last executing test programs: 2m29.966394184s ago: executing program 4 (id=16838): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x16, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0xcc00}}, {}, [@func, @cb_func={0x18, 0x9, 0x4, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @jmp={0x5, 0x0, 0x6, 0x0, 0x9, 0x30, 0xfffffffffffffff0}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2m29.757719113s ago: executing program 4 (id=16842): r0 = socket$inet6(0xa, 0x4, 0x5) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000014) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r5, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'wg1\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'wg1\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x64}}, 0x4000845) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000300)={0x24, @short={0x2, 0x1}}, 0x14) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r4) (async) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r4) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}]}, 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x8000) socket$igmp(0x2, 0x3, 0x2) (async) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f00000004c0)={@empty, @local, 0x1, "f78c34cc42e8f6df6820d6697f47b6367a249e95490cb3c98c30ef33d2628ecd", 0x4, 0xe, 0x9, 0x3}, 0x3c) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000540)={r1, 0xd, 0x401, 0x5}) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000500), r8) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r9, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r9, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) socket$nl_crypto(0x10, 0x3, 0x15) (async) socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000700)={@remote, @multicast1}, &(0x7f0000000740)=0xc) (async) getsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000700)={@remote, @multicast1, 0x0}, &(0x7f0000000740)=0xc) sendmsg$nl_route(r8, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@bridge_getneigh={0x28, 0x1e, 0x200, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, 0x0, r3, 0x964c, 0xa0}, [@IFLA_LINK={0x8, 0x5, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8d1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r8) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r8) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r11, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x8044000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000980)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_J1939_PROMISC(r8, 0x6b, 0x2, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) (async) getsockopt$SO_J1939_PROMISC(r8, 0x6b, 0x2, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000a80)=0xfff, 0x4) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r12, 0x11b, 0x6, &(0x7f0000000ac0)=0x40, 0x4) 2m25.909871322s ago: executing program 4 (id=16853): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff070000140003002e000000000000d700000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f0ad3f1a", @ANYRES16=r3, @ANYBLOB="010000000000000000000300000004000180"], 0x18}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e4040000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fcdbdf250a0000000c00028008000100060000004c00038008000200000200000800020004000000080001009a300000080001000002000008000100040000000800010008000000080002000e000000080002000900000008000300a700000018df4c801300010062726f6164636173742d6c696e6b000058000280080001000180000008000100ff010000080002008400000024000380080002000500000008000200ff7f000008000200060000000800010006000000080001000500000008000200010100000800010009000000900004800900010073797a31000000003c000780080001001d000000080001001500000008000400990000000800010009000000080001001000000008000300f8ffffff08000200060000000900010073797a31000000001300010062726f6164636173742d6c696e6b000014000780080004000700000008000400030000000900010073797a310000000004000780d00106800400020004000200ed000300f0ba88de945cf3263ed8b9b2264e0dcb985916d763fd90b65c4f8f7ec6ef4ed7cea2f2625be8aa70bc4d01c58c2da7c65c3bf0c2957c046285b3425234f7f0dd52863804227ec2df8aacfafc06b8abd7198a7c91bb2f824c0ba89e089c08c1f0ab3323a729a4775929b7233e3c347efa79f71adf9e3de2d94235f6cf503800c834fb8330e160859419c80b82dd6e9863e3d21ca49c4a4e70d934e5f4e7821fc633de97f4c498c34e2820079778963a33752d4d3f50e89cc15dee0d190b2b9d619701a3be98fe828c48071751e9d13aa9e6b55d9905010cb9ef2b5d04c83f5684c488fb343fb304f6710000000800060000080000080006000800000004000200b6000300cdcafc4ca92ee1bb0f0020d12f36c773cde2f2dd73f3fdfe6c37f3ca758cd7a680936957ba277a73672120d91b71a5d627e6dd133b0c47eb1f49ba7d62f96b9437c96e3675c27f87fecaf33227895d2437c64e5051fd3f4ef2ef2c8b795cce49ffbf3541c81a2411f8fc09123847a528ddc6e6fd54720ea906120197d1b88a7863ecfbbc459a987c12cde79b57198ecd48f1b5ff8bd1c18f56bf60472778e525e4d73d6789a361427851351a95faa8a01525000004000200040002001400683fa9350db5e772ed1a1508453212058008000100756470000800010075647000040002806c01068008000100706c000004000500040002000800010000000000c900030019ccefc892df14eac168ccb8d86edd6275bb6dc4375ce421bc31d462dff883bd8c8552acab9f769cd28334f08b63e35f7157b807d2aae1709e50fbe784fd8d2e6f4d9659a0dc66ba1b626012bd95889fdb57541c28e377f893d0d769ccb74f3829259574822164220538f52f6aa25d322569c0f96905fa601bc2e9ff1bdb1b08ba650befdc3aec38997a82f2750ec44e36488fa4da14e86c11bb706258d7bf568e7d7fefcdec689c5c350f9ad23d1b61b092be02e7f823ab8a5914d4c57ad7a0b9df4953f20000004000040067636d2861657329000000000000000000000000000000000000000000000000180000003691806a52d999dbb4f233bd77b4f77cf993773e2fdfc8934200040067634d28616573290000000000000000000000000000000000000000000000001a000000ca7745f3c4b103c4a8f4945c8b0a80ad31a6653631983d36b89b0000240004800900010073797a31000000001300010062"], 0x4e4}, 0x1, 0x0, 0x0, 0x40001}, 0x44) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000127bd7000ffdbdf253f0000000c009900000000027d00000038005e80080003000800000008000300b894000008000300010100000c000100000000005a00000008000200f8ffffff08000700ec06a400"], 0x58}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x79, "9d4625107f756ac4f28f3b65ca2a123101464bd790a231ee31b0947ecc67ef0450b8eae8011289a0e1d5fa7871e00c4d5a3d895136a9e6a492dec1d9f765880a197b833d2fc13ca5d64e42253f9ba8eb497a112c0efeffc1cd87e8e39ec2c9f2074d58d6e55a1a6474d713162991c1946946cd44281bc0f0f0"}, &(0x7f0000000180)=0x81) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x2}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r8, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x11, 0xd, r9, 0x1, 0xda, 0x6, @remote}, 0x14) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0xc, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, 0x10) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000ac0)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd29, 0x25dfdbfb, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x8, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x6e649fe2e5c09931}, @TCA_TBF_PRATE64={0xc, 0x5, 0x7d3130d2a96bf901}, @TCA_TBF_PARMS={0x28, 0x1, {{0xf, 0x1, 0x3ff, 0x3, 0x3, 0x4}, {0x1, 0x1, 0x6, 0x9, 0x4, 0x9}, 0x400, 0x8, 0xadb}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80d1}, 0x14000c08) sendmsg$ETHTOOL_MSG_EEE_GET(r7, &(0x7f0000000d00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="b0f470fc49d3200000000000", @ANYRES32=r9, @ANYBLOB="040001802000018008000300010000001400020077673100000000000000000000000000480001800800030000000000080003000100000008000100", @ANYRES32=r12, @ANYBLOB="1400020076657468315f746f5f6873720000000008000100", @ANYRES32=r9, @ANYBLOB="08000300010000000800030004000000"], 0x8c}, 0x1, 0x0, 0x0, 0x8004}, 0x4008804) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0xf8, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xc8, 0x2, {{0x0, 0x800, 0x4, 0x0, 0x5}, [@TCA_NETEM_LOSS={0x8c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x101, 0xfffffffc, 0x2, 0x5}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x80000001, 0x3, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x3, 0x3, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7fc, 0x3, 0xfffeffff, 0xc5, 0x401}}, @NETEM_LOSS_GI={0x18, 0x1, {0xffff, 0xb1, 0x7fffffff, 0x12000000, 0x9}}, @NETEM_LOSS_GI={0x18, 0x1, {0xc, 0x4, 0x1, 0x0, 0x1000}}]}, @TCA_NETEM_RATE={0x14, 0xd, {0x3ad}}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0xf8}}, 0x0) 2m24.532747387s ago: executing program 4 (id=16862): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00'}, 0x18) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 2m24.128028357s ago: executing program 4 (id=16869): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2}, 0x50) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x90, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x10}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x4c010}, 0x4004440) 2m23.987637798s ago: executing program 4 (id=16873): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r7, 0xc6828e1a3ea0f007, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0000}, 0x8000) 2m8.913552422s ago: executing program 32 (id=16873): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r7, 0xc6828e1a3ea0f007, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0000}, 0x8000) 32.365427592s ago: executing program 2 (id=17863): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet_smc(0x2b, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 32.172200329s ago: executing program 2 (id=17866): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002640)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r2, {0xf000, 0xffff}, {}, {0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0x1}, {0x6000, 0x0, 0x4, 0x2, 0x1, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x5, 0x7, 0x6}, {{0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 31.846936527s ago: executing program 2 (id=17870): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000180)={0x4, 0x81, 0x2}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e4099107323f5", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x5, @loopback, 0x4}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000100), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) socket$kcm(0x2c, 0x3, 0x0) close(0x3) 31.641370102s ago: executing program 2 (id=17871): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2c, r0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40880}, 0x4040804) 31.574352479s ago: executing program 2 (id=17872): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b943", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001e40)="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", 0x2f1}], 0x1}}], 0x2, 0x2094) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 31.333367152s ago: executing program 2 (id=17876): r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x4e}, &(0x7f0000000200)=0x8) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000100)=0x3, 0x4) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b61}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0}, 0x94) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffd, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0x60000002}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0xf7, 0x0, 0x0, 0x70bd28, 0x23e}]}, 0x80}, 0x1, 0x7}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$rxrpc(0x21, 0x2, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=@ipv4_delrule={0x40, 0x21, 0x9, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10014}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}, @FRA_FLOW={0x8, 0xb, 0x8}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x40}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 16.244239038s ago: executing program 33 (id=17876): r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x4e}, &(0x7f0000000200)=0x8) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000100)=0x3, 0x4) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b61}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0}, 0x94) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffd, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0x60000002}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0xf7, 0x0, 0x0, 0x70bd28, 0x23e}]}, 0x80}, 0x1, 0x7}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$rxrpc(0x21, 0x2, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=@ipv4_delrule={0x40, 0x21, 0x9, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10014}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}, @FRA_FLOW={0x8, 0xb, 0x8}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x40}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 5.100993277s ago: executing program 0 (id=18245): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x10, 0x0, "1cdc"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, 0x1}, @sadb_address={0x3, 0x5, 0x33, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x60}, 0x1, 0x7}, 0x0) 4.841253622s ago: executing program 0 (id=18247): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000002240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x7, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x8, 0x20, 0x0, 0x6, [0x6]}]}}, {0x4e20, 0x4e21, 0x4d, 0x0, @wg=@data={0x4, 0x2, 0x8, "e8771ac366586e56f446dcd22ec94c672f1cd650516a2fbeddd0cb5cffc4ef63a1c2be9551171e48bb8559ac9077c099289048d76df434e4ec536c04816b127eb525176f5737b934b37a9d109ea3aa64d0fb30013becb29f6a39d4cbdbc4e2540996ed75b90498301c99df853d4baac4654e6f1a06cf03a87aa2d2d74199bcafa0dc84a8ea112fba51687b8727bb905c7b42a0c9b26559b4ecc397c6a33731df0fca1aee35968435e8129f8e6d52a0754fcaa693706c4557af6be8821983e702fdd3dac90b6cbe00b1fe59f5bcd890dbb87c0d8d80ba8727e4ff6b89af3ecda43705a9dc113396c950947e85193eabe1364909509babcad37d21392d071480ff4f69dc5db442263d4608ff94e5157c65bb35c3f4a7af6bfb562a317cf13292abdbd5ac3f31d47da6fe5e8be324c78b37e2f351955bbf5f18f86a0cd98d68dca14aea59917ce05e0dc0e3a2033d22a506109db846c49f8c7d575c02349736311e40bc497c9a7da1fe4f94d8e601a5cff4cbd63ed730a01c7f07dd74d603b951557b93e551b0e028232412d568dadc29c2c9e01ca85b83d779cd3b918f9c73ba471ee9079fc42b511b45c3d4f80a46f8e9ad22a05ef5422348ff415b2131e2b2ae0ef5fab9f678bc5ef02d611655d6264e0755e176ade135a971851bd22666ae753ff5135bf14a005cea45a8b163706ea52af786f2b48362ec8619f8f728ab9fee21bcc9e000d1c470a51cec5a510f06de4dc52fc82e0be10fe0ac55f09e086cdb7f5d5f935033e4925a6ca1b1ea42f511dafd63a3cc32bcfe20aca26adb6eded22fc956b96cf2b70b5e78dbf4c2da06438c9be342f44f1dbc9bc4e453bad09f8e7d2b611e9f33f681c4342e31fee49d613b170d9ae6c93c7ece1bf0d8aaf00870b6896b8fee4ee9d705608a044ec3537ae6c46b5345e4c41576911757d4ed5bdee8e14f73df14b88af36b4c303346d88b424fea428c77cabc55198fafbcec9b027f9a9759638d733fe2dec7996ddba717fd7e0f0188f9213701c304a2b01186c72a8cfdcb87dd9c8711ec0c438eb7c229b8dfbec5c14bfeec20810b4be8944f7d6f44e5bb8839b84afe25a8654ac821efb9c850394d452873db8e9f05de381103b1278f3b34ec0b920d3aa111c82fe424588debe04dd75ac991c5f650f0b8e72c1783d975d663fc0d939f32bca98650141b381af26436c6352d98a6e30843d956ad68f998851b8c64c49a59ca6937355ac4412009cd0a2e4cacf5b02063908f7937e7563e6f63703adc5aff159f3628eb64071fc74e4e66e142113a176c2a649d653f55e833a3f184f91995547a79f46c7ca02813136c920fe6f69fe466656518478ccb84c02d751a502dff90558ce066d9be71c8fa800d7a1d56b5ca52be3122aae2cfbfe1b11d454ad72bdf7fd9d450a74734594f5e566ac2a37ca8b648fee012bf7f83f1126743b0f4791592e17dfca010a3dafeac81b88c5a47d948fc772fe4b48146b10aa319a13ca4f4dc05861859929d3c1d69967d18290cc87777a4231a6ce8dc2a4e34450e3a7659c05e5e12239d768ef8394f82278b975a68497571d1e5191ac329a66b5219f3f7f20f21261cdc3028a3662b6c10198bf7d3d513b5b823d4703cb29d89b84da69a6358a269769a8b23712c6291e77fc4da837e0857b4bbc08bba0659c55a1e06fdf1736df13948824a37515f8c49de6d502519077197debfc74709ed564315279ec804c7a0305526b14efcab44364105aa805efd97f0444d6016e35712dba75b038ea63917e6163614a3a6c694d7612e00cddab8bd31f6ba146d08e949d50ed3b0ef8fd3412ffd020bfabbcfbc5c3fa436022de3fd973869066871ec639653f3b4b5f01374adf3b60940d241a5dda6df550662ccb1a4575e2419baf1a76a246c9b7f39a05c03d832aa28293a54c619865fed0fdccd570859ffc7b1844ea8cff1e12389382e39211e665fec9d82faf11fd2300412d24dab176515aff938a6b12b5427b7fa6b42a3042248977b2f4eae9d96534a85b9ed500f62866d39f5301a3b6e60d392248fcfad25c2803c875e00010f40caca1a5932e00765c3b52427a2a8d6875a73ccb3b8e78dd27555994bf4358b2e577efe8886939515be37889e3656a5e0a949619f0f0b9cae7dc59a2415bec72df3439e563cfe69b7952abfad6cb6a979c146355e590ace810017d04075f23a1554a81bcdfb82c2396fd61fe95cd0f9c2e394bdbb0900648675ec09b94b1d4672e613be577cb398bb5d188b7c09865e2edbb273f8d9b0ae836f24b34ae6cd22e37e1ab31c835c23bd8f6deb49402f19406b0c7cddfbe357ab496910a8efa939dd9ab91de3ba67d07103063fbf9ee6fbd7b61c6b65ebe735cfab2c1162b379a3cbcbdb14d82b7f2e707ddd896ac5085ef5b15da85663df079bd5ef6180c775a4b7d645630aa9ea704f69ec8ea052f8f41e62f0e6f78a5a846e9130c53eb29a7bab9b102bf08729243f6ffe0ee6f28e98e4d0c1f49813aa04c2774f1f076310d923e900fe1c609bc5a308421fb82a12b03b9be47ce6d88635bb1722739d1abcdbc28133de131d2151d76f565be56813bb3edcf4d870f4acd0bfe5b30d60ef065158bf7b8401096a1647de88c7b0144eacecabfdf9d48d91573e82f2efecab095339e799e36ab3ee1eb66db9f9c21d96bcb2b7bf4ab01e8e56df8c4bca2bed7732472468a3b447024bc997adff639ba35e2af10f661199c4a8a2b2a8e3e59ff4ed5da468c1c2c41001efc0529636ce4ef9dd6b28deed0ad5a758abd2a3a3f024f56dd17fb4b1af62a6b91f24973071a9982df0047f85280f4a5decece67fc02428f830343e910fef6f3467c9d7776a06c133a50752cff4aa72bcbb9e4dbd8489e2e3698aae45a8753071fb6d803943d171adb60e8fcec9865e46df8fa120b939537a05b63daec7e0ecf9713c491646f04435364de697fbabf3c72d08a24f1bf34212bcdb7d5e038ac28ff76d5243b695e7faa1211a940da618930d79acdc6fdc7c9f2f4a5435d3f748ec68429f5ca2548315801cf73d74816f1ece3dfa6fb557ac105ad28d4532e1c8c6b5ab3526fbe73916dbe123acb4ac89c1b5a0664b81e216453db066e3c4318006ba3e25ed6cfe22c80f17619b7372947013749c7d04f13277f81f4461492d9237c5961be4d30965607a4d5db095070df02230cc87d9ab8633e60de83aedf8814e632bac8566bbfcdf159c9a2a7944be1a61792b8af10dd28d0ebadf7e4f231af099450813c5e27f934112e11124b01106615cee48aee88947f31a1839b83ad5c8326e30f318ae57b56becaec7094c4e7d2a377bfcb0c29ce046623e6ec120ea63c53cef94deb3d813d4b1749009084c3ade1675b55490b9d1faa03d7a2fd34921d62c31d7ef1f181883ac312dbb08b2600edce0ba197d1704485e2f155ec659de742a22628270968905324381f203a1ad7ac30b252d4c3ff9915fe32c16cbf4684a7c517b9a2ecec2433685f4741b6f02f8aa2bd0f6bf370962f38214899129012a0d36ba14c0a3e93742d063f09f0c1e838fc1095b065089c91d02a4b2e1d0a49d2294682a38d578424d1e81ff959b33f746114b795319a047d65f5e3b7a347e6cf8b0fad9eaea3db5eca7e953f77bc6c23de8f938bb505013f5c39173cb69312af98d5ff14715794c729f41490297c2b418eef11841a788eaaa7ebdb77880b64701aee50371f542e79831321833dda60213fa741ec197419d83f61c06397a47a75f50b986c53e6fdf8a6e07008e1a29b1774ceb11429a1ecec05bf80da802239c58f226ab5eb34d522ff62bc0528d87e716793e56c48352648291470bb592981acc06c2ba1547e11babf3f1d22f5e01e1f759c05816cdfe0c986c58ebbd08d8449807cd2579d5b7265930f696f8aff73e247cec12c0d1fdbcc4880245b866c2cab8b6bdf0951c2c6beccab7513ba28545036d164b407e1228a831e3b37f9c56721c347d499c1c29b8a972d2d1cfeb47f20975b4eb0b62e25dfa4ef116e62e415cde22bc039d1ccb9e70a5599881bb8b61f680670b787afc8734ac8c39ca50fbed619e54ac1421bc2584d4f7027593e12f738ba0f2d5fe03fcc7168056332477eb0b26c0579d54d8537f941acc183fdca495a7ffa10f0d3189f8c32742d5564c97e26b659969f7060a7c8864445c252c5b1755a3e8473ef9b0909eb74cabb553c3d6ab58f12ed75703d9139a4f57ef71af90815a5273e64282582623c41c51352d12ce48e0712f50ab3dc528619e1e16b52452204b3c7e1e16556e8fbdf0d623216186ff5ca84ad730ff457b06e766e085d5dee40a308fae8b4e19e18245a3ed02967f07441903c149ae9da5fe238194009ded2a3d80a67e1c3abdfb63fad0155529c48a748ef499252d5d3e912304b1d11ee77dc25427e5e9a115583a692558aef65faba0e1f0bc4aa6b6ac21d4fe4741feac17a7c6b5699384e30f7236f400d9df6d658add13b4f0a4b16a77d1f9e6b4d3045f7ba7ee68ce171008e635496ad631f59846b7895aa329390d2ad9980b6586d383a740f1e1b0883a3fddc4126c2d09fd5815dd892692e1c3b7eb2951b766bd4bca19896f75dbfaf51ad4ca9f97d00049082091e3c6cdf16026b1de4603ac7afde08a7a8ffd110636d3d063c2bb6fa84bfd7fff8ad04d0c812fe14a77bd3a9b9fdcc3e0fbaf5ac2475130987f81ac8c9898f95112aa597f40ec11e04684e45b56d81e11180f59b606886306fbc62c076a12a41238ccd74d3154f312f10f3ad215d64a468cb15eae30a3f7f7e5cf6a87dbd813df8093d2b3586693ddee6a5c1b0caaec1ef419657b89692bbd2a7064767cf5b4c3ef6d120557b4df5e7ee6094f935870edc070ae3e96c850a61356c5d79008fc98728dd87470a98aa1c1ab6056990110c0b3108e50b573d77ad4856c03da8098c8fd176685803db471a642dfb9a9ef2d14e186eea96219ea0fa03cc28d7ea2686e61c3f46f15c23213a6432d77ffea182ec26dbf9118a2fc082bdee517e0974982819a7a996b7a30f5901dd3c44b3344bdf93a61ecc4cddb969d3b94e6f4910a9b38ff886d5c96a820092f112ee6eb0ce094940280a2040862157497b3a3374a4d62c34d1fdf6826811db1ea7f28b64f22304e2246dcee44ca361370c0d1727f951dbdb1a329368a5dd76ba4486ce508a28d0ce2eb95daab36caf101dc2351c4efdf3ec70221888dad522b0d51a0b9765a410ca8cf00baaeb074d310cdd908e76586e59d0c7c27eb5557e474ac54525c237d5b2eedccab12b0f96fa2c00239e2017dfeb645fdd748d5c21684181b81464d32909b4995f274a9717f224c1e34cd41c8d12b9f13daeae3f65510c6ecf94956d630db0478fbf87c7d7c75221046a1a1886696f89e427b94139164b99b88d83b633122b5d9483f4261be27d01d6011cee48b1c24a3aff62c4d04f9dfb00e1a7a1013f97e87306147b7da305a36077cf0a7618563a754e34e65c2ee95932eb2da4b73ca83f3afcce93d8d59357ca7b5d9f37e5ba475be39bb8870af109d95527b44777ff8f55ace0adf84f73ce065371a4ce78b22d7a6bbf1bbae4c57b44262ddff39f4ce8b858f89737f33786445cbaf27"}}}}, 0xfce) 4.662946696s ago: executing program 0 (id=18251): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x98}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.548518348s ago: executing program 0 (id=18278): r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed", 0x4}], 0x1}, 0x0) 2.424502731s ago: executing program 5 (id=18281): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000001880)=@req3={0x5b000000, 0x7, 0x0, 0x8, 0x8, 0x5e7, 0x9}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001480)=ANY=[@ANYRES16=0x0, @ANYBLOB="02002abd7000fddbdf2513000000100007800c000400ff01007e83031f59cac09c6f910000000000440003800800030022000000080003000001000008000300517fff040000000000000000080001000200a57fb28c20588769c07fee701cac00000800030008000000080001008000000008000300040000001d337ba472b889049ced299ae84bb3d5cf9921a6ee6d63"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), r1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001640)={&(0x7f00000018c0)=ANY=[@ANYBLOB="1400e100e7d64fb9167418ffbb9dc683278c51a82cfe015f1d1feb452b4e8985d8f1027d12e821cb860dd353d846d887b5c50ff94ac22f2a5373f05ae2847b79743ffdfb4afde311d1192a2390e6bd20c6e5f88afd6f16", @ANYRES16=r3, @ANYBLOB="040028bd7000fcdbdf256300000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x5) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) setsockopt$sock_int(r2, 0x1, 0x25, &(0x7f0000000300)=0x8, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, 0x2, 0x7, 0x201, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x57a}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x20, r6, 0x211, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x20044010) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc(&(0x7f0000001700), r1) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, 0x0, 0x4001) sendmsg$IPSET_CMD_LIST(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010300000068416a8fb4e89743090500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) close(r8) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103b28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv6_newrule={0x44, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x80}, [@FRA_SRC={0x14, 0x2, @private1}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)) 2.364528184s ago: executing program 3 (id=18283): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x4, 0x0, 0xfffffff7, 0x80000001, r1}, 0x10) 2.330834493s ago: executing program 0 (id=18284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000005}, 0x80) recvmmsg(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x1}, 0x8}], 0x1, 0x0, 0x0) 2.258736213s ago: executing program 5 (id=18285): socket(0x11, 0x3, 0x8) socket(0x11, 0xa, 0x8) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 2.201994489s ago: executing program 3 (id=18286): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000406050000000000000000000100000105000100070000000900020073797a300000000005000100070000000500010007000000050001000700000005000100070000000900020073797632000000000900020073797a31000000"], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) 2.200872127s ago: executing program 6 (id=18287): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16], 0x44}}, 0x0) syz_emit_ethernet(0xdc0, &(0x7f00000000c0)=ANY=[], 0x0) 2.104426026s ago: executing program 3 (id=18288): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x98}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.09228877s ago: executing program 6 (id=18289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 2.008255419s ago: executing program 3 (id=18290): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000740)='^\x00', 0x2, 0x40000, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 1.88064019s ago: executing program 3 (id=18291): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b943", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001e40)="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", 0x2f1}], 0x1}}], 0x2, 0x2094) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.837275526s ago: executing program 3 (id=18292): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x48004) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000001, 0x39071, 0xffffffffffffffff, 0xa807000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r12, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140)=[0x100000001], 0x0, 0x2, 0x1, 0x1}}, 0x40) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x400, 0x33}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xb, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x2, 0x1, 0x3}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1.81481726s ago: executing program 5 (id=18293): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000a80)=@gcm_128={{0x303}, "9ff3d6661480294c", "5fa3c0bf46782bbee21b09b7446edc75", "5bee93e1", "f11bb8cba3046ce3"}, 0x28) 1.716735433s ago: executing program 5 (id=18294): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed", 0x4}], 0x1}, 0x0) 1.716508387s ago: executing program 6 (id=18295): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x20000060) 1.65312841s ago: executing program 6 (id=18296): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000600034000010000080007"], 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x40040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 1.604580027s ago: executing program 5 (id=18297): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmmsg$inet(r0, &(0x7f0000007bc0)=[{{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000200)="2c5158be", 0x4}], 0x1}}], 0x1, 0x1) 1.492661923s ago: executing program 6 (id=18298): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x4}}, 0x9c}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r0, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1.392243226s ago: executing program 5 (id=18300): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.334695572s ago: executing program 0 (id=18301): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_int(r0, 0x0, 0x16, 0x0, &(0x7f00000001c0)=0x3) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@deltclass={0x474, 0x29, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0xffe0}, {0x4, 0x9}, {0xb, 0xc}}, [@c_atm={{0x8}, {0x38, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0x3}}, @TCA_ATM_HDR={0x29, 0x3, "b27ce56d7bd66b577e2a00fa2a6f8cad70c37fd0b6897c949b3eae33effdff0994e913a6b5"}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x1, 0x80000001, 0x0, 0x7, 0x6, 0x10001, 0x1, 0x0, 0x87e0, 0x44, 0x1c, 0xebe, 0x8, 0x2, 0x8001, 0x10000, 0x6, 0x6, 0x5, 0x4, 0x8, 0xc, 0x6, 0xfff, 0x1, 0x9, 0xffffff40, 0x5, 0x7, 0xa, 0x8529, 0x0, 0x1bc2, 0x2, 0x7, 0x5690bb00, 0x0, 0x1, 0x4ac9, 0x6, 0x7fff, 0xa3, 0x7, 0x2, 0x81, 0x1, 0x4, 0xffff710f, 0x10000, 0x2, 0x1, 0xe541380, 0x40, 0x0, 0x100, 0x6, 0x40, 0x5, 0x6, 0x8, 0x1, 0x4, 0x2, 0x9, 0x4, 0x3, 0xfd, 0x440f, 0x6, 0x3b, 0x7, 0x1, 0x5, 0x1, 0x38000040, 0x1, 0x4, 0x3ff, 0x8, 0x2, 0x9, 0x7, 0x8, 0x1, 0xd6, 0x2, 0x4, 0x0, 0x30, 0xccf1, 0x7fa7, 0xffff, 0x878a, 0x1, 0xfffffff8, 0x4, 0x2, 0x6, 0x7, 0x9, 0x1, 0x50000000, 0x8, 0x7fffffff, 0xffff, 0x2, 0x6, 0x4, 0x2, 0xd13, 0x3, 0x7ff, 0x2, 0xfff, 0x6, 0xfffffffd, 0x24f0, 0x0, 0x6, 0x8, 0x80000000, 0xff, 0x6, 0xfffffffb, 0xffff7fff, 0xb02, 0x2, 0x9, 0x200, 0x80000001, 0x0, 0xa6, 0x2, 0x80000000, 0x5, 0xfffffff9, 0x2, 0x0, 0x4, 0x7, 0x47, 0xc0, 0xd1b7, 0x2, 0x8, 0xdde3, 0x0, 0x4, 0x80000000, 0x9, 0x6, 0x9, 0x100, 0x6, 0x1, 0x6, 0xe, 0xfffffff8, 0x2, 0x5, 0x7, 0x611, 0x0, 0x8, 0x0, 0x3, 0x2, 0x3, 0x3, 0x6, 0x4, 0x7, 0x9, 0x94, 0xe74, 0x80000000, 0x63, 0x8, 0x3, 0x0, 0x7, 0x6, 0x155a, 0x2, 0x401, 0x5, 0x7ff, 0x8, 0x4, 0x2, 0xbf4b, 0x2, 0x1, 0x401, 0x7, 0x0, 0x6, 0x800, 0x2, 0x0, 0x9, 0x9, 0x4, 0x4, 0x29, 0x800, 0x4, 0x45df, 0x9, 0x7fff, 0x2, 0x7f, 0x8, 0x0, 0x5, 0x2, 0x0, 0x6, 0x90, 0xfffffff7, 0x3, 0x8, 0x200, 0xff, 0x5, 0x9, 0x6, 0x4, 0x6, 0x400, 0x9d, 0x7fffffff, 0x80, 0xb, 0xffff, 0x6, 0x2, 0xa, 0x12a1, 0x5, 0x8, 0x4, 0x3, 0x7, 0xe755, 0x0, 0xa65f, 0x3, 0x6dbc, 0x7, 0x2, 0x1, 0x7f, 0x100, 0x401, 0xc6]}]}}]}, 0x474}, 0x1, 0x0, 0x0, 0x8000}, 0x200048c5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x90646}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x8c88}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32], 0x54}}, 0x0) 1.116173046s ago: executing program 6 (id=18303): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000008b0000000000", @ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r2], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6105069103"], 0x61) 238.154086ms ago: executing program 1 (id=18305): r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000050100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) 131.890329ms ago: executing program 1 (id=18306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 130.303701ms ago: executing program 1 (id=18307): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x740, 0x1800, 0x6, 0xac, 0x5}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x486}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) recvmsg(0xffffffffffffffff, 0x0, 0x40003020) bpf$PROG_LOAD(0x5, 0x0, 0x0) 89.90975ms ago: executing program 1 (id=18308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000190a01020000000000000000000000000900020073607a32000000000900010073797a30"], 0x2c}}, 0x0) 256.184µs ago: executing program 1 (id=18309): r0 = socket$kcm(0x25, 0x1, 0x0) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe70}, 0x41) 0s ago: executing program 1 (id=18310): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x5, 0x24, [{0x5, 0x1}]}]}, 0x38}}, 0x40840) kernel console output (not intermixed with test programs): 0/0x10 [ 1161.099907][T17268] ____sys_sendmsg+0xa68/0xad0 [ 1161.099934][T17268] ? __might_fault+0xaf/0x130 [ 1161.099968][T17268] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1161.100005][T17268] ? import_iovec+0x73/0xa0 [ 1161.100040][T17268] ___sys_sendmsg+0x2a5/0x360 [ 1161.100063][T17268] ? __lock_acquire+0x6b5/0x2cf0 [ 1161.100095][T17268] ? __pfx____sys_sendmsg+0x10/0x10 [ 1161.100161][T17268] ? __fget_files+0x2a/0x420 [ 1161.100183][T17268] ? __fget_files+0x3a0/0x420 [ 1161.100216][T17268] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1161.100245][T17268] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1161.100283][T17268] ? __pfx_ksys_write+0x10/0x10 [ 1161.100325][T17268] do_syscall_64+0xe2/0xf80 [ 1161.100347][T17268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.100366][T17268] ? trace_irq_disable+0x37/0x100 [ 1161.100384][T17268] ? clear_bhb_loop+0x60/0xb0 [ 1161.100408][T17268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.100427][T17268] RIP: 0033:0x7f393579aeb9 [ 1161.100446][T17268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1161.100464][T17268] RSP: 002b:00007f3936728028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1161.100486][T17268] RAX: ffffffffffffffda RBX: 00007f3935a15fa0 RCX: 00007f393579aeb9 [ 1161.100501][T17268] RDX: 0000000000004040 RSI: 0000200000000240 RDI: 0000000000000004 [ 1161.100515][T17268] RBP: 00007f3936728090 R08: 0000000000000000 R09: 0000000000000000 [ 1161.100528][T17268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1161.100540][T17268] R13: 00007f3935a16038 R14: 00007f3935a15fa0 R15: 00007ffce84b1718 [ 1161.100574][T17268] [ 1161.110239][ C0] syz_tun: tun_net_xmit 118 [ 1161.407278][T17280] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16825'. [ 1162.119123][T17299] SET target dimension over the limit! [ 1162.140139][ C0] syz_tun: tun_net_xmit 118 [ 1162.175932][T17299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16833'. [ 1162.237865][T17310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16836'. [ 1162.585654][T17333] netlink: 'syz.0.16844': attribute type 30 has an invalid length. [ 1162.612248][T17334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16843'. [ 1163.180165][ C0] syz_tun: tun_net_xmit 118 [ 1164.220216][ C0] syz_tun: tun_net_xmit 118 [ 1164.460727][T10000] IPVS: ip_vs_send_async error -101 [ 1165.260178][ C0] syz_tun: tun_net_xmit 118 [ 1165.441257][T17333] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR [ 1165.594676][T17341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16846'. [ 1165.616369][T17341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16846'. [ 1165.965415][T17356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16850'. [ 1166.300438][ C0] syz_tun: tun_net_xmit 118 [ 1166.531807][T17369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16855'. [ 1166.713227][T17379] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1166.753613][T17379] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16858'. [ 1166.836117][T17378] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1166.915914][T17379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16858'. [ 1167.350440][ C0] syz_tun: tun_net_xmit 118 [ 1167.867001][T17406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16863'. [ 1167.903261][T17403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16862'. [ 1167.942867][T17406] netlink: 44 bytes leftover after parsing attributes in process `syz.1.16863'. [ 1168.203654][T17423] syzkaller0: entered promiscuous mode [ 1168.223720][T17423] syzkaller0: entered allmulticast mode [ 1168.380275][ C0] syz_tun: tun_net_xmit 118 [ 1169.420263][ C0] syz_tun: tun_net_xmit 118 [ 1169.981625][ T95] block nbd1: Possible stuck request ffff8880257c7800: control (read@0,1024B). Runtime 90 seconds [ 1169.993698][ T95] block nbd1: Possible stuck request ffff8880257c7a00: control (read@1024,1024B). Runtime 90 seconds [ 1170.006395][ T95] block nbd1: Possible stuck request ffff8880257c7c00: control (read@2048,1024B). Runtime 90 seconds [ 1170.021859][ T95] block nbd1: Possible stuck request ffff8880257c7e00: control (read@3072,1024B). Runtime 90 seconds [ 1170.470393][ C0] syz_tun: tun_net_xmit 118 [ 1171.379455][T17445] netlink: 'syz.0.16875': attribute type 1 has an invalid length. [ 1171.501840][ C0] syz_tun: tun_net_xmit 118 [ 1171.569278][T17431] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1171.694845][T17445] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1171.757351][T17447] bond18: (slave veth15): Enslaving as an active interface with a down link [ 1172.187785][T17431] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1172.292771][T17467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16880'. [ 1172.306385][T17467] netlink: 44 bytes leftover after parsing attributes in process `syz.1.16880'. [ 1172.371935][T17431] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1172.466195][T17475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16879'. [ 1172.515286][T17479] netlink: 52 bytes leftover after parsing attributes in process `syz.0.16881'. [ 1172.540499][ C0] syz_tun: tun_net_xmit 118 [ 1172.614594][T17484] sctp: [Deprecated]: syz.1.16883 (pid 17484) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1172.614594][T17484] Use struct sctp_sack_info instead [ 1172.648101][T17431] netdevsim netdevsim4 netdevsim0 (unregistering): tearing down IPsec offload with 1 SAs left [ 1172.841022][T17491] netlink: 'syz.1.16886': attribute type 1 has an invalid length. [ 1172.908471][T17491] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1173.590317][ C0] syz_tun: tun_net_xmit 118 [ 1174.620343][ C0] syz_tun: tun_net_xmit 118 [ 1175.660480][ C0] syz_tun: tun_net_xmit 118 [ 1175.768345][T17499] bond18: (slave veth21): Enslaving as an active interface with a down link [ 1175.798552][T17491] vlan4: entered allmulticast mode [ 1175.805701][T17491] bond18: (slave vlan4): Error -34 calling dev_set_mtu [ 1175.942588][T17503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1176.037271][T17503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1176.265777][T17512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16892'. [ 1176.299843][T17512] netlink: 44 bytes leftover after parsing attributes in process `syz.3.16892'. [ 1176.562917][T17520] syz_tun: entered allmulticast mode [ 1176.570261][T17520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16895'. [ 1176.607716][T17520] syz_tun (unregistering): left allmulticast mode [ 1176.713914][T17524] bond19: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 1176.728467][T17524] bond19 (unregistering): Released all slaves [ 1176.747582][T17528] netlink: 59 bytes leftover after parsing attributes in process `syz.1.16896'. [ 1176.791617][T17526] netlink: 84 bytes leftover after parsing attributes in process `syz.1.16896'. [ 1177.063426][T17542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1177.087366][T17542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1177.166053][T17550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16905'. [ 1177.635020][T17572] __nla_validate_parse: 1 callbacks suppressed [ 1177.635045][T17572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16910'. [ 1177.669792][ T1304] lec:lec_start_xmit: lec0:No lecd attached [ 1177.942118][T17583] C: left promiscuous mode [ 1177.974584][T17583] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1178.136023][T17597] tipc: Failed to remove unknown binding: 66,0,0/10463914:2253426059/2253426061 [ 1178.152106][T17595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16917'. [ 1178.159865][T17597] tipc: Failed to remove unknown binding: 66,0,0/10463914:2253426059/2253426060 [ 1178.189676][T17595] netlink: 44 bytes leftover after parsing attributes in process `syz.0.16917'. [ 1178.192044][T17603] C: renamed from lo (while UP) [ 1178.216211][T17598] tipc: Failed to remove unknown binding: 66,0,0/10463914:2253426059/2253426061 [ 1178.248464][T17598] tipc: Failed to remove unknown binding: 66,0,0/10463914:2253426059/2253426060 [ 1178.284699][T17603] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1178.286098][T17598] tipc: Failed to remove unknown binding: 66,0,0/10463914:2253426059/2253426061 [ 1178.312781][T17598] tipc: Failed to remove unknown binding: 66,0,0/10463914:2253426059/2253426060 [ 1178.415032][T17609] tipc: Enabling of bearer rejected, already enabled [ 1178.754070][T17632] netlink: 'syz.0.16929': attribute type 1 has an invalid length. [ 1178.842572][T17635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16932'. [ 1178.863007][T17635] netlink: 44 bytes leftover after parsing attributes in process `syz.2.16932'. [ 1178.902035][T17639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16930'. [ 1178.912875][T17639] openvswitch: netlink: Unknown nsh attribute 0 [ 1179.012231][T17639] syzkaller0: entered promiscuous mode [ 1179.018309][T17639] syzkaller0: entered allmulticast mode [ 1179.249008][T17650] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16935'. [ 1181.294789][T17650] 8021q: VLANs not supported on lo [ 1181.446747][T17656] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16936'. [ 1181.480900][T17664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16937'. [ 1181.595921][T17671] FAULT_INJECTION: forcing a failure. [ 1181.595921][T17671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1181.613696][T17671] CPU: 0 UID: 0 PID: 17671 Comm: syz.1.16941 Not tainted syzkaller #0 PREEMPT(full) [ 1181.613724][T17671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1181.613736][T17671] Call Trace: [ 1181.613744][T17671] [ 1181.613753][T17671] dump_stack_lvl+0xe8/0x150 [ 1181.613783][T17671] should_fail_ex+0x412/0x560 [ 1181.613812][T17671] _copy_from_user+0x2d/0xb0 [ 1181.613842][T17671] ___sys_sendmsg+0x1c6/0x360 [ 1181.613866][T17671] ? __lock_acquire+0x6b5/0x2cf0 [ 1181.613897][T17671] ? __pfx____sys_sendmsg+0x10/0x10 [ 1181.613960][T17671] ? __fget_files+0x2a/0x420 [ 1181.613980][T17671] ? __fget_files+0x3a0/0x420 [ 1181.614011][T17671] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1181.614039][T17671] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1181.614076][T17671] ? __pfx_ksys_write+0x10/0x10 [ 1181.614118][T17671] do_syscall_64+0xe2/0xf80 [ 1181.614142][T17671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.614161][T17671] ? trace_irq_disable+0x37/0x100 [ 1181.614180][T17671] ? clear_bhb_loop+0x60/0xb0 [ 1181.614206][T17671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.614225][T17671] RIP: 0033:0x7f393579aeb9 [ 1181.614244][T17671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1181.614261][T17671] RSP: 002b:00007f3936728028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1181.614284][T17671] RAX: ffffffffffffffda RBX: 00007f3935a15fa0 RCX: 00007f393579aeb9 [ 1181.614298][T17671] RDX: 0000000004040004 RSI: 0000200000000300 RDI: 0000000000000003 [ 1181.614312][T17671] RBP: 00007f3936728090 R08: 0000000000000000 R09: 0000000000000000 [ 1181.614325][T17671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1181.614337][T17671] R13: 00007f3935a16038 R14: 00007f3935a15fa0 R15: 00007ffce84b1718 [ 1181.614379][T17671] [ 1182.213193][T17677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1182.374351][T17709] netlink: 'syz.1.16954': attribute type 29 has an invalid length. [ 1182.383791][T17709] netlink: 'syz.1.16954': attribute type 29 has an invalid length. [ 1182.394125][T17710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16953'. [ 1182.484907][T17713] netlink: 'syz.3.16955': attribute type 3 has an invalid length. [ 1182.603940][T17719] netlink: 'syz.1.16958': attribute type 1 has an invalid length. [ 1182.652175][T17719] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1182.685523][T17724] bond19: (slave veth23): Enslaving as an active interface with a down link [ 1182.718248][T17719] vlan4: entered allmulticast mode [ 1182.732685][T17719] bond19: (slave vlan4): Error -34 calling dev_set_mtu [ 1183.032342][T17741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16965'. [ 1183.088116][T17744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16966'. [ 1183.098084][T17744] netlink: 44 bytes leftover after parsing attributes in process `syz.1.16966'. [ 1183.180097][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5510 ms [ 1183.188191][ C1] lec:lec_tx_timeout: lec0 [ 1183.543433][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1183.554496][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1183.564689][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1183.574419][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1183.582717][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1183.609022][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1183.646104][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1183.656588][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1183.668066][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1183.678270][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1183.744541][T17772] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.16974'. [ 1183.856498][T17764] wg1 speed is unknown, defaulting to 1000 [ 1183.903196][T17764] wlan0 speed is unknown, defaulting to 1000 [ 1184.334415][T17786] bond17: invalid ARP target 0.0.0.0 specified for addition [ 1184.343560][T17786] bond17: option arp_ip_target: invalid value (0) [ 1184.352746][T29197] lec:lec_start_xmit: lec0:No lecd attached [ 1184.493213][T17786] bond17 (unregistering): Released all slaves [ 1185.751438][ T5833] Bluetooth: hci5: command tx timeout [ 1187.017336][T17816] openvswitch: netlink: IPv4 tun info is not correct [ 1187.112813][T17764] chnl_net:caif_netlink_parms(): no params data found [ 1187.222495][T17794] wg1 speed is unknown, defaulting to 1000 [ 1187.235353][T17794] wlan0 speed is unknown, defaulting to 1000 [ 1187.409623][T17821] netlink: 168 bytes leftover after parsing attributes in process `syz.0.16988'. [ 1187.821543][ T5833] Bluetooth: hci5: command tx timeout [ 1187.994313][T17764] bridge0: port 1(bridge_slave_0) entered blocking state [ 1188.003100][T17764] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.013569][T17764] bridge_slave_0: entered allmulticast mode [ 1188.024529][T17764] bridge_slave_0: entered promiscuous mode [ 1188.036750][T17764] bridge0: port 2(bridge_slave_1) entered blocking state [ 1188.045541][T17764] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.054791][T17764] bridge_slave_1: entered allmulticast mode [ 1188.064213][T17764] bridge_slave_1: entered promiscuous mode [ 1188.205688][T17764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1188.252350][T17764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1188.403720][T17764] team0: Port device team_slave_0 added [ 1188.449694][T17764] team0: Port device team_slave_1 added [ 1188.521553][T17764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1188.533402][T17764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1188.592380][T17764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1188.612008][T17764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1188.619227][T17764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1188.666224][T17764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1188.752374][T17764] hsr_slave_0: entered promiscuous mode [ 1188.759644][T17764] hsr_slave_1: entered promiscuous mode [ 1188.768099][T17764] debugfs: 'hsr0' already exists in 'hsr' [ 1188.776945][T17764] Cannot create hsr debugfs directory [ 1189.361622][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1189.369757][ C1] lec:lec_tx_timeout: lec0 [ 1189.900348][ T5833] Bluetooth: hci5: command tx timeout [ 1191.938161][T17871] syzkaller0: entered promiscuous mode [ 1191.951670][T17871] syzkaller0: entered allmulticast mode [ 1191.987269][ T5833] Bluetooth: hci5: command tx timeout [ 1192.096522][T17878] netlink: 'syz.0.17002': attribute type 28 has an invalid length. [ 1192.154892][T17878] netlink: 'syz.0.17002': attribute type 3 has an invalid length. [ 1192.211939][T17878] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17002'. [ 1192.244833][T17764] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1192.306783][T17764] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1192.446799][T17764] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1192.575889][T17764] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1192.737170][T17903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1192.772324][T17903] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17010'. [ 1192.895610][T17764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1192.933893][T17764] 8021q: adding VLAN 0 to HW filter on device team0 [ 1192.995905][T17120] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.003280][T17120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1193.046124][T17120] bridge0: port 2(bridge_slave_1) entered blocking state [ 1193.053467][T17120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1193.407795][T17120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1193.431733][T17927] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17016'. [ 1193.448637][T17120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1193.468733][T17928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1193.468983][T17923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1193.514724][T17931] netlink: 'syz.3.17019': attribute type 10 has an invalid length. [ 1193.543054][T17931] team0: Device bond0 failed to register rx_handler [ 1193.575226][T17936] netlink: 84 bytes leftover after parsing attributes in process `syz.3.17019'. [ 1193.874952][T17764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1194.333524][T17959] tipc: Enabled bearer , priority 0 [ 1194.445640][T17959] syzkaller0: entered promiscuous mode [ 1194.452292][T17959] syzkaller0: entered allmulticast mode [ 1194.459016][T17959] tipc: Resetting bearer [ 1194.485753][T17967] veth0_to_bridge: entered promiscuous mode [ 1194.495798][T17957] tipc: Resetting bearer [ 1195.206993][T17973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17031'. [ 1195.297502][T17975] netlink: 48 bytes leftover after parsing attributes in process `syz.1.17032'. [ 1195.309198][T17975] netlink: 48 bytes leftover after parsing attributes in process `syz.1.17032'. [ 1195.320685][T17975] netlink: 48 bytes leftover after parsing attributes in process `syz.1.17032'. [ 1195.446192][T17979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17033'. [ 1196.885231][T17957] tipc: Disabling bearer [ 1196.900913][T17967] veth0_to_bridge: left promiscuous mode [ 1197.056781][T17764] veth0_vlan: entered promiscuous mode [ 1197.104070][T17764] veth1_vlan: entered promiscuous mode [ 1197.115794][T17999] FAULT_INJECTION: forcing a failure. [ 1197.115794][T17999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1197.133332][T18000] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17041'. [ 1197.143497][T18002] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1197.148130][T17999] CPU: 1 UID: 0 PID: 17999 Comm: syz.3.17039 Not tainted syzkaller #0 PREEMPT(full) [ 1197.148156][T17999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1197.148168][T17999] Call Trace: [ 1197.148176][T17999] [ 1197.148184][T17999] dump_stack_lvl+0xe8/0x150 [ 1197.148213][T17999] should_fail_ex+0x412/0x560 [ 1197.148239][T17999] _copy_from_iter+0x1d3/0x1670 [ 1197.148269][T17999] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 1197.148299][T17999] ? __pfx__copy_from_iter+0x10/0x10 [ 1197.148322][T17999] ? __build_skb_around+0x22d/0x3c0 [ 1197.148345][T17999] ? __alloc_skb+0x193/0x390 [ 1197.148364][T17999] ? netlink_sendmsg+0x650/0xb40 [ 1197.148382][T17999] ? skb_put+0x11b/0x210 [ 1197.148405][T17999] netlink_sendmsg+0x6c0/0xb40 [ 1197.148433][T17999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1197.148455][T17999] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1197.148478][T17999] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1197.148508][T17999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1197.148525][T17999] ____sys_sendmsg+0xa68/0xad0 [ 1197.148548][T17999] ? __might_fault+0xaf/0x130 [ 1197.148579][T17999] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1197.148610][T17999] ? import_iovec+0x73/0xa0 [ 1197.148637][T17999] ___sys_sendmsg+0x2a5/0x360 [ 1197.148658][T17999] ? __lock_acquire+0x6b5/0x2cf0 [ 1197.148687][T17999] ? __pfx____sys_sendmsg+0x10/0x10 [ 1197.148743][T17999] ? __fget_files+0x2a/0x420 [ 1197.148761][T17999] ? __fget_files+0x3a0/0x420 [ 1197.148791][T17999] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1197.148816][T17999] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1197.148847][T17999] ? __pfx_ksys_write+0x10/0x10 [ 1197.148882][T17999] do_syscall_64+0xe2/0xf80 [ 1197.148901][T17999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.148918][T17999] ? trace_irq_disable+0x37/0x100 [ 1197.148934][T17999] ? clear_bhb_loop+0x60/0xb0 [ 1197.148954][T17999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.148971][T17999] RIP: 0033:0x7f3e8bb9aeb9 [ 1197.148988][T17999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1197.149003][T17999] RSP: 002b:00007f3e89df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1197.149023][T17999] RAX: ffffffffffffffda RBX: 00007f3e8be15fa0 RCX: 00007f3e8bb9aeb9 [ 1197.149037][T17999] RDX: 0000000000000000 RSI: 0000200000000d80 RDI: 0000000000000004 [ 1197.149049][T17999] RBP: 00007f3e89df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1197.149060][T17999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1197.149070][T17999] R13: 00007f3e8be16038 R14: 00007f3e8be15fa0 R15: 00007fff9e351b98 [ 1197.149101][T17999] [ 1197.567215][T18019] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17046'. [ 1197.607655][T18019] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17046'. [ 1197.659922][T17764] veth0_macvtap: entered promiscuous mode [ 1197.696126][T17764] veth1_macvtap: entered promiscuous mode [ 1197.787176][T17764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1197.835688][T17764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1197.857620][T17122] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.890624][T17122] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.927832][T17122] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.947654][T17122] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.972305][T18030] netlink: 630 bytes leftover after parsing attributes in process `syz.3.17048'. [ 1198.263107][T18043] openvswitch: netlink: IP tunnel TTL not specified. [ 1198.335684][T18041] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1198.374742][T18045] netlink: 44 bytes leftover after parsing attributes in process `syz.0.17055'. [ 1198.398092][T17122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1198.410312][T18045] netlink: 43 bytes leftover after parsing attributes in process `syz.0.17055'. [ 1198.417419][T17122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.421629][T18045] netlink: 'syz.0.17055': attribute type 6 has an invalid length. [ 1198.458458][T18045] netlink: 'syz.0.17055': attribute type 5 has an invalid length. [ 1198.489287][T17120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1198.489909][T18045] netlink: 43 bytes leftover after parsing attributes in process `syz.0.17055'. [ 1198.502862][T17120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.539878][T18047] can: request_module (can-proto-3) failed. [ 1198.715398][T18058] syzkaller0: entered promiscuous mode [ 1198.727927][T18058] syzkaller0: entered allmulticast mode [ 1198.732937][T18060] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1198.761308][T18056] tipc: Enabled bearer , priority 0 [ 1198.788030][T18055] tipc: Resetting bearer [ 1198.874883][T18055] tipc: Disabling bearer [ 1199.359941][T18091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17066'. [ 1199.413049][T18092] syzkaller0: entered promiscuous mode [ 1199.418856][T18092] syzkaller0: entered allmulticast mode [ 1199.471343][T18096] syzkaller0: entered promiscuous mode [ 1199.476886][T18096] syzkaller0: entered allmulticast mode [ 1199.863685][T18116] netlink: 20 bytes leftover after parsing attributes in process `syz.5.17075'. [ 1200.064117][ T95] block nbd1: Possible stuck request ffff8880257c7800: control (read@0,1024B). Runtime 120 seconds [ 1200.078144][ T95] block nbd1: Possible stuck request ffff8880257c7a00: control (read@1024,1024B). Runtime 120 seconds [ 1200.091080][ T95] block nbd1: Possible stuck request ffff8880257c7c00: control (read@2048,1024B). Runtime 120 seconds [ 1200.103301][ T95] block nbd1: Possible stuck request ffff8880257c7e00: control (read@3072,1024B). Runtime 120 seconds [ 1201.117036][T18175] netlink: 'syz.2.17092': attribute type 17 has an invalid length. [ 1201.126642][T18175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17092'. [ 1201.136538][T18175] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17092'. [ 1201.152087][T18175] erspan0: entered promiscuous mode [ 1201.158950][T18175] gretap0: entered promiscuous mode [ 1201.165436][T18175] : Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 1201.175796][T18175] : Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 1201.279537][T18180] netlink: 'syz.2.17094': attribute type 1 has an invalid length. [ 1203.193449][T18134] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1203.288142][ T24] IPVS: starting estimator thread 0... [ 1203.428067][T18187] IPVS: using max 24 ests per chain, 57600 per kthread [ 1203.905774][T18222] __nla_validate_parse: 2 callbacks suppressed [ 1203.905796][T18222] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17111'. [ 1204.048920][T18227] netlink: 248 bytes leftover after parsing attributes in process `syz.1.17109'. [ 1204.085168][T18227] netlink: 52 bytes leftover after parsing attributes in process `syz.1.17109'. [ 1204.111409][T18231] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17113'. [ 1204.168512][T18231] netlink: 44 bytes leftover after parsing attributes in process `syz.5.17113'. [ 1204.245094][T18236] netlink: 'syz.0.17114': attribute type 1 has an invalid length. [ 1204.254111][T18236] netlink: 216 bytes leftover after parsing attributes in process `syz.0.17114'. [ 1204.257073][T18239] netlink: 'syz.1.17117': attribute type 1 has an invalid length. [ 1204.395718][T18239] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1204.402381][T18248] netlink: 300 bytes leftover after parsing attributes in process `syz.3.17119'. [ 1204.572558][T18254] netlink: 'syz.0.17122': attribute type 1 has an invalid length. [ 1204.588114][T18258] netlink: 'syz.3.17123': attribute type 1 has an invalid length. [ 1204.605452][T18241] bond20: (slave veth25): Enslaving as an active interface with a down link [ 1204.658936][T18242] vlan4: entered allmulticast mode [ 1204.668760][T18242] bond20: (slave vlan4): Error -34 calling dev_set_mtu [ 1204.691373][T18263] SET target dimension over the limit! [ 1204.717906][T18254] bond21: option lp_interval: invalid value (0) [ 1204.726651][T18254] bond21: option lp_interval: allowed values 1 - 2147483647 [ 1204.741331][T18254] bond21 (unregistering): Released all slaves [ 1204.839515][T18268] netlink: 256 bytes leftover after parsing attributes in process `syz.1.17127'. [ 1205.021655][T18276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17130'. [ 1205.052424][T18276] netlink: 44 bytes leftover after parsing attributes in process `syz.1.17130'. [ 1205.399086][T18294] netlink: 'syz.1.17138': attribute type 1 has an invalid length. [ 1205.438385][T18294] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1205.548577][T18300] netlink: 'syz.5.17142': attribute type 27 has an invalid length. [ 1205.568176][T18298] bond21: (slave veth27): Enslaving as an active interface with a down link [ 1205.611233][T18294] vlan4: entered allmulticast mode [ 1205.617249][T18294] bond21: (slave vlan4): Error -34 calling dev_set_mtu [ 1205.777567][T18312] delete_channel: no stack [ 1205.788234][T18312] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1205.828927][T18312] netlink: 'syz.0.17143': attribute type 1 has an invalid length. [ 1206.031707][T18321] Cannot find del_set index 4 as target [ 1206.404804][T18346] netlink: 'syz.0.17157': attribute type 4 has an invalid length. [ 1206.521572][T18348] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1206.543781][T18351] netlink: 'syz.1.17159': attribute type 21 has an invalid length. [ 1206.565026][T18348] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1207.117972][T18385] openvswitch: netlink: IP tunnel TTL not specified. [ 1207.214973][T18392] FAULT_INJECTION: forcing a failure. [ 1207.214973][T18392] name failslab, interval 1, probability 0, space 0, times 0 [ 1207.262547][T18392] CPU: 1 UID: 0 PID: 18392 Comm: syz.2.17173 Not tainted syzkaller #0 PREEMPT(full) [ 1207.262577][T18392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1207.262589][T18392] Call Trace: [ 1207.262598][T18392] [ 1207.262608][T18392] dump_stack_lvl+0xe8/0x150 [ 1207.262641][T18392] should_fail_ex+0x412/0x560 [ 1207.262671][T18392] should_failslab+0xa8/0x100 [ 1207.262696][T18392] __kmalloc_noprof+0xde/0x7e0 [ 1207.262715][T18392] ? rcu_is_watching+0x15/0xb0 [ 1207.262733][T18392] ? security_sk_alloc+0x52/0x360 [ 1207.262768][T18392] security_sk_alloc+0x52/0x360 [ 1207.262796][T18392] sk_prot_alloc+0x101/0x210 [ 1207.262818][T18392] ? sk_alloc+0x27/0x390 [ 1207.262842][T18392] sk_alloc+0x3a/0x390 [ 1207.262869][T18392] bpf_prog_test_run_skb+0x3f3/0x1d50 [ 1207.262898][T18392] ? __fget_files+0x2a/0x420 [ 1207.262922][T18392] ? __fget_files+0x2a/0x420 [ 1207.262942][T18392] ? __fget_files+0x3a0/0x420 [ 1207.262962][T18392] ? __fget_files+0x2a/0x420 [ 1207.262987][T18392] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1207.263008][T18392] bpf_prog_test_run+0x2c7/0x340 [ 1207.263034][T18392] __sys_bpf+0x5cb/0x920 [ 1207.263056][T18392] ? __pfx___sys_bpf+0x10/0x10 [ 1207.263091][T18392] ? ksys_write+0x242/0x270 [ 1207.263120][T18392] ? __pfx_ksys_write+0x10/0x10 [ 1207.263156][T18392] __x64_sys_bpf+0x7c/0x90 [ 1207.263186][T18392] do_syscall_64+0xe2/0xf80 [ 1207.263206][T18392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.263225][T18392] ? trace_irq_disable+0x37/0x100 [ 1207.263243][T18392] ? clear_bhb_loop+0x60/0xb0 [ 1207.263266][T18392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.263285][T18392] RIP: 0033:0x7f3aadd9aeb9 [ 1207.263304][T18392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1207.263330][T18392] RSP: 002b:00007f3aaebdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1207.263352][T18392] RAX: ffffffffffffffda RBX: 00007f3aae015fa0 RCX: 00007f3aadd9aeb9 [ 1207.263367][T18392] RDX: 0000000000000050 RSI: 0000200000001080 RDI: 000000000000000a [ 1207.263380][T18392] RBP: 00007f3aaebdf090 R08: 0000000000000000 R09: 0000000000000000 [ 1207.263393][T18392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1207.263406][T18392] R13: 00007f3aae016038 R14: 00007f3aae015fa0 R15: 00007ffeaf71f548 [ 1207.263440][T18392] [ 1207.572161][T18396] tipc: Enabled bearer , priority 0 [ 1207.635809][T18396] syzkaller0: MTU too low for tipc bearer [ 1207.669072][T18396] tipc: Disabling bearer [ 1208.298564][T18435] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼Ú [ 1208.324533][T18437] netlink: 'syz.3.17187': attribute type 9 has an invalid length. [ 1208.388004][T18442] openvswitch: netlink: IP tunnel TTL not specified. [ 1208.388698][T18443] FAULT_INJECTION: forcing a failure. [ 1208.388698][T18443] name failslab, interval 1, probability 0, space 0, times 0 [ 1208.412269][T18443] CPU: 1 UID: 0 PID: 18443 Comm: syz.0.17188 Not tainted syzkaller #0 PREEMPT(full) [ 1208.412299][T18443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1208.412311][T18443] Call Trace: [ 1208.412320][T18443] [ 1208.412330][T18443] dump_stack_lvl+0xe8/0x150 [ 1208.412362][T18443] should_fail_ex+0x412/0x560 [ 1208.412393][T18443] should_failslab+0xa8/0x100 [ 1208.412419][T18443] __kmalloc_noprof+0xde/0x7e0 [ 1208.412438][T18443] ? kernfs_fop_write_iter+0x158/0x540 [ 1208.412468][T18443] kernfs_fop_write_iter+0x158/0x540 [ 1208.412499][T18443] vfs_write+0x61d/0xb90 [ 1208.412537][T18443] ? __pfx_vfs_write+0x10/0x10 [ 1208.412579][T18443] ? __fget_files+0x2a/0x420 [ 1208.412612][T18443] ksys_write+0x150/0x270 [ 1208.412642][T18443] ? __pfx_ksys_write+0x10/0x10 [ 1208.412684][T18443] do_syscall_64+0xe2/0xf80 [ 1208.412705][T18443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.412724][T18443] ? trace_irq_disable+0x37/0x100 [ 1208.412743][T18443] ? clear_bhb_loop+0x60/0xb0 [ 1208.412767][T18443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.412787][T18443] RIP: 0033:0x7fa5d979aeb9 [ 1208.412806][T18443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1208.412824][T18443] RSP: 002b:00007fa5da661028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1208.412847][T18443] RAX: ffffffffffffffda RBX: 00007fa5d9a15fa0 RCX: 00007fa5d979aeb9 [ 1208.412862][T18443] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000006 [ 1208.412875][T18443] RBP: 00007fa5da661090 R08: 0000000000000000 R09: 0000000000000000 [ 1208.412888][T18443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1208.412900][T18443] R13: 00007fa5d9a16038 R14: 00007fa5d9a15fa0 R15: 00007fff9b563008 [ 1208.412937][T18443] [ 1208.692984][T18437] syzkaller0: entered promiscuous mode [ 1208.698624][T18437] syzkaller0: entered allmulticast mode [ 1208.936193][T18462] __nla_validate_parse: 9 callbacks suppressed [ 1208.936215][T18462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17192'. [ 1209.057446][T18469] IPVS: Scheduler module ip_vs_sip not found [ 1209.213666][T18465] openvswitch: netlink: Message has 81 unknown bytes. [ 1209.221238][T18465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1211.737194][T18502] FAULT_INJECTION: forcing a failure. [ 1211.737194][T18502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1211.770365][T18502] CPU: 0 UID: 0 PID: 18502 Comm: syz.2.17202 Not tainted syzkaller #0 PREEMPT(full) [ 1211.770395][T18502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1211.770407][T18502] Call Trace: [ 1211.770416][T18502] [ 1211.770425][T18502] dump_stack_lvl+0xe8/0x150 [ 1211.770456][T18502] should_fail_ex+0x412/0x560 [ 1211.770487][T18502] _copy_from_iter+0x1d3/0x1670 [ 1211.770528][T18502] ? __pfx__copy_from_iter+0x10/0x10 [ 1211.770556][T18502] ? rcu_is_watching+0x15/0xb0 [ 1211.770576][T18502] ? trace_kmalloc+0x1f/0xb0 [ 1211.770594][T18502] ? __kmalloc_noprof+0x42d/0x7e0 [ 1211.770612][T18502] ? kernfs_fop_write_iter+0x158/0x540 [ 1211.770636][T18502] kernfs_fop_write_iter+0x19b/0x540 [ 1211.770664][T18502] vfs_write+0x61d/0xb90 [ 1211.770698][T18502] ? __pfx_vfs_write+0x10/0x10 [ 1211.770731][T18502] ? __fget_files+0x2a/0x420 [ 1211.770759][T18502] ksys_write+0x150/0x270 [ 1211.770787][T18502] ? __pfx_ksys_write+0x10/0x10 [ 1211.770834][T18502] do_syscall_64+0xe2/0xf80 [ 1211.770852][T18502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.770868][T18502] ? trace_irq_disable+0x37/0x100 [ 1211.770884][T18502] ? clear_bhb_loop+0x60/0xb0 [ 1211.770906][T18502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.770925][T18502] RIP: 0033:0x7f3aadd9aeb9 [ 1211.770943][T18502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1211.770960][T18502] RSP: 002b:00007f3aaebdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1211.770981][T18502] RAX: ffffffffffffffda RBX: 00007f3aae015fa0 RCX: 00007f3aadd9aeb9 [ 1211.770996][T18502] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000006 [ 1211.771007][T18502] RBP: 00007f3aaebdf090 R08: 0000000000000000 R09: 0000000000000000 [ 1211.771027][T18502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1211.771039][T18502] R13: 00007f3aae016038 R14: 00007f3aae015fa0 R15: 00007ffeaf71f548 [ 1211.771070][T18502] [ 1212.031051][T18508] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17203'. [ 1212.076592][T18505] Unsupported ieee802154 address type: 0 [ 1212.096990][T18511] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.17204'. [ 1212.097729][T18515] FAULT_INJECTION: forcing a failure. [ 1212.097729][T18515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1212.125362][T18516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17203'. [ 1212.169875][T18516] syzkaller1: entered promiscuous mode [ 1212.176693][T18516] syzkaller1: entered allmulticast mode [ 1212.190689][T18515] CPU: 0 UID: 0 PID: 18515 Comm: syz.2.17207 Not tainted syzkaller #0 PREEMPT(full) [ 1212.190717][T18515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1212.190729][T18515] Call Trace: [ 1212.190738][T18515] [ 1212.190747][T18515] dump_stack_lvl+0xe8/0x150 [ 1212.190779][T18515] should_fail_ex+0x412/0x560 [ 1212.190809][T18515] _copy_to_user+0x31/0xb0 [ 1212.190841][T18515] simple_read_from_buffer+0xe1/0x170 [ 1212.190868][T18515] proc_fail_nth_read+0x1bb/0x230 [ 1212.190900][T18515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1212.190931][T18515] ? rw_verify_area+0x2a6/0x4d0 [ 1212.190956][T18515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1212.190983][T18515] vfs_read+0x20c/0xa70 [ 1212.191017][T18515] ? fdget_pos+0x246/0x320 [ 1212.191044][T18515] ? __pfx___mutex_lock+0x10/0x10 [ 1212.191067][T18515] ? __pfx_vfs_read+0x10/0x10 [ 1212.191096][T18515] ? __fget_files+0x2a/0x420 [ 1212.191123][T18515] ? __fget_files+0x3a0/0x420 [ 1212.191144][T18515] ? __fget_files+0x2a/0x420 [ 1212.191174][T18515] ksys_read+0x150/0x270 [ 1212.191203][T18515] ? __pfx_ksys_read+0x10/0x10 [ 1212.191244][T18515] do_syscall_64+0xe2/0xf80 [ 1212.191265][T18515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.191283][T18515] ? trace_irq_disable+0x37/0x100 [ 1212.191302][T18515] ? clear_bhb_loop+0x60/0xb0 [ 1212.191326][T18515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.191343][T18515] RIP: 0033:0x7f3aadd5b78e [ 1212.191362][T18515] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1212.191379][T18515] RSP: 002b:00007f3aaebdefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1212.191399][T18515] RAX: ffffffffffffffda RBX: 00007f3aaebdf6c0 RCX: 00007f3aadd5b78e [ 1212.191413][T18515] RDX: 000000000000000f RSI: 00007f3aaebdf0a0 RDI: 0000000000000003 [ 1212.191426][T18515] RBP: 00007f3aaebdf090 R08: 0000000000000000 R09: 0000000000000000 [ 1212.191438][T18515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1212.191450][T18515] R13: 00007f3aae016038 R14: 00007f3aae015fa0 R15: 00007ffeaf71f548 [ 1212.191482][T18515] [ 1212.228842][T18516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17203'. [ 1212.352777][T18525] FAULT_INJECTION: forcing a failure. [ 1212.352777][T18525] name failslab, interval 1, probability 0, space 0, times 0 [ 1212.468760][T18516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17203'. [ 1212.522143][T18525] CPU: 1 UID: 0 PID: 18525 Comm: syz.2.17210 Not tainted syzkaller #0 PREEMPT(full) [ 1212.522173][T18525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1212.522184][T18525] Call Trace: [ 1212.522193][T18525] [ 1212.522203][T18525] dump_stack_lvl+0xe8/0x150 [ 1212.522234][T18525] should_fail_ex+0x412/0x560 [ 1212.522263][T18525] should_failslab+0xa8/0x100 [ 1212.522289][T18525] __kmalloc_noprof+0xde/0x7e0 [ 1212.522307][T18525] ? __raw_spin_lock_init+0x45/0x100 [ 1212.522327][T18525] ? pfkey_add+0xf78/0x2df0 [ 1212.522353][T18525] pfkey_add+0xf78/0x2df0 [ 1212.522394][T18525] ? __pfx_pfkey_add+0x10/0x10 [ 1212.522411][T18525] ? pfkey_broadcast+0x3c2/0x3e0 [ 1212.522455][T18525] pfkey_sendmsg+0xc56/0x1120 [ 1212.522473][T18525] ? unwind_next_frame+0xa5/0x23c0 [ 1212.522511][T18525] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1212.522560][T18525] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1212.522593][T18525] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1212.522618][T18525] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1212.522635][T18525] ____sys_sendmsg+0xa68/0xad0 [ 1212.522663][T18525] ? __might_fault+0xaf/0x130 [ 1212.522699][T18525] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1212.522736][T18525] ? import_iovec+0x73/0xa0 [ 1212.522769][T18525] ___sys_sendmsg+0x2a5/0x360 [ 1212.522795][T18525] ? __lock_acquire+0x6b5/0x2cf0 [ 1212.522826][T18525] ? __pfx____sys_sendmsg+0x10/0x10 [ 1212.522905][T18525] ? __fget_files+0x2a/0x420 [ 1212.522926][T18525] ? __fget_files+0x3a0/0x420 [ 1212.522959][T18525] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1212.522997][T18525] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1212.523035][T18525] ? __pfx_ksys_write+0x10/0x10 [ 1212.523078][T18525] do_syscall_64+0xe2/0xf80 [ 1212.523099][T18525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.523118][T18525] ? trace_irq_disable+0x37/0x100 [ 1212.523137][T18525] ? clear_bhb_loop+0x60/0xb0 [ 1212.523162][T18525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.523182][T18525] RIP: 0033:0x7f3aadd9aeb9 [ 1212.523201][T18525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1212.523218][T18525] RSP: 002b:00007f3aaebdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1212.523241][T18525] RAX: ffffffffffffffda RBX: 00007f3aae015fa0 RCX: 00007f3aadd9aeb9 [ 1212.523254][T18525] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1212.523265][T18525] RBP: 00007f3aaebdf090 R08: 0000000000000000 R09: 0000000000000000 [ 1212.523278][T18525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1212.523291][T18525] R13: 00007f3aae016038 R14: 00007f3aae015fa0 R15: 00007ffeaf71f548 [ 1212.523326][T18525] [ 1212.979160][T18543] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17212'. [ 1213.094503][T18545] netlink: 'syz.2.17214': attribute type 1 has an invalid length. [ 1213.165148][T18545] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1213.283688][T18551] bond9: (slave veth1): Enslaving as an active interface with a down link [ 1213.314745][T18562] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.17217'. [ 1213.586262][T18576] netlink: 'syz.2.17222': attribute type 10 has an invalid length. [ 1213.931823][T18591] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17228'. [ 1213.948627][T18592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17229'. [ 1214.004473][T18596] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.17231'. [ 1214.039571][T18598] netlink: 'syz.0.17232': attribute type 1 has an invalid length. [ 1214.138272][T18607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17230'. [ 1214.159123][T18598] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1214.327968][T18601] bond21: (slave veth17): Enslaving as an active interface with a down link [ 1214.695349][T18624] netlink: 'syz.0.17239': attribute type 1 has an invalid length. [ 1214.718748][T18624] netlink: 'syz.0.17239': attribute type 4 has an invalid length. [ 1214.750864][T18624] netlink: 9422 bytes leftover after parsing attributes in process `syz.0.17239'. [ 1214.797838][T18630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17240'. [ 1214.824853][T18630] chnl_net:caif_netlink_parms(): no params data found [ 1215.014594][T18642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1215.037319][T18642] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1215.105086][T18649] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20002 [ 1215.136004][T18650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17248'. [ 1215.516170][T18661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17251'. [ 1215.648380][T18661] syzkaller0: entered promiscuous mode [ 1215.655544][T18661] syzkaller0: entered allmulticast mode [ 1215.667992][T18669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1216.225599][T18689] x_tables: duplicate underflow at hook 1 [ 1218.189392][T18688] netlink: 56 bytes leftover after parsing attributes in process `syz.5.17259'. [ 1218.261326][T18692] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17259'. [ 1218.428660][T18702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17264'. [ 1218.749598][T18719] netlink: 'syz.0.17269': attribute type 6 has an invalid length. [ 1218.772824][T18719] netlink: 'syz.0.17269': attribute type 6 has an invalid length. [ 1218.887274][T18725] xt_hashlimit: size too large, truncated to 1048576 [ 1218.972708][T18727] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1219.566386][T18757] __nla_validate_parse: 6 callbacks suppressed [ 1219.566410][T18757] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.17283'. [ 1220.390921][T18780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17291'. [ 1220.561605][T18780] hsr_slave_1 (unregistering): left promiscuous mode [ 1220.572806][T18787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17294'. [ 1220.747627][T18793] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17295'. [ 1220.786763][T18793] netlink: 'syz.5.17295': attribute type 39 has an invalid length. [ 1220.844388][T18794] netlink: 'syz.2.17297': attribute type 1 has an invalid length. [ 1220.871500][T18794] netlink: 'syz.2.17297': attribute type 3 has an invalid length. [ 1220.889808][T18794] netlink: 172 bytes leftover after parsing attributes in process `syz.2.17297'. [ 1220.908974][T18794] NCSI netlink: No device for ifindex 813332851 [ 1220.959898][T18803] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17295'. [ 1221.079477][T18807] nbd: nbd1 already in use [ 1221.093500][T18807] block nbd1: NBD_DISCONNECT [ 1221.108331][T18807] block nbd1: Send disconnect failed -32 [ 1221.134057][T18807] block nbd1: shutting down sockets [ 1221.173827][ C1] blk_print_req_error: 136 callbacks suppressed [ 1221.173850][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1221.189819][ C1] buffer_io_error: 138 callbacks suppressed [ 1221.189840][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1221.203775][ C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1221.213341][ C1] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1221.221221][ C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1221.230771][ C1] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1221.238582][ C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1221.248239][ C1] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1221.266281][T18815] netlink: 54 bytes leftover after parsing attributes in process `syz.3.17303'. [ 1221.267492][T18807] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17299'. [ 1221.276336][T14054] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1221.276374][T14054] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1221.276423][T14054] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1221.276448][T14054] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1221.276491][T14054] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1221.276516][T14054] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1221.276557][T14054] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1221.276582][T14054] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1221.276633][T14054] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1221.276658][T14054] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1221.276699][T14054] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1221.276724][T14054] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1221.277568][T14054] ldm_validate_partition_table(): Disk read failed. [ 1221.334953][T18815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17303'. [ 1221.343506][T14054] Dev nbd1: unable to read RDB block 0 [ 1221.391880][T18815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17303'. [ 1221.470740][T14054] nbd1: unable to read partition table [ 1221.491849][T14054] ldm_validate_partition_table(): Disk read failed. [ 1221.499158][T14054] Dev nbd1: unable to read RDB block 0 [ 1221.538559][T14054] nbd1: unable to read partition table [ 1221.596675][T18823] FAULT_INJECTION: forcing a failure. [ 1221.596675][T18823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1221.613998][T18823] CPU: 1 UID: 0 PID: 18823 Comm: syz.0.17305 Not tainted syzkaller #0 PREEMPT(full) [ 1221.614026][T18823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1221.614039][T18823] Call Trace: [ 1221.614046][T18823] [ 1221.614054][T18823] dump_stack_lvl+0xe8/0x150 [ 1221.614086][T18823] should_fail_ex+0x412/0x560 [ 1221.614114][T18823] _copy_from_user+0x2d/0xb0 [ 1221.614144][T18823] ___sys_sendmsg+0x1c6/0x360 [ 1221.614170][T18823] ? __lock_acquire+0x6b5/0x2cf0 [ 1221.614213][T18823] ? __pfx____sys_sendmsg+0x10/0x10 [ 1221.614275][T18823] ? __fget_files+0x2a/0x420 [ 1221.614296][T18823] ? __fget_files+0x3a0/0x420 [ 1221.614325][T18823] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1221.614354][T18823] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1221.614391][T18823] ? __pfx_ksys_write+0x10/0x10 [ 1221.614433][T18823] do_syscall_64+0xe2/0xf80 [ 1221.614455][T18823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.614474][T18823] ? trace_irq_disable+0x37/0x100 [ 1221.614493][T18823] ? clear_bhb_loop+0x60/0xb0 [ 1221.614516][T18823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.614535][T18823] RIP: 0033:0x7fa5d979aeb9 [ 1221.614555][T18823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1221.614572][T18823] RSP: 002b:00007fa5da640028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1221.614595][T18823] RAX: ffffffffffffffda RBX: 00007fa5d9a16090 RCX: 00007fa5d979aeb9 [ 1221.614609][T18823] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 1221.614621][T18823] RBP: 00007fa5da640090 R08: 0000000000000000 R09: 0000000000000000 [ 1221.614633][T18823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1221.614645][T18823] R13: 00007fa5d9a16128 R14: 00007fa5d9a16090 R15: 00007fff9b563008 [ 1221.614678][T18823] [ 1222.376436][T18859] netlink: 'syz.1.17315': attribute type 1 has an invalid length. [ 1222.385526][T18859] netlink: 'syz.1.17315': attribute type 1 has an invalid length. [ 1222.397752][T18859] netlink: 'syz.1.17315': attribute type 2 has an invalid length. [ 1223.417461][T18915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1223.473846][T18915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1223.545312][T18915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1223.610327][T18927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1223.781444][T18939] netlink: 'syz.0.17336': attribute type 12 has an invalid length. [ 1223.844781][T18941] tipc: Enabled bearer , priority 0 [ 1223.926076][T18948] FAULT_INJECTION: forcing a failure. [ 1223.926076][T18948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1223.946904][T18948] CPU: 1 UID: 0 PID: 18948 Comm: syz.3.17339 Not tainted syzkaller #0 PREEMPT(full) [ 1223.946934][T18948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1223.946947][T18948] Call Trace: [ 1223.946955][T18948] [ 1223.946965][T18948] dump_stack_lvl+0xe8/0x150 [ 1223.946996][T18948] should_fail_ex+0x412/0x560 [ 1223.947027][T18948] _copy_from_iter+0x1d3/0x1670 [ 1223.947061][T18948] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 1223.947095][T18948] ? __pfx__copy_from_iter+0x10/0x10 [ 1223.947121][T18948] ? __build_skb_around+0x22d/0x3c0 [ 1223.947147][T18948] ? __alloc_skb+0x193/0x390 [ 1223.947170][T18948] ? netlink_sendmsg+0x650/0xb40 [ 1223.947249][T18948] ? skb_put+0x11b/0x210 [ 1223.947277][T18948] netlink_sendmsg+0x6c0/0xb40 [ 1223.947308][T18948] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1223.947331][T18948] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1223.947362][T18948] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1223.947385][T18948] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1223.947404][T18948] ____sys_sendmsg+0xa68/0xad0 [ 1223.947429][T18948] ? __might_fault+0xaf/0x130 [ 1223.947465][T18948] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1223.947500][T18948] ? import_iovec+0x73/0xa0 [ 1223.947531][T18948] ___sys_sendmsg+0x2a5/0x360 [ 1223.947555][T18948] ? __lock_acquire+0x6b5/0x2cf0 [ 1223.947586][T18948] ? __pfx____sys_sendmsg+0x10/0x10 [ 1223.947648][T18948] ? __fget_files+0x2a/0x420 [ 1223.947669][T18948] ? __fget_files+0x3a0/0x420 [ 1223.947701][T18948] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1223.947730][T18948] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1223.947765][T18948] ? __pfx_ksys_write+0x10/0x10 [ 1223.947804][T18948] do_syscall_64+0xe2/0xf80 [ 1223.947823][T18948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.947841][T18948] ? trace_irq_disable+0x37/0x100 [ 1223.947859][T18948] ? clear_bhb_loop+0x60/0xb0 [ 1223.947882][T18948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.947900][T18948] RIP: 0033:0x7f3e8bb9aeb9 [ 1223.947919][T18948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1223.947935][T18948] RSP: 002b:00007f3e89dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1223.947956][T18948] RAX: ffffffffffffffda RBX: 00007f3e8be16090 RCX: 00007f3e8bb9aeb9 [ 1223.947971][T18948] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 1223.947983][T18948] RBP: 00007f3e89dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1223.947996][T18948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1223.948007][T18948] R13: 00007f3e8be16128 R14: 00007f3e8be16090 R15: 00007fff9e351b98 [ 1223.948039][T18948] [ 1224.232603][T18953] FAULT_INJECTION: forcing a failure. [ 1224.232603][T18953] name failslab, interval 1, probability 0, space 0, times 0 [ 1224.245967][T18953] CPU: 0 UID: 0 PID: 18953 Comm: syz.5.17340 Not tainted syzkaller #0 PREEMPT(full) [ 1224.245998][T18953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1224.246010][T18953] Call Trace: [ 1224.246018][T18953] [ 1224.246028][T18953] dump_stack_lvl+0xe8/0x150 [ 1224.246060][T18953] should_fail_ex+0x412/0x560 [ 1224.246090][T18953] should_failslab+0xa8/0x100 [ 1224.246116][T18953] __kmalloc_noprof+0xde/0x7e0 [ 1224.246135][T18953] ? esp_init_state+0x764/0x1240 [ 1224.246166][T18953] esp_init_state+0x764/0x1240 [ 1224.246202][T18953] ? __pfx_esp_init_state+0x10/0x10 [ 1224.246251][T18953] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 1224.246277][T18953] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 1224.246311][T18953] ? __xfrm_init_state+0x842/0x1460 [ 1224.246335][T18953] __xfrm_init_state+0xac9/0x1460 [ 1224.246353][T18953] ? __xfrm_init_state+0x842/0x1460 [ 1224.246378][T18953] xfrm_init_state+0x18/0xa0 [ 1224.246405][T18953] pfkey_add+0x1d34/0x2df0 [ 1224.246448][T18953] ? __pfx_pfkey_add+0x10/0x10 [ 1224.246466][T18953] ? pfkey_broadcast+0x3c2/0x3e0 [ 1224.246508][T18953] pfkey_sendmsg+0xc56/0x1120 [ 1224.246526][T18953] ? unwind_next_frame+0xa5/0x23c0 [ 1224.246564][T18953] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1224.246609][T18953] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1224.246635][T18953] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1224.246657][T18953] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1224.246673][T18953] ____sys_sendmsg+0xa68/0xad0 [ 1224.246698][T18953] ? __might_fault+0xaf/0x130 [ 1224.246732][T18953] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1224.246767][T18953] ? import_iovec+0x73/0xa0 [ 1224.246798][T18953] ___sys_sendmsg+0x2a5/0x360 [ 1224.246822][T18953] ? __lock_acquire+0x6b5/0x2cf0 [ 1224.246852][T18953] ? __pfx____sys_sendmsg+0x10/0x10 [ 1224.246916][T18953] ? __fget_files+0x2a/0x420 [ 1224.246936][T18953] ? __fget_files+0x3a0/0x420 [ 1224.246952][T18941] syzkaller0: entered promiscuous mode [ 1224.246976][T18953] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1224.247004][T18953] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1224.247035][T18953] ? __pfx_ksys_write+0x10/0x10 [ 1224.247072][T18953] do_syscall_64+0xe2/0xf80 [ 1224.247090][T18953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.247107][T18953] ? trace_irq_disable+0x37/0x100 [ 1224.247123][T18953] ? clear_bhb_loop+0x60/0xb0 [ 1224.247145][T18953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.247161][T18953] RIP: 0033:0x7f6ba759aeb9 [ 1224.247179][T18953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1224.247194][T18953] RSP: 002b:00007f6ba8499028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1224.247216][T18953] RAX: ffffffffffffffda RBX: 00007f6ba7815fa0 RCX: 00007f6ba759aeb9 [ 1224.247237][T18953] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1224.247249][T18953] RBP: 00007f6ba8499090 R08: 0000000000000000 R09: 0000000000000000 [ 1224.247260][T18953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1224.247272][T18953] R13: 00007f6ba7816038 R14: 00007f6ba7815fa0 R15: 00007fffc7a0be58 [ 1224.247303][T18953] [ 1224.250523][T18914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1224.257919][T18941] syzkaller0: entered allmulticast mode [ 1224.605215][T18941] tipc: Resetting bearer [ 1224.691327][T18940] tipc: Resetting bearer [ 1224.987912][T18966] netlink: 'syz.2.17344': attribute type 1 has an invalid length. [ 1225.986689][T10000] IPVS: ip_vs_send_async error -101 [ 1227.104035][T18940] tipc: Disabling bearer [ 1227.176199][T18966] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1227.361511][T18969] bond10: (slave veth15): Enslaving as an active interface with a down link [ 1227.404238][T18970] vlan1: entered allmulticast mode [ 1227.431128][T18970] veth1: entered allmulticast mode [ 1227.442708][T18970] veth1: entered promiscuous mode [ 1227.453099][T18970] veth1: left promiscuous mode [ 1227.483984][T18970] bond10: (slave vlan1): Enslaving as an active interface with a down link [ 1227.506174][T18980] netlink: 'syz.3.17350': attribute type 1 has an invalid length. [ 1227.577958][ T5836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1227.593387][T18981] __nla_validate_parse: 9 callbacks suppressed [ 1227.593407][T18981] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17350'. [ 1227.611889][ T5836] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1227.626003][ T5836] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1227.636629][ T5836] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1227.648440][ T5836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1227.711679][T18980] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1227.778784][T18981] bond17: (slave bridge21): making interface the new active one [ 1227.813734][T18981] bond17: (slave bridge21): Enslaving as an active interface with an up link [ 1227.891547][T18993] netlink: 28 bytes leftover after parsing attributes in process `syz.5.17353'. [ 1227.938010][T18993] netlink: 'syz.5.17353': attribute type 3 has an invalid length. [ 1227.953925][T18984] wg1 speed is unknown, defaulting to 1000 [ 1227.956137][T18993] netlink: 'syz.5.17353': attribute type 1 has an invalid length. [ 1227.962687][T18984] wlan0 speed is unknown, defaulting to 1000 [ 1228.033690][T19000] netlink: 'syz.3.17356': attribute type 10 has an invalid length. [ 1228.088188][T18998] netlink: 48 bytes leftover after parsing attributes in process `syz.1.17354'. [ 1228.114230][T19001] netlink: 48 bytes leftover after parsing attributes in process `syz.1.17354'. [ 1228.131931][T19000] team0: Device veth1_macvtap failed to register rx_handler [ 1228.322028][T19016] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17360'. [ 1228.401936][T19020] FAULT_INJECTION: forcing a failure. [ 1228.401936][T19020] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.471114][T19020] CPU: 1 UID: 0 PID: 19020 Comm: syz.3.17359 Not tainted syzkaller #0 PREEMPT(full) [ 1228.471143][T19020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1228.471155][T19020] Call Trace: [ 1228.471164][T19020] [ 1228.471172][T19020] dump_stack_lvl+0xe8/0x150 [ 1228.471202][T19020] should_fail_ex+0x412/0x560 [ 1228.471232][T19020] should_failslab+0xa8/0x100 [ 1228.471256][T19020] kmem_cache_alloc_noprof+0x87/0x6e0 [ 1228.471283][T19020] ? __netlink_lookup+0xc6/0x8b0 [ 1228.471304][T19020] ? skb_clone+0x212/0x3a0 [ 1228.471334][T19020] skb_clone+0x212/0x3a0 [ 1228.471365][T19020] __netlink_deliver_tap+0x404/0x850 [ 1228.471399][T19020] ? netlink_deliver_tap+0x2e/0x1b0 [ 1228.471421][T19020] netlink_deliver_tap+0x19c/0x1b0 [ 1228.471442][T19020] netlink_unicast+0x7e3/0x9b0 [ 1228.471480][T19020] ? __pfx_netlink_unicast+0x10/0x10 [ 1228.471508][T19020] ? __alloc_skb+0x193/0x390 [ 1228.471531][T19020] ? netlink_sendmsg+0x650/0xb40 [ 1228.471550][T19020] ? skb_put+0x11b/0x210 [ 1228.471578][T19020] netlink_sendmsg+0x813/0xb40 [ 1228.471609][T19020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1228.471634][T19020] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1228.471661][T19020] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1228.471685][T19020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1228.471703][T19020] ____sys_sendmsg+0xa68/0xad0 [ 1228.471729][T19020] ? __might_fault+0xaf/0x130 [ 1228.471766][T19020] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1228.471802][T19020] ? import_iovec+0x73/0xa0 [ 1228.471835][T19020] ___sys_sendmsg+0x2a5/0x360 [ 1228.471860][T19020] ? __lock_acquire+0x6b5/0x2cf0 [ 1228.471892][T19020] ? __pfx____sys_sendmsg+0x10/0x10 [ 1228.471967][T19020] ? __fget_files+0x2a/0x420 [ 1228.471988][T19020] ? __fget_files+0x3a0/0x420 [ 1228.472022][T19020] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1228.472052][T19020] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1228.472089][T19020] ? __pfx_ksys_write+0x10/0x10 [ 1228.472130][T19020] do_syscall_64+0xe2/0xf80 [ 1228.472151][T19020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.472170][T19020] ? trace_irq_disable+0x37/0x100 [ 1228.472189][T19020] ? clear_bhb_loop+0x60/0xb0 [ 1228.472213][T19020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.472232][T19020] RIP: 0033:0x7f3e8bb9aeb9 [ 1228.472253][T19020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1228.472270][T19020] RSP: 002b:00007f3e89dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1228.472291][T19020] RAX: ffffffffffffffda RBX: 00007f3e8be16090 RCX: 00007f3e8bb9aeb9 [ 1228.472306][T19020] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 1228.472319][T19020] RBP: 00007f3e89dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1228.472331][T19020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1228.472343][T19020] R13: 00007f3e8be16128 R14: 00007f3e8be16090 R15: 00007fff9e351b98 [ 1228.472379][T19020] [ 1228.472420][T19020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17359'. [ 1228.564066][T19022] syzkaller0: entered promiscuous mode [ 1228.816596][T19022] syzkaller0: entered allmulticast mode [ 1228.834463][T18984] chnl_net:caif_netlink_parms(): no params data found [ 1229.122990][T19034] netlink: 'syz.3.17367': attribute type 2 has an invalid length. [ 1229.175039][T18984] bridge0: port 1(bridge_slave_0) entered blocking state [ 1229.183030][T18984] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.190859][T18984] bridge_slave_0: entered allmulticast mode [ 1229.209309][T18984] bridge_slave_0: entered promiscuous mode [ 1229.242680][T18984] bridge0: port 2(bridge_slave_1) entered blocking state [ 1229.260348][T18984] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.267688][T18984] bridge_slave_1: entered allmulticast mode [ 1229.292741][T18984] bridge_slave_1: entered promiscuous mode [ 1229.351996][T19051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17371'. [ 1229.383098][T19049] syzkaller0: entered promiscuous mode [ 1229.391802][T19049] syzkaller0: entered allmulticast mode [ 1229.488327][T18984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1229.506590][T18984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1229.527268][T19060] siw: device registration error -23 [ 1229.531149][T19057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17374'. [ 1229.543853][T19061] siw: device registration error -23 [ 1229.639147][T18984] team0: Port device team_slave_0 added [ 1229.683821][T18984] team0: Port device team_slave_1 added [ 1229.738013][T19070] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17379'. [ 1229.747917][ T5836] Bluetooth: hci6: command tx timeout [ 1229.776610][T19073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1229.799984][T18984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1229.831348][T18984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1229.898218][T18984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1229.930628][T18984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1229.937787][T18984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1229.967613][T18984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1229.997155][T19081] syzkaller0: entered promiscuous mode [ 1230.016117][T19081] syzkaller0: entered allmulticast mode [ 1230.095827][T19090] netlink: 'syz.1.17381': attribute type 1 has an invalid length. [ 1230.134633][T19090] netlink: 224 bytes leftover after parsing attributes in process `syz.1.17381'. [ 1230.297398][T19099] xt_cgroup: invalid path, errno=-2 [ 1230.324488][T19101] netlink: 'syz.1.17386': attribute type 1 has an invalid length. [ 1230.466815][T19103] bond22: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1230.478953][T19103] bond22: (slave vxcan1): Error -95 calling set_mac_address [ 1230.555965][T18984] hsr_slave_0: entered promiscuous mode [ 1230.568270][T18984] hsr_slave_1: entered promiscuous mode [ 1230.577114][T18984] debugfs: 'hsr0' already exists in 'hsr' [ 1230.593527][T18984] Cannot create hsr debugfs directory [ 1230.716977][T19111] netlink: 'syz.3.17389': attribute type 25 has an invalid length. [ 1230.733266][T19105] macvlan3: entered promiscuous mode [ 1230.739160][T19105] macvlan3: entered allmulticast mode [ 1230.867930][T17125] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1230.895808][T17125] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1230.906769][T17125] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1230.928040][T17120] tipc: Subscription rejected, illegal request [ 1230.930863][T17125] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1231.137736][T18984] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1231.150511][T18984] netdevsim netdevsim0 eth3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1231.161577][T18984] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1231.172579][T18984] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1231.257335][T18984] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1231.269761][T18984] netdevsim netdevsim0 eth2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1231.280357][T18984] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1231.291126][T18984] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1231.427040][T18984] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1231.443963][T18984] netdevsim netdevsim0 eth1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1231.469222][T18984] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1231.479563][T18984] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1231.589891][T18984] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1231.613670][T18984] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1231.637034][T18984] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1231.658187][T18984] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1231.820853][ T5836] Bluetooth: hci6: command tx timeout [ 1232.666753][T19207] netlink: 'syz.1.17419': attribute type 1 has an invalid length. [ 1232.695988][T19207] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1232.723157][T19207] bond23: (slave veth29): Enslaving as an active interface with a down link [ 1232.743318][T19207] vlan5: entered allmulticast mode [ 1232.748914][T19207] bond23: (slave vlan5): Error -34 calling dev_set_mtu [ 1232.994908][T19217] syzkaller0: entered promiscuous mode [ 1233.001997][T19217] syzkaller0: entered allmulticast mode [ 1233.911212][ T5836] Bluetooth: hci6: command tx timeout [ 1234.793536][T19164] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1234.973461][T19220] __nla_validate_parse: 12 callbacks suppressed [ 1234.973483][T19220] netlink: 164 bytes leftover after parsing attributes in process `syz.3.17423'. [ 1235.981424][ T5836] Bluetooth: hci6: command tx timeout [ 1236.102459][T18984] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1236.116926][T18984] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1236.146469][T18984] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1236.185722][T18984] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1236.349674][T19248] FAULT_INJECTION: forcing a failure. [ 1236.349674][T19248] name failslab, interval 1, probability 0, space 0, times 0 [ 1236.408535][T19248] CPU: 1 UID: 0 PID: 19248 Comm: syz.3.17429 Not tainted syzkaller #0 PREEMPT(full) [ 1236.408565][T19248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1236.408577][T19248] Call Trace: [ 1236.408586][T19248] [ 1236.408596][T19248] dump_stack_lvl+0xe8/0x150 [ 1236.408628][T19248] should_fail_ex+0x412/0x560 [ 1236.408661][T19248] should_failslab+0xa8/0x100 [ 1236.408686][T19248] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 1236.408718][T19248] ? __alloc_skb+0x1d7/0x390 [ 1236.408740][T19248] ? __local_bh_enable_ip+0xd0/0x130 [ 1236.408761][T19248] ? __alloc_skb+0x193/0x390 [ 1236.408797][T19248] __alloc_skb+0x1d7/0x390 [ 1236.408824][T19248] xfrm_alloc_compat+0x1a6/0x16f0 [ 1236.408853][T19248] ? xfrm_get_translator+0x1b/0x240 [ 1236.408882][T19248] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 1236.408906][T19248] xfrm_nlmsg_multicast+0xda/0x1f0 [ 1236.408939][T19248] xfrm_send_state_notify+0xc5f/0x18d0 [ 1236.408976][T19248] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 1236.409002][T19248] ? km_state_notify+0x25/0x1f0 [ 1236.409030][T19248] ? xfrm_state_add+0x56e/0xc40 [ 1236.409054][T19248] ? __local_bh_enable_ip+0xd0/0x130 [ 1236.409077][T19248] ? km_state_notify+0x25/0x1f0 [ 1236.409103][T19248] ? km_state_notify+0x25/0x1f0 [ 1236.409130][T19248] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 1236.409159][T19248] km_state_notify+0x110/0x1f0 [ 1236.409192][T19248] pfkey_add+0x2008/0x2df0 [ 1236.409236][T19248] ? __pfx_pfkey_add+0x10/0x10 [ 1236.409253][T19248] ? pfkey_broadcast+0x3c2/0x3e0 [ 1236.409298][T19248] pfkey_sendmsg+0xc56/0x1120 [ 1236.409316][T19248] ? unwind_next_frame+0xa5/0x23c0 [ 1236.409356][T19248] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1236.409407][T19248] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1236.409434][T19248] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1236.409458][T19248] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1236.409477][T19248] ____sys_sendmsg+0xa68/0xad0 [ 1236.409503][T19248] ? __might_fault+0xaf/0x130 [ 1236.409540][T19248] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1236.409577][T19248] ? import_iovec+0x73/0xa0 [ 1236.409612][T19248] ___sys_sendmsg+0x2a5/0x360 [ 1236.409636][T19248] ? __lock_acquire+0x6b5/0x2cf0 [ 1236.409670][T19248] ? __pfx____sys_sendmsg+0x10/0x10 [ 1236.409749][T19248] ? __fget_files+0x2a/0x420 [ 1236.409778][T19248] ? __fget_files+0x3a0/0x420 [ 1236.409821][T19248] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1236.409850][T19248] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1236.409889][T19248] ? __pfx_ksys_write+0x10/0x10 [ 1236.409930][T19248] do_syscall_64+0xe2/0xf80 [ 1236.409950][T19248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.409969][T19248] ? trace_irq_disable+0x37/0x100 [ 1236.409993][T19248] ? clear_bhb_loop+0x60/0xb0 [ 1236.410016][T19248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.410034][T19248] RIP: 0033:0x7f3e8bb9aeb9 [ 1236.410054][T19248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1236.410070][T19248] RSP: 002b:00007f3e89df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1236.410092][T19248] RAX: ffffffffffffffda RBX: 00007f3e8be15fa0 RCX: 00007f3e8bb9aeb9 [ 1236.410106][T19248] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1236.410118][T19248] RBP: 00007f3e89df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1236.410130][T19248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1236.410141][T19248] R13: 00007f3e8be16038 R14: 00007f3e8be15fa0 R15: 00007fff9e351b98 [ 1236.410176][T19248] [ 1236.784570][T18984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1236.825524][T18984] 8021q: adding VLAN 0 to HW filter on device team0 [ 1236.916384][T17122] bridge0: port 1(bridge_slave_0) entered blocking state [ 1236.923643][T17122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1239.107804][ T1304] lec:lec_start_xmit: lec0:No lecd attached [ 1239.849752][T19256] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1239.938083][T17125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.945371][T17125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1240.092139][T19273] netlink: 'syz.3.17434': attribute type 1 has an invalid length. [ 1240.341031][T19273] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1240.572994][T19275] bond18: (slave veth17): Enslaving as an active interface with a down link [ 1240.631047][T19277] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1241.121201][T19297] syzkaller0: entered promiscuous mode [ 1241.130179][T19297] syzkaller0: entered allmulticast mode [ 1241.155256][T19297] netlink: 'syz.5.17439': attribute type 32 has an invalid length. [ 1241.185097][T19297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17439'. [ 1241.275593][T19297] bond1: Setting coupled_control to off (0) [ 1241.295943][T19311] tipc: Enabling of bearer rejected, failed to enable media [ 1241.296197][T19313] netlink: 48 bytes leftover after parsing attributes in process `syz.2.17443'. [ 1241.336217][T19313] netlink: 196 bytes leftover after parsing attributes in process `syz.2.17443'. [ 1241.347002][T19313] netlink: 196 bytes leftover after parsing attributes in process `syz.2.17443'. [ 1241.393515][T19313] netlink: 19 bytes leftover after parsing attributes in process `syz.2.17443'. [ 1241.413285][T19313] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17443'. [ 1241.604071][T18984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1241.771788][T18984] veth0_vlan: entered promiscuous mode [ 1241.792284][T18984] veth1_vlan: entered promiscuous mode [ 1241.839954][T18984] veth0_macvtap: entered promiscuous mode [ 1241.863584][T18984] veth1_macvtap: entered promiscuous mode [ 1241.908289][T18984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1241.947617][T18984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1241.974013][T17126] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.999115][T17126] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.011939][T17126] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.035960][T17126] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.231047][T19343] netlink: 32 bytes leftover after parsing attributes in process `syz.5.17453'. [ 1242.293894][T19346] xt_bpf: check failed: parse error [ 1242.341716][T19348] netlink: 'syz.2.17452': attribute type 24 has an invalid length. [ 1244.221485][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5110 ms [ 1244.230353][ C1] lec:lec_tx_timeout: lec0 [ 1244.446187][T19318] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1244.607188][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1244.661326][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1244.771253][T19357] wg1 speed is unknown, defaulting to 1000 [ 1244.778224][T19357] wlan0 speed is unknown, defaulting to 1000 [ 1244.799793][T19359] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 1244.839613][T17120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1244.859027][T17120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1245.320425][T19382] netlink: 'syz.5.17461': attribute type 26 has an invalid length. [ 1245.850155][T19401] xt_hashlimit: size too large, truncated to 1048576 [ 1245.879690][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1245.893464][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1245.906599][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1245.917257][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1245.944423][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1246.040817][T19399] wg1 speed is unknown, defaulting to 1000 [ 1246.053981][T19399] wlan0 speed is unknown, defaulting to 1000 [ 1246.163531][T19407] tipc: Enabled bearer , priority 0 [ 1246.193816][T19407] syzkaller0: entered promiscuous mode [ 1246.206933][T19407] syzkaller0: entered allmulticast mode [ 1246.342946][T19413] syzkaller0: entered promiscuous mode [ 1246.360247][T19413] syzkaller0: entered allmulticast mode [ 1246.378294][T19407] tipc: Resetting bearer [ 1246.531090][T19421] xt_hashlimit: size too large, truncated to 1048576 [ 1246.791609][T19426] netlink: 196 bytes leftover after parsing attributes in process `syz.2.17475'. [ 1246.954421][T19430] netlink: 56 bytes leftover after parsing attributes in process `syz.2.17477'. [ 1246.966263][T19430] netlink: 92 bytes leftover after parsing attributes in process `syz.2.17477'. [ 1248.062122][ T5836] Bluetooth: hci3: command tx timeout [ 1249.055449][T29197] lec:lec_start_xmit: lec0:No lecd attached [ 1249.229437][T19406] tipc: Resetting bearer [ 1249.257312][T19406] tipc: Disabling bearer [ 1249.678015][T19399] chnl_net:caif_netlink_parms(): no params data found [ 1249.937162][T19478] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1250.090141][T19399] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.108285][T19399] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.131139][T19399] bridge_slave_0: entered allmulticast mode [ 1250.143327][ T5836] Bluetooth: hci3: command tx timeout [ 1250.154777][T19399] bridge_slave_0: entered promiscuous mode [ 1250.167602][T19399] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.176054][T19399] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.183744][T19399] bridge_slave_1: entered allmulticast mode [ 1250.195213][T19399] bridge_slave_1: entered promiscuous mode [ 1250.244863][T19399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1250.258492][T19399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1250.322051][T19399] team0: Port device team_slave_0 added [ 1250.398912][T19399] team0: Port device team_slave_1 added [ 1250.516376][T19399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1250.532630][T19399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1250.547921][T19507] netlink: 236 bytes leftover after parsing attributes in process `syz.5.17508'. [ 1250.600137][T19399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1250.657301][T19399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1250.698617][T19399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1250.728616][T19511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17509'. [ 1250.758576][T19399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1250.927357][T19399] hsr_slave_0: entered promiscuous mode [ 1250.962549][T19399] hsr_slave_1: entered promiscuous mode [ 1250.978899][T19399] debugfs: 'hsr0' already exists in 'hsr' [ 1251.001155][T19399] Cannot create hsr debugfs directory [ 1251.182075][ T30] audit: type=1107 audit(1770228156.125:11): pid=19529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1251.402195][T19541] netlink: 260 bytes leftover after parsing attributes in process `syz.3.17523'. [ 1251.459363][T19543] netlink: 60 bytes leftover after parsing attributes in process `syz.5.17524'. [ 1251.655911][T19399] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1251.671277][T19399] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.867723][T19399] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1251.892615][T19399] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.014187][T19399] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1252.027354][T19399] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.154224][T19572] xt_hashlimit: size too large, truncated to 1048576 [ 1252.220255][ T5836] Bluetooth: hci3: command tx timeout [ 1252.477247][T19399] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1252.506206][T19399] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1252.547453][T19399] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1252.569862][T19399] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1252.980348][T19399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1253.008651][T19399] 8021q: adding VLAN 0 to HW filter on device team0 [ 1253.047264][T17126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.054731][T17126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1253.121691][T17126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.129035][T17126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1253.256464][T19399] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1253.789599][T19399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1253.933229][T19399] veth0_vlan: entered promiscuous mode [ 1253.957554][T19399] veth1_vlan: entered promiscuous mode [ 1254.085151][T19399] veth0_macvtap: entered promiscuous mode [ 1254.122374][T19399] veth1_macvtap: entered promiscuous mode [ 1254.156359][T19639] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17564'. [ 1254.191671][T19399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1254.217950][T19399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1254.220166][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5160 ms [ 1254.233734][ C1] lec:lec_tx_timeout: lec0 [ 1254.256643][T17123] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.267516][T17123] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.300324][ T5836] Bluetooth: hci3: command tx timeout [ 1254.306394][T17123] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.335064][T17123] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.746085][T19635] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1254.755585][T19635] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1255.001593][T19635] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1255.013393][T19635] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1255.297191][T19635] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1255.304962][T19678] netlink: 60 bytes leftover after parsing attributes in process `syz.3.17583'. [ 1255.313320][T19635] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1255.545431][T17122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.600569][T17122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.729280][T17122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.776432][T17122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1256.453690][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1256.472045][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1256.482488][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1256.497893][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1256.512292][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1256.682952][T19722] wg1 speed is unknown, defaulting to 1000 [ 1256.695670][T19722] wlan0 speed is unknown, defaulting to 1000 [ 1256.997354][T19734] wg1 speed is unknown, defaulting to 1000 [ 1257.057556][T19734] wlan0 speed is unknown, defaulting to 1000 [ 1257.072437][T19740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17611'. [ 1257.225587][T19742] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1257.547255][T19757] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17617'. [ 1257.708730][T19722] chnl_net:caif_netlink_parms(): no params data found [ 1257.839316][T19770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17622'. [ 1258.199560][T19722] bridge0: port 1(bridge_slave_0) entered blocking state [ 1258.240201][T19722] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.265485][T19722] bridge_slave_0: entered allmulticast mode [ 1258.286917][T19722] bridge_slave_0: entered promiscuous mode [ 1258.315179][T19722] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.335032][T19722] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.349102][T19722] bridge_slave_1: entered allmulticast mode [ 1258.373093][T19722] bridge_slave_1: entered promiscuous mode [ 1258.508112][T19722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1258.539503][T19722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1258.558329][ T5836] Bluetooth: hci4: command tx timeout [ 1258.630796][T19810] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17634'. [ 1258.662284][T19722] team0: Port device team_slave_0 added [ 1258.683419][T19722] team0: Port device team_slave_1 added [ 1258.725241][T19812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17636'. [ 1258.738128][T19812] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17636'. [ 1258.765788][T19722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1258.791321][T19722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1258.832809][T19722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1258.882054][T19722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1258.889250][T19722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1258.961019][T19722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1259.108153][T19722] hsr_slave_0: entered promiscuous mode [ 1259.123246][T19722] hsr_slave_1: entered promiscuous mode [ 1259.138357][T19722] debugfs: 'hsr0' already exists in 'hsr' [ 1259.156614][T19722] Cannot create hsr debugfs directory [ 1259.292402][T19836] netlink: 'syz.1.17648': attribute type 21 has an invalid length. [ 1259.384487][T19839] netlink: 'syz.5.17649': attribute type 10 has an invalid length. [ 1259.415261][T19839] hsr0: entered promiscuous mode [ 1259.483279][T19839] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1259.527719][T19839] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1259.548174][T19839] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1259.621954][T19846] netlink: 'syz.0.17652': attribute type 29 has an invalid length. [ 1259.685202][T19849] netlink: 'syz.0.17652': attribute type 29 has an invalid length. [ 1259.898442][T19862] netlink: 'syz.5.17661': attribute type 21 has an invalid length. [ 1259.979284][T19722] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1259.999745][T19867] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17663'. [ 1260.012333][T19722] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.029078][T19865] netlink: 209608 bytes leftover after parsing attributes in process `syz.3.17662'. [ 1260.098331][T19869] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17664'. [ 1260.142546][T19722] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1260.161274][T19722] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.242567][T19873] sock: sock_timestamping_bind_phc: sock not bind to device [ 1260.341798][T19722] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1260.368756][T19722] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.424849][T19877] netlink: 'syz.3.17667': attribute type 10 has an invalid length. [ 1260.463689][T19877] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17667'. [ 1260.476946][T19877] bridge0: port 1(ipvlan1) entered blocking state [ 1260.511269][T19877] bridge0: port 1(ipvlan1) entered disabled state [ 1260.518178][T19877] ipvlan1: entered allmulticast mode [ 1260.525902][T19877] veth0_vlan: entered allmulticast mode [ 1260.558435][T19877] ipvlan1: left allmulticast mode [ 1260.567952][T19877] veth0_vlan: left allmulticast mode [ 1260.579618][T19877] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1260.621295][ T5836] Bluetooth: hci4: command tx timeout [ 1260.628251][T19722] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1260.651242][T19722] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.137060][T19905] syzkaller0: entered promiscuous mode [ 1261.146111][T19905] syzkaller0: entered allmulticast mode [ 1261.294688][T19920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17688'. [ 1261.341390][T19722] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1261.352870][T19722] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1262.704925][ T5836] Bluetooth: hci4: command tx timeout [ 1263.794358][T19722] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1263.806804][T19722] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1263.847110][T19941] C: left allmulticast mode [ 1263.854840][T19941] pimreg: left allmulticast mode [ 1263.924783][T19935] wg1 speed is unknown, defaulting to 1000 [ 1263.946925][T19935] wlan0 speed is unknown, defaulting to 1000 [ 1264.075734][T19954] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17697'. [ 1264.307270][T19722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1264.325755][T19967] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1264.358362][T19722] 8021q: adding VLAN 0 to HW filter on device team0 [ 1264.387770][T17125] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.395095][T17125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1264.415676][T17125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.422979][T17125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1264.469720][T19970] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17702'. [ 1264.706220][T19980] mac80211_hwsim hwsim42 : renamed from wlan1 [ 1264.781371][ T5836] Bluetooth: hci4: command tx timeout [ 1264.982012][T19722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1265.302155][T19999] netlink: 68 bytes leftover after parsing attributes in process `syz.3.17713'. [ 1267.533263][T19722] veth0_vlan: entered promiscuous mode [ 1267.601787][T19722] veth1_vlan: entered promiscuous mode [ 1267.765689][T19722] veth0_macvtap: entered promiscuous mode [ 1267.782190][T19722] veth1_macvtap: entered promiscuous mode [ 1267.853230][T19722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1267.883452][T19722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1268.052020][T17125] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.117598][T17116] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.129868][T20023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17724'. [ 1268.141514][T17121] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.143111][T17121] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.284449][T20027] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 1268.401691][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1268.409817][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1268.642979][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1268.702212][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1268.771378][T20051] bridge0: port 3(syz_tun) entered blocking state [ 1268.795849][T20051] bridge0: port 3(syz_tun) entered disabled state [ 1268.816715][T20051] syz_tun: entered allmulticast mode [ 1268.851430][T20051] syz_tun: entered promiscuous mode [ 1268.859892][T20051] bridge0: port 3(syz_tun) entered blocking state [ 1268.867092][T20051] bridge0: port 3(syz_tun) entered forwarding state [ 1269.398620][T20075] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 1269.553704][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1269.565498][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1269.576228][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1269.606750][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1269.617292][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1269.768083][T20076] wg1 speed is unknown, defaulting to 1000 [ 1269.787258][T20076] wlan0 speed is unknown, defaulting to 1000 [ 1270.188825][T20076] chnl_net:caif_netlink_parms(): no params data found [ 1270.367112][T20076] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.376278][T20076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.385060][T20076] bridge_slave_0: entered allmulticast mode [ 1270.395619][T20076] bridge_slave_0: entered promiscuous mode [ 1270.408890][T20076] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.417686][T20076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.427891][T20076] bridge_slave_1: entered allmulticast mode [ 1270.437941][T20076] bridge_slave_1: entered promiscuous mode [ 1270.531508][T20076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1270.547257][T20076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1270.602770][T20076] team0: Port device team_slave_0 added [ 1270.616955][T20076] team0: Port device team_slave_1 added [ 1270.717072][T20076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1270.725755][T20076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1270.757456][T20076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1270.776657][T20076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1270.785410][T20076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1270.814511][T20076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1270.829098][T20098] bridge0: port 3(syz_tun) entered blocking state [ 1270.837455][T20098] bridge0: port 3(syz_tun) entered disabled state [ 1270.845714][T20098] syz_tun: entered allmulticast mode [ 1270.854707][T20098] syz_tun: entered promiscuous mode [ 1270.862071][T20098] bridge0: port 3(syz_tun) entered blocking state [ 1270.868708][T20098] bridge0: port 3(syz_tun) entered forwarding state [ 1270.878997][T20101] bridge0: port 3(syz_tun) entered blocking state [ 1270.886703][T20101] bridge0: port 3(syz_tun) entered disabled state [ 1270.895288][T20101] syz_tun: entered allmulticast mode [ 1270.903707][T20101] syz_tun: entered promiscuous mode [ 1270.917184][T20101] bridge0: port 3(syz_tun) entered blocking state [ 1270.924021][T20101] bridge0: port 3(syz_tun) entered forwarding state [ 1270.967994][T20101] bridge0: entered promiscuous mode [ 1270.988903][T20101] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1271.071761][T20076] hsr_slave_0: entered promiscuous mode [ 1271.081502][T20076] hsr_slave_1: entered promiscuous mode [ 1271.088417][T20076] debugfs: 'hsr0' already exists in 'hsr' [ 1271.096665][T20076] Cannot create hsr debugfs directory [ 1271.317470][T20108] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17748'. [ 1271.328713][T20108] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17748'. [ 1271.492711][T20076] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1271.576000][T20076] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1271.660773][ T5836] Bluetooth: hci2: command tx timeout [ 1271.686476][T20076] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1271.736596][T20076] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1271.921068][T20057] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1271.971244][T20076] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1272.038058][T20076] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1272.087033][T20076] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1272.137092][T20128] netlink: 'syz.0.17754': attribute type 2 has an invalid length. [ 1272.145052][T20076] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1272.180931][T20128] netlink: 'syz.0.17754': attribute type 4 has an invalid length. [ 1272.189408][T20128] netlink: 'syz.0.17754': attribute type 8 has an invalid length. [ 1272.227650][T20128] netlink: 44 bytes leftover after parsing attributes in process `syz.0.17754'. [ 1272.342300][T20140] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17758'. [ 1272.375190][T20144] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17758'. [ 1272.405368][T20140] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17758'. [ 1272.568882][T20076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1272.659610][T20076] 8021q: adding VLAN 0 to HW filter on device team0 [ 1272.748241][T17119] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.755579][T17119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1272.898489][T17125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.905886][T17125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1272.945571][T20163] netlink: 56843 bytes leftover after parsing attributes in process `syz.5.17769'. [ 1273.039573][T20165] netlink: 'syz.0.17770': attribute type 10 has an invalid length. [ 1273.073605][T20167] netlink: 'syz.2.17772': attribute type 15 has an invalid length. [ 1273.132433][T20165] bond0: (slave bond_slave_0): Releasing backup interface [ 1273.400954][T20183] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.17776'. [ 1273.474708][T20179] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.17776'. [ 1273.517439][T20188] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.17776'. [ 1273.709868][T20076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1273.769701][ T5836] Bluetooth: hci2: command tx timeout [ 1273.831506][T20076] veth0_vlan: entered promiscuous mode [ 1273.847755][T20076] veth1_vlan: entered promiscuous mode [ 1273.975727][T20076] veth0_macvtap: entered promiscuous mode [ 1274.054654][T20076] veth1_macvtap: entered promiscuous mode [ 1274.137410][T20076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1274.178915][T20076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1274.223420][T17125] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.242554][T17125] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.273321][T17125] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.309466][T17125] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.588712][T17121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1274.633967][T17121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1274.736889][T17116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1274.780728][T17116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1275.444531][T20240] wg1 speed is unknown, defaulting to 1000 [ 1275.473757][T20240] wlan0 speed is unknown, defaulting to 1000 [ 1275.598022][T20251] sctp: [Deprecated]: syz.3.17803 (pid 20251) Use of int in maxseg socket option. [ 1275.598022][T20251] Use struct sctp_assoc_value instead [ 1275.823161][ T5836] Bluetooth: hci2: command tx timeout [ 1276.405549][T20273] bridge0: port 2(bridge_slave_1) entered disabled state [ 1276.413409][T20273] bridge0: port 1(bridge_slave_0) entered disabled state [ 1276.572676][T20273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1276.594349][T20273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1276.881000][T20271] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1276.927695][T20279] bond2: (slave macsec1): Error -34 calling dev_set_mtu [ 1276.977461][T17116] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.987083][T17116] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.020073][T17116] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.029107][T17116] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.288787][T20305] netlink: zone id is out of range [ 1277.295226][T20305] netlink: zone id is out of range [ 1277.324958][T20305] netlink: get zone limit has 8 unknown bytes [ 1277.823841][T20317] netlink: 'syz.0.17827': attribute type 8 has an invalid length. [ 1277.901084][ T5836] Bluetooth: hci2: command tx timeout [ 1277.965369][T20327] netlink: 'syz.3.17832': attribute type 1 has an invalid length. [ 1278.049878][T20326] __nla_validate_parse: 4 callbacks suppressed [ 1278.049900][T20326] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17831'. [ 1278.578111][T20358] netlink: 200 bytes leftover after parsing attributes in process `syz.0.17844'. [ 1279.649730][T20391] openvswitch: netlink: Flow key attr not present in new flow. [ 1279.664972][T20389] syzkaller1: entered promiscuous mode [ 1279.671609][T20389] syzkaller1: entered allmulticast mode [ 1279.914596][T20395] wg1: entered promiscuous mode [ 1279.919628][T20395] wg1: entered allmulticast mode [ 1280.053813][T20407] netlink: 16 bytes leftover after parsing attributes in process `syz.5.17861'. [ 1280.096575][T20405] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17865'. [ 1280.393692][T20417] wg1 speed is unknown, defaulting to 1000 [ 1280.428294][T20417] wlan0 speed is unknown, defaulting to 1000 [ 1280.493731][T20420] wg1 speed is unknown, defaulting to 1000 [ 1280.519260][T20420] wlan0 speed is unknown, defaulting to 1000 [ 1280.769940][T20431] netlink: 'syz.0.17874': attribute type 3 has an invalid length. [ 1280.778155][T20431] netlink: 61203 bytes leftover after parsing attributes in process `syz.0.17874'. [ 1281.892412][T20470] IPVS: set_ctl: invalid protocol: 44 100.1.1.2:20003 [ 1282.349951][T20479] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17891'. [ 1282.479114][T20479] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17891'. [ 1282.511467][T20479] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.534239][T20479] bridge0: port 2(bridge_slave_1) entered disabled state [ 1283.072273][T20506] netlink: 296 bytes leftover after parsing attributes in process `syz.5.17899'. [ 1283.192545][T20506] wg1 speed is unknown, defaulting to 1000 [ 1283.206718][T20513] wg1 speed is unknown, defaulting to 1000 [ 1283.207044][T20506] wlan0 speed is unknown, defaulting to 1000 [ 1283.233336][T20513] wlan0 speed is unknown, defaulting to 1000 [ 1283.953123][T20532] wg1 speed is unknown, defaulting to 1000 [ 1283.983972][T20532] wlan0 speed is unknown, defaulting to 1000 [ 1284.390333][T20553] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.17917'. [ 1284.406102][T20550] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.17917'. [ 1284.422838][T20553] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.17917'. [ 1285.201192][T20579] block nbd1: server does not support multiple connections per device. [ 1285.221301][T20579] block nbd1: shutting down sockets [ 1285.905424][T20597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17939'. [ 1285.917522][T20597] bridge: RTM_NEWNEIGH with invalid ether address [ 1286.328839][T20612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1286.753315][T20625] netlink: 32 bytes leftover after parsing attributes in process `syz.5.17952'. [ 1287.163218][T20636] netlink: 76 bytes leftover after parsing attributes in process `syz.5.17956'. [ 1287.579246][T20649] : renamed from bond_slave_0 [ 1287.660907][T10000] IPVS: ip_vs_send_async error -101 [ 1288.082882][T20666] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1288.191789][T20669] bond1: (slave ip6gretap1): making interface the new active one [ 1288.204260][T20669] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1288.234638][T20666] mac80211_hwsim hwsim43 wlan0: entered allmulticast mode [ 1288.251218][T20666] bond1: (slave wlan0): Opening slave failed [ 1289.806096][T20689] netlink: 36 bytes leftover after parsing attributes in process `syz.3.17974'. [ 1290.026050][T20695] netlink: 64 bytes leftover after parsing attributes in process `syz.5.17977'. [ 1290.152594][T20702] mac80211_hwsim hwsim43 wlan0: left allmulticast mode [ 1290.378932][T20714] wg1 speed is unknown, defaulting to 1000 [ 1290.387932][T20714] wlan0 speed is unknown, defaulting to 1000 [ 1290.938806][T20714] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17985'. [ 1291.722108][T20741] syzkaller0: entered promiscuous mode [ 1291.727822][T20741] syzkaller0: entered allmulticast mode [ 1291.953274][T20754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17997'. [ 1292.225719][T20766] wg1 speed is unknown, defaulting to 1000 [ 1292.235309][T20766] wlan0 speed is unknown, defaulting to 1000 [ 1292.909893][T20798] wg1 speed is unknown, defaulting to 1000 [ 1292.932416][T20798] wlan0 speed is unknown, defaulting to 1000 [ 1293.355687][T20817] : renamed from bond_slave_0 [ 1293.882209][T20839] wg1 speed is unknown, defaulting to 1000 [ 1293.891190][T20839] wlan0 speed is unknown, defaulting to 1000 [ 1294.314953][T20857] syzkaller1: entered promiscuous mode [ 1294.321903][T20857] syzkaller1: entered allmulticast mode [ 1294.342060][T20866] openvswitch: netlink: Key type 29 is not supported [ 1294.469847][T20870] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18046'. [ 1294.494882][T20870] xfrm1: entered allmulticast mode [ 1295.845930][T20927] bridge0: port 3(syz_tun) entered disabled state [ 1295.886509][T20927] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.895016][T20927] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.934822][T20936] block nbd1: not configured, cannot reconfigure [ 1295.982841][T20934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18073'. [ 1296.184509][T20927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1296.206750][T20927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1296.543026][ T5833] Bluetooth: hci2: command tx timeout [ 1296.549691][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1296.574475][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1296.594654][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1296.606259][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1296.622654][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1296.787811][T17121] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.807749][T17121] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.853304][T17121] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.884310][T17121] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.976677][T20946] wg1 speed is unknown, defaulting to 1000 [ 1297.013264][T20946] wlan0 speed is unknown, defaulting to 1000 [ 1297.177721][T20963] vlan2: entered promiscuous mode [ 1297.197213][T20963] bridge0: entered promiscuous mode [ 1297.449856][T20946] chnl_net:caif_netlink_parms(): no params data found [ 1297.657710][T20946] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.672196][T20946] bridge0: port 1(bridge_slave_0) entered disabled state [ 1297.689225][T20946] bridge_slave_0: entered allmulticast mode [ 1297.702692][T20946] bridge_slave_0: entered promiscuous mode [ 1297.745062][T20985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18092'. [ 1297.757486][T20946] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.781085][T20946] bridge0: port 2(bridge_slave_1) entered disabled state [ 1297.788462][T20946] bridge_slave_1: entered allmulticast mode [ 1297.818797][T20946] bridge_slave_1: entered promiscuous mode [ 1297.897632][T20946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1297.916149][T20946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1298.026240][T20946] team0: Port device team_slave_0 added [ 1298.036202][T20946] team0: Port device team_slave_1 added [ 1298.128273][T20946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1298.147202][T20946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1298.210082][T20946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1298.239024][T20946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1298.270132][T20946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1298.304787][T20946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1298.618378][T21023] openvswitch: netlink: Flow key attribute not present in set flow. [ 1298.676213][T20946] hsr_slave_0: entered promiscuous mode [ 1298.693158][T20946] hsr_slave_1: entered promiscuous mode [ 1298.708141][T20946] debugfs: 'hsr0' already exists in 'hsr' [ 1298.717797][T20946] Cannot create hsr debugfs directory [ 1299.670870][T20946] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1299.682933][T21058] openvswitch: netlink: Flow actions attr not present in new flow. [ 1299.709350][T20946] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1299.735125][T20946] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1299.776916][T20946] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1299.933349][T20946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1299.968596][T20946] 8021q: adding VLAN 0 to HW filter on device team0 [ 1299.994710][T17116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.995308][ T9] IPVS: starting estimator thread 0... [ 1300.002192][T17116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1300.049044][T17116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1300.056739][T17116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1300.110506][T21076] IPVS: using max 25 ests per chain, 60000 per kthread [ 1300.547638][ T1304] lec:lec_start_xmit: lec0:No lecd attached [ 1300.588118][T20946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1300.743385][T21101] netlink: 48 bytes leftover after parsing attributes in process `syz.5.18139'. [ 1301.408412][T20946] veth0_vlan: entered promiscuous mode [ 1301.446903][T20946] veth1_vlan: entered promiscuous mode [ 1301.557805][T20946] veth0_macvtap: entered promiscuous mode [ 1301.595836][T21134] netlink: 48 bytes leftover after parsing attributes in process `syz.0.18152'. [ 1301.596685][T20946] veth1_macvtap: entered promiscuous mode [ 1301.704914][T20946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1301.736256][T20946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1301.748248][T21137] netlink: 24 bytes leftover after parsing attributes in process `syz.5.18154'. [ 1301.762184][T21137] netlink: 24 bytes leftover after parsing attributes in process `syz.5.18154'. [ 1301.812726][T17119] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1301.865612][T17125] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1301.876563][T17125] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1301.929441][T17125] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1302.257691][T17116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1302.275383][T17116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1302.394432][T17116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1302.412274][T17116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1302.471668][T21166] netlink: 24 bytes leftover after parsing attributes in process `syz.5.18167'. [ 1302.506198][T21166] netlink: 24 bytes leftover after parsing attributes in process `syz.5.18167'. [ 1302.547367][T21169] netlink: 'syz.1.18169': attribute type 2 has an invalid length. [ 1302.571387][T21169] netlink: 'syz.1.18169': attribute type 1 has an invalid length. [ 1302.582511][T21169] netlink: 116 bytes leftover after parsing attributes in process `syz.1.18169'. [ 1302.835562][T21182] netlink: 28 bytes leftover after parsing attributes in process `syz.6.18172'. [ 1302.918911][T21187] tipc: Started in network mode [ 1302.932523][T21187] tipc: Node identity f67f2a31cf89, cluster identity 4711 [ 1302.961440][T21187] tipc: Enabled bearer , priority 0 [ 1302.985265][T21187] tipc: Resetting bearer [ 1303.015244][T21183] wg1 speed is unknown, defaulting to 1000 [ 1303.032921][T21186] tipc: Disabling bearer [ 1303.054258][T21183] wlan0 speed is unknown, defaulting to 1000 [ 1303.320593][T21201] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18180'. [ 1303.377375][T21201] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18180'. [ 1304.065383][T17122] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x1f [ 1304.303233][T21243] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18191'. [ 1304.735676][T21264] netlink: 'syz.5.18198': attribute type 39 has an invalid length. [ 1305.044922][T21264] bridge0: port 3(syz_tun) entered disabled state [ 1305.151990][T21264] syz_tun (unregistering): left allmulticast mode [ 1305.158891][T21264] syz_tun (unregistering): left promiscuous mode [ 1305.179910][T21264] bridge0: port 3(syz_tun) entered disabled state [ 1305.209217][T21284] netlink: 'syz.0.18210': attribute type 83 has an invalid length. [ 1305.244656][T21284] netlink: 'syz.0.18210': attribute type 1 has an invalid length. [ 1305.464814][T21284] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1305.578039][T21290] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 1305.711371][T21292] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1305.776384][T21300] chnl_net:caif_netlink_parms(): no params data found [ 1305.918268][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1306.075177][T17121] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1306.110334][T17121] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1306.191304][T21330] netlink: 'syz.6.18228': attribute type 29 has an invalid length. [ 1306.220067][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5670 ms [ 1306.228310][ C1] lec:lec_tx_timeout: lec0 [ 1306.230425][T17121] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1306.249723][T21330] netlink: 'syz.6.18228': attribute type 29 has an invalid length. [ 1306.270145][T17121] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1306.285287][T17121] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1306.421831][T17119] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1306.452542][T17119] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1306.590983][T17122] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1306.613499][T17122] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1307.511261][T21404] __nla_validate_parse: 6 callbacks suppressed [ 1307.511283][T21404] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18249'. [ 1307.541325][T21404] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18249'. [ 1307.565855][T21404] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18249'. [ 1307.749296][T21418] netlink: 56 bytes leftover after parsing attributes in process `syz.3.18256'. [ 1308.017951][T21431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18260'. [ 1308.034360][T21431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18260'. [ 1308.059318][T17123] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1308.059502][T21431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18260'. [ 1308.059526][T21431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18260'. [ 1308.094524][T17123] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1308.109526][T17123] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1308.125079][T17123] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1308.444399][T21449] netlink: 56 bytes leftover after parsing attributes in process `syz.6.18267'. [ 1309.319396][T21456] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1309.512767][T21349] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1309.526635][T21425] netlink: 5204 bytes leftover after parsing attributes in process `syz.3.18257'. [ 1310.187582][T21493] pimreg: tun_chr_ioctl cmd 1074025688 [ 1310.970783][T17126] net_ratelimit: 80 callbacks suppressed [ 1310.970806][T17126] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1311.027560][T17126] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1311.033679][T21535] netlink: 'syz.0.18301': attribute type 1 has an invalid length. [ 1311.126676][T21535] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1311.142420][T21539] bond2: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 1311.170801][T17122] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1311.179230][T17122] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1311.300507][T17123] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1311.308522][T17123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1311.421835][T17123] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1311.432553][T17123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1311.550202][T17123] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1311.558265][T17123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1311.964812][T21551] netlink: 'syz.1.18305': attribute type 4 has an invalid length. [ 1312.574544][T29197] lec:lec_start_xmit: lec0:No lecd attached [ 1312.860643][T17431] unregister_netdevice: waiting for netdevsim0 to become free. Usage count = 2 [ 1312.871204][T17431] ref_tracker: netdev@ffff88805a7ac618 has 1/1 users at [ 1312.871204][T17431] xfrm_dev_state_add+0x6e7/0xc30 [ 1312.871204][T17431] xfrm_add_sa+0x34ca/0x4230 [ 1312.871204][T17431] xfrm_user_rcv_msg+0x746/0xb20 [ 1312.871204][T17431] netlink_rcv_skb+0x232/0x4b0 [ 1312.871204][T17431] xfrm_netlink_rcv+0x79/0x90 [ 1312.871204][T17431] netlink_unicast+0x80f/0x9b0 [ 1312.871204][T17431] netlink_sendmsg+0x813/0xb40 [ 1312.871204][T17431] ____sys_sendmsg+0xa68/0xad0 [ 1312.871204][T17431] ___sys_sendmsg+0x2a5/0x360 [ 1312.871204][T17431] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1312.871204][T17431] do_syscall_64+0xe2/0xf80 [ 1312.871204][T17431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.871204][T17431] [ 1313.424350][T21503] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1316.020728][T17122] net_ratelimit: 78 callbacks suppressed [ 1316.020753][T17122] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1316.035220][T17122] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1316.150892][T17122] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1316.159827][T17122] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1316.271137][T17122] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1316.279639][T17122] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1316.390732][T17126] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1316.399099][T17126] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1316.511540][T17125] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1316.519612][T17125] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1318.220101][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5640 ms [ 1318.228325][ C1] lec:lec_tx_timeout: lec0 [ 1321.041063][T17120] net_ratelimit: 78 callbacks suppressed [ 1321.041089][T17120] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1321.055077][T17120] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1321.170956][T17125] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1321.178721][T17125] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1321.292524][T17121] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1321.301907][T17121] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1321.410886][T17120] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1321.418875][T17120] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1321.530616][T17120] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1321.538587][T17120] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1322.143074][T14877] page_pool_release_retry() stalled pool shutdown: id 166, 1 inflight 60 sec