last executing test programs: 5.514581368s ago: executing program 1 (id=7364): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xec, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0xffff, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'gretap0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0xfffff9c0}, @TCA_FW_MASK={0x8, 0x5, 0x4}]}}, @filter_kind_options=@f_basic={{0xa}, {0x78, 0x2, [@TCA_BASIC_EMATCHES={0x74, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_META={0x5c, 0x3ffc, 0x0, 0x0, {{0xf, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_VAR="17db58", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x2}, {0xaed, 0x1, 0x2}}}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR='0', @TCF_META_TYPE_VAR="a4393783", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR=')']}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff7f}}]}]}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r2 = socket(0x26, 0x800, 0xfffffff8) splice(r2, &(0x7f0000000000)=0x2, r0, &(0x7f0000000080)=0x412d, 0x1, 0xc) r3 = socket$inet6(0xa, 0x800, 0x1000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="6d62a9e844d69deda75f549894c52913f3edb4494bf4b9c49de3e94926ba87e19886e68134b3a5d749143a64698caa47fd4c76bc0700000013def76fccf9bd58ae4814ea31bc8646e67236d862b21417ab995e239b49385190f75466d47da5d0f35a574355533635f4641f1e4cbe6af6786eab3bba5de200"/130, @ANYRES16=r5, @ANYBLOB="01002cbdf000fcdbdf251100000005001200070000000c0006000200000002000000050012000b0000000c0006000100000001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x4040004) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) write$nci(r7, &(0x7f0000000100)=ANY=[@ANYRES16=r11], 0xc) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000300)={0x0, 0xea60}, 0x10) write$nci(r7, 0x0, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r12 = socket$kcm(0x2, 0xa, 0x2) close(r6) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r13 = socket(0x11, 0x800000003, 0x0) accept4$packet(r13, 0x0, 0x0, 0x800) write$tun(r6, &(0x7f0000000200)=ANY=[@ANYRESOCT=r3], 0x4b) 2.328108364s ago: executing program 4 (id=7375): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="4700000001003f", 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000680)={{'\x00', 0x3}, {0x100000001}, 0x100, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)="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", 0x1bc, 0x0, &(0x7f0000000500)={0x2, 0x139, {0x0, 0xc, 0x87, "716a0df34306ff51e94aa8ffb4b99e25a426db237f7b9e1bddd2fc51a2e5e9935612a035d479295a7a60874a0c5d8add21fcc2fc32d1bc4babd28e9bec1403ee2d12cd9a27620565b3406bf3ed097d84a3f21cdb3309cc1f4900a59f5d86afe0cb6ade95717e237f688807d809ef7376a6d76a33687115578aade6fd1c56594069c9be089bc896", 0xa5, "5c143f4fec28fe05b631e88a69d428ff1f43b1fef4f5f4b17c92044968f729d91c03752aedefbc486a3e2118a22299d1583b412c788447f2ce3545442cf5a5bec6812796ea399d9f52eb8169a8ad08489e0e7b2329b3f76a4f383782edb910932e809e96d0a9bc9605257a126cd9638b09d30c5d2f39efee2f585a16b663e77133459a9d305112c23f3918ae8185510383fa4f1d2ac3bbc1170198e031d959f8fb5a407fc2"}, 0x3b, "3d128eeb5d5c5ec585b0537ad712628c33a93ab2e1c9872d0ceffe31f483e7cfab4b0c2d43831ca8cf95e016a38d4b63ba1480ce5bf4b1f2d76cbe"}, 0x180}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r1) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r2, 0x10, 0x70bd27, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40408c0}, 0x850) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1a, 0x4}, 0x48) 2.230805817s ago: executing program 0 (id=7378): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000003080)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x1822b, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002800)=ANY=[@ANYBLOB="2f296cf75f52a623afa3a01a342c34d4bdc133143896bd63d3b63d5f3446efb816655d98c1bb9c01a854b44661f47595a0608cef3dfcc0a302a77887b7217c9e9db75fd8c584a1584c179b6bf063f80df679277dd162fd136c1211a65c272c9e1d947c9474e7090b91e67a8a93757f2c378dcca3fb9277b1591abd98dcfc6a49a79d4918fc49f21665db05ad19ffdbd4dd6edcf7c81f558307", @ANYRES8=r2, @ANYBLOB="140002000466273951725fad4c6167fa871bea048b3ba40000000b00000000e1b03ef8be46659ffdfaa6ed5332a360bc0a1bd4ae370c0473a33cdf3e8d3cd09b6114d21f2bd705a5c13a1f8230ecfef7950109ae0000000000000000000000000000000000000040620bcc0423246ada33b9a6f15399fcb86ce51029cc508bc45288764a969d2c1fc8"], 0x34}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xf, &(0x7f0000002540)=ANY=[@ANYBLOB="1800000004000000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000020000000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000a638c9f93c57f614f14d2161b2879053d44b29bb25932d8202efc0030000005440cb94ddb32f8f"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000010c0)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000001800)={@private1, 0x0}, &(0x7f0000001840)=0x14) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='C\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd70000400000005000000080009000200000008000c00a50a000008000b000000000006000100070000000500120009000000"], 0x3c}}, 0x20) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000023c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002380)={&(0x7f0000001880)=ANY=[@ANYBLOB="1356e4b5fec2316b55b79b992315f405e213e2f0", @ANYRES16=r9, @ANYBLOB="00042dbd7000ffdbdf2505000000050007000200000005001400010000000500210000000000050021000000000006001a004e2200000c0010000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001e40)={'batadv0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000280)="af03ea102bfece62b3092c552f0f9644fc61cd69222f6bee4055c575bc2037f5c15602342d50064a99d5c429ca2d666e2fbd038fed236b6c74d83bc08e3b2c051d76554fabadba15f0a5880de39b229cbcc914843b194eaabade19f916ef4f6173af3b2581b442b668157f1bf3136169a58844233d16bb92765589296f854373d7e1defa7bc06fedb8750dc6cb0b7a8880fdb8f606398522066aad7609f8fbcdb9ea5ac535ace08f4dcaa5c591b793c5ef396a42197ec368a271a68e5346ab5268043921870de24fc839427af64f519384f417b524d97066f7723fc4a5f6a8cad55bab02", 0xe4}, {&(0x7f0000000380)="9b2433518257da51d6efc874ff69a522272ef26864158e451d2283cc6f5c1c7860ec813de36b523551f95515eb94eb7a07a962c54afc024b4da6f56b151af3e3d9f8e215b475155d816b005c1c9383e793a63100d736bb580487d23075d29e1b20aa83ceed773917ed77d8fb47850293b6d7aec3222d", 0x76}], 0x2, &(0x7f0000000440)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x30}}, {{&(0x7f0000000480)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000580)=[{&(0x7f00000004c0)="9cbb953354643d7ac5e57f41e1069defc9b5741517d12c3a21065e56727514217a9388414331e25d9b5a0f65e456ea4cea6ed0c8db56dc96b2e6af47bc5a0b02c451e4f23550cb1ef5f07c32b3a6", 0x4e}, {&(0x7f0000000540)="c78c9b7224ff9d378addc2f4e2ed474820bc7d95a931eff6f015a59920896cbb6c4e", 0x22}], 0x2, &(0x7f00000005c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfc}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2e29}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}], 0x90}}, {{&(0x7f0000000700)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000840)="a5c98a323aa7f19bff5887804a24f3bb6c8b48df358f052d75748a30882477144df59530f16f465de546afd3091ec7f061e92745536446c00304f332c4cd987ace63c881fabbcebf960eafed21a115de4f55a12d5a6c1311717620cd7352cba39068157208280a0c8f25ccb5f2eb9cb73656489d84ca65ba9fdf0fd643a21a2087fa503ac93d431f5c2bf84debbc8214207c6b002c2538dd5a71d0a9135055cf017e49187fe45a48be793ba33863541491a0a4cc91b545107febcba8b1125dbfadd8f481cd43", 0xc6}, {&(0x7f0000000940)="1f3ae8f2bece8ff4e5bf199cfc9c4dad634980bfcf12922881e4ecb8437e69425dc32cabe788c3868258b7fd4c9873f7863c9f941b865c5ff7fcd2460205f4cb06a3", 0x42}, {&(0x7f00000009c0)="832d72a8e8bea8d5cc24ec81af61d22113bb2f6cf4ee015cbdf895d98a1976a646fbe1bc51b1a8515cc79ac8b101085a171c054c7d12bf5b0ea8854e01f57d11738ee5e37ebc65d3b4b0d54b84c44ba20c163a6be82515ee12451148acdc2677d99ed4053ab38d28d28dda7c9c05ccdf6275b37ddc4b313aa2147ec20c98725ca214c6d9881ec8330edc122915a4a17409a388fed08d7a67d28632fa7eb345f9dc2ef7501b05aeb338bf86393f21237a445bb1816a5941a7cc163dba0dd1060885d3d4", 0xc3}, {&(0x7f0000000ac0)="0a0e86f5caa0bb95f757a3257940cf2de964d7f22943163030078c6d9e2a4535d1aa79ce356052b4a9de9a2eec92a41f4499bebd7394bdc67d560f6949a73f1c8fc397ae26bbfd94b57c5da3b7df64540d2add69dcb4adb9842bdf53859d60d0cafaf88c687bda1e3935f3a8cb8ad74e81e106680dea0b390370a259f3fe22192041e750a62f7c", 0x87}, {&(0x7f0000000b80)="d719587016b863566eb3095ccccfe93e5d78a1824b1db41a1b87ba9c7935009d8c269369352b23d486b7d38a4fa52393cfc35edbc32faf77faa51971f4d0660bd670788e5b83da97f3a5ebc21736", 0x4e}, {&(0x7f0000000c00)="59f8292b2bf98e7843fd53c7f205119d6c960cc2232db8c0c7e453ee310cc0317ab2fa1fee24a6626cf54d90517421280dcd25091dc44d2ee320c3eda751796cc4a2e440fc5222413163faed298185d78eec", 0x52}], 0x6, &(0x7f0000000d00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010101, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff}}], 0xa0}}, {{&(0x7f0000000dc0)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000e00)="d26c5e11ab3eeefb56904e093383db7dab9bb05992b1bd22f8048dc5da2c2e9230608cce77a6e16d22b47f46590660958b9a4bb12989d8837433e8c36a288d9397249b197f818150712b84ba3dcbbc6af4063099a67b243ea39d4208be68885eb7186582786491564b9be7091a1e26acca30f06f549b362d72de50260ec92288965f960be8d0bdaae8033121f504a410e2e44ff7ec730c9cbf571f8348acf870bb0ad56e4d7760e60220091164d1db83534043fc8b9b5815846d2f35c23ae1ad3475a00a0c6bc4ea06", 0xc9}, {&(0x7f0000000f00)}, {&(0x7f0000000f40)="2b8624eaa46528a602eda46fecc663fc81c98ae5b5977ae8765db5f514745cbcb9a910fd07fb3dbccfb72c7cc32bc88324e2930d785b31b941dc2b3d1f84cf5ef30175ef77c3c3aded3a42f2b321feb82248a5539d9e11985f7e7ffa3287279a2fa54aaa64e8b9118959c7ed45865eeecdd54bca9b2cc615bceb50fb3fd0562662b9f85ca0c7b1c3dac0c0", 0x8b}, {&(0x7f0000001000)="14c9d91b155329cb03f348507414b3b6002af92937390aa2053ad0a76b3e161b4a159a49ce48e9fe7545f00c497313ebd09f50143dd796fb2072167b7bde13d0047613850d6e1f1bc3ccc875c609f69d25c8221822e81da3c4", 0x59}], 0x4, &(0x7f0000001100)=[@ip_retopts={{0xa4, 0x0, 0x7, {[@rr={0x7, 0x1f, 0xb2, [@remote, @rand_addr=0x64010100, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast2, @multicast1]}, @timestamp_addr={0x44, 0x2c, 0x2b, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0xd}, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4a41}, {@rand_addr=0x64010101, 0x5}, {@loopback, 0x2}, {@private=0xa010102, 0xce6}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0x4b, [@loopback, @rand_addr=0x64010100]}, @generic={0x82, 0xa, "752570d90930c8cc"}, @timestamp_addr={0x44, 0x2c, 0xff, 0x1, 0xd, [{@private=0xa010101, 0x9}, {@rand_addr=0x64010100, 0xfd7}, {@remote}, {@loopback, 0x1}, {@local, 0xd}]}, @ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7f}}, @ip_retopts={{0xd8, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x76, [@multicast2, @remote, @loopback]}, @timestamp_addr={0x44, 0x1c, 0x4a, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa721}, {@multicast2, 0x6}, {@multicast1, 0x1ff}]}, @rr={0x7, 0x23, 0x76, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x42}, @rand_addr=0x64010100, @multicast1, @local]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0xb6, [@rand_addr=0x64010100, @remote, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @timestamp_addr={0x44, 0x2c, 0xa2, 0x1, 0x1, [{@empty, 0x7f}, {@multicast1, 0x71}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0xdb}, 0x8f1}, {@loopback, 0x8}]}, @timestamp_prespec={0x44, 0xc, 0xba, 0x3, 0x8, [{@rand_addr=0x64010102, 0x3}]}, @generic={0x88, 0xf, "f70c49b5ecff30ac388893e40a"}, @noop, @ssrr={0x89, 0x13, 0x35, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @local]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @private=0xa010102, @loopback}}}], 0x1b8}}, {{&(0x7f00000012c0)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001340)="960bd3bb3edd835c2e7f9ec801628b0aeb96b0422e92e8a3cd2bb133295d04e76fe0450f40081f0ec2d63829267e59cb3821d7d387eacc6fe7e921c0adfdc1f6b281788bc175c48abf6befab12a16322e1236d292d1d8b33f97cad26941a5877f019db8ebdbb2ad494a504e3b30d4559de92748796f15b30faa086ad966eac8c7f82", 0x82}], 0x1, &(0x7f0000001440)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x18}}, {{&(0x7f0000001480)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001780)=[{&(0x7f0000001d00)="f5452810e1ea1d4c8cfcf338416ddae9bcba2e7e82f3954c7468bfd8ad10ae009b11619a401f7d55a427555ba93437d830d5b6f5c3406e8a34c3c21edb54ee53bafb3e7bd6301e694c6b5ae57962be2439cbda1a8ae8f4e8ed34c60ac47fe1cc84d336c1ec9c3291b01eaa50066a6e88faff07f015bb74fa62e99ce9b97ea876254aec0616fafd5948ca50abecb1cfbe861c89b756c8dca4730364694a5025461ca2d2fd1734406047b08dc37b0c33735ab2f34476fa4c97cd15015f072d5985878ea537310267d1be46b4dd84a3a3fd2378469af7e5ecdaffd2dd83aea2c5103adc4babd1e46fa1df1f77d071381b", 0xef}, {&(0x7f0000001580)="c9", 0x1}, {&(0x7f00000015c0)="8bf51b33c5efc21583220ed8c5ae462dc66178fd893829863d0f16ddd9fccfa187f7a1e7bc015705d3f6a78d8a5308cdda693b4bedd88feab1756a086b8c5f783364de35345c4a9370826432b62c6bf4b762d04543adc5f07a066ba90a0b1b57a96873dc32ee01bd69381ee4cb32bfb766d72a7a765a726377ca67c404a3bd799e5221025947c9199c38a2bdfc4b2de3e3e71e41e080c780928b7d7cac8ffbd8a73ffd542de0f97e7bf6c4b08e05", 0xae}, {&(0x7f0000001680)="cb0cd110c612f9c77fd7ba8d90d6573894e114032b0b50266927", 0x1a}, {&(0x7f00000016c0)="b4d33feb90668321d2eafd63603a172543214bf9a799958bdd924ecba6622283236b7923caa8e5a6624248dbacefb50a6586ae82547ea9cd4cb4ca6047a20cb4c4bbf1b98704d7921a7349ad8012bf358f8c3d076a970b4c0f61af638e70a9111ea6740ee26e56a3ea79c680f469833cd480589bde00d5ac447f96c317ce2b4db0cda2618169682ed9f7ba049cbc", 0x8e}], 0x5, &(0x7f0000002400)=ANY=[@ANYBLOB="98000000000000000000000007000000863900000003050737a72ad1f2000d2c638236384d0ad7f990040108c4ce056bcedc0e0f3967bd795a9ad54ac9959fd22b0508a73a4961753701860a00000000000449c6940401008640000000000611635f218573e3005eac34ee8f86ca510605b9e457000d49b24a35eab511559b6af6050609bec8570311be46e306e30f0a0eb078ac0089d48c1c000000000000000000000008000000", @ANYRES32=r8, @ANYBLOB="00000000ac1414aa00000000140000000000000000000000020000000200000000000000140000000000000000000000010000000000ffff000000001400000000000000000000000200c37b601489740b4875863e2000061d00000000000000"], 0x100}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001980)="19c8dc626bf0d40ca8fb71a733445e90dae90bedadd3892587802716d06432627e128e321d79188f526e5a2580b9bca3f82d43f004489e60c8606b6da9556b691269fa0b8b1e362ba09414481994ccee062daa707254be66e2ce7707", 0x5c}, {&(0x7f0000001a00)="090b497070f70b57cc7fd2b5bfbbe89b93380ac0bb53a7dbe51f3c7b5cb313e08a62ce3854c645f9b017c9b2ea7b796e0e42e1dcce146ebca79daa881b6f8048cddd1a7e3b78f45dd4b063e666236bfe183220", 0x53}], 0x2, &(0x7f0000001ac0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9872}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x12}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xb5b}}], 0x78}}, {{&(0x7f0000001b40)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001e00)=[{&(0x7f0000001b80)="b65d3e885134ea184a798aa1c3697229bcde9b4bd1914a1b9f7904ab50d294c1f2edf54ac26bd8749d8c0999db9c97fb7d111312927df442a60df46859b4ffcb79fe336aee7dbabbdef9e3727b126ef2fa702b316e30d2c43952670ffb6e3eb41541c149cad39c834d266dae26a4b2d165b99fbf8f2e206c5ea01c1adead5810e49da63c9d8434c752be09b214e1bbadf48adbb779df90ae6b5ecebc82a8e1800b5e1b57898633aca3e552b82deb96", 0xaf}, {&(0x7f0000001c40)="7e1d3580c7ef79310fa8471535d1e8164173f452b00f53745982dfcadade9c040ef9c55c9e3fd9a114e9d1573a0d8d27c2ede9c9c066150f0af70fbe3a1aacd650c15e04287fd6ef3f4b45a877643baa3e2e1a2642eccff7cdf1c548a112940e7394e4a9393bcb932bd4d6ad1e837f57499199b124b4510cc10d691829368cc4d9ac2c0f0cbb3afc8786d8757856416117f7219d8ca4bb530d7d3de600e4e637a783ada485ec69d3cc97da3f489e0bf1c414ae3d1b81689d002deff8a43a", 0xbe}, {&(0x7f0000002600)="559023fddfdf67ef4a10919587dd0db51166c2727efd388a28088b81e2356c1dce536de86629d1d198e4315bd33c46f835dcfa994d52638b12ad87f07fe0d4be86c433db9f15b54e4cc4b909cd66245393664e1594de805eb918ba6af438cae5b87a2c1d04185ebecaf3d6d532ab1bd6c3b8814539d311acd4a424ff16f2ac633d4a9cdca0f178de434cd60434cbc49f03acd97e978d19d01b1a5916340cd954c7498aa68bb9ad124c2c3e3dfee644715afa08153753feb498ac9c6e2bcd69d4c98b129d0844f1a06831b694551743282be72f2e989a64bcbc1a3d52766082ecb770bc842da3ffa56f289595b74225c0f933dcf8b897bccf65f4758f014c68057da6", 0x102}], 0x3, &(0x7f0000001e80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x53}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @loopback, @rand_addr=0x64010100}}}, @ip_retopts={{0x44, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0x8c, 0x0, 0x8, [0x7, 0x5, 0xffff, 0xa7, 0xff, 0xd, 0x0, 0x8, 0x8]}, @ssrr={0x89, 0xb, 0x16, [@private=0xa010102, @rand_addr=0x64010102]}]}}}], 0x80}}, {{&(0x7f0000001f00)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, &(0x7f0000002040)=[{&(0x7f0000001f40)="c37d49808543300b2ee21188f34ae1d58373c9f8c89dc118314f2bff4b4e4c4819fa99faff132ff116071cd903f43d36b79847efd867e785f0e6aafb538f57bd924c79b2174fe9b0276cd0412b6804862f10ae0487dab0016592a28e219fb006ddb3a8542470f16bb8c9a82ac5b5b9a5a2f1d2886291c84c3d20d0e75dc638d647caaeaac6bc79b26828ba455b01924ed1ce24d297f46fd94060fece74b1e941e41bffc06b9a6fdecaddec3e3388ec83b1d0fa939a2ca41e8cf3f22f47097c26a5812f2870a0e6617f25262cddc1f8aead5840958fb4ce750587fd687c3c184aa53405b8acbf23a3c8e85400", 0xec}], 0x1, &(0x7f0000002080)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}], 0x18}}], 0x9, 0x800) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) r12 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r12, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r12, 0x0, 0x0, 0x0, 0x0, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {}, {}, {}, {}, {0x2d}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb0100e63a4e180000000000000002000004090000000000000002000000060000000300000003000000000000000000"], 0x0, 0x41}, 0x20) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\a\x00\x00\x00'], 0x48}}, 0x0) 2.121988909s ago: executing program 4 (id=7379): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2008085}, 0x41) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)='L\x00\x00\x00', 0x4}], 0x1}, 0x4008000) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "79d5d88f2417925097d015dd3c"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x57, 0x37, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4800) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x7d4165c9) r6 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x80, 0x80, 0xa2, 0xa, {{0x5, 0x4, 0x0, 0x15, 0x14, 0x64, 0x0, 0x10, 0x4, 0x0, @multicast2, @multicast1}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$inet6_mtu(r5, 0x29, 0x17, 0x0, 0x0) writev(r6, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, 0x0, 0x4004) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a00001400028010000b800c"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) 2.121452555s ago: executing program 1 (id=7380): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @broadcast}], 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x85}]}}}]}, 0x3c}}, 0x40800) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000040)="04", 0x1}], 0x1}}], 0x1, 0x4000040) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2, 0xffffffff}}, {{0xa, 0x4e21, 0x400, @ipv4={'\x00', '\xff\xff', @local}, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x190) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @remote, 0x2}, 0x1c) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="00fcfcdbdf2512202fadea616c9e0003b9", @ANYRES32=r8, @ANYBLOB="080008001104000008000200ffffffff"], 0x28}}, 0x0) 1.9925916s ago: executing program 3 (id=7381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x10, 0x20, 0x6, 0x100, {{0x36, 0x4, 0x0, 0x6, 0xd8, 0x68, 0x0, 0x59, 0x29, 0x0, @multicast1, @broadcast, {[@cipso={0x86, 0x76, 0x0, [{0x7, 0xf, "f994329b152ee449895c0cc63f"}, {0x7, 0xf, "d83f7772f79e39ca868044a3d0"}, {0x7, 0x11, "b99b00e3dccdce4119637244e3d23a"}, {0x7, 0x9, "2faca18e13d25c"}, {0x0, 0x5, "91b3a5"}, {0x1, 0x3, 'S'}, {0x5, 0xa, "bee7879d0d835fc6"}, {0x6, 0xf, "0e56d1be26d8a767c83bc56f1a"}, {0x2, 0xe, "719c1dac426e1d18d54948a9"}, {0x0, 0x9, "50200e7e233614"}]}, @lsrr={0x83, 0xb, 0x2d, [@local, @local]}, @timestamp_addr={0x44, 0x3c, 0x7e, 0x1, 0x7, [{@multicast1, 0x5}, {@broadcast, 0x37ca4111}, {@private=0xa010100, 0x2}, {@private=0xa010100, 0x6}, {@remote, 0x9}, {@multicast2, 0x9}, {@rand_addr=0x64010100, 0x7}]}, @ra={0x94, 0x4, 0x1}]}}}}}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socket$nl_generic(0x10, 0x3, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', r1, 0x2d, 0x4, 0x5, 0x9, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x10, 0x7800, 0x5, 0x6}}) 1.866648809s ago: executing program 2 (id=7382): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=""/173, 0xad}, 0x76fc5092}], 0x1, 0x40000100, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) (async, rerun: 64) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) (rerun: 64) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x12000000, 0x0, 0x0) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 1.762154227s ago: executing program 3 (id=7383): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x62}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={r2, 0x1}, 0x8) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)="b86bc0", 0x3) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) close(r3) 1.613988533s ago: executing program 4 (id=7384): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) 1.578842717s ago: executing program 3 (id=7385): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x220}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) syz_emit_ethernet(0x16, &(0x7f0000000340)={@broadcast, @remote, @val, {@generic={0x88fb}}}, 0x0) sendmmsg(r1, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="9f", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="10000000000000000f010000000000003000000000000000ff00000005120000dae7c65afdd9d1d5073fbf984e560f7f7af0377a701ad4e8ab3a00000000000090000000000000000000000004000000474995282b8d35b2efb349cfa55288ab0139064c723f71e2d9ced0cbb2d46df48f8ee505b82850c69ed841ec12c3b6392c378033c46278ff6bc63d6d5bf4c8b718e78b05ad817aac3b5239cd4fe877aff14721f369a8fb6e6daa5710be61d3edc36edbd248ee581a70263663739cac6a0b0dc55ac9b2f56dc43f04dc78a3000058"], 0x128}}], 0x1, 0x4000045) 1.474239137s ago: executing program 0 (id=7386): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 1.470809333s ago: executing program 2 (id=7387): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r1, 0x2, 0x70bd29, 0x100002, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xe}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0x20085}, 0x2000c000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @empty}], 0x10) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x76, 0x0, &(0x7f0000000040)) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r7, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00022dbd7000fddbdf256500000008000300", @ANYRES32=r8, @ANYBLOB="080002000000000008000200010000004f9abda3f6fcfe0234344c5fc291706b84c1482f76fa1d49935a53e47140207d5515e47d15b10dae7f1f884feecc890ba4bdc21a3988effedc0a54276d0f4f16097d93a6b9c71582b5a2d2e5767e225ffa"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="02180102025cb101d2724a6100000027bd7000b1daffdbdf25"], 0x10}}, 0x4040000) sendmsg$nl_xfrm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="5402000017000100000000000040523ee83c00000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 1.372935783s ago: executing program 4 (id=7388): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000040)=0x9, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x4884, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x20000000000001e6, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000080)={0x9, @remote}, &(0x7f0000000180)=0x12, 0x800) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000001c0)) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14, 0x80800) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) ppoll(&(0x7f0000000140)=[{r3, 0x4235}, {r3, 0x421}], 0x2, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000440)="adcaef9d11552cb22a80f3dc8f40", 0xe, 0x40040, &(0x7f0000000480)={0xa, 0x4e20, 0x1, @empty, 0xbfb}, 0x1c) shutdown(r0, 0x0) 1.315638368s ago: executing program 3 (id=7389): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff0ff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b70000000000000095000010000000004e62011c3034fdb117168bd07ba08af339d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945ff15d802f5132143c0a9fc7a84452569957c1002ed7d458e17f791f4798c8eb484de03312c69b3edff5be26765ba5f8f2879021c2ea53ac547a654bbd2db5356b971d83dd12742be9087a3e7b7c0efd3e38c794eb06b0b8c392904ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057826ef4e912f01a201e694e3049b8c8fe8b65d8d66bb766f7f3f918c86a702522368d9f81897133af94a5a4cff7f4d8b9d8eaf302f0b2e0c252b0000000000000000ee917bca4885bbf597a14ab6458e6272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36be115be3b325ecd201d2ffb0a7fa4f5d1106560cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b861299fcd9ed9d8679406419406bf0c5329bd5b4697336112b0b8756ce3574046bf611a108f8df4d1a88597840b702b6fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f7faf39a43a66c5540b8762b42007c9ec43193ccf617dbf8a12b4a189edbf9fb7c42b1f435ccd4b19b53b60322af0aa66e8f448e1bd96822e6b70b62912c926dbe417cccd4f696d528fa8a3ea847f10e9b1106f3bb506f1d7fbdf801000000000000006c028eb5b5a073d0de5538ab42e171b3baae34c35987b0dda497ac3f5e97e60eaeea15c6d55badf9b86b1c000100006e60cd06c9ed24313ce607d403bb6030f800000000690db0221b1705c501f802ff59b4e683efa4b6e77e042072ec9eb8166f6e28b49a7705a1befc4d315878f88a8fb1dd679fb4c5557abae6849917dc51a89d47b728502f7e621fc0e3ba04020000c149ee6601728c750930519339b44197c22da865059b475afd96187d881e93b42a5fdfd686d8900c44c67133eeb0109dcb60dddad58037fda65885a15a42560ee3027a5ebf95254744f10fd607bc3100b94932b8d9447c42f6e21ee0e54f8be386bdc09decece910a481e648e0cb074536a25ff581d92af08a06f857311a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6ae00f0000000000006a8194479700a02b92bec8d05eae1f24fdd7b80d3dde04c22f689594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4acd7acf1dfe79d6771903b76e2ae47d972651390c22d641030e1ddac018dc3116e1803af10a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f00000000000000001000ba96edb95ede0e1957c2a2754258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548941d5d16297757310d9daebd5a3dabbced3b051129cd60a37d397643324e6f0aadf978d639650000000000000000570b0acbcaa196e6b46e213a34c1a550e7c2d8cee7a278cee591f360e345d37dc9f8991a16c08d72317e42d2ac9126acd76130ef1086016697e4d51c4b42b2efc8edab88d46bc3d5d6e5a634c912bc40513643bf44cb416b3149040220aa39035ae46d16d879fc815a5cb84b0d5c8ad970128adf8dec1171e860ca54ce5d6a5aa0327bca4f49a710bf8a8399071237fe5d764e2034873c94a4f21287f3bce3eeb69e94df2e14e4ab10cc7834b304bc879b80255991dd7aac2e92c9e7c411c019d229c1f1e563152f1c5ae9cda3e808000000a0c779d624c5a2b7491b8f73e767389ecd1dee951353bb22b7caf89468871520823715cfebd04189c6c6b34bd8a6541f6bc0630000000000f94e85f5111add3a3cb5bcace95f38465402c39df835754ef33056b0e1134187822c001a25304f3e00b44675d0a25a21dc4023c642cc6f5a75c45a29ab933600acf9a2d471b73a73178cdf309e5d53311996215b44295dfddc1dd6b81132e999366e460d15d366e84da02b8afc40c47e733f804460ed8300ec34eab2ed80097bd32ff1a6143ab1476037e474ca876187c85bed4391215cd77e6a1fd6399a498b96b9b0cca93255acb08c67e50004c5af6fd5b4ce7c1ebc9202bd7b329a4d2530486d5999dd7f90ebecca37f2869135438f0540801fd7481daf9ec94b799c12e714d573e2a6331f496254f254a60c52b2026ed6a72c82cd191490fabe7b151f92e5d700f21830d613fbe490f305b3845a78817e59bf7ed36471dbca01d39e50ae2535460e1d2f2614940647233a02d5000000000000000000f70e52f0d56f6a4dcf7e57c03d4b4add0500000000000000320304d0d2b308c5ed3956eae263035d703f862224e9818a3d7ac270793a7bf2af87585293960a80ac63c54e55063bf8d24639e561253ef0caf6c58118120d8acecc0528f0d81d291009fc46401baf9c22d1c452a5b61b7a1b9adfcc17f5ad99dcdf935923185db7b14a7fa7babc1f53df70618bb73aa810b756696f26653b84cf842ae433fda59fbe312be11bb7dfecdc38c1c1f688d2724568cc396fca7c74984b7f7bd000000000000003ff3e5857fc6598c933610be374909dc8622b0722259e922f40d7862f7ea72f1754f07711de7600000000000000000000000000c4cb643e73ad8a45f0c7164484540e66e29943aa72297d831ce6c978866a55ed53130c6747f569c9c9abe724b4fc647b17401d2201e8c201e7d6ffa1fa122677f7393ed4fe8a93306f048b6703b04544e42a9cd937ef8d98ee8d878a12a627791c5c2d9fc6de65356be92fd98fdbe819686c7bd3be5bd0ce627c8357675f752c73a502d25c31c831078f098c34295bfe90e882843003841f4c0c65dc1810a50000000000000015911cb03e743c482199757d35df5b59fe0a0c5240c85498d818578e2d65c4ff4acbee037498222b1f81f3726a244da1fd6b8c195f1303bedb744045f31e1547d7bc3c3eae68b8da059a59c8c37e3639c2c4eb3d8229ac24d2ce12bc0e5db4a8202d72e64d5c5eacd0d0c0cd7a879ed967f5a2bd39ae4cf7daf7c9fa1777d54fb5920c8434163f75062c62455bf6e23817a85d"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008014}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={r4, 0x8, 0x9, 0x0, 0x12, 0x1}, &(0x7f0000000100)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast2}, {0x0, @remote}, 0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'ip6gre0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80"], 0x48}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x38}}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.257964582s ago: executing program 1 (id=7390): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'veth0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r3}, 0x10, &(0x7f00000003c0)={0x0, 0x10}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYBLOB="02180000180000000000000000000000030005000000000002000000e000000200000000000000000800120000000000000000000000000010000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aa030006000000000002004374ffffffff000000000000000009001900000000000a0000622486b8c26364a200000000000000000000000001000000000a"], 0xc0}}, 0x40080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711243000000000095", @ANYRES64=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f0000000000)=0x9, 0x12) sendfile(r10, r10, 0x0, 0x7ff) bind$inet6(r8, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) getsockname$l2tp6(r7, &(0x7f0000000340)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f00000000c0)=0x20) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x4) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r12, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @multicast2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r7) 1.064285367s ago: executing program 0 (id=7391): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x1d, 0x5, 0x628, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0xc8, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote], 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffffff, 0xffffffff, 0xff000000], 0xffffff7f, 0x1, {0x4}}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x4c, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000000000000000000b556a705251e6182149a08c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c1504bb918689d9193e9bd1c1b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000800) (async) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000000000000000000b556a705251e6182149a08c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c1504bb918689d9193e9bd1c1b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000800) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/91, 0x5b}, 0x2002) (async) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/91, 0x5b}, 0x2002) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x1d, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000100)=0x1) sendmsg$kcm(r3, &(0x7f0000000b80)={&(0x7f0000000700)=@isdn={0x22, 0x79, 0xb, 0x7f, 0xcd}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000900)="b0f73db9751ca0cfe2753087ae2e8ef1279e95e04230d3ea975ec84d2f3dd80403cfebb8719f24c379e49b78c74f45a61037386af3ea041d66c602d41de91db73bd98beb7b83e4f414fca98df25b60c29edacfd84c759e0d256480b184a9fba913bba8ecf9fb743967e3efe6811abbcfec0b8d0e267075dc7ae15a6b777bbba44b8a3cedab93605e46d2f3a65f091fcca204848355e7bafd416828e9be9e93f062b1e733d51c52d20e885d667ce3b349379bdff3f23396bd7bec3f", 0xbb}], 0x1, &(0x7f0000000a00)=[{0xe8, 0x6, 0xff, "25ecead7f4d6482ae5e7da2e69e725359891ffe569bdcd0a5758ed1bf6bf2d80eb60492d6cf269972df35a387d9be40cbeef81c003b37969fd48b0729377a3dbeab21f0d24f808a7a08960113ee554e456bc916e2a2a6358ba2d1cc4ba5d1dc0a7b8659bc57b8595f54da9a519b084121423759a8db2dad87ab1290eabe035fab33de9485d4c30bb1e13403c4660c0649cd278146f1bc577ff9613da0169071f9079b317c9b99f53687cc5b9aa10d90be535e9690d50855292fdf5b03649a7540827cc10f2f52856be99be294ce8082c26"}, {0x78, 0x109, 0x5, "b9a594bed8a8033f127fd1e4dbde2eacad20f81337eeb09813fc894818f5c27396e5c811746dae1276001a3e2385f06fd65c332de62c105f9a506cdf37b645c26801c5807ab36613cb128b5a29f851c6e671c8c422bbf6afc2d42cb578914a6ed87a45"}], 0x160}, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e00)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a0000000900020073797a3000000000050004000000000005000100060000000c00078008001240fffffffd14000300686173683a69702c706f72742c6970"], 0x58}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e00)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a0000000900020073797a3000000000050004000000000005000100060000000c00078008001240fffffffd14000300686173683a69702c706f72742c6970"], 0x58}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r6, 0x40305829, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), r6) 783.859808ms ago: executing program 2 (id=7392): r0 = socket$kcm(0x10, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000080)={@broadcast, @remote}, &(0x7f00000000c0)=0xc) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc004000202080003000300000007000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 686.650786ms ago: executing program 1 (id=7393): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xffffffff, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xffffffff, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) (async) 686.318539ms ago: executing program 0 (id=7394): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x2, 0xb}, {0xe, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0x4c, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x28, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x12, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xee, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xce, &(0x7f0000000240)=""/206, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x10, r2}, 0x94) 605.452679ms ago: executing program 0 (id=7395): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="a7000100794383a05aaa5f2543000000", 0x10) 596.754493ms ago: executing program 2 (id=7396): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000ec0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e80)={&(0x7f0000000f00)=ANY=[@ANYBLOB="8c040000", @ANYRES16=0x0, @ANYBLOB="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"], 0x48c}, 0x1, 0x0, 0x0, 0x81}, 0x40000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newtaction={0x68, 0x30, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x7fc0, 0x7, 0xa, 0x7}, 0x3, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) r6 = accept(0xffffffffffffffff, &(0x7f00000003c0)=@sco={0x1f, @none}, &(0x7f0000000440)=0x80) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r7, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0xc004084) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r0, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x34, 0x68, 0x5fb9a818fb7378e9, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r9}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x34}}, 0x4000) r10 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000340)={r10}) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$xdp(r11, &(0x7f00000005c0)={0x2d, 0x0, r13, 0xc}, 0x10) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r14, &(0x7f00000001c0), 0x0}, 0x20) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r15, &(0x7f0000000100)=ANY=[], 0x32600) 534.061243ms ago: executing program 1 (id=7397): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg(r1, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x10}}], 0x2, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="04cee9ee1662040931d941e76c47728c", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="8274b2438621b24bf89fa3c534640c2b", 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000030000000100000080"], 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x3}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="10010000100001002cbd70002000190000000000", @ANYRES32=0x0, @ANYBLOB="13019757c0200000140003006e657464657673696d300000000000000500110004000000d4001680d0000180a4000c8014000100"], 0x110}, 0x1, 0x0, 0x0, 0x200080c5}, 0x20000010) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000100), &(0x7f0000000140)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 393.620201ms ago: executing program 0 (id=7398): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x4, 0x0, @private2}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0xffff}, &(0x7f0000000200)=0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xc0000, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r1, 0x6, 0x4}, &(0x7f0000000180)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) connect$pppl2tp(r4, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) setsockopt$inet6_tcp_int(r3, 0x6, 0x1b, &(0x7f0000000000)=0x3f, 0x4) r5 = socket$inet6(0xa, 0x3, 0xff) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) close(0x3) 390.882865ms ago: executing program 2 (id=7399): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x220}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) syz_emit_ethernet(0x16, &(0x7f0000000340)={@broadcast, @remote, @val, {@generic={0x88fb}}}, 0x0) sendmmsg(r1, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="9f", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="10000000000000000f010000000000003000000000000000ff00000005200200dae7c65afdd9d1d5073fbf984e560f7f7af0377a701ad4e8ab3a00000000000090000000000000000000000004000000474995282b8d35b2efb349cfa55288ab0139064c723f71e2d9ced0cbb2d46df48f8ee505b82850c69ed841ec12c3b6392c378033c46278ff6bc63d6d5bf4c8b718e78b05ad817aac3b5239cd4fe877aff14721f369a8fb6e6daa5710be61d3edc36edbd248ee581a70263663739cac6a0b0dc55ac9b2f56dc43f04dc78a3000058"], 0x128}}], 0x1, 0x4000045) 273.874065ms ago: executing program 4 (id=7400): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='veth0\x00', 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000680)={&(0x7f0000000040)=@in6={0xa, 0x4e20, 0x3, @local, 0x8}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000240)="02", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa"], 0x18}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273"], 0x294}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000300000008000400ac14140008000200"], 0x2c}}, 0x0) 273.520414ms ago: executing program 3 (id=7401): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x29, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x24048058) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x15, 0x9}, {0xf, 0xf}, {0xffe0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x1a}, 0x10011, 0x2, 0x2, 0x7, 0xc}, 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r1, 0x8b32, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r2, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 230.442982ms ago: executing program 1 (id=7402): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000800cb8004000880100001800c0010800400088004000b800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={0x0, @null, @bpq0, 0x8, 'syz1\x00', @null, 0xfff, 0x3, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_FW_DOWNLOAD(r6, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x14, r7, 0xba960a2220112c19, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000020300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140)=[0x100000001], 0x0, 0x2, 0x1, 0x1}}, 0x40) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x8a}, @exit], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x11}, 0xea) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)={0xfc, r8, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x4, 0x8, @empty}]}, 0xfc}}, 0x0) r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r9, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40400c1}, 0x20008c0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x0, 0x20, 0x200, 0x70bd2a, 0x25dfdbff, {0x2, 0x14, 0x80, 0x5, 0xdf, 0x0, 0x0, 0x1, 0xa}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x818) 191.935996ms ago: executing program 2 (id=7403): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r2 = socket$inet6(0xa, 0x5, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) 45.990283ms ago: executing program 4 (id=7404): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000001, 0x12, r4, 0x0) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) write(r0, &(0x7f0000000040)="07000000010006", 0x7) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x84, 0x30, 0x51b, 0x0, 0x0, {}, [{0x70, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x84}}, 0x0) listen(r0, 0x1) 0s ago: executing program 3 (id=7405): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff070000140003002e000000000000d700000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe6, 0xe6, 0x6, [@datasec={0x5, 0x7, 0x0, 0xf, 0x1, [{0x4, 0x0, 0x5}, {0x5, 0xfffffff8, 0xb89c}, {0x1, 0x40, 0xb}, {0x4, 0xb987}, {0x4, 0x1ff, 0x80000001}, {0x2, 0x4, 0x8}, {0x3, 0x3, 0xfffffffb}], "93"}, @struct={0x7, 0x6, 0x0, 0x4, 0x0, 0xff, [{0x10, 0x5}, {0xe, 0x5, 0x7}, {0x7, 0x4, 0xfffffffd}, {0xc, 0x0, 0x3}, {0x3, 0x1, 0x7}, {0xc, 0x3, 0xfc}]}, @datasec={0x4, 0x1, 0x0, 0xf, 0x1, [{0x1, 0x8001, 0x7}], 'A'}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0xe}}]}, {0x0, [0x2e, 0x61, 0x61, 0x61]}}, &(0x7f0000000300)=""/242, 0x106, 0xf2, 0x0, 0x3ff}, 0x28) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0x10, 0xd, 0x2e, @private0, @remote, 0x700, 0x40, 0x0, 0xf}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710445000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xa, '\x00', r3, @sk_msg, r2}, 0x94) kernel console output (not intermixed with test programs): stered [ 911.165933][T27045] syzkaller0: entered promiscuous mode [ 911.186857][T27045] syzkaller0: entered allmulticast mode [ 911.217804][T27057] bond13: Unable to set peer notification delay as MII monitoring is disabled [ 911.237676][T27057] bond13 (unregistering): Released all slaves [ 911.284790][T27056] pimreg: entered allmulticast mode [ 911.291613][T27045] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 911.549759][T27072] netlink: 'syz.0.5711': attribute type 11 has an invalid length. [ 911.682270][T27076] pim6reg1: entered promiscuous mode [ 911.697525][T27076] pim6reg1: entered allmulticast mode [ 912.360815][T27130] __nla_validate_parse: 6 callbacks suppressed [ 912.360856][T27130] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5729'. [ 912.451294][T27138] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5731'. [ 912.572486][T27142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5733'. [ 912.581718][T27142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5733'. [ 912.674058][T27154] netlink: 'syz.1.5736': attribute type 3 has an invalid length. [ 912.694654][T27154] netlink: 'syz.1.5736': attribute type 1 has an invalid length. [ 912.709790][T27154] netlink: 204 bytes leftover after parsing attributes in process `syz.1.5736'. [ 912.760246][T27155] netlink: 'syz.1.5736': attribute type 3 has an invalid length. [ 912.769243][T27155] netlink: 'syz.1.5736': attribute type 1 has an invalid length. [ 912.777586][T27155] netlink: 204 bytes leftover after parsing attributes in process `syz.1.5736'. [ 912.828858][T27163] netlink: 54 bytes leftover after parsing attributes in process `syz.0.5737'. [ 912.850960][T27163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5737'. [ 913.058632][ T5852] block nbd3: Receive control failed (result -32) [ 913.419109][T27202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5747'. [ 913.439445][T27190] ipt_ECN: cannot use operation on non-tcp rule [ 913.761307][T27220] veth0: entered promiscuous mode [ 913.919600][T27219] veth0: left promiscuous mode [ 914.462269][T27259] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5769'. [ 914.616179][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 914.798699][T27271] x_tables: duplicate underflow at hook 3 [ 915.010498][T27284] veth1_to_bridge: entered allmulticast mode [ 915.101558][T23396] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 915.116809][T23396] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 915.125768][T23396] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 915.139187][T23396] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 915.147276][T23396] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 915.276190][T27285] lo speed is unknown, defaulting to 1000 [ 915.286946][T27285] wg1 speed is unknown, defaulting to 1000 [ 915.659262][ T30] audit: type=1800 audit(1777128625.503:11): pid=27303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5785" name="memory.events" dev="tmpfs" ino=2693 res=0 errno=0 [ 915.698610][T27285] chnl_net:caif_netlink_parms(): no params data found [ 916.062931][T27285] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.070672][T27285] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.078144][T27285] bridge_slave_0: entered allmulticast mode [ 916.086692][T27285] bridge_slave_0: entered promiscuous mode [ 916.096415][T27285] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.103715][T27285] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.111584][T27285] bridge_slave_1: entered allmulticast mode [ 916.128012][T27285] bridge_slave_1: entered promiscuous mode [ 916.296702][T27285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 916.339650][T27285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 916.403914][T27285] team0: Port device team_slave_0 added [ 916.415323][T27285] team0: Port device team_slave_1 added [ 916.475033][T27285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 916.486557][T27285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.513806][T27285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 916.543497][T27285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.550928][T27285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.578536][T27285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 916.709276][T27285] hsr_slave_0: entered promiscuous mode [ 916.728858][T27285] hsr_slave_1: entered promiscuous mode [ 916.747013][T27285] debugfs: 'hsr0' already exists in 'hsr' [ 916.752842][T27285] Cannot create hsr debugfs directory [ 917.193090][T27285] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 917.208867][T27285] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 917.220272][T27285] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.257319][ T5852] Bluetooth: hci0: command tx timeout [ 917.349700][T27285] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 917.375336][T27285] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 917.404097][T27285] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.559879][T27285] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 917.572035][T27285] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 917.587145][T27285] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.613783][T27395] syzkaller0: entered promiscuous mode [ 917.626550][T27395] syzkaller0: entered allmulticast mode [ 917.698637][T27402] net_ratelimit: 23 callbacks suppressed [ 917.698657][T27402] openvswitch: netlink: Flow actions attr not present in new flow. [ 917.855747][T27410] syzkaller0: entered promiscuous mode [ 917.864538][T27410] syzkaller0: entered allmulticast mode [ 918.163454][T27421] sock: sock_timestamping_bind_phc: sock not bind to device [ 918.184646][T27423] sock: sock_timestamping_bind_phc: sock not bind to device [ 918.236861][T27285] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 918.257467][T27285] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 918.266164][T27285] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 918.287753][T27285] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 918.299779][T27285] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 918.350097][T27285] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 918.373199][T27285] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 918.398940][T27285] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 918.553138][T27445] __nla_validate_parse: 11 callbacks suppressed [ 918.553158][T27445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5818'. [ 918.587054][T27446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5818'. [ 918.668146][T27451] 8021q: VLANs not supported on lo [ 918.788991][T27285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 918.845090][T27285] 8021q: adding VLAN 0 to HW filter on device team0 [ 918.873202][T27456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5822'. [ 918.892976][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.900204][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 918.921948][T27459] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5823'. [ 918.958852][T27464] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5823'. [ 918.959863][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.975051][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 919.068162][T27464] 8021q: VLANs not supported on gre0 [ 919.124483][T27469] syzkaller0: entered promiscuous mode [ 919.139515][T27469] syzkaller0: entered allmulticast mode [ 919.159134][T27474] x_tables: duplicate underflow at hook 1 [ 919.180426][T27469] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5826'. [ 919.191787][T27469] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5826'. [ 919.213759][T27477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5827'. [ 919.255834][T27479] ±ÿ: renamed from team_slave_1 (while UP) [ 919.336218][ T5852] Bluetooth: hci0: command 0x041b tx timeout [ 919.410402][T27488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5830'. [ 919.496819][T27488] xt_hashlimit: size too large, truncated to 1048576 [ 919.803167][T27285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 919.897382][T27285] veth0_vlan: entered promiscuous mode [ 919.937837][T27285] veth1_vlan: entered promiscuous mode [ 919.945079][T27500] netlink: 'syz.3.5832': attribute type 1 has an invalid length. [ 919.985618][T27500] bond17: entered promiscuous mode [ 919.991779][T27500] 8021q: adding VLAN 0 to HW filter on device bond17 [ 920.081771][T27285] veth0_macvtap: entered promiscuous mode [ 920.096696][T27285] veth1_macvtap: entered promiscuous mode [ 920.130911][T27285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 920.158422][T27285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 920.181250][T27508] netlink: 'syz.0.5834': attribute type 1 has an invalid length. [ 920.204292][T13088] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.221472][T13088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.304315][T13088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.324096][T27508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5834'. [ 920.338833][T13088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.349857][T27521] netlink: 'syz.2.5839': attribute type 63 has an invalid length. [ 920.371852][T27516] bond11: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 920.425602][T27508] bond11 (unregistering): (slave ip6gretap1): Releasing backup interface [ 920.483101][T27508] bond11 (unregistering): Released all slaves [ 920.865301][T13088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.904941][T13088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.070223][T13092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 921.095400][T13092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.417394][T23396] Bluetooth: hci0: command 0x041b tx timeout [ 921.751663][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 921.769778][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 921.780942][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 921.793254][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 921.801664][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 921.985692][T27578] lo speed is unknown, defaulting to 1000 [ 921.995277][T27578] wg1 speed is unknown, defaulting to 1000 [ 922.113928][T27589] netlink: 'syz.3.5852': attribute type 1 has an invalid length. [ 922.145350][T27592] netlink: 'syz.3.5852': attribute type 1 has an invalid length. [ 922.179217][T27591] vcan0 (unregistering): left allmulticast mode [ 922.207344][T27589] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR [ 922.243305][T27592] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR [ 922.548268][T27578] chnl_net:caif_netlink_parms(): no params data found [ 922.650533][T27615] syzkaller0: entered promiscuous mode [ 922.657494][T27615] syzkaller0: entered allmulticast mode [ 922.763162][T27578] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.771324][T27578] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.782355][T27578] bridge_slave_0: entered allmulticast mode [ 922.790296][T27578] bridge_slave_0: entered promiscuous mode [ 922.808282][T27578] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.815592][T27578] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.823138][T27578] bridge_slave_1: entered allmulticast mode [ 922.831099][T27578] bridge_slave_1: entered promiscuous mode [ 922.873760][T27578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 922.889586][T27578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 922.941318][ T1713] block nbd4: Possible stuck request ffff888027fa7000: control (read@0,1024B). Runtime 30 seconds [ 922.958690][ T1713] block nbd4: Possible stuck request ffff888027fa71c0: control (read@1024,1024B). Runtime 30 seconds [ 922.970852][ T1713] block nbd4: Possible stuck request ffff888027fa7380: control (read@2048,1024B). Runtime 30 seconds [ 922.982801][ T1713] block nbd4: Possible stuck request ffff888027fa7540: control (read@3072,1024B). Runtime 30 seconds [ 923.015662][T27578] team0: Port device team_slave_0 added [ 923.041547][T27578] team0: Port device team_slave_1 added [ 923.104283][T27578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 923.111366][T27578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.137797][T27578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 923.150463][T27578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 923.157533][T27578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.184949][T27578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 923.205665][T27639] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 923.259634][T27578] hsr_slave_0: entered promiscuous mode [ 923.268924][T27578] hsr_slave_1: entered promiscuous mode [ 923.275338][T27578] debugfs: 'hsr0' already exists in 'hsr' [ 923.284396][T27578] Cannot create hsr debugfs directory [ 923.448513][T27578] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 923.496692][ T5852] Bluetooth: hci0: command 0x041b tx timeout [ 923.567478][T27578] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 923.665833][T27578] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 923.770940][T27648] syz.4.5869 uses old SIOCAX25GETINFO [ 923.774669][T27578] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 923.907541][ T5852] Bluetooth: hci3: command tx timeout [ 924.052555][T27578] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 924.081111][T27578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 924.089510][T27578] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 924.113597][T27578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 924.129042][T27578] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 924.151957][T27578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 924.167026][T27578] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 924.189007][T27578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 924.420589][T27676] __nla_validate_parse: 8 callbacks suppressed [ 924.420608][T27676] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5879'. [ 924.472994][T27578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.533025][T27682] netlink: 'syz.3.5878': attribute type 1 has an invalid length. [ 924.545828][T27578] 8021q: adding VLAN 0 to HW filter on device team0 [ 924.620808][T27690] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5883'. [ 924.624238][T27687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 924.642357][T27693] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5883'. [ 924.655802][T27682] bond18: entered promiscuous mode [ 924.667824][T27682] 8021q: adding VLAN 0 to HW filter on device bond18 [ 924.714993][T27692] 8021q: adding VLAN 0 to HW filter on device bond18 [ 924.724105][T27692] bond18: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 924.735776][T27692] bond18: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 924.750430][T27692] bond18: (slave ip6gre2): making interface the new active one [ 924.758353][T27692] ip6gre2: entered promiscuous mode [ 924.765432][T27692] bond18: (slave ip6gre2): Enslaving as an active interface with an up link [ 924.787826][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.795037][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 924.819011][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.826266][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 924.960094][T27706] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5885'. [ 924.970193][T27706] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5885'. [ 924.999504][T27707] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5886'. [ 925.030575][T27709] netlink: 'syz.1.5887': attribute type 1 has an invalid length. [ 925.047498][T27709] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5887'. [ 925.071615][T27709] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5887'. [ 925.091653][T27709] netlink: 'syz.1.5887': attribute type 1 has an invalid length. [ 925.105461][T27709] netlink: 618 bytes leftover after parsing attributes in process `syz.1.5887'. [ 925.122738][T27713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 925.355335][T27578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 925.477992][T27578] veth0_vlan: entered promiscuous mode [ 925.505263][T27578] veth1_vlan: entered promiscuous mode [ 925.573022][T27578] veth0_macvtap: entered promiscuous mode [ 925.579765][ T5852] Bluetooth: hci0: command 0x041b tx timeout [ 925.603467][T27578] veth1_macvtap: entered promiscuous mode [ 925.631737][T27578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 925.650251][T27578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 925.673173][T13088] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.703467][T13088] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.744881][T13088] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.768788][T13088] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.975819][T27746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5899'. [ 925.986940][ T5852] Bluetooth: hci3: command tx timeout [ 925.999538][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.014138][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.052402][T27750] x_tables: unsorted underflow at hook 4 [ 926.094688][T13088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.111424][T13088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.300910][T27761] netlink: 'syz.4.5903': attribute type 9 has an invalid length. [ 926.320641][T27761] netlink: 'syz.4.5903': attribute type 6 has an invalid length. [ 926.674359][T27788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 927.521113][T27841] 8021q: VLANs not supported on ip6tnl0 [ 927.689464][T27852] netlink: 'syz.4.5934': attribute type 51 has an invalid length. [ 927.768959][T27852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 927.777118][T27852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 928.028491][T27865] veth11: entered allmulticast mode [ 928.057208][ T5852] Bluetooth: hci3: command tx timeout [ 928.301605][T27889] netlink: 'syz.1.5942': attribute type 1 has an invalid length. [ 928.314887][T27889] netlink: 'syz.1.5942': attribute type 2 has an invalid length. [ 928.545709][T27907] netlink: 'syz.3.5949': attribute type 2 has an invalid length. [ 928.575038][T27906] netlink: 'syz.3.5949': attribute type 2 has an invalid length. [ 928.583442][T27899] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 928.756280][T27915] openvswitch: netlink: Flow key attr not present in new flow. [ 928.808478][T27918] openvswitch: netlink: Flow key attr not present in new flow. [ 929.001371][T27927] netlink: 'syz.0.5954': attribute type 29 has an invalid length. [ 929.132938][T27929] x_tables: unsorted underflow at hook 3 [ 929.150039][T27930] x_tables: unsorted underflow at hook 3 [ 929.336193][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 929.405823][T27944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 929.444213][T27944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 929.445146][T27948] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:20003 [ 929.495699][T27950] ip6_vti0: entered promiscuous mode [ 929.546226][T27950] __nla_validate_parse: 15 callbacks suppressed [ 929.546243][T27950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5960'. [ 929.782670][T27965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5965'. [ 929.923072][T27959] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5965'. [ 930.138399][ T5852] Bluetooth: hci3: command tx timeout [ 930.349267][T27986] xt_hashlimit: size too large, truncated to 1048576 [ 930.387303][T27993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5974'. [ 930.580951][T27993] bond11: entered promiscuous mode [ 930.596721][T27993] 8021q: adding VLAN 0 to HW filter on device bond11 [ 930.677315][T28003] ipvlan2: entered allmulticast mode [ 930.701266][T28003] bond11: entered allmulticast mode [ 930.734355][T28008] ipvlan3: entered allmulticast mode [ 931.050471][T28028] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5981'. [ 931.062361][T28027] validate_nla: 2 callbacks suppressed [ 931.062378][T28027] netlink: 'syz.0.5982': attribute type 2 has an invalid length. [ 931.115461][T28036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5983'. [ 931.177443][T28039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5983'. [ 931.290630][T28048] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5988'. [ 931.308812][T28048] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5988'. [ 931.341924][T28048] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5988'. [ 931.468901][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 931.486564][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 931.496665][T21191] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 931.637353][T28064] netlink: 'syz.2.5994': attribute type 7 has an invalid length. [ 931.816524][T21191] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 931.841627][T28075] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 931.869441][T28077] bridge1: entered promiscuous mode [ 931.878107][T28077] bridge1: entered allmulticast mode [ 931.892775][T28077] team0: Port device bridge1 added [ 932.046237][T21191] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 932.569609][T28124] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 932.742338][T28133] rdma_rxe: rxe_newlink: failed to add lo [ 932.904528][T28137] vcan1: entered promiscuous mode [ 932.912512][T28137] vcan1: entered allmulticast mode [ 932.954611][T28141] xt_TPROXY: Can be used only with -p tcp or -p udp [ 933.198066][T28164] netlink: 'syz.2.6026': attribute type 1 has an invalid length. [ 933.212174][T28167] tipc: Enabled bearer , priority 0 [ 933.316567][T28167] tipc: Disabling bearer [ 933.394375][T28175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 933.490488][T28181] geneve2: entered promiscuous mode [ 933.502798][ T48] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 34148 - 0 [ 933.523209][ T48] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 34148 - 0 [ 933.555093][ T48] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 34148 - 0 [ 933.581569][ T48] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 34148 - 0 [ 934.276245][T28238] syzkaller0: entered promiscuous mode [ 934.300760][T28238] syzkaller0: entered allmulticast mode [ 934.498332][T28256] netlink: 'syz.1.6055': attribute type 1 has an invalid length. [ 934.585126][T28266] __nla_validate_parse: 12 callbacks suppressed [ 934.585144][T28266] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.6057'. [ 934.602272][T28266] netlink: Unknown conntrack attr (0) [ 934.700894][T28264] bond1: (slave geneve2): making interface the new active one [ 934.708889][T28273] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6059'. [ 934.731984][T28264] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 934.769100][T13090] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 934.792278][T13090] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 934.822879][T28273] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6059'. [ 934.850485][T13090] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 934.868958][T13090] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 935.025141][T28287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6063'. [ 935.147228][T28290] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6063'. [ 935.495140][T23396] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 935.496714][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 935.524476][T23396] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 935.533955][T23396] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 935.547842][T23396] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 935.556843][T23396] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 935.596770][T28307] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6070'. [ 935.754018][T28315] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6073'. [ 935.802477][T28300] lo speed is unknown, defaulting to 1000 [ 935.877685][T28300] wg1 speed is unknown, defaulting to 1000 [ 935.945529][ T48] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.002233][T28323] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6075'. [ 936.048342][T28326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6076'. [ 936.066518][T28319] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6074'. [ 936.121611][T28326] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 936.498158][ T48] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.708932][T28348] bridge0: port 1(veth0_to_bridge) entered blocking state [ 936.727574][T28348] bridge0: port 1(veth0_to_bridge) entered disabled state [ 936.741592][T28348] veth0_to_bridge: entered allmulticast mode [ 936.761235][T28348] veth0_to_bridge: entered promiscuous mode [ 936.824189][ T48] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.874289][T28300] chnl_net:caif_netlink_parms(): no params data found [ 936.911995][ T48] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.956636][T28370] openvswitch: netlink: Missing key (keys=40, expected=100) [ 937.040349][T28363] nbd10: detected capacity change from 0 to 63 [ 937.061636][T28373] bond1: option lp_interval: invalid value (0) [ 937.068319][T23396] block nbd10: Receive control failed (result -104) [ 937.076176][T28373] bond1: option lp_interval: allowed values 1 - 2147483647 [ 937.085471][ T5852] block nbd10: Receive control failed (result -32) [ 937.100477][T28373] bond1 (unregistering): Released all slaves [ 937.444898][T28300] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.466694][T28300] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.482364][T28300] bridge_slave_0: entered allmulticast mode [ 937.500289][T28300] bridge_slave_0: entered promiscuous mode [ 937.603149][T28300] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.624568][T28300] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.641901][T28300] bridge_slave_1: entered allmulticast mode [ 937.658840][T23396] Bluetooth: hci5: command tx timeout [ 937.670498][T28300] bridge_slave_1: entered promiscuous mode [ 937.799344][T28300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 937.829421][T28300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.915632][T28424] xt_TCPMSS: Only works on TCP SYN packets [ 937.933966][T28300] team0: Port device team_slave_0 added [ 937.943801][T28300] team0: Port device team_slave_1 added [ 937.971208][ T48] team0: left allmulticast mode [ 937.988677][ T48] team_slave_0: left allmulticast mode [ 938.009129][ T48] ±ÿ: left allmulticast mode [ 938.029951][ T48] team0: left promiscuous mode [ 938.043002][ T48] team_slave_0: left promiscuous mode [ 938.049109][ T48] ±ÿ: left promiscuous mode [ 938.054692][ T48] bridge0: port 1(team0) entered disabled state [ 938.081303][T28437] netlink: 'syz.2.6101': attribute type 10 has an invalid length. [ 938.154278][T28442] netlink: 'syz.2.6101': attribute type 27 has an invalid length. [ 938.384828][ T48] bond1 (unregistering): (slave gretap1): Releasing active interface [ 938.543222][ T48] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 938.551715][ T48] bridge2 (unregistering): left promiscuous mode [ 938.625373][ T48] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 938.633774][ T48] bond3 (unregistering): (slave bridge4): the permanent HWaddr of slave - ae:0d:6c:4e:ad:f6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 938.680868][ T48] team0: Port device bridge5 removed [ 938.788014][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 938.799950][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 938.812129][ T48] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 938.823184][ T48] bond0 (unregistering): Released all slaves [ 938.834689][ T48] bond1 (unregistering): Released all slaves [ 938.863657][ T48] bond2 (unregistering): Released all slaves [ 938.883881][ T48] bond3 (unregistering): (slave veth5): Releasing backup interface [ 938.893824][ T48] bond3 (unregistering): Released all slaves [ 938.914555][ T48] bond4 (unregistering): Released all slaves [ 938.935296][ T48] bond5 (unregistering): Released all slaves [ 938.960649][ T48] bond6 (unregistering): Released all slaves [ 938.979452][ T48] bond7 (unregistering): Released all slaves [ 939.051787][T28441] macvtap2: entered allmulticast mode [ 939.062780][T28441] veth0_macvtap: entered allmulticast mode [ 939.210471][T28300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.225758][T28300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.282880][T28300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.315485][T28300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 939.335470][T28300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.366841][T28300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 939.392241][ T48] tipc: Left network mode [ 939.694134][T28300] hsr_slave_0: entered promiscuous mode [ 939.712583][T28300] hsr_slave_1: entered promiscuous mode [ 939.728489][T28300] debugfs: 'hsr0' already exists in 'hsr' [ 939.734455][T28300] Cannot create hsr debugfs directory [ 939.740476][T23396] Bluetooth: hci5: command tx timeout [ 940.157260][T28490] __nla_validate_parse: 7 callbacks suppressed [ 940.157280][T28490] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6115'. [ 940.790810][T28524] x_tables: unsorted underflow at hook 2 [ 940.824215][T28524] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.6124'. [ 941.089591][T28538] netlink: 'syz.3.6127': attribute type 39 has an invalid length. [ 941.138590][T28535] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 941.154512][T28535] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 941.164073][T28535] gretap1: entered promiscuous mode [ 941.173682][T28535] gretap1: entered allmulticast mode [ 941.374308][T28551] Bluetooth: MGMT ver 1.23 [ 941.385152][T28549] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6131'. [ 941.503008][T28556] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6132'. [ 941.816986][T23396] Bluetooth: hci5: command tx timeout [ 941.864215][T28582] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6139'. [ 941.887733][T28581] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6138'. [ 942.182444][ T48] veth0_macvtap: left promiscuous mode [ 942.202890][ T48] veth1_vlan: left promiscuous mode [ 942.231963][T28600] netlink: 'syz.3.6142': attribute type 21 has an invalid length. [ 942.449806][T28607] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 942.631291][ T48] team0 (unregistering): Port device 26±ÿ removed [ 942.650425][ T48] team0 (unregistering): Port device team_slave_0 removed [ 942.806674][T28300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 942.822960][ T1163] smbdirect: ib_dev[syz0] removed [ 942.832971][T28300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 942.853917][T28300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 942.883846][T28300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 942.902545][T28600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6142'. [ 942.926989][T21168] lo speed is unknown, defaulting to 1000 [ 942.940723][T21168] infiniband syz0: ib_query_port failed (-19) [ 943.001544][T28300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 943.067727][T28300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 943.076615][T28300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 943.093188][T28300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 943.142001][T28615] bond20: option all_slaves_active: invalid value (222) [ 943.153368][T28615] bond20 (unregistering): Released all slaves [ 943.275498][T28628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6147'. [ 943.383761][ T48] IPVS: stop unused estimator thread 0... [ 943.416250][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 943.503188][T28300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 943.513561][T28634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6149'. [ 943.533090][T28300] 8021q: adding VLAN 0 to HW filter on device team0 [ 943.552174][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.559388][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.611911][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.619191][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.654185][T28641] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6152'. [ 943.896811][T23396] Bluetooth: hci5: command tx timeout [ 943.959640][T28652] Bluetooth: MGMT ver 1.23 [ 944.166490][T28300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 945.006844][T28711] ip6gre2: entered allmulticast mode [ 945.176534][T28717] __nla_validate_parse: 6 callbacks suppressed [ 945.176553][T28717] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6173'. [ 945.275495][T28722] Cannot find add_set index 3 as target [ 945.288641][T28721] bond13: (slave xfrm1): The slave device specified does not support setting the MAC address [ 945.305713][T28721] bond13: (slave xfrm1): Error -95 calling set_mac_address [ 945.416338][T28300] veth0_vlan: entered promiscuous mode [ 945.457398][T28300] veth1_vlan: entered promiscuous mode [ 945.548272][T28300] veth0_macvtap: entered promiscuous mode [ 945.575908][T28300] veth1_macvtap: entered promiscuous mode [ 945.630142][T28300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 945.679110][T28300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 945.710107][T28731] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6179'. [ 945.733449][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.744792][T28731] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6179'. [ 945.754599][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.767589][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.778244][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.789031][T28733] syzkaller0: entered promiscuous mode [ 945.816421][T28733] syzkaller0: entered allmulticast mode [ 945.977758][T23396] Bluetooth: hci0: command 0x041b tx timeout [ 946.227222][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.260048][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.272031][T28741] ipt_rpfilter: unknown options [ 946.320858][T28741] nbd: couldn't find device at index 0 [ 946.341990][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.362259][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.538694][T28751] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6187'. [ 946.566323][T28751] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6187'. [ 946.583926][T28751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6187'. [ 946.689366][T28753] block nbd11: server does not support multiple connections per device. [ 946.712858][T28753] block nbd11: shutting down sockets [ 946.860376][T28757] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 946.989031][T28765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6192'. [ 947.027406][T28766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6192'. [ 947.034463][T28763] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6191'. [ 947.064287][T28766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6192'. [ 947.086572][T28763] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 947.201285][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 947.214647][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 947.223274][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 947.231929][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 947.243027][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 947.495784][T28771] wg1 speed is unknown, defaulting to 1000 [ 947.763431][T28781] syzkaller0: entered promiscuous mode [ 947.790474][T28781] syzkaller0: entered allmulticast mode [ 947.998829][T28783] netlink: 'syz.2.6196': attribute type 1 has an invalid length. [ 948.031569][T28783] netlink: 'syz.2.6196': attribute type 7 has an invalid length. [ 948.068829][T28783] netlink: 'syz.2.6196': attribute type 8 has an invalid length. [ 948.433095][T28800] IPVS: Scheduler module ip_vs_sip not found [ 948.563721][T28771] chnl_net:caif_netlink_parms(): no params data found [ 948.714515][T28821] netlink: 'syz.2.6203': attribute type 1 has an invalid length. [ 948.754502][T28826] netlink: 'syz.2.6203': attribute type 1 has an invalid length. [ 948.962485][T28771] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.996918][T28771] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.006370][T28771] bridge_slave_0: entered allmulticast mode [ 949.035466][T28771] bridge_slave_0: entered promiscuous mode [ 949.053707][T28771] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.063253][T28771] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.083421][T28771] bridge_slave_1: entered allmulticast mode [ 949.094091][T28771] bridge_slave_1: entered promiscuous mode [ 949.125790][T28845] tipc: Started in network mode [ 949.130910][T28845] tipc: Node identity 72f30c63934, cluster identity 4711 [ 949.140350][T28845] tipc: Enabled bearer , priority 0 [ 949.231165][T28845] syzkaller0: entered promiscuous mode [ 949.236764][T28845] syzkaller0: entered allmulticast mode [ 949.242969][T28845] tipc: Resetting bearer [ 949.258844][T28771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.271595][T28853] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 949.284255][T28771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 949.335906][T28844] tipc: Resetting bearer [ 949.340016][ T5852] Bluetooth: hci4: command tx timeout [ 950.039265][T28892] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 951.416302][ T5852] Bluetooth: hci4: command tx timeout [ 952.020037][T28844] tipc: Disabling bearer [ 952.048957][T21169] tipc: Node number set to 3786607715 [ 952.063528][T28771] team0: Port device team_slave_0 added [ 952.082359][T28771] team0: Port device team_slave_1 added [ 952.188348][T28771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.198663][T28771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.230901][T28771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.287688][T28902] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 952.318892][T28771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.340549][T28771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.371555][T28771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 952.389902][T28915] __nla_validate_parse: 6 callbacks suppressed [ 952.389914][T28915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6228'. [ 952.526951][T28771] hsr_slave_0: entered promiscuous mode [ 952.533950][T28771] hsr_slave_1: entered promiscuous mode [ 952.541615][T28771] debugfs: 'hsr0' already exists in 'hsr' [ 952.547718][T28771] Cannot create hsr debugfs directory [ 952.745375][T28932] netlink: 'syz.1.6235': attribute type 1 has an invalid length. [ 952.781821][T28924] syzkaller0: entered promiscuous mode [ 952.790391][T28924] syzkaller0: entered allmulticast mode [ 952.871400][T28938] Cannot find set identified by id 0 to match [ 953.025721][ T1713] block nbd4: Possible stuck request ffff888027fa7000: control (read@0,1024B). Runtime 60 seconds [ 953.036617][ T1713] block nbd4: Possible stuck request ffff888027fa71c0: control (read@1024,1024B). Runtime 60 seconds [ 953.047979][ T1713] block nbd4: Possible stuck request ffff888027fa7380: control (read@2048,1024B). Runtime 60 seconds [ 953.058998][ T1713] block nbd4: Possible stuck request ffff888027fa7540: control (read@3072,1024B). Runtime 60 seconds [ 953.195731][T28943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6238'. [ 953.499101][ T5852] Bluetooth: hci4: command tx timeout [ 953.509603][T28935] netlink: 'syz.1.6235': attribute type 1 has an invalid length. [ 953.525449][T28771] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 953.551743][T28771] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.005273][T28967] netlink: 'syz.4.6244': attribute type 10 has an invalid length. [ 954.688662][T28958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 955.586945][ T5852] Bluetooth: hci4: command tx timeout [ 955.854214][ T5210] udevd[5210]: worker [26221] /devices/virtual/block/nbd4 is taking a long time [ 956.381401][T28771] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 956.391437][T28771] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.427011][T28957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 956.435447][T28957] 8021q: adding VLAN 0 to HW filter on device team0 [ 956.448090][T28957] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 956.500093][T28967] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 956.531903][T28975] netlink: 'syz.2.6245': attribute type 1 has an invalid length. [ 956.545927][T28771] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 956.562641][T28771] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.683493][T28975] bond1: entered promiscuous mode [ 956.695149][T28975] 8021q: adding VLAN 0 to HW filter on device bond1 [ 956.734780][T28990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6247'. [ 956.759241][T28977] 8021q: adding VLAN 0 to HW filter on device bond1 [ 956.767229][T28977] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 956.778525][T28977] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 956.794117][T28977] bond1: (slave ip6gre1): making interface the new active one [ 956.802398][T28977] ip6gre1: entered promiscuous mode [ 956.809870][T28977] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 956.931853][T28771] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 956.958072][T28771] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.986941][T28994] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 957.570888][T29026] bond20: entered promiscuous mode [ 957.582509][T29026] 8021q: adding VLAN 0 to HW filter on device bond20 [ 957.647601][T29033] netlink: 808 bytes leftover after parsing attributes in process `syz.2.6258'. [ 957.687792][T28771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 957.708078][T28771] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 957.718334][T28771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 957.746282][T28771] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 957.762788][T28771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 957.779833][T28771] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 957.798651][T29030] wg1 speed is unknown, defaulting to 1000 [ 957.805076][T28771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 957.825507][T28771] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 958.136881][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 958.194054][T29067] erspan0: entered promiscuous mode [ 958.203554][T29067] erspan0: entered allmulticast mode [ 958.224745][T28771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 958.253391][T28771] 8021q: adding VLAN 0 to HW filter on device team0 [ 958.285508][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.292731][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 958.348518][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.355748][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 958.412130][T29075] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6267'. [ 958.437693][T29078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6268'. [ 958.776664][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 958.802550][ T30] audit: type=1800 audit(1777128668.643:12): pid=29092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6271" name="memory.events" dev="tmpfs" ino=393 res=0 errno=0 [ 958.983177][T29110] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 959.026577][T29110] IPv6: NLM_F_CREATE should be specified when creating new route [ 959.045341][T29110] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 959.052718][T29110] IPv6: NLM_F_CREATE should be set when creating new route [ 959.062300][T28771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 959.203126][T28771] veth0_vlan: entered promiscuous mode [ 959.227980][T29117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6276'. [ 959.241022][T28771] veth1_vlan: entered promiscuous mode [ 959.255627][T29117] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6276'. [ 959.279515][T29117] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6276'. [ 959.331402][T28771] veth0_macvtap: entered promiscuous mode [ 959.363267][T28771] veth1_macvtap: entered promiscuous mode [ 959.401786][T28771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 959.431949][T28771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 959.462310][T13088] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.473375][T13088] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.484217][T29122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6279'. [ 959.494044][T13088] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.519616][T13088] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.743447][T29125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6278'. [ 959.915637][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.959152][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 960.071279][T29140] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6282'. [ 960.107535][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 960.135341][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 960.804097][T29179] netlink: 'syz.4.6291': attribute type 1 has an invalid length. [ 960.850309][T29178] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6292'. [ 960.933098][T29179] 8021q: adding VLAN 0 to HW filter on device bond3 [ 960.987161][T29182] 8021q: adding VLAN 0 to HW filter on device bond3 [ 961.004357][T29182] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 961.017332][T29182] bond3: (slave vcan1): Error -95 calling set_mac_address [ 961.119233][T29196] Cannot find add_set index 0 as target [ 961.125326][T29196] IPVS: length: 125 != 24 [ 961.132403][T29197] IPVS: length: 125 != 24 [ 961.377354][T29218] vlan2: entered allmulticast mode [ 961.639642][T29229] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 963.919710][T29186] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 963.934882][T29200] netlink: 'syz.1.6296': attribute type 1 has an invalid length. [ 963.943740][T29200] __nla_validate_parse: 1 callbacks suppressed [ 963.964567][T29200] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6296'. [ 964.301719][T29253] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 964.332846][ T48] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xca [ 967.099806][ T1683] block nbd10: Connection timed out, retrying (0/2 alive) [ 967.107199][ T1683] block nbd10: Connection timed out, retrying (0/2 alive) [ 967.115845][ T1683] block nbd10: Connection timed out, retrying (0/2 alive) [ 967.127001][ T1683] block nbd10: Connection timed out, retrying (0/2 alive) [ 967.134274][ T1683] block nbd10: Dead connection, failed to find a fallback [ 967.143538][ T1683] block nbd10: shutting down sockets [ 967.149271][ T1683] blk_print_req_error: 138 callbacks suppressed [ 967.149289][ T1683] I/O error, dev nbd10, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 967.161759][T29241] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 967.173749][ T1683] buffer_io_error: 138 callbacks suppressed [ 967.173773][ T1683] Buffer I/O error on dev nbd10, logical block 3, async page read [ 967.173944][ T1683] I/O error, dev nbd10, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 967.173971][ T1683] Buffer I/O error on dev nbd10, logical block 2, async page read [ 967.205595][T29240] netlink: 'syz.1.6306': attribute type 11 has an invalid length. [ 967.213888][ T1683] I/O error, dev nbd10, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 967.216408][T29240] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.6306'. [ 967.223794][ T1683] Buffer I/O error on dev nbd10, logical block 1, async page read [ 967.240556][ T1683] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 967.251475][ T1683] Buffer I/O error on dev nbd10, logical block 0, async page read [ 967.263672][T27546] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 967.285144][T27546] Buffer I/O error on dev nbd10, logical block 0, async page read [ 967.293486][T27546] I/O error, dev nbd10, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 967.303029][T27546] Buffer I/O error on dev nbd10, logical block 1, async page read [ 967.311605][T27546] I/O error, dev nbd10, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 967.311660][T29266] netlink: 'syz.4.6317': attribute type 1 has an invalid length. [ 967.321094][T27546] Buffer I/O error on dev nbd10, logical block 2, async page read [ 967.321876][T27546] I/O error, dev nbd10, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 967.347748][T27546] Buffer I/O error on dev nbd10, logical block 3, async page read [ 967.355836][T27546] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 967.365146][T27546] Buffer I/O error on dev nbd10, logical block 0, async page read [ 967.373298][T27546] I/O error, dev nbd10, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 967.382985][T27546] Buffer I/O error on dev nbd10, logical block 1, async page read [ 967.394119][T27546] ldm_validate_partition_table(): Disk read failed. [ 967.402988][T27546] Dev nbd10: unable to read RDB block 0 [ 967.410653][T27546] nbd10: unable to read partition table [ 967.430999][T27546] ldm_validate_partition_table(): Disk read failed. [ 967.439841][T27546] Dev nbd10: unable to read RDB block 0 [ 967.445649][T29266] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6317'. [ 967.452277][T27546] nbd10: unable to read partition table [ 967.643112][T29289] netlink: 'syz.0.6321': attribute type 3 has an invalid length. [ 967.666855][T29289] netlink: 'syz.0.6321': attribute type 1 has an invalid length. [ 967.689031][T29289] netlink: 204 bytes leftover after parsing attributes in process `syz.0.6321'. [ 967.712126][T29290] netlink: 'syz.0.6321': attribute type 10 has an invalid length. [ 967.737360][T29290] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6321'. [ 967.765776][T29290] dummy0: entered promiscuous mode [ 967.781321][T29290] bridge0: port 3(dummy0) entered blocking state [ 967.788078][T29290] bridge0: port 3(dummy0) entered disabled state [ 967.794888][T29290] dummy0: entered allmulticast mode [ 967.804435][T29290] bridge0: port 3(dummy0) entered blocking state [ 967.811052][T29290] bridge0: port 3(dummy0) entered forwarding state [ 967.988425][T29297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6324'. [ 968.012191][T29297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 968.183251][T29320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6330'. [ 968.192985][T29320] netlink: 'syz.3.6330': attribute type 30 has an invalid length. [ 968.218017][ T13] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 968.242094][T29297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 968.262627][T29323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6330'. [ 968.328092][T29323] netlink: 'syz.3.6330': attribute type 30 has an invalid length. [ 968.480496][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 968.493386][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 968.580440][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 968.610895][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 968.751368][T29310] xt_recent: Unsupported userspace flags (000000b1) [ 968.869165][T29343] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6337'. [ 968.897390][T29343] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6337'. [ 969.412680][T29371] netlink: 'syz.0.6346': attribute type 4 has an invalid length. [ 969.617222][T29382] syzkaller0: entered promiscuous mode [ 969.641823][T29382] syzkaller0: entered allmulticast mode [ 969.670747][T29384] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6350'. [ 969.692664][T29382] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6350'. [ 969.751927][T29392] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 969.789849][T29396] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6353'. [ 969.831827][T29396] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6353'. [ 969.935702][T29401] veth1_to_bridge: entered allmulticast mode [ 969.992432][T29408] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6357'. [ 970.130365][T29399] veth1_to_bridge: left allmulticast mode [ 970.286720][T29424] netlink: 'syz.1.6364': attribute type 4 has an invalid length. [ 970.501637][T29440] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6368'. [ 970.532956][T29440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6368'. [ 970.554962][T29440] netlink: 'syz.1.6368': attribute type 25 has an invalid length. [ 970.572995][T29443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6369'. [ 970.585401][T29439] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6367'. [ 970.595198][T29440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6368'. [ 970.706877][T29443] 8021q: adding VLAN 0 to HW filter on device bond4 [ 970.720241][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 970.753050][T29443] netlink: 'syz.4.6369': attribute type 10 has an invalid length. [ 970.768427][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 970.838517][T29446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 970.892362][T29446] bond4: (slave bond0): making interface the new active one [ 970.912236][T29446] bond4: (slave bond0): Enslaving as an active interface with an up link [ 970.975301][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 970.995386][T29443] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.003338][T29443] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.063738][T29443] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.071059][T29443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 971.078697][T29443] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.085923][T29443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 971.124057][T29443] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 971.152239][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 971.545659][T29490] SET target dimension over the limit! [ 971.561425][T29491] SET target dimension over the limit! [ 971.725119][T29498] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 972.763783][T29572] validate_nla: 1 callbacks suppressed [ 972.763803][T29572] netlink: 'syz.2.6402': attribute type 1 has an invalid length. [ 972.832701][T29577] netlink: 'syz.2.6402': attribute type 1 has an invalid length. [ 973.005127][T29589] openvswitch: netlink: Flow key attr not present in new flow. [ 973.187218][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 973.209379][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 973.223459][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 973.237544][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 973.247075][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 973.454298][T29594] wg1 speed is unknown, defaulting to 1000 [ 974.191499][T29594] chnl_net:caif_netlink_parms(): no params data found [ 974.395885][T29594] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.404353][T29594] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.412068][T29594] bridge_slave_0: entered allmulticast mode [ 974.420341][T29594] bridge_slave_0: entered promiscuous mode [ 974.444218][T29594] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.463316][T29594] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.482361][T29594] bridge_slave_1: entered allmulticast mode [ 974.503433][T29594] bridge_slave_1: entered promiscuous mode [ 974.544064][T29651] syzkaller1: entered promiscuous mode [ 974.549937][T29651] syzkaller1: entered allmulticast mode [ 974.614281][T29594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 974.628073][T29594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 974.680398][T29594] team0: Port device team_slave_0 added [ 974.691283][T29594] team0: Port device team_slave_1 added [ 974.737025][T29594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 974.746605][T29594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 974.781357][T29594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 974.793641][T29658] netlink: 'syz.2.6421': attribute type 1 has an invalid length. [ 974.803397][T29661] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 974.810715][T29661] IPv6: NLM_F_CREATE should be set when creating new route [ 974.814403][T29594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 974.818070][T29661] IPv6: NLM_F_CREATE should be set when creating new route [ 974.832293][T29661] IPv6: NLM_F_CREATE should be set when creating new route [ 974.837161][T29594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 974.887630][T29594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 974.975091][T29594] hsr_slave_0: entered promiscuous mode [ 974.982676][T29594] hsr_slave_1: entered promiscuous mode [ 974.990093][T29594] debugfs: 'hsr0' already exists in 'hsr' [ 974.996545][T29594] Cannot create hsr debugfs directory [ 975.220237][T29676] __nla_validate_parse: 15 callbacks suppressed [ 975.220259][T29676] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6428'. [ 975.238395][T29677] netlink: 'syz.2.6425': attribute type 3 has an invalid length. [ 975.257609][T29677] netlink: 478 bytes leftover after parsing attributes in process `syz.2.6425'. [ 975.289134][T29676] bond2: Unable to set up delay as MII monitoring is disabled [ 975.301344][T29676] bond2 (unregistering): Released all slaves [ 975.339071][T23396] Bluetooth: hci1: command tx timeout [ 975.519259][T29688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6430'. [ 975.649466][T29594] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 975.954667][T29594] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 975.989999][T29712] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6438'. [ 976.042383][T29594] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 976.050677][T29715] netlink: 'syz.1.6440': attribute type 17 has an invalid length. [ 976.064260][T29715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6440'. [ 976.074064][T29715] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6440'. [ 976.100143][T29715] gretap0: entered promiscuous mode [ 976.110372][T29715] gretap0: left promiscuous mode [ 976.151874][T29594] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 976.392453][T29594] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 976.402697][T29594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 976.411131][T29594] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 976.422708][T29594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 976.431925][T29594] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 976.443590][T29594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 976.452231][T29594] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 976.463306][T29594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 976.554713][T29594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 976.579979][T29594] 8021q: adding VLAN 0 to HW filter on device team0 [ 976.600463][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.607860][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 976.629805][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.637104][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 976.981775][T29745] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6444'. [ 977.020343][T29746] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6445'. [ 977.074242][T29747] xt_bpf: check failed: parse error [ 977.100766][T29746] netlink: 'syz.0.6445': attribute type 11 has an invalid length. [ 977.110212][T29747] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6446'. [ 977.141278][T29746] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6445'. [ 977.148367][T29747] netlink: 'syz.2.6446': attribute type 2 has an invalid length. [ 977.248838][T29594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 977.417168][T29594] veth0_vlan: entered promiscuous mode [ 977.422777][T23396] Bluetooth: hci1: command tx timeout [ 977.463828][T29594] veth1_vlan: entered promiscuous mode [ 977.491069][T29763] x_tables: duplicate underflow at hook 2 [ 977.587198][T29594] veth0_macvtap: entered promiscuous mode [ 977.604553][T29594] veth1_macvtap: entered promiscuous mode [ 977.656877][T29594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 977.691100][T29594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 977.723233][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.734566][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.750159][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.760631][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.785319][T29774] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 977.823731][T29774] team1: entered promiscuous mode [ 977.832098][T29774] team1: entered allmulticast mode [ 977.991733][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.005120][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.037636][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.045717][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.498498][T23396] Bluetooth: hci1: command tx timeout [ 981.576564][T23396] Bluetooth: hci1: command tx timeout [ 983.099315][ T1713] block nbd4: Possible stuck request ffff888027fa7000: control (read@0,1024B). Runtime 90 seconds [ 983.110153][ T1713] block nbd4: Possible stuck request ffff888027fa71c0: control (read@1024,1024B). Runtime 90 seconds [ 983.121186][ T1713] block nbd4: Possible stuck request ffff888027fa7380: control (read@2048,1024B). Runtime 90 seconds [ 983.132535][ T1713] block nbd4: Possible stuck request ffff888027fa7540: control (read@3072,1024B). Runtime 90 seconds [ 990.138377][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1000.824236][T29812] __nla_validate_parse: 5 callbacks suppressed [ 1000.824270][T29812] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6456'. [ 1001.047615][T29827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6460'. [ 1001.508767][T29865] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6469'. [ 1001.579082][T29858] syzkaller0: entered promiscuous mode [ 1001.585232][T29858] syzkaller0: entered allmulticast mode [ 1001.680829][T29873] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6471'. [ 1002.036163][T29895] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1002.094845][T29898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6478'. [ 1002.219660][T29906] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6481'. [ 1002.392833][T29914] netlink: zone id is out of range [ 1002.411359][T29914] netlink: zone id is out of range [ 1002.431717][T29914] netlink: zone id is out of range [ 1002.446693][T29914] netlink: zone id is out of range [ 1002.459698][T29914] netlink: zone id is out of range [ 1002.474548][T29914] netlink: zone id is out of range [ 1002.481614][T29919] netlink: 'syz.3.6483': attribute type 4 has an invalid length. [ 1002.487021][T29914] netlink: zone id is out of range [ 1002.502032][T29914] netlink: zone id is out of range [ 1002.514470][T29914] netlink: zone id is out of range [ 1002.530369][T29914] netlink: zone id is out of range [ 1002.934220][T29929] netlink: 'syz.3.6484': attribute type 1 has an invalid length. [ 1005.953058][T29906] syzkaller1: entered promiscuous mode [ 1005.958659][T29906] syzkaller1: entered allmulticast mode [ 1006.084667][T29933] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1006.095341][T29935] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1006.152513][T29933] netlink: 'syz.1.6485': attribute type 1 has an invalid length. [ 1006.216314][T29933] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6485'. [ 1006.241763][T29935] netlink: 'syz.1.6485': attribute type 1 has an invalid length. [ 1006.268766][T29935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6485'. [ 1006.430029][T29957] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6492'. [ 1006.615281][T29967] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6494'. [ 1006.647842][T29967] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6494'. [ 1006.657472][T29970] netlink: 'syz.3.6495': attribute type 4 has an invalid length. [ 1006.689715][T29967] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6494'. [ 1006.712200][T29967] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6494'. [ 1006.725012][T29967] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6494'. [ 1006.735710][T29967] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6494'. [ 1006.763797][T29971] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1006.772732][T29967] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6494'. [ 1007.411200][T30001] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1007.723767][T30029] bond0: option all_slaves_active: invalid value (8) [ 1007.753358][T30031] syzkaller0: entered promiscuous mode [ 1007.761638][T30031] syzkaller0: entered allmulticast mode [ 1007.845907][T30035] netlink: 'syz.3.6513': attribute type 1 has an invalid length. [ 1008.024050][T30041] syzkaller0: entered promiscuous mode [ 1008.030157][T30041] syzkaller0: entered allmulticast mode [ 1008.213794][T30046] xt_hashlimit: invalid interval [ 1008.489238][T21213] IPVS: starting estimator thread 0... [ 1008.606063][T30062] IPVS: using max 26 ests per chain, 62400 per kthread [ 1008.901859][T30078] nbd: must specify a size in bytes for the device [ 1009.290052][T30103] net_ratelimit: 134 callbacks suppressed [ 1009.290075][T30103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1011.869943][T30078] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1012.234070][T30154] netlink: 'syz.3.6546': attribute type 4 has an invalid length. [ 1012.251195][T30154] netlink: 'syz.3.6546': attribute type 4 has an invalid length. [ 1012.267536][T30154] netlink: 'syz.3.6546': attribute type 4 has an invalid length. [ 1012.286467][T30154] netlink: 'syz.3.6546': attribute type 4 has an invalid length. [ 1012.325111][T30154] netlink: 'syz.3.6546': attribute type 4 has an invalid length. [ 1012.356617][T30154] netlink: 'syz.3.6546': attribute type 4 has an invalid length. [ 1012.390051][T30154] netlink: 'syz.3.6546': attribute type 4 has an invalid length. [ 1012.408043][T30154] netlink: 'syz.3.6546': attribute type 4 has an invalid length. [ 1012.417571][T30167] __nla_validate_parse: 35 callbacks suppressed [ 1012.417594][T30167] netlink: 240 bytes leftover after parsing attributes in process `syz.4.6548'. [ 1012.439724][T30154] netlink: 'syz.3.6546': attribute type 4 has an invalid length. [ 1012.533272][T30172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6551'. [ 1012.689811][T30180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6553'. [ 1012.718540][T30180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6553'. [ 1012.786498][T30180] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1012.845503][T30180] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1012.870961][T30180] gretap1: entered promiscuous mode [ 1012.877043][T30180] gretap1: entered allmulticast mode [ 1012.902166][T30180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1012.911500][T30180] batadv_slave_0: entered promiscuous mode [ 1012.941274][T30193] syzkaller0: entered promiscuous mode [ 1012.952760][T30193] syzkaller0: entered allmulticast mode [ 1012.968268][T30196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6560'. [ 1013.177479][ T1713] block nbd4: Possible stuck request ffff888027fa7000: control (read@0,1024B). Runtime 120 seconds [ 1013.188563][ T1713] block nbd4: Possible stuck request ffff888027fa71c0: control (read@1024,1024B). Runtime 120 seconds [ 1013.201179][ T1713] block nbd4: Possible stuck request ffff888027fa7380: control (read@2048,1024B). Runtime 120 seconds [ 1013.212769][ T1713] block nbd4: Possible stuck request ffff888027fa7540: control (read@3072,1024B). Runtime 120 seconds [ 1013.284709][T30215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1013.478730][T30223] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 1013.661625][T30232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6558'. [ 1013.850163][T30245] validate_nla: 24 callbacks suppressed [ 1013.850179][T30245] netlink: 'syz.3.6570': attribute type 3 has an invalid length. [ 1013.868191][T30245] sctp: [Deprecated]: syz.3.6570 (pid 30245) Use of int in maxseg socket option. [ 1013.868191][T30245] Use struct sctp_assoc_value instead [ 1013.978705][T30247] netlink: 'syz.3.6571': attribute type 2 has an invalid length. [ 1014.392234][T30270] syzkaller0: entered promiscuous mode [ 1014.397968][T30270] syzkaller0: entered allmulticast mode [ 1016.474737][T30222] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1016.486475][T30235] netlink: 'syz.1.6568': attribute type 1 has an invalid length. [ 1016.511949][T30235] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6568'. [ 1016.521800][T30235] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6568'. [ 1016.547448][T30235] netlink: 'syz.1.6568': attribute type 1 has an invalid length. [ 1016.559724][T30235] netlink: 634 bytes leftover after parsing attributes in process `syz.1.6568'. [ 1016.771285][T30284] ipt_rpfilter: unknown options [ 1016.850922][T30293] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6584'. [ 1017.346610][T30329] tipc: Started in network mode [ 1017.354877][T30329] tipc: Node identity ac14140f, cluster identity 4711 [ 1017.367080][T30329] tipc: New replicast peer: 172.20.20.187 [ 1017.374274][T30329] tipc: Enabled bearer , priority 10 [ 1017.711655][T30347] netlink: 'syz.2.6601': attribute type 1 has an invalid length. [ 1017.721515][T30347] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6601'. [ 1017.732780][T30347] netlink: 658 bytes leftover after parsing attributes in process `syz.2.6601'. [ 1017.743425][T30347] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6601'. [ 1017.756629][T30348] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6601'. [ 1017.901458][T30349] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6602'. [ 1018.035035][T30342] netlink: 'syz.0.6600': attribute type 29 has an invalid length. [ 1018.116299][T30365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6607'. [ 1018.218661][T30367] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6609'. [ 1018.296212][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1018.298830][T30374] netlink: 'syz.2.6611': attribute type 8 has an invalid length. [ 1018.338080][T30371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6610'. [ 1018.366471][T30375] netlink: 'syz.2.6611': attribute type 8 has an invalid length. [ 1018.486097][T21213] tipc: Node number set to 2886997007 [ 1018.727223][T30395] netlink: 'syz.1.6619': attribute type 8 has an invalid length. [ 1018.735215][T30395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6619'. [ 1018.754400][T30395] bond0: entered promiscuous mode [ 1018.762544][T30395] bond_slave_0: entered promiscuous mode [ 1018.775345][T30395] bond_slave_1: entered promiscuous mode [ 1018.793545][T30395] gretap0: entered promiscuous mode [ 1018.813725][T30395] ip6gretap0: entered promiscuous mode [ 1018.828641][T30395] hsr1: entered promiscuous mode [ 1018.864015][T30404] syzkaller0: entered promiscuous mode [ 1018.876768][T30404] syzkaller0: entered allmulticast mode [ 1019.061146][T30411] : entered promiscuous mode [ 1019.270476][T30421] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6627'. [ 1019.304448][T30421] netlink: 'syz.1.6627': attribute type 1 has an invalid length. [ 1019.363725][T30421] bond2: entered promiscuous mode [ 1019.369450][T30421] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1019.418263][T30423] bond2: (slave bridge3): making interface the new active one [ 1019.432253][T30423] bridge3: entered promiscuous mode [ 1019.447100][T30423] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 1019.555128][T30434] netlink: 'syz.3.6628': attribute type 3 has an invalid length. [ 1019.773272][T30436] netlink: 'syz.0.6630': attribute type 4 has an invalid length. [ 1019.783407][T30434] netlink: 'syz.3.6628': attribute type 33 has an invalid length. [ 1020.210032][T30473] erspan0: left allmulticast mode [ 1020.332352][T30473] bridge_slave_0: left allmulticast mode [ 1020.376216][T30473] bridge_slave_0: left promiscuous mode [ 1020.385440][T30473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.413807][T30473] bridge_slave_1: left allmulticast mode [ 1020.430767][T30473] bridge_slave_1: left promiscuous mode [ 1020.440197][T30473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.464585][T30473] bond0: (slave bond_slave_0): Releasing backup interface [ 1020.482383][T30473] bond0: (slave bond_slave_1): Releasing backup interface [ 1020.501711][T30473] team0: Port device team_slave_0 removed [ 1020.518878][T30473] team0: Port device team_slave_1 removed [ 1020.526222][T30473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1020.535396][T30473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1020.555890][T30473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1020.564712][T30473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1020.580272][T30473] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1020.615837][T30497] netlink: 'syz.1.6640': attribute type 1 has an invalid length. [ 1020.660037][T30498] vlan2: entered promiscuous mode [ 1020.674120][T30498] bridge0: entered promiscuous mode [ 1020.752782][T30503] netlink: 'syz.2.6641': attribute type 11 has an invalid length. [ 1020.770695][T30502] netlink: 'syz.2.6641': attribute type 11 has an invalid length. [ 1021.843443][T30544] tipc: Started in network mode [ 1021.856449][T30544] tipc: Node identity 7acd76c609e5, cluster identity 4711 [ 1021.875763][T30544] tipc: Enabled bearer , priority 0 [ 1021.964899][T30547] syzkaller0: entered promiscuous mode [ 1021.970756][T30547] syzkaller0: entered allmulticast mode [ 1021.980600][T30547] tipc: Resetting bearer [ 1022.001789][T30543] tipc: Resetting bearer [ 1022.399846][T30563] sctp: [Deprecated]: syz.2.6657 (pid 30563) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1022.399846][T30563] Use struct sctp_sack_info instead [ 1025.209053][T30543] tipc: Disabling bearer [ 1025.350898][T10448] tipc: Node number set to 1932031686 [ 1025.423069][T30583] netlink: 'syz.3.6662': attribute type 4 has an invalid length. [ 1025.526440][T30586] tipc: Started in network mode [ 1025.541666][T30586] tipc: Node identity 0edc89dd722f, cluster identity 4711 [ 1025.562107][T30586] tipc: Enabled bearer , priority 0 [ 1025.734268][T30586] syzkaller0: entered promiscuous mode [ 1025.753859][T30586] syzkaller0: entered allmulticast mode [ 1025.763951][T30586] tipc: Resetting bearer [ 1025.787444][T30604] tipc: Resetting bearer [ 1025.996601][T30623] __nla_validate_parse: 78 callbacks suppressed [ 1025.996618][T30623] netlink: 45 bytes leftover after parsing attributes in process `syz.4.6672'. [ 1028.029757][T30604] tipc: Disabling bearer [ 1028.041653][T30605] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6669'. [ 1028.051838][T30605] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6669'. [ 1028.082915][T10482] tipc: Node number set to 2096335325 [ 1028.130411][T30631] netlink: 'syz.0.6673': attribute type 1 has an invalid length. [ 1028.138678][T30631] netlink: 'syz.0.6673': attribute type 1 has an invalid length. [ 1028.279478][T30639] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1028.311292][T30638] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1028.331770][T30643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6676'. [ 1028.348959][T30645] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6676'. [ 1028.399509][T30645] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6676'. [ 1028.463976][T30651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6679'. [ 1028.502584][T30651] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6679'. [ 1028.676270][T30667] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6685'. [ 1028.798988][T30679] netlink: 'syz.2.6686': attribute type 1 has an invalid length. [ 1029.273640][ T13] bond7 (unregistering): (slave bridge5): Releasing backup interface [ 1029.282109][ T13] bridge5 (unregistering): left promiscuous mode [ 1029.288710][ T13] bridge5 (unregistering): left allmulticast mode [ 1029.351009][ T13] .`¹ (unregistering): Released all slaves [ 1029.365865][ T13] bond1 (unregistering): Released all slaves [ 1029.382983][ T13] bond2 (unregistering): Released all slaves [ 1029.404649][ T13] bond3 (unregistering): Released all slaves [ 1029.423772][ T13] bond0 (unregistering): Released all slaves [ 1029.450749][ T13] bond4 (unregistering): Released all slaves [ 1029.467911][ T13] bond5 (unregistering): Released all slaves [ 1029.484075][ T13] bond6 (unregistering): Released all slaves [ 1029.511572][ T13] bond7 (unregistering): Released all slaves [ 1029.560271][T30673] macvtap1: entered promiscuous mode [ 1029.565824][T30673] macvtap1: entered allmulticast mode [ 1029.571547][T30673] veth1_vlan: entered allmulticast mode [ 1029.598230][T30674] macvtap2: entered promiscuous mode [ 1029.603693][T30674] macvtap2: entered allmulticast mode [ 1029.649079][T30689] bond0: entered promiscuous mode [ 1029.654251][T30689] bond_slave_0: entered promiscuous mode [ 1029.664129][T30689] bond_slave_1: entered promiscuous mode [ 1029.684631][T30689] batadv0: entered promiscuous mode [ 1029.704037][T30689] debugfs: 'hsr1' already exists in 'hsr' [ 1029.734515][T30689] Cannot create hsr debugfs directory [ 1029.753340][T30689] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1029.772287][T30689] bond0: left promiscuous mode [ 1029.778991][T30689] bond_slave_0: left promiscuous mode [ 1029.785014][T30689] bond_slave_1: left promiscuous mode [ 1029.796728][T30689] batadv0: left promiscuous mode [ 1029.832973][ T13] tipc: Disabling bearer [ 1029.844709][ T13] tipc: Left network mode [ 1030.069016][T30707] mac80211_hwsim hwsim73 ÿ: renamed from wlan1 (while UP) [ 1030.090167][T30707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6697'. [ 1030.121460][T30707] netlink: 'syz.3.6697': attribute type 1 has an invalid length. [ 1030.178858][T30711] netlink: 'syz.3.6697': attribute type 1 has an invalid length. [ 1030.659456][ T5905] IPVS: starting estimator thread 0... [ 1030.680373][T30730] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1030.775716][ T13] hsr_slave_0: left promiscuous mode [ 1030.789304][ T13] hsr_slave_1: left promiscuous mode [ 1030.796088][T30731] IPVS: using max 30 ests per chain, 72000 per kthread [ 1030.851139][T30738] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1030.899742][T30739] sctp: [Deprecated]: syz.4.6706 (pid 30739) Use of int in max_burst socket option deprecated. [ 1030.899742][T30739] Use struct sctp_assoc_value instead [ 1031.683216][ T12] smbdirect: ib_dev[syz2] removed [ 1032.228186][T30755] syzkaller0: entered promiscuous mode [ 1032.256303][T30755] syzkaller0: entered allmulticast mode [ 1032.402298][T30780] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1032.412681][T30780] __nla_validate_parse: 5 callbacks suppressed [ 1032.412720][T30780] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6717'. [ 1032.429125][T30780] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6717'. [ 1034.660790][ T13] IPVS: stop unused estimator thread 0... [ 1040.856288][T23396] Bluetooth: hci0: command 0x041b tx timeout [ 1043.258195][ T1713] block nbd4: Possible stuck request ffff888027fa7000: control (read@0,1024B). Runtime 150 seconds [ 1043.269306][ T1713] block nbd4: Possible stuck request ffff888027fa71c0: control (read@1024,1024B). Runtime 150 seconds [ 1043.280578][ T1713] block nbd4: Possible stuck request ffff888027fa7380: control (read@2048,1024B). Runtime 150 seconds [ 1043.291756][ T1713] block nbd4: Possible stuck request ffff888027fa7540: control (read@3072,1024B). Runtime 150 seconds [ 1051.096175][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 1054.140556][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1057.196894][T21191] IPVS: starting estimator thread 0... [ 1057.202674][T30796] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20257 [ 1057.301829][T30795] bond1 (unregistering): Released all slaves [ 1057.308623][T30799] IPVS: using max 28 ests per chain, 67200 per kthread [ 1057.340762][T30807] netlink: 544 bytes leftover after parsing attributes in process `syz.1.6724'. [ 1057.357984][T30807] netlink: 'syz.1.6724': attribute type 1 has an invalid length. [ 1057.368671][T30807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6724'. [ 1057.382067][T30811] netlink: 'syz.1.6724': attribute type 1 has an invalid length. [ 1057.393797][T30812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6725'. [ 1057.418040][T30811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6724'. [ 1057.584101][T30821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6727'. [ 1057.623876][T30824] bridge_slave_1: entered promiscuous mode [ 1057.667053][T30824] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6729'. [ 1057.818565][T30831] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6732'. [ 1057.846430][T30832] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6732'. [ 1057.897054][T30836] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6734'. [ 1058.048608][T30850] x_tables: duplicate underflow at hook 1 [ 1058.212598][T30860] netlink: 'syz.2.6739': attribute type 11 has an invalid length. [ 1058.289519][T30864] xt_hashlimit: size too large, truncated to 1048576 [ 1058.431310][T30858] syzkaller0: entered promiscuous mode [ 1058.443876][T30858] syzkaller0: entered allmulticast mode [ 1058.466304][T30861] tc_dump_action: action bad kind [ 1058.552941][T30882] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6746'. [ 1060.376136][T23396] Bluetooth: hci1: command 0x0405 tx timeout [ 1060.882688][ T30] audit: type=1800 audit(1777128770.723:13): pid=30891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6751" name="memory.events" dev="tmpfs" ino=332 res=0 errno=0 [ 1060.927118][ T30] audit: type=1804 audit(1777128770.753:14): pid=30894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.6751" name="/newroot/62/memory.events" dev="tmpfs" ino=332 res=1 errno=0 [ 1060.953955][T30897] netlink: 'syz.2.6750': attribute type 11 has an invalid length. [ 1061.195236][T30917] netlink: 'syz.2.6756': attribute type 21 has an invalid length. [ 1061.407537][T30927] sctp: [Deprecated]: syz.4.6760 (pid 30927) Use of int in max_burst socket option. [ 1061.407537][T30927] Use struct sctp_assoc_value instead [ 1062.079643][T30983] syzkaller1: entered promiscuous mode [ 1062.085350][T30983] syzkaller1: entered allmulticast mode [ 1062.112434][T30987] netlink: 'syz.4.6779': attribute type 21 has an invalid length. [ 1062.143756][T30988] Can't find ip_set type  [ 1062.168918][T30987] netlink: 'syz.4.6779': attribute type 4 has an invalid length. [ 1062.186222][T30987] netlink: 'syz.4.6779': attribute type 5 has an invalid length. [ 1062.371800][T31004] __nla_validate_parse: 11 callbacks suppressed [ 1062.371825][T31004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6781'. [ 1062.707406][T31018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6789'. [ 1062.986438][T31040] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6795'. [ 1063.692833][T31088] bond2: entered promiscuous mode [ 1063.719891][T31088] bond2: entered allmulticast mode [ 1063.749111][T31088] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1063.762451][T31103] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6810'. [ 1063.774916][T31103] netlink: 'syz.0.6810': attribute type 1 has an invalid length. [ 1063.807405][T31103] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1063.887905][T31103] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1063.920252][T21169] IPVS: starting estimator thread 0... [ 1064.016163][T31110] IPVS: using max 24 ests per chain, 57600 per kthread [ 1064.189689][T31119] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6816'. [ 1064.211200][T31119] netlink: 'syz.0.6816': attribute type 7 has an invalid length. [ 1064.236068][T31119] netlink: 'syz.0.6816': attribute type 8 has an invalid length. [ 1064.273512][T31119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6816'. [ 1064.283984][T31133] bridge2: entered promiscuous mode [ 1064.295230][T31133] bridge2: entered allmulticast mode [ 1064.339661][T31128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1064.751608][T31161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1064.780503][T31161] netlink: 294 bytes leftover after parsing attributes in process `syz.0.6827'. [ 1064.795001][T31161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1064.865051][T31166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6828'. [ 1065.315716][T31188] netlink: 'syz.3.6832': attribute type 1 has an invalid length. [ 1065.344586][T31188] bond1: entered promiscuous mode [ 1065.352615][T31188] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1065.364896][T31188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6832'. [ 1065.374264][T31188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6832'. [ 1065.406278][T31188] bond1: (slave bridge1): making interface the new active one [ 1065.414886][T31188] bridge1: entered promiscuous mode [ 1065.423345][T31188] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1065.887020][T31209] vlan3: entered promiscuous mode [ 1065.900492][T31209] geneve1: entered promiscuous mode [ 1065.913265][T31209] vlan3: entered allmulticast mode [ 1065.927755][T31209] geneve1: entered allmulticast mode [ 1065.934721][T31216] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20000 [ 1066.009432][T31220] netlink: 'syz.4.6841': attribute type 1 has an invalid length. [ 1066.649000][T31250] macvtap1: entered promiscuous mode [ 1066.660740][T31250] vlan0: entered promiscuous mode [ 1066.668597][T31250] macvtap1: entered allmulticast mode [ 1066.674755][T31250] vlan0: entered allmulticast mode [ 1066.683129][T31250] veth0_vlan: entered allmulticast mode [ 1066.936838][T31265] tipc: Enabled bearer , priority 0 [ 1067.073146][T31265] syzkaller0: entered promiscuous mode [ 1067.079001][T31265] syzkaller0: entered allmulticast mode [ 1067.087025][T31265] tipc: Resetting bearer [ 1067.122819][T31261] tipc: Resetting bearer [ 1071.408605][T31261] tipc: Disabling bearer [ 1071.425847][T31294] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1071.439147][T31294] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1071.449362][T31294] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1071.587083][T23396] Bluetooth: hci5: command 0x0406 tx timeout [ 1071.705436][T31306] bond0: entered promiscuous mode [ 1071.722396][T31306] bond_slave_0: entered promiscuous mode [ 1071.745111][T31306] bond_slave_1: entered promiscuous mode [ 1071.785242][T31306] batadv0: entered promiscuous mode [ 1071.800380][T31313] x_tables: unsorted underflow at hook 2 [ 1071.807738][T31306] debugfs: 'hsr1' already exists in 'hsr' [ 1071.815856][T31306] Cannot create hsr debugfs directory [ 1071.831557][T31306] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1071.853993][T31306] bond0: left promiscuous mode [ 1071.869748][T31306] bond_slave_0: left promiscuous mode [ 1071.884304][T31306] bond_slave_1: left promiscuous mode [ 1071.914099][T31306] batadv0: left promiscuous mode [ 1072.093700][T31327] __nla_validate_parse: 7 callbacks suppressed [ 1072.093724][T31327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6871'. [ 1072.111295][T31326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6872'. [ 1072.244995][ T200] bond0: (slave bond_slave_0): interface is now down [ 1072.298028][ T200] bond0: (slave bond_slave_1): interface is now down [ 1072.371328][T31343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6875'. [ 1072.399646][ T200] bond0: now running without any active interface! [ 1072.911701][T31370] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6883'. [ 1072.967492][T31372] bond5: option mode: invalid value (133) [ 1072.975843][T31372] bond5 (unregistering): Released all slaves [ 1073.081279][T31379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6886'. [ 1073.187409][T31388] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6885'. [ 1073.235566][T31386] netlink: 'syz.4.6887': attribute type 1 has an invalid length. [ 1073.273954][T31388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1073.287569][T31386] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6887'. [ 1073.313650][T31388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1073.342296][ T1713] block nbd4: Possible stuck request ffff888027fa7000: control (read@0,1024B). Runtime 180 seconds [ 1073.353422][ T1713] block nbd4: Possible stuck request ffff888027fa71c0: control (read@1024,1024B). Runtime 180 seconds [ 1073.367040][ T1713] block nbd4: Possible stuck request ffff888027fa7380: control (read@2048,1024B). Runtime 180 seconds [ 1073.379470][ T1713] block nbd4: Possible stuck request ffff888027fa7540: control (read@3072,1024B). Runtime 180 seconds [ 1073.426381][T31388] bond0 (unregistering): Released all slaves [ 1073.474741][T31396] syzkaller0: entered promiscuous mode [ 1073.484388][T31396] syzkaller0: entered allmulticast mode [ 1073.500784][T31403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6891'. [ 1073.569037][T31406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6890'. [ 1074.204967][T31448] netlink: 'syz.2.6901': attribute type 10 has an invalid length. [ 1074.967167][T31501] bridge4: entered promiscuous mode [ 1074.974220][T31501] bridge4: entered allmulticast mode [ 1075.000014][T31509] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6920'. [ 1075.097560][T31513] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 1075.228573][T31523] ±ÿ: renamed from team_slave_1 (while UP) [ 1075.341810][T31534] 8021q: VLANs not supported on gre0 [ 1075.760705][T31562] IPv6: NLM_F_CREATE should be specified when creating new route [ 1076.304248][T31597] syzkaller1: entered promiscuous mode [ 1076.315050][T31597] syzkaller1: entered allmulticast mode [ 1076.403686][T31604] netem: change failed [ 1076.715766][T31601] netlink: zone id is out of range [ 1076.750358][T31601] netlink: zone id is out of range [ 1076.759580][T31601] netlink: zone id is out of range [ 1076.768868][T31601] netlink: zone id is out of range [ 1076.774145][T31601] netlink: zone id is out of range [ 1076.780540][T31601] netlink: zone id is out of range [ 1076.788704][T31601] netlink: zone id is out of range [ 1076.806134][T31601] netlink: set zone limit has 4 unknown bytes [ 1076.893050][T31620] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1077.049275][T31631] tipc: Failed to remove unknown binding: 66,1,1/3786607715:3337585667/3337585669 [ 1077.153575][T31630] netlink: 'syz.4.6957': attribute type 10 has an invalid length. [ 1077.187237][T31630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.214037][T31630] bridge_slave_1: left allmulticast mode [ 1077.239985][T31630] bridge_slave_1: left promiscuous mode [ 1077.261680][T31630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.321121][T31630] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1077.369701][T31635] bond0: option lp_interval: invalid value (0) [ 1077.376451][T31635] bond0: option lp_interval: allowed values 1 - 2147483647 [ 1077.389175][T31635] bond0 (unregistering): Released all slaves [ 1077.401480][T31653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1077.451640][ T48] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xca [ 1077.463611][T31655] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1077.579707][T31660] __nla_validate_parse: 6 callbacks suppressed [ 1077.579731][T31660] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6964'. [ 1077.870199][T31669] delete_channel: no stack [ 1077.909377][T31671] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 1078.034720][T31680] netlink: 'syz.0.6968': attribute type 1 has an invalid length. [ 1078.043002][T31680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6968'. [ 1078.052603][T31680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6968'. [ 1078.066729][T31680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6968'. [ 1078.076350][T31680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6968'. [ 1078.184675][T31684] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.6969'. [ 1078.268874][T31689] netlink: 'syz.4.6972': attribute type 1 has an invalid length. [ 1080.347869][T31649] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1080.894957][T31717] netlink: 576 bytes leftover after parsing attributes in process `syz.4.6979'. [ 1081.010626][T31731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6983'. [ 1081.165202][T31743] netlink: 'syz.4.6986': attribute type 11 has an invalid length. [ 1081.240873][T31746] tipc: Started in network mode [ 1081.261614][T31746] tipc: Node identity , cluster identity 4711 [ 1081.277396][T31746] tipc: Failed to set node id, please configure manually [ 1081.310066][T31746] tipc: Enabling of bearer rejected, failed to enable media [ 1081.391439][T31756] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6991'. [ 1081.467179][T31757] blkio.reset_stats is deprecated [ 1081.514862][T31758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6990'. [ 1081.539934][T31761] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1081.613822][T31771] netlink: 'syz.1.6992': attribute type 2 has an invalid length. [ 1081.782965][T31771] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1081.816051][T23396] Bluetooth: hci4: command 0x0406 tx timeout [ 1081.847594][T31771] bond4 (unregistering): Released all slaves [ 1081.921734][T31790] netlink: 'syz.3.6999': attribute type 1 has an invalid length. [ 1082.097492][T31794] ip6t_rpfilter: unknown options [ 1082.583894][T31824] syzkaller0: entered promiscuous mode [ 1082.590225][T31824] syzkaller0: entered allmulticast mode [ 1082.627683][T31824] xt_hashlimit: size too large, truncated to 1048576 [ 1082.674567][T31830] netlink: 'syz.2.7011': attribute type 4 has an invalid length. [ 1082.747650][T31834] x_tables: duplicate underflow at hook 2 [ 1083.390674][T31850] __nla_validate_parse: 3 callbacks suppressed [ 1083.390700][T31850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7014'. [ 1083.408060][T31850] openvswitch: netlink: Flow actions attr not present in new flow. [ 1085.819444][ T5210] udevd[5210]: worker [26221] /devices/virtual/block/nbd4 timeout; kill it [ 1085.830524][ T5210] udevd[5210]: seq 29387 '/devices/virtual/block/nbd4' killed [ 1087.610503][ T48] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22 [ 1087.840229][T31889] lo speed is unknown, defaulting to 1000 [ 1087.857350][T31897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7025'. [ 1087.868632][T31889] lo speed is unknown, defaulting to 1000 [ 1087.876938][T31897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7025'. [ 1087.902174][T31901] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7024'. [ 1087.933411][T31889] lo speed is unknown, defaulting to 1000 [ 1087.941705][T31903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7027'. [ 1087.970707][T31889] smbdirect: ib_dev[sqz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1088.025468][T31889] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1088.098995][T31889] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1088.170561][T31889] infiniband sqz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1088.277433][T31889] lo speed is unknown, defaulting to 1000 [ 1088.290589][T31889] lo speed is unknown, defaulting to 1000 [ 1088.321021][T31889] lo speed is unknown, defaulting to 1000 [ 1088.338774][T31889] lo speed is unknown, defaulting to 1000 [ 1088.366753][T31889] lo speed is unknown, defaulting to 1000 [ 1088.392606][T31889] lo speed is unknown, defaulting to 1000 [ 1088.422771][T31889] lo speed is unknown, defaulting to 1000 [ 1088.443930][T31889] lo speed is unknown, defaulting to 1000 [ 1088.484181][T31889] lo speed is unknown, defaulting to 1000 [ 1088.512786][T31889] lo speed is unknown, defaulting to 1000 [ 1088.586896][T31923] syzkaller1: entered promiscuous mode [ 1088.592627][T31923] syzkaller1: entered allmulticast mode [ 1088.611979][T31922] syzkaller0: entered promiscuous mode [ 1088.619390][T31922] syzkaller0: entered allmulticast mode [ 1088.679083][T31927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1089.316347][T31970] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7048'. [ 1089.723332][T31997] Can't find ip_set type hash:ipÌ [ 1089.829773][T32012] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 1089.857037][T32008] vcan1: entered promiscuous mode [ 1089.873275][T32008] vcan1: entered allmulticast mode [ 1089.969009][T32018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7062'. [ 1090.151799][T32027] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 1090.184653][T32029] Cannot find del_set index 49151 as target [ 1090.276839][T32034] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.7068'. [ 1091.011435][T32054] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7073'. [ 1091.065548][T32058] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1091.089909][T32058] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1091.279849][T32067] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1091.305036][T32069] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7078'. [ 1091.622726][T32083] bond5: (slave bond_slave_1): Device is not our slave [ 1091.630276][T32083] bond5: option active_slave: invalid value (bond_slave_1) [ 1091.641475][T32083] bond5 (unregistering): Released all slaves [ 1091.746348][T32084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7083'. [ 1091.928337][T32096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1091.941860][T32096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7086'. [ 1091.966698][T32096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7086'. [ 1092.103986][T32101] syzkaller0: entered promiscuous mode [ 1092.124531][T32101] syzkaller0: entered allmulticast mode [ 1092.901742][T32153] tipc: Started in network mode [ 1092.907067][T32153] tipc: Node identity ac14140f, cluster identity 4711 [ 1092.914255][T32153] tipc: New replicast peer: 255.255.255.255 [ 1092.921885][T32153] tipc: Enabled bearer , priority 10 [ 1092.937535][T32152] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1093.083630][T32156] netlink: 27 bytes leftover after parsing attributes in process `syz.0.7103'. [ 1093.092824][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f6be400: rx timeout, send abort [ 1093.381535][T32166] netlink: 'syz.1.7106': attribute type 3 has an invalid length. [ 1093.397332][T32166] netlink: 'syz.1.7106': attribute type 3 has an invalid length. [ 1093.414754][T32169] netlink: 'syz.4.7108': attribute type 2 has an invalid length. [ 1093.592930][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f6be400: abort rx timeout. Force session deactivation [ 1094.063510][T10482] tipc: Node number set to 2886997007 [ 1094.123767][T32213] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1094.386609][T32222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7125'. [ 1094.414051][T32223] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7125'. [ 1094.631196][T32230] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7126'. [ 1094.882149][T32247] netlink: 'syz.0.7132': attribute type 10 has an invalid length. [ 1094.950920][T32247] team0: Device ipvlan1 failed to register rx_handler [ 1095.175821][T32258] netlink: 'syz.1.7135': attribute type 11 has an invalid length. [ 1095.210166][T32261] syzkaller1: entered promiscuous mode [ 1095.223033][T32261] syzkaller1: entered allmulticast mode [ 1095.541899][T32281] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.7141'. [ 1095.576322][T32281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7141'. [ 1095.625013][T32286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7143'. [ 1095.680150][T32286] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7143'. [ 1095.716893][T32286] geneve2: entered promiscuous mode [ 1095.732321][T32286] geneve2: entered allmulticast mode [ 1096.240451][T32315] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7154'. [ 1096.277738][T32315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7154'. [ 1096.302200][T32319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7155'. [ 1096.465678][T32324] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1096.566447][T32331] xt_NFQUEUE: number of total queues is 0 [ 1096.631282][T32333] xt_hashlimit: size too large, truncated to 1048576 [ 1096.747654][T32337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.833597][T32337] bridge_slave_0 (unregistering): left allmulticast mode [ 1096.864488][T32337] bridge_slave_0 (unregistering): left promiscuous mode [ 1096.906739][T32337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.753100][T32367] netlink: 'syz.4.7171': attribute type 1 has an invalid length. [ 1097.944277][T32367] bond5: entered promiscuous mode [ 1097.957672][T32367] bond5: entered allmulticast mode [ 1097.968275][T32367] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1098.008382][T32368] macvlan2: entered promiscuous mode [ 1098.013743][T32368] macvlan2: entered allmulticast mode [ 1098.047880][T32368] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1098.394043][T32383] vlan0: entered promiscuous mode [ 1098.403244][T32383] bridge0: entered promiscuous mode [ 1098.502239][T32385] netlink: 'syz.1.7176': attribute type 1 has an invalid length. [ 1099.213622][T32428] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1100.048569][T32469] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1100.168747][T32480] netlink: 'syz.1.7205': attribute type 1 has an invalid length. [ 1100.193095][T32480] __nla_validate_parse: 10 callbacks suppressed [ 1100.193116][T32480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7205'. [ 1100.226097][T32480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7205'. [ 1100.553761][T32504] sctp: [Deprecated]: syz.1.7213 (pid 32504) Use of int in maxseg socket option. [ 1100.553761][T32504] Use struct sctp_assoc_value instead [ 1101.113699][T32519] netlink: 51 bytes leftover after parsing attributes in process `syz.1.7220'. [ 1101.158002][T32519] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7220'. [ 1101.284442][T32529] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7223'. [ 1101.293678][T32529] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7223'. [ 1101.889573][T32538] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 1102.390708][T32550] syzkaller0: entered promiscuous mode [ 1102.413866][T32550] syzkaller0: entered allmulticast mode [ 1102.937529][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 1102.969028][T32580] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7238'. [ 1103.160188][T32587] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7239'. [ 1103.423230][ T1713] block nbd4: Possible stuck request ffff888027fa7000: control (read@0,1024B). Runtime 210 seconds [ 1103.434289][ T1713] block nbd4: Possible stuck request ffff888027fa71c0: control (read@1024,1024B). Runtime 210 seconds [ 1103.445876][ T1713] block nbd4: Possible stuck request ffff888027fa7380: control (read@2048,1024B). Runtime 210 seconds [ 1103.458751][ T1713] block nbd4: Possible stuck request ffff888027fa7540: control (read@3072,1024B). Runtime 210 seconds [ 1103.744011][T32616] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20004 [ 1103.995039][T32570] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7235'. [ 1104.295696][T32633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7248'. [ 1104.418743][T32640] netlink: zone id is out of range [ 1104.474585][T32640] netlink: zone id is out of range [ 1104.521242][T32639] netlink: set zone limit has 4 unknown bytes [ 1104.530114][T32640] netlink: zone id is out of range [ 1104.572368][T32640] netlink: zone id is out of range [ 1104.625688][T32640] netlink: zone id is out of range [ 1104.650108][T32640] netlink: zone id is out of range [ 1104.674644][T32640] netlink: zone id is out of range [ 1105.022277][T32656] sctp: [Deprecated]: syz.4.7255 (pid 32656) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1105.022277][T32656] Use struct sctp_sack_info instead [ 1105.268965][T32651] syzkaller0: entered promiscuous mode [ 1105.317763][T32651] syzkaller0: entered allmulticast mode [ 1105.838969][T32677] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1105.879727][T32682] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1106.719085][T32685] RDS: rds_bind could not find a transport for ::8001:0:20:0, load rds_tcp or rds_rdma? [ 1106.737825][T32685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7261'. [ 1108.722568][T32683] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1109.374441][T32696] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7263'. [ 1109.968439][T32721] netlink: 'syz.1.7268': attribute type 64 has an invalid length. [ 1110.053945][T32725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7269'. [ 1110.106932][T32725] veth1_macvtap: left promiscuous mode [ 1110.118014][T21191] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1110.134884][T32727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7270'. [ 1110.157357][T32727] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7270'. [ 1110.237414][ T48] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1110.251864][T32727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7270'. [ 1110.274229][ T48] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1110.290580][T32733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7272'. [ 1110.306482][T32727] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7270'. [ 1110.321920][T13090] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1110.369928][T13090] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1110.417158][T32733] netlink: 'syz.1.7272': attribute type 1 has an invalid length. [ 1110.556620][ T5905] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1110.633250][T32744] netlink: 'syz.4.7275': attribute type 1 has an invalid length. [ 1110.663969][T32747] syzkaller1: entered promiscuous mode [ 1110.692197][T32747] syzkaller1: entered allmulticast mode [ 1110.780667][T32756] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20004 [ 1110.832597][T32757] set match dimension is over the limit! [ 1111.264097][ T301] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7279'. [ 1111.280652][ T309] syzkaller1: entered promiscuous mode [ 1111.309494][ T309] syzkaller1: entered allmulticast mode [ 1111.368739][ T309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7282'. [ 1111.563223][ T316] netlink: 'syz.3.7283': attribute type 1 has an invalid length. [ 1111.600572][ T316] netlink: 'syz.3.7283': attribute type 4 has an invalid length. [ 1111.888291][ T331] netlink: 'syz.4.7288': attribute type 21 has an invalid length. [ 1111.908722][ T337] netlink: 'syz.3.7290': attribute type 1 has an invalid length. [ 1111.933525][ T337] __nla_validate_parse: 4 callbacks suppressed [ 1111.933543][ T337] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7290'. [ 1111.951731][ T331] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7288'. [ 1111.969620][ T337] netlink: 658 bytes leftover after parsing attributes in process `syz.3.7290'. [ 1111.988181][ T337] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7290'. [ 1112.022705][ T340] IPv6: NLM_F_CREATE should be specified when creating new route [ 1112.206216][ T343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7292'. [ 1112.236285][ T343] netlink: 176 bytes leftover after parsing attributes in process `syz.1.7292'. [ 1112.248236][ T343] netlink: 'syz.1.7292': attribute type 5 has an invalid length. [ 1112.431565][ T358] openvswitch: netlink: IPv4 tun info is not correct [ 1113.195395][ T390] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.7309'. [ 1113.352603][ T397] netlink: 'syz.0.7310': attribute type 39 has an invalid length. [ 1113.529102][ T409] xt_hashlimit: size too large, truncated to 1048576 [ 1113.681282][ T397] hsr_slave_1 (unregistering): left promiscuous mode [ 1114.027904][ T427] netlink: 'syz.0.7318': attribute type 1 has an invalid length. [ 1114.036926][ T427] netlink: 184 bytes leftover after parsing attributes in process `syz.0.7318'. [ 1114.049858][ T427] NCSI netlink: No device for ifindex 131092 [ 1114.324505][ T432] lo speed is unknown, defaulting to 1000 [ 1114.908421][ T459] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7324'. [ 1115.298978][ T457] syzkaller1: entered promiscuous mode [ 1115.307252][ T457] syzkaller1: entered allmulticast mode [ 1115.775792][ T488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7333'. [ 1116.754270][ T537] sctp: [Deprecated]: syz.3.7343 (pid 537) Use of int in max_burst socket option deprecated. [ 1116.754270][ T537] Use struct sctp_assoc_value instead [ 1116.804499][ T539] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1116.820769][ T538] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1116.888313][T13088] nci: nci_rx_work: unknown MT 0x7 [ 1116.902705][ T549] validate_nla: 3 callbacks suppressed [ 1116.902724][ T549] netlink: 'syz.4.7345': attribute type 1 has an invalid length. [ 1117.209945][ T552] bond6: (slave gretap1): making interface the new active one [ 1117.230684][ T552] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 1117.430887][ T572] netlink: 'syz.4.7349': attribute type 1 has an invalid length. [ 1117.561583][ T572] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1117.589929][ T572] bond7: (slave bond8): making interface the new active one [ 1117.590711][ T580] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7349'. [ 1117.611716][ T572] bond7: (slave bond8): Enslaving as an active interface with an up link [ 1117.634446][ T578] bond7: (slave gretap2): Enslaving as a backup interface with an up link [ 1117.649076][ T580] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1117.857427][ T5852] Bluetooth: hci1: link tx timeout [ 1117.864080][ T5852] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1117.965380][ T5852] Bluetooth: hci1: link tx timeout [ 1117.973832][ T5852] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1117.991315][ T5852] Bluetooth: hci1: link tx timeout [ 1117.997905][ T5852] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1118.260234][ T5852] Bluetooth: hci1: link tx timeout [ 1118.266319][ T5852] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1118.340777][ T5852] Bluetooth: hci1: link tx timeout [ 1118.345980][ T5852] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1119.419546][ T5852] Bluetooth: hci1: link tx timeout [ 1119.424767][ T5852] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1119.681855][ T537] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1119.842980][ T5852] Bluetooth: hci1: link tx timeout [ 1119.848687][ T5852] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1119.876882][ T5852] Bluetooth: hci1: link tx timeout [ 1119.882077][ T5852] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1119.902504][ T5852] Bluetooth: hci1: command 0x0405 tx timeout [ 1120.116222][ T597] netlink: 176 bytes leftover after parsing attributes in process `syz.0.7354'. [ 1120.147903][ T601] syzkaller1: left promiscuous mode [ 1120.157800][ T602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7353'. [ 1120.167114][ T597] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7354'. [ 1120.183642][ T601] syzkaller1: left allmulticast mode [ 1120.404317][ T611] netlink: 216 bytes leftover after parsing attributes in process `syz.4.7359'. [ 1120.490931][ T611] netlink: 'syz.4.7359': attribute type 2 has an invalid length. [ 1120.518133][ T611] netlink: 'syz.4.7359': attribute type 1 has an invalid length. [ 1120.653335][ T622] gretap2: entered promiscuous mode [ 1120.669097][ T622] batman_adv: batadv0: Adding interface: gretap2 [ 1120.694730][ T622] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1120.781162][ T622] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 1120.994681][ T643] netlink: 'syz.2.7366': attribute type 8 has an invalid length. [ 1121.772305][ T680] netlink: 8023 bytes leftover after parsing attributes in process `syz.0.7371'. [ 1123.852077][ T635] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1124.231432][ T704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7379'. [ 1124.268149][ T708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7377'. [ 1124.388110][ T707] bond4: option mode: invalid value (133) [ 1124.416324][ T707] bond4 (unregistering): Released all slaves [ 1125.036891][ T741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7387'. [ 1125.128065][ T745] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7389'. [ 1125.137574][ T741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7387'. [ 1125.157205][ T743] syzkaller1: entered promiscuous mode [ 1125.177458][ T743] syzkaller1: entered allmulticast mode [ 1125.360695][ T748] netlink: 'syz.0.7391': attribute type 2 has an invalid length. [ 1125.389175][ T749] netlink: 'syz.0.7391': attribute type 2 has an invalid length. [ 1125.391868][ T748] netlink: 'syz.0.7391': attribute type 2 has an invalid length. [ 1125.807430][ T763] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7397'. [ 1125.820709][ T763] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1125.862923][ T740] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1125.871252][ T740] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1126.074349][ T768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7400'. [ 1126.312890][ T784] [ 1126.315289][ T784] ====================================================== [ 1126.322352][ T784] WARNING: possible circular locking dependency detected [ 1126.329423][ T784] syzkaller #0 Not tainted [ 1126.333864][ T784] ------------------------------------------------------ [ 1126.340919][ T784] syz.1.7402/784 is trying to acquire lock: [ 1126.346845][ T784] ffffffff8ff61938 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 1126.356390][ T784] [ 1126.356390][ T784] but task is already holding lock: [ 1126.363780][ T784] ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 1126.373395][ T784] [ 1126.373395][ T784] which lock already depends on the new lock. [ 1126.373395][ T784] [ 1126.383822][ T784] [ 1126.383822][ T784] the existing dependency chain (in reverse order) is: [ 1126.392862][ T784] [ 1126.392862][ T784] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 1126.400810][ T784] _raw_spin_lock_bh+0x36/0x50 [ 1126.406282][ T784] nr_rt_ioctl+0x40c/0xf90 [ 1126.411261][ T784] sock_do_ioctl+0x101/0x320 [ 1126.416413][ T784] sock_ioctl+0x5c6/0x7f0 [ 1126.421303][ T784] __se_sys_ioctl+0xfc/0x170 [ 1126.426461][ T784] do_syscall_64+0x15f/0xf80 [ 1126.431643][ T784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.438092][ T784] [ 1126.438092][ T784] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 1126.446124][ T784] _raw_spin_lock_bh+0x36/0x50 [ 1126.451462][ T784] nr_rt_ioctl+0x215/0xf90 [ 1126.456425][ T784] sock_do_ioctl+0x101/0x320 [ 1126.461576][ T784] sock_ioctl+0x5c6/0x7f0 [ 1126.466494][ T784] __se_sys_ioctl+0xfc/0x170 [ 1126.471646][ T784] do_syscall_64+0x15f/0xf80 [ 1126.476819][ T784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.483259][ T784] [ 1126.483259][ T784] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 1126.491135][ T784] __lock_acquire+0x15a5/0x2cf0 [ 1126.496571][ T784] lock_acquire+0x106/0x350 [ 1126.501636][ T784] _raw_spin_lock_bh+0x36/0x50 [ 1126.506957][ T784] nr_rt_device_down+0xbe/0x860 [ 1126.512354][ T784] nr_device_event+0x137/0x150 [ 1126.517672][ T784] notifier_call_chain+0x1ad/0x3d0 [ 1126.523346][ T784] __dev_notify_flags+0x16d/0x310 [ 1126.528920][ T784] netif_change_flags+0xe8/0x1a0 [ 1126.534434][ T784] dev_change_flags+0x130/0x270 [ 1126.539830][ T784] dev_ioctl+0x7b4/0x1150 [ 1126.544727][ T784] sock_do_ioctl+0x23e/0x320 [ 1126.549871][ T784] sock_ioctl+0x5c6/0x7f0 [ 1126.554756][ T784] __se_sys_ioctl+0xfc/0x170 [ 1126.559927][ T784] do_syscall_64+0x15f/0xf80 [ 1126.565088][ T784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.571551][ T784] [ 1126.571551][ T784] other info that might help us debug this: [ 1126.571551][ T784] [ 1126.581802][ T784] Chain exists of: [ 1126.581802][ T784] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 1126.581802][ T784] [ 1126.595662][ T784] Possible unsafe locking scenario: [ 1126.595662][ T784] [ 1126.603143][ T784] CPU0 CPU1 [ 1126.608532][ T784] ---- ---- [ 1126.613939][ T784] lock(nr_neigh_list_lock); [ 1126.618655][ T784] lock(&nr_node->node_lock); [ 1126.625984][ T784] lock(nr_neigh_list_lock); [ 1126.633223][ T784] lock(nr_node_list_lock); [ 1126.637847][ T784] [ 1126.637847][ T784] *** DEADLOCK *** [ 1126.637847][ T784] [ 1126.646017][ T784] 2 locks held by syz.1.7402/784: [ 1126.651069][ T784] #0: ffffffff8fde4240 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 1126.659933][ T784] #1: ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 1126.669991][ T784] [ 1126.669991][ T784] stack backtrace: [ 1126.675916][ T784] CPU: 0 UID: 0 PID: 784 Comm: syz.1.7402 Not tainted syzkaller #0 PREEMPT(full) [ 1126.675946][ T784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1126.675963][ T784] Call Trace: [ 1126.675974][ T784] [ 1126.675984][ T784] dump_stack_lvl+0xe8/0x150 [ 1126.676024][ T784] print_circular_bug+0x2e1/0x300 [ 1126.676050][ T784] check_noncircular+0x12e/0x150 [ 1126.676078][ T784] __lock_acquire+0x15a5/0x2cf0 [ 1126.676115][ T784] ? __lock_acquire+0x6b5/0x2cf0 [ 1126.676146][ T784] ? dsa_user_netdevice_event+0x495/0x2850 [ 1126.676172][ T784] ? packet_notifier+0x121/0xf70 [ 1126.676200][ T784] ? nr_rt_device_down+0xbe/0x860 [ 1126.676224][ T784] lock_acquire+0x106/0x350 [ 1126.676253][ T784] ? nr_rt_device_down+0xbe/0x860 [ 1126.676273][ T784] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1126.676301][ T784] ? nr_rt_device_down+0xbe/0x860 [ 1126.676318][ T784] _raw_spin_lock_bh+0x36/0x50 [ 1126.676343][ T784] ? nr_rt_device_down+0xbe/0x860 [ 1126.676363][ T784] nr_rt_device_down+0xbe/0x860 [ 1126.676379][ T784] ? nr_device_event+0x12f/0x150 [ 1126.676413][ T784] nr_device_event+0x137/0x150 [ 1126.676442][ T784] notifier_call_chain+0x1ad/0x3d0 [ 1126.676470][ T784] __dev_notify_flags+0x16d/0x310 [ 1126.676493][ T784] ? __pfx___dev_notify_flags+0x10/0x10 [ 1126.676517][ T784] ? __dev_change_flags+0x5a0/0x7e0 [ 1126.676540][ T784] ? __pfx___dev_change_flags+0x10/0x10 [ 1126.676562][ T784] ? full_name_hash+0x92/0xe0 [ 1126.676583][ T784] netif_change_flags+0xe8/0x1a0 [ 1126.676605][ T784] dev_change_flags+0x130/0x270 [ 1126.676628][ T784] dev_ioctl+0x7b4/0x1150 [ 1126.676659][ T784] sock_do_ioctl+0x23e/0x320 [ 1126.676688][ T784] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1126.676711][ T784] ? do_futex+0x333/0x420 [ 1126.676738][ T784] sock_ioctl+0x5c6/0x7f0 [ 1126.676764][ T784] ? __pfx_sock_ioctl+0x10/0x10 [ 1126.676790][ T784] ? __fget_files+0x2a/0x420 [ 1126.676809][ T784] ? __fget_files+0x3a0/0x420 [ 1126.676828][ T784] ? __fget_files+0x2a/0x420 [ 1126.676850][ T784] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1126.676875][ T784] ? __pfx_sock_ioctl+0x10/0x10 [ 1126.676899][ T784] __se_sys_ioctl+0xfc/0x170 [ 1126.676925][ T784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.676947][ T784] do_syscall_64+0x15f/0xf80 [ 1126.676973][ T784] ? trace_irq_disable+0x3b/0x140 [ 1126.676998][ T784] ? clear_bhb_loop+0x40/0x90 [ 1126.677022][ T784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.677041][ T784] RIP: 0033:0x7f6d4b39cdd9 [ 1126.677060][ T784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1126.677080][ T784] RSP: 002b:00007f6d4c1fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1126.677101][ T784] RAX: ffffffffffffffda RBX: 00007f6d4b616090 RCX: 00007f6d4b39cdd9 [ 1126.677117][ T784] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 000000000000000a [ 1126.677130][ T784] RBP: 00007f6d4b432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1126.677145][ T784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1126.677157][ T784] R13: 00007f6d4b616128 R14: 00007f6d4b616090 R15: 00007ffcb88392a8 [ 1126.677183][ T784] [ 1127.082312][ T784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7402'. [ 1130.936604][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1133.497698][ T1713] block nbd4: Possible stuck request ffff888027fa7000: control (read@0,1024B). Runtime 240 seconds [ 1133.509145][ T1713] block nbd4: Possible stuck request ffff888027fa71c0: control (read@1024,1024B). Runtime 240 seconds [ 1133.521143][ T1713] block nbd4: Possible stuck request ffff888027fa7380: control (read@2048,1024B). Runtime 240 seconds [ 1133.532891][ T1713] block nbd4: Possible stuck request ffff888027fa7540: control (read@3072,1024B). Runtime 240 seconds