416667][ T2456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.480553][ T2466] netlink: 'syz.0.8125': attribute type 33 has an invalid length. [ 965.827798][ T2486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 965.856851][T16604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.849702][ T25] block nbd6: Possible stuck request ffff8880262a8000: control (read@0,1024B). Runtime 30 seconds [ 966.862494][ T25] block nbd6: Possible stuck request ffff8880262a8200: control (read@1024,1024B). Runtime 30 seconds [ 966.874821][ T25] block nbd6: Possible stuck request ffff8880262a8400: control (read@2048,1024B). Runtime 30 seconds [ 966.887369][ T25] block nbd6: Possible stuck request ffff8880262a8600: control (read@3072,1024B). Runtime 30 seconds [ 966.899718][T16606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.955057][T16604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.001010][ T2506] __nla_validate_parse: 20 callbacks suppressed [ 968.001033][ T2506] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8131'. [ 968.075650][ T2514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8131'. [ 968.352449][ T2522] bond5: option resend_igmp: invalid value (32767) [ 968.367489][ T2522] bond5: option resend_igmp: allowed values 0 - 255 [ 968.388825][ T2522] bond5 (unregistering): Released all slaves [ 968.433919][ T2539] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8136'. [ 968.976294][T16606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.237916][ T2588] netlink: 212360 bytes leftover after parsing attributes in process `syz.5.8150'. [ 970.004052][ T2641] netlink: 76 bytes leftover after parsing attributes in process `syz.5.8156'. [ 970.017190][T22454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.026130][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.047625][T16606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.057579][T16618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.896870][ T2645] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8158'. [ 972.097874][T16604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.127147][ T2662] syzkaller0: entered promiscuous mode [ 972.135684][ T2662] syzkaller0: entered allmulticast mode [ 972.211740][ T2669] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8162'. [ 972.310736][ T2675] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8162'. [ 972.326493][ T2676] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.8165'. [ 972.348682][ T2669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.358122][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.490226][ T2690] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8168'. [ 972.636096][ T2698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.912073][ T2722] Bluetooth: MGMT ver 1.23 [ 972.924782][ T2721] netlink: 'syz.1.8178': attribute type 10 has an invalid length. [ 972.962377][ T2721] team0: Device veth1_macvtap failed to register rx_handler [ 973.136440][ T2740] netlink: zone id is out of range [ 973.136450][T16606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.157941][ T2740] netlink: zone id is out of range [ 973.163468][ T2740] netlink: zone id is out of range [ 973.169580][ T2740] netlink: zone id is out of range [ 973.175591][ T2740] netlink: zone id is out of range [ 973.187056][ T2740] netlink: zone id is out of range [ 973.200150][ T2740] netlink: zone id is out of range [ 973.212383][ T2740] netlink: set zone limit has 4 unknown bytes [ 973.730336][ T2781] syzkaller0: entered promiscuous mode [ 973.736549][ T2781] syzkaller0: entered allmulticast mode [ 973.752974][ T2779] veth1_macvtap: Device is already in use. [ 973.851901][ T2783] __nla_validate_parse: 6 callbacks suppressed [ 973.851924][ T2783] netlink: 236 bytes leftover after parsing attributes in process `syz.0.8195'. [ 974.150520][ T2803] IPv6: NLM_F_CREATE should be specified when creating new route [ 974.178517][T16606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.222699][ T2804] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8202'. [ 974.308057][ T2823] netlink: 'syz.4.8207': attribute type 1 has an invalid length. [ 974.324426][ T2804] vlan1: entered allmulticast mode [ 974.341159][ T2804] mac80211_hwsim hwsim61 wlan0: entered allmulticast mode [ 974.547268][ T2823] bond9: (slave veth9): Enslaving as a backup interface with a down link [ 974.573384][ T2835] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8209'. [ 974.787799][ T2841] team0 (unregistering): Port device team_slave_0 removed [ 974.810390][ T2841] team0 (unregistering): Port device team_slave_1 removed [ 974.850917][ T2841] team0 (unregistering): Port device dummy0 removed [ 974.904389][ T2863] syzkaller0: entered promiscuous mode [ 974.912316][ T2863] syzkaller0: entered allmulticast mode [ 975.010254][ T2841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8210'. [ 975.236852][ T2882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8218'. [ 975.335937][ T2893] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8223'. [ 975.606900][T32541] udevd[32541]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 977.889369][ T2935] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 978.094361][ T2940] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8234'. [ 978.342546][T16604] net_ratelimit: 7 callbacks suppressed [ 978.342569][T16604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.389722][ T2953] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 978.554275][ T2971] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8244'. [ 978.786527][ T2971] 8021q: adding VLAN 0 to HW filter on device bond10 [ 978.975284][ T2972] bond10 (unregistering): Released all slaves [ 979.206008][ T3005] netlink: 1 bytes leftover after parsing attributes in process `syz.5.8253'. [ 979.261568][ T3010] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.8253'. [ 979.378702][T16606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.438932][ T3005] tipc: Enabled bearer , priority 0 [ 979.466760][ T3005] syzkaller0: entered promiscuous mode [ 979.480261][ T3005] syzkaller0: entered allmulticast mode [ 979.497730][ T3004] tipc: Resetting bearer [ 979.508659][ T3021] netlink: 5 bytes leftover after parsing attributes in process `syz.4.8258'. [ 979.551897][ T3021] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 979.568049][ T3004] tipc: Disabling bearer [ 979.734189][ T3039] netlink: 192 bytes leftover after parsing attributes in process `syz.4.8262'. [ 979.783247][ T3044] vcan1: entered promiscuous mode [ 979.816075][ T3044] vcan1: entered allmulticast mode [ 979.946330][ T3040] netlink: 'syz.2.8264': attribute type 29 has an invalid length. [ 980.237316][ T3074] netlink: 'syz.2.8273': attribute type 10 has an invalid length. [ 980.278554][ T3074] syz_tun: entered promiscuous mode [ 980.284256][ T3077] netlink: 'syz.1.8274': attribute type 1 has an invalid length. [ 980.324847][ T3081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8277'. [ 980.338067][ T3079] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8274'. [ 980.357667][ T3074] syz_tun: entered allmulticast mode [ 980.363559][ T3074] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 980.415431][T16618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.456393][ T3087] netlink: 'syz.2.8273': attribute type 10 has an invalid length. [ 980.528488][ T3081] syzkaller0: entered promiscuous mode [ 980.534044][ T3081] syzkaller0: entered allmulticast mode [ 980.569391][ T3090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8273'. [ 980.611678][ T3087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 980.652593][ T3087] team0: Port device bond0 added [ 980.658341][ T3095] netlink: 'syz.1.8279': attribute type 1 has an invalid length. [ 980.669939][ T3095] netlink: 232 bytes leftover after parsing attributes in process `syz.1.8279'. [ 980.681234][ T3094] netlink: 'syz.1.8279': attribute type 1 has an invalid length. [ 980.692284][ T3097] IPVS: sh: FWM 3 0x00000003 - no destination available [ 980.698291][ T3094] netlink: 232 bytes leftover after parsing attributes in process `syz.1.8279'. [ 980.822610][T22454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.831172][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.457617][T16604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.498036][T16606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.646261][ T3095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8279'. [ 982.686877][ T3103] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 982.815914][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.927166][ T3110] syzkaller0: entered promiscuous mode [ 982.932733][ T3110] syzkaller0: entered allmulticast mode [ 983.181014][ T3131] nftables ruleset with unbound set [ 983.747964][ T3155] netlink: 'syz.0.8297': attribute type 1 has an invalid length. [ 983.822737][ T3160] xt_hashlimit: max too large, truncated to 1048576 [ 983.858465][T16606] net_ratelimit: 1 callbacks suppressed [ 983.858488][T16606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.892584][ T3155] 8021q: adding VLAN 0 to HW filter on device bond12 [ 983.994303][ T3169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 984.350715][ T3184] netlink: 'syz.5.8309': attribute type 1 has an invalid length. [ 984.489321][ T3185] macvlan2: entered promiscuous mode [ 984.494655][ T3185] macvlan2: entered allmulticast mode [ 984.527412][ T3185] bond11: (slave macvlan2): Opening slave failed [ 984.559580][ T3205] __nla_validate_parse: 10 callbacks suppressed [ 984.559600][ T3205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8314'. [ 984.597549][ T3205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8314'. [ 984.878080][ T3217] netlink: zone id is out of range [ 984.883756][ T3217] netlink: zone id is out of range [ 984.885454][ T3216] Cannot find del_set index 0 as target [ 984.894417][ T3217] netlink: zone id is out of range [ 984.899518][ T3216] netlink: 'syz.4.8318': attribute type 1 has an invalid length. [ 984.909660][T16606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.917862][ T3216] netlink: 'syz.4.8318': attribute type 2 has an invalid length. [ 984.930630][ T3219] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8320'. [ 984.944888][ T3217] netlink: zone id is out of range [ 984.954784][ T3217] netlink: zone id is out of range [ 984.970676][ T3219] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8320'. [ 984.984580][ T3217] netlink: zone id is out of range [ 984.999786][ T3221] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8320'. [ 985.007841][ T3217] netlink: zone id is out of range [ 985.120686][ T3228] netlink: 'syz.1.8322': attribute type 13 has an invalid length. [ 985.143705][ T3219] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8320'. [ 985.449721][ T3249] netlink: 272 bytes leftover after parsing attributes in process `syz.4.8326'. [ 985.881531][ T3266] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8332'. [ 986.092841][ T3278] sock: sock_timestamping_bind_phc: sock not bind to device [ 986.311891][ T3290] netlink: 'syz.0.8338': attribute type 23 has an invalid length. [ 986.347885][ T3298] netlink: 'syz.5.8340': attribute type 4 has an invalid length. [ 986.360713][ T3298] netlink: 'syz.5.8340': attribute type 4 has an invalid length. [ 986.386082][ T3298] netlink: 'syz.5.8340': attribute type 4 has an invalid length. [ 986.449100][ T3307] netlink: 212 bytes leftover after parsing attributes in process `syz.1.8342'. [ 986.457200][ T3298] netlink: 'syz.5.8340': attribute type 4 has an invalid length. [ 986.475673][ T3298] netlink: 'syz.5.8340': attribute type 4 has an invalid length. [ 986.484733][ T3298] netlink: 'syz.5.8340': attribute type 4 has an invalid length. [ 986.527105][ T3298] netlink: 'syz.5.8340': attribute type 4 has an invalid length. [ 986.536275][ T3298] netlink: 'syz.5.8340': attribute type 4 has an invalid length. [ 986.706586][ T3316] syzkaller0: entered promiscuous mode [ 986.712108][ T3316] syzkaller0: entered allmulticast mode [ 986.747508][ T3320] netlink: 54 bytes leftover after parsing attributes in process `syz.0.8347'. [ 986.853880][ T3316] tipc: Enabled bearer , priority 0 [ 986.923034][ T3315] tipc: Resetting bearer [ 986.989614][ T3315] tipc: Disabling bearer [ 987.100873][ T3342] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 987.166882][ T3342] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 987.891987][ T3386] FAULT_INJECTION: forcing a failure. [ 987.891987][ T3386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 987.973916][ T3386] CPU: 0 UID: 0 PID: 3386 Comm: syz.0.8366 Not tainted syzkaller #0 PREEMPT(full) [ 987.973947][ T3386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 987.973960][ T3386] Call Trace: [ 987.973969][ T3386] [ 987.973978][ T3386] dump_stack_lvl+0xe8/0x150 [ 987.974013][ T3386] should_fail_ex+0x412/0x560 [ 987.974044][ T3386] _copy_from_user+0x2d/0xb0 [ 987.974076][ T3386] ___sys_sendmsg+0x1c6/0x360 [ 987.974112][ T3386] ? __lock_acquire+0x6b5/0x2cf0 [ 987.974147][ T3386] ? __pfx____sys_sendmsg+0x10/0x10 [ 987.974216][ T3386] ? __fget_files+0x2a/0x420 [ 987.974239][ T3386] ? __fget_files+0x3a0/0x420 [ 987.974272][ T3386] __x64_sys_sendmsg+0x1bd/0x2a0 [ 987.974303][ T3386] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 987.974340][ T3386] ? __pfx_ksys_write+0x10/0x10 [ 987.974382][ T3386] do_syscall_64+0xe2/0xf80 [ 987.974403][ T3386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.974422][ T3386] ? trace_irq_disable+0x37/0x100 [ 987.974442][ T3386] ? clear_bhb_loop+0x60/0xb0 [ 987.974467][ T3386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.974485][ T3386] RIP: 0033:0x7fcfd839aeb9 [ 987.974504][ T3386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.974521][ T3386] RSP: 002b:00007fcfd65f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 987.974545][ T3386] RAX: ffffffffffffffda RBX: 00007fcfd8615fa0 RCX: 00007fcfd839aeb9 [ 987.974561][ T3386] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 987.974575][ T3386] RBP: 00007fcfd65f6090 R08: 0000000000000000 R09: 0000000000000000 [ 987.974588][ T3386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.974600][ T3386] R13: 00007fcfd8616038 R14: 00007fcfd8615fa0 R15: 00007ffc254ce428 [ 987.974633][ T3386] [ 988.467645][ T3393] bond13: (slave veth23): Enslaving as a backup interface with a down link [ 988.789351][ T3419] syzkaller0: entered promiscuous mode [ 988.795161][ T3419] syzkaller0: entered allmulticast mode [ 988.808770][ T3419] x_tables: unsorted underflow at hook 3 [ 988.949109][ T3421] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 989.081221][ T3429] xt_CT: You must specify a L4 protocol and not use inversions on it [ 989.300057][T16604] net_ratelimit: 54 callbacks suppressed [ 989.300084][T16604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.574348][ T3452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 989.710459][ T3465] openvswitch: netlink: Key 26 has unexpected len 244 expected 16 [ 989.717605][ T3460] __nla_validate_parse: 7 callbacks suppressed [ 989.717623][ T3460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8385'. [ 989.740200][ T3460] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8385'. [ 989.752571][ T3460] IPVS: length: 57 != 24 [ 989.847556][ T3469] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 989.859353][ T3468] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 989.872317][ T3468] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8388'. [ 989.989462][ T3471] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8389'. [ 990.338446][T16606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.867450][ T3529] wlan0 speed is unknown, defaulting to 1000 [ 990.881282][ T3529] wg1 speed is unknown, defaulting to 1000 [ 990.908739][ T3535] validate_nla: 63 callbacks suppressed [ 990.908761][ T3535] netlink: 'syz.0.8406': attribute type 10 has an invalid length. [ 990.974906][ T3538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8406'. [ 991.014444][ T3535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 991.027982][ T3535] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 991.039652][ T3538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 991.047491][ T3538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 991.080064][ T3538] bond0: (slave batadv0): Releasing backup interface [ 991.370229][ T3553] netlink: 'syz.5.8410': attribute type 11 has an invalid length. [ 991.380457][T16606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.413505][ T3553] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8410'. [ 991.524006][ T3559] netlink: 'syz.1.8413': attribute type 58 has an invalid length. [ 991.532569][ T3559] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8413'. [ 991.593494][ T3565] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8415'. [ 991.631423][ T3565] tipc: Invalid UDP bearer configuration [ 991.631490][ T3565] tipc: Enabling of bearer rejected, failed to enable media [ 991.655959][ T3571] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 991.670225][ T3571] syzkaller1: linktype set to 823 [ 991.897006][ T3580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8419'. [ 991.927606][ T3580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8419'. [ 992.123736][ T3597] netlink: 'syz.0.8424': attribute type 1 has an invalid length. [ 992.198538][ T3597] bond14: entered promiscuous mode [ 992.210264][ T3604] netlink: 'syz.1.8423': attribute type 5 has an invalid length. [ 992.227587][ T3597] 8021q: adding VLAN 0 to HW filter on device bond14 [ 992.244697][ T3599] netlink: 'syz.1.8423': attribute type 5 has an invalid length. [ 992.292125][ T3606] bond14: (slave bridge5): making interface the new active one [ 992.300823][ T3606] bridge5: entered promiscuous mode [ 992.307829][ T3606] bond14: (slave bridge5): Enslaving as an active interface with an up link [ 992.406375][ T3612] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 992.419552][T17471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.428142][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.438799][T16604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.580183][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 993.330154][ T3667] ip6t_rpfilter: unknown options [ 993.456572][T16604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.968165][ T3707] tipc: Enabled bearer , priority 0 [ 993.991051][ T3704] tipc: Disabling bearer [ 994.207165][ T5853] block nbd2: Receive control failed (result -32) [ 994.242177][ T3727] netlink: 'syz.4.8463': attribute type 15 has an invalid length. [ 994.270780][ T3729] sctp: [Deprecated]: syz.5.8464 (pid 3729) Use of int in maxseg socket option. [ 994.270780][ T3729] Use struct sctp_assoc_value instead [ 994.497166][T16606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.593824][ T3747] netlink: 'syz.5.8469': attribute type 10 has an invalid length. [ 994.708686][ T3749] tipc: Enabled bearer , priority 0 [ 994.866141][ T3749] syzkaller0: entered promiscuous mode [ 994.882111][ T3749] syzkaller0: entered allmulticast mode [ 994.899590][ T3749] tipc: Resetting bearer [ 994.991664][ T3748] tipc: Resetting bearer [ 995.216707][ T3786] __nla_validate_parse: 6 callbacks suppressed [ 995.216728][ T3786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8478'. [ 995.234967][ T3786] netlink: 272 bytes leftover after parsing attributes in process `syz.2.8478'. [ 995.543906][T16606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.579582][T16604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.913772][ T25] block nbd6: Possible stuck request ffff8880262a8000: control (read@0,1024B). Runtime 60 seconds [ 996.924697][ T25] block nbd6: Possible stuck request ffff8880262a8200: control (read@1024,1024B). Runtime 60 seconds [ 996.937948][ T25] block nbd6: Possible stuck request ffff8880262a8400: control (read@2048,1024B). Runtime 60 seconds [ 996.949691][ T25] block nbd6: Possible stuck request ffff8880262a8600: control (read@3072,1024B). Runtime 60 seconds [ 997.162009][ T3748] tipc: Disabling bearer [ 997.170979][ T3769] syzkaller0: entered allmulticast mode [ 997.183145][ T24] tipc: Node number set to 3771483798 [ 997.282629][ T3772] wlan0 speed is unknown, defaulting to 1000 [ 997.294806][ T3772] wg1 speed is unknown, defaulting to 1000 [ 997.518873][ T3806] netlink: 'syz.2.8484': attribute type 178 has an invalid length. [ 997.530686][ T3799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8483'. [ 997.615885][T16604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.752608][ T3815] netlink: 'syz.4.8483': attribute type 5 has an invalid length. [ 997.761076][ T3815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8483'. [ 997.852202][ T3822] syzkaller0: entered promiscuous mode [ 997.867334][ T3822] syzkaller0: entered allmulticast mode [ 997.994720][ T3831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8492'. [ 998.113627][ T3837] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8494'. [ 998.191540][T22453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.200792][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.520930][ T3855] netlink: 240 bytes leftover after parsing attributes in process `syz.5.8499'. [ 998.655767][T16618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.729805][ T3861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.741226][ T3859] netlink: 100 bytes leftover after parsing attributes in process `syz.2.8501'. [ 998.741541][ T3861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.774193][ T3862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.862420][ T3865] 8021q: adding VLAN 0 to HW filter on device bond15 [ 998.880881][ T3865] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 998.924417][ T3872] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8504'. [ 999.003889][ T3877] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 999.104826][ T3881] syzkaller0: entered promiscuous mode [ 999.110491][ T3881] syzkaller0: entered allmulticast mode [ 999.173707][ T3883] netlink: 596 bytes leftover after parsing attributes in process `syz.0.8508'. [ 999.352186][ T3885] macvtap2: entered promiscuous mode [ 999.362450][ T3885] macvtap2: entered allmulticast mode [ 999.439388][ T3903] Cannot find set identified by id 3 to match [ 999.473472][ T3902] syzkaller1: entered promiscuous mode [ 999.499191][ T3902] syzkaller1: entered allmulticast mode [ 999.699993][T16604] net_ratelimit: 2 callbacks suppressed [ 999.700015][T16604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.957049][ T3932] tipc: Enabling of bearer rejected, already enabled [ 999.976641][ T3933] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1000.013502][ T3932] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1000.298288][ T3954] xfrm1: entered allmulticast mode [ 1000.371549][ T3959] __nla_validate_parse: 7 callbacks suppressed [ 1000.371571][ T3959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8529'. [ 1000.372681][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058e23800: rx timeout, send abort [ 1000.441249][ T3962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.450586][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.708701][ T3974] netlink: 'syz.4.8533': attribute type 1 has an invalid length. [ 1000.721820][ T3977] netlink: 84 bytes leftover after parsing attributes in process `syz.5.8535'. [ 1000.738956][T16618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.813531][ T3981] netlink: 596 bytes leftover after parsing attributes in process `syz.4.8536'. [ 1000.872894][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880595ae000: rx timeout, send abort [ 1000.895011][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058e23800: abort rx timeout. Force session deactivation [ 1000.929236][ T3987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8539'. [ 1000.945197][ T3987] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8539'. [ 1000.968548][ T3987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8539'. [ 1000.982963][ T3987] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8539'. [ 1001.098015][ T3998] IPVS: Error connecting to the multicast addr [ 1001.112725][ T4000] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8540'. [ 1001.136410][ T3996] netlink: 'syz.0.8542': attribute type 12 has an invalid length. [ 1001.268957][ T3996] bond16: option primary_reselect: invalid value (255) [ 1001.305667][ T3996] bond16 (unregistering): Released all slaves [ 1001.381209][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880595ae000: abort rx timeout. Force session deactivation [ 1001.571584][ T4031] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8549'. [ 1001.704383][ T4035] dvmrp6: entered allmulticast mode [ 1001.779436][T16618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.993825][ T4046] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 1002.051903][ T4047] veth11: entered allmulticast mode [ 1002.173345][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d81b400: rx timeout, send abort [ 1002.489791][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1002.501819][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1002.510794][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1002.520829][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1002.531280][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1002.580305][ T4074] wlan0 speed is unknown, defaulting to 1000 [ 1002.589037][ T4074] wg1 speed is unknown, defaulting to 1000 [ 1002.673467][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d818c00: rx timeout, send abort [ 1002.682546][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d81b400: abort rx timeout. Force session deactivation [ 1002.817097][T16604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.924524][ T4074] chnl_net:caif_netlink_parms(): no params data found [ 1003.062935][ T1966] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1003.074836][ T1966] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.181837][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d818c00: abort rx timeout. Force session deactivation [ 1003.213643][ T1966] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1003.245933][ T1966] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.276868][ T4074] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.285335][ T4074] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.292685][ T4074] bridge_slave_0: entered allmulticast mode [ 1003.296348][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.327586][ T4074] bridge_slave_0: entered promiscuous mode [ 1003.378200][ T1966] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1003.403178][ T4097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8565'. [ 1003.406234][ T1966] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.431603][ T4074] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.439295][ T4074] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.447788][ T4074] bridge_slave_1: entered allmulticast mode [ 1003.462474][ T4074] bridge_slave_1: entered promiscuous mode [ 1003.500789][ T1966] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1003.511560][ T1966] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.591461][ T4074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1003.629907][ T4074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1003.723764][ T4109] netlink: 'syz.0.8567': attribute type 4 has an invalid length. [ 1003.873729][ T4074] team0: Port device team_slave_0 added [ 1003.895243][T22461] netdevsim netdevsim5 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 1003.918666][ T4074] team0: Port device team_slave_1 added [ 1004.033244][T22440] netdevsim netdevsim5 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 1004.120190][T22469] netdevsim netdevsim5 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 1004.182226][ T4074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1004.217426][ T4074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.270307][ T4074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1004.282170][T22454] netdevsim netdevsim5 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 1004.304551][ T4074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1004.322024][ T4074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.385232][ T4074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1004.520007][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804c7e1000: rx timeout, send abort [ 1004.576311][ T5853] Bluetooth: hci1: command tx timeout [ 1004.639182][ T1966] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1004.648660][ T1966] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 1e:64:d4:88:18:df - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1004.821347][ T1966] bond3 (unregistering): (slave gretap1): Releasing active interface [ 1005.027596][ C1] vcan0: j1939_tp_rxtimer: 0xffff888036576000: rx timeout, send abort [ 1005.036027][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804c7e1000: abort rx timeout. Force session deactivation [ 1005.256410][ T1966]  (unregistering): left promiscuous mode [ 1005.262389][ T1966] bond_slave_0: left promiscuous mode [ 1005.268303][ T1966] bond_slave_1: left promiscuous mode [ 1005.277378][ T1966]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1005.292465][ T1966]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1005.303839][ T1966]  (unregistering): Released all slaves [ 1005.305284][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.319538][ T1966] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1005.331233][ T1966] bond1 (unregistering): Released all slaves [ 1005.352345][ T1966] bond2 (unregistering): (slave veth7): Releasing backup interface [ 1005.368376][ T1966] bond2 (unregistering): Released all slaves [ 1005.401162][ T1966] bond3 (unregistering): Released all slaves [ 1005.421155][ T1966] bond4 (unregistering): Released all slaves [ 1005.452080][ T1966] bond5 (unregistering): Released all slaves [ 1005.475999][ T1966] bond0 (unregistering): (slave bond10): Releasing active interface [ 1005.488250][ T1966] bond0 (unregistering): Released all slaves [ 1005.513095][ T1966] bond6 (unregistering): Released all slaves [ 1005.533850][ T1966] bond7 (unregistering): Released all slaves [ 1005.535891][ C1] vcan0: j1939_tp_rxtimer: 0xffff888036576000: abort rx timeout. Force session deactivation [ 1005.671922][ T1966] bond8 (unregistering): Released all slaves [ 1005.693329][ T1966] bond9 (unregistering): (slave veth1): Releasing backup interface [ 1005.709148][ T1966] bond9 (unregistering): Released all slaves [ 1005.938187][ T1966] bond10 (unregistering): Released all slaves [ 1005.952362][ T1966] bond11 (unregistering): Released all slaves [ 1005.968638][ T4134] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1005.998486][T16604] infiniband syz1: ib_query_port failed (-19) [ 1006.277764][ T4074] hsr_slave_0: entered promiscuous mode [ 1006.286852][ T4074] hsr_slave_1: entered promiscuous mode [ 1006.297397][ T4074] debugfs: 'hsr0' already exists in 'hsr' [ 1006.303291][ T4074] Cannot create hsr debugfs directory [ 1006.320442][ T1966] : left promiscuous mode [ 1006.345310][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.409879][ T4178] __nla_validate_parse: 2 callbacks suppressed [ 1006.409901][ T4178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8582'. [ 1006.445935][ T4173] veth0: entered promiscuous mode [ 1006.502755][ T1966] tipc: Disabling bearer [ 1006.511101][ T1966] tipc: Left network mode [ 1006.655417][ T5853] Bluetooth: hci1: command tx timeout [ 1006.874283][ T4195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8586'. [ 1006.906162][ T4191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8586'. [ 1007.201106][ T4208] tipc: Enabling of bearer rejected, failed to enable media [ 1007.341544][ T1966] batadv0: left promiscuous mode [ 1007.435729][ T1966] hsr_slave_0: left promiscuous mode [ 1007.452254][ T1966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1007.475198][ T1966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1007.492523][ T4230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8593'. [ 1007.508137][ T1966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1007.523796][ T1966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1007.537131][ T1966] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1007.548191][ T1966] batman_adv: batadv0: Removing interface: ipvlan2 [ 1007.602641][ T1966] veth1_macvtap: left promiscuous mode [ 1007.609465][ T1966] veth0_macvtap: left promiscuous mode [ 1007.621167][ T1966] veth1_vlan: left promiscuous mode [ 1007.651788][ T4240] IPVS: set_ctl: invalid protocol: 2 172.20.20.48:20001 [ 1008.738318][ T5853] Bluetooth: hci1: command tx timeout [ 1008.879187][ T1966] vcan0 (unregistering): left allmulticast mode [ 1008.899532][ T1966] lo (unregistering): left allmulticast mode [ 1008.931449][ T4234] netlink: 120 bytes leftover after parsing attributes in process `syz.1.8593'. [ 1008.967469][ T4237] syzkaller1: entered promiscuous mode [ 1008.978211][ T4237] syzkaller1: entered allmulticast mode [ 1009.400788][ T4074] netdevsim netdevsim5 eth8 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1009.542163][ T4074] netdevsim netdevsim5 eth7 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1009.602984][ T4271] netlink: 596 bytes leftover after parsing attributes in process `syz.1.8601'. [ 1009.655559][ T4074] netdevsim netdevsim5 eth6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1009.841990][ T4074] netdevsim netdevsim5 eth5 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1009.888468][ T24] IPVS: starting estimator thread 0... [ 1009.896981][ T4283] IPVS: ip_vs_add_dest(): server weight less than zero [ 1009.924777][ T4283] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1009.941028][ T1966] IPVS: stop unused estimator thread 0... [ 1010.036277][ T4284] IPVS: using max 27 ests per chain, 64800 per kthread [ 1010.039915][ T4287] netlink: 'syz.0.8604': attribute type 1 has an invalid length. [ 1010.138651][ T4287] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1010.509668][ T4074] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1010.556476][ T4074] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1010.582555][ T4074] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1010.633171][ T4074] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1010.816699][ T5853] Bluetooth: hci1: command tx timeout [ 1010.830633][ T4074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1010.880406][ T4330] netlink: 596 bytes leftover after parsing attributes in process `syz.4.8612'. [ 1010.957178][ T4074] 8021q: adding VLAN 0 to HW filter on device team0 [ 1010.987016][ T1966] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.994226][ T1966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1011.043616][ T4335] bond11: option lp_interval: invalid value (0) [ 1011.050703][ T4335] bond11: option lp_interval: allowed values 1 - 2147483647 [ 1011.061221][ T4335] bond11 (unregistering): Released all slaves [ 1011.111568][ T1966] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.118820][ T1966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1011.589135][ T4363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8620'. [ 1011.763808][ T4074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1011.842060][ T4374] netlink: 596 bytes leftover after parsing attributes in process `syz.2.8622'. [ 1012.197525][ T4398] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8628'. [ 1012.235266][ T4401] xt_hashlimit: size too large, truncated to 1048576 [ 1012.257693][ T4401] netlink: 'syz.2.8627': attribute type 21 has an invalid length. [ 1012.282813][ T4401] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8627'. [ 1012.313360][ T4401] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8627'. [ 1012.589571][ T4074] veth0_vlan: entered promiscuous mode [ 1012.618120][ T4074] veth1_vlan: entered promiscuous mode [ 1012.770461][ T4074] veth0_macvtap: entered promiscuous mode [ 1012.789227][ T4433] netlink: 'syz.1.8636': attribute type 10 has an invalid length. [ 1012.802227][ T4074] veth1_macvtap: entered promiscuous mode [ 1012.822237][ T4435] netlink: 'syz.1.8636': attribute type 10 has an invalid length. [ 1012.893012][ T4074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1012.937980][ T4074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1012.983305][T22453] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.018244][T22453] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.051903][T22453] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.085738][ T4442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8638'. [ 1013.101508][T22453] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.141053][ T4442] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.8638'. [ 1013.170387][ T4444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8639'. [ 1013.230966][ T4452] netlink: 596 bytes leftover after parsing attributes in process `syz.0.8641'. [ 1013.502370][ T1036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.553020][ T1036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.606365][ T4469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8646'. [ 1013.991227][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.013964][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.063472][ T4485] netlink: 'syz.2.8650': attribute type 11 has an invalid length. [ 1015.287869][ T4560] syzkaller1: entered promiscuous mode [ 1015.293389][ T4560] syzkaller1: entered allmulticast mode [ 1015.544873][ T4563] xt_hashlimit: overflow, try lower: 1/0 [ 1015.757626][ T4578] openvswitch: netlink: IP tunnel dst address not specified [ 1015.946422][ T4589] tipc: Started in network mode [ 1015.951547][ T4589] tipc: Node identity eeb24802f3f3, cluster identity 4711 [ 1015.967388][ T4589] tipc: Enabled bearer , priority 0 [ 1016.144864][ T4601] sctp: [Deprecated]: syz.0.8679 (pid 4601) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1016.144864][ T4601] Use struct sctp_sack_info instead [ 1016.146847][ T4589] syzkaller0: entered promiscuous mode [ 1016.201440][ T4589] syzkaller0: entered allmulticast mode [ 1016.219249][ T4589] tipc: Resetting bearer [ 1016.291811][ T4583] tipc: Resetting bearer [ 1018.292130][ T4583] tipc: Disabling bearer [ 1018.300987][ T4611] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1018.315141][ T4611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1018.336743][ T4613] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1018.350833][ T5954] tipc: Node number set to 490817538 [ 1018.588824][ T4646] netlink: 'syz.1.8685': attribute type 3 has an invalid length. [ 1018.605224][ T5202] udevd[5202]: worker [32279] /devices/virtual/block/nbd6 is taking a long time [ 1018.628258][ T4646] netlink: 'syz.1.8685': attribute type 3 has an invalid length. [ 1018.638616][ T4643] __nla_validate_parse: 5 callbacks suppressed [ 1018.638637][ T4643] netlink: 124 bytes leftover after parsing attributes in process `syz.0.8688'. [ 1018.657706][ T4646] netlink: 'syz.1.8685': attribute type 3 has an invalid length. [ 1018.671274][ T4643] netlink: 'syz.0.8688': attribute type 1 has an invalid length. [ 1018.681491][ T4646] netlink: 'syz.1.8685': attribute type 3 has an invalid length. [ 1018.689856][ T4646] netlink: 'syz.1.8685': attribute type 3 has an invalid length. [ 1018.699869][ T4646] netlink: 'syz.1.8685': attribute type 3 has an invalid length. [ 1018.708291][ T4650] netlink: 596 bytes leftover after parsing attributes in process `syz.4.8689'. [ 1018.719513][ T4646] netlink: 'syz.1.8685': attribute type 3 has an invalid length. [ 1018.729638][ T4646] netlink: 'syz.1.8685': attribute type 3 has an invalid length. [ 1018.741043][ T4652] netlink: 564 bytes leftover after parsing attributes in process `syz.5.8687'. [ 1018.752894][ T4646] netlink: 'syz.1.8685': attribute type 3 has an invalid length. [ 1018.867549][ T4656] netlink: 228 bytes leftover after parsing attributes in process `syz.4.8690'. [ 1018.884472][ T4639] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.892322][ T4639] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.062006][ T4639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1019.100939][ T4639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1019.286447][T22439] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.310605][T22439] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.355680][T22439] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.364636][T22439] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.568662][ T4681] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1019.662433][ T4690] nbd: must specify an index to disconnect [ 1019.698560][ T4681] bond11 (unregistering): Released all slaves [ 1019.780055][ T4694] »»»»»»: renamed from vlan1 (while UP) [ 1019.863185][ T4696] netlink: 596 bytes leftover after parsing attributes in process `syz.2.8700'. [ 1020.037738][ T4704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8704'. [ 1020.356124][ T4718] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8707'. [ 1020.396528][ T4717] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1020.403334][ T4718] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8707'. [ 1020.450857][ T4721] mac80211_hwsim hwsim93 wlan1: entered allmulticast mode [ 1020.499406][ T4717] rdma_rxe: rxe_newlink: failed to add bond0 [ 1020.505370][ T4721] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8708'. [ 1020.625448][ T4724] veth3: entered allmulticast mode [ 1020.722302][ T4731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8712'. [ 1021.291344][ T4767] gtp1: entered promiscuous mode [ 1021.297569][ T4767] gtp1: entered allmulticast mode [ 1021.484689][ T4779] veth0: entered promiscuous mode [ 1021.493439][ T4777] veth0: left promiscuous mode [ 1022.015917][ T4787] syzkaller1: entered promiscuous mode [ 1022.021476][ T4787] syzkaller1: entered allmulticast mode [ 1022.846276][ T4838] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 1022.866886][ T4850] bridge_slave_0: default FDB implementation only supports local addresses [ 1023.006943][ T4857] ip6tnl0: Caught tx_queue_len zero misconfig [ 1023.245929][ T4876] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1023.261097][ T4876] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1023.288229][ T4876] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1023.689482][ T4905] validate_nla: 38 callbacks suppressed [ 1023.689505][ T4905] netlink: 'syz.5.8760': attribute type 1 has an invalid length. [ 1023.739408][ T4899] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1023.768434][ T4906] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1023.774350][ T4899] rdma_rxe: rxe_newlink: failed to add bond0 [ 1023.779488][ T4906] bond11: (slave macvlan2): Enslaving as an active interface with a down link [ 1023.839543][ T4905] veth5: entered promiscuous mode [ 1023.881054][ T4914] __nla_validate_parse: 15 callbacks suppressed [ 1023.881070][ T4914] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8763'. [ 1023.939113][ T4917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8764'. [ 1023.952303][ T4917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8764'. [ 1023.966062][ T4917] Cannot find set identified by id 1 to match [ 1024.116979][ T4926] erspan0: entered promiscuous mode [ 1024.124842][ T4926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8766'. [ 1025.077476][ T4973] netlink: 'syz.4.8778': attribute type 26 has an invalid length. [ 1025.424381][ T4997] geneve2: entered promiscuous mode [ 1025.432248][ T4997] geneve2: entered allmulticast mode [ 1025.440312][ T2985] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 1025.511019][ T2985] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 1025.531936][ T2985] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 1025.549163][ T5002] syzkaller1: entered promiscuous mode [ 1025.554708][ T5002] syzkaller1: entered allmulticast mode [ 1025.569219][ T2985] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 1026.044808][ T5029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8796'. [ 1026.138970][ T5034] vlan4: entered promiscuous mode [ 1026.277913][ T5047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8802'. [ 1026.477186][ T5052] dvmrp6: entered allmulticast mode [ 1026.499078][ T5061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8807'. [ 1026.549496][ T5057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8804'. [ 1026.709842][ T5072] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8804'. [ 1026.863645][ T5079] netlink: 'syz.2.8811': attribute type 29 has an invalid length. [ 1026.876213][ T5079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8811'. [ 1026.894836][ T5081] º: renamed from veth1_vlan (while UP) [ 1026.917604][ T5079] netlink: 'syz.2.8811': attribute type 29 has an invalid length. [ 1026.999355][ T25] block nbd6: Possible stuck request ffff8880262a8000: control (read@0,1024B). Runtime 90 seconds [ 1027.010231][ T25] block nbd6: Possible stuck request ffff8880262a8200: control (read@1024,1024B). Runtime 90 seconds [ 1027.022186][ T25] block nbd6: Possible stuck request ffff8880262a8400: control (read@2048,1024B). Runtime 90 seconds [ 1027.034276][ T25] block nbd6: Possible stuck request ffff8880262a8600: control (read@3072,1024B). Runtime 90 seconds [ 1027.346534][ T5099] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1027.599077][ T5111] .: renamed from bridge_slave_1 (while UP) [ 1028.194456][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1028.204219][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1028.214505][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1028.233205][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1028.242314][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1028.321760][ T5136] wlan0 speed is unknown, defaulting to 1000 [ 1028.366529][ T5136] wg1 speed is unknown, defaulting to 1000 [ 1028.374351][ T5147] tun0: tun_chr_ioctl cmd 1074025675 [ 1028.385348][ T5147] tun0: persist disabled [ 1028.737686][ T5159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1028.819327][T26548] bond0: (slave syz_tun): Releasing backup interface [ 1028.853099][T26548] syz_tun (unregistering): left allmulticast mode [ 1028.903727][ T5159] __nla_validate_parse: 9 callbacks suppressed [ 1028.903749][ T5159] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.8831'. [ 1029.223655][ T5194] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1029.249247][ T5136] chnl_net:caif_netlink_parms(): no params data found [ 1029.518897][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.545556][ T5136] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.552939][ T5136] bridge_slave_0: entered allmulticast mode [ 1029.576826][ T5136] bridge_slave_0: entered promiscuous mode [ 1029.588271][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.596752][ T5136] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.604074][ T5136] bridge_slave_1: entered allmulticast mode [ 1029.611695][ T5136] bridge_slave_1: entered promiscuous mode [ 1029.722530][ T5136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1029.743463][ T5136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1029.809969][ T5136] team0: Port device team_slave_0 added [ 1029.828155][ T5136] team0: Port device team_slave_1 added [ 1029.904463][ T5136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1029.923942][ T5136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.977925][ T5237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8849'. [ 1029.987021][ T5136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1030.008290][ T5239] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8850'. [ 1030.023920][ T5239] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8850'. [ 1030.026436][ T5136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1030.058017][ T5136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.098746][ T5136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.150086][ T5247] openvswitch: netlink: Flow key attribute not present in set flow. [ 1030.237508][ T5136] hsr_slave_0: entered promiscuous mode [ 1030.262757][ T5136] hsr_slave_1: entered promiscuous mode [ 1030.336534][ T5842] Bluetooth: hci2: command tx timeout [ 1030.399611][ T5258] netlink: 'syz.4.8855': attribute type 12 has an invalid length. [ 1030.438836][ T5258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8855'. [ 1030.482362][ T5258] netlink: 'syz.4.8855': attribute type 12 has an invalid length. [ 1030.514530][ T5258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8855'. [ 1030.541332][ T5263] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8857'. [ 1030.548353][ T5260] bond11: option mode: unable to set because the bond device has slaves [ 1030.587284][ T5263] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8857'. [ 1030.604889][T22439] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1030.614318][ T5264] netlink: 'syz.0.8858': attribute type 14 has an invalid length. [ 1030.629087][ T5264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8858'. [ 1030.642019][T22439] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1030.704525][ T5267] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8859'. [ 1030.720529][ T5136] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1030.733100][ T5136] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1030.744702][ T5136] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.771333][T22439] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1030.781845][ T5264] netlink: 'syz.0.8858': attribute type 14 has an invalid length. [ 1030.821374][ T5267] bond1: entered promiscuous mode [ 1030.830110][ T5267] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1030.848231][T22439] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1030.871250][ T5270] bond1: (slave xfrm1): refused to change device type [ 1030.958029][ T5136] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1030.968881][ T5136] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1030.980105][ T5136] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.092616][ T5136] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1031.113267][ T5136] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1031.126723][ T5136] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.277100][ T5136] batman_adv: batadv0: Removing interface: netdevsim0 [ 1031.303253][ T5136] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1031.323482][ T5136] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1031.336151][ T5136] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.603382][ T5136] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1031.640462][ T5136] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1031.667412][ T5136] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1031.692291][ T5136] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1031.705754][ T5304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1031.849976][ T5136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1031.894607][ T5136] 8021q: adding VLAN 0 to HW filter on device team0 [ 1031.910199][T22461] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.917451][T22461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1031.960164][T22439] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.967430][T22439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1032.430658][ T5853] Bluetooth: hci2: command tx timeout [ 1032.673833][ T5136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1032.792447][ T5136] veth0_vlan: entered promiscuous mode [ 1032.809877][ T5136] veth1_vlan: entered promiscuous mode [ 1032.856843][ T5136] veth0_macvtap: entered promiscuous mode [ 1032.873140][ T5136] veth1_macvtap: entered promiscuous mode [ 1032.921510][ T5136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1032.951056][ T5136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1032.987692][ T2220] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.997960][ T2220] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.022416][ T2220] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.044224][ T2220] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.188522][ T5364] netlink: 'syz.4.8882': attribute type 1 has an invalid length. [ 1033.211521][ T5364] netlink: 'syz.4.8882': attribute type 1 has an invalid length. [ 1033.223461][ T5364] netlink: 'syz.4.8882': attribute type 8 has an invalid length. [ 1033.437771][T22454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.449632][T22454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.608638][ T2220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.630155][ T2220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.798419][ T5409] lo: Caught tx_queue_len zero misconfig [ 1033.897039][ T5416] set match dimension is over the limit! [ 1033.967309][ T5416] __nla_validate_parse: 9 callbacks suppressed [ 1033.967332][ T5416] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8894'. [ 1034.042939][ T5428] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1034.057313][ T5424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8896'. [ 1034.383184][ T5435] netlink: 'syz.0.8898': attribute type 13 has an invalid length. [ 1034.497225][ T5853] Bluetooth: hci2: command tx timeout [ 1034.587333][ T5435] wg1: left promiscuous mode [ 1034.595796][ T5435] wg1: left allmulticast mode [ 1034.803974][ T5455] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8900'. [ 1034.862373][ T5435] veth15: left promiscuous mode [ 1034.876505][ T5435] vlan1: left allmulticast mode [ 1034.882316][ T5435] erspan0: left allmulticast mode [ 1034.889756][ T5435] vlan2: left allmulticast mode [ 1034.902213][ T5435] veth21: left promiscuous mode [ 1034.921273][ T5435] geneve3: left promiscuous mode [ 1034.926733][ T5435] geneve3: left allmulticast mode [ 1034.942538][ T5435] bond14: left promiscuous mode [ 1034.948192][ T5435] bridge5: left promiscuous mode [ 1034.994358][ T5465] netlink: 'syz.2.8902': attribute type 1 has an invalid length. [ 1035.064945][ T5466] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8902'. [ 1035.109712][ T5455] hsr_slave_0 (unregistering): left promiscuous mode [ 1035.540789][ T5492] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8907'. [ 1035.830533][ T5519] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1036.575545][ T5853] Bluetooth: hci2: command tx timeout [ 1036.669824][ T5551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8916'. [ 1036.856711][ T5568] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8919'. [ 1037.094173][ T5580] netlink: 'syz.2.8922': attribute type 10 has an invalid length. [ 1037.126644][ T5580] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8922'. [ 1037.226502][ T5589] netlink: 'syz.0.8924': attribute type 1 has an invalid length. [ 1037.453593][ T5609] netlink: 596 bytes leftover after parsing attributes in process `syz.5.8926'. [ 1037.560123][ T5600] bond19: (slave veth27): Enslaving as a backup interface with a down link [ 1037.620263][ T5605] netlink: 'syz.2.8927': attribute type 2 has an invalid length. [ 1037.702981][ T5610] netlink: 'syz.4.8928': attribute type 21 has an invalid length. [ 1037.732735][ T5610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8928'. [ 1038.056522][ T5636] netlink: 'syz.2.8932': attribute type 1 has an invalid length. [ 1038.312369][ T5633] bond1 (unregistering): Released all slaves [ 1038.386123][ T5649] macsec2: entered promiscuous mode [ 1038.406965][ T5649] macsec2: entered allmulticast mode [ 1038.426767][ T5649] bridge0: entered allmulticast mode [ 1038.446392][ T5649] bridge0: port 4(macsec2) entered blocking state [ 1038.453855][ T5649] bridge0: port 4(macsec2) entered disabled state [ 1038.494786][ T5649] bridge0: left allmulticast mode [ 1038.746108][ T5662] syzkaller0: entered promiscuous mode [ 1038.770088][ T5662] syzkaller0: entered allmulticast mode [ 1038.796867][ T5671] netlink: 'syz.2.8941': attribute type 6 has an invalid length. [ 1038.839160][ T5671] netlink: 'syz.2.8941': attribute type 6 has an invalid length. [ 1038.848063][ T5672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1038.868419][ T5672] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 1038.909574][ T5672] bond0: (slave gre0): Error -95 calling set_mac_address [ 1039.008469][ T5678] netlink: 'syz.1.8938': attribute type 3 has an invalid length. [ 1039.054497][ T5678] netlink: 'syz.1.8938': attribute type 1 has an invalid length. [ 1039.087808][ T5672] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1039.190745][ T5691] vlan1: entered allmulticast mode [ 1039.220189][ T5691] veth0_vlan: entered allmulticast mode [ 1039.425732][ T5699] netlink: 'syz.5.8943': attribute type 4 has an invalid length. [ 1040.266476][ T5745] __nla_validate_parse: 2 callbacks suppressed [ 1040.266498][ T5745] netlink: 224 bytes leftover after parsing attributes in process `syz.5.8955'. [ 1040.767530][ T5774] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8964'. [ 1041.093912][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1041.107814][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1041.125855][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1041.159483][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1041.171005][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1041.248966][ T5789] wlan0 speed is unknown, defaulting to 1000 [ 1041.257380][ T5789] wg1 speed is unknown, defaulting to 1000 [ 1041.466339][ T5811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8973'. [ 1041.477563][ T5809] x_tables: duplicate underflow at hook 1 [ 1041.500917][ T5812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8973'. [ 1041.632715][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 1041.877454][ T5828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8977'. [ 1041.904388][ T5831] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8978'. [ 1042.029000][T27438] syz_tun (unregistering): left allmulticast mode [ 1042.039690][T27438] syz_tun (unregistering): left promiscuous mode [ 1042.047164][T27438] bridge0: port 3(syz_tun) entered disabled state [ 1042.461747][ T5867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8982'. [ 1042.499371][ T5868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8982'. [ 1042.522553][ T5859] xt_CT: No such helper "snmp_trap" [ 1042.771387][ T2985] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1042.806846][ T2985] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.830646][ T2985] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1043.075964][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.092966][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.119380][ T5789] bridge_slave_0: entered allmulticast mode [ 1043.150750][ T5789] bridge_slave_0: entered promiscuous mode [ 1043.216030][ T5842] Bluetooth: hci4: command tx timeout [ 1043.291171][ T2985] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1043.306661][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8989'. [ 1043.314469][ T2985] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.327408][ T2985] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1043.345994][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.353255][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.360963][ T5789] bridge_slave_1: entered allmulticast mode [ 1043.372755][ T5789] bridge_slave_1: entered promiscuous mode [ 1043.549137][ T2985] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1043.581523][ T2985] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.602839][ T2985] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1043.678124][ T5936] validate_nla: 6 callbacks suppressed [ 1043.678145][ T5936] netlink: 'syz.1.8990': attribute type 10 has an invalid length. [ 1043.765660][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1043.900560][ T2985] bond0: (slave netdevsim0): Releasing backup interface [ 1043.918059][ T2985] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1043.928977][ T2985] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.946214][ T2985] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1044.032397][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1044.218881][ T5969] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8999'. [ 1044.238751][ T5789] team0: Port device team_slave_0 added [ 1044.263271][ T5789] team0: Port device team_slave_1 added [ 1044.375937][ T5978] netlink: 'syz.2.9001': attribute type 1 has an invalid length. [ 1044.452771][ T5986] netlink: 'syz.1.9003': attribute type 1 has an invalid length. [ 1044.513077][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1044.526211][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1044.564385][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1044.594417][T22439] netdevsim netdevsim0 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 1044.631307][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1044.652266][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1044.680576][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1044.747638][T22450] netdevsim netdevsim0 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 1044.930177][ T5601] netdevsim netdevsim0 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 1044.953947][ T6007] netlink: 'syz.5.9009': attribute type 5 has an invalid length. [ 1045.026616][T22449] netdevsim netdevsim0 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 1045.044787][ T2985] .: left allmulticast mode [ 1045.064834][ T2985] .: left promiscuous mode [ 1045.092097][ T2985] bridge0: port 2(.) entered disabled state [ 1045.141353][ T2985] bridge_slave_0: left allmulticast mode [ 1045.160506][ T2985] bridge_slave_0: left promiscuous mode [ 1045.173900][ T2985] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.199986][ T2985] veth0_to_bond: left allmulticast mode [ 1045.212951][ T2985] veth0_to_bond: left promiscuous mode [ 1045.225557][ T2985] bridge2: port 2(veth0_to_bond) entered disabled state [ 1045.254942][ T2985] veth7: left allmulticast mode [ 1045.275209][ T2985] veth7: left promiscuous mode [ 1045.283734][ T2985] bridge2: port 1(veth7) entered disabled state [ 1045.296915][ T5842] Bluetooth: hci4: command tx timeout [ 1045.531531][ T6033] nft_compat: unsupported protocol 0 [ 1045.541471][ T6034] nft_compat: unsupported protocol 0 [ 1045.610678][ T2985] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1045.620157][ T2985] bond2 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 1a:8a:42:c4:5d:95 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1045.954350][ T2985] bond6 (unregistering): (slave geneve2): Releasing active interface [ 1046.325629][ T2985] bond14 (unregistering): (slave bridge5): Releasing backup interface [ 1046.469108][ T2985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1046.480590][ T2985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1046.491289][ T2985] bond0 (unregistering): Released all slaves [ 1046.502689][ T2985] bond1 (unregistering): Released all slaves [ 1046.518512][ T2985] bond2 (unregistering): (slave veth9): Releasing backup interface [ 1046.528758][ T2985] bond2 (unregistering): Released all slaves [ 1046.545110][ T2985] bond3 (unregistering): (slave veth11): Releasing backup interface [ 1046.557669][ T2985] bond3 (unregistering): Released all slaves [ 1046.572039][ T2985] bond4 (unregistering): (slave veth13): Releasing backup interface [ 1046.584121][ T2985] bond4 (unregistering): Released all slaves [ 1046.718489][ T2985] bond5 (unregistering): (slave veth15): Releasing active interface [ 1046.729964][ T2985] bond5 (unregistering): Released all slaves [ 1046.743434][ T2985] bond6 (unregistering): Released all slaves [ 1046.759308][ T2985] bond7 (unregistering): (slave veth21): Releasing backup interface [ 1046.769691][ T2985] bond7 (unregistering): Released all slaves [ 1046.783086][ T2985] bond8 (unregistering): Released all slaves [ 1046.800661][ T2985] bond9 (unregistering): Released all slaves [ 1046.941785][ T2985] bond10 (unregistering): Released all slaves [ 1046.955941][ T2985] bond11 (unregistering): Released all slaves [ 1047.093840][ T2985] bond12 (unregistering): Released all slaves [ 1047.110029][ T2985] bond13 (unregistering): (slave veth23): Releasing backup interface [ 1047.120357][ T2985] bond13 (unregistering): Released all slaves [ 1047.283734][ T2985] bond14 (unregistering): Released all slaves [ 1047.385129][ T5842] Bluetooth: hci4: command tx timeout [ 1047.453414][ T2985] bond15 (unregistering): Released all slaves [ 1047.579775][ T2985] bond16 (unregistering): Released all slaves [ 1047.593062][ T2985] bond17 (unregistering): Released all slaves [ 1047.606296][ T2985] bond18 (unregistering): Released all slaves [ 1047.620425][ T2985] bond19 (unregistering): (slave veth27): Releasing backup interface [ 1047.630955][ T2985] bond19 (unregistering): Released all slaves [ 1047.653865][ T5789] hsr_slave_0: entered promiscuous mode [ 1047.660584][ T5789] hsr_slave_1: entered promiscuous mode [ 1047.670897][ T5789] debugfs: 'hsr0' already exists in 'hsr' [ 1047.678998][ T5789] Cannot create hsr debugfs directory [ 1047.738228][ T6019] bridge: RTM_NEWNEIGH with invalid ether address [ 1048.129295][ T6069] x_tables: duplicate underflow at hook 2 [ 1048.191196][ T6071] netlink: 'syz.5.9019': attribute type 4 has an invalid length. [ 1048.389628][ T6085] geneve2: entered promiscuous mode [ 1048.560391][ T5789] netdevsim netdevsim0 eth8 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1048.607588][ T6096] openvswitch: netlink: IPv4 tun info is not correct [ 1048.873107][ T5789] netdevsim netdevsim0 eth7 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1048.994748][ T6106] __nla_validate_parse: 4 callbacks suppressed [ 1048.994771][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9030'. [ 1049.157045][ T5789] netdevsim netdevsim0 eth6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1049.220068][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9033'. [ 1049.272168][ T5789] netdevsim netdevsim0 eth5 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1049.456060][ T5842] Bluetooth: hci4: command tx timeout [ 1049.503064][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9035'. [ 1049.640792][ T2985] hsr_slave_1: left promiscuous mode [ 1049.658223][ T2985] veth1_vlan: left promiscuous mode [ 1049.660305][ T6144] sctp: [Deprecated]: syz.1.9037 (pid 6144) Use of int in max_burst socket option. [ 1049.660305][ T6144] Use struct sctp_assoc_value instead [ 1049.693239][ T6147] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1049.712962][ T6147] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1050.202788][ T6168] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9039'. [ 1051.492288][ T6182] bond13: invalid ARP target 0.0.0.0 specified for addition [ 1051.500527][ T6182] bond13: option arp_ip_target: invalid value (0) [ 1051.522679][ T6182] bond13 (unregistering): Released all slaves [ 1051.696426][ T5789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1051.832421][ T5789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1051.862227][ T2985] IPVS: stop unused estimator thread 0... [ 1051.862802][ T5789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1051.910692][ T5789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1052.121133][ T2985] bridge_slave_1: left allmulticast mode [ 1052.165375][ T2985] bridge_slave_1: left promiscuous mode [ 1052.189925][ T2985] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.420504][ T2985] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1052.441559][ T2985] bond3 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 0a:dc:4b:1f:80:25 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1052.934737][ T2985] bond10 (unregistering): (slave gretap2): Releasing active interface [ 1053.018059][ T2985] bond8 (unregistering): (slave geneve3): Releasing active interface [ 1053.041344][ T2985] bond7 (unregistering): (slave geneve2): Releasing active interface [ 1053.457041][ T2985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1053.467150][ T2985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1053.478432][ T2985] bond0 (unregistering): (slave ÿ): Releasing backup interface [ 1053.487942][ T2985] bond0 (unregistering): Released all slaves [ 1053.499160][ T2985] bond1 (unregistering): Released all slaves [ 1053.627939][ T2985] bond2 (unregistering): Released all slaves [ 1053.641659][ T2985] bond3 (unregistering): (slave veth3): Releasing backup interface [ 1053.650855][ T2985] bond3 (unregistering): Released all slaves [ 1053.778448][ T2985] bond4 (unregistering): Released all slaves [ 1053.792123][ T2985] bond5 (unregistering): (slave veth5): Releasing backup interface [ 1053.801728][ T2985] bond5 (unregistering): Released all slaves [ 1053.823674][ T2985] bond6 (unregistering): (slave veth7): Releasing backup interface [ 1053.834166][ T2985] bond6 (unregistering): Released all slaves [ 1053.964176][ T2985] bond7 (unregistering): Released all slaves [ 1054.087531][ T2985] bond8 (unregistering): Released all slaves [ 1054.104767][ T2985] bond9 (unregistering): Released all slaves [ 1054.117868][ T2985] bond10 (unregistering): Released all slaves [ 1054.132979][ T6233] netdevsim netdevsim1: Firmware load for './file0/file0/..' refused, path contains '..' component [ 1054.345779][ T2985] tipc: Disabling bearer [ 1054.399482][ T2985] tipc: Left network mode [ 1054.486800][ T6280] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9058'. [ 1054.621560][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1054.663171][ T6292] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9061'. [ 1054.794873][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 1054.871951][ T6303] 8021q: VLANs not supported on tunl0 [ 1054.895659][ T6303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9065'. [ 1054.962670][ T1966] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.969935][ T1966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1054.999666][T22449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.006917][T22449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1055.437400][ T6328] tipc: New replicast peer: 255.255.255.255 [ 1055.470971][ T6328] tipc: Enabled bearer , priority 10 [ 1055.507072][ T6333] netlink: 'syz.2.9072': attribute type 11 has an invalid length. [ 1055.550387][ T6330] geneve2: entered promiscuous mode [ 1055.739495][ T2985] hsr_slave_0: left promiscuous mode [ 1055.793502][ T2985] hsr_slave_1: left promiscuous mode [ 1055.800357][ T2985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1055.845255][ T2985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1055.881204][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9076'. [ 1055.973717][ T2985] batadv2 (unregistering): left allmulticast mode [ 1056.001390][ T2985] team0 (unregistering): Port device batadv2 removed [ 1056.048719][ T2985] pim6reg (unregistering): left allmulticast mode [ 1056.126143][ T2985] batadv1 (unregistering): left allmulticast mode [ 1056.133733][ T2985] team0 (unregistering): Port device batadv1 removed [ 1056.630396][ T2985] team_slave_1 (unregistering): left allmulticast mode [ 1056.638518][ T2985] team0 (unregistering): Port device team_slave_1 removed [ 1056.724866][ T2985] team_slave_0 (unregistering): left allmulticast mode [ 1056.739529][ T2985] team0 (unregistering): Port device team_slave_0 removed [ 1056.846390][ T6373] netlink: 'syz.4.9081': attribute type 1 has an invalid length. [ 1057.065273][ T25] block nbd6: Possible stuck request ffff8880262a8000: control (read@0,1024B). Runtime 120 seconds [ 1057.069272][ T6379] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9083'. [ 1057.076933][ T25] block nbd6: Possible stuck request ffff8880262a8200: control (read@1024,1024B). Runtime 120 seconds [ 1057.088551][ T6379] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9083'. [ 1057.096998][ T25] block nbd6: Possible stuck request ffff8880262a8400: control (read@2048,1024B). Runtime 120 seconds [ 1057.118917][ T25] block nbd6: Possible stuck request ffff8880262a8600: control (read@3072,1024B). Runtime 120 seconds [ 1057.224107][ T2985] team0 (unregistering): left allmulticast mode [ 1057.364067][ T6376] bond13: (slave veth11): Enslaving as a backup interface with a down link [ 1057.388191][ T6379] erspan0: entered promiscuous mode [ 1057.394360][ T6379] gretap0: entered promiscuous mode [ 1057.416932][ T6379] debugfs: 'hsr1' already exists in 'hsr' [ 1057.425924][ T6379] Cannot create hsr debugfs directory [ 1057.442640][ T6379] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 1057.473259][ T6379] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 1059.457166][ T6394] netlink: 'syz.5.9087': attribute type 1 has an invalid length. [ 1059.596639][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1059.644451][ T6403] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9088'. [ 1059.766945][ T6408] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9090'. [ 1059.777639][ T6408] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9090'. [ 1059.862562][ T5789] veth0_vlan: entered promiscuous mode [ 1059.872550][ T2985] IPVS: stop unused estimator thread 0... [ 1059.888812][ T5789] veth1_vlan: entered promiscuous mode [ 1059.946017][ T5789] veth0_macvtap: entered promiscuous mode [ 1059.960087][ T5789] veth1_macvtap: entered promiscuous mode [ 1059.993419][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1060.011664][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1060.031913][T22455] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.042271][T22455] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.058110][T22455] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.068122][T22455] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.169938][T22455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1060.188802][T22455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1060.234691][ T1036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1060.248450][ T1036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1060.338885][ T6427] netem: incorrect ge model size [ 1060.344349][ T6427] netem: change failed [ 1060.353749][ T6427] netem: incorrect ge model size [ 1060.364626][ T6427] netem: change failed [ 1060.365889][ T6431] netlink: 'syz.0.8963': attribute type 3 has an invalid length. [ 1060.578095][ T6434] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1060.703614][ T5853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1060.719715][ T5853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1060.735463][ T5853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1060.746027][ T5853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1060.753684][ T5853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1060.770596][ T6442] netlink: 272 bytes leftover after parsing attributes in process `syz.2.9100'. [ 1060.811464][ T6439] wlan0 speed is unknown, defaulting to 1000 [ 1060.822693][ T6439] wg1 speed is unknown, defaulting to 1000 [ 1060.947068][ T6445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9101'. [ 1060.980423][ T6445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9101'. [ 1060.993655][ T6447] netlink: 'syz.5.9102': attribute type 11 has an invalid length. [ 1061.045496][ T6447] netlink: 'syz.5.9102': attribute type 4 has an invalid length. [ 1061.053289][ T6447] netlink: 'syz.5.9102': attribute type 5 has an invalid length. [ 1061.125044][ T6447] netlink: 'syz.5.9102': attribute type 6 has an invalid length. [ 1061.132951][ T6447] netlink: 199748 bytes leftover after parsing attributes in process `syz.5.9102'. [ 1061.136734][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9104'. [ 1061.292833][ T6460] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 1061.304620][ T6456] bond1: entered allmulticast mode [ 1061.311220][ T6456] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1061.316923][ T6463] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 1061.479887][T22449] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1061.513155][T22449] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.579330][ T6471] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9108'. [ 1061.599219][ T6439] chnl_net:caif_netlink_parms(): no params data found [ 1061.785968][ T6481] netlink: 'syz.0.9112': attribute type 1 has an invalid length. [ 1061.825237][ T6485] netlink: 'syz.1.9115': attribute type 1 has an invalid length. [ 1061.825844][ T6483] xt_connbytes: Forcing CT accounting to be enabled [ 1061.833088][ T6485] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9115'. [ 1061.844582][T22449] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1061.866047][T22449] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.884873][ T6483] ipt_REJECT: ECHOREPLY no longer supported. [ 1061.922129][ T6486] bridge0: port 3(ip6gretap1) entered blocking state [ 1061.929363][ T6486] bridge0: port 3(ip6gretap1) entered disabled state [ 1061.937524][ T6486] ip6gretap1: entered allmulticast mode [ 1061.944894][ T6486] ip6gretap1: entered promiscuous mode [ 1062.071545][ T6494] bridge0: port 4(veth3) entered blocking state [ 1062.085808][ T6494] bridge0: port 4(veth3) entered disabled state [ 1062.107490][ T6494] veth3: entered allmulticast mode [ 1062.114810][ T6494] veth3: entered promiscuous mode [ 1062.228137][T22449] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1062.241527][T22449] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.293777][ T6439] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.316867][ T6439] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.334881][ T6439] bridge_slave_0: entered allmulticast mode [ 1062.346293][ T6439] bridge_slave_0: entered promiscuous mode [ 1062.362629][ T6512] syzkaller0: entered promiscuous mode [ 1062.369665][ T6512] syzkaller0: entered allmulticast mode [ 1062.445665][ T6439] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.453242][ T6439] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.472476][ T6439] bridge_slave_1: entered allmulticast mode [ 1062.498272][ T6439] bridge_slave_1: entered promiscuous mode [ 1062.620528][ T6491] wlan0 speed is unknown, defaulting to 1000 [ 1062.659257][ T6491] wg1 speed is unknown, defaulting to 1000 [ 1062.671944][ T6439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1062.711732][ T6439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1062.817890][ T5853] Bluetooth: hci5: command tx timeout [ 1062.827383][ T2220] netdevsim netdevsim4 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 1062.893543][ T2220] netdevsim netdevsim4 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 1062.914391][ T6439] team0: Port device team_slave_0 added [ 1062.970301][ T6439] team0: Port device team_slave_1 added [ 1062.989548][ T1966] netdevsim netdevsim4 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.053206][ T6439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1063.062344][ T6439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1063.090187][ T6439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1063.103285][T22450] netdevsim netdevsim4 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.114487][ T6439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1063.122394][ T6439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1063.149924][ T6439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1063.438496][T22449] bond5 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1063.449144][T22449] bond5 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 5a:0e:bf:db:46:cf - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1063.601725][T22449] bond2 (unregistering): (slave xfrm0): Releasing backup interface [ 1064.895335][ T5853] Bluetooth: hci5: command tx timeout [ 1065.333997][T22449] bond11 (unregistering): (slave macvlan2): Releasing active interface [ 1065.348133][T22449] bond0 (unregistering): Released all slaves [ 1065.359342][T22449] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1065.370643][T22449] bond1 (unregistering): Released all slaves [ 1065.387991][T22449] bond2 (unregistering): Released all slaves [ 1065.518545][T22449] bond3 (unregistering): Released all slaves [ 1065.531701][T22449] bond4 (unregistering): Released all slaves [ 1065.549236][T22449] bond5 (unregistering): (slave veth5): Releasing backup interface [ 1065.559390][T22449] bond5 (unregistering): Released all slaves [ 1065.687213][T22449] bond6 (unregistering): Released all slaves [ 1065.815429][T22449] bond7 (unregistering): Released all slaves [ 1065.828571][T22449] bond8 (unregistering): Released all slaves [ 1065.842849][T22449] bond9 (unregistering): (slave veth9): Releasing backup interface [ 1065.853153][T22449] bond9 (unregistering): Released all slaves [ 1065.867612][T22449] bond10 (unregistering): Released all slaves [ 1065.999281][T22449] bond11 (unregistering): Released all slaves [ 1066.013399][T22449] bond12 (unregistering): Released all slaves [ 1066.033127][T22449] bond13 (unregistering): (slave veth11): Releasing backup interface [ 1066.043235][T22449] bond13 (unregistering): Released all slaves [ 1066.139477][ T6563] netlink: 'syz.2.9130': attribute type 11 has an invalid length. [ 1066.147593][ T6563] netlink: 'syz.2.9130': attribute type 11 has an invalid length. [ 1066.155607][ T6563] __nla_validate_parse: 3 callbacks suppressed [ 1066.155623][ T6563] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9130'. [ 1066.354014][ T6439] hsr_slave_0: entered promiscuous mode [ 1066.363607][ T6439] hsr_slave_1: entered promiscuous mode [ 1066.370738][ T6439] debugfs: 'hsr0' already exists in 'hsr' [ 1066.376967][ T6439] Cannot create hsr debugfs directory [ 1066.382669][T22449] tipc: Left network mode [ 1066.401126][ T6565] netlink: 'syz.2.9130': attribute type 11 has an invalid length. [ 1066.425720][ T6565] netlink: 'syz.2.9130': attribute type 11 has an invalid length. [ 1066.443753][ T6565] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9130'. [ 1066.692162][ T6578] netlink: 408 bytes leftover after parsing attributes in process `syz.5.9134'. [ 1066.976072][ T5853] Bluetooth: hci5: command tx timeout [ 1067.072389][ T6597] netlink: 'syz.2.9138': attribute type 10 has an invalid length. [ 1067.099912][ T6597] bridge0: port 3(team0) entered blocking state [ 1067.107427][ T6597] bridge0: port 3(team0) entered disabled state [ 1067.120382][ T6597] team0: entered allmulticast mode [ 1067.127973][ T6597] team_slave_0: entered allmulticast mode [ 1067.143332][ T6597] team_slave_1: entered allmulticast mode [ 1067.163579][ T6599] netlink: 'syz.5.9139': attribute type 7 has an invalid length. [ 1067.198650][ T6597] team0: entered promiscuous mode [ 1067.204132][ T6597] team_slave_0: entered promiscuous mode [ 1067.217965][ T6597] team_slave_1: entered promiscuous mode [ 1067.224747][ T6597] bridge0: port 3(team0) entered blocking state [ 1067.231259][ T6597] bridge0: port 3(team0) entered forwarding state [ 1067.352140][ T6599] netlink: 'syz.5.9139': attribute type 7 has an invalid length. [ 1067.388667][ T6439] netdevsim netdevsim4 eth8 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1067.556124][ T6439] netdevsim netdevsim4 eth7 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1067.757547][ T6439] netdevsim netdevsim4 eth6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1067.869839][ T6629] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9145'. [ 1067.898086][ T6439] netdevsim netdevsim4 eth5 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1068.209698][T22449] hsr_slave_0: left promiscuous mode [ 1068.230386][T22449] hsr_slave_1: left promiscuous mode [ 1068.232397][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9149'. [ 1068.266629][ T6646] netlink: 'syz.1.9149': attribute type 3 has an invalid length. [ 1068.555804][T22449] team0 (unregistering): Port device batadv0 removed [ 1068.598090][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9153'. [ 1068.649732][T22449] pim6reg527 (unregistering): left allmulticast mode [ 1068.803415][ T6669] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9152'. [ 1069.066121][ T5853] Bluetooth: hci5: command tx timeout [ 1069.653122][ T6665] syzkaller0: entered promiscuous mode [ 1069.659415][ T6665] syzkaller0: entered allmulticast mode [ 1070.013528][ T6687] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9158'. [ 1071.876034][ T6689] siw: device registration error -23 [ 1071.880954][ T6439] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1071.947045][ T6439] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1071.998529][ T6439] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1072.023247][ T6698] netlink: 'syz.2.9163': attribute type 1 has an invalid length. [ 1072.051283][ T6439] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1072.118688][ T6706] netlink: 'syz.1.9164': attribute type 26 has an invalid length. [ 1072.138161][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9164'. [ 1072.196230][ T6712] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9164'. [ 1072.234830][ T6703] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1072.284635][ T6707] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 1072.317624][ T6717] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1072.334505][T22449] IPVS: stop unused estimator thread 0... [ 1072.337503][ T6714] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9165'. [ 1072.495802][ T6721] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9167'. [ 1072.495967][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9168'. [ 1072.504917][ T6721] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9167'. [ 1072.544788][ T6726] netlink: 'syz.5.9169': attribute type 3 has an invalid length. [ 1072.554681][ T6726] netlink: 'syz.5.9169': attribute type 1 has an invalid length. [ 1072.567496][ T6726] netlink: 212 bytes leftover after parsing attributes in process `syz.5.9169'. [ 1072.577716][ T6721] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9167'. [ 1072.586884][ T6721] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9167'. [ 1072.607464][ T6726] NCSI netlink: No device for ifindex 813332851 [ 1072.618112][ T6723] netlink: 'syz.2.9168': attribute type 10 has an invalid length. [ 1072.624461][ T6729] netlink: 'syz.1.9167': attribute type 1 has an invalid length. [ 1072.674355][ T6723] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1072.856864][ T6736] tipc: Enabled bearer , priority 0 [ 1072.864817][ T6736] syzkaller0: entered promiscuous mode [ 1072.871163][ T6736] syzkaller0: entered allmulticast mode [ 1072.892877][ T6439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1073.289030][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9175'. [ 1073.302662][ T6753] tipc: Resetting bearer [ 1073.341592][ T6734] tipc: Resetting bearer [ 1073.408636][ T6734] tipc: Disabling bearer [ 1073.511918][ T6439] 8021q: adding VLAN 0 to HW filter on device team0 [ 1073.543598][ T3838] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.550898][ T3838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1073.659233][ T3838] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.666482][ T3838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1074.543410][ T6439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1074.874092][ T6826] veth3: left allmulticast mode [ 1074.890261][ T6826] geneve2: left promiscuous mode [ 1074.900725][ T6826] geneve2: left allmulticast mode [ 1074.945777][ T6826] bond1: left promiscuous mode [ 1075.030807][ T2985] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1075.052972][ T2985] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 1075.090274][ T2985] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1075.141619][ T2985] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 1075.170753][ T2985] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1075.201117][ T2985] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 1075.239365][ T2985] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1075.268519][ T2985] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 1075.518096][ T6439] veth0_vlan: entered promiscuous mode [ 1075.565557][ T6439] veth1_vlan: entered promiscuous mode [ 1075.641053][ T6439] veth0_macvtap: entered promiscuous mode [ 1075.724460][ T6858] ªªªªª98åFÿÿÿÿ: renamed from lo [ 1075.751871][ T6439] veth1_macvtap: entered promiscuous mode [ 1075.850903][ T6439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1075.903718][ T6439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1075.951102][ T6868] netlink: 'syz.1.9198': attribute type 1 has an invalid length. [ 1075.977334][ T5601] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.989247][ T6871] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1075.996270][ T6871] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1075.998500][ T5601] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.025085][ T6868] netlink: 'syz.1.9198': attribute type 7 has an invalid length. [ 1076.033042][ T6868] netlink: 'syz.1.9198': attribute type 8 has an invalid length. [ 1076.046210][ T5601] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.072389][ T5601] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.373204][T22463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1076.395798][T22463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1076.511384][ T5617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1076.571910][ T5617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1076.858120][ T6913] veth0: entered promiscuous mode [ 1076.873404][ T6917] IPv6: addrconf: prefix option has invalid lifetime [ 1076.880216][ T6917] IPv6: addrconf: prefix option has invalid lifetime [ 1076.993963][ T6920] veth0: left promiscuous mode [ 1077.140792][ T6929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1077.331047][ T6943] __nla_validate_parse: 13 callbacks suppressed [ 1077.331073][ T6943] netlink: 220 bytes leftover after parsing attributes in process `syz.0.9214'. [ 1077.491556][ T6952] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9216'. [ 1077.699741][ T6959] netlink: 788 bytes leftover after parsing attributes in process `syz.5.9217'. [ 1077.776067][ T5842] Bluetooth: hci5: command 0x0405 tx timeout [ 1078.041719][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9225'. [ 1078.060801][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9225'. [ 1078.201236][ T6989] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9228'. [ 1078.437880][ T7003] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9231'. [ 1078.549514][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1078.567868][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1078.580724][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1078.589620][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1078.597583][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1078.772354][ T7006] wlan0 speed is unknown, defaulting to 1000 [ 1078.827351][ T7006] wg1 speed is unknown, defaulting to 1000 [ 1079.037861][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9236'. [ 1079.061385][ T7017] C: renamed from team_slave_0 [ 1079.120867][ T7017] netlink: 'syz.5.9234': attribute type 1 has an invalid length. [ 1079.132466][ T7017] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1079.189856][ T7016] netlink: 'syz.5.9234': attribute type 1 has an invalid length. [ 1079.208169][ T7016] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1079.335558][ T7035] netlink: 'syz.2.9237': attribute type 1 has an invalid length. [ 1079.446412][ T7043] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9240'. [ 1079.636156][ T7047] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 1079.776757][ T7059] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1079.836491][ T7059] bond1 (unregistering): Released all slaves [ 1079.877936][ T7063] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9245'. [ 1080.169665][ T7006] chnl_net:caif_netlink_parms(): no params data found [ 1080.207085][ T7075] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1080.368726][ T7096] xt_hashlimit: size too large, truncated to 1048576 [ 1080.597822][ T7006] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.613845][ T7006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.635892][ T7006] bridge_slave_0: entered allmulticast mode [ 1080.644363][ T7006] bridge_slave_0: entered promiscuous mode [ 1080.656724][ T5842] Bluetooth: hci0: command tx timeout [ 1080.700517][ T7006] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.708063][ T7006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.717446][ T7006] bridge_slave_1: entered allmulticast mode [ 1080.726473][ T7006] bridge_slave_1: entered promiscuous mode [ 1080.786185][ T7006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1080.807157][ T7006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1080.840116][ T7110] netlink: 'syz.2.9255': attribute type 29 has an invalid length. [ 1080.914541][ T7006] team0: Port device team_slave_0 added [ 1080.927185][ T7006] team0: Port device team_slave_1 added [ 1080.996210][ T7006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1081.003549][ T7006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1081.030639][ T7006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1081.043616][ T7006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1081.076661][ T7006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1081.150105][ T7006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1081.185716][ T7123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.193273][ T7123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.420030][ T7006] hsr_slave_0: entered promiscuous mode [ 1081.437810][ T7006] hsr_slave_1: entered promiscuous mode [ 1081.444376][ T7006] debugfs: 'hsr0' already exists in 'hsr' [ 1081.472646][ T7006] Cannot create hsr debugfs directory [ 1081.684649][ T7159] netlink: 'syz.2.9269': attribute type 1 has an invalid length. [ 1081.854798][ T7159] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 1081.969537][ T7175] netlink: 'syz.4.9275': attribute type 1 has an invalid length. [ 1082.126424][ T7183] x_tables: duplicate underflow at hook 1 [ 1082.144570][ T7006] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1082.170179][ T7006] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.302114][ T7006] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1082.313413][ T7006] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.333314][ T7188] netlink: 'syz.4.9280': attribute type 1 has an invalid length. [ 1082.342084][ T7188] netlink: 'syz.4.9280': attribute type 2 has an invalid length. [ 1082.350698][ T7191] __nla_validate_parse: 7 callbacks suppressed [ 1082.350716][ T7191] netlink: 666 bytes leftover after parsing attributes in process `syz.5.9279'. [ 1082.368058][ T7195] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9281'. [ 1082.438144][ T7006] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1082.455336][ T7006] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.553006][ T7200] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9282'. [ 1082.613496][ T7006] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1082.637041][ T7006] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.672470][ T7199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1082.703176][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9284'. [ 1082.723574][ T7199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1082.736703][ T5842] Bluetooth: hci0: command tx timeout [ 1082.911781][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9287'. [ 1083.100534][ T7220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1083.113011][ T7006] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1083.149822][ T7006] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1083.203753][ T7006] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1083.240059][ T7006] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1083.431528][ T7006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1083.462988][ T7006] 8021q: adding VLAN 0 to HW filter on device team0 [ 1083.486169][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9294'. [ 1083.488999][T22468] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.502206][T22468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1083.519137][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9294'. [ 1083.527672][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9295'. [ 1083.543384][T22453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.550621][T22453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1083.562581][ T7253] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9294'. [ 1083.681309][ T7255] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9297'. [ 1083.696591][ T7257] netlink: 'syz.4.9299': attribute type 1 has an invalid length. [ 1083.914419][ T7269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1084.016702][ T7275] netlink: 'syz.0.9302': attribute type 13 has an invalid length. [ 1084.037471][ T7269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1084.071106][ T7278] delete_channel: no stack [ 1084.249213][ T7284] ip6t_srh: unknown srh match flags 5F28 [ 1084.299397][ T7284] tipc: Enabling of bearer rejected, failed to enable media [ 1084.421562][ T7006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1084.530857][ T7006] veth0_vlan: entered promiscuous mode [ 1084.548822][ T7006] veth1_vlan: entered promiscuous mode [ 1084.637053][ T7006] veth0_macvtap: entered promiscuous mode [ 1084.651845][ T7006] veth1_macvtap: entered promiscuous mode [ 1084.681166][ T7006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1084.800535][ T7313] netlink: 'syz.4.9313': attribute type 1 has an invalid length. [ 1084.815825][ T5842] Bluetooth: hci0: command tx timeout [ 1084.841637][ T7305] bond4: ARP target 1.0.0.0 is already present [ 1084.854647][ T7305] bond4: option arp_ip_target: invalid value (1) [ 1084.863639][ T7305] bond4 (unregistering): Released all slaves [ 1084.884544][ T7308] lo: Caught tx_queue_len zero misconfig [ 1084.959196][ T7318] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1084.972824][ T7006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1084.980815][ T7316] bridge_slave_1: left allmulticast mode [ 1084.994172][ T7316] bridge_slave_1: left promiscuous mode [ 1085.008116][ T7316] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.062894][ T7316] bridge_slave_0: left allmulticast mode [ 1085.069491][ T7316] bridge_slave_0: left promiscuous mode [ 1085.079214][ T7316] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.189667][ T7313] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 1085.213258][T22451] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.248013][T22453] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.280590][T22453] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.327418][T22453] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.478201][ T7342] netlink: 'syz.4.9321': attribute type 2 has an invalid length. [ 1085.629446][ T7354] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 2, id = 0 [ 1085.728677][T22454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1085.745036][T22454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.821857][ T5617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1085.845464][ T5617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.159084][ T7386] netlink: 'syz.2.9331': attribute type 1 has an invalid length. [ 1086.326533][ T7386] bond4: (slave veth9): Enslaving as a backup interface with a down link [ 1086.702802][ T7420] tipc: Enabling of bearer rejected, failed to enable media [ 1086.714005][ T7421] tipc: Enabling of bearer rejected, failed to enable media [ 1086.732942][ T7418] netlink: 'syz.5.9340': attribute type 4 has an invalid length. [ 1086.823253][ T7428] netlink: 'syz.4.9341': attribute type 15 has an invalid length. [ 1086.896430][ T5842] Bluetooth: hci0: command tx timeout [ 1086.932532][ T7433] netlink: 'syz.2.9344': attribute type 62 has an invalid length. [ 1087.023623][ T7439] tipc: Started in network mode [ 1087.026709][ T7440] netlink: 'syz.2.9347': attribute type 1 has an invalid length. [ 1087.029628][ T7439] tipc: Node identity , cluster identity 4711 [ 1087.043026][ T7439] tipc: Failed to set node id, please configure manually [ 1087.050786][ T7439] tipc: Enabling of bearer rejected, failed to enable media [ 1087.139232][ T25] block nbd6: Possible stuck request ffff8880262a8000: control (read@0,1024B). Runtime 150 seconds [ 1087.154064][ T25] block nbd6: Possible stuck request ffff8880262a8200: control (read@1024,1024B). Runtime 150 seconds [ 1087.165998][ T25] block nbd6: Possible stuck request ffff8880262a8400: control (read@2048,1024B). Runtime 150 seconds [ 1087.177212][ T25] block nbd6: Possible stuck request ffff8880262a8600: control (read@3072,1024B). Runtime 150 seconds [ 1087.193601][ T7440] bond5: (slave veth11): Enslaving as a backup interface with a down link [ 1087.262697][ T7446] netlink: 'syz.1.9348': attribute type 83 has an invalid length. [ 1087.623416][ T7471] netlink: 'syz.1.9356': attribute type 1 has an invalid length. [ 1087.624625][ T7469] __nla_validate_parse: 16 callbacks suppressed [ 1087.624705][ T7469] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9355'. [ 1087.648482][ T7469] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9355'. [ 1087.782931][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9358'. [ 1087.817817][ T7472] syzkaller1: entered promiscuous mode [ 1087.829808][ T7472] syzkaller1: entered allmulticast mode [ 1087.836955][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9358'. [ 1087.853226][ T7481] netlink: 6040 bytes leftover after parsing attributes in process `syz.5.9359'. [ 1087.865194][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9358'. [ 1087.884292][ T7472] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1087.894714][ T7483] netlink: 6040 bytes leftover after parsing attributes in process `syz.5.9359'. [ 1087.909516][ T7472] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1088.000628][ T7487] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9360'. [ 1088.064858][ T7491] netlink: 'syz.5.9362': attribute type 1 has an invalid length. [ 1088.292633][ T7495] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1088.342381][ T7497] bond2: (slave veth7): Enslaving as a backup interface with a down link [ 1088.399375][ T7509] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1088.467017][ T7500] bond6: entered promiscuous mode [ 1088.513493][ T7500] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1088.597396][ T7507] bond6: (slave bridge1): making interface the new active one [ 1088.626033][ T7507] bridge1: entered promiscuous mode [ 1088.653630][ T7507] bridge1: left promiscuous mode [ 1088.690159][ T7523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9368'. [ 1088.757769][ T7523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9368'. [ 1089.314181][ T7558] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1089.332409][ T7553] bond3: (slave veth9): Enslaving as a backup interface with a down link [ 1089.347683][ T7558] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1089.997981][ T7550] ================================================================== [ 1090.006112][ T7550] BUG: KASAN: slab-use-after-free in ax25_find_cb+0x179/0x3a0 [ 1090.013618][ T7550] Read of size 8 at addr ffff8880287f8210 by task syz.4.9376/7550 [ 1090.021444][ T7550] [ 1090.022030][ T7595] validate_nla: 3 callbacks suppressed [ 1090.022046][ T7595] netlink: 'syz.5.9390': attribute type 1 has an invalid length. [ 1090.023788][ T7550] CPU: 1 UID: 0 PID: 7550 Comm: syz.4.9376 Not tainted syzkaller #0 PREEMPT(full) [ 1090.023821][ T7550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1090.023834][ T7550] Call Trace: [ 1090.023842][ T7550] [ 1090.023850][ T7550] dump_stack_lvl+0xe8/0x150 [ 1090.023879][ T7550] print_report+0xba/0x230 [ 1090.023900][ T7550] ? ax25_find_cb+0x179/0x3a0 [ 1090.023926][ T7550] kasan_report+0x117/0x150 [ 1090.023947][ T7550] ? ax25_find_cb+0x179/0x3a0 [ 1090.023974][ T7550] ax25_find_cb+0x179/0x3a0 [ 1090.024001][ T7550] rose_transmit_link+0x17b/0xac0 [ 1090.024028][ T7550] rose_write_internal+0x1256/0x1b60 [ 1090.024053][ T7550] ? lockdep_hardirqs_on+0x7a/0x110 [ 1090.024077][ T7550] ? __pfx_rose_write_internal+0x10/0x10 [ 1090.024103][ T7550] ? timer_delete+0x245/0x340 [ 1090.024129][ T7550] rose_release+0x25b/0x510 [ 1090.024150][ T7550] sock_close+0xc3/0x240 [ 1090.024177][ T7550] ? __pfx_sock_close+0x10/0x10 [ 1090.024203][ T7550] __fput+0x44f/0xa70 [ 1090.024230][ T7550] task_work_run+0x1d9/0x270 [ 1090.024255][ T7550] ? __pfx_task_work_run+0x10/0x10 [ 1090.024278][ T7550] ? task_work_add+0x395/0x440 [ 1090.024300][ T7550] ? __pfx_task_work_add+0x10/0x10 [ 1090.024323][ T7550] get_signal+0x11eb/0x1330 [ 1090.024358][ T7550] arch_do_signal_or_restart+0xbc/0x830 [ 1090.024386][ T7550] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1090.024420][ T7550] exit_to_user_mode_loop+0x86/0x480 [ 1090.024445][ T7550] ? rcu_is_watching+0x15/0xb0 [ 1090.024465][ T7550] do_syscall_64+0x2b7/0xf80 [ 1090.024484][ T7550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.024503][ T7550] ? trace_irq_disable+0x37/0x100 [ 1090.024521][ T7550] ? clear_bhb_loop+0x60/0xb0 [ 1090.024541][ T7550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.024560][ T7550] RIP: 0033:0x7f6a7839aeb9 [ 1090.024585][ T7550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1090.024602][ T7550] RSP: 002b:00007f6a7930f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1090.024623][ T7550] RAX: fffffffffffffe00 RBX: 00007f6a78615fa0 RCX: 00007f6a7839aeb9 [ 1090.024637][ T7550] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000014 [ 1090.024650][ T7550] RBP: 00007f6a78408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1090.024664][ T7550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1090.024676][ T7550] R13: 00007f6a78616038 R14: 00007f6a78615fa0 R15: 00007ffc32eab2d8 [ 1090.024698][ T7550] [ 1090.024706][ T7550] [ 1090.282515][ T7550] Allocated by task 5678: [ 1090.286848][ T7550] kasan_save_track+0x3e/0x80 [ 1090.291536][ T7550] __kasan_kmalloc+0x93/0xb0 [ 1090.296128][ T7550] __kmalloc_cache_noprof+0x3d1/0x6e0 [ 1090.301502][ T7550] ax25_dev_device_up+0x54/0x5f0 [ 1090.306448][ T7550] ax25_device_event+0x127/0x8a0 [ 1090.311392][ T7550] notifier_call_chain+0x19d/0x3a0 [ 1090.316501][ T7550] __dev_notify_flags+0x1a9/0x310 [ 1090.321531][ T7550] netif_change_flags+0xe8/0x1a0 [ 1090.326484][ T7550] dev_change_flags+0x130/0x260 [ 1090.331339][ T7550] dev_ioctl+0x7b4/0x1150 [ 1090.335673][ T7550] sock_do_ioctl+0x23e/0x320 [ 1090.340371][ T7550] sock_ioctl+0x5c6/0x7f0 [ 1090.344716][ T7550] __se_sys_ioctl+0xfc/0x170 [ 1090.349313][ T7550] do_syscall_64+0xe2/0xf80 [ 1090.353816][ T7550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.359720][ T7550] [ 1090.362048][ T7550] Freed by task 2985: [ 1090.366025][ T7550] kasan_save_track+0x3e/0x80 [ 1090.370707][ T7550] kasan_save_free_info+0x46/0x50 [ 1090.375738][ T7550] __kasan_slab_free+0x5c/0x80 [ 1090.380500][ T7550] kmem_cache_free_bulk+0x3f9/0xde0 [ 1090.385705][ T7550] kvfree_rcu_bulk+0xe5/0x1f0 [ 1090.390396][ T7550] kfree_rcu_monitor+0x211/0x2a0 [ 1090.395332][ T7550] process_scheduled_works+0xaec/0x17a0 [ 1090.400885][ T7550] worker_thread+0xda6/0x1360 [ 1090.405567][ T7550] kthread+0x726/0x8b0 [ 1090.409642][ T7550] ret_from_fork+0x51b/0xa40 [ 1090.414243][ T7550] ret_from_fork_asm+0x1a/0x30 [ 1090.419012][ T7550] [ 1090.421337][ T7550] Last potentially related work creation: [ 1090.427046][ T7550] kasan_save_stack+0x3e/0x60 [ 1090.431731][ T7550] kasan_record_aux_stack+0xbd/0xd0 [ 1090.436935][ T7550] kvfree_call_rcu+0x106/0x440 [ 1090.441698][ T7550] ax25_device_event+0x7eb/0x8a0 [ 1090.446644][ T7550] notifier_call_chain+0x19d/0x3a0 [ 1090.451758][ T7550] __dev_notify_flags+0x16d/0x310 [ 1090.456786][ T7550] netif_change_flags+0xe8/0x1a0 [ 1090.461815][ T7550] dev_change_flags+0x130/0x260 [ 1090.466674][ T7550] dev_ioctl+0x7b4/0x1150 [ 1090.471007][ T7550] sock_do_ioctl+0x23e/0x320 [ 1090.475610][ T7550] sock_ioctl+0x5c6/0x7f0 [ 1090.479946][ T7550] __se_sys_ioctl+0xfc/0x170 [ 1090.484543][ T7550] do_syscall_64+0xe2/0xf80 [ 1090.489063][ T7550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.494962][ T7550] [ 1090.497294][ T7550] The buggy address belongs to the object at ffff8880287f8200 [ 1090.497294][ T7550] which belongs to the cache kmalloc-256 of size 256 [ 1090.511346][ T7550] The buggy address is located 16 bytes inside of [ 1090.511346][ T7550] freed 256-byte region [ffff8880287f8200, ffff8880287f8300) [ 1090.525058][ T7550] [ 1090.527383][ T7550] The buggy address belongs to the physical page: [ 1090.533796][ T7550] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x287f8 [ 1090.542647][ T7550] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1090.551145][ T7550] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1090.558695][ T7550] page_type: f5(slab) [ 1090.562682][ T7550] raw: 00fff00000000040 ffff88813fe26b40 ffffea00009eba80 dead000000000004 [ 1090.571268][ T7550] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1090.579859][ T7550] head: 00fff00000000040 ffff88813fe26b40 ffffea00009eba80 dead000000000004 [ 1090.588532][ T7550] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1090.597205][ T7550] head: 00fff00000000001 ffffea0000a1fe01 00000000ffffffff 00000000ffffffff [ 1090.605876][ T7550] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1090.614539][ T7550] page dumped because: kasan: bad access detected [ 1090.620949][ T7550] page_owner tracks the page as allocated [ 1090.626659][ T7550] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 16369, tgid 16368 (syz.1.3004), ts 369791643157, free_ts 369536116785 [ 1090.648199][ T7550] post_alloc_hook+0x228/0x280 [ 1090.652968][ T7550] get_page_from_freelist+0x24dc/0x2580 [ 1090.658520][ T7550] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1090.664330][ T7550] alloc_pages_mpol+0x232/0x4a0 [ 1090.669181][ T7550] allocate_slab+0x86/0x3a0 [ 1090.673695][ T7550] ___slab_alloc+0xd82/0x1760 [ 1090.678383][ T7550] __slab_alloc+0x65/0x100 [ 1090.682804][ T7550] __kmalloc_cache_noprof+0x40d/0x6e0 [ 1090.688177][ T7550] tunnel_key_init_net+0x65/0x190 [ 1090.693213][ T7550] ops_init+0x35c/0x5c0 [ 1090.697372][ T7550] setup_net+0x118/0x340 [ 1090.701619][ T7550] copy_net_ns+0x50e/0x730 [ 1090.706038][ T7550] create_new_namespaces+0x3e7/0x6a0 [ 1090.711330][ T7550] unshare_nsproxy_namespaces+0x11a/0x160 [ 1090.717053][ T7550] ksys_unshare+0x4f4/0x900 [ 1090.721561][ T7550] __x64_sys_unshare+0x38/0x50 [ 1090.726332][ T7550] page last free pid 16366 tgid 16366 stack trace: [ 1090.732826][ T7550] __free_frozen_pages+0xbf8/0xd70 [ 1090.737940][ T7550] __put_partials+0x146/0x170 [ 1090.742623][ T7550] __slab_free+0x294/0x320 [ 1090.747043][ T7550] qlist_free_all+0x97/0x100 [ 1090.751641][ T7550] kasan_quarantine_reduce+0x148/0x160 [ 1090.757106][ T7550] __kasan_slab_alloc+0x22/0x80 [ 1090.761958][ T7550] kmem_cache_alloc_noprof+0x370/0x6e0 [ 1090.767451][ T7550] getname_flags+0xb7/0x540 [ 1090.771957][ T7550] do_sys_openat2+0xca/0x220 [ 1090.776549][ T7550] __x64_sys_openat+0x138/0x170 [ 1090.781409][ T7550] do_syscall_64+0xe2/0xf80 [ 1090.785912][ T7550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.791811][ T7550] [ 1090.794135][ T7550] Memory state around the buggy address: [ 1090.799765][ T7550] ffff8880287f8100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1090.807828][ T7550] ffff8880287f8180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1090.815890][ T7550] >ffff8880287f8200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1090.823950][ T7550] ^ [ 1090.828552][ T7550] ffff8880287f8280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1090.836617][ T7550] ffff8880287f8300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1090.844698][ T7550] ================================================================== [ 1090.852821][ T7550] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1090.860040][ T7550] CPU: 1 UID: 0 PID: 7550 Comm: syz.4.9376 Not tainted syzkaller #0 PREEMPT(full) [ 1090.869346][ T7550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1090.879408][ T7550] Call Trace: [ 1090.882692][ T7550] [ 1090.885628][ T7550] vpanic+0x1e0/0x670 [ 1090.889626][ T7550] panic+0xc5/0xd0 [ 1090.893358][ T7550] ? __pfx_panic+0x10/0x10 [ 1090.897788][ T7550] ? ax25_find_cb+0x179/0x3a0 [ 1090.902480][ T7550] ? ax25_find_cb+0x179/0x3a0 [ 1090.907168][ T7550] check_panic_on_warn+0x89/0xb0 [ 1090.912129][ T7550] ? ax25_find_cb+0x179/0x3a0 [ 1090.916811][ T7550] end_report+0x6f/0x140 [ 1090.921061][ T7550] kasan_report+0x128/0x150 [ 1090.925572][ T7550] ? ax25_find_cb+0x179/0x3a0 [ 1090.930265][ T7550] ax25_find_cb+0x179/0x3a0 [ 1090.934777][ T7550] rose_transmit_link+0x17b/0xac0 [ 1090.939810][ T7550] rose_write_internal+0x1256/0x1b60 [ 1090.945107][ T7550] ? lockdep_hardirqs_on+0x7a/0x110 [ 1090.950321][ T7550] ? __pfx_rose_write_internal+0x10/0x10 [ 1090.955963][ T7550] ? timer_delete+0x245/0x340 [ 1090.960653][ T7550] rose_release+0x25b/0x510 [ 1090.965161][ T7550] sock_close+0xc3/0x240 [ 1090.969414][ T7550] ? __pfx_sock_close+0x10/0x10 [ 1090.974275][ T7550] __fput+0x44f/0xa70 [ 1090.978269][ T7550] task_work_run+0x1d9/0x270 [ 1090.982877][ T7550] ? __pfx_task_work_run+0x10/0x10 [ 1090.987994][ T7550] ? task_work_add+0x395/0x440 [ 1090.992776][ T7550] ? __pfx_task_work_add+0x10/0x10 [ 1090.997907][ T7550] get_signal+0x11eb/0x1330 [ 1091.002429][ T7550] arch_do_signal_or_restart+0xbc/0x830 [ 1091.007986][ T7550] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1091.014155][ T7550] exit_to_user_mode_loop+0x86/0x480 [ 1091.019452][ T7550] ? rcu_is_watching+0x15/0xb0 [ 1091.024218][ T7550] do_syscall_64+0x2b7/0xf80 [ 1091.028815][ T7550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.034887][ T7550] ? trace_irq_disable+0x37/0x100 [ 1091.039917][ T7550] ? clear_bhb_loop+0x60/0xb0 [ 1091.044604][ T7550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.050604][ T7550] RIP: 0033:0x7f6a7839aeb9 [ 1091.055026][ T7550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1091.074648][ T7550] RSP: 002b:00007f6a7930f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1091.083081][ T7550] RAX: fffffffffffffe00 RBX: 00007f6a78615fa0 RCX: 00007f6a7839aeb9 [ 1091.091083][ T7550] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000014 [ 1091.099069][ T7550] RBP: 00007f6a78408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1091.107052][ T7550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1091.115032][ T7550] R13: 00007f6a78616038 R14: 00007f6a78615fa0 R15: 00007ffc32eab2d8 [ 1091.123017][ T7550] [ 1091.126405][ T7550] Kernel Offset: disabled [ 1091.130741][ T7550] Rebooting in 86400 seconds..