last executing test programs: 7.680570439s ago: executing program 3 (id=3631): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$inet(0x2, 0xa, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x6, 0x9, &(0x7f00000004c0)={{0x2, @rand_addr=0x1, 0xdffd, 0x2, 'nq\x00', 0x8, 0x3, 0x3}, {@private=0xa010300, 0xfffd, 0x3, 0x8, 0x0, 0x2000040}}, 0x44) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f0000000040)) socket$kcm(0x2, 0xa, 0x73) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001440)=ANY=[@ANYBLOB="140000003000010300000000000000000101"], 0x114}], 0x1}, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=@newtaction={0x224, 0x30, 0xa20, 0x70bd26, 0x25dfdbfd, {}, [{0x210, 0x1, [@m_ipt={0x168, 0x6, 0x0, 0x0, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0xb1, 0x6, {0xb16d, 'security\x00', 0x3, 0x8, "05c2f28c2450a898adf01b2fcf326abde36fbbe2033fa62a0bfc4c82f5431b098efd8caeec2808d6858c65782d390b312c83cba37d72588aa60c90f30ee850522f83fa53367bb53d752be714e95785412f69a65d7ab89bb16bfed046da2511128041b34d23cb51eaafedc2235149aca449493b82380303f3bd6fb177b9644844bff5c0f8b8f5c0"}}]}, {0x81, 0x6, "3d0155179af52c218360f63b587b119bad958e13fdbef37483f1f2edf990373f1d7af2b17f247597099a981c0d86da1867e12c5be84d558a41eeaa0b3557e239bac0e1583360beff1ca128be336489bdfc2a0e7d3aed52c86121b03ee2a4749a645e0e58b3a42c39d715850ac9db2347e25ec5f4a6640029c120edb0bb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ipt={0xa4, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x79, 0x6, "b45c3e50999e0ff8b7cd267bd965c50b99594ae946a060b65c67ba37c0725f48dfc5713acdb126ac4fea463fdc8a72f0d8febaebccde90bfc89a2328790a2e1f3e4a8ec650f40dd2685113c4394824707942abe9ad835a1f6128ba736e738d0124901995773000610ee900ae766d905ff4cba66c2c"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x224}}, 0x40c1) recvmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/123, 0x7b}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000004c0)=""/15, 0x20}], 0x5}, 0xb}], 0x2, 0x10, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, r5, 0x25, 0x0, @val=@iter={0x0}}, 0x20) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r9, 0x400442c8, &(0x7f0000000340)={r3, 0x7ff, 0x2, "8d98e00f962fc50173f98d8cc0479ad05d36cf3a6fbff51193e71f4f675e7a52504f42e7df3f39a731c5691f1e67fe6434c26b3871a787414516f1593a4ee85df6508ac73e80bcf39791050a533d4d9b010d1d0e479617bf"}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000", 0x3}], 0x1, 0x0, 0x0, 0x7400}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 7.474420523s ago: executing program 0 (id=3634): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x8}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x7}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) pselect6(0x40, &(0x7f0000000140)={0x8, 0x3, 0x8001, 0x0, 0x9b3, 0xd6c7, 0xffffffffffffffff, 0x1}, &(0x7f0000000180)={0x5, 0x5, 0x3, 0x1, 0x4, 0x4, 0xfffffffffffffff7, 0x9}, &(0x7f00000001c0)={0x8e6, 0x4, 0xfffffffffffffff1, 0x9, 0x1, 0x6, 0x1, 0xb8}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0xb6]}, 0x8}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r3, 0x400, 0x7ff, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x9e9c}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048085}, 0x2000c881) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x3, 0xfffffffe, @udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000540), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000580)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000600)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r5, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x84) r9 = socket$can_bcm(0x1d, 0x2, 0x2) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) sendmsg$can_bcm(r9, &(0x7f0000000840)={&(0x7f0000000700), 0x10, &(0x7f0000000800)={&(0x7f0000000780)={0x233d0f82cdc018c2, 0x10, 0x8, {}, {r10, r11/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x1, 0x1}, 0x4, 0x0, 0x0, 0x0, "3a6f8447980c1309"}}, 0x48}, 0x1, 0x0, 0x0, 0x8414}, 0x20000000) r12 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000880)={0x0, 0x5}, &(0x7f00000008c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r12, 0x84, 0x1a, &(0x7f0000000900)={r13, 0xcf, "84590bc1b40bc31c01409ff6f005485effd26d5d4580a919d7ae7b157b91c1f5a8a1afd9db0dd5b3f25bdfa0d8abc602933113fb04a48f55416b5da6211774b50e23957db797a79b17909e1e412e61dbb5163e7a58bdb789fcb3a3b9738399dd71cd5e82e5325e9d0d1b6b18fbba5a9c298300610bd812e339599ab5a19279a437369723cd367030264b6c57e7bb521b596ac40369d620475ca5929f9dbf5b2a7c0441d430d1aad5ff3a0c50fdec97f2baf1e9a11f9c79d1d554ca32f8bcd61faf0b03e46d1f59e7689bbab97254a3"}, &(0x7f0000000a00)=0xd7) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9, 0x50, r4, 0x44289000) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x5c, r14, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000001) ioctl$FIONCLEX(r4, 0x5450) openat$cgroup_devices(r12, &(0x7f0000000c00)='devices.deny\x00', 0x2, 0x0) r16 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000c40)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r16, &(0x7f0000000c80), 0x2, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000000cc0)="ea1ecde7ccea4a895144045e9e25f8824959699ae98d7ffc5de9a79b6d4146", 0x1f) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000d80)={'veth1_to_batadv\x00', &(0x7f0000000d00)=@ethtool_coalesce={0xf, 0x7, 0x6b, 0x8001, 0x7f, 0x442, 0xf8000000, 0xd5e, 0xa, 0x280, 0x9, 0x40, 0x1, 0x9, 0x80, 0x4, 0x2, 0x3, 0x1000, 0xffffff7f, 0x406, 0xd5, 0x8}}) 7.111256271s ago: executing program 3 (id=3638): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="35030200000000001c00128009000100626f6e6400000a804004a095aa5e395c084fbd50ea5af911398708557cf0f2f00a09a4d0c609f0c74c65da003931777a097f4160cfd2a4d21a5930311f9de761e9882ae7ee15aed3", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x20008080) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000480)={0x1, &(0x7f0000000300)=[{0x8, 0x8f, &(0x7f0000000200)="71aae0c5f2935524efc681ac8b531628fba9898f766b289f61be298c7440ce33f038d9f49b070ba3f9c897813b071078901d82a856536f9e18655b215d4b7018792c759c9aaa5d7ead5c979bd8f18532ab1fdaa7bd2ddc6e6964a0039b28ec954aeb977920febf7d35db54a41d277008b82c84d33e8f24fbdfd1ad3baa0f5a60a8bc2ae3cb68658e85bf620a3b6b30", 0x1}]}) socket(0x40000000015, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x10, 0x0, @void}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002180)=@newtaction={0x1108, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x10f4, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24}, {0x4, 0xa}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ctinfo={0x1040, 0x3, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x861c}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0x7, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0x60, 0x2001, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0xfffffffd, 0xffffffffffffffff, 0x0, 0x4}, 0x2}}]}, {0x14, 0x6, "45a41945c0e03655cddc1f8fcb542e5f"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x1108}}, 0x2000a804) 6.871897452s ago: executing program 0 (id=3641): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x82a0}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x1}, @IFLA_GRE_IGNORE_DF={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000850}, 0x24048060) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r1, 0x0, 0x0, 0x800) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x7b, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xfff}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt(0xffffffffffffffff, 0x400000000000003a, 0x1, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000001200002000128008000100687372001400028008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000300)="10f57711e482400ae311758319d20e5f1f2b3aaba2dfa22b68415c2c5706ac6e79c363e0a4f623c32fbfd81f89708c128637", 0x32}, {&(0x7f0000000d80)="4d3f747d03e47cafd587f0a0dc280bb3ecf8849be78c1d2e7eb8ed7ab20918edbcd8e9852f3878fedef8d891ff768c3633d11e54698101358bcc1bd45942c7bcf679c984bc57d67d1dff8be430005345dff8bb39f7ee138d22b04dd6288fc8567dba3e1578cf5f274b73520bf8b4414f21bb888088865f593b27b947ef2082139ec80e8b5b00", 0x72}, {&(0x7f0000000780)="e3e7f9e1bed6300fe6f2312a883e0639139d9de7320d86bfa8d2e891201484e6ca56c3e49d317203ea65afc6c0137c551e9d73b4b37c5c3e5c29ce4c208bd201181d79354c5dc652e89a48147e2ba6e54fc1ef1ac74d45bd0a7bf61ab24ef93b8d38a98a71d36785c1f2b5b02329997a8d2e347984fa6fe179fc2de66fb0c1b7e85ae534f6373a43f50bff28ba17941a014910e530afeb26237e188011303d12cbe0cc5298d1a3bb6bb428d0ce887f90ec8dac5a9b30d6af312b790f11472cb88d8c", 0xc2}, {&(0x7f0000000880)="5137bdd05f514167fe5294fca8a40a13d29f1fbe9fa834816fd98b8450b53f0c23c50dbdb32dfe76382c95c89cf0404c6f3e43cdede5f116f84d89aed18e54c40d07d22edc9d0b9f82c55d132ac06bbd703ec4ce50a45c04845d87db4d6f78e6ffc326d4af3ad8a53e1707af60424c2214225c589cbd4b1fa30529e7bced65e6e308eee529256518e3c023af82ec99bad927c8592cb07f0a06a4184effe8bab49d5c36ee786fa9e544fdce9efc6a6e801da16a47ba955f82e5a2dedcd5d291", 0xbf}, {&(0x7f0000000940)="518b172b6a2e5c79937297d352b760b7a798d67da2d833d6354d123e88f714312c3006908e042a024b71ea0c07fe3bb145e7d3f585fc258e2bff6551103b4027f97360ea522e9ab8b8cb14c3f179469e76314e6236be16d3da849d85cc15c6bf98a35a873551afee9278ff03bf57fadf9ef743e365777516246e599c67cc83a20f61215667f34c8319a5822ad01c8003819cb398f5e21ca0c5e8f85bc0be024f36800747926f91a60ed4b275ff403d7c7e65e9280a37cd8a8b59ba58f78e7135dde5d92543aa79de2ce32eab0de8fa81d1fd708426d495a6a40aa863aa70eae80dba8b5739bd113fb8b6ebe61ac83a5c05", 0xf1}, {&(0x7f0000000a40)="8fbe692bc82462e107", 0x9}, {&(0x7f0000000a80)="8bd0f7805573ff3ac17c508a850e5ec74d7a5a634cf6005d91b0eccc1fb07eb3", 0x20}, {&(0x7f0000000ac0)="ebfcce7e1925f63c2d06d53cd13ca7262142ddfd6690841b757dda66c072389c8419af96a01c5a33dfd50baa21a0f6a0475903ef51a112b048ba29b389938130761c4d5231d5239482b57c01ece216bcda98658fc1ba7345529b91fbb54b521f13b1eef60502b21ab33897a332d33adb3068af1f0411a61fdaea22543dd4e0edf400f334b19d6d8c026e935d220ed6293bc802481c2b5f8af18222064a3a3193e79e42636352274afba566cdb403cacaca3c3cf7038cfe72836f1af0ccb0ad9a7c24a999f2b9cfcb14211baeafb75d5ee75bbd1b981b052664cc1a8b6131b543af", 0xe1}], 0x8}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000140)="b527ce144a9e865255e6f85f4d18156225c3396c992b47cedd740a6a6c3c82aba6b56bd441a6dd0856d664fb959853821ce9917ed023550816ba4b97dded7e7c500000007c41c7e219", 0x49}, {&(0x7f0000000c40)="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", 0x104}], 0x2, 0x0, 0xffffffffffffff13}}], 0x2, 0x2090) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0xfffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x400}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044010}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 6.824115754s ago: executing program 3 (id=3642): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0xc, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r9 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r9, 0x6a, 0x5, 0x20000000, 0x3) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r11, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xfffffee6, 0x8f, 0x1000000}, {0xc}}]}, 0x54}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c00000019000100000000000000000080201000001100050000000008000200"], 0x6c}}, 0x40000) 5.782812508s ago: executing program 0 (id=3646): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f00000010c0)={@in6={{0xa, 0x4e23, 0x0, @mcast2, 0x8}}, 0x0, 0x0, 0x11b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_emit_ethernet(0x16, &(0x7f00000003c0)={@random="96ce655f2954", @remote, @val={@void, {0x8100, 0x4, 0x0, 0x3}}, {@mpls_mc={0x8848, {[], @generic="a03aec16"}}}}, 0x0) socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) close(0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000240)=""/145}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0xa, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000009980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000099c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000009ac0)={0x0, 0x0, &(0x7f0000009a80)={0x0}, 0x1, 0x0, 0x0, 0x20000041}, 0x40) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x54, r7, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x865e, 0x6c}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4041}, 0x40080) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0xd0, 0x270, 0xd0, 0x340, 0x340, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x44}, @private1, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@local, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0xffffffff], 'tunl0\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x340}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @private1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xffffff00], 'wg1\x00', 'team_slave_1\x00', {0xff}, {}, 0x2f, 0x6b, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000017, 0x8010, r0, 0xe06d3000) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000010780)=@o_path={&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x18}, 0x18) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000107c0)={'wg2\x00', 0x0}) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000010940)={&(0x7f0000010800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x8, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x8, 0x3}]}, @union={0xe, 0x6, 0x0, 0x5, 0x0, 0x6, [{0xe, 0x0, 0xfffffff8}, {0x9, 0x1, 0xffffffff}, {0xa, 0x5, 0x2}, {0xc, 0x4, 0x3}, {0xa, 0x2, 0x6d}, {0x1, 0x5, 0x2}]}]}, {0x0, [0x0, 0x5f, 0x30, 0x5f, 0x2e, 0x5f]}}, &(0x7f00000108c0)=""/109, 0x88, 0x6d, 0x0, 0x2, 0x10000}, 0x28) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000010980)=@bloom_filter={0x1e, 0x1, 0x6, 0xffffffff, 0x2000, r8, 0x6, '\x00', r9, r10, 0x0, 0x1, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r11}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r11}, 0x1e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000011a00)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x7, [@var={0xd, 0x0, 0x0, 0xe, 0x4, 0x1}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0xa, 0x2}, {0xa, 0x3}, {0x1, 0x1}, {0xb, 0x5}, {0x2, 0x4}, {0x10, 0x5}, {0xc, 0x3}]}, @volatile={0x10}, @const={0xb}, @volatile={0x3, 0x0, 0x0, 0x9, 0x1}, @float={0xc, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x0, 0x61, 0x30, 0x2e, 0x6f]}}, &(0x7f0000010a00)=""/4096, 0xa3, 0x1000, 0x0, 0x2}, 0x28) 5.769813863s ago: executing program 3 (id=3647): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x2b, 0x1, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket(0x10, 0x803, 0x0) r1 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) accept$alg(r3, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000280)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x3000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", ""]}, 0xfffffdb0}, 0x1, 0x0, 0x0, 0x400c004}, 0xc000) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltaction={0x14, 0x31, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x2c, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x24000080) r6 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r9, @ANYBLOB="100001800400", @ANYRES8=r6], 0x28}}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20335}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x3c}}, 0x20008080) 4.90759984s ago: executing program 2 (id=3650): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000200)={'batadv_slave_1\x00', {0x2, 0x4e22, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x52, 0xffffffffffffffff, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r5) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000002d40)=ANY=[@ANYBLOB="180000006a0001002abd7000fb"], 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000010) pread64(r3, &(0x7f0000002840)=""/4096, 0x1000, 0x4) 4.871540378s ago: executing program 0 (id=3651): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @address_reply={0x2a}}}}}, 0x0) 4.716356068s ago: executing program 3 (id=3652): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000010b300)={0x0, 0x0, "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", "fff48d66a5de808174c8f119945d93afc43587c20ed91f48e1467725e150f36efe0b1eb7bb6e251e00054b8b376b9587f8f2ba3799fcc0227731faa4f30423602b893230aac9ca125b19875fd3f980d265525f846fd4c5b9ff1c930d9cf37bea6d66f291abdbcf5c31a26fcdcc84ebf70ca6983e15c1693062dff807231d15942da96092cdeb8ece7eaad8cca5466233aeeb8e6ae83f8ffda6285d72c79cb386f5d565ecb4625f0cb001c5bb15c760c96d2a7610e4365f061be1ea4e7e16d373b03edabca51bfb45812b8b573e2fd0d92dff08e493b870ebeda0c9c5eab5611179a823ef092f4a833c267fef222e575aba9ca346e7e6cdd59d0181e1a97f77f32a2a980176db4420962de54cdc0de78b246c81f19f4576c9fafcb9c028859018319884c9039da6162232ddce2c52f52a9f807bfcc1ce067517c9a39743f37aca5a64b95f1556b6fe08d49c847f4d522e0d2689348d7316e9261cbd059f58175b747eca036e2b64377c5023b1c2292d23389c9a64be84b16919ced8a8f4aa6a87b939e6356830be66f968021ea56405b9d82aa13123eeaba2f6e8d004491968ec3998daeb0d622fca9287cbc4e7ecc5d8e7ef531b36e82f1014baa9cc505a5f206f22fa7777204100b726ab0d792bbf0618aeca4b514d4fc53920b90d7c4d13902d9830230b07e74e783b7a9014ab8def051a2a5af985cd4ed68bea0859953794df8e4c27e99c460b5c92b868f30d6bf6049a0de2f0a1f45af47222571e43b1aa5f1f063ea9629f9b5624ceb9a0c1b75c30c8f4392b3894679eab363ec2034fbd26abc2307713276e4b5429b567a035a6e0fb91ce0d9cd2a656dbcd5bcb018751229b8d2f130df48ab2183551633307db90fc40d9dc8e73467df3750402b5972c2f565355d3e3a3b16e655a10138932627974717f3228523697f30cf623c9c530420b5a4bfbee0107bb7d47a3fdc9ebce3f991c4ac0d31c2ee7259568b862d6323eda81fff6054460b3838775513c526cc607611038e150a4e0af2ece2a8fbfedaf79409736df1bce7012ec5e53df80c17bbc0218639b058d77d6ae422dc83182c56b07debc58927d509b4700cfb95ea5be559e315e48a261ed46e1377ec6801c35de57b2feebe6758580ca6086ee1cdfaa67039af7194d8d3b1feab96e01d3310553b8fe6876bcd18d1e9a596c1a5e0a5ac9f2a91645e8c570cc35d234df945fd079fc07a952bc69d43c28aa68b38dacbda38c2c7489d7ef866bd85ed7f34b387415c6447783a495785bc1a257f7df37acaa531523da59bb7b12fc9d038e548dc633d486d5e9275b0b33788c4475f7d257cb3fe7be12d727237883e7fb15245f4c099c8b75250a987e0ad65792e6860ecfd83e3f84a76f5e2e8b2b7c20bbc30ca5ad3dc940f747490ce2ced3323048971751ab6486e18212b640163577bbcbba5a56a8107b93659715439b952ef2a0197219863dc6eb69a637f968975b2fd9cdc7b9cd16519f495a8898535a623ecd99caff2aa8ff4eb120963e8d47ae9a7e4a77da8b0fa2de67c5c8b6b0ff64fbf0d84c2fadb18436c4925d7827f3eea4ae3d99a6f1db465d514457293429e0a0d598fadd5ceca89eacb1dcf69446ee1a5eeccbc4e2358e13242d13552478208e507c01694ff17d0bea4341af9983a5a6b505e26fdacb284b48a40fa4c7643e393434885701e123a8907e37d88f448eccc7196de5fa53f5b39c8a3f59cae61b03f0b55c8ce3791ae96c888bf40fd90d2a12b665222e12222858dec3899b3f05521e3d81162d6ff2932ddf3d18d9f19df7608ba2729ca75287e83e8ffee414ff62890a5377a068e398c24dbdabac53f80525dff3f4187c420b4c1c2abf6fb9d4ad9ba0d428c905f7a2432909b6677eea222b7d130b9760881b1c2133829de0262f5bf9067af3eeaaa76cdf9c77f8ddc7967eb644530d6a0a16b3152ea479f7ac4c4a6c9337d74f24e9be3e8b3860b3ef61bc0b7752905ad88f133231a6561a340af90854cf5ed94fdca1604dfe0e937af3c055cfba68b86739dd7861dc09069d04b10fcfd518f1101110b9704576fb43d29905ad855eab34e01264bb5f83f7f71b7884bdfa116fdccca323f517b8a1da673b65cb22d15afcbf7ee4e34c9766d0ec61bf60b83852ec7be3d3f0bf269ecd5ae0e470559d03591aef3813b5a51d6694cab856e25a5bb92aaf0cb713e6df2923c2d514f003168eee30415794033e3a7f13f4b832339d24b2697ba7553b8f7598b9404d12f20afd3fec4f0bd78999ae32ba42cebf6f1d420a2dd3624ab8149cf2e9b54fae8a6f81103f8222370d27cf67aff1cfca90d45673bdeb0e963cd426851a1126614e29ee6d4346d7de93c3f1bdfa870ba1fa8fa889b0aa71beee04b4b35571e2dfde00b7b7a26916fdfd728e6bcc0c857d6becee2ccb3af088d0f8ab4c424ab6c0b05f4e615668e2a56e579b196b93e309720749e091ee5a4fa67112550744499f30a08201f9b7781a90d9302ae33dce1a144e66e602c0947dd03c0c86f2442e3b84609d3520f378b82465d8028e693c7237c0ace9992711a2fa33ea2dae379d51354f0e56b4ee6681f902e31ad91e62f86a1dfffa76bb35666d10684c357916e64455c57c902c04439441e293d53b577b82e49e2a1e2968e5c827910fbd5db56a66c1a52a48bdd2465eb77725fd3d2df0176e07435dfc2dce8b052cf447a2e5e747d3dfa290e7aa7d501082c226ef3af06645cb32964cfc3e5d7de51c3a0e93a20282abc5abe32d0e9e153310ac5bebd6cd88a823963ee10fdac4090d21115f92e87603a242fade697f7c45f5b9d6818e0fd5480da0e1a143585eb85824e3e673644b975d12c295b16ada7c0c5d5c13a7797f7c236146b587ad0bcdf180b3f737d27c88435e649c9e836e41bd95c219472d9471aeee9039efb4683771083cef9b1d6ba1be4d54879599f14f62b26c32aec0121cb179a9061f23d3691e7fa440345366dc7edf5908cccd3efdc90c96324f3831d1a95081ec2be1629bc2784690f47edbff8e6331df0d032fbc5cc7143f0fc51fec5437ffd0b92688db3afb122e3006a65c3784b591310cc58540e8ffd418846b85481d373de60dc6a83c0273012dfa6385b882a22486d80bb09f5f08cd03c0448dd8990e2de6233a071dc6fc0a76454f98e7a5b876ee36aa2cb8fef0dcf0663eeac18d50911a3ea6025f07df37d0b8fe428b5377c035064a1bb3df3085e0030cd54707838083b51e8ed17d403bf1a830361f8d7844b2fa3c7699fd05316223c1a9537e4fec6c962fba83084c83caa67cf6c817d135a8465081a305eb4662a2674c32aca7a32d07ac4757a7fc0c624f43131668f2c397f854fe4c5b4ebf5583ba4dde3e74d6d909dac4f00d3ad1b6afd666f19dc9391090ba642a2cb4b8c8b52ac498b575d4d941ed5d6b946466755fd476a0439e80cabb09a2b5585e0b984d05a0d2f3ba1cfe417512bbb9ffe6196e4ae81674227ad227ef5a7d775aee8312998ea3e1ea87ecad6a1a6efc157333c4666fd5966b558c9d9a60055af3ec22e44c93f5e4d38701f4629f745be3d823c446e17aa838cee22bc068284e42cf9e158431d9d850b61db3ec6756c173d28763aed1802a35921f98e92f3b2d691709795154cc5d6f871e77034998ab5d9819d92763eb4e5cb96ce9db24735989db939fee8996a9b8148e06ffa8a686eb5faaad39c55ff541590d0884b8a5b3baa485e1cc67745d1e7970a2c6457e00538592d10bfeac42db125a474b975ab22781ff4a21845582d6b8ee78c82b6c671b4fd63457e811ec3c0b6ecb905010d7c61327877b86ef4949bda49e2428215a99935eff29847f2cfb87e93c3f3e1e51ec4e1f4a40f33997614d5c34c3b2d2c3084e6d5f1127f2d5c1f88b1c6ac6e2833c243953b0baa6d467257c1479d55c178923f3c8418318ab760494c779a287742ffc5d8f498effb2e61fdba8d3fc6b9c506fca019b3cb37bfcd78e29648bc75f8e7693cbf0876b8e581bb559a007f53738df5c591239fa85d35dbdc9a4bc4789874eff58c4e8f13cdf77f713ec3b2b53905a9391e27add0e69ee1ad922b288d60bcc62b78280cce376c50f2c965536e5eeac4db517ebf5eda1d173ad1960438331b6a8537a5f7cfc2f47a98902cea0a736f1287b40e99b26b87efe3efa6b3058ad7ef23d808995b9906a121a12e7f70ce328636b9b92eee20de1b6f99d71846f19ef16194c08c2f303d591c3012f4c5923a2fef5b0319002d172de1698eedf877cd0049723a9dc68a99a3a7879d55a46eab1840dc951fd455531e085b72f2dba232171f9681376d2c7744609da345c875a486ba7785f03212db847cb025173c58bd48163903f1d9e03e985f944d288dcd3c23bf93bc61dd6e3e5b950baa561e9245ac4a8ec081dce0cd5511f6818172b62aa1245393e912a0ac1a2b87b15896e222e7017c3bb532ec487a106407874fba99230118803ab0275955df85cd1839ffcf8269e0ae4496474bf4877f6b20ba11b4b8fd0b765add8b59c3184ae76282a82c9901604d793543b4685fde6a0f21bb7582b2b03e07fd7139d7296d2b79bb2b069092fd210ef0d5c7e837c3e1b72d7f4abc02117f94b9d065d1ddc5b5be274db22ed1f7906b467babfeba6420555fad652045b80359619731766cbc989ac205a11390093b99a4702fad005aed889c74d81209a7de840725ab1b18548f98648d67992ab9bb1f7646f8aec0a7ed5157c14f833938a8315df978e05efbf2656c4010c16ecb4e19a84fb5ffa322516bdeb0d1722052c04b393d2a09ccbc2ef8c4728bf3a5bd338f17749e66a76b5e7b2d9dded300b547637500553b0059207d802713c5e2198f392041d2aeffeff5209bb7e595138d704691cc13188ec333e3b92ef1ba353b8a8a28d50adaf1ebfdac9b884155b7291e2e5fc42551fa7b06f76fde81a0faeacd0c3f59c22ca09ec089d895efd1f211ac8fd90ded02b9ddc829fa38d9dff3b8093f57be5afe71fabfb021865039d2e09152c6ce5b9fde512725e0379c89085e516ef2683863278b3c0959048bd7dd492829ca828b8f36d763348a2b6639b6da340dc4347eb74b3b59552a9ead46e43dd2bb4c8d64da085f95d5c914c1890573c67ebbe7ad2077ec4196d4076851ae03db226f0b6dce5b16152d1e00c7e118b19a3d77b0819a976001e77e7909367b2bbd6591e3090b26cc729ad3dad5f50c14a72153a398a4cf4d81ae4abc5ac3699e7b5ca76e9d67aa9a4613b2d1543013d40f5d275f21351f1054a699e3d0160dc924ad3ad4ef3652b334948ece7f42d1e2ee410aa84e45c6020246a1f90182b98b258d2398afa1a26da6fa89a82849b2905632d71502647214fe723bbee1d6db6a12e6cab1717349696d32585e1"}) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @address_reply={0x2a}}}}}, 0x0) 3.968262601s ago: executing program 2 (id=3655): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xd9, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000a80)={r3, 0x18, "132bf2b2631e4a669e5ab545f4df3af85ad7e43ec2b12936"}, &(0x7f0000000180)=0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r4, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f00000006c0)}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000740)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000ac0)={0x12, 0x3, {0x2, @struct={0x7ff, 0xc2e7}, 0x0, 0x0, 0x100000001, 0x5, 0x7, 0x2, 0x10, @usage=0x3, 0x32, 0x30000000, [0x4, 0x10, 0x54, 0x6, 0x9, 0x3]}, {0x8000, @struct={0x6, 0x2}, 0x0, 0x1, 0xf335, 0x9, 0x3, 0x4, 0x10, @struct={0x800, 0x38}, 0x4, 0xe2c1, [0x1, 0x8001, 0x4, 0x9, 0x3beb, 0xfffffffffffffff7]}, {0x8000000000000000, @usage=0x7ff, 0x0, 0x8, 0x8, 0x3, 0xe, 0xffff, 0x92, @struct={0x10000, 0x4f8}, 0x1, 0x800, [0x8000000000000001, 0x1800, 0xfffffffffffffffc, 0x9, 0x1, 0xfffffffffffffff6]}, {0x3, 0x2, 0x8681}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000004380)={&(0x7f0000003380)=""/4096, 0x1004000, 0x0, 0xe3f2, 0x3}, 0x20) sendmmsg$unix(r8, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40044}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="24000000000000000100000001"], 0x48}}], 0x2, 0x4) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000002380)={{r5}, r6, 0xa, @unused=[0x9, 0x8, 0x0, 0x5], @devid=r7}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000800)={{r0}, r6, 0x10, @inherit={0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000020000000000000001800000000000000800000000000000200004000000000009000000000000000800000000000000070000000000010001000000000000000000000000000000ae0b000000000000"]}, @devid}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x53, 0x2, @TCA_ETF_PARMS={0x3e, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}]}, 0x48}}, 0x4000010) 3.010936848s ago: executing program 4 (id=3659): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001e00431b000000000000000007000000", @ANYRES32, @ANYBLOB="000017000000000008000a00", @ANYRESHEX], 0x2c}}, 0x0) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a40)=@filter={'filter\x00', 0xe, 0x5, 0x0, [0x0, 0x2000000002c0, 0x2000000003ee, 0x20000000041e], 0x0, 0x0, 0x0}, 0x38c) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x14, 0x0, &(0x7f0000000080)="259a001471a76d2688a24e6588a8fb5e0af66395", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 2.964474274s ago: executing program 2 (id=3660): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x18, &(0x7f0000002840)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa0c0800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b142b7461fd777b1c012bd1baf7fa2dce0f41f2dcdb4efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00000000000000000000000000bcfd56f1375461caaa2f19935e6996c70904feeb03000000000000649a3bfbc1f39cb307b302000000000000003fcbb2c5a5"], 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/4097, 0x1001}], 0x1}, 0xb}], 0x4000000000000f1, 0x40000021, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a00000007000000010000130100000004000000080000003500000000005f002e2e0c4f3000"], 0x0, 0x3a, 0x0, 0x1, 0x401}, 0x28) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010014000000000000028c00000008000300", @ANYRES32=r7], 0x28}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x92, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ee527a", 0x5c, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@routing={0x84, 0x2, 0x1, 0x4, 0x0, [@private0]}], {{}, {}, {}, {0x8, 0x88be, 0x1}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r9, 0x2000321, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000900), r10) sendmsg$FOU_CMD_DEL(r10, &(0x7f0000000a80)={0x0, 0xfffffffffffffe40, &(0x7f0000000a40)={&(0x7f0000000000)={0x24, r11, 0x603, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x4044) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000006c0)={0x7, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000007c0)=r12, 0x4) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="100026bd7000fcdbdf2501000000050002000200000014000700fe8000000000000000000000000000bb050002000200000014000700fc0200000000000000000000000000010500040001000000050002000a00000008000600e000000214000900ff0100000000000000000000000000015af4615ea2db4804"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x80) 2.753537984s ago: executing program 4 (id=3661): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1ed99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x8002, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', r2, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8}]}}]}, 0x3c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, r4, 0x5, 0x0, @void}, 0x10) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={r6, r3, 0x4, r7}, 0x10) 2.742222039s ago: executing program 1 (id=3662): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180), 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) 2.725111771s ago: executing program 2 (id=3663): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000002b80)={0x34, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x36, 0xfffffeb2, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff2000002800000000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r7, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x44}}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r13, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) 2.380097074s ago: executing program 4 (id=3664): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000140)=@req3={0x10000, 0x1, 0x100, 0x100, 0x2, 0x0, 0x3}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000240)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES64=r4], 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001100)={'veth1_virt_wifi\x00', &(0x7f0000001080)=@ethtool_link_settings={0x4c, 0x7, 0x1, 0x4c, 0x6, 0x1, 0x6, 0x7, 0x2, 0x1, [0x66d9, 0x7, 0x400, 0x7, 0x2, 0x6, 0x9, 0x9], [0xffffffff, 0x9, 0x7330000, 0x9, 0x6, 0x8, 0x800, 0x9, 0x9f3, 0x7]}}) (async) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) 2.248019157s ago: executing program 4 (id=3665): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000200)={'batadv_slave_1\x00', {0x2, 0x4e22, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x52, 0xffffffffffffffff, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000002d40)=ANY=[@ANYBLOB="180000006a0001002abd7000fb"], 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000010) pread64(r2, &(0x7f0000002840)=""/4096, 0x1000, 0x4) 1.2106645s ago: executing program 1 (id=3666): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000007000000850000001b000000b700000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x9, 0x8, 0x5}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000480)={{0xffffffffffffffff, &(0x7f00000002c0)='GPL\x00', 0x2000, &(0x7f0000000300)={@_ha_fsid={[0x3, 0x2bb]}, {0x72, 0x3b98, 0x6, 0x7fffffff}}, 0x7f8, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x4090bc7e}, {[0x10000, 0x400, 0x8, 0x984]}, 0x8, 0x9f, &(0x7f00000003c0)=""/159}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x1f, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000020000000000000000000000185d049cb3d9e8a022c3444da7fb110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000009500000000000000185200000100000000000000000000000f5401000000000018170000", @ANYRES32=r2, @ANYBLOB="000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000852000000200000018280000", @ANYRES32=r4, @ANYBLOB="0000000009000000184b0000fcffffff0000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x79e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0xfffffffffffffeb6, &(0x7f0000000180)="6ebe5ec3140551c29c5ccf5552fc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x50, r6, 0x1, 0x0, 0x1, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) 1.148267079s ago: executing program 4 (id=3667): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}, 0x49cf75490397e68f) recvmsg$unix(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x41) sendmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="f109", 0x2}], 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8905, &(0x7f0000000340)={'ip6_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000050000000100000000010000e90032151832ce443a8f1a9670a34ff5a1bac6cf0ca200da076b4013e4c0cbde3a81b5f6915c06e3f6dc974ce6efd178caa78eb0ad65bd94ce7253eb18ace350b198dfb46b0b279aeff14c3c41ab716b8a0679e22b8dfa5552d75f92398dc5582f1f23219388665ad09251ef0713ae30ca5a31fabb4995", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x6, &(0x7f0000000580)=ANY=[@ANYBLOB="2b3c773a47d3a6f44487", @ANYRES32=r3, @ANYBLOB="0000000000000000c3001800"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0xa0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000040}, 0x4044) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000047000701ec560dbbffffffff017c000008000300"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x80) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x6, 0x400}, &(0x7f0000000000)=0x90) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095", @ANYRES64=r3, @ANYRESHEX=r3], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f00000005c0), &(0x7f0000000600)=0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x44, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x2e, 0x11, 0x0, 0x1, [@generic="e796bd6dd42541affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9f47392b70f555def59af"]}]}, 0x44}, 0x1, 0x0, 0x0, 0x42804}, 0x84) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)={0x14, 0x2f, 0x301, 0xa70bd1d, 0x25dfdbfa, {0x6}}, 0x14}}, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r11, @ANYBLOB="030d25bd7000ffdbdf25190000000c00018008000100", @ANYRES32=r7, @ANYBLOB="5800018008000100", @ANYRES32=r7, @ANYBLOB="1400020073797a5f74756e0000000000000000000800030001000000140002006d6163766c616e30000000000000000008000300000000001400020076657468300000000000000000000000740001801400020070696d7265673000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="89000000dc70434d908586806a0fa7557271c3f841f7cfdf65", @ANYRES32=r7, @ANYBLOB="14000200626f6e645f736c6176655f31000000001400020073797a6b616c6c65723000000000000008000300030000001400020076657468305f746f5f68737200000000"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x3873076ce822fbce) 1.060681026s ago: executing program 1 (id=3668): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3010a}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0xf089}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000008c0)={0x24, 0x12, 0x1, 0x70bd27, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x4, 0x31}]}, 0x24}], 0x1}, 0x4000800) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000000c0)=0x7, 0x4) 1.058293239s ago: executing program 2 (id=3669): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000008640), r1) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000008680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000008740)={0x0, 0x0, &(0x7f0000008700)={&(0x7f0000000040)={0x28, r2, 0x101, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x69, 0x6e}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000f00)="12", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 819.586658ms ago: executing program 1 (id=3670): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000001840)={{0xffffffffffffffff, &(0x7f0000001400)='\x00\xd2\x05\xee\xd9JMQ\xa4\x8f\x19\xb1\xbc\xda\xb2U\xb3\xe2\x8b\x1d\xb3\xcc\xf6w\xe7\xb0\x1f\xc6\xb2\x93\x8f|D\xb4\xc5\x7f\xf6\xb8WS\xe1\xa4\x11\xdci\xaa\x02J@\x89\x89\x97rl\xd5\xd6\xfd_\xcc\xebz\xe09\x0e|z\xe1CYq1^\xc7\xe0\x16\xbac\x1b-v\xa4\x92;\xe1\xc3t\x1d=g62\x90\xfb%\xe1z\xd2', 0x22400, &(0x7f0000001340)={@align=0xf2b, {0x5, 0x7fff, 0x10000, 0x81}}, 0x8001, &(0x7f0000001300), &(0x7f0000001280)=0x400}, {[0x6, 0xfffffffe, 0x7, 0x6]}, 0x100, 0x49, &(0x7f0000001380)=""/73}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002880), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000028c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000002a40)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000001480), 0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000014c0), &(0x7f0000001500)=0xc) socket$inet_icmp(0x2, 0x2, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f00000006c0)="38000000010006", 0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x46}, {0x0, 0x20}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52, 0x0, 0x0, 0xfffffffd}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r5, 0x1, 0x3}, 0x5f) r6 = socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) pipe(0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x42000) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x34}}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) r8 = socket$rxrpc(0x21, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000015c0)=@newlink={0x1e0, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xb, 0x4}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge_slave_0\x00'}, @IFLA_VF_PORTS={0x198, 0x18, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, '@\x00'}, @IFLA_PORT_PROFILE={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @IFLA_PORT_VF={0x8, 0x1, 0xa776}, @IFLA_PORT_PROFILE={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "979e9250b731cfddf65ce44a621487a1"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "8d32acd33f5632e54320d6977b1c8e28"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "92841b117ffc20be5ac3ca23ceafc51a"}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_VF={0x8, 0x1, 0x1}]}, {0xb4, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "2ff09e4f596952352c06d4b5c699ecdc"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a702b80815eba783228ccb31a1798603"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "6a1c7abf20bee70f0a1c2854a6ef533a"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "64dff0cec7430f3936fc1d7ff47110cb"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8581431c85a523c875b861d060c2dc7b"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "27aa2baeb9d9b03df5a5cbd7ba6c85fd"}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x80000000}]}, {0x64, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x9, 0x2, 'sit0\x00'}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "1e9c374e4513f2ac99bca5d653dde345"}, @IFLA_PORT_PROFILE={0x6, 0x2, '$\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "710edcaa31c0706a4a08f422d4ec7bf7"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "09c74c8f413249842951d216c41fc948"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x81}]}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) setsockopt$RXRPC_SECURITY_KEY(r8, 0x110, 0x1, &(0x7f0000009840)='police\x00', 0x7) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x34}}, 0x8000) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000001200)=@broute={'broute\x00', 0x20, 0x5, 0x10a6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000140], 0x0, &(0x7f0000000100), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x3741ffcafbb49a0c, 0x20, 0x88f7, 'ip6erspan0\x00', 'batadv0\x00', 'macsec0\x00', 'bond_slave_0\x00', @broadcast, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @link_local, [], 0x6e, 0x6e, 0x9e, [], [], @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x1, [{0x3, 0x0, 0xa01, 'nicvf0\x00', 'dvmrp1\x00', 'vlan0\x00', 'sit0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], @random="ebe9a662457b", [0xff, 0x0, 0x0, 0x0, 0x0, 0xe829ca0a41588001], 0xae, 0xae, 0x1de, [@mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x4, 0x2, 0x1}}}], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0xfa97, 'system_u:object_r:netutils_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x11, 0xa, 0x6002, 'veth1_to_team\x00', 'hsr0\x00', 'gretap0\x00', 'vlan0\x00', @empty, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0x11e, 0x11e, 0x196, [@stp={{'stp\x00', 0x0, 0x48}, {{0xf, {0x68, 0x10, 0x5, @random="2f6ea9559b74", [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x9, 0x7ff, 0x23, 0x0, @remote, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x4e24, 0x4e21, 0x5, 0x3, 0x3ff, 0x4, 0x4, 0x7, 0x1000, 0x47}, 0xa18, 0xa19d2c1c78c41f1d}}}, @quota={{'quota\x00', 0x0, 0x18}, {{0x1, 0x0, 0x0, {0xd73c}}}}], [], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x3, 0x25, 0x5, 0x1, 0x0, "d920054fa0b857a0b18b8067d08094d359048dd045f38ca892413eda27581226359512ed8404f8be325e567dd5454373f216dd2422cceb4d27f45d6098c37cd0"}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x2, [{0x3, 0x18, 0x8, 'veth1_macvtap\x00', 'gre0\x00', 'ip6gre0\x00', 'hsr0\x00', @broadcast, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], @remote, [0xff, 0x0, 0x0, 0xff], 0x11e, 0x19e, 0x2ce, [@quota={{'quota\x00', 0x0, 0x18}, {{0x1, 0x0, 0xc, {0x3}}}}, @rateest={{'rateest\x00', 0x0, 0x48}, {{'team_slave_1\x00', 'geneve0\x00', 0x5, 0x1, 0x8000, 0x6, 0xf9, 0x10001, {0xb}, {0x7}}}}], [@common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}, @common=@log={'log\x00', 0x28, {{0x3, "58322a7d3cff73f77d70568781379266c9cd8c086d82132fb372753743d8", 0x5}}}], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}}, {0x5, 0x54, 0x888e, 'wg1\x00', 'macvlan0\x00', 'caif0\x00', 'veth1_to_batadv\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, [0xff, 0xff, 0xff, 0xff], @link_local, [0xff, 0x0, 0xff], 0x8d6, 0x8d6, 0x906, [@among={{'among\x00', 0x0, 0x840}, {{@offset=0xc, @offset=0x420, 0x1, {[0x5, 0x5, 0x4, 0x7, 0xa, 0x3, 0x97, 0x7f, 0x1, 0x0, 0x4, 0x7, 0xfffffffa, 0x45, 0x7, 0x1, 0x9, 0xcd, 0x4, 0x8, 0x8, 0x293d, 0x77, 0x10, 0x2, 0x6, 0x0, 0x3ff, 0x4, 0x2, 0x80, 0x2, 0x1, 0xfffff001, 0x1, 0x2, 0x0, 0x0, 0x2, 0x1aa, 0x1, 0x4, 0xd, 0xe, 0x6, 0x4, 0x3, 0x0, 0x9, 0x8, 0x1000, 0x6, 0x2, 0x1, 0x94, 0x3, 0x1, 0x9e, 0x5, 0x0, 0x9, 0x7, 0x7, 0x0, 0x1, 0x9, 0x9, 0x8, 0x95c, 0x40, 0x7, 0xfc, 0x6, 0x6, 0x7a, 0x6, 0xc, 0x1a, 0x6, 0x9, 0x9, 0x52, 0x3, 0xffffffff, 0x386a, 0xa67b, 0xb2e, 0x1, 0x6, 0xba1, 0x78967e5e, 0xfffffffa, 0x1, 0x9aa2, 0x1, 0x47, 0x5, 0x0, 0x6, 0x3, 0x6, 0xa, 0x28d, 0xd93, 0x6, 0x100, 0x7, 0x7fffffff, 0x490, 0x8f, 0xfffffff0, 0x101, 0x6, 0x4, 0xfffffffc, 0x1000, 0x8, 0x6, 0x7ff, 0xe7, 0x1, 0x4, 0x3, 0x3, 0x0, 0x5, 0x81c9, 0xfffffffe, 0x3, 0x1, 0x2d9, 0x7, 0x6, 0x1, 0x3, 0x1bf, 0x5, 0x7f, 0x400, 0x7, 0xfffffff9, 0x4, 0x8, 0x4, 0xc1, 0x200, 0x29, 0x5, 0xaa, 0x8, 0x9a, 0x3f, 0x100, 0x7, 0x80000000, 0x8, 0x3, 0x0, 0xfffffffd, 0x2, 0x80000000, 0xa020, 0x0, 0xffffffff, 0x2, 0xfffffff9, 0x8, 0x40, 0x4, 0x7, 0x8c, 0x9, 0x328d, 0x30d83359, 0x200, 0x3, 0x5, 0x8, 0x4, 0x101, 0x1, 0xb5e, 0x80, 0xfffffffe, 0x9, 0x6, 0x2, 0x7ff, 0x1, 0x8, 0xff, 0x401, 0x5, 0x100, 0xf3b, 0x42, 0x8, 0xd9, 0x3, 0x3, 0xa, 0x101, 0x0, 0x207d51cb, 0xd682, 0xe, 0x2, 0xa1d6, 0x0, 0x5, 0x8, 0x1, 0x1, 0xfffff800, 0xb971, 0x8c86, 0xffff, 0x247d, 0x747, 0x9, 0x3, 0x101, 0x7, 0x9, 0x3ff, 0x1, 0x200, 0xcb6, 0x8, 0x7, 0x9, 0xd, 0x2, 0x8, 0x4c79, 0x3, 0x3ff, 0x6, 0x9, 0x0, 0x3, 0x1, 0x4, 0x9, 0x9, 0x2, 0xd24, 0x800, 0xfffffffd, 0xfffffff4, 0x6, 0xfffff6cb, 0x7, 0x1, 0x8, 0x8, 0xd2b], 0x1, [{[0x4, 0x7], @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {[0x0, 0x9, 0x8, 0x6, 0x7, 0x6, 0x0, 0x8, 0x9, 0x10000, 0x0, 0x2, 0x3, 0x7, 0x8000, 0x10001, 0x94, 0x1, 0x1, 0x8, 0x2, 0x46, 0x0, 0x7, 0x5, 0x9, 0x8, 0x4, 0x3, 0x7, 0x5, 0x9, 0x5, 0xff, 0x8001, 0xbf88, 0x9, 0x2e, 0x8, 0xa, 0x9, 0x9, 0x5, 0x3, 0x37a, 0x8, 0x8, 0x7, 0x0, 0x8b02, 0x7f, 0x101, 0xab, 0x2, 0x0, 0x7, 0xe8000, 0x4, 0x7, 0x0, 0x1, 0x6, 0x1ff, 0x8, 0x2d400000, 0x6, 0x9, 0x6, 0xa, 0xa6a7, 0x2, 0x0, 0x4, 0x4, 0x7, 0xca, 0x5, 0x8, 0x7, 0x2, 0x40, 0x5, 0x0, 0x7fff, 0x4, 0x4, 0x9, 0x6, 0x401, 0x59, 0xfffffffa, 0x3ff, 0x5, 0x0, 0x1, 0x7ab, 0x10000, 0x4b, 0x1, 0x1c, 0x8, 0x6e68a971, 0x9, 0xd41, 0x27e, 0x4, 0x1, 0xed9, 0x6, 0x10001, 0x0, 0x981, 0x7b, 0x40, 0x0, 0x18d, 0x4f, 0x9, 0x8000, 0x0, 0x92, 0x9, 0x9, 0x9, 0x1965, 0x10000, 0x0, 0x8, 0x6, 0x2, 0x2, 0x7, 0x3d04, 0x8, 0x0, 0x4, 0x2, 0xbd7, 0x3ff, 0xf1a, 0x7, 0xc, 0x81, 0x6, 0x5, 0x1000, 0x3, 0x9, 0x8001, 0x9, 0x1ff, 0x6, 0x6, 0x6, 0x0, 0x3ff, 0x75, 0x3ff, 0x0, 0x9ed, 0x8, 0x6, 0x2, 0x101, 0x6, 0x1, 0x6, 0x3, 0x80000000, 0x4, 0x5, 0x9cf, 0x800000, 0x7f, 0x4, 0xfffff801, 0x4, 0x0, 0x1, 0x7, 0x4, 0x7000, 0x11, 0xf, 0x8, 0x8, 0xff, 0x4, 0x4, 0x3, 0xb3b, 0x4, 0x5, 0x0, 0x400, 0xa5, 0x2, 0x7, 0x7, 0x5, 0x8001, 0x0, 0x1d05, 0xfff, 0xa4, 0x7, 0x1c3ab537, 0x748, 0x8, 0x401, 0x267, 0x4, 0x6, 0x2, 0x5, 0xd5, 0xb1, 0x1, 0xb2b, 0xd, 0x5, 0x0, 0x5, 0x9, 0x8, 0x54adea68, 0xfc44, 0xea, 0xcb, 0x7, 0x6, 0x114, 0x9, 0x0, 0xaf6e, 0x40, 0xfffffeff, 0x0, 0x0, 0x200, 0x9, 0x6, 0xe, 0x3, 0x5, 0xea, 0x3, 0xfffff96b, 0xf6, 0xf9d, 0xfffffff7, 0x0, 0x100, 0x7, 0x4, 0x2, 0x5], 0x2, [{[0x4, 0x10000], @broadcast}, {[0x0, 0x3], @multicast1}]}}}}], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}]}]}, 0x111e) 807.870176ms ago: executing program 0 (id=3671): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) r0 = socket(0x15, 0x80005, 0x0) sendmsg$kcm(r0, &(0x7f0000001240)={&(0x7f0000000000)=@llc={0x1a, 0x303, 0x0, 0xff, 0x40, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x80, 0x0}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x9c}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x800}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040}, 0x20044800) 704.095584ms ago: executing program 0 (id=3672): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x8000, 0x5, 0x5}}]}, 0x40}}, 0xc800) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x342}]}, 0x34}}, 0x8080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r6 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff8864", 0x0, 0xfb, 0x60006000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x189001, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x13) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xe) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r9, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) 583.345827ms ago: executing program 4 (id=3673): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r0, r3, 0x0, 0x20000000002) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e21, 0x1, @mcast1, 0x9}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000100)=0x100000, 0x4) write(r4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3, 0x1, [0x7f]}, &(0x7f0000000040)=0xa) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000080)={0xae2b, 0x8000, 0x3, 0x4, r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 457.357598ms ago: executing program 1 (id=3674): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000008d000000000000000000000010040200000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0xfffe, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x0, 0x28, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0xe0000001}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099b"}}}}}}}, 0x4e) 146.50173ms ago: executing program 1 (id=3675): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)="e8700e444d", 0x5}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xa008) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x400006}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) pwritev(r6, &(0x7f0000000640)=[{&(0x7f0000000440)="79be71", 0x3}], 0x1, 0xffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="7da33a050000000800000000002e00000000", @ANYRES32=r7, @ANYBLOB="0a00340002020202020200000400af000400af0004000101"], 0x34}}, 0x4000) 128.114926ms ago: executing program 3 (id=3676): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000002b80)={0x34, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d504"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x36, 0xfffffeb2, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff2000002800000000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r7, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x44}}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r13, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) 0s ago: executing program 2 (id=3677): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000200)={'batadv_slave_1\x00', {0x2, 0x4e22, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x52, 0xffffffffffffffff, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000002d40)=ANY=[@ANYBLOB="180000006a0001002abd7000fb"], 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000010) pread64(r2, &(0x7f0000002840)=""/4096, 0x1000, 0x4) kernel console output (not intermixed with test programs): 0 RCX: 00007faabf35e68e [ 359.142566][T15390] RDX: 000000000000000f RSI: 00007faabd5f60a0 RDI: 0000000000000004 [ 359.142577][T15390] RBP: 00007faabd5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 359.142588][T15390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.142599][T15390] R13: 00007faabf626038 R14: 00007faabf625fa0 R15: 00007ffef3832d48 [ 359.142629][T15390] [ 359.356300][ T6731] net_ratelimit: 20 callbacks suppressed [ 359.356318][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 359.493938][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 359.536149][T15403] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.2693'. [ 359.583217][T15403] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2693'. [ 359.610115][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 359.728379][T15408] bond0: Error: CAN devices cannot be enslaved [ 359.763318][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 359.788953][T15408] netlink: 1784 bytes leftover after parsing attributes in process `syz.0.2698'. [ 359.880249][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 359.890819][T15421] netlink: 'syz.2.2702': attribute type 1 has an invalid length. [ 359.933200][T15419] bond3: (slave veth0_to_bond): Releasing active interface [ 359.966426][T15425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2703'. [ 360.007110][T15416] netlink: 'syz.1.2701': attribute type 5 has an invalid length. [ 360.020195][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 360.053348][T15426] netlink: 'syz.1.2701': attribute type 5 has an invalid length. [ 360.085983][T15416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2701'. [ 360.150114][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 360.272204][ T6739] bond4: (slave bridge1): failed to get link speed/duplex [ 360.340880][T15445] netlink: 296 bytes leftover after parsing attributes in process `syz.1.2710'. [ 360.364422][T15445] sctp: [Deprecated]: syz.1.2710 (pid 15445) Use of int in max_burst socket option deprecated. [ 360.364422][T15445] Use struct sctp_assoc_value instead [ 360.392242][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 360.506785][T15454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2714'. [ 360.521334][ T6739] bond4: (slave bridge1): failed to get link speed/duplex [ 360.559273][T15458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2715'. [ 360.934091][T15478] bond5: option ad_user_port_key: invalid value (65535) [ 360.941775][T15478] bond5: option ad_user_port_key: allowed values 0 - 1023 [ 360.952665][T15478] bond5 (unregistering): Released all slaves [ 361.672234][T15525] bond4: (slave dummy0): Releasing active interface [ 361.695853][T15525] dummy0: left promiscuous mode [ 361.754597][T15525] bridge_slave_1: left allmulticast mode [ 361.780059][T15525] bridge_slave_1: left promiscuous mode [ 361.795714][T15525] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.834956][T15525] bond0: (slave bond_slave_0): Releasing backup interface [ 361.866043][T15535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2736'. [ 361.889189][T15525] bond0: (slave bond_slave_1): Releasing backup interface [ 361.913885][T15525] team0: Port device team_slave_0 removed [ 361.933530][T15525] team0: Port device team_slave_1 removed [ 361.955406][T15529] xfrm0: left allmulticast mode [ 361.980193][T15529] team0: Refused to change device type [ 362.618026][T15575] netlink: 'syz.4.2746': attribute type 12 has an invalid length. [ 362.648996][T15575] netlink: 'syz.4.2746': attribute type 13 has an invalid length. [ 363.641935][T15618] __nla_validate_parse: 4 callbacks suppressed [ 363.641953][T15618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2759'. [ 363.671934][T15611] syzkaller1: entered promiscuous mode [ 363.677547][T15611] syzkaller1: entered allmulticast mode [ 363.710483][T15612] gretap1: entered promiscuous mode [ 364.188827][T15637] netlink: 'syz.4.2763': attribute type 11 has an invalid length. [ 364.204857][T15642] netlink: 'syz.2.2765': attribute type 1 has an invalid length. [ 364.213289][T15637] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2763'. [ 364.217471][T15637] netlink: 'syz.4.2763': attribute type 1 has an invalid length. [ 364.532538][T15658] netlink: 'syz.3.2767': attribute type 5 has an invalid length. [ 364.610066][ T6743] net_ratelimit: 28 callbacks suppressed [ 364.610084][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 364.693668][T15670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2770'. [ 364.709268][T15665] xt_l2tp: invalid flags combination: 8 [ 364.806843][T15667] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2768'. [ 364.834832][T15672] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2768'. [ 364.870229][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 364.988840][T15682] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2772'. [ 365.022934][T15682] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2772'. [ 365.080533][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 365.219287][T15689] tun0: tun_chr_ioctl cmd 1074025680 [ 365.284544][T15703] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2778'. [ 365.304501][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 365.316237][T15704] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2778'. [ 365.450474][ T6739] bond4: (slave bridge1): failed to get link speed/duplex [ 365.570805][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 365.596914][T15720] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20000 [ 365.605211][T15724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2783'. [ 365.720787][ T6739] bond4: (slave bridge1): failed to get link speed/duplex [ 365.861384][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 365.908404][T15741] netlink: 'syz.4.2790': attribute type 4 has an invalid length. [ 365.990395][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 366.009375][T15739] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 366.110147][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 366.502143][T15774] sctp: [Deprecated]: syz.1.2801 (pid 15774) Use of int in max_burst socket option. [ 366.502143][T15774] Use struct sctp_assoc_value instead [ 366.604891][T15776] lo speed is unknown, defaulting to 1000 [ 367.034556][T15795] netlink: 'syz.3.2807': attribute type 1 has an invalid length. [ 367.512100][T15825] tipc: Enabling of bearer rejected, failed to enable media [ 367.684386][ T6745] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.691625][ T6745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.747517][T15821] syzkaller1: entered promiscuous mode [ 367.753727][T15821] syzkaller1: entered allmulticast mode [ 367.823296][T15819] xt_CT: You must specify a L4 protocol and not use inversions on it [ 367.903802][T15825] syzkaller0: entered promiscuous mode [ 367.909512][T15825] syzkaller0: entered allmulticast mode [ 369.990086][ T6745] net_ratelimit: 11 callbacks suppressed [ 369.990107][ T6745] bond4: (slave bridge1): failed to get link speed/duplex [ 370.019441][T15851] netlink: 'syz.3.2823': attribute type 10 has an invalid length. [ 370.029913][T15851] __nla_validate_parse: 4 callbacks suppressed [ 370.036492][T15851] netlink: 16154 bytes leftover after parsing attributes in process `syz.3.2823'. [ 370.138589][T15858] Cannot find add_set index 2 as target [ 370.141266][ T6737] bond4: (slave bridge1): failed to get link speed/duplex [ 370.237357][T15867] netlink: 'syz.2.2829': attribute type 1 has an invalid length. [ 370.296365][T15867] bond10: option mode: invalid value (7) [ 370.307958][T15867] bond10 (unregistering): Released all slaves [ 370.341777][T15870] netlink: 'syz.2.2829': attribute type 10 has an invalid length. [ 370.350426][ T6737] bond4: (slave bridge1): failed to get link speed/duplex [ 370.357325][T15870] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2829'. [ 370.388375][T15874] syzkaller0: entered promiscuous mode [ 370.400274][T15874] syzkaller0: entered allmulticast mode [ 370.414203][T15874] tipc: Resetting bearer [ 370.443312][T15870] dummy0: entered promiscuous mode [ 370.461044][ T6737] bond4: (slave bridge1): failed to get link speed/duplex [ 370.480742][T15874] netlink: zone id is out of range [ 370.508334][T15874] netlink: zone id is out of range [ 370.538842][T15874] netlink: zone id is out of range [ 370.567755][T15874] netlink: zone id is out of range [ 370.580582][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 370.602218][T15874] netlink: zone id is out of range [ 370.754313][T15894] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2838'. [ 370.889282][T15904] SET target dimension over the limit! [ 371.285041][T15923] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2850'. [ 371.439514][T15932] netlink: 'syz.4.2851': attribute type 12 has an invalid length. [ 371.703650][T15943] SET target dimension over the limit! [ 372.015163][T15959] netlink: 292 bytes leftover after parsing attributes in process `syz.2.2861'. [ 372.204268][T15969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2864'. [ 372.277203][T15976] SET target dimension over the limit! [ 372.520892][T15968] dummy0: left promiscuous mode [ 372.567858][T15968] ipip0: left promiscuous mode [ 372.586466][T15968] bond2: left promiscuous mode [ 372.636728][T15968] bond4: left promiscuous mode [ 372.657300][T15968] bond5: left promiscuous mode [ 372.668499][T15968] bond5: left allmulticast mode [ 372.680539][T15968] ip6erspan0: left allmulticast mode [ 372.699270][T15968] geneve2: left promiscuous mode [ 372.711024][T15968] geneve2: left allmulticast mode [ 372.724125][T15991] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2872'. [ 372.734349][T15968] bond6: left promiscuous mode [ 372.739482][T15991] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2872'. [ 372.752090][T15968] ip6tnl2: left allmulticast mode [ 372.772691][ T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.803361][ T12] netdevsim netdevsim2 netdevsim0: unset [0, 1] type 1 family 0 port 4352 - 0 [ 372.837176][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 45119 - 0 [ 372.867719][ T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.898962][ T12] netdevsim netdevsim2 netdevsim1: unset [0, 1] type 1 family 0 port 4352 - 0 [ 372.924775][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 45119 - 0 [ 372.941543][ T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.960284][ T12] netdevsim netdevsim2 netdevsim2: unset [0, 1] type 1 family 0 port 4352 - 0 [ 372.972531][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 45119 - 0 [ 372.981892][ T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.990992][ T12] netdevsim netdevsim2 netdevsim3: unset [0, 1] type 1 family 0 port 4352 - 0 [ 373.006465][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 45119 - 0 [ 373.031143][T15995] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2873'. [ 373.088969][T15995] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 373.103765][T15995] bond8 (unregistering): Released all slaves [ 373.213876][T16013] tipc: Resetting bearer [ 373.239725][T16013] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.264788][T16013] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.363499][T16013] tipc: Resetting bearer [ 373.537697][T16027] netlink: 'syz.2.2884': attribute type 16 has an invalid length. [ 373.547142][T16027] netlink: 'syz.2.2884': attribute type 3 has an invalid length. [ 373.555768][T16027] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.2884'. [ 373.615386][T16027] netlink: 'syz.2.2884': attribute type 16 has an invalid length. [ 373.624783][T16027] netlink: 'syz.2.2884': attribute type 3 has an invalid length. [ 373.795603][T16042] vlan0: entered promiscuous mode [ 373.820013][T16043] netlink: 'syz.2.2887': attribute type 1 has an invalid length. [ 374.192506][T16058] smbdirect: ib_dev[syz2] removed [ 374.924253][T16092] bond0: entered promiscuous mode [ 374.932866][T16092] bond0: left promiscuous mode [ 375.101202][ T6737] net_ratelimit: 419 callbacks suppressed [ 375.101221][ T6737] bond4: (slave bridge1): failed to get link speed/duplex [ 375.117914][T16099] netlink: 'syz.3.2908': attribute type 58 has an invalid length. [ 375.220096][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 375.292317][T16099] nbd3: detected capacity change from 0 to 63 [ 375.340361][ T6739] bond4: (slave bridge1): failed to get link speed/duplex [ 375.450585][ T6739] bond4: (slave bridge1): failed to get link speed/duplex [ 375.580436][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 375.700865][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 375.818862][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801ff33c00: rx timeout, send abort [ 375.830146][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 375.930635][ T5627] block nbd3: Receive control failed (result -104) [ 375.970143][ T6737] bond4: (slave bridge1): failed to get link speed/duplex [ 376.080945][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 376.117241][T16139] netlink: 'syz.0.2921': attribute type 1 has an invalid length. [ 376.200329][ T6739] bond4: (slave bridge1): failed to get link speed/duplex [ 376.330019][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801ff33c00: abort rx timeout. Force session deactivation [ 376.457071][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 376.472209][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 376.482823][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 376.492710][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 376.504536][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 376.568606][ T5627] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 376.578598][ T5627] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 376.592939][ T5627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 376.606533][ T5627] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 376.619068][ T5627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 377.024542][T16152] netlink: 'syz.4.2923': attribute type 5 has an invalid length. [ 377.079405][T16174] Cannot find del_set index 14804 as target [ 377.111854][T16174] __nla_validate_parse: 3 callbacks suppressed [ 377.111871][T16174] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2927'. [ 377.160177][T16174] : renamed from erspan0 [ 377.284493][T16183] netlink: 'syz.4.2928': attribute type 1 has an invalid length. [ 377.344543][T16177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2928'. [ 377.364782][T16177] block nbd0: Unsupported socket: should be TCP or UNIX. [ 377.629400][T16205] netlink: 'syz.1.2933': attribute type 1 has an invalid length. [ 377.739805][T16213] veth3: entered allmulticast mode [ 377.758437][T16213] bond5: (slave veth3): Enslaving as an active interface with a down link [ 377.793439][T16205] bond5: (slave veth0_to_bond): making interface the new active one [ 377.830374][T16205] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 378.151358][T16233] FAULT_INJECTION: forcing a failure. [ 378.151358][T16233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.199923][T16233] CPU: 0 UID: 0 PID: 16233 Comm: syz.4.2938 Not tainted syzkaller #0 PREEMPT(full) [ 378.199950][T16233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 378.199968][T16233] Call Trace: [ 378.199975][T16233] [ 378.199983][T16233] dump_stack_lvl+0xe8/0x150 [ 378.200016][T16233] should_fail_ex+0x40c/0x560 [ 378.200042][T16233] _copy_from_user+0x2d/0xb0 [ 378.200069][T16233] kstrtouint_from_user+0xd6/0x180 [ 378.200094][T16233] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 378.200128][T16233] proc_fail_nth_write+0x8e/0x210 [ 378.200152][T16233] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 378.200183][T16233] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 378.200207][T16233] vfs_write+0x296/0xba0 [ 378.200242][T16233] ? __pfx_vfs_write+0x10/0x10 [ 378.200270][T16233] ? __fget_files+0x2a/0x420 [ 378.200299][T16233] ? __fget_files+0x3a2/0x420 [ 378.200321][T16233] ? __fget_files+0x2a/0x420 [ 378.200353][T16233] ksys_write+0x150/0x270 [ 378.200383][T16233] ? __pfx_ksys_write+0x10/0x10 [ 378.200419][T16233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.200440][T16233] do_syscall_64+0x174/0x580 [ 378.200475][T16233] ? trace_irq_disable+0x3b/0x140 [ 378.200498][T16233] ? clear_bhb_loop+0x40/0x90 [ 378.200522][T16233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.200540][T16233] RIP: 0033:0x7faabf35e68e [ 378.200559][T16233] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 378.200574][T16233] RSP: 002b:00007faabd5f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 378.200597][T16233] RAX: ffffffffffffffda RBX: 00007faabd5f66c0 RCX: 00007faabf35e68e [ 378.200609][T16233] RDX: 0000000000000001 RSI: 00007faabd5f60a0 RDI: 0000000000000006 [ 378.200619][T16233] RBP: 00007faabd5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 378.200630][T16233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.200640][T16233] R13: 00007faabf626038 R14: 00007faabf625fa0 R15: 00007ffef3832d48 [ 378.200670][T16233] [ 378.720149][ T5625] Bluetooth: hci5: command tx timeout [ 378.812816][T16246] FAULT_INJECTION: forcing a failure. [ 378.812816][T16246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.822573][T16250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2945'. [ 378.852700][T16246] CPU: 1 UID: 0 PID: 16246 Comm: syz.1.2944 Not tainted syzkaller #0 PREEMPT(full) [ 378.852727][T16246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 378.852738][T16246] Call Trace: [ 378.852746][T16246] [ 378.852754][T16246] dump_stack_lvl+0xe8/0x150 [ 378.852792][T16246] should_fail_ex+0x40c/0x560 [ 378.852819][T16246] _copy_to_user+0x31/0xb0 [ 378.852849][T16246] bpf_test_finish+0x52e/0x690 [ 378.852967][T16246] ? __pfx____migrate_enable+0x10/0x10 [ 378.853010][T16246] ? __pfx_bpf_test_finish+0x10/0x10 [ 378.853042][T16246] bpf_prog_test_run_flow_dissector+0x478/0x610 [ 378.853076][T16246] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 378.853100][T16246] ? __fget_files+0x2a/0x420 [ 378.853130][T16246] ? __fget_files+0x2a/0x420 [ 378.853159][T16246] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 378.853181][T16246] bpf_prog_test_run+0x2c5/0x340 [ 378.853218][T16246] __sys_bpf+0xa22/0xd90 [ 378.853251][T16246] ? __pfx___sys_bpf+0x10/0x10 [ 378.853285][T16246] ? __fget_files+0x2a/0x420 [ 378.853326][T16246] ? ksys_write+0x242/0x270 [ 378.853359][T16246] ? __pfx_ksys_write+0x10/0x10 [ 378.853392][T16246] __x64_sys_bpf+0xba/0xd0 [ 378.853415][T16246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.853436][T16246] do_syscall_64+0x174/0x580 [ 378.853462][T16246] ? trace_irq_disable+0x3b/0x140 [ 378.853484][T16246] ? clear_bhb_loop+0x40/0x90 [ 378.853508][T16246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.853526][T16246] RIP: 0033:0x7f332439de59 [ 378.853543][T16246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.853560][T16246] RSP: 002b:00007f3325268028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 378.853586][T16246] RAX: ffffffffffffffda RBX: 00007f3324625fa0 RCX: 00007f332439de59 [ 378.853600][T16246] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 378.853612][T16246] RBP: 00007f3325268090 R08: 0000000000000000 R09: 0000000000000000 [ 378.853624][T16246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.853635][T16246] R13: 00007f3324626038 R14: 00007f3324625fa0 R15: 00007ffcd69cd6d8 [ 378.853666][T16246] [ 379.133764][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.174759][T16260] netlink: 'syz.0.2946': attribute type 11 has an invalid length. [ 379.325129][T16270] netlink: 580 bytes leftover after parsing attributes in process `syz.4.2949'. [ 379.328988][T16148] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.341626][T16148] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.348920][T16148] bridge_slave_0: entered allmulticast mode [ 379.356916][T16148] bridge_slave_0: entered promiscuous mode [ 379.411273][T16148] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.426713][T16148] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.446956][T16148] bridge_slave_1: entered allmulticast mode [ 379.461252][T16148] bridge_slave_1: entered promiscuous mode [ 379.508617][T16148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.529400][T16148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.607316][ T2033] block nbd2: Possible stuck request ffff888027b15080: control (read@0,1024B). Runtime 30 seconds [ 379.623284][ T2033] block nbd2: Possible stuck request ffff888027b15240: control (read@1024,1024B). Runtime 30 seconds [ 379.634360][ T2033] block nbd2: Possible stuck request ffff888027b15400: control (read@2048,1024B). Runtime 30 seconds [ 379.645602][ T2033] block nbd2: Possible stuck request ffff888027b155c0: control (read@3072,1024B). Runtime 30 seconds [ 379.665688][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2951'. [ 379.676424][T16148] team0: Port device team_slave_0 added [ 379.687267][T16148] team0: Port device team_slave_1 added [ 379.721625][T16148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.728612][T16148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.758703][T16148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.773994][T16148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.789151][T16148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.815684][T16148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.910557][T16148] hsr_slave_0: entered promiscuous mode [ 379.925941][T16148] hsr_slave_1: entered promiscuous mode [ 379.942117][T16148] debugfs: 'hsr0' already exists in 'hsr' [ 379.957215][T16148] Cannot create hsr debugfs directory [ 380.049031][T16299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2956'. [ 380.196043][T16304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.206159][T16304] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.346039][T16304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 380.358307][T16304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 380.379231][T16304] veth0_macvtap: left promiscuous mode [ 380.392010][T16304] 8021q: adding VLAN 0 to HW filter on device €Â [ 380.400510][T16304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 380.409091][T16304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 380.418603][T16304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 380.433851][T16304] 8021q: adding VLAN 0 to HW filter on device bond1 [ 380.445304][T16304] 8021q: adding VLAN 0 to HW filter on device bond2 [ 380.453510][T16304] 8021q: adding VLAN 0 to HW filter on device bond3 [ 380.464547][T16304] 8021q: adding VLAN 0 to HW filter on device bond4 [ 380.507790][T16304] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 380.539115][T16304] 8021q: adding VLAN 0 to HW filter on device bond5 [ 380.559511][T16304] 8021q: adding VLAN 0 to HW filter on device bond6 [ 380.586596][T16304] 8021q: adding VLAN 0 to HW filter on device bond7 [ 380.597306][T16304] tipc: Resetting bearer [ 380.609777][T16312] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2959'. [ 380.641263][T16304] 8021q: adding VLAN 0 to HW filter on device bond10 [ 380.660526][T16304] 8021q: adding VLAN 0 to HW filter on device bond11 [ 380.694590][ T6745] bond6: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 380.723434][ T6745] bond6: (slave veth5): making interface the new active one [ 380.732265][ T6745] veth5: entered allmulticast mode [ 380.746113][ T6745] bond6: active interface up! [ 380.801225][ T5625] Bluetooth: hci5: command tx timeout [ 380.875149][T16306] bond12: entered allmulticast mode [ 380.890831][T16306] 8021q: adding VLAN 0 to HW filter on device bond12 [ 380.898010][ T12] netdevsim netdevsim4 €Â: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.918380][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.986589][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.017322][T16330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2964'. [ 381.031878][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.060278][T16330] netlink: 'syz.2.2964': attribute type 30 has an invalid length. [ 381.067934][T16335] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 381.078558][T16330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2964'. [ 381.095020][ T12] net_ratelimit: 18 callbacks suppressed [ 381.095045][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 381.382050][ T6739] bond4: (slave bridge1): failed to get link speed/duplex [ 381.435616][T16148] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.447237][T16148] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.474445][T16148] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 381.501197][T16148] netdevsim netdevsim3 eth3 (unregistering): unset [1, 2] type 2 family 0 port 40781 - 0 [ 381.575722][T16364] netlink: 'syz.4.2975': attribute type 11 has an invalid length. [ 381.588631][T16364] netlink: 'syz.4.2975': attribute type 4 has an invalid length. [ 381.597172][T16364] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2975'. [ 381.633553][T16364] dummy0: entered allmulticast mode [ 381.641083][ T6739] bond4: (slave bridge1): failed to get link speed/duplex [ 381.695582][T16148] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.724819][T16148] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.745667][T16148] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 381.756028][T16148] netdevsim netdevsim3 eth2 (unregistering): unset [1, 2] type 2 family 0 port 40781 - 0 [ 381.800258][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 381.817344][T16371] syzkaller0: entered promiscuous mode [ 381.830043][T16371] syzkaller0: entered allmulticast mode [ 381.871582][T16148] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.885602][T16148] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.906112][T16148] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 381.926868][T16148] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 40781 - 0 [ 381.971220][T16385] SET target dimension over the limit! [ 381.982069][ T6745] bond4: (slave bridge1): failed to get link speed/duplex [ 382.007078][T16371] tipc: Enabled bearer , priority 0 [ 382.043497][T16148] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.061413][T16148] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.073903][T16148] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 382.086587][T16148] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 40781 - 0 [ 382.210926][ T6745] bond4: (slave bridge1): failed to get link speed/duplex [ 382.328315][T16368] tipc: Resetting bearer [ 382.369136][T16368] tipc: Disabling bearer [ 382.435753][T16397] syzkaller0: left promiscuous mode [ 382.450185][T16397] syzkaller0: left allmulticast mode [ 382.463061][T16397] tipc: Resetting bearer [ 382.550119][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 382.692880][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 382.726702][T16148] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 382.751764][T16148] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 382.762932][T16148] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 382.774042][T16148] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 382.784199][T16148] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 382.795209][T16148] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 382.824260][T16148] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 382.851556][T16148] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 382.870735][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 382.891103][ T5625] Bluetooth: hci5: command tx timeout [ 383.053257][T16148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.070207][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 383.100686][T16148] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.128774][ T6737] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.135999][ T6737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.181969][ T6737] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.189186][ T6737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.311186][T16439] SET target dimension over the limit! [ 383.677782][T16456] žÿ: renamed from team_slave_1 (while UP) [ 383.850326][T16464] __nla_validate_parse: 2 callbacks suppressed [ 383.850343][T16464] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3007'. [ 383.885007][T16464] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3007'. [ 383.925923][T16464] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3007'. [ 384.284485][T16489] netlink: 'syz.1.3012': attribute type 4 has an invalid length. [ 384.369224][T16492] SET target dimension over the limit! [ 384.422862][T16148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.458437][T16498] rdma_op ffff88803460e1f0 conn xmit_rdma 0000000000000000 [ 384.539747][T16503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3017'. [ 384.564004][T16148] veth0_vlan: entered promiscuous mode [ 384.573139][T16503] netlink: 'syz.1.3017': attribute type 1 has an invalid length. [ 384.609539][T16148] veth1_vlan: entered promiscuous mode [ 384.629345][T16503] tipc: Resetting bearer [ 384.661151][T16503] tipc: Resetting bearer [ 384.664682][T16509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3019'. [ 384.676552][T16509] netlink: 'syz.4.3019': attribute type 25 has an invalid length. [ 384.696365][T16509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3019'. [ 384.706643][T16507] xt_CT: You must specify a L4 protocol and not use inversions on it [ 384.738655][T16503] tipc: Resetting bearer [ 384.755608][T16503] tipc: Resetting bearer [ 384.804527][T16148] veth0_macvtap: entered promiscuous mode [ 384.859301][T16148] veth1_macvtap: entered promiscuous mode [ 384.924428][T16148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.970179][ T5625] Bluetooth: hci5: command tx timeout [ 384.979567][T16148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.999493][ T6731] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.019588][ T6731] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.053768][ T6731] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.072509][ T6731] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.301117][ T6743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.331428][ T6743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.341266][T16528] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3025'. [ 385.519808][ T6743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.558923][ T6743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.706800][T16535] netlink: 'syz.0.3027': attribute type 1 has an invalid length. [ 385.777036][T16535] 8021q: adding VLAN 0 to HW filter on device bond8 [ 385.827139][T16535] veth11: entered allmulticast mode [ 385.836402][T16535] bond8: (slave veth11): Enslaving as an active interface with an up link [ 385.885539][T16533] netlink: 264 bytes leftover after parsing attributes in process `syz.2.3022'. [ 385.904369][T16535] bond8 (unregistering): (slave veth11): Releasing backup interface [ 385.933059][T16535] bond8 (unregistering): Released all slaves [ 386.150389][ T6743] net_ratelimit: 36 callbacks suppressed [ 386.150409][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 386.250254][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 386.266046][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 386.281969][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 386.291141][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 386.298551][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 386.309243][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 386.420135][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 386.540014][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 386.681536][ T6739] bond4: (slave bridge1): failed to get link speed/duplex [ 386.718526][T16572] xt_hashlimit: size too large, truncated to 1048576 [ 386.800468][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 386.872198][T16580] netlink: 'syz.4.3036': attribute type 1 has an invalid length. [ 386.911124][T16580] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3036'. [ 386.931104][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 387.066100][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 387.190088][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 387.322195][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 387.593927][T16605] block nbd4: not configured, cannot reconfigure [ 387.613230][T16606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3042'. [ 387.757167][T16615] mac80211_hwsim hwsim2 »»»»»»: renamed from wlan0 [ 387.786050][T16616] netlink: 'syz.2.3045': attribute type 1 has an invalid length. [ 387.827027][T16616] netlink: 'syz.2.3045': attribute type 2 has an invalid length. [ 388.258023][T16641] SET target dimension over the limit! [ 388.401000][ T5627] Bluetooth: hci1: command tx timeout [ 388.584868][T16658] syzkaller0: entered promiscuous mode [ 388.598432][T16658] syzkaller0: entered allmulticast mode [ 388.613922][T16649] syzkaller0: entered promiscuous mode [ 388.628950][T16649] syzkaller0: entered allmulticast mode [ 388.893722][T16675] __nla_validate_parse: 3 callbacks suppressed [ 388.893742][T16675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3059'. [ 389.190292][T16552] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.208904][T16552] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.219040][T16552] bridge_slave_0: entered allmulticast mode [ 389.228722][T16552] bridge_slave_0: entered promiscuous mode [ 389.239491][T16674] tipc: Enabled bearer , priority 0 [ 389.246522][T16676] block nbd0: not configured, cannot reconfigure [ 389.256421][T16552] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.280335][T16552] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.287662][T16552] bridge_slave_1: entered allmulticast mode [ 389.301157][T16552] bridge_slave_1: entered promiscuous mode [ 389.384168][T16657] tipc: Resetting bearer [ 389.438367][T16657] tipc: Disabling bearer [ 389.532675][T16682] netlink: 'syz.2.3061': attribute type 32 has an invalid length. [ 389.563672][T16552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.564995][T16684] Cannot find add_set index 0 as target [ 389.618406][T16552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.787549][T16695] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3066'. [ 389.793946][T16552] team0: Port device team_slave_0 added [ 389.811291][T16552] team0: Port device team_slave_1 added [ 389.937263][T16552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.954517][T16552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.991320][T16552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.012101][T16706] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3070'. [ 390.023076][T16552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.030948][T16706] netlink: 'syz.2.3070': attribute type 1 has an invalid length. [ 390.038870][T16552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.126308][T16552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.142885][T16715] Cannot find add_set index 0 as target [ 390.193695][T16706] bond10: entered promiscuous mode [ 390.224554][T16706] bond10: entered allmulticast mode [ 390.252921][T16706] 8021q: adding VLAN 0 to HW filter on device bond10 [ 390.480591][ T5625] Bluetooth: hci1: command tx timeout [ 390.499127][T16552] hsr_slave_0: entered promiscuous mode [ 390.538197][T16552] hsr_slave_1: entered promiscuous mode [ 390.587933][T16552] debugfs: 'hsr0' already exists in 'hsr' [ 390.598438][T16737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3078'. [ 390.623144][T16552] Cannot create hsr debugfs directory [ 390.646301][T16730] hsr0: entered allmulticast mode [ 390.660304][T16730] hsr_slave_0: entered allmulticast mode [ 390.677023][T16730] hsr_slave_1: entered allmulticast mode [ 390.699554][T16737] hsr_slave_0: left promiscuous mode [ 390.722987][T16737] hsr_slave_1: left promiscuous mode [ 390.762396][T16707] FAULT_INJECTION: forcing a failure. [ 390.762396][T16707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.784870][T16737] hsr0 (unregistering): left allmulticast mode [ 390.801897][T16707] CPU: 1 UID: 0 PID: 16707 Comm: syz.0.3071 Not tainted syzkaller #0 PREEMPT(full) [ 390.801924][T16707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 390.801935][T16707] Call Trace: [ 390.801942][T16707] [ 390.801949][T16707] dump_stack_lvl+0xe8/0x150 [ 390.801982][T16707] should_fail_ex+0x40c/0x560 [ 390.802008][T16707] _copy_to_user+0x31/0xb0 [ 390.802038][T16707] simple_read_from_buffer+0xe1/0x170 [ 390.802068][T16707] proc_fail_nth_read+0x1bb/0x230 [ 390.802097][T16707] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 390.802126][T16707] ? rw_verify_area+0x24a/0x4c0 [ 390.802154][T16707] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 390.802179][T16707] vfs_read+0x213/0xa80 [ 390.802212][T16707] ? __pfx___mutex_lock+0x10/0x10 [ 390.802242][T16707] ? __pfx_vfs_read+0x10/0x10 [ 390.802271][T16707] ? __fget_files+0x2a/0x420 [ 390.802300][T16707] ? __fget_files+0x3a2/0x420 [ 390.802322][T16707] ? __fget_files+0x2a/0x420 [ 390.802358][T16707] ksys_read+0x150/0x270 [ 390.802388][T16707] ? __pfx_ksys_read+0x10/0x10 [ 390.802425][T16707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.802445][T16707] do_syscall_64+0x174/0x580 [ 390.802472][T16707] ? clear_bhb_loop+0x40/0x90 [ 390.802495][T16707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.802513][T16707] RIP: 0033:0x7f691b55e68e [ 390.802535][T16707] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 390.802552][T16707] RSP: 002b:00007f691c413fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 390.802571][T16707] RAX: ffffffffffffffda RBX: 00007f691c4146c0 RCX: 00007f691b55e68e [ 390.802584][T16707] RDX: 000000000000000f RSI: 00007f691c4140a0 RDI: 0000000000000007 [ 390.802597][T16707] RBP: 00007f691c414090 R08: 0000000000000000 R09: 0000000000000000 [ 390.802608][T16707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.802619][T16707] R13: 00007f691b826038 R14: 00007f691b825fa0 R15: 00007ffccbafb058 [ 390.802657][T16707] [ 391.047987][T16749] SET target dimension over the limit! [ 391.310747][ T48] net_ratelimit: 9 callbacks suppressed [ 391.310766][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 391.427686][T16552] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.456712][T16552] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 391.486223][T16552] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 391.512772][T16765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3088'. [ 391.580095][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 391.599624][T16771] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3088'. [ 391.605496][T16772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3087'. [ 391.666816][T16552] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.678283][T16552] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 391.689281][T16552] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 391.737353][T16775] lo: entered allmulticast mode [ 391.763298][T16775] tunl0: entered allmulticast mode [ 391.779340][T16775] gre0: entered allmulticast mode [ 391.801164][T16775] gretap0: entered allmulticast mode [ 391.829028][T16775] : entered allmulticast mode [ 391.850141][T16775] ip_vti0: entered allmulticast mode [ 391.869639][T16775] ip6_vti0: entered allmulticast mode [ 391.890489][T16775] sit0: entered allmulticast mode [ 391.895857][T16775] ip6tnl0: entered allmulticast mode [ 391.903451][T16775] ip6gre0: entered allmulticast mode [ 391.909530][T16775] ip6gretap0: entered allmulticast mode [ 391.920201][T16775] bridge0: entered allmulticast mode [ 391.922280][T16782] SET target dimension over the limit! [ 391.927254][T16775] bond0: entered allmulticast mode [ 391.937616][T16780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3092'. [ 391.952034][T16775] team0: entered allmulticast mode [ 391.957494][T16775] dummy0: entered allmulticast mode [ 391.963302][T16775] nlmon0: entered allmulticast mode [ 391.968807][T16775] veth0: entered allmulticast mode [ 391.974507][T16775] veth1: entered allmulticast mode [ 391.981128][T16775] wg0: entered allmulticast mode [ 391.986359][T16775] wg2: entered allmulticast mode [ 391.993739][T16775] veth1_to_bridge: entered allmulticast mode [ 392.000531][T16775] bridge_slave_1: entered allmulticast mode [ 392.006842][T16775] veth0_to_bond: entered allmulticast mode [ 392.014776][T16775] bond_slave_0: entered allmulticast mode [ 392.021132][T16775] veth1_to_bond: entered allmulticast mode [ 392.027274][T16775] bond_slave_1: entered allmulticast mode [ 392.033804][T16775] veth0_to_team: entered allmulticast mode [ 392.037574][T16787] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3094'. [ 392.040246][T16775] team_slave_0: entered allmulticast mode [ 392.056133][T16775] veth1_to_team: entered allmulticast mode [ 392.062951][T16775] team_slave_1: entered allmulticast mode [ 392.069610][T16775] veth0_to_batadv: entered allmulticast mode [ 392.076101][T16788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3092'. [ 392.091184][T16775] batadv_slave_0: entered allmulticast mode [ 392.097410][T16775] xfrm0: entered allmulticast mode [ 392.103426][T16775] veth0_to_hsr: entered allmulticast mode [ 392.109401][T16775] hsr_slave_0: entered allmulticast mode [ 392.115745][T16775] veth1_to_hsr: entered allmulticast mode [ 392.122244][T16775] hsr_slave_1: entered allmulticast mode [ 392.128207][T16775] hsr0: entered allmulticast mode [ 392.133805][T16775] veth1_virt_wifi: entered allmulticast mode [ 392.140254][T16775] veth0_virt_wifi: entered allmulticast mode [ 392.149088][T16775] virt_wifi0: entered allmulticast mode [ 392.155237][T16775] veth1_vlan: entered allmulticast mode [ 392.161249][T16775] veth0_vlan: entered allmulticast mode [ 392.167093][T16775] vlan0: entered allmulticast mode [ 392.172730][T16775] vlan1: entered allmulticast mode [ 392.178135][T16775] macvlan0: entered allmulticast mode [ 392.184627][T16775] macvlan1: entered allmulticast mode [ 392.190495][T16775] ipvlan0: entered allmulticast mode [ 392.196065][T16775] ipvlan1: entered allmulticast mode [ 392.207895][T16775] veth1_macvtap: entered allmulticast mode [ 392.214280][T16775] veth0_macvtap: entered allmulticast mode [ 392.220649][T16775] macvtap0: entered allmulticast mode [ 392.226353][T16775] macsec0: entered allmulticast mode [ 392.232270][T16775] geneve0: entered allmulticast mode [ 392.237814][T16775] geneve1: entered allmulticast mode [ 392.243685][T16775] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 392.251469][T16775] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 392.259030][T16775] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 392.266861][T16775] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 392.274594][T16775] mac80211_hwsim hwsim2 »»»»»»: entered allmulticast mode [ 392.282619][T16775] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 392.289766][T16775] veth2: entered allmulticast mode [ 392.295079][T16775] veth3: entered allmulticast mode [ 392.300461][T16775] mac80211_hwsim hwsim15 wlan2: entered allmulticast mode [ 392.307670][T16775] veth4: entered allmulticast mode [ 392.313024][T16775] veth5: entered allmulticast mode [ 392.318272][T16775] erspan1: entered allmulticast mode [ 392.323804][T16775] ipip0: entered allmulticast mode [ 392.329073][T16775] mac80211_hwsim hwsim21 wlan3: entered allmulticast mode [ 392.336500][T16775] bridge1: entered allmulticast mode [ 392.342152][T16775] mac80211_hwsim hwsim23 wlan4: entered allmulticast mode [ 392.349426][T16775] mac80211_hwsim hwsim26 wlan5: entered allmulticast mode [ 392.357445][T16775] mac80211_hwsim hwsim27 wlan6: entered allmulticast mode [ 392.364790][T16775] bond2: entered allmulticast mode [ 392.370198][T16775] mac80211_hwsim hwsim28 wlan7: entered allmulticast mode [ 392.377404][T16775] bond3: entered allmulticast mode [ 392.382687][T16775] mac80211_hwsim hwsim33 wlan8: entered allmulticast mode [ 392.390770][T16775] : entered allmulticast mode [ 392.395662][T16775] vxlan0: entered allmulticast mode [ 392.401116][T16775] veth6: entered allmulticast mode [ 392.406372][T16775] veth7: entered allmulticast mode [ 392.411742][T16775] syztnl2: entered allmulticast mode [ 392.417119][T16775] vlan2: entered allmulticast mode [ 392.422430][T16775] bridge2: entered allmulticast mode [ 392.427817][T16775] bond4: entered allmulticast mode [ 392.433124][T16775] bond5: entered allmulticast mode [ 392.438339][T16775] mac80211_hwsim hwsim40 wlan9: entered allmulticast mode [ 392.445798][T16775] mac80211_hwsim hwsim41 wlan10: entered allmulticast mode [ 392.453201][T16775] ip6erspan0: entered allmulticast mode [ 392.458875][T16775] geneve1.3: entered allmulticast mode [ 392.464700][T16775] vxlan1: entered allmulticast mode [ 392.470146][T16775] geneve2: entered allmulticast mode [ 392.475554][T16775] mac80211_hwsim hwsim44 wlan11: entered allmulticast mode [ 392.483022][T16775] veth8: entered allmulticast mode [ 392.488806][T16775] veth9: entered allmulticast mode [ 392.494312][T16775] ip6gre1: entered allmulticast mode [ 392.499746][T16775] ip6tnl1: entered allmulticast mode [ 392.505258][T16775] veth10: entered allmulticast mode [ 392.510764][T16775] veth11: entered allmulticast mode [ 392.516166][T16775] bond6: entered allmulticast mode [ 392.521573][T16775] ip6gre2: entered allmulticast mode [ 392.527032][T16775] bond7: entered allmulticast mode [ 392.532929][T16775] ip6tnl2: entered allmulticast mode [ 392.538318][T16775] vxcan2: entered allmulticast mode [ 392.543817][T16775] vxcan3: entered allmulticast mode [ 392.549224][T16775] bond9: entered allmulticast mode [ 392.554848][T16775] gre1: entered allmulticast mode [ 392.560591][T16775] veth12: entered allmulticast mode [ 392.560655][ T5627] Bluetooth: hci1: command tx timeout [ 392.565941][T16775] veth13: entered allmulticast mode [ 392.567900][T16775] bond10: left promiscuous mode [ 392.632893][T16788] veth7: entered allmulticast mode [ 392.699609][T16552] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.711442][T16552] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 392.730399][T16552] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 392.781001][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 392.849806][T16552] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.870046][T16552] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 392.893080][T16552] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 392.950471][ T6739] bond4: (slave bridge1): failed to get link speed/duplex [ 393.070160][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 393.279541][T16827] macvlan0: mtu less than device minimum [ 393.440052][ T6739] bond4: (slave bridge1): failed to get link speed/duplex [ 393.447899][T16834] Cannot find add_set index 0 as target [ 393.560829][ T6739] bond4: (slave bridge1): failed to get link speed/duplex [ 393.771955][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 393.812452][T16552] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 393.868472][T16552] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 393.891207][T16552] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 393.906775][T16552] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 393.924202][T16552] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 393.950811][T16552] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 393.972366][T16552] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 394.016563][T16552] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 394.081304][T16872] __nla_validate_parse: 1 callbacks suppressed [ 394.081323][T16872] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3112'. [ 394.144979][T16872] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3112'. [ 394.176753][T16872] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3112'. [ 394.192931][T16872] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3112'. [ 394.279707][T16552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.329813][T16552] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.342711][ T6737] bond4: (slave bridge1): failed to get link speed/duplex [ 394.356871][ T6743] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.364085][ T6743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.389159][T16878] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3114'. [ 394.414366][ T6743] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.421559][ T6743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.465492][T16878] netlink: 36764 bytes leftover after parsing attributes in process `syz.2.3114'. [ 394.491318][T16878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3114'. [ 394.606882][T16888] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3117'. [ 394.642700][ T5627] Bluetooth: hci1: command tx timeout [ 394.715370][T16897] netlink: 'syz.2.3119': attribute type 11 has an invalid length. [ 394.770064][T16897] netlink: 'syz.2.3119': attribute type 11 has an invalid length. [ 394.810292][T16897] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3119'. [ 394.861543][T16907] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 395.026053][T16921] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3123'. [ 395.188667][T16931] TCP: TCP_TX_DELAY enabled [ 395.244745][T16552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.307028][T16552] veth0_vlan: entered promiscuous mode [ 395.337162][T16552] veth1_vlan: entered promiscuous mode [ 395.411459][T16552] veth0_macvtap: entered promiscuous mode [ 395.433359][T16552] veth1_macvtap: entered promiscuous mode [ 395.468157][T16552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.488134][T16552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.639098][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.648474][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.729687][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.741605][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.824208][ T30] audit: type=1107 audit(1784116454.065:6): pid=16960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='t¾õò·=Ü…Üõ•BmFTý³µÔÝH³ù‡ž=–Ñ&Dª`.¾¸(ðœAªóó>'ÁE;”Ìq6æËÒ—k¼6$¿6ˆŽ¡ŠÖô©šÍÅ„¢Vp/q@Z^#9"ö|Ý=‹, é+Ýi‡·ë%U!m×èzšoUûVVyLV“6oqXqqŸƄXw`y®3m ·ùóÀ»‹Ê=£ÛYÝãìOky¾?Ï’ò¡'“›lÍ}ü|0˜ÒoäŠÿYP¡}½âÍH›z(Ž}qhè\5xè¿ê»á:Ábð+ÐÎnº\`{Ãwî¹èVû¹³³fˆìÂ8pò4êía=.mÙŽbä³6èK’?öKèdÔ| 7*‘DÊWæÕö‚”ÕÇ È©{X.94$ÖÒFµ ÇÝPÆìÑ,ʾíñ©g©¹+‚ðX(ƱÚgyK–jÛ±ð´¢E£/ÂL_{ψ[}T]Qúä‹ÿ©L8t‰ÊE€©ñuèéL•!:£šHeoEº9gÞ&^ê`Éqá/ŽƒrFnr iIŽÖ†„¼šjNÂч.®êÁ*Å‘ö9•4 &Ê…ß`Z,q›¸k–^Þ]B;¥ÊúÌ;pSýpVG(ÃŒ^•@ÍÄÎkSdF™20Ę ßS²Â&j¾ùk&ŠïxÅ )®ÎåŒSŸÎRæcúÊÀù¡Kçá4á° [ 395.824208][ T30] Cb**Jê“.\—ò j3õ9¢®ásÚ8è¢fq ©¯—!Ñ{ØyB½ª1ú˜ÚÚS^p72¬æœ~aöH^u4Gݧðƒ]¸¥°/®£jv"ìâ»–ê §Âþ½lH¸œ´ð¿_Ôµ3½Vÿ/öÛ]Îo ~K:Õ_§%õžåz!éXô‹ 8Œa”áÄÃ(Ì:Ž¿î' [ 396.342562][ T6739] net_ratelimit: 9 callbacks suppressed [ 396.342583][ T6739] bond4: (slave bridge1): failed to get link speed/duplex [ 396.521622][ T6739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.530146][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 396.545249][ T6739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.686767][ T6739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.718152][ T6739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.726510][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 396.860033][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 396.981566][ T6739] bond4: (slave bridge1): failed to get link speed/duplex [ 397.110438][ T6739] bond4: (slave bridge1): failed to get link speed/duplex [ 397.243046][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 397.401447][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 397.551675][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 397.592004][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 397.608623][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 397.624919][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 397.634686][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 397.643792][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 397.662998][T17041] SET target dimension over the limit! [ 397.690157][ T6737] bond4: (slave bridge1): failed to get link speed/duplex [ 397.776703][T17046] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 398.575942][T17035] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.583217][T17035] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.590642][T17035] bridge_slave_0: entered allmulticast mode [ 398.597620][T17035] bridge_slave_0: entered promiscuous mode [ 398.605896][T17035] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.613229][T17035] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.620607][T17035] bridge_slave_1: entered allmulticast mode [ 398.627851][T17035] bridge_slave_1: entered promiscuous mode [ 398.656879][T17035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.668225][T17035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.695874][T17035] team0: Port device team_slave_0 added [ 398.703691][T17035] team0: Port device team_slave_1 added [ 398.731891][T17035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.738863][T17035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.764878][T17035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.776777][T17035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.784015][T17035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.811578][T17035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.851278][T17035] hsr_slave_0: entered promiscuous mode [ 398.857625][T17035] hsr_slave_1: entered promiscuous mode [ 398.863840][T17035] debugfs: 'hsr0' already exists in 'hsr' [ 398.869571][T17035] Cannot create hsr debugfs directory [ 398.979740][T17035] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.023896][T17035] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.102365][T17035] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.174872][T17035] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.307372][T17035] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 399.316737][T17035] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 399.324635][T17035] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 399.335358][T17035] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 399.343303][T17035] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 399.352720][T17035] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 399.365202][T17035] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 399.374114][T17035] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 399.397793][T17035] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.405005][T17035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.412529][T17035] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.419634][T17035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.492504][T17035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.515984][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.524545][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.542324][T17035] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.556426][ T6743] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.563593][ T6743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.578190][ T6743] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.585382][ T6743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.681733][ T5625] Bluetooth: hci4: command tx timeout [ 399.942343][T17035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.983456][T17035] veth0_vlan: entered promiscuous mode [ 399.996509][T17035] veth1_vlan: entered promiscuous mode [ 400.024744][T17035] veth0_macvtap: entered promiscuous mode [ 400.033857][T17035] veth1_macvtap: entered promiscuous mode [ 400.049047][T17035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.065949][T17035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.086267][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.095727][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.112037][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.125732][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.231595][ T6737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.239463][ T6737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.272919][ T6743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.283425][ T6743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.336632][T17080] syzkaller0: entered promiscuous mode [ 400.342381][T17080] syzkaller0: entered allmulticast mode [ 401.450717][ T6731] net_ratelimit: 25 callbacks suppressed [ 401.450741][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 401.570087][ T6737] bond4: (slave bridge1): failed to get link speed/duplex [ 401.681287][ T6737] bond4: (slave bridge1): failed to get link speed/duplex [ 401.760447][ T5625] Bluetooth: hci4: command tx timeout [ 401.790141][ T6737] bond4: (slave bridge1): failed to get link speed/duplex [ 401.900359][ T6737] bond4: (slave bridge1): failed to get link speed/duplex [ 402.010671][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 402.120181][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 402.230098][ T6737] bond4: (slave bridge1): failed to get link speed/duplex [ 402.340279][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 402.450183][ T6737] bond4: (slave bridge1): failed to get link speed/duplex [ 403.850124][ T5625] Bluetooth: hci4: command tx timeout [ 405.841883][ T1500] block nbd3: Possible stuck request ffff888027ba7000: control (read@0,1024B). Runtime 30 seconds [ 405.852688][ T1500] block nbd3: Possible stuck request ffff888027ba71c0: control (read@1024,1024B). Runtime 30 seconds [ 405.864887][ T1500] block nbd3: Possible stuck request ffff888027ba7380: control (read@2048,1024B). Runtime 30 seconds [ 405.876044][ T1500] block nbd3: Possible stuck request ffff888027ba7540: control (read@3072,1024B). Runtime 30 seconds [ 405.920205][ T5625] Bluetooth: hci4: command tx timeout [ 406.550206][ T6743] net_ratelimit: 36 callbacks suppressed [ 406.550227][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 406.670109][ T6737] bond4: (slave bridge1): failed to get link speed/duplex [ 406.780157][ T6737] bond4: (slave bridge1): failed to get link speed/duplex [ 406.890094][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 407.000134][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 407.110139][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 407.220264][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 407.330161][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 407.440222][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 407.550145][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 409.270183][ T4987] udevd[4987]: worker [10313] /devices/virtual/block/nbd2 is taking a long time [ 409.686110][ T2033] block nbd2: Possible stuck request ffff888027b15080: control (read@0,1024B). Runtime 60 seconds [ 409.697216][ T2033] block nbd2: Possible stuck request ffff888027b15240: control (read@1024,1024B). Runtime 60 seconds [ 409.708492][ T2033] block nbd2: Possible stuck request ffff888027b15400: control (read@2048,1024B). Runtime 60 seconds [ 409.719496][ T2033] block nbd2: Possible stuck request ffff888027b155c0: control (read@3072,1024B). Runtime 60 seconds [ 411.660145][ T6731] net_ratelimit: 36 callbacks suppressed [ 411.660165][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 411.780278][ T6737] bond4: (slave bridge1): failed to get link speed/duplex [ 411.890101][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 412.000138][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 412.110108][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 412.220194][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 412.330075][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 412.440110][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 412.560177][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 412.670287][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 416.740281][ T6737] net_ratelimit: 36 callbacks suppressed [ 416.740302][ T6737] bond4: (slave bridge1): failed to get link speed/duplex [ 416.860150][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 416.970205][ T6737] bond4: (slave bridge1): failed to get link speed/duplex [ 417.080162][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 417.190127][ T6737] bond4: (slave bridge1): failed to get link speed/duplex [ 417.300181][ T6737] bond4: (slave bridge1): failed to get link speed/duplex [ 417.410147][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 417.520514][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 417.630142][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 417.750179][ T6737] bond4: (slave bridge1): failed to get link speed/duplex [ 421.820252][ T48] net_ratelimit: 36 callbacks suppressed [ 421.820273][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 421.940542][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 422.050719][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 422.160945][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 422.270641][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 422.380246][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 422.491663][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 422.600110][ T6737] bond4: (slave bridge1): failed to get link speed/duplex [ 422.710111][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 422.820326][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 426.910124][ T6737] net_ratelimit: 36 callbacks suppressed [ 426.910144][ T6737] bond4: (slave bridge1): failed to get link speed/duplex [ 427.030068][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 427.140149][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 427.250109][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 427.360506][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 427.470098][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 427.580203][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 427.690121][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 427.800082][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 427.910065][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 431.980331][ T48] net_ratelimit: 36 callbacks suppressed [ 431.980353][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 432.100139][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 432.210108][ T6737] bond4: (slave bridge1): failed to get link speed/duplex [ 432.320118][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 432.430080][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 432.540111][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 432.650103][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 432.760084][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 432.870106][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 432.980198][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 435.922160][ T1500] block nbd3: Possible stuck request ffff888027ba7000: control (read@0,1024B). Runtime 60 seconds [ 435.933074][ T1500] block nbd3: Possible stuck request ffff888027ba71c0: control (read@1024,1024B). Runtime 60 seconds [ 435.944202][ T1500] block nbd3: Possible stuck request ffff888027ba7380: control (read@2048,1024B). Runtime 60 seconds [ 435.955322][ T1500] block nbd3: Possible stuck request ffff888027ba7540: control (read@3072,1024B). Runtime 60 seconds [ 436.306602][ T4987] udevd[4987]: worker [10316] /devices/virtual/block/nbd3 is taking a long time [ 437.060120][ T6743] net_ratelimit: 36 callbacks suppressed [ 437.060140][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 437.180136][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 437.290109][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 437.400140][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 437.510118][ T6737] bond4: (slave bridge1): failed to get link speed/duplex [ 437.620185][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 437.730148][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 437.840821][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 437.950128][ T6737] bond4: (slave bridge1): failed to get link speed/duplex [ 438.060184][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 439.761998][ T2033] block nbd2: Possible stuck request ffff888027b15080: control (read@0,1024B). Runtime 90 seconds [ 439.772757][ T2033] block nbd2: Possible stuck request ffff888027b15240: control (read@1024,1024B). Runtime 90 seconds [ 439.783827][ T2033] block nbd2: Possible stuck request ffff888027b15400: control (read@2048,1024B). Runtime 90 seconds [ 439.794839][ T2033] block nbd2: Possible stuck request ffff888027b155c0: control (read@3072,1024B). Runtime 90 seconds [ 440.406825][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.160258][ T6741] net_ratelimit: 36 callbacks suppressed [ 442.160279][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 442.280065][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 442.390127][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 442.500135][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 442.610021][ T6737] bond4: (slave bridge1): failed to get link speed/duplex [ 442.712114][T17087] __nla_validate_parse: 1 callbacks suppressed [ 442.712131][T17087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3161'. [ 442.752237][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 443.112219][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 443.137292][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 443.156010][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 443.167456][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 443.177430][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 443.187932][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 443.282136][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 443.400373][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 443.529849][T17119] SET target dimension over the limit! [ 443.540044][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 444.278974][T17157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3182'. [ 444.361305][T17159] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3183'. [ 445.224894][T17178] Unsupported ieee802154 address type: 0 [ 445.282405][ T5625] Bluetooth: hci0: command tx timeout [ 445.623170][T17189] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3191'. [ 445.816564][T17100] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.835838][T17100] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.851960][T17100] bridge_slave_0: entered allmulticast mode [ 445.870277][T17100] bridge_slave_0: entered promiscuous mode [ 445.885519][T17100] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.892821][T17100] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.900519][T17100] bridge_slave_1: entered allmulticast mode [ 445.908347][T17100] bridge_slave_1: entered promiscuous mode [ 446.017552][T17100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.032848][T17100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.081552][T17100] team0: Port device team_slave_0 added [ 446.102391][T17100] team0: Port device team_slave_1 added [ 446.139883][T17100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.148202][T17100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.175643][T17100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.189015][T17100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.196203][T17100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.224925][T17100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.247836][T17214] C: renamed from veth1_to_team (while UP) [ 446.286810][T17214] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3197'. [ 446.316639][T17217] netlink: 'syz.3.3198': attribute type 10 has an invalid length. [ 446.346418][T17217] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 446.363410][T17217] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 446.389778][T17217] netlink: 'syz.3.3198': attribute type 11 has an invalid length. [ 446.447567][T17100] hsr_slave_0: entered promiscuous mode [ 446.468762][T17100] hsr_slave_1: entered promiscuous mode [ 446.493624][T17100] debugfs: 'hsr0' already exists in 'hsr' [ 446.514304][T17100] Cannot create hsr debugfs directory [ 446.649573][T17231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3202'. [ 446.870550][T17240] : renamed from veth0_to_bond (while UP) [ 446.896449][T17243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3207'. [ 446.938023][T17243] gretap1: entered allmulticast mode [ 447.192224][T17261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3213'. [ 447.220970][ T6743] net_ratelimit: 14 callbacks suppressed [ 447.220991][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 447.361027][ T5625] Bluetooth: hci0: command tx timeout [ 447.398363][T17272] netlink: 'syz.1.3217': attribute type 4 has an invalid length. [ 447.407093][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 447.450912][T17272] netlink: 'syz.1.3217': attribute type 4 has an invalid length. [ 447.491800][T17272] xt_ipcomp: unknown flags 1D [ 447.541586][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 447.720835][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 447.765872][T17283] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3222'. [ 447.850272][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 447.916507][T17100] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 447.959181][T17100] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 447.982544][T17100] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 448.009305][T17100] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 448.011462][T17297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3227'. [ 448.023195][T17100] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 448.082248][T17100] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 448.113773][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 448.171945][T17100] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 448.195722][T17100] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 448.311751][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 448.444477][T17100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.530668][T17100] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.551202][ T6737] bond4: (slave bridge1): failed to get link speed/duplex [ 448.572033][ T6741] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.579209][ T6741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.614880][T17324] netlink: 'syz.0.3231': attribute type 12 has an invalid length. [ 448.666005][ T6741] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.673233][ T6741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.712231][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 448.835306][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 449.088053][T17335] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3232'. [ 449.155577][T17335] ip6gre1: entered promiscuous mode [ 449.165672][T17335] ip6gre1: entered allmulticast mode [ 449.440679][ T5625] Bluetooth: hci0: command tx timeout [ 449.644399][T17350] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3237'. [ 449.880708][T17100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.016025][T17363] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3239'. [ 450.036379][T17363] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3239'. [ 450.055434][T17100] veth0_vlan: entered promiscuous mode [ 450.093204][T17100] veth1_vlan: entered promiscuous mode [ 450.182201][T17366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3240'. [ 450.200928][T17100] veth0_macvtap: entered promiscuous mode [ 450.229087][T17100] veth1_macvtap: entered promiscuous mode [ 450.289085][T17100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.358922][T17100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.408738][ T6731] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.458785][ T6731] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.506248][ T6731] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.526537][ T6731] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.941356][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.982579][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.064546][ T6743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.096352][ T6743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.521299][ T5625] Bluetooth: hci0: command tx timeout [ 451.622777][T17411] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3252'. [ 451.667576][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 451.685193][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 451.695949][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 451.706214][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 451.713994][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 451.743346][T17412] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3252'. [ 451.785967][T17420] netlink: 'syz.2.3253': attribute type 5 has an invalid length. [ 452.128668][T17434] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3256'. [ 452.270958][ T6731] net_ratelimit: 23 callbacks suppressed [ 452.270978][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 452.430026][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 452.473522][T17446] IPVS: set_ctl: invalid protocol: 47 100.1.1.1:20004 [ 452.566876][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 452.721201][ T6739] bond4: (slave bridge1): failed to get link speed/duplex [ 452.881286][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 453.010060][ T6739] bond4: (slave bridge1): failed to get link speed/duplex [ 453.166422][T17461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3263'. [ 453.322056][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 453.530253][ T6739] bond4: (slave bridge1): failed to get link speed/duplex [ 453.691584][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 453.760463][ T5627] Bluetooth: hci2: command tx timeout [ 453.802829][T17468] macvlan0: mtu less than device minimum [ 454.165972][T17413] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.179130][T17413] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.201561][T17413] bridge_slave_0: entered allmulticast mode [ 454.223256][T17413] bridge_slave_0: entered promiscuous mode [ 454.232121][T17413] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.239621][T17413] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.248982][T17413] bridge_slave_1: entered allmulticast mode [ 454.257025][T17413] bridge_slave_1: entered promiscuous mode [ 454.517533][T17511] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3274'. [ 454.548290][T17504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3274'. [ 454.592821][T17504] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3274'. [ 454.603506][T17518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3272'. [ 454.850385][T17413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.892557][T17413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.133089][T17413] team0: Port device team_slave_0 added [ 455.169239][T17413] team0: Port device team_slave_1 added [ 455.215102][T17534] batman_adv: batadv0: Adding interface: dummy0 [ 455.232234][T17534] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.276047][T17542] SET target dimension over the limit! [ 455.303129][T17534] batman_adv: batadv0: Interface activated: dummy0 [ 455.432180][T17413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.446306][T17413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.478278][T17413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.497212][T17554] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3280'. [ 455.672348][T17413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.686253][T17537] smbdirect: ib_dev[syz0] renamed to [syz2] [ 455.695541][T17413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.733517][T17413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.842191][ T5627] Bluetooth: hci2: command tx timeout [ 456.003095][T17413] hsr_slave_0: entered promiscuous mode [ 456.029009][T17413] hsr_slave_1: entered promiscuous mode [ 456.061756][T17413] debugfs: 'hsr0' already exists in 'hsr' [ 456.069271][T17413] Cannot create hsr debugfs directory [ 456.497684][T17590] "syz.2.3288" (17590) uses obsolete ecb(arc4) skcipher [ 456.666674][T17413] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.706917][T17611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3291'. [ 456.730736][T17611] netlink: 'syz.2.3291': attribute type 1 has an invalid length. [ 456.769624][T17413] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.898027][T17413] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.008168][T17625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3295'. [ 457.057519][T17625] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3295'. [ 457.143118][T17413] netdevsim netdevsim4 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.372444][ T6731] net_ratelimit: 10 callbacks suppressed [ 457.375260][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 457.570175][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 457.752667][T17653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.860785][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 457.878397][T17413] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 457.915285][T17413] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 457.922628][ T5627] Bluetooth: hci2: command tx timeout [ 457.957691][T17413] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 457.971003][T17413] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 457.979856][T17413] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 457.997662][T17413] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 458.095823][T17413] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 458.140559][T17413] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 458.327944][T17681] netlink: 'syz.2.3314': attribute type 1 has an invalid length. [ 458.352961][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 458.439750][T17683] netlink: 'syz.1.3315': attribute type 1 has an invalid length. [ 458.489095][T17685] bond0: (slave bond_slave_1): Releasing backup interface [ 458.606859][ T10] IPVS: starting estimator thread 0... [ 458.679829][T17691] IPVS: set_ctl: invalid protocol: 41 10.1.0.254:20004 [ 458.688683][T17700] netlink: 'syz.2.3318': attribute type 2 has an invalid length. [ 458.719409][T17691] IPVS: rr: FWM 3 0x00000003 - no destination available [ 458.727986][T17697] IPVS: using max 53 ests per chain, 127200 per kthread [ 458.750795][T17702] xt_hashlimit: size too large, truncated to 1048576 [ 458.756921][T17683] 8021q: adding VLAN 0 to HW filter on device bond1 [ 458.812003][T17700] : entered promiscuous mode [ 458.870027][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 458.951083][T17413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.004698][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 459.067554][T17413] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.114587][ T6745] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.121786][ T6745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.153214][ T6745] bond4: (slave bridge1): failed to get link speed/duplex [ 459.176714][ T6745] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.183931][ T6745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.255021][T17713] vlan0: entered promiscuous mode [ 459.290219][ T6745] bond4: (slave bridge1): failed to get link speed/duplex [ 459.621927][T17740] netdevsim netdevsim3 €Â: renamed from netdevsim0 (while UP) [ 459.631036][T17741] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3331'. [ 459.656694][T17740] netlink: 'syz.3.3332': attribute type 2 has an invalid length. [ 459.705017][T17740] : entered promiscuous mode [ 460.002221][ T5627] Bluetooth: hci2: command tx timeout [ 460.057719][T17761] netlink: 'syz.2.3337': attribute type 1 has an invalid length. [ 460.341823][T17413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.875728][T17413] veth0_vlan: entered promiscuous mode [ 460.985396][T17413] veth1_vlan: entered promiscuous mode [ 461.113801][T17413] veth0_macvtap: entered promiscuous mode [ 461.149132][T17413] veth1_macvtap: entered promiscuous mode [ 461.217611][T17413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.235882][T17413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.264047][ T6731] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.280744][ T6745] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.298507][ T6745] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.320463][ T6741] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.420193][ T6741] net_ratelimit: 25 callbacks suppressed [ 462.420213][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 462.540164][ T6737] bond4: (slave bridge1): failed to get link speed/duplex [ 462.650061][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 462.760274][ T6737] bond4: (slave bridge1): failed to get link speed/duplex [ 462.870038][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 462.980152][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 463.090075][ T6737] bond4: (slave bridge1): failed to get link speed/duplex [ 463.220151][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 463.330050][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 463.442456][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 463.848778][T17792] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 464.006683][ T6741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.025853][ T6741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.156168][ T6739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.177164][ T6739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.197444][T17816] syzkaller0: entered promiscuous mode [ 464.218247][T17816] syzkaller0: entered allmulticast mode [ 464.228552][T17816] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3352'. [ 464.260458][T17833] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3356'. [ 464.270867][T17834] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3356'. [ 464.606132][T17843] netlink: 'syz.4.3358': attribute type 4 has an invalid length. [ 464.625921][T17846] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3361'. [ 464.643711][T17846] netlink: 'syz.0.3361': attribute type 10 has an invalid length. [ 464.658789][T17843] netlink: 'syz.4.3358': attribute type 4 has an invalid length. [ 464.662105][T17846] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.674247][T17846] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.689477][T17846] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.696814][T17846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.704421][T17846] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.711649][T17846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.730774][T17846] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 464.885945][T17862] netlink: 'syz.0.3363': attribute type 13 has an invalid length. [ 464.934299][T17862] netlink: 'syz.0.3363': attribute type 17 has an invalid length. [ 465.059643][T17861] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.066975][T17861] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.104886][T17875] netlink: 'syz.4.3367': attribute type 1 has an invalid length. [ 465.176815][T17874] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3367'. [ 465.197212][T17876] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3367'. [ 465.267600][T17861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.304852][T17861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.586767][T17887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3373'. [ 465.610286][T17862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.618444][T17862] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.631600][T17862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.663429][T17862] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.670731][T17862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.686426][T17862] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.693675][T17862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.723102][T17862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.736847][T17862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.789041][T17862] veth1_vlan: left promiscuous mode [ 465.801503][T17862] veth0_vlan: left promiscuous mode [ 465.815649][T17862] veth0_vlan: entered promiscuous mode [ 465.849310][T17862] veth1_vlan: entered promiscuous mode [ 465.874639][T17862] veth1_macvtap: left promiscuous mode [ 465.892096][T17862] veth0_macvtap: left promiscuous mode [ 465.903916][T17862] veth0_macvtap: entered promiscuous mode [ 465.946151][T17862] veth1_macvtap: entered promiscuous mode [ 465.966740][T17862] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 465.984207][T17862] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 466.000721][ T1500] block nbd3: Possible stuck request ffff888027ba7000: control (read@0,1024B). Runtime 90 seconds [ 466.010849][T17862] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 466.012134][ T1500] block nbd3: Possible stuck request ffff888027ba71c0: control (read@1024,1024B). Runtime 90 seconds [ 466.029747][ T1500] block nbd3: Possible stuck request ffff888027ba7380: control (read@2048,1024B). Runtime 90 seconds [ 466.040840][ T1500] block nbd3: Possible stuck request ffff888027ba7540: control (read@3072,1024B). Runtime 90 seconds [ 466.073468][T17862] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 466.099054][T17862] ip6gre1: left promiscuous mode [ 466.112891][T17862] ip6gre1: left allmulticast mode [ 466.137098][T17862] veth0_to_team: entered promiscuous mode [ 466.149514][T17867] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3364'. [ 466.361076][T17889] bridge2: port 1(vlan2) entered blocking state [ 466.367355][T17898] netlink: 'syz.4.3376': attribute type 1 has an invalid length. [ 466.383616][T17889] bridge2: port 1(vlan2) entered disabled state [ 466.391852][T17889] vlan2: entered allmulticast mode [ 466.397467][T17889] bridge2: entered allmulticast mode [ 466.428640][T17889] vlan2: left allmulticast mode [ 466.442103][T17889] bridge2: left allmulticast mode [ 466.573401][T17898] bond1: option mode: invalid value (9) [ 466.593187][T17898] bond1 (unregistering): Released all slaves [ 466.708840][T17904] : renamed from dummy0 [ 466.713180][ T6745] nci: nci_rx_work: unknown MT 0x6 [ 466.756196][T17921] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3380'. [ 466.824067][T17921] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3380'. [ 467.112382][T17943] netlink: 'syz.1.3386': attribute type 1 has an invalid length. [ 467.112382][T17941] netlink: 'syz.1.3386': attribute type 1 has an invalid length. [ 467.148277][T17941] gretap2: entered allmulticast mode [ 467.158097][T17941] bond2: (slave gretap2): making interface the new active one [ 467.166731][T17941] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 467.510866][ T12] net_ratelimit: 11 callbacks suppressed [ 467.510882][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 467.630126][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 467.740632][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 467.850195][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 467.960280][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 468.070212][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 468.180289][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 468.290064][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 468.400074][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 468.510157][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 469.516522][T17911] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 469.762907][T17958] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3391'. [ 469.789739][T17952] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 469.806901][T17952] bond1 (unregistering): Released all slaves [ 469.845973][ T2033] block nbd2: Possible stuck request ffff888027b15080: control (read@0,1024B). Runtime 120 seconds [ 469.861777][ T2033] block nbd2: Possible stuck request ffff888027b15240: control (read@1024,1024B). Runtime 120 seconds [ 469.873372][ T2033] block nbd2: Possible stuck request ffff888027b15400: control (read@2048,1024B). Runtime 120 seconds [ 469.886633][ T2033] block nbd2: Possible stuck request ffff888027b155c0: control (read@3072,1024B). Runtime 120 seconds [ 470.089864][T17967] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3394'. [ 470.131694][T17967] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3394'. [ 470.236757][T17972] syzkaller0: entered promiscuous mode [ 470.249542][T17972] syzkaller0: entered allmulticast mode [ 470.578317][T18003] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3403'. [ 470.593920][T18003] IPv6: Can't replace route, no match found [ 471.257007][T18016] netlink: 'syz.4.3408': attribute type 1 has an invalid length. [ 471.325086][T18016] netlink: 'syz.4.3408': attribute type 2 has an invalid length. [ 472.093482][T18047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3409'. [ 472.225637][T18043] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.233089][T18043] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.363065][T18043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.387280][T18043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.496901][T18044] ipip0: entered promiscuous mode [ 472.813259][T18017] ipvlan3: entered promiscuous mode [ 472.847230][ T48] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.881715][ T48] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.955645][ T48] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.967199][ T48] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.130214][ T48] net_ratelimit: 18 callbacks suppressed [ 473.130235][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 473.270537][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 473.283589][T18097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3425'. [ 473.390043][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 473.485689][T18104] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3430'. [ 473.500453][ T6739] bond4: (slave bridge1): failed to get link speed/duplex [ 473.610535][ T6739] bond4: (slave bridge1): failed to get link speed/duplex [ 473.741230][ T6745] bond4: (slave bridge1): failed to get link speed/duplex [ 473.861281][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 473.981040][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 474.091835][ T6745] bond4: (slave bridge1): failed to get link speed/duplex [ 474.204901][T18100] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 474.213858][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 474.237739][T18130] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3437'. [ 474.618764][T18155] SET target dimension over the limit! [ 474.703493][T18159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3444'. [ 474.729459][T18159] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3444'. [ 474.739862][T18159] netlink: 'syz.3.3444': attribute type 2 has an invalid length. [ 475.131653][T18180] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.139384][T18180] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.260407][T18180] batman_adv: batadv0: Interface deactivated: dummy0 [ 475.542201][T18180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.566643][T18180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.638833][ T12] netdevsim netdevsim3 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.647576][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.671511][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.689151][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.797535][T18213] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 476.021805][T18217] netlink: 'syz.3.3458': attribute type 10 has an invalid length. [ 476.031106][T18217] bond0: (slave netdevsim1): Releasing backup interface [ 476.039502][T18217] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 476.048199][T18217] team0: Port device netdevsim1 added [ 476.222288][T18221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3460'. [ 476.259604][T18221] bond1 (unregistering): Released all slaves [ 477.721249][T18163] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 477.733526][T18214] netlink: 'syz.3.3458': attribute type 11 has an invalid length. [ 477.760930][T18214] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3458'. [ 477.966709][T18241] gretap0: entered promiscuous mode [ 478.104159][T18241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3465'. [ 478.179686][T18252] net_ratelimit: 28 callbacks suppressed [ 478.179705][T18252] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 478.180481][T18250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3469'. [ 478.232747][T18254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3469'. [ 478.241816][ T6745] bond4: (slave bridge1): failed to get link speed/duplex [ 478.382745][T18262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3472'. [ 478.394143][ T6745] bond4: (slave bridge1): failed to get link speed/duplex [ 478.422654][T18262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3472'. [ 478.439860][T18268] netlink: 'syz.4.3474': attribute type 6 has an invalid length. [ 478.440468][T18262] netlink: 'syz.2.3472': attribute type 19 has an invalid length. [ 478.463355][T18269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3474'. [ 478.478025][T18271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3474'. [ 478.511217][T18272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3472'. [ 478.521801][T18269] vlan2: entered promiscuous mode [ 478.528521][T18262] netlink: 'syz.2.3472': attribute type 20 has an invalid length. [ 478.557551][T18272] netlink: 'syz.2.3472': attribute type 19 has an invalid length. [ 478.586736][T18272] netlink: 'syz.2.3472': attribute type 20 has an invalid length. [ 478.605868][T18271] vlan2: entered promiscuous mode [ 478.650599][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 478.663895][ T6745] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.689436][ T6745] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.717838][ T6745] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.747029][ T6745] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.770206][ T6745] bond4: (slave bridge1): failed to get link speed/duplex [ 478.890061][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 479.170209][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 479.290390][ T6745] bond4: (slave bridge1): failed to get link speed/duplex [ 479.420080][ T6745] bond4: (slave bridge1): failed to get link speed/duplex [ 479.561776][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 479.815881][T18333] FAULT_INJECTION: forcing a failure. [ 479.815881][T18333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.829716][T18333] CPU: 1 UID: 0 PID: 18333 Comm: syz.1.3492 Not tainted syzkaller #0 PREEMPT(full) [ 479.829740][T18333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 479.829752][T18333] Call Trace: [ 479.829760][T18333] [ 479.829767][T18333] dump_stack_lvl+0xe8/0x150 [ 479.829801][T18333] should_fail_ex+0x40c/0x560 [ 479.829830][T18333] _copy_from_user+0x2d/0xb0 [ 479.829859][T18333] __sys_bpf+0x2e7/0xd90 [ 479.829894][T18333] ? __pfx___sys_bpf+0x10/0x10 [ 479.829926][T18333] ? __fget_files+0x2a/0x420 [ 479.829966][T18333] ? ksys_write+0x242/0x270 [ 479.829996][T18333] ? __pfx_ksys_write+0x10/0x10 [ 479.830028][T18333] __x64_sys_bpf+0xba/0xd0 [ 479.830048][T18333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.830070][T18333] do_syscall_64+0x174/0x580 [ 479.830098][T18333] ? trace_irq_disable+0x3b/0x140 [ 479.830120][T18333] ? clear_bhb_loop+0x40/0x90 [ 479.830143][T18333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.830162][T18333] RIP: 0033:0x7f6323f9de59 [ 479.830179][T18333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.830194][T18333] RSP: 002b:00007f6324e93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 479.830213][T18333] RAX: ffffffffffffffda RBX: 00007f6324225fa0 RCX: 00007f6323f9de59 [ 479.830227][T18333] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 479.830239][T18333] RBP: 00007f6324e93090 R08: 0000000000000000 R09: 0000000000000000 [ 479.830250][T18333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.830261][T18333] R13: 00007f6324226038 R14: 00007f6324225fa0 R15: 00007ffe0e6ceb78 [ 479.830292][T18333] [ 480.131970][T18342] netlink: 'syz.1.3496': attribute type 1 has an invalid length. [ 480.164219][T18347] Cannot find add_set index 0 as target [ 480.180434][T18343] netlink: 'syz.1.3496': attribute type 1 has an invalid length. [ 480.491795][T18371] bond1: entered promiscuous mode [ 480.497382][T18371] 8021q: adding VLAN 0 to HW filter on device bond1 [ 480.576194][T18376] 8021q: adding VLAN 0 to HW filter on device bond1 [ 480.592969][T18376] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 480.603907][T18376] bond1: (slave sit1): Error -95 calling set_mac_address [ 480.767113][T18395] ip6gre1: entered promiscuous mode [ 480.772571][T18395] ip6gre1: entered allmulticast mode [ 480.779713][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 480.827986][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 480.837595][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 480.896316][T18403] SET target dimension over the limit! [ 481.360873][ T5353] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 481.479253][T18437] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 481.538762][T18441] __nla_validate_parse: 6 callbacks suppressed [ 481.538780][T18441] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3525'. [ 481.599872][T18438] syzkaller0: entered promiscuous mode [ 481.609376][T18438] syzkaller0: entered allmulticast mode [ 481.684760][ T5353] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 481.758313][T18451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3529'. [ 481.810105][T18451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3529'. [ 481.822876][T18452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3529'. [ 481.836730][T18451] netlink: 'syz.3.3529': attribute type 12 has an invalid length. [ 481.845444][T18452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3529'. [ 481.850714][T18451] netlink: 'syz.3.3529': attribute type 11 has an invalid length. [ 481.863595][T18452] netlink: 'syz.3.3529': attribute type 12 has an invalid length. [ 483.880202][ T12] net_ratelimit: 14 callbacks suppressed [ 483.880220][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 484.025637][T18479] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3535'. [ 484.041883][ T6745] bond4: (slave bridge1): failed to get link speed/duplex [ 484.126848][T18486] IPVS: set_ctl: invalid protocol: 33 10.1.1.2:20003 [ 484.173116][T18486] x_tables: duplicate underflow at hook 2 [ 485.280584][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 486.810577][ T6745] bond4: (slave bridge1): failed to get link speed/duplex [ 486.899100][T18494] syzkaller0: entered promiscuous mode [ 486.921575][T18494] syzkaller0: entered allmulticast mode [ 487.021833][ T6745] bond4: (slave bridge1): failed to get link speed/duplex [ 487.191466][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 487.239026][T18513] syzkaller0: entered promiscuous mode [ 487.262062][T18513] syzkaller0: entered allmulticast mode [ 487.324229][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 487.490003][ T6745] bond4: (slave bridge1): failed to get link speed/duplex [ 487.632556][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 487.762369][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 487.890559][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 488.395101][T18522] validate_nla: 1 callbacks suppressed [ 488.395122][T18522] netlink: 'syz.0.3543': attribute type 1 has an invalid length. [ 489.031487][ T6743] net_ratelimit: 7 callbacks suppressed [ 489.031507][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 489.270013][ T6739] bond4: (slave bridge1): failed to get link speed/duplex [ 489.298660][T18553] syzkaller0: entered promiscuous mode [ 489.319538][T18553] syzkaller0: entered allmulticast mode [ 489.453107][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 489.545898][T18571] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3557'. [ 489.613010][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 489.730326][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 489.821416][T18577] syzkaller0: entered promiscuous mode [ 489.856011][T18577] syzkaller0: entered allmulticast mode [ 489.880355][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 489.954428][T18578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3559'. [ 490.041994][T18587] Cannot find add_set index 0 as target [ 490.057574][T18581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3559'. [ 490.170967][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 490.324172][ T6741] nci: nci_rx_work: unknown MT 0x6 [ 490.329356][T18604] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 490.350333][T18596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 490.390045][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 490.610037][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 490.731317][ T6739] bond4: (slave bridge1): failed to get link speed/duplex [ 491.029702][T18619] netlink: 'syz.1.3566': attribute type 1 has an invalid length. [ 491.063952][T18619] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.3566'. [ 491.092850][T18613] x_tables: duplicate underflow at hook 1 [ 491.529118][T18635] veth0: entered promiscuous mode [ 491.615262][T18635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3572'. [ 491.720918][T18635] bond0: (slave bond_slave_1): Releasing backup interface [ 491.885672][T18642] tipc: Started in network mode [ 491.891227][T18642] tipc: Node identity e6604da0b9a6, cluster identity 4711 [ 491.898683][T18642] tipc: Enabled bearer , priority 0 [ 491.928899][T18634] veth0: left promiscuous mode [ 492.118154][T18643] syzkaller0: entered promiscuous mode [ 492.148020][T18643] syzkaller0: entered allmulticast mode [ 492.162459][T18643] tipc: Resetting bearer [ 492.264239][T18648] macvlan3: entered allmulticast mode [ 492.270351][T18648] veth1: entered allmulticast mode [ 492.279053][T18648] team0: Port device macvlan3 added [ 492.377271][T18640] tipc: Resetting bearer [ 493.649014][T18683] xt_TPROXY: Can be used only with -p tcp or -p udp [ 494.162596][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 494.546322][T18640] tipc: Disabling bearer [ 494.602013][ T6731] net_ratelimit: 6 callbacks suppressed [ 494.602032][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 494.630013][ T5814] tipc: Node number set to 1606831520 [ 494.740866][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 494.813090][T18687] bond4: entered allmulticast mode [ 494.931458][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 495.070018][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 495.190501][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 495.271321][T18716] x_tables: duplicate entry at hook 1 [ 495.318031][T18716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3595'. [ 495.320188][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 495.451046][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 495.570030][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 495.681707][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 495.847845][T18720] netlink: 'syz.2.3596': attribute type 1 has an invalid length. [ 495.860971][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 495.882732][T18721] syzkaller0: entered promiscuous mode [ 495.888426][T18721] syzkaller0: entered allmulticast mode [ 495.905823][T18719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3597'. [ 495.916855][T18721] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3597'. [ 495.928935][T18719] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3597'. [ 496.093087][ T1500] block nbd3: Possible stuck request ffff888027ba7000: control (read@0,1024B). Runtime 120 seconds [ 496.112497][ T1500] block nbd3: Possible stuck request ffff888027ba71c0: control (read@1024,1024B). Runtime 120 seconds [ 496.123899][ T1500] block nbd3: Possible stuck request ffff888027ba7380: control (read@2048,1024B). Runtime 120 seconds [ 496.135056][ T1500] block nbd3: Possible stuck request ffff888027ba7540: control (read@3072,1024B). Runtime 120 seconds [ 496.191725][T18742] ipip0: left promiscuous mode [ 496.917900][ T5282] veth0_macvtap: left promiscuous mode [ 497.572530][T18798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3614'. [ 499.257563][T18753] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 499.486920][T18815] SET target dimension over the limit! [ 499.641484][ T6743] net_ratelimit: 31 callbacks suppressed [ 499.641506][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 499.676288][T18829] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3623'. [ 499.777796][T18837] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3623'. [ 499.845033][T18837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3623'. [ 499.938366][ T2033] block nbd2: Possible stuck request ffff888027b15080: control (read@0,1024B). Runtime 150 seconds [ 499.949461][ T2033] block nbd2: Possible stuck request ffff888027b15240: control (read@1024,1024B). Runtime 150 seconds [ 499.961019][ T2033] block nbd2: Possible stuck request ffff888027b15400: control (read@2048,1024B). Runtime 150 seconds [ 499.972069][ T2033] block nbd2: Possible stuck request ffff888027b155c0: control (read@3072,1024B). Runtime 150 seconds [ 500.050094][ T6739] bond4: (slave bridge1): failed to get link speed/duplex [ 500.204344][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 500.341159][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 500.470125][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 500.622160][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 500.785594][ T6741] bond4: (slave bridge1): failed to get link speed/duplex [ 500.821961][ T5627] Bluetooth: hci2: link tx timeout [ 500.829285][ T5627] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 500.845996][ T5627] Bluetooth: hci2: link tx timeout [ 500.851303][ T5627] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 500.860322][ T5627] Bluetooth: hci2: link tx timeout [ 500.865502][ T5627] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 500.873248][ T5627] Bluetooth: hci2: link tx timeout [ 500.878472][ T5627] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 500.886935][ T5627] Bluetooth: hci2: link tx timeout [ 500.892314][ T5627] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 500.900528][ T5627] Bluetooth: hci2: link tx timeout [ 500.905673][ T5627] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 500.922584][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 500.998652][T18896] veth0: entered promiscuous mode [ 501.031565][T18899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3638'. [ 501.070700][T18897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3637'. [ 501.078636][T18899] bond2: entered promiscuous mode [ 501.085114][T18899] bond2: entered allmulticast mode [ 501.090725][T18899] 8021q: adding VLAN 0 to HW filter on device bond2 [ 501.098437][T18896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3637'. [ 501.100343][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 501.159503][T18896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3637'. [ 501.171649][T18899] netlink: 4256 bytes leftover after parsing attributes in process `syz.3.3638'. [ 501.187617][T18899] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3638'. [ 501.197419][T18899] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3638'. [ 501.320984][T18912] bond0: entered promiscuous mode [ 501.332345][T18912] bond_slave_0: entered promiscuous mode [ 501.339563][T18912] bridge0: entered promiscuous mode [ 501.357204][T18912] bond0: left promiscuous mode [ 501.364683][T18912] bond_slave_0: left promiscuous mode [ 501.370975][T18912] bridge0: left promiscuous mode [ 501.445829][T18918] bond0: entered promiscuous mode [ 501.446404][T18924] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3642'. [ 501.468350][T18918] bond_slave_0: entered promiscuous mode [ 501.482161][T18924] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3642'. [ 501.483132][T18918] bridge0: entered promiscuous mode [ 501.510141][T18918] bond0: left promiscuous mode [ 501.515090][T18918] bond_slave_0: left promiscuous mode [ 501.521259][T18918] bridge0: left promiscuous mode [ 501.541607][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 501.860860][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.884427][ T6745] bond8: left promiscuous mode [ 501.892537][ T6745] bridge0: port 1(bond8) entered disabled state [ 501.905154][ T6745] bond1: left promiscuous mode [ 501.910387][ T6745] bridge0: port 3(bond1) entered disabled state [ 502.134565][T18947] netlink: 'syz.1.3643': attribute type 2 has an invalid length. [ 502.163655][T18947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3643'. [ 502.297866][T18961] netlink: 'syz.0.3646': attribute type 13 has an invalid length. [ 502.431343][ T6745] bond0 (unregistering): Released all slaves [ 502.456999][ T6745] bond1 (unregistering): Released all slaves [ 502.472759][ T6745] bond2 (unregistering): Released all slaves [ 502.488293][ T6745] bond3 (unregistering): Released all slaves [ 502.503520][ T6745] bond4 (unregistering): Released all slaves [ 502.528763][ T6745] bond5 (unregistering): Released all slaves [ 502.544191][ T6745] bond6 (unregistering): Released all slaves [ 502.558755][ T6745] bond7 (unregistering): Released all slaves [ 502.581937][ T6745] bond8 (unregistering): Released all slaves [ 502.597157][ T6745] bond9 (unregistering): Released all slaves [ 502.617816][ T6745] bond10 (unregistering): Released all slaves [ 502.673364][T18947] ¿: entered promiscuous mode [ 502.863460][T18969] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 502.874907][T18969] bond3 (unregistering): Released all slaves [ 502.894473][ T5627] Bluetooth: hci2: command 0x0406 tx timeout [ 502.904217][ T6745] tipc: Left network mode [ 503.432996][T18977] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.440715][T18977] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.518459][T18977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.537827][T18977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.690690][T18983] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.698212][T18983] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.758492][T18983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.774961][T18983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.853240][T18983] ip6gre1: left promiscuous mode [ 503.858230][T18983] ip6gre1: left allmulticast mode [ 503.919504][ T6741] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.963405][ T6741] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.004286][ T6741] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.032082][ T6741] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.256899][ T6741] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.300811][ T6741] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.313968][ T6741] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.341293][ T6741] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.429339][ T6741] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.460560][ T6741] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.489395][ T6741] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.516017][ T6741] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.635304][T19026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.687462][ T48] net_ratelimit: 5 callbacks suppressed [ 504.687486][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 504.980221][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 504.999469][T19038] tipc: Can't bind to reserved service type 0 [ 505.181033][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 505.300625][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 506.855545][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 507.110122][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 507.124266][T19101] lo: entered promiscuous mode [ 507.134513][T19101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 507.159781][T19100] netlink: 'syz.1.3668': attribute type 49 has an invalid length. [ 507.215076][ T6743] wlan1: Trigger new scan to find an IBSS to join [ 507.230441][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 507.364328][T19110] Bluetooth: MGMT ver 1.23 [ 507.440669][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 507.552159][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 507.588370][T19120] __nla_validate_parse: 4 callbacks suppressed [ 507.588388][T19120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3673'. [ 508.093209][ T5625] block nbd0: Receive control failed (result -1) [ 508.103094][ T5625] [ 508.105447][ T5625] ====================================================== [ 508.112462][ T5625] WARNING: possible circular locking dependency detected [ 508.119485][ T5625] syzkaller #0 Not tainted [ 508.123884][ T5625] ------------------------------------------------------ [ 508.130882][ T5625] kworker/u9:2/5625 is trying to acquire lock: [ 508.137014][ T5625] ffff88802a24c5e0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 508.146491][ T5625] [ 508.146491][ T5625] but task is already holding lock: [ 508.153835][ T5625] ffff888077f29068 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 508.162773][ T5625] [ 508.162773][ T5625] which lock already depends on the new lock. [ 508.162773][ T5625] [ 508.173163][ T5625] [ 508.173163][ T5625] the existing dependency chain (in reverse order) is: [ 508.182162][ T5625] [ 508.182162][ T5625] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 508.189801][ T5625] __mutex_lock+0x19d/0x1550 [ 508.194921][ T5625] nbd_queue_rq+0x373/0x1150 [ 508.200106][ T5625] blk_mq_dispatch_rq_list+0x499/0x1990 [ 508.206235][ T5625] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 508.213112][ T5625] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 508.219607][ T5625] blk_mq_run_work_fn+0x16c/0x300 [ 508.225137][ T5625] process_scheduled_works+0xa8e/0x14e0 [ 508.231190][ T5625] worker_thread+0xa47/0xfb0 [ 508.236288][ T5625] kthread+0x388/0x470 [ 508.240864][ T5625] ret_from_fork+0x514/0xb70 [ 508.246020][ T5625] ret_from_fork_asm+0x1a/0x30 [ 508.251289][ T5625] [ 508.251289][ T5625] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 508.258484][ T5625] __mutex_lock+0x19d/0x1550 [ 508.263584][ T5625] nbd_queue_rq+0xc1/0x1150 [ 508.268601][ T5625] blk_mq_dispatch_rq_list+0x499/0x1990 [ 508.274655][ T5625] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 508.281494][ T5625] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 508.288012][ T5625] blk_mq_run_work_fn+0x16c/0x300 [ 508.293541][ T5625] process_scheduled_works+0xa8e/0x14e0 [ 508.299593][ T5625] worker_thread+0xa47/0xfb0 [ 508.304689][ T5625] kthread+0x388/0x470 [ 508.309272][ T5625] ret_from_fork+0x514/0xb70 [ 508.314373][ T5625] ret_from_fork_asm+0x1a/0x30 [ 508.319639][ T5625] [ 508.319639][ T5625] -> #4 (set->srcu){.+.+}-{0:0}: [ 508.326747][ T5625] __synchronize_srcu+0xc9/0x2f0 [ 508.332194][ T5625] elevator_switch+0x1e8/0x7b0 [ 508.337540][ T5625] elevator_change+0x2fa/0x480 [ 508.342860][ T5625] elevator_set_default+0x375/0x440 [ 508.348568][ T5625] blk_register_queue+0x3f3/0x4e0 [ 508.354148][ T5625] __add_disk+0x6cb/0xe30 [ 508.359024][ T5625] add_disk_fwnode+0xfb/0x4b0 [ 508.364210][ T5625] nbd_dev_add+0x733/0xb60 [ 508.369138][ T5625] nbd_init+0x15f/0x1e0 [ 508.373900][ T5625] do_one_initcall+0x250/0x870 [ 508.379175][ T5625] do_initcall_level+0x10a/0x1a0 [ 508.384646][ T5625] do_initcalls+0x59/0xa0 [ 508.389485][ T5625] kernel_init_freeable+0x29d/0x3e0 [ 508.395195][ T5625] kernel_init+0x1d/0x1d0 [ 508.400032][ T5625] ret_from_fork+0x514/0xb70 [ 508.405130][ T5625] ret_from_fork_asm+0x1a/0x30 [ 508.410406][ T5625] [ 508.410406][ T5625] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 508.418212][ T5625] __mutex_lock+0x19d/0x1550 [ 508.423315][ T5625] elevator_change+0x1af/0x480 [ 508.428591][ T5625] elevator_set_none+0xb5/0x140 [ 508.433970][ T5625] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 508.440289][ T5625] nbd_start_device+0x189/0xb30 [ 508.445652][ T5625] nbd_genl_connect+0x1597/0x1c10 [ 508.451188][ T5625] genl_family_rcv_msg_doit+0x233/0x340 [ 508.457245][ T5625] genl_rcv_msg+0x614/0x7a0 [ 508.462259][ T5625] netlink_rcv_skb+0x226/0x4a0 [ 508.467541][ T5625] genl_rcv+0x28/0x40 [ 508.472030][ T5625] netlink_unicast+0x7bb/0x940 [ 508.477315][ T5625] netlink_sendmsg+0x813/0xb40 [ 508.482604][ T5625] sock_sendmsg_nosec+0x13a/0x180 [ 508.488157][ T5625] ____sys_sendmsg+0x54e/0x850 [ 508.493440][ T5625] ___sys_sendmsg+0x2a5/0x360 [ 508.498629][ T5625] __x64_sys_sendmsg+0x1b1/0x290 [ 508.504150][ T5625] do_syscall_64+0x174/0x580 [ 508.509255][ T5625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.515662][ T5625] [ 508.515662][ T5625] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 508.524263][ T5625] blk_alloc_queue+0x544/0x690 [ 508.529545][ T5625] __blk_mq_alloc_disk+0x194/0x390 [ 508.535173][ T5625] nbd_dev_add+0x494/0xb60 [ 508.540111][ T5625] nbd_init+0x15f/0x1e0 [ 508.544785][ T5625] do_one_initcall+0x250/0x870 [ 508.550061][ T5625] do_initcall_level+0x10a/0x1a0 [ 508.555514][ T5625] do_initcalls+0x59/0xa0 [ 508.560356][ T5625] kernel_init_freeable+0x29d/0x3e0 [ 508.566068][ T5625] kernel_init+0x1d/0x1d0 [ 508.570908][ T5625] ret_from_fork+0x514/0xb70 [ 508.576009][ T5625] ret_from_fork_asm+0x1a/0x30 [ 508.581276][ T5625] [ 508.581276][ T5625] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 508.588474][ T5625] fs_reclaim_acquire+0x71/0x100 [ 508.593950][ T5625] __kmalloc_noprof+0xbc/0x720 [ 508.599223][ T5625] tls_sw_sendmsg+0x599/0x2860 [ 508.604568][ T5625] sock_sendmsg_nosec+0x90/0x180 [ 508.610015][ T5625] sock_sendmsg+0x1ca/0x2d0 [ 508.615024][ T5625] splice_to_socket+0xb5e/0x12a0 [ 508.620471][ T5625] direct_splice_actor+0x101/0x160 [ 508.626093][ T5625] splice_direct_to_actor+0x57b/0xcb0 [ 508.631982][ T5625] do_splice_direct+0x195/0x290 [ 508.637341][ T5625] do_sendfile+0x52e/0x7c0 [ 508.642264][ T5625] __se_sys_sendfile64+0x144/0x1a0 [ 508.647884][ T5625] do_syscall_64+0x174/0x580 [ 508.652988][ T5625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.659384][ T5625] [ 508.659384][ T5625] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 508.667452][ T5625] __lock_acquire+0x1520/0x2cf0 [ 508.672830][ T5625] lock_acquire+0x106/0x350 [ 508.677846][ T5625] lock_sock_nested+0x41/0x100 [ 508.683144][ T5625] inet_shutdown+0x6a/0x390 [ 508.688163][ T5625] nbd_mark_nsock_dead+0x2cb/0x550 [ 508.693790][ T5625] recv_work+0x1cee/0x1e10 [ 508.698717][ T5625] process_scheduled_works+0xa8e/0x14e0 [ 508.704771][ T5625] worker_thread+0xa47/0xfb0 [ 508.709867][ T5625] kthread+0x388/0x470 [ 508.714449][ T5625] ret_from_fork+0x514/0xb70 [ 508.719548][ T5625] ret_from_fork_asm+0x1a/0x30 [ 508.725075][ T5625] [ 508.725075][ T5625] other info that might help us debug this: [ 508.725075][ T5625] [ 508.735289][ T5625] Chain exists of: [ 508.735289][ T5625] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 508.735289][ T5625] [ 508.748311][ T5625] Possible unsafe locking scenario: [ 508.748311][ T5625] [ 508.755748][ T5625] CPU0 CPU1 [ 508.761099][ T5625] ---- ---- [ 508.766449][ T5625] lock(&nsock->tx_lock); [ 508.770855][ T5625] lock(&cmd->lock); [ 508.777344][ T5625] lock(&nsock->tx_lock); [ 508.784271][ T5625] lock(sk_lock-AF_INET6-NBD); [ 508.789135][ T5625] [ 508.789135][ T5625] *** DEADLOCK *** [ 508.789135][ T5625] [ 508.797262][ T5625] 3 locks held by kworker/u9:2/5625: [ 508.802526][ T5625] #0: ffff888027a31940 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 508.813743][ T5625] #1: ffffc9000420fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 508.825475][ T5625] #2: ffff888077f29068 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 508.834772][ T5625] [ 508.834772][ T5625] stack backtrace: [ 508.840646][ T5625] CPU: 0 UID: 0 PID: 5625 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 508.840663][ T5625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 508.840673][ T5625] Workqueue: nbd0-recv recv_work [ 508.840694][ T5625] Call Trace: [ 508.840702][ T5625] [ 508.840708][ T5625] dump_stack_lvl+0xe8/0x150 [ 508.840735][ T5625] print_circular_bug+0x2e1/0x300 [ 508.840751][ T5625] check_noncircular+0x12e/0x150 [ 508.840775][ T5625] __lock_acquire+0x1520/0x2cf0 [ 508.840803][ T5625] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 508.840897][ T5625] ? try_to_wake_up+0x8c5/0x14d0 [ 508.840924][ T5625] ? inet_shutdown+0x6a/0x390 [ 508.840943][ T5625] lock_acquire+0x106/0x350 [ 508.840960][ T5625] ? inet_shutdown+0x6a/0x390 [ 508.840981][ T5625] ? __queue_work+0x1ea/0x10a0 [ 508.841010][ T5625] lock_sock_nested+0x41/0x100 [ 508.841032][ T5625] ? inet_shutdown+0x6a/0x390 [ 508.841052][ T5625] inet_shutdown+0x6a/0x390 [ 508.841071][ T5625] nbd_mark_nsock_dead+0x2cb/0x550 [ 508.841100][ T5625] recv_work+0x1cee/0x1e10 [ 508.841114][ T5625] ? __lock_acquire+0x683/0x2cf0 [ 508.841133][ T5625] ? register_lock_class+0x31/0x2e0 [ 508.841153][ T5625] ? __lock_acquire+0x683/0x2cf0 [ 508.841174][ T5625] ? __pfx_recv_work+0x10/0x10 [ 508.841188][ T5625] ? do_raw_spin_lock+0x12b/0x2f0 [ 508.841208][ T5625] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 508.841224][ T5625] ? process_scheduled_works+0xa20/0x14e0 [ 508.841243][ T5625] ? rcu_is_watching+0x15/0xb0 [ 508.841265][ T5625] ? process_scheduled_works+0xa20/0x14e0 [ 508.841281][ T5625] process_scheduled_works+0xa8e/0x14e0 [ 508.841308][ T5625] ? __pfx_process_scheduled_works+0x10/0x10 [ 508.841326][ T5625] ? assign_work+0x3cf/0x5d0 [ 508.841342][ T5625] worker_thread+0xa47/0xfb0 [ 508.841367][ T5625] kthread+0x388/0x470 [ 508.841386][ T5625] ? __pfx_worker_thread+0x10/0x10 [ 508.841401][ T5625] ? __pfx_kthread+0x10/0x10 [ 508.841420][ T5625] ret_from_fork+0x514/0xb70 [ 508.841441][ T5625] ? __pfx_ret_from_fork+0x10/0x10 [ 508.841460][ T5625] ? __switch_to+0xc89/0x1420 [ 508.841478][ T5625] ? __pfx_kthread+0x10/0x10 [ 508.841497][ T5625] ret_from_fork_asm+0x1a/0x30 [ 508.841516][ T5625] [ 509.064840][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 509.605293][ T6745] hsr_slave_0: left promiscuous mode [ 509.613904][ T6745] hsr_slave_1: left promiscuous mode [ 509.820059][ T6731] net_ratelimit: 4 callbacks suppressed [ 509.820080][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 509.934054][ T6745] IPVS: stop unused estimator thread 0... [ 509.941047][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 510.050022][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 510.170058][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 510.280003][ T6745] bond4: (slave bridge1): failed to get link speed/duplex [ 510.390016][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 510.500000][ T6743] bond4: (slave bridge1): failed to get link speed/duplex [ 510.610010][ T6745] bond4: (slave bridge1): failed to get link speed/duplex [ 510.719981][ T6737] bond4: (slave bridge1): failed to get link speed/duplex [ 510.840107][ T6737] bond4: (slave bridge1): failed to get link speed/duplex [ 512.240041][ T6731] wlan1: Trigger new scan to find an IBSS to join [ 513.160064][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.850043][ T12] net_ratelimit: 35 callbacks suppressed [ 514.850084][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 514.970077][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 515.080341][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 515.190138][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 515.300315][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 515.410062][ T6731] bond4: (slave bridge1): failed to get link speed/duplex [ 515.530109][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 515.650036][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 515.759984][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 515.869990][ T6731] bond4: (slave bridge1): failed to get link speed/duplex