last executing test programs: 4m32.683842377s ago: executing program 0 (id=292): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000040)=0x3, 0x4) socket(0x10, 0x3, 0xfffffffe) (async) r2 = socket(0x10, 0x3, 0xfffffffe) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0x5, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0xf2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200001d4}, 0x8840) syz_genetlink_get_family_id$tipc2(&(0x7f0000001ac0), r0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 4m31.695340863s ago: executing program 0 (id=295): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0xcc, 0x8037, 0x1, 0x70bd26, 0x5, {0x1}, [@nested={0xb8, 0x1, 0x0, 0x1, [@nested={0x3a, 0x119, 0x0, 0x1, [@generic="d30b"]}, @typed={0xaa, 0x103, 0x0, 0x0, @binary="61576797e654209724818f2d6794a6781ad07ba41e74e53c9dfa04a2e2ae72ff231365431922b1712a4fe2d609ecb89b0fe6e45e31f5b315149a191e747dd50f818f6d34a9be5ddaafc9b6f669ac0211b87e09543e976482c442d50ee4f1f300355d458048f218656473c18d8876456a67288c60400b3943b742ad9263911de9270363546d6de14ce12c5f56b70fbb64af4f504b75a19c9bc65489df2bd9cd91979c542be612"}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20ca1c3eaa0000000000d3a6e9e0f54c00000000000000", @ANYRES16=r2, @ANYBLOB="080028bd7000fcdbdf254b0000000c00a7000a00000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x188c0}, 0x40000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000540)={'team_slave_0\x00', &(0x7f0000000340)=@ethtool_perm_addr={0x4b, 0x3c, "5c76276f6c86622447b03b0b5a0a55971abe9d615061f3caa4558e439123d9a25466a5baa878af6fb788f3df29692a24f23b0590059809e295812f5c"}}) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @info_reply={0x10, 0x0, 0x0, 0x401, 0x7}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000002c0)='bic', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) shutdown(r4, 0x1) setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) listen(r4, 0x89) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 4m28.147537467s ago: executing program 0 (id=304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x94}, @NFTA_SET_DESC={0x18, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x14, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x4}]}]}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, 'H\x00\x00\x00\x00\x00\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x101}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf4}}, 0x0) 4m26.61899352s ago: executing program 0 (id=306): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0xa, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="7a0af8ff75257000bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b25952850a84a70002b2ab3d6ffaa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e9e54687d3c56d7bedb6b2f25ddb8c640bb321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0b6dd7356aa79d5fabb5c0d0da6d719d7e0efb2bb713d18242cd5df6ca53307a4cdd91be4587f90e317c8de5e5c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1786eda2b20"], &(0x7f0000000100)='GPL\x00'}, 0x48) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d412000000000000002900000004000000", 0xfe60) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000500)=r2, 0x4) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) writev(r3, &(0x7f0000000740)=[{&(0x7f0000000380)="6876d01f349eb06fd9cb7c01b4fa913f464780b31fb4f0fd45c02df3d961698e23c548bd38bb6d43e6ed59b0a8423ed9d72ff2817cec5bce5490aecc0bdf5a9880dd9383c01bb77a02b797def9e868a568934f3dbae77f4f8742fc28daaa1af20040a7464c075575277616ece23046739404b40d9d119a60003da8abb9203409487055b2910e3da09f19ce6b6c1795194d36306a569293", 0x97}, {&(0x7f0000000540)="08960045c4d764d91519824d7ad1015c2a04c3a91a3c362f1859995dc9d7b945666741", 0x23}], 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000004a00)=[{0x0}], 0x1}, 0x40880) 4m24.398898722s ago: executing program 0 (id=312): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)={0x34, r1, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x34}}, 0x4000) 4m23.321789323s ago: executing program 0 (id=316): socket(0x1e, 0x1, 0x200) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="240000001800070125bd7000fbdbdf254b693f00040009000c00b8"], 0x24}, 0x1, 0x0, 0x0, 0x4040895}, 0x4) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r1, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x40f03, 0x32, '\x00', 0x0, @fallback=0x5f704ade271e4f3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x46, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x2}, &(0x7f0000000440)={0x0, 0x2710}) 4m7.815985629s ago: executing program 32 (id=316): socket(0x1e, 0x1, 0x200) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="240000001800070125bd7000fbdbdf254b693f00040009000c00b8"], 0x24}, 0x1, 0x0, 0x0, 0x4040895}, 0x4) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r1, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x40f03, 0x32, '\x00', 0x0, @fallback=0x5f704ade271e4f3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x46, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x2}, &(0x7f0000000440)={0x0, 0x2710}) 3.106866921s ago: executing program 4 (id=2456): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200), 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000790028000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x21, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) 2.527865349s ago: executing program 5 (id=2464): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x2a, 0x0, &(0x7f0000000b40)) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x5a}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x10008af9}]}}]}, 0x48}}, 0x4000010) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x7}}]}}]}, 0x48}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xd, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x10, 0x2}}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x10}, @TCA_FLOW_KEYS={0x8, 0x1, 0x16718}]}}]}, 0x4c}}, 0x1d56ce4333ce878e) 2.366682349s ago: executing program 3 (id=2465): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0, 0x0, 0x0, 0x0, 0xfffffff9}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0x800}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0xff05}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.282211584s ago: executing program 1 (id=2466): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0, 0xffffffffffffffff}, 0x4) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000010240)={&(0x7f0000000180), 0xc, &(0x7f0000010200)={&(0x7f00000001c0)={0x10, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x3f2, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) shutdown(r5, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r6) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r7, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0xfffffffc, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x6880) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xe0ad1b42a4118436}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r7, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x8000, @link='syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x80) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r10, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r10, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000010340)={&(0x7f0000010280), 0xc, &(0x7f0000010300)={&(0x7f0000000000)={0x20, r10, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xc1d1, 0x1e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) 2.156763566s ago: executing program 3 (id=2467): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaac437bf8cb64c86dd6bcce16400000000000000000001000000000000000000000000000000002c02000000000000050200090502000005020006c204"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000300)="5d119872", 0x4}], 0x1, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 2.014726565s ago: executing program 4 (id=2468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x50}}, 0x8000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000650a01000000faff6600000006000000180100002020702500000007002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000056000000060000002c93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280", @ANYRES16=r3], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0xc4010) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x40, r4, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x24}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x300080c0}, 0xffd21cacaf232a69) 2.007499717s ago: executing program 2 (id=2469): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmsg(r0, &(0x7f0000000900)={&(0x7f0000000240)=@can, 0x80, &(0x7f0000000700)=[{&(0x7f00000006c0)="6cea157cbef2558073", 0x9}], 0x1, &(0x7f0000000740)=[{0x50, 0x111, 0x80, "727f638247bf3c7df9b4d72b43fa5212bb4151bce54d49bf27448cd9fd4739931528c2fe74869981ed7c582f9634a609a3e5b91b0420bb6659843ecd"}, {0x68, 0x119, 0x2, "48aebc77ab4f52b3ad563a127195bbe97d871e829a4cfc742078fee7e4a36a74dc17c70ce7bc83b306f8e4fbaa4cf10e6f1ec7a3c0ac7783924104cd7b5e64b1d2c06680cf2f0ad0abe8b1ac2a9faa4543f874e6"}, {0x48, 0x110, 0x8, "df468c28e1686db04b7e712b514e8eba79ca0d088d0327511ba4565ffe65228817671a16918670402fcec2dc3701a6bcc4f4c15227"}, {0x10, 0x10d, 0x2}, {0x18, 0x10a, 0x1, '{fK'}], 0x128}, 0x1a1122c14ed3bc2f) 1.967323084s ago: executing program 5 (id=2470): r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0xf}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) ppoll(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000000)={{{@in=@private=0xa010100, @in=@loopback, 0x4e20, 0x401, 0x4e22, 0x0, 0xa, 0x0, 0x1a0, 0x88}, {0x4, 0x7, 0x100, 0x7, 0x8, 0xfa1, 0x4, 0x6}, {0xffff, 0x2, 0x9, 0x6}, 0x400, 0x6e6bb2, 0x2, 0x1, 0x1, 0x3}, {{@in=@local, 0x4d3, 0x33}, 0x2, @in=@loopback, 0x3500, 0x3, 0x3, 0xff, 0x2, 0x64, 0x91}}, 0xe8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) unshare(0x26020480) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9380, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x80000001}, 0x0, 0x0) getsockopt$bt_hci(r5, 0x84, 0x1, &(0x7f0000002100)=""/4073, &(0x7f00000010c0)=0xfe9) 1.792410595s ago: executing program 4 (id=2471): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="60010000100001000000000000000000fe8000000000000000000000000000bb000000000000000000000000000000000000ecdf000000000a00204000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0700000000fc0100000000000000000000030000000000000000000000000000000000000000000000000000000400000000000000000000000000000ef8ffffffffffffff00000000000000000400000000000000c73b000000000000070000800000000000000000000000000200000000020000ffffffff2abd70000000800002000000e5000000000000001c001700000000002abd7000000000000000ba6e0000000000000000050021006ec738bf6f1c5a18020000004c001400686d616328736861323536290000030000000000000000000000000000000000000000000000000000ac1e3af5ba00"/255], 0x160}}, 0x24044000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0xfe}]}) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0xfe}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socket$unix(0x1, 0x5, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getpeername(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000009c0)={0x1c, 0x10, 0xa, 0x301, 0x70bd2a, 0x25dfdbff, {0x1, 0x0, 0x6}, [@generic="32bf4e0266"]}, 0x1c}}, 0x4000040) (async) sendmsg$nl_netfilter(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000009c0)={0x1c, 0x10, 0xa, 0x301, 0x70bd2a, 0x25dfdbff, {0x1, 0x0, 0x6}, [@generic="32bf4e0266"]}, 0x1c}}, 0x4000040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x70bd25, 0x0, {0x3}, [@NHA_MASTER={0x8, 0xa, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000885}, 0x0) syz_emit_ethernet(0x88, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "ca2000", 0x52, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x6, 0x1, [], "bf3f030b7d27"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, [0x5, 0xb, 0x3e]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x9]}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x48, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r6, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSSID={0xa}]}, 0x28}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x40, 0x26, 0x301, 0x270bd1d, 0x25dfdbfa, {0x1}, [@generic="d31e7cf656a23e94342cd52b01aed0d7561c7fc9cdf4f999e52a55c642b505ca651bd17ebac9bc1dbeffb6"]}, 0x40}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = gettid() sendmsg$netlink(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="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"/816, @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB], 0x4e0}], 0x1, 0x0, 0x0, 0xb305e06d8ab48223}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000007a00)={0x44, 0x26, 0x723, 0x0, 0x0, "", [@nested={0x32, 0xa9, 0x0, 0x1, [@generic="57d753865bc026738a23", @nested={0x21, 0xeb, 0x0, 0x1, [@typed={0x8, 0x20, 0x0, 0x0, @fd=r11}, @generic="2db88f6f88ebb2fd1bd786312d0c165c579777e85d"]}]}]}, 0x44}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) (async) sendmsg$netlink(r11, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000007a00)={0x44, 0x26, 0x723, 0x0, 0x0, "", [@nested={0x32, 0xa9, 0x0, 0x1, [@generic="57d753865bc026738a23", @nested={0x21, 0xeb, 0x0, 0x1, [@typed={0x8, 0x20, 0x0, 0x0, @fd=r11}, @generic="2db88f6f88ebb2fd1bd786312d0c165c579777e85d"]}]}]}, 0x44}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x84}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94) 1.791171715s ago: executing program 2 (id=2472): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="34000000410007012dbd7000fedb62580315102d94d32d80180009801100998032881935c6d6e20900a5ea75b6000000040008"], 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000240)="5724b2c7fb0a2a36b5ac9808c4ac8e25fa47d1ae8f642238933fca3c893b7e6d21b3813fcf97fd8b483e0a7744a613684b65f6edfd30a66c42d7c7251505180f2426018497af4b30f79819a6e196640a2a2c479aea1d14c3ac7b489069043193107c7f5a891038f7e3aa2cbf57be6a5345060ff91d18df", &(0x7f0000000100)=""/24, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r3, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x10, 0x0, 0x0, 0x4, {[@md5sig={0x13, 0x12, "02722e3486ebd900"}]}}}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r8, &(0x7f0000000380)=0x8, 0x12) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, @in6={0xa, 0x4e24, 0xc, @remote, 0x6}], 0x38) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x80800) sendmmsg$alg(r11, 0x0, 0x0, 0x40800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @map_val={0x18, 0x5, 0x2, 0x0, r7}]}, &(0x7f0000000600)='syzkaller\x00', 0x6f42, 0x84, &(0x7f0000000700)=""/132, 0x41100, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x1, 0x0, 0x4, 0x401}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000800)=[0xffffffffffffffff, r8], &(0x7f0000000840)=[{0x5, 0x3, 0xd}, {0x4, 0x4, 0x2}, {0x5, 0x2, 0x40005, 0x6}], 0x10, 0xb}, 0x94) write$tun(r8, &(0x7f0000003180)=ANY=[@ANYBLOB="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"], 0x1001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x30, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) 1.743434668s ago: executing program 1 (id=2473): r0 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000000b060102000000000000000006000002050001"], 0x68}, 0x1, 0x0, 0x0, 0x48}, 0x4800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r3], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @local}, 0x10) bind(r0, &(0x7f0000000000)=@xdp={0x2c, 0x8, r5, 0x23}, 0x80) 1.52354528s ago: executing program 5 (id=2474): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@call={0x85, 0x0, 0x0, 0x8b}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value=0x201}, 0x94) 1.416933544s ago: executing program 3 (id=2475): syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x6, 0xa3) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x321d, 0x10001) syz_emit_ethernet(0xd3, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0xb, 0x6, 'QP#', 0x9d, 0x6, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, {[@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], {{0x4e21, 0x4e24, r0, r2, 0x1, 0x0, 0x14, 0x40, 0x2, 0x0, 0x80, {[@generic={0xfe, 0x8, "bc14eb78d909"}, @eol, @exp_fastopen={0xfe, 0x7, 0xf989, "468b56"}, @fastopen={0x22, 0x4, "17e9"}, @mptcp=@mp_join={0x1e, 0x3, 0x6}, @mss={0x2, 0x4, 0x40}, @sack={0x5, 0x1e, [0x7, 0x3000000, 0x8001, 0x9, 0x1, 0x400, 0x1]}, @mptcp=@mp_join={0x1e, 0x3, 0x3}]}}, {"1883388a5c5fcce7e5ea6226da3d3940734e4cbdb991a9c7a3d732961826ce246ddd95e149f3d0d2f14bc61faff1f008b8894ea788"}}}}}}}, &(0x7f0000000180)={0x0, 0x1, [0x6f5, 0x651, 0xed0, 0xe8a]}) syz_emit_ethernet(0xec, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val={0x88a8, 0x2, 0x0, 0x1}, {0x8100, 0x3, 0x0, 0x4}}, {@mpls_uc={0x8847, {[{0x3, 0x0, 0x1}], @llc={@llc={0x42, 0x7e, "4de6", "b270f39589142296b4d2e81ec4cd480cc51803527bea195442ec9fe25c161cc835ab81bcdf27c71023c58d3247f1513e236c3f1c6a250b66da4edce00ee11bd7f79f121f61f3b4a493c9e958f6818db8c29c4cbfa83013bcbbd53871c47eb6e136067b36ea3a1a68625d605e1d4393ce526831ee16d271ffca29fe708307bad64586701eaa378c4c60adc618d723f6a8a0009feffb4bf7d76e54dcf393996feff937fe40133e4d28344d4613cfb4e9c39da1afda3c9be5b161aff3f06f5ef2920660967228a8d7c51cb853114ac0"}}}}}}, &(0x7f00000002c0)={0x0, 0x1, [0x966, 0x91a, 0xa01, 0x8d8]}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0x6, 0xc98, 0x36, @dev={0xfe, 0x80, '\x00', 0x28}, @remote, 0x7800, 0x20, 0x5, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x6, 0x6, 0x12, @empty, @local, 0x10, 0x20, 0x85, 0x6154}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000dc0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000540)={0x828, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x464, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4b, 0x4, "57c9b52570dc5ff149ab184053ccdecb52f2c3b60bfac318fa7656fa89b686966938480871dc4021401193357459b1a4f21cc9b1d0fb89ffe828ee1dbaa858d0fc10387e2ea9b7"}, @ETHTOOL_A_BITSET_VALUE={0x96, 0x4, "81cb2f62b353492a073a077dc301a0e74e040177867d627fdc11b40c014e1c4d4dadd37cadbe133f904cdcd37af3c43157f66b6de02bfeb41fef153b93652ca1a7262bcde2883b4649cb8c7b20af816319e22a43fe556fc53c9ca4765fa3f75ea29e5a00b54d6a24535c06ea8dd3faf45272983d0ddd0ea223dd61baa12a1c8759e541926abb13bc816b45ac29f79fcbe80b"}, @ETHTOOL_A_BITSET_VALUE={0x19, 0x4, "31dfe2002cd537170724bda27be9c1d3dfd8f45bc0"}, @ETHTOOL_A_BITSET_VALUE={0x83, 0x4, "d27d347df7a0d73f27ec6cd3f8fc19c693b7767c3d48005599e9acb72f4e17d5a3c146a0a99f933207f3ad543b9cf5d4be9e868e1c419129e4ddb3420fb0f4965654ccbca140597b92ef898590e2502f9518c88b8f786acab62c5040daf609f84ab06d055d85d09d2525e6e66ff76ac0189c7fe62f74391a44d9568f9026d5"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x400}, @ETHTOOL_A_BITSET_MASK={0x95, 0x5, "0e65c6528d61d027de849be4b9731e191ef7f835669ea797dfae5942fd378bb0af7a9cb1f1dcaf94d0a15747619d80c79f0e44bcd8e9b2afe3ca3d1068b657405db1ae6cae171a91be56f3ad492e909013f7e6924112fff0c5dc2a399597dcd6c7c5604b92109edf08da76cf99aeaaf7b5457e6df62c898b425b1798caeae0338c0e053f4a793c8381ca315463c585e9f1"}, @ETHTOOL_A_BITSET_MASK={0xf8, 0x5, "3b66b0edf5ec927821c4b1f466b300d4bd8901c3d5ca3dded60f5f201348237ccefea45042f9ca1d83a7a1d6dae98d26910061f5c9db67c92aa8f84b3e3968ef6ab375cf6ca30cb8c25cea0e667800209dcb137b20709df58ed4f961a5f1c36f95792cd80ecae841cbc8eeca4d0cb8d8dd8f8ff33273fc30a28d1f9e448037197edf9e3390763b3e4d7cd14a41606dd8af14a3b0f92a4b3b8c2735f8fe30cded64a0d1ef7395ae4b54434ccc57fc69368f835ebe0141c0adc3ae3dddad20ce0730cd51bc1f4ff154bb5ef58022d98bdd8c6ce68bac9caf79071ac51bd010ceac4256687d6d2d3b4d05f86a93e9924a898f76d02f"}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f800000}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '%@^,.(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xba, 0x4, "fca5c3b5de2ea50707a97a287f04bc841c55df8989a6d9109d94971711d91351bc2974906b0ef1f5e6b5683576936d0b72b3562be7c08022bd3bc52989e4285f2881b6760dacc0627de4adb0de0aae03ec133c266cd345f96c5ab3e097c8e45db92a20069a2cfcff14f530d03f7c6c4dbebe62efb5e4d874971612c93e239dab659b1278f58d19c3e891348570a897c916e1f7f83f0e70b33ecc405852d87789afaa5b6420cd0e0de631ea42308e47c173487c7c712e"}]}, @ETHTOOL_A_FEATURES_WANTED={0x30c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xec, 0x4, "3f5a84e4afe5d51e5467948c0d3ae3a2296d86c8133e01533dca9ad8e53bff8579f7f6a41415de12b46448f4e08c80f55983e42191c36354590378927f222fa021a693b750be820a89505bfa355eaf8af50668a7a19e3a80338188f36846874c0b1f2d96427fb7a02d87c98a0e0ab5dfdbc7b811a22870d485e8f9abb1d2bb8744fe978b5599303760ebbf53d51fb4875e79b5a7da9925034ed421458d55024739e09423d509d57dca18b4225776a80bf708ce2768342dcd66b2502030d128abb43f84c840c264e07da2bf65ed9da5c52ab6e289c43a5c1a510ea1b3acf59dc28174e08b8997ff29"}, @ETHTOOL_A_BITSET_VALUE={0x38, 0x4, "f0fb499670468e24ac4b0a26381eed3a0e3ecfbc4e54f5ffaaa55f9e7d52e2b7eac415a2d800c98f9c93d42c62815e6ed65c2d73"}, @ETHTOOL_A_BITSET_VALUE={0x2f, 0x4, "12c5b8302e08d856aa4f4bc72e797b97ff812d0acc611c3e55c94b5fa3fa0867f17a8a1483a3b095bf5255"}, @ETHTOOL_A_BITSET_MASK={0xcd, 0x5, "4b20b708c828fcfc75f62adbf537b3d7139ca66f451ea868c6a61be353d2261f46ff8be05b6bec85c2f18d0b440ca4e0745c6318f50953b4834e3670930f0471ea8328758c1b5a4a1457e44ce1a1ce7d7753260111725827c26a3bfde6a66914e12a8e35a832d1808773dd185d1ae2359b28e38d3b44dc01df264549637f9fa5a72ba38d4dc6267ca1c38e4a27b741c801edab61b0e1b1fea7e1b3d183045adcef921bc9ccee1b1b4f309c428e38a27bdb65b58b3af8cca0bf72332c6996c0b728dca1f08d1c85d68d"}, @ETHTOOL_A_BITSET_MASK={0x32, 0x5, "c75a9d0a192885b75325b35edea24d7a6c6a1791a8b8b883b20e6f19d53c60ac8141b2bb528ed465bad13a79d060"}, @ETHTOOL_A_BITSET_VALUE={0xa8, 0x4, "29968cf0ef43360489a403668f5dd72df1ec6b5269823d0968dc48757e72ec81e26ecb97a05f6bbb30c265868b683bdf186050c4706ae482506f9965a85906dc8647962af9483b9ff5f39e9955cce5b88725161160b3bcf9828762d550066abc6d885e7e775459acbab487d4f1de6c3899ea870d98399816058832a0cb2f47d9b548c388da996b7bde799ae08b65fb01c242d425a031499e286f2a0615e9467b0164f81a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x828}, 0x1, 0x0, 0x0, 0x4008010}, 0x24008001) write$tun(r3, &(0x7f0000000e00)={@void, @void, @eth={@remote, @broadcast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@ipv6={0x86dd, @tcp={0x7, 0x6, "daa71a", 0x37e, 0x6, 0xd336b469e7421b03, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@fragment={0x0, 0x0, 0x2, 0x1, 0x0, 0x3, 0x65}, @dstopts={0x0, 0x25, '\x00', [@generic={0x9, 0xce, "c89d641015b09c204792c343586d97c78ff6eb52913a7caf89d2cb90e88d326ad0167530efbc8e1a1b1805bccfe9ff47618258b76fca2a146ffae267e9ae0ee882c0f937a94b08db1a53b4b4cf5249be988d76250346386febdaee2d6c63943c5299103abd507977c5f87999322f2a2d5d8d0c54ff322ffcf85f22809cbe7817ced0669275c652c84bd3423e77845605fcd69559dba6ba74c59516995978c8359ae746572f0d68d797210b28cc99b35476af876da9c5bca275d9ec028c96c46046743730b9acd56e8f48cd24d226"}, @generic={0x0, 0x56, "d082ade4c94778b30c1613f576d56c1b031aa765e995c047c8c5cfad86d3d8b1c71497a4f0fcd3f7f1981ee29e8faee8257ed0ebf2347436a9887c253801f31cd5b9311ad0db9106aecc18298b1dc1815665d195546b"}]}, @fragment={0x3c, 0x0, 0x0, 0x0, 0x0, 0x2, 0x68}, @fragment={0x3c, 0x0, 0x3, 0x1, 0x0, 0x9, 0x66}, @dstopts={0x1d, 0x1b, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0xd}, @ra={0x5, 0x2, 0x401}, @jumbo={0xc2, 0x4, 0xe}, @hao={0xc9, 0x10, @private0}, @generic={0x94, 0xb5, "0dac9cc2083416d98ee386455799d955427f5e002c96065a6a2661bbbb629df8af14ed6ff405e3d334ac7dadbb94dcb3e89de75fff9ba4f33f3e2285c84587f1795e7d926bf04ff0f94a0d420bbe4c4b0e4d58cb1c1e835d12b74c8a5603423b896fe9805609daa6835284bb65e4ac524cccea146b485c9e48c4b9b77753b18edf52591d877c5bc1270a02b23753e473a91457cc52f25d6969bd0927a06557aa0ade463da04554e125246d0d609452d4bc36c9bc21"}]}], {{0x4e24, 0x4e22, r1, r1, 0x0, 0x0, 0x53, 0x2, 0x9, 0x0, 0x5, {[@fastopen={0x22, 0x9, "4ff67ecba1c230"}, @exp_fastopen={0xfe, 0x13, 0xf989, "bc5ea714d3e02b4ef95dbc181baad6"}, @md5sig={0x13, 0x12, "8ca4a0bb7daf74df1634d7bbb8f27607"}, @md5sig={0x13, 0x12, "10302c42985597a15871e2b9a4614665"}, @window={0x3, 0x3, 0x8}, @exp_fastopen={0xfe, 0x6, 0xf989, "f091"}, @window={0x3, 0x3, 0x2}, @mptcp=@remove_addr={0x1e, 0xe9, 0x2, 0x0, "c23a40f4f2e7912f979d5261bebe44415c55c2e0f0f258bdb89ac43b8884c761c44922a3a63471d69348f32951a6021f39dc23d0c7198dbee072c78f7a515418392302d43994da27ebd27835c7454e3bb4f803178213c95debeb0af42ed4d8e72c85720f28bddca9c3df174d86519f54716dbdff551ca9bb486e888b0d03cda85d17a46abd9c95d392f7bfc1acf6e05c45afe801d89e04c55be82a1d7cc586119ed2be88423bca951c14d69e01ab140d1e4d710206783cd14de49d37169c2a211a46060efed02898bb2b574ae7741dde74a378b68659fdb261938366dc10b151805e1b37cf8e"}, @sack_perm={0x4, 0x2}]}}, {"7dbc"}}}}}}}}, 0x3b8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f00000011c0)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e24, 0xbf9, @loopback, 0x1000}, @in6={0xa, 0x4e20, 0x401, @local, 0xffff}, @in6={0xa, 0x4e24, 0x4, @loopback}, @in6={0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}], 0x90) connect$tipc(r4, &(0x7f0000001280)=@name={0x1e, 0x2, 0x3, {{0x42, 0x4}, 0x1}}, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001300), r3) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x3c, r8, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x2c008080) write$tun(r4, &(0x7f0000001400)={@val={0x0, 0xf5}, @val={0x2, 0x4, 0x857b, 0xffff, 0x5, 0x1}, @llc={@llc={0x2, 0x0, "6de1", "d06b6557c324025da891a9a741bcff2b9c195ec264f41a1ca86b0d16b2d1c668c71c6d8ccf5affd2e82bef0e477302abbcb21220bf9cfe9b"}}}, 0x4a) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000001480), 0x4) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f00000014c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000017c0)={r3, 0x20, &(0x7f0000001780)={&(0x7f0000001680)=""/142, 0x8e, 0x0, &(0x7f0000001740)=""/18, 0x12}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x1c, 0x5, &(0x7f0000001500)=@raw=[@jmp={0x5, 0x0, 0x9, 0x8, 0x2, 0xc, 0xfffffffffffffffc}, @cb_func={0x18, 0x9}, @generic={0x40, 0x5, 0x3, 0x3, 0xc}, @exit], &(0x7f0000001540)='GPL\x00', 0x77, 0x9a, &(0x7f0000001580)=""/154, 0x41000, 0x3c, '\x00', r5, @fallback=0x2c, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001640)={0x0, 0x3, 0x4, 0x52}, 0x10, r9, r4, 0x1, 0x0, &(0x7f0000001800)=[{0x1, 0x2, 0xd, 0x3}], 0x10, 0x2}, 0x94) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r4, 0x8002f515, &(0x7f0000001900)) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0) ioctl$NILFS_IOCTL_GET_CPINFO(r10, 0x80186e82, &(0x7f0000001a80)={&(0x7f0000001980)=[{0x3, 0x0, 0x0, 0x8, 0x3, 0x6, 0xffffffffffff0000}, {0x2, 0x0, 0x4, 0x8c0, 0x1, 0x4, 0xe, 0x7}, {0x3, 0x0, 0x81, 0x6, 0x6, 0x1, 0xffffffffffffffff, 0xe9a}, {0x2, 0x0, 0x0, 0x8, 0x7, 0x2, 0x10, 0xc9fc}], 0x4, 0x38, 0x0, 0x401}) r11 = accept$packet(r3, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000001b40)={0x1, 0x2000}, 0x4) socket$unix(0x1, 0x2, 0x0) accept4$phonet_pipe(r3, &(0x7f0000001b80), &(0x7f0000001bc0)=0x10, 0x80000) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000001c00)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@private2}}, &(0x7f0000001d00)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f0000001d40)={{{@in=@loopback, @in=@rand_addr=0x64010100, 0x4e20, 0x3, 0x4e23, 0xfffe, 0xa, 0x0, 0xa0, 0x89, r12, r14}, {0x80000000, 0x2, 0x2, 0x2, 0x4, 0x0, 0x3, 0x2}, {0x7fff, 0xfffffffffffffc00, 0x7, 0x9}, 0xdc, 0x0, 0x2, 0x1, 0x2, 0x1}, {{@in=@remote, 0x4d4, 0x32}, 0x0, @in6=@local, 0x0, 0x6, 0x1, 0x2, 0x4, 0x1000, 0x7}}, 0xe8) socket$l2tp(0x2, 0x2, 0x73) 1.318564063s ago: executing program 5 (id=2476): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x94}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, 'H\x00\x00\x00\x00\x00\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x101}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xdc}}, 0x0) 1.255815393s ago: executing program 1 (id=2477): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0, 0x0, 0x0, 0x0, 0xfffffff9}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0x800}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0xff07}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.201752341s ago: executing program 2 (id=2478): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$igmp(0x2, 0x3, 0x2) socket$kcm(0x11, 0xa, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(r3, &(0x7f00000006c0)={0x11, 0x0, r5, 0x1, 0xb, 0x6, @remote}, 0x14) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0xe2, &(0x7f0000000000)={@multicast, @remote, @void, {@llc_tr={0x11, {@llc={0x42, 0x80, "f208", "b53604c96fbfd8c9ce2085d91b9d95d29862ebc83cfeda2ba126cb21a523a21477c4f185e60ba0c193b96994c666de1dcc91838bb867984f734979f195aad653171507bcfd6c6290ba36218c1199c403e6508e3668bde22ad1cead2c1dea8a057eb051a2c2c829fe15246c4121bf85b1a9883672ef4bba6d5e4bfda4f4fd30d07d0c6114ee1ead63cacb9590b3c7b2753a3b76adb8bde5db6c8d9fa5b07046c59f2c0b0460c3b16f19b6d7299270206174983ebb8b4563d418e6e8db23a83d7cd78c80684033341e4bb81603fe980e57"}}}}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000000)=0x6, 0x4) r8 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@initdev={0xac, 0x1e, 0x3, 0x0}, 0x4e1f, 0x0, 0x0, 0x3, 0xa}, {0xec, 0x8000000000000000, 0x1, 0x6811221d, 0x5, 0x8000000000000003, 0x200000200000003, 0x100000000}, {0x4000a, 0xfffffffffffffffd, 0x6, 0x7}, 0x6, 0x0, 0x1, 0x0, 0x6, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x2, @in6=@remote, 0x3502, 0x1, 0x2, 0x0, 0x9, 0x7}}, 0xe8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x7f, @mcast2, 0x1ff}, 0x1c) 1.147426975s ago: executing program 4 (id=2479): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xad, 0xad, 0x7, [@struct={0x1, 0x2, 0x0, 0x4, 0x1, 0xc, [{0xe, 0x1, 0xf0}, {0x7, 0x0, 0xbdc2}]}, @datasec={0xa, 0x8, 0x0, 0xf, 0x1, [{0x2, 0x2, 0x81}, {0x2, 0x9, 0x6}, {0x2, 0x8, 0x5}, {0x5, 0x101, 0x6}, {0x5, 0x2, 0x9}, {0x5, 0x7, 0x7fffffff}, {0x4, 0x5, 0x2}, {0x4, 0x3, 0xa}], '\t'}, @var={0xe, 0x0, 0x0, 0xe, 0x4, 0x1}, @ptr={0x2, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x5f, 0x0, 0x0, 0x2e, 0x61]}}, &(0x7f0000000400)=""/253, 0xcf, 0xfd, 0x1}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f00000001c0)=""/136, 0x88, 0x0, &(0x7f00000002c0)=""/125, 0x7d}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f00000001c0)=""/136, 0x88, 0x0, &(0x7f00000002c0)=""/125, 0x7d}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r3, r4, 0x25, 0xc, @val=@tracing={r5, 0x4}}, 0x20) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r3, r4, 0x25, 0xc, @val=@tracing={r5, 0x4}}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="ff030000000000f2a302000003000000850000005a000000958e788d9f99509b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) (async) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x5, 0x1, 0x21, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback={0x300, 0x460c6}, 0x10, 0x8000, 0x25a1, 0x40040}}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x14, 0x52, 0x6804311d36975393, 0x70bd2d, 0x25dfdbff, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884) r10 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r10, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r11 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r11, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r10, 0x10f, 0x88) (async) setsockopt$TIPC_GROUP_LEAVE(r10, 0x10f, 0x88) 1.146927718s ago: executing program 3 (id=2480): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000085}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x7}}]}}]}, 0x48}}, 0x20000000) r10 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r11 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r11, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095"], &(0x7f0000000540)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r12, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r11}, 0x20) shutdown(r10, 0x1) recvfrom$inet(r10, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.078964464s ago: executing program 5 (id=2481): r0 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xa, 0x4, 0x1, 0xb}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="12000000770000000800000002"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r7}, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r7, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r6}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r8, &(0x7f00000001c0), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfff, 0x7, 0x5, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xfffd, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000200)={'ip6tnl0\x00', r9, 0x2f, 0x0, 0x47, 0xd9, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x20, 0x10, 0x0, 0x200}}) sendmsg$can_j1939(r1, &(0x7f0000000600)={&(0x7f00000003c0)={0x1d, r10, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18, &(0x7f00000005c0)={&(0x7f00000004c0)="581fdeb378d4c3f6010da3f0d2471fe5056452770b3d77b1a67d3167cf7249083ec4c94af63d9cb214997b934b8acadf8c483fc8638c203d7ab2784c791a4641fd691cb56e82a49872748d0d2a184ec00f169529239f203e2ddd5cade26256ae253b0f8e03df6e538dc2ac26a19e7d343efe3eed3f691a733f1b0bbddee8df4b6f4d32fe8ca7005489bffa2408113c246f4a35f73393825ba441533942bdb375", 0xa0}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000841) write(r2, &(0x7f0000000280)="96fa2c0bff2099297e1c1ea6d53ff4c2f69b32d385f14857ae25047e39555bbacdb216aa20b99d21a3aa5e5775e86006778ec677400377670a3422aa5184ed400cf452f14ef81d20a792091e037ed82c9ee401f0f428bd4951eab88952d04fd3c2201db3378816", 0xfffffdce) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000000400)="0dd2e7", 0x3}], 0x1, 0x0) tee(r1, r3, 0xfffffffffffffffd, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r11 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 1.001353001s ago: executing program 1 (id=2482): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmsg(r0, &(0x7f0000000900)={&(0x7f0000000240)=@can, 0x80, &(0x7f0000000700)=[{&(0x7f00000006c0)="6cea157cbef2558073", 0x9}], 0x1, &(0x7f0000000740)=[{0x50, 0x111, 0x80, "727f638247bf3c7df9b4d72b43fa5212bb4151bce54d49bf27448cd9fd4739931528c2fe74869981ed7c582f9634a609a3e5b91b0420bb6659843ecd"}, {0x68, 0x119, 0x2, "48aebc77ab4f52b3ad563a127195bbe97d871e829a4cfc742078fee7e4a36a74dc17c70ce7bc83b306f8e4fbaa4cf10e6f1ec7a3c0ac7783924104cd7b5e64b1d2c06680cf2f0ad0abe8b1ac2a9faa4543f874e6"}, {0x48, 0x110, 0x8, "df468c28e1686db04b7e712b514e8eba79ca0d088d0327511ba4565ffe65228817671a16918670402fcec2dc3701a6bcc4f4c15227"}, {0x10, 0x10d, 0x2}, {0x18, 0x10a, 0x1, '{fK'}], 0x128}, 0x1a1122c14ed3bc2f) 868.385972ms ago: executing program 2 (id=2483): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r2, 0xff01, 0x110c2300fe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x1, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000002100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r6, &(0x7f0000000600)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x19}, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000140)="1a", 0x1}], 0x1}}, {{&(0x7f0000000a80)={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00', 0xeb}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000340)="94", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x3, 0x10, @private0, 0xb4a9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000240)="9c", 0x1}], 0x1}}], 0x3, 0x20000040) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000300)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000009c0)=ANY=[@ANYRESDEC=r0], 0x30}, 0x1, 0x0, 0x0, 0x4041}, 0x44010) 787.361729ms ago: executing program 1 (id=2484): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000002540)=ANY=[@ANYBLOB="71050240020300c9030200"], 0x13) close(r1) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000380)) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) (async) write$nci(r1, &(0x7f0000002540)=ANY=[@ANYBLOB="71050240020300c9030200"], 0x13) (async) close(r1) (async) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) (async) 739.630059ms ago: executing program 4 (id=2485): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000000000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d00000000000800220003"], 0x148}}, 0x0) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) close(r3) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x80000000}, 0xc) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x138, 0x168, 0x0, 0x138, 0xa, 0x238, 0x250, 0x250, 0x238, 0x250, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x138, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x0, 0x80, 0x5}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x1d}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x8, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000040)={0x2c, 0x1, 0x2, 0x5, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004084) sendmmsg(r1, &(0x7f00000000c0), 0x0, 0x20008040) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r10, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010026bd7000fddbdf250100000008000300070000000500050000000100000056c22136acc60b86f55425c694ea2246dc"], 0x2c}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040090}, 0x24041810) 510.51675ms ago: executing program 3 (id=2486): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0xf278}, 0x20) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000003580)={0x2, 0x0, @private=0xa010101}, 0x10) (async) connect$inet(r1, &(0x7f0000003580)={0x2, 0x0, @private=0xa010101}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180), 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180), 0x4) sendmsg$NFT_BATCH(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001100)=ANY=[@ANYRESDEC, @ANYRES64=0x0, @ANYRES32=r4, @ANYRES32=r3, @ANYRESDEC=0x0, @ANYRESDEC=r2, @ANYRES64=r1], 0x64}, 0x1, 0x0, 0x0, 0x20000080}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r6 = socket(0x2, 0x3, 0x100000001) setsockopt(r6, 0xff, 0x1, 0x0, 0x0) (async) setsockopt(r6, 0xff, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f80)='memory.events\x00', 0x7a44, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f80)='memory.events\x00', 0x7a44, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="4408ffe6ac10bd9266f30534f2b4620b49a353a3706d3edbadb56fed93d0224a5fa0ab793ed49ce38174d6bd03767eb04dc0f92f7d31e7e520589d9224f1090f20bb27b051b22aa2f2da6dd735a94a38e3d0bcab74063d8f9cdc499440b5034f5b7db73ef510d6f292615e6ea70101000072b46fc52521f741c14442", @ANYRES16=r8, @ANYRES8=r3, @ANYRES8, @ANYRES32=r8, @ANYRESHEX=r6], 0x44}}, 0x20000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001240)={&(0x7f00000012c0)=ANY=[@ANYBLOB="702b9d0931471ef0545f3b04dee462a3f1c0b3be7bd26c428800000000a3759b4b08f330e848d3e351d04e7c1283b8aebe90790d0143d80083cbbba00bb93f673bd41e33c8472bdc29c4313530713b02a9590f44e9dc64271c8d76674b3e70ceda9de4dd835a662f2ecae11b9606bc1f6c7c5a373c6d7095a1a58e6c6ee0bd87818f2e7361e8ed34f1fd3a", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fbdbdf25030000001800018014000400fe8000000000000000000000000000aa08000300030000000500050003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000005000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d000100756470"], 0x54}}, 0x0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r11, 0xc010f508, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @none, 0x6}, 0xe) (async) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @none, 0x6}, 0xe) sendmmsg$sock(r11, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r11, 0x1) (async) shutdown(r11, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffffffffc84) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffffffffc84) 406.345341ms ago: executing program 2 (id=2487): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008c000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800009db703000000f8ffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000300001801c00028008000200a2000000050001001d00000008000300ff0f00000d000100f5"], 0x44}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) close(0x4) 231.029843ms ago: executing program 4 (id=2488): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0xcc, 0x8037, 0x1, 0x70bd26, 0x5, {0x1}, [@nested={0xb8, 0x1, 0x0, 0x1, [@nested={0x3a, 0x119, 0x0, 0x1, [@generic="d30b"]}, @typed={0xaa, 0x103, 0x0, 0x0, @binary="61576797e654209724818f2d6794a6781ad07ba41e74e53c9dfa04a2e2ae72ff231365431922b1712a4fe2d609ecb89b0fe6e45e31f5b315149a191e747dd50f818f6d34a9be5ddaafc9b6f669ac0211b87e09543e976482c442d50ee4f1f300355d458048f218656473c18d8876456a67288c60400b3943b742ad9263911de9270363546d6de14ce12c5f56b70fbb64af4f504b75a19c9bc65489df2bd9cd91979c542be612"}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, 0x0, 0x40000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000540)={'team_slave_0\x00', &(0x7f0000000340)=@ethtool_perm_addr={0x4b, 0x3c, "5c76276f6c86622447b03b0b5a0a55971abe9d615061f3caa4558e439123d9a25466a5baa878af6fb788f3df29692a24f23b0590059809e295812f5c"}}) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @info_reply={0x10, 0x0, 0x0, 0x401, 0x7}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000002c0)='bic', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) shutdown(r3, 0x1) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) listen(r3, 0x89) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 163.140904ms ago: executing program 3 (id=2489): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) nanosleep(&(0x7f0000000500)={r5, r6+10000000}, &(0x7f0000000540)) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000200)="b1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000100)="ba8745", 0x3}], 0x1}}], 0x2, 0x24040800) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5, r9}, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)={0x70, r10, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x36}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x2b}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8004090}, 0x40) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)={0x4c, r11, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10000000}, @NL80211_ATTR_WIPHY_FREQ={0xfffffffffffffeea}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 162.597081ms ago: executing program 1 (id=2490): socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000009000000008080000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newlink={0x10c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2227f, 0x1040}, [@IFLA_AF_SPEC={0xd8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_INET6={0x34, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x41}}]}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x7, 0x0, 0x0, 0x10}, {0x8, 0x18, 0x0, 0x0, 0x7}, {0x8, 0x1d, 0x0, 0x0, 0x7}, {0x8, 0x7, 0x0, 0x0, 0x4}, {0x8, 0x10, 0x0, 0x0, 0x5}, {0x8, 0x21, 0x0, 0x0, 0x80}, {0x8, 0x17, 0x0, 0x0, 0x74cb9e8b}]}}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x4, 0x0, 0x0, 0x1cef}]}}, @AF_INET6={0x3c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x2f}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xd}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}]}]}, @IFLA_IFNAME={0x14, 0x3, 'pim6reg0\x00'}]}, 0x10c}}, 0x0) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000003c0)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r6, 0x0) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x9c7ab000) preadv(r7, &(0x7f0000000500)=[{&(0x7f0000000300)=""/185, 0xb9}], 0x1, 0x4f, 0x9) close(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8fffffdb702000008000000b703000000000028850000"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfce}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9, r8}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 110.880389ms ago: executing program 2 (id=2491): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000200), 0x4) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000300000000000005000000000000002e5f"], 0x0, 0x5e, 0x0, 0x1, 0xfffffffd}, 0x28) (rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x31, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 0s ago: executing program 5 (id=2492): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0, 0x0, 0x0, 0x0, 0xfffffff9}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0x800}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0xff89}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): failure. [ 260.616212][ T9768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.699232][ T9768] CPU: 0 UID: 0 PID: 9768 Comm: syz.5.938 Not tainted syzkaller #0 PREEMPT(full) [ 260.699262][ T9768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.699275][ T9768] Call Trace: [ 260.699283][ T9768] [ 260.699292][ T9768] dump_stack_lvl+0xe8/0x150 [ 260.699329][ T9768] should_fail_ex+0x410/0x560 [ 260.699367][ T9768] _copy_from_user+0x2d/0xb0 [ 260.699392][ T9768] kstrtouint_from_user+0xd6/0x180 [ 260.699427][ T9768] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 260.699477][ T9768] proc_fail_nth_write+0x8e/0x210 [ 260.699513][ T9768] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 260.699566][ T9768] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 260.699601][ T9768] vfs_write+0x296/0xba0 [ 260.699641][ T9768] ? __pfx_vfs_write+0x10/0x10 [ 260.699675][ T9768] ? __fget_files+0x2a/0x420 [ 260.699709][ T9768] ? __fget_files+0x3a2/0x420 [ 260.699738][ T9768] ? __fget_files+0x2a/0x420 [ 260.699776][ T9768] ksys_write+0x150/0x270 [ 260.699812][ T9768] ? __pfx_ksys_write+0x10/0x10 [ 260.699856][ T9768] do_syscall_64+0x166/0x520 [ 260.699884][ T9768] ? trace_irq_disable+0x3b/0x140 [ 260.699913][ T9768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.699934][ T9768] ? clear_bhb_loop+0x70/0xc0 [ 260.699961][ T9768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.699981][ T9768] RIP: 0033:0x7ffacc95e90e [ 260.700001][ T9768] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 260.700018][ T9768] RSP: 002b:00007ffacd7e1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 260.700041][ T9768] RAX: ffffffffffffffda RBX: 00007ffacd7e26c0 RCX: 00007ffacc95e90e [ 260.700056][ T9768] RDX: 0000000000000001 RSI: 00007ffacd7e20a0 RDI: 0000000000000004 [ 260.700070][ T9768] RBP: 00007ffacd7e2090 R08: 0000000000000000 R09: 0000000000000000 [ 260.700082][ T9768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 260.700094][ T9768] R13: 00007ffaccc26038 R14: 00007ffaccc25fa0 R15: 00007ffe35d5fb18 [ 260.700128][ T9768] [ 260.996904][ T9778] netlink: 'syz.4.939': attribute type 21 has an invalid length. [ 261.068187][ T9778] netlink: 'syz.4.939': attribute type 22 has an invalid length. [ 261.142521][ T9778] netlink: 'syz.4.939': attribute type 23 has an invalid length. [ 261.159321][ T9778] netlink: 'syz.4.939': attribute type 25 has an invalid length. [ 261.167188][ T9778] netlink: 'syz.4.939': attribute type 26 has an invalid length. [ 261.175574][ T9778] netlink: 16 bytes leftover after parsing attributes in process `syz.4.939'. [ 261.194593][ T9788] netlink: 'syz.2.944': attribute type 1 has an invalid length. [ 261.202801][ T9788] netlink: 224 bytes leftover after parsing attributes in process `syz.2.944'. [ 261.537783][ T113] IPVS: starting estimator thread 0... [ 261.552808][ T9806] netlink: 120 bytes leftover after parsing attributes in process `syz.5.947'. [ 261.639773][ T9810] IPVS: using max 28 ests per chain, 67200 per kthread [ 261.757737][ T9816] netlink: 20 bytes leftover after parsing attributes in process `syz.3.951'. [ 261.864969][ T9825] netlink: 52 bytes leftover after parsing attributes in process `syz.2.952'. [ 261.894725][ T9823] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 261.922307][ T9825] netlink: 48 bytes leftover after parsing attributes in process `syz.2.952'. [ 262.011984][ T9829] openvswitch: netlink: Multiple metadata blocks provided [ 262.436829][ T9855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.960'. [ 263.166497][ T9889] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 263.193086][ T9895] xt_CT: You must specify a L4 protocol and not use inversions on it [ 264.218075][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.982'. [ 264.535956][ T9966] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20014 [ 264.624955][ T9968] IPVS: Error connecting to the multicast addr [ 264.992214][ T9984] dvmrp1: entered allmulticast mode [ 265.043888][ T9986] netlink: 'syz.5.996': attribute type 1 has an invalid length. [ 265.104763][ T9986] veth5: entered allmulticast mode [ 265.130027][ T9986] bond4: (slave veth5): Enslaving as an active interface with a down link [ 265.182251][ T9991] bond4: (slave veth0_to_bond): making interface the new active one [ 265.200421][ T9991] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 265.240632][ T9986] macvlan3: entered promiscuous mode [ 265.270716][ T9986] macvlan3: entered allmulticast mode [ 265.277192][ T9986] bond4: entered promiscuous mode [ 265.295418][ T9986] veth0_to_bond: entered promiscuous mode [ 265.321707][ T9986] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 265.348217][ T9986] bond4: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of veth5 [ 265.361828][ T9986] bond4: left promiscuous mode [ 265.367290][ T9986] veth0_to_bond: left promiscuous mode [ 265.790257][T10015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.799481][T10015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.808954][T10016] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20014 [ 265.809908][T10015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.824605][T10015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.027625][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1005'. [ 266.054960][T10024] netlink: 'syz.1.1005': attribute type 1 has an invalid length. [ 266.064321][T10024] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.084356][T10024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1005'. [ 266.347739][T10034] batman_adv: batadv0: Adding interface: gretap1 [ 266.366470][T10034] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.454432][T10034] batman_adv: batadv0: Interface activated: gretap1 [ 266.845796][T10056] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20014 [ 267.237602][T10065] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1020'. [ 267.300411][T10068] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1020'. [ 267.434416][T10068] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1020'. [ 267.790564][T10084] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 268.291360][T10106] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20014 [ 268.393156][T10107] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 268.422903][T10107] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 268.465451][T10117] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.517978][T10117] netlink: 'syz.3.1033': attribute type 3 has an invalid length. [ 268.533455][T10117] netlink: 'syz.3.1033': attribute type 1 has an invalid length. [ 268.547659][T10117] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1033'. [ 268.574342][T10117] NCSI netlink: No device for ifindex 12 [ 269.056711][T10101] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 269.221150][T10140] lo: entered allmulticast mode [ 269.661255][T10158] x_tables: duplicate underflow at hook 3 [ 269.803333][T10141] lo: left allmulticast mode [ 269.893487][T10159] macvlan0: entered promiscuous mode [ 269.922913][T10159] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 270.201010][T10182] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20014 [ 270.374616][T10193] netlink: 'syz.5.1051': attribute type 2 has an invalid length. [ 270.393541][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1051'. [ 270.405096][T10192] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.419876][T10192] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.427293][T10193] openvswitch: netlink: Flow key attribute not present in set flow. [ 270.742167][T10204] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1055'. [ 270.759277][T10204] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1055'. [ 271.003446][T10212] xt_bpf: check failed: parse error [ 271.009356][T10213] xt_bpf: check failed: parse error [ 271.020080][T10184] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 271.031718][T10212] tipc: Enabled bearer , priority 10 [ 271.066399][T10213] tipc: Enabling of bearer rejected, already enabled [ 271.295498][T10223] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1063'. [ 271.334297][T10227] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20014 [ 271.864900][T10242] netlink: 'syz.3.1068': attribute type 1 has an invalid length. [ 271.873648][T10242] netlink: 272 bytes leftover after parsing attributes in process `syz.3.1068'. [ 272.028558][ T5717] tipc: Node number set to 472239398 [ 272.055461][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1069'. [ 272.150948][T10256] netlink: 'syz.2.1074': attribute type 3 has an invalid length. [ 272.167264][T10254] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 272.176417][T10254] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 272.222399][T10260] C: renamed from veth1_to_team [ 272.715296][T10280] netlink: 'syz.4.1080': attribute type 6 has an invalid length. [ 272.833183][T10248] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 272.897435][T10279] __nla_validate_parse: 1 callbacks suppressed [ 272.897465][T10279] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1081'. [ 272.956749][T10295] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1084'. [ 273.026463][T10299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1084'. [ 273.478240][T10321] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1091'. [ 273.794395][T10319] syzkaller0: entered promiscuous mode [ 273.801534][T10319] syzkaller0: entered allmulticast mode [ 274.356184][T10343] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 274.375805][T10343] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 274.966167][T10334] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 276.311295][T10368] netlink: 'syz.3.1104': attribute type 1 has an invalid length. [ 276.351269][T10367] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1102'. [ 276.379208][T10367] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1102'. [ 276.447092][T10368] 8021q: adding VLAN 0 to HW filter on device bond2 [ 276.538829][T10371] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1103'. [ 276.596895][T10374] bond2: (slave veth5): Enslaving as an active interface with a down link [ 276.618529][T10387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1107'. [ 276.650637][T10387] unsupported nla_type 216 [ 276.708264][T10388] netlink: 4912 bytes leftover after parsing attributes in process `syz.4.1103'. [ 276.791946][T10394] netlink: 'syz.3.1109': attribute type 11 has an invalid length. [ 276.819119][T10394] netlink: 'syz.3.1109': attribute type 2 has an invalid length. [ 276.847018][T10394] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1109'. [ 277.318936][T10405] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 277.338955][T10405] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 277.571550][T10413] netlink: 'syz.2.1116': attribute type 1 has an invalid length. [ 277.672869][T10413] 8021q: adding VLAN 0 to HW filter on device bond5 [ 277.759138][T10417] bond5: (slave gretap1): making interface the new active one [ 277.776092][T10417] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 277.971236][T10401] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 277.994210][T10427] __nla_validate_parse: 1 callbacks suppressed [ 277.994230][T10427] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1118'. [ 278.138973][T10432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1118'. [ 278.325395][T10434] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 278.364212][T10434] bond3: (slave macvlan3): making interface the new active one [ 278.399694][T10434] bond3: (slave macvlan3): Enslaving as an active interface with an up link [ 278.408921][T10443] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1121'. [ 278.423661][T10443] netlink: 'syz.3.1121': attribute type 2 has an invalid length. [ 278.436736][T10443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1121'. [ 278.903123][T10465] netlink: 'syz.3.1128': attribute type 5 has an invalid length. [ 278.921601][T10449] syzkaller1: entered promiscuous mode [ 278.927385][T10449] syzkaller1: entered allmulticast mode [ 279.365724][T10473] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 279.383981][T10473] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 279.844210][T10494] netlink: 'syz.1.1135': attribute type 21 has an invalid length. [ 279.852860][T10494] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1135'. [ 279.910996][T10496] ip_tables: iptables: counters copy to user failed while replacing table [ 280.021146][T10471] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 280.432183][T10519] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1144'. [ 280.450129][T10519] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1144'. [ 280.460103][T10519] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1144'. [ 280.762266][T10531] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1147'. [ 280.781235][T10533] netlink: 'syz.4.1148': attribute type 32 has an invalid length. [ 280.793236][T10533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1148'. [ 280.856417][T10533] bond4: option coupled_control: invalid value (27) [ 280.868515][T10533] bond4 (unregistering): Released all slaves [ 281.329113][T10564] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 281.358166][T10564] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 281.502883][T10569] netlink: 'syz.4.1157': attribute type 29 has an invalid length. [ 281.543581][T10569] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 281.613299][ T30] audit: type=1804 audit(1787732738.283:4): pid=10574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1159" name="/newroot/233/memory.events" dev="tmpfs" ino=1214 res=1 errno=0 [ 281.938023][T10550] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 282.354129][T10601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.376183][T10601] netlink: 'syz.1.1166': attribute type 1 has an invalid length. [ 282.663694][T10601] gretap0: entered promiscuous mode [ 282.723635][T10608] 0ªî{X¹¦: renamed from gretap0 [ 282.736859][T10608] 0ªî{X¹¦: left promiscuous mode [ 282.746840][T10608] 0ªî{X¹¦: entered allmulticast mode [ 282.765073][T10608] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 283.116705][T10634] netlink: 'syz.3.1172': attribute type 1 has an invalid length. [ 283.272484][T10634] 8021q: adding VLAN 0 to HW filter on device bond4 [ 283.320942][T10640] veth7: entered allmulticast mode [ 283.365995][T10640] bond4: (slave veth7): Enslaving as an active interface with an up link [ 283.392234][T10653] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.409135][T10653] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.443767][T10648] bond4 (unregistering): (slave veth7): Releasing backup interface [ 283.455153][T10648] bond4 (unregistering): Released all slaves [ 283.479558][T10651] syzkaller1: entered promiscuous mode [ 283.485114][T10651] syzkaller1: entered allmulticast mode [ 283.535055][T10659] __nla_validate_parse: 7 callbacks suppressed [ 283.535074][T10659] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1179'. [ 283.580851][T10663] netlink: 'syz.5.1180': attribute type 2 has an invalid length. [ 283.626040][T10659] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.712571][T10659] batman_adv: batadv0: Interface activated: ip6gretap1 [ 283.804316][T10669] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1183'. [ 283.961451][T10673] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1183'. [ 283.998436][T10636] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 284.017534][T10673] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1183'. [ 284.294131][T10698] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1190'. [ 284.303996][T10686] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 284.336344][T10686] bond4 (unregistering): Released all slaves [ 284.350204][T10701] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1190'. [ 284.440986][T10691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1188'. [ 284.698639][T10716] netlink: 388 bytes leftover after parsing attributes in process `syz.5.1193'. [ 284.904362][T10724] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1196'. [ 285.014944][T10726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1195'. [ 285.395112][T10732] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 285.408757][T10732] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 285.418961][T10734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.048206][T10730] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 286.154947][T10755] netlink: 'syz.3.1204': attribute type 2 has an invalid length. [ 286.179783][T10755] netlink: 'syz.3.1204': attribute type 2 has an invalid length. [ 286.755509][T10791] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 286.771175][T10796] openvswitch: netlink: Missing key (keys=40, expected=100) [ 286.792129][T10791] bond6 (unregistering): Released all slaves [ 286.807270][T10796] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 286.864898][T10797] xt_CT: No such helper "netbios-ns" [ 287.217414][T10814] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 287.231751][T10817] tipc: Invalid UDP bearer configuration [ 287.231806][T10817] tipc: Enabling of bearer rejected, failed to enable media [ 287.246917][T10814] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 287.384574][T10822] netlink: 'syz.1.1223': attribute type 10 has an invalid length. [ 287.449656][T10822] geneve3: entered promiscuous mode [ 287.455108][T10822] geneve3: entered allmulticast mode [ 287.502472][T10824] x_tables: duplicate underflow at hook 1 [ 287.681569][T10831] tunl0: entered promiscuous mode [ 287.697561][T10831] netlink: 'syz.1.1227': attribute type 4 has an invalid length. [ 287.869678][T10805] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 288.140202][T10858] vlan2: entered allmulticast mode [ 288.145834][T10858] bridge0: port 3(vlan2) entered blocking state [ 288.152921][T10858] bridge0: port 3(vlan2) entered disabled state [ 288.161887][T10858] vlan2: entered promiscuous mode [ 288.203676][T10847] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 288.543353][T10871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.578884][T10871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.872453][T10890] __nla_validate_parse: 13 callbacks suppressed [ 288.872472][T10890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1242'. [ 289.199625][T10899] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 289.206957][T10899] IPv6: NLM_F_CREATE should be set when creating new route [ 289.214319][T10899] IPv6: NLM_F_CREATE should be set when creating new route [ 289.221623][T10899] IPv6: NLM_F_CREATE should be set when creating new route [ 289.287080][T10903] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 289.316698][T10905] openvswitch: netlink: Message has -2 unknown bytes. [ 289.317363][T10908] openvswitch: netlink: Message has -2 unknown bytes. [ 289.875058][T10893] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 289.896158][T10928] sctp: [Deprecated]: syz.2.1254 (pid 10928) Use of int in max_burst socket option deprecated. [ 289.896158][T10928] Use struct sctp_assoc_value instead [ 290.049505][T10933] netlink: 'syz.4.1253': attribute type 3 has an invalid length. [ 290.109620][T10936] netlink: 'syz.4.1253': attribute type 15 has an invalid length. [ 290.157865][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1256'. [ 290.746861][T10967] geneve2: entered promiscuous mode [ 290.764085][T10967] geneve2: entered allmulticast mode [ 290.826536][T10956] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 290.851788][T10956] bond5 (unregistering): Released all slaves [ 291.127359][T10983] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.167570][T10983] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.214025][T10988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1268'. [ 291.299411][T10994] netlink: 'syz.1.1268': attribute type 210 has an invalid length. [ 291.327299][T10995] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1269'. [ 291.439092][T10999] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1271'. [ 291.467140][T10999] bond5: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 291.481062][T10999] bond5 (unregistering): Released all slaves [ 291.624398][T11005] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1272'. [ 291.782290][T10978] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 291.871750][T11013] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20000 [ 291.979532][T11018] netlink: 'syz.5.1276': attribute type 2 has an invalid length. [ 292.127889][T11027] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1278'. [ 292.163686][T11027] netlink: 'syz.5.1278': attribute type 1 has an invalid length. [ 292.196009][T11027] netlink: 'syz.5.1278': attribute type 2 has an invalid length. [ 292.356825][T11037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1281'. [ 292.392737][T11037] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1281'. [ 292.415176][T11046] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20014 [ 292.712636][T11059] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 292.730060][T11059] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 293.116923][T11073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1293'. [ 293.130131][ T30] audit: type=1800 audit(1787732749.803:5): pid=11079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1295" name="blkio.bfq.time_recursive" dev="tmpfs" ino=891 res=0 errno=0 [ 293.139758][T11073] batadv_slave_1: entered promiscuous mode [ 293.162366][T11073] batadv_slave_1: left promiscuous mode [ 293.170750][T11077] netlink: 'syz.1.1294': attribute type 1 has an invalid length. [ 293.372001][T11050] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 293.489200][T11092] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.499385][T11092] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.650244][T11105] netlink: 'syz.5.1303': attribute type 1 has an invalid length. [ 293.665021][T11102] lo speed is unknown, defaulting to 1000 [ 293.687137][T11102] lo speed is unknown, defaulting to 1000 [ 293.717429][T11102] lo speed is unknown, defaulting to 1000 [ 293.757619][T11102] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 293.786555][T11102] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 293.830490][T11102] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 293.891560][T11102] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 293.898903][T11113] __nla_validate_parse: 12 callbacks suppressed [ 293.898922][T11113] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1304'. [ 294.021316][T11102] lo speed is unknown, defaulting to 1000 [ 294.044276][T11102] lo speed is unknown, defaulting to 1000 [ 294.065179][T11102] lo speed is unknown, defaulting to 1000 [ 294.525597][T11102] lo speed is unknown, defaulting to 1000 [ 294.539628][T11124] netlink: 'syz.5.1311': attribute type 4 has an invalid length. [ 294.578628][T11102] lo speed is unknown, defaulting to 1000 [ 294.950067][T11133] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 294.965121][T11133] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 294.986632][T11139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1313'. [ 295.012470][T11131] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1313'. [ 295.617166][T11127] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 295.933569][T11176] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 296.078989][T11181] netlink: ct_mark mask cannot be 0 [ 296.106937][T11181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.139294][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1327'. [ 296.280133][T11198] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1331'. [ 296.684889][T11220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1339'. [ 296.699190][T11220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1339'. [ 296.710099][T11220] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1339'. [ 296.781637][T11225] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1339'. [ 296.883089][T11230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1342'. [ 297.316108][T11253] netlink: 'syz.3.1350': attribute type 2 has an invalid length. [ 297.398940][T11253] : entered promiscuous mode [ 297.541075][T11263] tipc: Enabling of bearer rejected, failed to enable media [ 297.563191][T11266] FAULT_INJECTION: forcing a failure. [ 297.563191][T11266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.586410][T11266] CPU: 1 UID: 0 PID: 11266 Comm: syz.3.1354 Not tainted syzkaller #0 PREEMPT(full) [ 297.586451][T11266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 297.586470][T11266] Call Trace: [ 297.586496][T11266] [ 297.586506][T11266] dump_stack_lvl+0xe8/0x150 [ 297.586543][T11266] should_fail_ex+0x410/0x560 [ 297.586592][T11266] _copy_from_user+0x2d/0xb0 [ 297.586618][T11266] __sys_bpf+0x2e7/0xd90 [ 297.586658][T11266] ? __pfx___sys_bpf+0x10/0x10 [ 297.586700][T11266] ? __fget_files+0x2a/0x420 [ 297.586746][T11266] ? ksys_write+0x242/0x270 [ 297.586781][T11266] ? __pfx_ksys_write+0x10/0x10 [ 297.586818][T11266] __x64_sys_bpf+0xba/0xd0 [ 297.586851][T11266] do_syscall_64+0x166/0x520 [ 297.586876][T11266] ? trace_irq_disable+0x3b/0x140 [ 297.586904][T11266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.586926][T11266] ? clear_bhb_loop+0x70/0xc0 [ 297.586957][T11266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.586979][T11266] RIP: 0033:0x7f602739e0d9 [ 297.586999][T11266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.587016][T11266] RSP: 002b:00007f60282a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 297.587038][T11266] RAX: ffffffffffffffda RBX: 00007f6027625fa0 RCX: 00007f602739e0d9 [ 297.587054][T11266] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 297.587067][T11266] RBP: 00007f60282a1090 R08: 0000000000000000 R09: 0000000000000000 [ 297.587081][T11266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.587092][T11266] R13: 00007f6027626038 R14: 00007f6027625fa0 R15: 00007fff1e8b00c8 [ 297.587125][T11266] [ 298.135993][T11287] x_tables: duplicate underflow at hook 1 [ 298.417570][T11301] netlink: 'syz.4.1363': attribute type 1 has an invalid length. [ 298.584342][T11312] FAULT_INJECTION: forcing a failure. [ 298.584342][T11312] name failslab, interval 1, probability 0, space 0, times 0 [ 298.642159][T11312] CPU: 1 UID: 0 PID: 11312 Comm: syz.3.1365 Not tainted syzkaller #0 PREEMPT(full) [ 298.642188][T11312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 298.642201][T11312] Call Trace: [ 298.642209][T11312] [ 298.642217][T11312] dump_stack_lvl+0xe8/0x150 [ 298.642255][T11312] should_fail_ex+0x410/0x560 [ 298.642292][T11312] should_failslab+0xa8/0x100 [ 298.642324][T11312] __kmalloc_cache_node_noprof+0xaa/0x630 [ 298.642354][T11312] ? __get_vm_area_node+0x155/0x2f0 [ 298.642375][T11312] ? __get_vm_area_node+0x155/0x2f0 [ 298.642402][T11312] __get_vm_area_node+0x155/0x2f0 [ 298.642422][T11312] ? __pfx_process_measurement+0x10/0x10 [ 298.642455][T11312] __vmalloc_node_range_noprof+0x358/0x1730 [ 298.642480][T11312] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 298.642514][T11312] ? __lock_acquire+0x683/0x2cf0 [ 298.642566][T11312] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 298.642592][T11312] ? aa_file_perm+0x18b/0x15f0 [ 298.642623][T11312] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 298.642662][T11312] __vmalloc_noprof+0xd2/0x120 [ 298.642685][T11312] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 298.642719][T11312] bpf_prog_alloc_no_stats+0x47/0x560 [ 298.642749][T11312] ? bpf_prog_alloc+0x2a/0x1a0 [ 298.642782][T11312] bpf_prog_alloc+0x3c/0x1a0 [ 298.642815][T11312] bpf_prog_load+0x7f8/0x1c20 [ 298.642858][T11312] ? __pfx_bpf_prog_load+0x10/0x10 [ 298.642914][T11312] __sys_bpf+0xd0d/0xd90 [ 298.642953][T11312] ? __pfx___sys_bpf+0x10/0x10 [ 298.642995][T11312] ? __fget_files+0x2a/0x420 [ 298.643041][T11312] ? ksys_write+0x242/0x270 [ 298.643083][T11312] ? __pfx_ksys_write+0x10/0x10 [ 298.643118][T11312] __x64_sys_bpf+0xba/0xd0 [ 298.643148][T11312] do_syscall_64+0x166/0x520 [ 298.643171][T11312] ? trace_irq_disable+0x3b/0x140 [ 298.643198][T11312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.643219][T11312] ? clear_bhb_loop+0x70/0xc0 [ 298.643245][T11312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.643267][T11312] RIP: 0033:0x7f602739e0d9 [ 298.643285][T11312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.643303][T11312] RSP: 002b:00007f60282a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 298.643326][T11312] RAX: ffffffffffffffda RBX: 00007f6027625fa0 RCX: 00007f602739e0d9 [ 298.643342][T11312] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 298.643356][T11312] RBP: 00007f60282a1090 R08: 0000000000000000 R09: 0000000000000000 [ 298.643369][T11312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.643381][T11312] R13: 00007f6027626038 R14: 00007f6027625fa0 R15: 00007fff1e8b00c8 [ 298.643414][T11312] [ 298.643539][T11312] syz.3.1365: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 298.943161][T11318] __nla_validate_parse: 7 callbacks suppressed [ 298.965950][T11318] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1368'. [ 299.003631][T11312] CPU: 1 UID: 0 PID: 11312 Comm: syz.3.1365 Not tainted syzkaller #0 PREEMPT(full) [ 299.003661][T11312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 299.003674][T11312] Call Trace: [ 299.003681][T11312] [ 299.003689][T11312] dump_stack_lvl+0xe8/0x150 [ 299.003725][T11312] warn_alloc+0x24c/0x270 [ 299.003767][T11312] ? __pfx_warn_alloc+0x10/0x10 [ 299.003790][T11312] ? __get_vm_area_node+0x155/0x2f0 [ 299.003817][T11312] ? __get_vm_area_node+0x2a9/0x2f0 [ 299.003854][T11312] ? __pfx_process_measurement+0x10/0x10 [ 299.003889][T11312] __vmalloc_node_range_noprof+0x37d/0x1730 [ 299.003918][T11312] ? __lock_acquire+0x683/0x2cf0 [ 299.003970][T11312] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 299.003995][T11312] ? aa_file_perm+0x18b/0x15f0 [ 299.004035][T11312] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 299.004067][T11312] __vmalloc_noprof+0xd2/0x120 [ 299.004097][T11312] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 299.004131][T11312] bpf_prog_alloc_no_stats+0x47/0x560 [ 299.004161][T11312] ? bpf_prog_alloc+0x2a/0x1a0 [ 299.004194][T11312] bpf_prog_alloc+0x3c/0x1a0 [ 299.004227][T11312] bpf_prog_load+0x7f8/0x1c20 [ 299.004272][T11312] ? __pfx_bpf_prog_load+0x10/0x10 [ 299.004330][T11312] __sys_bpf+0xd0d/0xd90 [ 299.004368][T11312] ? __pfx___sys_bpf+0x10/0x10 [ 299.004410][T11312] ? __fget_files+0x2a/0x420 [ 299.004456][T11312] ? ksys_write+0x242/0x270 [ 299.004490][T11312] ? __pfx_ksys_write+0x10/0x10 [ 299.004527][T11312] __x64_sys_bpf+0xba/0xd0 [ 299.004558][T11312] do_syscall_64+0x166/0x520 [ 299.004583][T11312] ? trace_irq_disable+0x3b/0x140 [ 299.004610][T11312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.004632][T11312] ? clear_bhb_loop+0x70/0xc0 [ 299.004659][T11312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.004680][T11312] RIP: 0033:0x7f602739e0d9 [ 299.004700][T11312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.004727][T11312] RSP: 002b:00007f60282a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 299.004750][T11312] RAX: ffffffffffffffda RBX: 00007f6027625fa0 RCX: 00007f602739e0d9 [ 299.004766][T11312] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 299.004779][T11312] RBP: 00007f60282a1090 R08: 0000000000000000 R09: 0000000000000000 [ 299.004811][T11312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.004824][T11312] R13: 00007f6027626038 R14: 00007f6027625fa0 R15: 00007fff1e8b00c8 [ 299.004858][T11312] [ 299.016142][T11318] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 299.034878][T11312] Mem-Info: [ 299.159923][T11322] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20014 [ 299.201115][T11312] active_anon:6302 inactive_anon:0 isolated_anon:0 [ 299.201115][T11312] active_file:0 inactive_file:43191 isolated_file:0 [ 299.201115][T11312] unevictable:0 dirty:272 writeback:0 [ 299.201115][T11312] slab_reclaimable:10609 slab_unreclaimable:97519 [ 299.201115][T11312] mapped:29441 shmem:527 pagetables:1397 [ 299.201115][T11312] sec_pagetables:0 bounce:0 [ 299.201115][T11312] kernel_misc_reclaimable:0 [ 299.201115][T11312] free:1329352 free_pcp:8939 free_cma:0 [ 299.373609][T11312] Node 0 active_anon:25108kB inactive_anon:0kB active_file:0kB inactive_file:172560kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117864kB dirty:1088kB writeback:0kB shmem:2108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13312kB pagetables:5544kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 299.433437][T11312] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 299.489710][T11312] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 299.538445][T11333] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1373'. [ 299.558149][T11312] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 299.580866][T11312] Node 0 DMA32 free:1356876kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25208kB inactive_anon:0kB active_file:0kB inactive_file:172560kB unevictable:0kB writepending:1088kB zspages:0kB present:3129332kB managed:2547832kB mlocked:0kB bounce:0kB free_pcp:35940kB local_pcp:20660kB free_cma:0kB [ 299.643287][T11312] lowmem_reserve[]: 0 0 0 0 0 [ 299.652221][T11337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1374'. [ 299.668872][T11312] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:256kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 299.716464][T11312] lowmem_reserve[]: 0 0 0 0 0 [ 299.724922][T11312] Node 1 Normal free:3945172kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 299.771580][T11312] lowmem_reserve[]: 0 0 0 0 0 [ 299.812979][T11312] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 299.839060][T11312] Node 0 DMA32: 1211*4kB (UME) 1130*8kB (UME) 421*16kB (UME) 354*32kB (UME) 138*64kB (UME) 36*128kB (UME) 7*256kB (U) 4*512kB (UM) 3*1024kB (UME) 1*2048kB (U) 318*4096kB (UM) = 1356876kB [ 299.883967][T11312] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 299.918388][T11312] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 6*16kB (UM) 7*32kB (UM) 6*64kB (UM) 4*128kB (UM) 4*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3945172kB [ 299.957717][T11312] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 299.980069][T11312] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 299.997912][T11312] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 300.009797][T11312] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 300.020783][T11312] 44289 total pagecache pages [ 300.025520][T11312] 0 pages in swap cache [ 300.058765][T11312] Free swap = 124996kB [ 300.080651][T11312] Total swap = 124996kB [ 300.103182][T11312] 2097051 pages RAM [ 300.117106][T11312] 0 pages HighMem/MovableOnly [ 300.129014][T11312] 428414 pages reserved [ 300.138891][T11312] 0 pages cma reserved [ 300.554494][T11366] gretap0: entered promiscuous mode [ 300.783212][T11366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.823893][T11366] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.894473][T11366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.007170][T11366] bond_slave_0: entered promiscuous mode [ 301.032547][T11366] bond_slave_1: entered promiscuous mode [ 301.073091][T11366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.113626][T11366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.147551][T11366] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 301.205766][T11379] netlink: 'syz.4.1387': attribute type 1 has an invalid length. [ 301.215654][T11366] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 301.249114][T11366] veth1_vlan: left promiscuous mode [ 301.257837][T11366] veth0_vlan: left promiscuous mode [ 301.266129][T11366] veth0_vlan: entered promiscuous mode [ 301.269033][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1387'. [ 301.285498][T11366] veth1_vlan: entered promiscuous mode [ 301.298378][T11380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1387'. [ 301.305282][T11366] veth1_macvtap: left promiscuous mode [ 301.317997][T11366] veth0_macvtap: left promiscuous mode [ 301.336053][T11366] veth0_macvtap: entered promiscuous mode [ 301.354493][T11366] veth1_macvtap: entered promiscuous mode [ 301.376446][T11366] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 301.387119][T11366] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 301.396638][T11366] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 301.407434][T11366] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 301.419266][T11366] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 301.469497][T11366] 8021q: adding VLAN 0 to HW filter on device bond1 [ 301.482537][T11366] 8021q: adding VLAN 0 to HW filter on device bond3 [ 301.496387][T11366] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 301.505001][T11366] geneve2: left promiscuous mode [ 301.510246][T11366] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 301.539950][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.547137][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.574842][ T111] bridge0: port 3(vlan2) entered blocking state [ 301.581325][ T111] bridge0: port 3(vlan2) entered forwarding state [ 301.591515][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.598734][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.719158][T11379] 8021q: adding VLAN 0 to HW filter on device bond4 [ 301.779556][ T111] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.823473][T10630] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 301.839195][T10630] bond2: (slave veth5): making interface the new active one [ 301.861643][T10630] bond2: active interface up! [ 301.990956][ T62] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.034549][ T62] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.119990][ T62] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.234580][T11411] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1397'. [ 302.257247][T11411] tipc: Bearer : already 2 bearers with priority 10 [ 302.276672][T11411] tipc: Bearer : trying with adjusted priority [ 302.293723][T11411] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1397'. [ 302.309015][T11411] tipc: Invalid UDP bearer configuration [ 302.309069][T11411] tipc: Enabling of bearer rejected, failed to enable media [ 302.333057][T11414] netlink: 'syz.1.1398': attribute type 3 has an invalid length. [ 302.847330][T11435] netlink: 'syz.3.1402': attribute type 32 has an invalid length. [ 302.875974][T11437] netlink: 'syz.5.1403': attribute type 1 has an invalid length. [ 302.884696][T11438] netlink: 'syz.5.1403': attribute type 1 has an invalid length. [ 303.034767][T11437] 8021q: adding VLAN 0 to HW filter on device bond5 [ 303.257915][T11461] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1409'. [ 303.324532][T11467] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1411'. [ 303.680061][T11487] IPVS: set_ctl: invalid protocol: 115 100.1.1.1:20003 [ 304.094081][T11500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1418'. [ 304.177290][T11501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1418'. [ 304.480811][T11509] syzkaller0: entered promiscuous mode [ 304.500726][T11509] syzkaller0: entered allmulticast mode [ 304.662118][T11504] tipc: Started in network mode [ 304.667155][T11504] tipc: Node identity 2e2d84a5c05f, cluster identity 4711 [ 304.677827][T11504] tipc: Enabled bearer , priority 0 [ 304.707989][T11504] tipc: Resetting bearer [ 304.744839][T11503] tipc: Resetting bearer [ 304.807717][T11503] tipc: Disabling bearer [ 305.038527][T11535] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.066821][ T5716] lo speed is unknown, defaulting to 1000 [ 305.075593][ T5716] syz2: Port: 1 Link DOWN [ 305.084518][T11539] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1428'. [ 305.208659][T11546] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1431'. [ 305.270682][T11546] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1431'. [ 305.514086][T11563] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1435'. [ 305.545919][T11563] syzkaller0: entered promiscuous mode [ 305.564163][T11563] syzkaller0: entered allmulticast mode [ 305.791917][T11572] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1438'. [ 306.434530][T11604] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1449'. [ 306.649582][T11604] bridge3: entered promiscuous mode [ 306.665441][T11604] bridge3: entered allmulticast mode [ 306.686783][T11604] team0: Port device bridge3 added [ 306.755241][T11619] trusted_key: syz.2.1454 sent an empty control message without MSG_MORE. [ 306.847725][T11621] xt_hashlimit: size too large, truncated to 1048576 [ 306.880601][T11619] bond6: option lp_interval: invalid value (0) [ 306.887578][T11621] xt_hashlimit: max too large, truncated to 1048576 [ 306.913686][T11628] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1454'. [ 306.932018][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1456'. [ 306.941906][T11627] netlink: 'syz.4.1456': attribute type 15 has an invalid length. [ 306.949960][T11619] bond6: option lp_interval: allowed values 1 - 2147483647 [ 306.973872][T11619] bond6 (unregistering): Released all slaves [ 307.129053][ T62] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 307.161010][ T62] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 307.191321][ T62] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 307.318890][T11639] syzkaller0: entered promiscuous mode [ 307.325723][T11639] syzkaller0: entered allmulticast mode [ 307.480808][T10638] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 308.456688][T11682] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 309.927362][T11692] __nla_validate_parse: 4 callbacks suppressed [ 309.927383][T11692] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1474'. [ 310.054750][T11697] netlink: 'syz.1.1475': attribute type 1 has an invalid length. [ 310.080677][T11697] netlink: 'syz.1.1475': attribute type 4 has an invalid length. [ 310.124171][T11705] netlink: 'syz.2.1478': attribute type 83 has an invalid length. [ 310.129421][T11697] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1475'. [ 310.142707][T11705] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1478'. [ 310.185720][T11704] ip_tables: iptables: counters copy to user failed while replacing table [ 310.265692][T11708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1479'. [ 310.323752][T11710] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1480'. [ 310.493066][T11719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1482'. [ 310.518927][T11719] netlink: 'syz.1.1482': attribute type 2 has an invalid length. [ 310.527978][T11719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1482'. [ 310.537428][T11719] netlink: 'syz.1.1482': attribute type 2 has an invalid length. [ 310.731139][T11737] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1489'. [ 310.771306][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1487'. [ 310.866025][T11745] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1490'. [ 311.012191][T11756] netlink: 'syz.2.1492': attribute type 1 has an invalid length. [ 311.012961][T11755] netlink: 'syz.2.1492': attribute type 1 has an invalid length. [ 311.054112][T11756] 8021q: adding VLAN 0 to HW filter on device bond6 [ 311.121633][T11755] bond6: (slave veth1): Enslaving as an active interface with a down link [ 311.166883][T11756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.177106][T11756] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.270583][T11756] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 311.284914][T11756] hsr0: left promiscuous mode [ 311.297234][T11756] veth1_macvtap: left promiscuous mode [ 311.304559][T11756] veth0_macvtap: left promiscuous mode [ 311.311566][T11756] veth0_macvtap: entered promiscuous mode [ 311.320780][T11756] veth1_macvtap: entered promiscuous mode [ 311.332368][T11756] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 311.341063][T11756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 311.350945][T11756] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 311.360155][T11756] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 311.381934][T11756] bond3: left allmulticast mode [ 311.387196][T11756] 8021q: adding VLAN 0 to HW filter on device bond3 [ 311.395842][T11756] wireguard0: left promiscuous mode [ 311.401341][T11756] wireguard0: left allmulticast mode [ 311.409636][T11756] 8021q: adding VLAN 0 to HW filter on device bond4 [ 311.419103][T11756] geneve2: left promiscuous mode [ 311.424101][T11756] geneve2: left allmulticast mode [ 311.432639][T11756] macvlan0: left promiscuous mode [ 311.554998][T11767] veth6: entered allmulticast mode [ 311.615340][T11768] veth6: entered allmulticast mode [ 311.742560][ T48] bond6: (slave veth1): link status definitely up, 10000 Mbps full duplex [ 311.777873][ T48] bond6: (slave veth1): making interface the new active one [ 311.805696][ T48] bond6: active interface up! [ 312.685277][T11832] bridge0: port 4(wlan1) entered blocking state [ 312.702736][T11832] bridge0: port 4(wlan1) entered disabled state [ 312.714297][T11832] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 312.744200][T11832] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 313.531238][T11862] netlink: 'syz.3.1519': attribute type 1 has an invalid length. [ 313.655532][T11862] 8021q: adding VLAN 0 to HW filter on device bond4 [ 313.706964][T11865] vlan3: entered promiscuous mode [ 313.726813][T11865] bond4: entered promiscuous mode [ 313.747224][T11865] vlan3: entered allmulticast mode [ 313.773789][T11865] bond4: entered allmulticast mode [ 313.864059][T11873] bond4: (slave bridge1): making interface the new active one [ 313.896732][T11873] bridge1: entered promiscuous mode [ 313.903179][T11873] bridge1: entered allmulticast mode [ 313.916233][T11873] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 313.927392][T11880] netlink: 'syz.4.1522': attribute type 1 has an invalid length. [ 314.259111][T11893] tipc: Enabled bearer , priority 10 [ 314.439150][T11897] netlink: 'syz.5.1527': attribute type 5 has an invalid length. [ 314.535137][T11897] syzkaller1: entered promiscuous mode [ 314.553156][T11897] syzkaller1: entered allmulticast mode [ 314.631035][T11903] lo speed is unknown, defaulting to 1000 [ 315.149018][T11927] netlink: 'syz.1.1536': attribute type 1 has an invalid length. [ 315.193582][T11927] __nla_validate_parse: 7 callbacks suppressed [ 315.193602][T11927] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1536'. [ 315.251590][T11930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1537'. [ 315.306049][T11923] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1535'. [ 316.215449][T11961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1544'. [ 316.413706][T11970] netlink: 'syz.5.1547': attribute type 1 has an invalid length. [ 316.687403][T11984] IPVS: set_ctl: invalid protocol: 45492 172.30.1.6:20001 [ 316.724263][T11984] IPVS: sh: FWM 3 0x00000003 - no destination available [ 317.029368][T11995] netlink: 'syz.3.1552': attribute type 10 has an invalid length. [ 317.049119][T11997] netlink: 'syz.3.1552': attribute type 10 has an invalid length. [ 317.132704][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.157940][T11995] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 317.187525][T11995] team0: Port device netdevsim1 added [ 317.430768][T12011] IPVS: Error connecting to the multicast addr [ 317.455992][T12014] tipc: New replicast peer: 172.20.20.187 [ 317.478071][T12014] tipc: Enabled bearer , priority 10 [ 317.519473][T12014] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1558'. [ 318.318079][T12069] x_tables: duplicate underflow at hook 4 [ 318.424346][T12040] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1564'. [ 318.477533][T12072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.578011][T12079] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20014 [ 318.637377][T12072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.746008][T12077] bridge2: port 1(erspan0) entered disabled state [ 318.790417][T12077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1570'. [ 319.073563][T12099] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20014 [ 319.220214][T12101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1577'. [ 319.267881][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1577'. [ 319.325183][T12105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1577'. [ 319.418145][T12115] netlink: 'syz.3.1579': attribute type 1 has an invalid length. [ 319.982479][T12134] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20014 [ 320.444733][T12152] netlink: 'syz.1.1590': attribute type 1 has an invalid length. [ 320.469976][T12152] __nla_validate_parse: 4 callbacks suppressed [ 320.469995][T12152] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1590'. [ 320.632578][T12156] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 321.063506][T12171] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1594'. [ 321.114786][T12167] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1594'. [ 322.782805][T12178] netlink: 'syz.4.1598': attribute type 1 has an invalid length. [ 322.793079][T12178] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1598'. [ 322.992900][T12178] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1598'. [ 323.230864][T12202] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 323.361750][ T30] audit: type=1804 audit(1787732780.033:6): pid=12207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1604" name="/newroot/332/cgroup.controllers" dev="tmpfs" ino=1723 res=1 errno=0 [ 323.399292][T12207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1604'. [ 323.418664][ T30] audit: type=1800 audit(1787732780.033:7): pid=12207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1604" name="cgroup.controllers" dev="tmpfs" ino=1723 res=0 errno=0 [ 323.441052][T12207] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1604'. [ 323.625575][T12215] netlink: 'syz.3.1607': attribute type 1 has an invalid length. [ 323.657784][T12215] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1607'. [ 323.815284][T12216] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1606'. [ 323.907058][T12226] netlink: 59 bytes leftover after parsing attributes in process `syz.5.1609'. [ 323.979848][T12231] netlink: 'syz.3.1610': attribute type 1 has an invalid length. [ 324.024430][T12231] netlink: 'syz.3.1610': attribute type 13 has an invalid length. [ 324.564908][T12245] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 324.614713][T12245] openvswitch: netlink: Message has 512 unknown bytes. [ 324.645757][T12250] netlink: 'syz.4.1618': attribute type 1 has an invalid length. [ 324.736539][T12250] 8021q: adding VLAN 0 to HW filter on device bond5 [ 324.837824][T12252] bond5: (slave veth8): Enslaving as an active interface with a down link [ 324.977025][T12259] netlink: 'syz.2.1620': attribute type 1 has an invalid length. [ 325.037893][T12250] veth0_macvtap: left allmulticast mode [ 325.055542][T12250] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 325.065908][T12250] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 325.095084][T12250] ip6erspan0: left allmulticast mode [ 325.151241][T12250] 8021q: adding VLAN 0 to HW filter on device bond1 [ 325.177241][T12250] 8021q: adding VLAN 0 to HW filter on device bond2 [ 325.216741][T12250] bond3: left promiscuous mode [ 325.241314][T12250] bond3: left allmulticast mode [ 325.267149][T12250] ip6gre1: left promiscuous mode [ 325.293008][T12250] ip6gre1: left allmulticast mode [ 325.311179][T12250] veth3: left allmulticast mode [ 325.320844][T12250] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 325.403360][T12250] bridge3: left promiscuous mode [ 325.413651][T12250] bridge3: left allmulticast mode [ 325.461944][T12253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.486450][T12253] bond5: (slave batadv0): making interface the new active one [ 325.497972][T12253] batadv0: entered promiscuous mode [ 325.507903][T12253] bond5: (slave batadv0): Enslaving as an active interface with an up link [ 325.517790][T12252] __nla_validate_parse: 2 callbacks suppressed [ 325.517808][T12252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1618'. [ 325.535724][ T188] lo speed is unknown, defaulting to 1000 [ 325.547556][ T188] syz2: Port: 1 Link ACTIVE [ 325.690675][T10630] bond5: (slave veth8): link status definitely up, 10000 Mbps full duplex [ 325.712778][T12280] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1623'. [ 325.750865][T10629] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 325.771792][T10629] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 50706 - 0 [ 325.966665][T12280] bond6: option lacp_active: invalid value (5) [ 325.983966][T12287] netlink: 'syz.4.1626': attribute type 1 has an invalid length. [ 326.046467][T12280] bond6 (unregistering): Released all slaves [ 326.201935][T12287] 8021q: adding VLAN 0 to HW filter on device bond6 [ 326.238490][ T1150] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 326.286352][ T1150] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 50706 - 0 [ 326.342869][ T1150] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 326.377939][ T1150] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 50706 - 0 [ 326.398945][T12300] ipvlan0: Caught tx_queue_len zero misconfig [ 326.449871][T10638] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 326.468238][T10638] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 50706 - 0 [ 326.482455][T12311] bridge0: port 3(syz_tun) entered blocking state [ 326.492059][T12311] bridge0: port 3(syz_tun) entered disabled state [ 326.510587][T12311] syz_tun: entered allmulticast mode [ 326.547768][T12312] nbd: socks must be embedded in a SOCK_ITEM attr [ 326.592450][T12311] syz_tun: entered promiscuous mode [ 326.645629][T12311] bridge0: port 3(syz_tun) entered blocking state [ 326.653213][T12311] bridge0: port 3(syz_tun) entered forwarding state [ 326.871062][T12330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1633'. [ 327.016369][T12334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.542260][T12380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.548205][T12378] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1651'. [ 328.774413][T12392] x_tables: duplicate underflow at hook 3 [ 328.916440][T12395] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 329.075947][T12399] x_tables: ip_tables: osf match: only valid for protocol 6 [ 329.197314][T12407] netlink: 'syz.4.1658': attribute type 1 has an invalid length. [ 329.228353][T12407] netlink: 'syz.4.1658': attribute type 4 has an invalid length. [ 329.251250][T12407] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1658'. [ 330.343853][T12437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1666'. [ 330.701960][T12447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1670'. [ 330.883849][T12453] netlink: 'syz.4.1673': attribute type 7 has an invalid length. [ 330.896612][T12453] netlink: 'syz.4.1673': attribute type 8 has an invalid length. [ 331.727898][T12492] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1683'. [ 331.748738][T12492] netlink: 'syz.4.1683': attribute type 7 has an invalid length. [ 331.773748][T12492] netlink: 'syz.4.1683': attribute type 8 has an invalid length. [ 331.791044][T12492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1683'. [ 332.716987][T12522] team0: entered promiscuous mode [ 332.740954][T12522] team_slave_1: entered promiscuous mode [ 332.760382][T12522] vlan0: entered promiscuous mode [ 332.784540][T12522] syz_tun: entered promiscuous mode [ 332.807688][T12522] team0: entered allmulticast mode [ 332.828781][T12522] team_slave_1: entered allmulticast mode [ 332.851237][T12522] vlan0: entered allmulticast mode [ 332.866739][T12522] syz_tun: entered allmulticast mode [ 332.887701][T12522] team0: Cannot enslave team device to itself [ 333.126579][T12540] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1694'. [ 334.249848][T12468] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 334.259856][T12498] netlink: 'syz.4.1683': attribute type 1 has an invalid length. [ 334.268018][T12498] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1683'. [ 334.594824][T12556] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1703'. [ 334.615309][T12560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1705'. [ 334.626743][T12554] Bluetooth: hci0: unsupported parameter 5135 [ 334.633324][T12554] Bluetooth: hci0: unsupported parameter 8192 [ 334.640861][T12560] block nbd3: Unsupported socket: should be TCP or UNIX. [ 334.649104][T12554] Bluetooth: hci0: unsupported parameter 5135 [ 334.655253][T12554] Bluetooth: hci0: unsupported parameter 8192 [ 334.716669][T12562] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 334.742797][T12562] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 334.897275][T12566] netlink: 'syz.4.1708': attribute type 26 has an invalid length. [ 334.964519][T12566] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1708'. [ 335.002783][T12566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1708'. [ 335.030476][T12566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1708'. [ 335.439177][T12592] netlink: Conntrack attr has 1 unknown bytes [ 335.458079][T12592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.552743][T12601] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 335.768097][T12606] netlink: 'syz.1.1720': attribute type 1 has an invalid length. [ 336.086061][T12630] __nla_validate_parse: 4 callbacks suppressed [ 336.086082][T12630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1727'. [ 336.117082][T12630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1727'. [ 336.128310][T12630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1727'. [ 336.141818][T12630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1727'. [ 336.151525][T12630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1727'. [ 336.191500][T12630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1727'. [ 336.233735][T12630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1727'. [ 336.294552][T12630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1727'. [ 336.356670][T12630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1727'. [ 336.390263][T12630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1727'. [ 336.418234][T12641] netlink: 'syz.3.1730': attribute type 1 has an invalid length. [ 336.451981][T12638] xt_CT: No such helper "pptp" [ 336.599314][T10638] batadv0: left promiscuous mode [ 336.800322][T12655] team0 (unregistering): Port device team_slave_0 removed [ 336.868615][T12655] team0 (unregistering): Port device team_slave_1 removed [ 336.900390][T12655] team0 (unregistering): Port device bridge3 removed [ 336.991463][T12662] netlink: 'syz.2.1736': attribute type 11 has an invalid length. [ 337.082440][T12674] netlink: 'syz.2.1736': attribute type 1 has an invalid length. [ 337.355626][T12686] netlink: 'syz.3.1741': attribute type 10 has an invalid length. [ 337.640584][T12690] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 337.665458][T12686] team0: Port device netdevsim1 removed [ 337.742378][T12686] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 337.781546][T12686] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 337.802256][T12686] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 338.175915][T12711] netlink: 'syz.1.1747': attribute type 3 has an invalid length. [ 338.340279][T12718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.633109][T12726] bond7: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 338.679831][T12726] bond7 (unregistering): Released all slaves [ 338.742912][T12734] tipc: Enabling of bearer rejected, failed to enable media [ 339.194767][T12751] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.202837][T12751] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.516265][T12751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.544252][T12774] netlink: 'syz.3.1767': attribute type 1 has an invalid length. [ 339.554253][T12774] netlink: 'syz.3.1767': attribute type 2 has an invalid length. [ 339.602599][T12751] batman_adv: batadv0: Interface deactivated: gretap1 [ 339.621746][T12751] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 339.667770][T12766] vlan1: entered allmulticast mode [ 339.676499][T12766] bridge_slave_0: entered allmulticast mode [ 339.687276][T12766] bridge0: port 1(vlan1) entered blocking state [ 339.715768][T12766] bridge0: port 1(vlan1) entered disabled state [ 339.739835][T12766] vlan1: entered promiscuous mode [ 339.758520][T12766] bridge_slave_0: entered promiscuous mode [ 339.788508][ T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.817166][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.846579][ T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.888243][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.938879][T10630] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.969830][T10630] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.289052][T12805] Bluetooth: ISO socket layer initialized [ 340.864589][T12836] ip_tables: iptables: counters copy to user failed while replacing table [ 341.200840][T12857] __nla_validate_parse: 67 callbacks suppressed [ 341.200860][T12857] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1784'. [ 341.228558][T12856] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1784'. [ 341.412029][T12860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.422157][T12860] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.434037][T12860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.567599][T12860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.581279][T12881] netlink: 'syz.3.1788': attribute type 1 has an invalid length. [ 341.597609][T12860] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 341.686885][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.694141][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.765693][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.773006][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.939964][T12881] bond5: entered promiscuous mode [ 341.945713][T12881] 8021q: adding VLAN 0 to HW filter on device bond5 [ 342.077840][T12904] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1791'. [ 342.119178][T12884] syzkaller0: entered promiscuous mode [ 342.150012][T12884] syzkaller0: entered allmulticast mode [ 342.301931][T12904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1791'. [ 342.327407][ T7194] block nbd64: NBD_DISCONNECT [ 342.617869][ T7194] udevd[7194]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 343.099710][T12940] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1798'. [ 344.972665][T12932] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 345.011172][T12946] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 345.054690][T12946] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 345.111920][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1800'. [ 345.166063][T12952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1800'. [ 345.208794][T12956] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 345.219808][T12952] netlink: 'syz.1.1800': attribute type 6 has an invalid length. [ 345.236027][T12956] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 345.254486][T12952] netlink: 'syz.1.1800': attribute type 5 has an invalid length. [ 345.274915][T12956] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 345.286474][T12961] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 345.310415][T12957] syzkaller0: entered promiscuous mode [ 345.325931][T12957] syzkaller0: entered allmulticast mode [ 345.508449][T12977] netlink: 'syz.5.1807': attribute type 11 has an invalid length. [ 346.134939][T13001] netlink: 'syz.5.1816': attribute type 2 has an invalid length. [ 346.199260][T13006] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1819'. [ 346.209028][T13006] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1819'. [ 346.263531][T13001] netlink: 5408 bytes leftover after parsing attributes in process `syz.5.1816'. [ 346.292147][T13010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1820'. [ 346.313284][T13011] netlink: 'syz.1.1817': attribute type 10 has an invalid length. [ 346.320193][T13001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.353761][T13011] team0 (unregistering): Port device team_slave_0 removed [ 346.389698][T13011] team0 (unregistering): Port device team_slave_1 removed [ 346.431301][T13016] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1817'. [ 346.478713][T13016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1817'. [ 346.739590][T13027] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 346.754439][T13027] bond6 (unregistering): Released all slaves [ 346.851657][T12996] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 347.036947][T13035] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1825'. [ 347.046414][T13035] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1825'. [ 347.199554][T13041] veth0_to_bond: entered allmulticast mode [ 347.237078][T13041] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1828'. [ 347.411553][T13050] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1832'. [ 347.543068][T13057] xt_hashlimit: size too large, truncated to 1048576 [ 347.550975][T13055] xt_hashlimit: size too large, truncated to 1048576 [ 348.106641][T13077] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 348.123695][T13077] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 348.301619][T13083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1844'. [ 348.392953][T13083] veth10: entered allmulticast mode [ 348.618031][T13095] lo: Caught tx_queue_len zero misconfig [ 348.688161][T13095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.707663][T13095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.729019][T13095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.750409][T13095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.794325][T13095] batman_adv: batadv0: Interface deactivated: gretap1 [ 348.826865][T13095] batman_adv: batadv0: Removing interface: gretap1 [ 348.922576][T13105] syzkaller0: entered promiscuous mode [ 348.936704][T13115] netlink: 'syz.2.1854': attribute type 6 has an invalid length. [ 348.950842][T13105] syzkaller0: entered allmulticast mode [ 348.967569][T13115] netlink: 'syz.2.1854': attribute type 5 has an invalid length. [ 349.326819][T13131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.341965][T13137] netlink: 'syz.1.1858': attribute type 1 has an invalid length. [ 349.513029][T13143] netlink: Conntrack attr has 1 unknown bytes [ 349.555684][T13143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.885862][T13161] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20014 [ 350.626205][T13185] lo speed is unknown, defaulting to 1000 [ 350.918572][T13193] netlink: 'syz.5.1872': attribute type 1 has an invalid length. [ 351.220277][T13202] __nla_validate_parse: 10 callbacks suppressed [ 351.220300][T13202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1873'. [ 351.347318][T13213] ieee802154 phy0 wpan0: encryption failed: -22 [ 351.833226][T13232] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20014 [ 351.897633][T13236] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1883'. [ 351.965674][T13237] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1883'. [ 352.199530][T13253] netlink: 'syz.4.1886': attribute type 1 has an invalid length. [ 352.251189][T13253] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1886'. [ 353.275693][T13302] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20014 [ 353.297239][T13300] netlink: 'syz.3.1900': attribute type 1 has an invalid length. [ 353.348157][T13300] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1900'. [ 353.684706][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1906'. [ 354.086720][T13344] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1913'. [ 354.646178][T13362] syzkaller1: entered promiscuous mode [ 354.659475][T13362] syzkaller1: entered allmulticast mode [ 355.795785][T13411] syzkaller1: entered promiscuous mode [ 355.812036][T13411] syzkaller1: entered allmulticast mode [ 356.196745][T13433] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1939'. [ 356.312368][T13427] tipc: Enabling of bearer rejected, failed to enable media [ 356.467179][T13447] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1942'. [ 356.575997][T13449] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 356.583365][T13449] IPv6: NLM_F_CREATE should be set when creating new route [ 356.590692][T13449] IPv6: NLM_F_CREATE should be set when creating new route [ 356.597964][T13449] IPv6: NLM_F_CREATE should be set when creating new route [ 356.635712][T13454] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 356.868176][T13468] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20014 [ 357.200934][T13443] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 358.848579][T13484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1948'. [ 358.920436][T13484] ovs-system: entered promiscuous mode [ 359.032136][T13484] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1948'. [ 359.161623][T13495] syzkaller0: entered promiscuous mode [ 359.195184][T13495] syzkaller0: entered allmulticast mode [ 359.267246][T13501] netlink: 'syz.4.1953': attribute type 1 has an invalid length. [ 359.297301][T13501] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1953'. [ 360.122481][T13530] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20014 [ 360.535993][T13546] netlink: 4788 bytes leftover after parsing attributes in process `syz.5.1960'. [ 360.947300][T13560] netlink: 'syz.5.1965': attribute type 1 has an invalid length. [ 360.965929][T13560] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1965'. [ 360.978780][T13558] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1964'. [ 361.156927][T13558] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1964'. [ 361.177753][T13558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1964'. [ 361.261412][T13567] netlink: 'syz.1.1966': attribute type 1 has an invalid length. [ 361.586942][T13567] 8021q: adding VLAN 0 to HW filter on device bond1 [ 361.873149][T13593] netlink: 'syz.1.1970': attribute type 46 has an invalid length. [ 361.910833][T13593] netlink: 'syz.1.1970': attribute type 23 has an invalid length. [ 362.233255][T13609] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20014 [ 362.575419][T13617] netlink: 'syz.1.1977': attribute type 1 has an invalid length. [ 362.627641][T13617] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1977'. [ 362.733765][T13624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1980'. [ 363.502151][T13627] bridge0: port 3(syz_tun) entered disabled state [ 363.591707][T13627] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.600062][T13627] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.097027][T13659] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1987'. [ 364.113667][T13659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1987'. [ 364.566354][T13627] tipc: Resetting bearer [ 365.069099][T13627] veth10: left allmulticast mode [ 365.096408][ T29] lo speed is unknown, defaulting to 1000 [ 365.114497][ T29] syz2: Port: 1 Link DOWN [ 365.188456][T10629] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 365.228189][T10629] netdevsim netdevsim4 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 365.260511][T10629] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.285966][T10629] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 50706 - 0 [ 365.312397][T10629] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 365.334720][T10629] netdevsim netdevsim4 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 365.356790][T10629] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.390743][T13684] netlink: 456 bytes leftover after parsing attributes in process `syz.2.1988'. [ 365.398737][T10629] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 50706 - 0 [ 365.416901][T10629] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 365.457285][T10629] netdevsim netdevsim4 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 365.482900][T10629] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.501865][T10629] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 50706 - 0 [ 365.527280][T10629] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 365.540767][T10629] netdevsim netdevsim4 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 365.562644][T10629] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.581912][T10629] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 50706 - 0 [ 365.760109][T13699] macvlan0: entered promiscuous mode [ 365.806367][T13699] netlink: 'syz.4.1994': attribute type 1 has an invalid length. [ 365.838220][T13699] netlink: 'syz.4.1994': attribute type 2 has an invalid length. [ 366.169584][T13720] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1999'. [ 366.190008][T13720] gretap0: entered promiscuous mode [ 366.204397][T13721] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1999'. [ 366.218090][T13722] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1999'. [ 366.346572][T13722] 0ªî{X¹¦: renamed from gretap0 [ 366.373922][T13722] 0ªî{X¹¦: left promiscuous mode [ 366.412908][T13710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1995'. [ 366.426540][T13722] 0ªî{X¹¦: entered allmulticast mode [ 366.469218][T13722] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 366.565047][T13721] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 366.588150][T13721] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 366.847385][T13724] syzkaller0: entered promiscuous mode [ 366.858787][T13724] syzkaller0: entered allmulticast mode [ 369.183031][T13754] tipc: Enabled bearer , priority 0 [ 369.190703][T13761] syzkaller0: entered promiscuous mode [ 369.196666][T13761] syzkaller0: entered allmulticast mode [ 369.354909][T13772] tipc: Resetting bearer [ 369.419506][T13772] tipc: Disabling bearer [ 369.684886][T13784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2010'. [ 369.894200][T13803] netlink: 'syz.2.2017': attribute type 1 has an invalid length. [ 369.925594][T13806] netlink: 'syz.1.2018': attribute type 2 has an invalid length. [ 370.048563][T13803] 8021q: adding VLAN 0 to HW filter on device bond7 [ 370.105177][T13814] Bluetooth: hci0: unsupported parameter 5134 [ 370.120748][T13807] bond7: (slave veth3): Enslaving as an active interface with a down link [ 370.121421][T13814] Bluetooth: hci0: unsupported parameter 8192 [ 370.150559][T13814] Bluetooth: hci0: unsupported parameter 5134 [ 370.157700][T13806] : entered promiscuous mode [ 370.164906][T13814] Bluetooth: hci0: unsupported parameter 8192 [ 370.185984][T13810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.197980][T13810] bond7: (slave batadv0): making interface the new active one [ 370.207704][T13810] batadv0: entered promiscuous mode [ 370.213908][T13810] bond7: (slave batadv0): Enslaving as an active interface with an up link [ 370.340843][T13817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.360690][T13812] netlink: 'syz.3.2019': attribute type 4 has an invalid length. [ 371.378080][T13865] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 371.408218][T13865] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 371.453349][T13869] syzkaller0: entered promiscuous mode [ 371.473298][T13869] syzkaller0: entered allmulticast mode [ 371.544253][T13869] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2038'. [ 371.697672][T13877] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 371.705062][T13877] IPv6: NLM_F_CREATE should be set when creating new route [ 371.712391][T13877] IPv6: NLM_F_CREATE should be set when creating new route [ 371.719688][T13877] IPv6: NLM_F_CREATE should be set when creating new route [ 371.730719][T13877] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 371.843298][T13882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.929717][T13859] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 372.150374][T13901] team0: left promiscuous mode [ 372.155417][T13901] team_slave_1: left promiscuous mode [ 372.161663][T13901] vlan0: left promiscuous mode [ 372.166623][T13901] syz_tun: left promiscuous mode [ 372.194334][T13904] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2048'. [ 372.369915][T13911] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2049'. [ 372.415321][T13871] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 372.716930][T13926] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 372.763503][T13926] bond7 (unregistering): Released all slaves [ 372.904059][T13935] syzkaller1: entered allmulticast mode [ 373.090620][T13949] netlink: 'syz.1.2055': attribute type 3 has an invalid length. [ 373.116016][T13949] netlink: 15672 bytes leftover after parsing attributes in process `syz.1.2055'. [ 373.126266][T13949] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2055'. [ 373.136044][T13949] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2055'. [ 373.145498][T13949] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2055'. [ 373.223755][T13954] netlink: 'syz.4.2056': attribute type 1 has an invalid length. [ 373.241017][T13957] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20014 [ 373.262707][T13954] bond7: entered promiscuous mode [ 373.268737][T13954] 8021q: adding VLAN 0 to HW filter on device bond7 [ 373.328859][T13958] 8021q: adding VLAN 0 to HW filter on device bond7 [ 373.343686][T13954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2056'. [ 373.343688][T13958] bond7: (slave gre3): The slave device specified does not support setting the MAC address [ 373.388363][T13958] bond7: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 373.423338][T13958] bond7: (slave gre3): making interface the new active one [ 373.438949][T13958] gre3: entered promiscuous mode [ 373.445616][T13958] bond7: (slave gre3): Enslaving as an active interface with an up link [ 373.512904][T13954] bond7 (unregistering): (slave gre3): Releasing backup interface [ 373.524970][T13954] gre3: left promiscuous mode [ 373.541651][T13954] bond7 (unregistering): Released all slaves [ 373.626846][T13963] syzkaller0: entered promiscuous mode [ 373.634376][T13963] syzkaller0: entered allmulticast mode [ 373.884051][T13967] tc_dump_action: action bad kind [ 374.821729][T13883] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 375.690109][T14016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2070'. [ 375.724920][T14016] netlink: 'syz.1.2070': attribute type 11 has an invalid length. [ 375.734240][T14013] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 375.747027][T14013] bond8 (unregistering): Released all slaves [ 375.755283][T14016] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2070'. [ 376.171780][T14020] sctp: [Deprecated]: syz.1.2071 (pid 14020) Use of int in maxseg socket option. [ 376.171780][T14020] Use struct sctp_assoc_value instead [ 376.195558][T14030] netlink: 'syz.2.2073': attribute type 3 has an invalid length. [ 376.220872][T14030] netlink: 'syz.2.2073': attribute type 3 has an invalid length. [ 376.318487][T14004] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 376.409807][T14030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2073'. [ 376.447084][T14030] netlink: 'syz.2.2073': attribute type 21 has an invalid length. [ 376.802116][T14045] netlink: 'syz.4.2076': attribute type 1 has an invalid length. [ 376.864122][T14047] netlink: NAT attribute has 8 unknown bytes [ 376.877572][T14047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.571616][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.713452][T14045] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 379.018102][T14076] syz_tun: left allmulticast mode [ 379.055117][T14076] syz_tun: left promiscuous mode [ 379.093890][T14076] bridge0: port 3(syz_tun) entered disabled state [ 379.154971][T14076] bridge_slave_0: left allmulticast mode [ 379.167625][T14076] bridge_slave_0: left promiscuous mode [ 379.175538][T14076] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.186326][T14076] bridge_slave_1: left allmulticast mode [ 379.196295][T14076] bridge_slave_1: left promiscuous mode [ 379.202965][T14076] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.252992][T14076] bond0: (slave bond_slave_0): Releasing backup interface [ 379.283908][T14076] bond0: (slave bond_slave_1): Releasing backup interface [ 379.302255][T14090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2087'. [ 379.332996][T14076] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 379.422243][T14085] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 379.446087][T14085] bond2 (unregistering): Released all slaves [ 379.701046][T14083] lo speed is unknown, defaulting to 1000 [ 379.839754][T14099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2088'. [ 380.128211][T14090] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 380.448914][T14125] netlink: 'syz.4.2094': attribute type 10 has an invalid length. [ 380.532280][T14127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2095'. [ 380.583331][T14132] netlink: 'syz.1.2095': attribute type 5 has an invalid length. [ 380.646181][T14127] bond2: option ad_actor_sys_prio: invalid value (0) [ 380.655487][T14127] bond2: option ad_actor_sys_prio: allowed values 1 - 65535 [ 380.680461][T14127] bond2 (unregistering): Released all slaves [ 381.025772][T14149] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 381.087098][T14149] bond8 (unregistering): Released all slaves [ 381.193710][T14161] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2099'. [ 381.349978][ T13] batadv0: left promiscuous mode [ 381.477018][T14172] netlink: 'syz.3.2106': attribute type 4 has an invalid length. [ 381.520345][T14183] netlink: 'syz.4.2108': attribute type 1 has an invalid length. [ 381.543175][T14178] netlink: 'syz.3.2106': attribute type 4 has an invalid length. [ 381.575686][T14183] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 381.614672][T14185] netlink: 18 bytes leftover after parsing attributes in process `syz.2.2109'. [ 381.642360][T14180] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2107'. [ 381.792566][T14190] ip6tnl1: entered allmulticast mode [ 381.812129][T10629] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 381.835146][T10629] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 381.844934][ T5612] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 382.052295][T14196] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2112'. [ 382.432571][T14212] Cannot find del_set index 17 as target [ 382.510834][T14211] bridge0: port 1(vlan1) entered blocking state [ 382.517317][T14211] bridge0: port 1(vlan1) entered listening state [ 382.568929][ T5617] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 382.695220][T14216] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 382.761952][T14216] bond6 (unregistering): Released all slaves [ 382.891457][ T5612] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 382.997713][T14232] netlink: 'syz.1.2124': attribute type 1 has an invalid length. [ 383.015007][T14235] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2122'. [ 383.206114][T14238] FAULT_INJECTION: forcing a failure. [ 383.206114][T14238] name failslab, interval 1, probability 0, space 0, times 0 [ 383.221808][T14238] CPU: 1 UID: 0 PID: 14238 Comm: syz.3.2125 Not tainted syzkaller #0 PREEMPT(full) [ 383.221836][T14238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 383.221854][T14238] Call Trace: [ 383.221862][T14238] [ 383.221875][T14238] dump_stack_lvl+0xe8/0x150 [ 383.221911][T14238] should_fail_ex+0x410/0x560 [ 383.221950][T14238] should_failslab+0xa8/0x100 [ 383.221981][T14238] kmem_cache_alloc_node_noprof+0xb3/0x620 [ 383.222006][T14238] ? local_lock_release+0x9c/0x160 [ 383.222035][T14238] ? __alloc_skb+0x1db/0x7a0 [ 383.222061][T14238] ? __alloc_skb+0x1db/0x7a0 [ 383.222096][T14238] __alloc_skb+0x1db/0x7a0 [ 383.222136][T14238] netlink_sendmsg+0x5d4/0xb40 [ 383.222169][T14238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.222195][T14238] ? aa_sock_msg_perm+0xf6/0x1c0 [ 383.222237][T14238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.222258][T14238] sock_sendmsg_nosec+0x13a/0x180 [ 383.222287][T14238] ____sys_sendmsg+0x54e/0x850 [ 383.222325][T14238] ? __pfx_____sys_sendmsg+0x10/0x10 [ 383.222371][T14238] ? import_iovec+0x73/0xa0 [ 383.222397][T14238] ___sys_sendmsg+0x2a5/0x360 [ 383.222427][T14238] ? __lock_acquire+0x683/0x2cf0 [ 383.222462][T14238] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.222531][T14238] ? __fget_files+0x2a/0x420 [ 383.222559][T14238] ? __fget_files+0x3a2/0x420 [ 383.222600][T14238] __x64_sys_sendmsg+0x1b1/0x290 [ 383.222636][T14238] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 383.222692][T14238] do_syscall_64+0x166/0x520 [ 383.222715][T14238] ? trace_irq_disable+0x3b/0x140 [ 383.222744][T14238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.222767][T14238] ? clear_bhb_loop+0x70/0xc0 [ 383.222792][T14238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.222814][T14238] RIP: 0033:0x7f602739e0d9 [ 383.222834][T14238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.222852][T14238] RSP: 002b:00007f60282a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.222875][T14238] RAX: ffffffffffffffda RBX: 00007f6027625fa0 RCX: 00007f602739e0d9 [ 383.222891][T14238] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000008 [ 383.222904][T14238] RBP: 00007f60282a1090 R08: 0000000000000000 R09: 0000000000000000 [ 383.222917][T14238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.222929][T14238] R13: 00007f6027626038 R14: 00007f6027625fa0 R15: 00007fff1e8b00c8 [ 383.222963][T14238] [ 383.791202][T14232] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 383.899522][T10629] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.948820][ T62] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.959377][ T62] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.971151][ T62] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.003345][ T62] bond7: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 384.061145][T14252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2129'. [ 384.112910][T14252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2129'. [ 384.161151][T14257] ip6gretap2: entered allmulticast mode [ 384.199758][T14257] batman_adv: batadv0: Adding interface: ip6gretap2 [ 384.221183][T14257] batman_adv: batadv0: Interface activated: ip6gretap2 [ 384.489712][T14273] netlink: 'syz.5.2135': attribute type 1 has an invalid length. [ 385.041045][T14288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2140'. [ 385.117932][T14291] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2140'. [ 385.230564][T14284] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 385.243254][T14284] bond8 (unregistering): Released all slaves [ 385.288025][T14288] ipvlan0: entered allmulticast mode [ 385.294398][T14288] syz_tun: entered allmulticast mode [ 385.354038][T14295] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2140'. [ 385.656210][T14315] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 385.680213][T14315] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 385.703903][T14320] netlink: 'syz.2.2146': attribute type 4 has an invalid length. [ 385.727159][T14324] netlink: 'syz.3.2148': attribute type 27 has an invalid length. [ 385.761718][T14327] netlink: 'syz.2.2146': attribute type 4 has an invalid length. [ 386.088677][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 386.334466][T14352] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 386.380607][T14352] bond7 (unregistering): Released all slaves [ 386.411573][T14351] tipc: Bearer : already 2 bearers with priority 10 [ 386.422774][T14351] tipc: Bearer : trying with adjusted priority [ 386.441828][T14351] tipc: New replicast peer: 255.255.255.255 [ 386.452459][T14351] tipc: Enabled bearer , priority 9 [ 386.504636][T14365] __nla_validate_parse: 2 callbacks suppressed [ 386.504654][T14365] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2159'. [ 386.767458][T14375] FAULT_INJECTION: forcing a failure. [ 386.767458][T14375] name failslab, interval 1, probability 0, space 0, times 0 [ 386.802558][T14375] CPU: 0 UID: 0 PID: 14375 Comm: syz.2.2161 Not tainted syzkaller #0 PREEMPT(full) [ 386.802586][T14375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 386.802599][T14375] Call Trace: [ 386.802608][T14375] [ 386.802617][T14375] dump_stack_lvl+0xe8/0x150 [ 386.802652][T14375] should_fail_ex+0x410/0x560 [ 386.802691][T14375] should_failslab+0xa8/0x100 [ 386.802722][T14375] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 386.802748][T14375] ? skb_clone+0x212/0x3a0 [ 386.802766][T14375] ? skb_clone+0x212/0x3a0 [ 386.802792][T14375] skb_clone+0x212/0x3a0 [ 386.802814][T14375] __netlink_deliver_tap+0x413/0x860 [ 386.802842][T14375] ? netlink_deliver_tap+0x2e/0x1b0 [ 386.802864][T14375] netlink_deliver_tap+0x19c/0x1b0 [ 386.802886][T14375] netlink_unicast+0x781/0x940 [ 386.802929][T14375] netlink_sendmsg+0x813/0xb40 [ 386.802960][T14375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.802986][T14375] ? aa_sock_msg_perm+0xf6/0x1c0 [ 386.803026][T14375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.803051][T14375] sock_sendmsg_nosec+0x13a/0x180 [ 386.803079][T14375] ____sys_sendmsg+0x54e/0x850 [ 386.803118][T14375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 386.803160][T14375] ? import_iovec+0x73/0xa0 [ 386.803186][T14375] ___sys_sendmsg+0x2a5/0x360 [ 386.803217][T14375] ? __lock_acquire+0x683/0x2cf0 [ 386.803251][T14375] ? __pfx____sys_sendmsg+0x10/0x10 [ 386.803328][T14375] ? __fget_files+0x2a/0x420 [ 386.803357][T14375] ? __fget_files+0x3a2/0x420 [ 386.803396][T14375] __x64_sys_sendmsg+0x1b1/0x290 [ 386.803432][T14375] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 386.803488][T14375] do_syscall_64+0x166/0x520 [ 386.803511][T14375] ? trace_irq_disable+0x3b/0x140 [ 386.803539][T14375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.803561][T14375] ? clear_bhb_loop+0x70/0xc0 [ 386.803587][T14375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.803609][T14375] RIP: 0033:0x7f302779e0d9 [ 386.803629][T14375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.803647][T14375] RSP: 002b:00007f3028603028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.803670][T14375] RAX: ffffffffffffffda RBX: 00007f3027a26090 RCX: 00007f302779e0d9 [ 386.803686][T14375] RDX: 1d56ce4333ce878e RSI: 0000200000000140 RDI: 0000000000000003 [ 386.803700][T14375] RBP: 00007f3028603090 R08: 0000000000000000 R09: 0000000000000000 [ 386.803714][T14375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.803727][T14375] R13: 00007f3027a26128 R14: 00007f3027a26090 R15: 00007fffd3d7d588 [ 386.803762][T14375] [ 386.950353][T14375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2161'. [ 387.189210][T14388] netlink: 'syz.4.2165': attribute type 1 has an invalid length. [ 387.665502][T14402] netlink: 'syz.1.2168': attribute type 1 has an invalid length. [ 387.696976][T14402] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2168'. [ 387.716591][T14392] 8021q: adding VLAN 0 to HW filter on device bond8 [ 387.795115][T14392] bond7: (slave bond8): making interface the new active one [ 387.847605][T14392] bond7: (slave bond8): Enslaving as an active interface with an up link [ 387.976473][T14393] bond7: (slave gretap0): Enslaving as a backup interface with an up link [ 387.992089][T14417] netlink: 'syz.5.2172': attribute type 3 has an invalid length. [ 388.010735][T14417] netlink: 'syz.5.2172': attribute type 3 has an invalid length. [ 388.215227][T14427] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 388.350745][T14428] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 388.419084][T14428] bond9 (unregistering): Released all slaves [ 388.829558][T14444] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2178'. [ 389.109681][T14457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2182'. [ 389.382004][T14464] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2184'. [ 389.433981][T14465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2185'. [ 389.731507][T14484] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20003 [ 389.754254][T14482] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 389.767926][T14482] bond2 (unregistering): Released all slaves [ 389.820009][T14487] xt_CT: No such helper "netbios-ns" [ 389.869775][T14487] xt_CT: No such helper "netbios-ns" [ 389.923757][T14487] xt_CT: No such helper "netbios-ns" [ 389.991095][T14487] xt_CT: No such helper "netbios-ns" [ 390.030807][T14487] xt_CT: No such helper "netbios-ns" [ 390.076253][T14487] xt_CT: No such helper "netbios-ns" [ 390.116766][T14487] xt_CT: No such helper "netbios-ns" [ 390.155960][T14487] xt_CT: No such helper "netbios-ns" [ 390.198040][T14487] xt_CT: No such helper "netbios-ns" [ 390.264300][T14487] xt_CT: No such helper "netbios-ns" [ 390.313196][T14503] netlink: 'syz.4.2194': attribute type 10 has an invalid length. [ 390.415557][T14506] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2195'. [ 390.603955][T14514] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2196'. [ 390.689454][T14522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2197'. [ 390.703126][ T5631] Bluetooth: hci5: link tx timeout [ 390.710106][ T5631] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 390.873829][ T7194] udevd[7194]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 390.986855][T14528] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 391.043825][T14527] Set syz1 is full, maxelem 1029 reached [ 391.130253][T14536] pim6reg: entered allmulticast mode [ 391.156785][T14541] pim6reg: left allmulticast mode [ 391.175478][T14541] bridge0: left allmulticast mode [ 391.668995][T14553] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 391.714442][T14553] bond9 (unregistering): Released all slaves [ 391.727363][T14563] __nla_validate_parse: 1 callbacks suppressed [ 391.727380][T14563] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2207'. [ 391.934338][T14568] netlink: 'syz.1.2208': attribute type 3 has an invalid length. [ 391.990110][T14573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2210'. [ 392.117209][T14573] gretap0: entered promiscuous mode [ 392.376564][T14588] syzkaller0: entered promiscuous mode [ 392.393713][T14588] syzkaller0: entered allmulticast mode [ 392.428045][T14588] 0: reclassify loop, rule prio 0, protocol 800 [ 392.614496][T14600] netlink: 'syz.1.2219': attribute type 30 has an invalid length. [ 392.735752][ T5631] Bluetooth: hci5: command 0x0406 tx timeout [ 393.034682][T14605] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 393.066504][T14605] bond7 (unregistering): Released all slaves [ 393.594340][T14653] netlink: 'syz.1.2236': attribute type 6 has an invalid length. [ 393.675393][T14653] syzkaller0: entered promiscuous mode [ 393.710087][T14661] x_tables: duplicate underflow at hook 1 [ 393.720774][T14653] syzkaller0: entered allmulticast mode [ 393.781579][T14661] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 394.305205][T14688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2243'. [ 394.380940][T14691] netlink: 'syz.5.2245': attribute type 1 has an invalid length. [ 394.413044][T14691] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2245'. [ 394.568527][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 394.744013][T14698] batman_adv: batadv0: Adding interface: veth0 [ 394.799468][T14698] batman_adv: batadv0: The MTU of interface veth0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1312 would solve the problem. [ 394.829873][T14698] batman_adv: batadv0: Interface activated: veth0 [ 394.866258][T14707] vlan6: entered promiscuous mode [ 395.152788][T14719] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2254'. [ 395.181770][T14719] netlink: 239 bytes leftover after parsing attributes in process `syz.4.2254'. [ 395.225281][T14719] netlink: zone id is out of range [ 395.243972][T14719] netlink: zone id is out of range [ 395.265697][T14719] netlink: zone id is out of range [ 395.287988][T14719] netlink: zone id is out of range [ 395.309656][T14719] netlink: zone id is out of range [ 395.332221][T14719] netlink: zone id is out of range [ 395.344273][T14719] netlink: zone id is out of range [ 395.362810][T14719] netlink: zone id is out of range [ 395.797054][T14737] netlink: 'syz.1.2257': attribute type 1 has an invalid length. [ 395.999697][T14739] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2260'. [ 396.038045][T14741] netlink: 'syz.1.2259': attribute type 1 has an invalid length. [ 396.055444][T14741] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2259'. [ 396.082581][T14743] syzkaller0: entered promiscuous mode [ 396.089361][T14743] syzkaller0: entered allmulticast mode [ 396.106678][T14743] tipc: Enabled bearer , priority 0 [ 396.133636][T14743] tipc: Resetting bearer [ 396.149777][T14742] tipc: Resetting bearer [ 396.162671][T14745] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20014 [ 396.221114][T14742] tipc: Disabling bearer [ 396.770534][T14782] netlink: 700 bytes leftover after parsing attributes in process `syz.1.2268'. [ 396.804031][T14782] net_ratelimit: 6 callbacks suppressed [ 396.804052][T14782] openvswitch: netlink: Flow actions attr not present in new flow. [ 399.238402][T14751] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 399.517273][T14827] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2275'. [ 399.518032][T14829] netlink: 'syz.3.2276': attribute type 1 has an invalid length. [ 399.569136][T14829] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2276'. [ 399.868627][T14843] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2278'. [ 400.111413][T14857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2284'. [ 400.205053][T14871] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 400.237910][T14871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2287'. [ 400.325998][T14868] vlan3: entered allmulticast mode [ 400.336099][T14868] bridge4: entered allmulticast mode [ 400.344227][T14873] bridge4: port 1(erspan0) entered blocking state [ 400.351429][T14873] bridge4: port 1(erspan0) entered disabled state [ 400.358120][T14864] netlink: 'syz.3.2287': attribute type 1 has an invalid length. [ 400.366727][T14873] erspan0: entered allmulticast mode [ 400.385711][T14873] erspan0: entered promiscuous mode [ 400.402633][T14873] bridge4: port 1(erspan0) entered blocking state [ 400.409272][T14873] bridge4: port 1(erspan0) entered forwarding state [ 400.514184][T14857] bridge4: port 1(erspan0) entered disabled state [ 400.667306][T14857] bridge0: port 1(vlan1) entered disabled state [ 400.694732][T14892] netlink: 'syz.4.2291': attribute type 12 has an invalid length. [ 400.987202][T14904] netlink: 'syz.2.2295': attribute type 10 has an invalid length. [ 401.037242][T14904] vxcan0: entered allmulticast mode [ 401.058722][T14910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2296'. [ 401.071622][T14904] team0: Device vxcan0 is of different type [ 401.367928][T14926] vxcan1: tx drop: invalid da for name 0x00000000000000c8 [ 401.637720][T14947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.783135][T14952] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 401.791468][T14952] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 401.808866][T14956] netlink: 5400 bytes leftover after parsing attributes in process `syz.2.2311'. [ 401.970420][T14961] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2314'. [ 402.575387][T14985] ip_tables: iptables: counters copy to user failed while replacing table [ 402.585590][T14985] netlink: 'syz.3.2321': attribute type 1 has an invalid length. [ 402.623097][T14985] bond6: entered promiscuous mode [ 402.639065][T14985] bond6: entered allmulticast mode [ 402.658622][T14985] 8021q: adding VLAN 0 to HW filter on device bond6 [ 402.706460][T14990] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2322'. [ 402.757473][T14985] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 402.782427][T14990] 8021q: VLANs not supported on wg0 [ 402.912263][T14993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2323'. [ 403.171563][T15005] 8021q: VLANs not supported on ip6tnl0 [ 403.353532][T15016] netlink: 'syz.5.2330': attribute type 1 has an invalid length. [ 403.464844][T15022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2330'. [ 403.526377][T15016] 8021q: adding VLAN 0 to HW filter on device bond7 [ 403.952417][T15020] bond7: (slave veth7): Enslaving as an active interface with a down link [ 404.046297][T15026] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 404.077979][T15026] bond7: (slave batadv1): making interface the new active one [ 404.117684][T15026] batadv1: entered promiscuous mode [ 404.147428][T15026] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 404.260462][T15016] bond7 (unregistering): (slave veth7): Releasing active interface [ 404.330418][T15016] bond7 (unregistering): (slave batadv1): Releasing active interface [ 404.362039][T15016] bond7 (unregistering): Released all slaves [ 404.768073][T15059] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2335'. [ 404.785458][T15058] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2336'. [ 404.834879][T15059] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2335'. [ 405.120057][ T30] audit: type=1800 audit(1787732861.793:8): pid=15075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2340" name=CB dev="tmpfs" ino=2371 res=0 errno=0 [ 405.236413][T15079] batadv_slave_0: entered promiscuous mode [ 405.324269][T15085] FAULT_INJECTION: forcing a failure. [ 405.324269][T15085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.357918][T15087] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2344'. [ 405.368409][T15085] CPU: 0 UID: 0 PID: 15085 Comm: syz.2.2343 Not tainted syzkaller #0 PREEMPT(full) [ 405.368438][T15085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 405.368452][T15085] Call Trace: [ 405.368460][T15085] [ 405.368469][T15085] dump_stack_lvl+0xe8/0x150 [ 405.368505][T15085] should_fail_ex+0x410/0x560 [ 405.368544][T15085] _copy_from_user+0x2d/0xb0 [ 405.368568][T15085] __sys_bind+0x1c6/0x410 [ 405.368608][T15085] ? __pfx___sys_bind+0x10/0x10 [ 405.368647][T15085] ? __pfx_ksys_write+0x10/0x10 [ 405.368689][T15085] __x64_sys_bind+0x7a/0x90 [ 405.368717][T15085] do_syscall_64+0x166/0x520 [ 405.368742][T15085] ? trace_irq_disable+0x3b/0x140 [ 405.368771][T15085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.368793][T15085] ? clear_bhb_loop+0x70/0xc0 [ 405.368820][T15085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.368841][T15085] RIP: 0033:0x7f302779e0d9 [ 405.368862][T15085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.368880][T15085] RSP: 002b:00007f3028624028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 405.368903][T15085] RAX: ffffffffffffffda RBX: 00007f3027a25fa0 RCX: 00007f302779e0d9 [ 405.368918][T15085] RDX: 0000000000000080 RSI: 0000200000000080 RDI: 0000000000000004 [ 405.368932][T15085] RBP: 00007f3028624090 R08: 0000000000000000 R09: 0000000000000000 [ 405.368945][T15085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.368958][T15085] R13: 00007f3027a26038 R14: 00007f3027a25fa0 R15: 00007fffd3d7d588 [ 405.368991][T15085] [ 405.585135][T15078] batadv_slave_0: left promiscuous mode [ 405.641357][T15091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2346'. [ 405.818662][T15101] ieee802154 phy0 wpan0: encryption failed: -22 [ 406.117216][T15111] ip6gretap2: entered allmulticast mode [ 406.130179][T15111] batman_adv: batadv0: Adding interface: ip6gretap2 [ 406.142845][T15111] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.189463][T15111] batman_adv: batadv0: Interface activated: ip6gretap2 [ 406.352334][T15117] nbd: must specify at least one socket [ 406.623851][T15128] FAULT_INJECTION: forcing a failure. [ 406.623851][T15128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.659293][T15128] CPU: 1 UID: 0 PID: 15128 Comm: syz.4.2356 Not tainted syzkaller #0 PREEMPT(full) [ 406.659327][T15128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 406.659343][T15128] Call Trace: [ 406.659353][T15128] [ 406.659364][T15128] dump_stack_lvl+0xe8/0x150 [ 406.659406][T15128] should_fail_ex+0x410/0x560 [ 406.659448][T15128] _copy_to_user+0x31/0xb0 [ 406.659470][T15128] simple_read_from_buffer+0xe1/0x170 [ 406.659506][T15128] proc_fail_nth_read+0x1bb/0x230 [ 406.659537][T15128] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 406.659568][T15128] ? rw_verify_area+0x24a/0x4c0 [ 406.659594][T15128] ? __local_bh_enable_ip+0xd6/0x140 [ 406.659617][T15128] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 406.659645][T15128] vfs_read+0x213/0xa80 [ 406.659676][T15128] ? __pfx___mutex_lock+0x10/0x10 [ 406.659699][T15128] ? __pfx_vfs_read+0x10/0x10 [ 406.659726][T15128] ? __fget_files+0x2a/0x420 [ 406.659756][T15128] ? __fget_files+0x3a2/0x420 [ 406.659780][T15128] ? __fget_files+0x2a/0x420 [ 406.659819][T15128] ksys_read+0x150/0x270 [ 406.659848][T15128] ? __pfx_ksys_read+0x10/0x10 [ 406.659884][T15128] do_syscall_64+0x166/0x520 [ 406.659906][T15128] ? trace_irq_disable+0x3b/0x140 [ 406.659931][T15128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.659951][T15128] ? clear_bhb_loop+0x70/0xc0 [ 406.659974][T15128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.659992][T15128] RIP: 0033:0x7ffb42f5e90e [ 406.660010][T15128] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 406.660025][T15128] RSP: 002b:00007ffb43dfefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 406.660046][T15128] RAX: ffffffffffffffda RBX: 00007ffb43dff6c0 RCX: 00007ffb42f5e90e [ 406.660061][T15128] RDX: 000000000000000f RSI: 00007ffb43dff0a0 RDI: 0000000000000003 [ 406.660071][T15128] RBP: 00007ffb43dff090 R08: 0000000000000000 R09: 0000000000000000 [ 406.660082][T15128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.660092][T15128] R13: 00007ffb43226038 R14: 00007ffb43225fa0 R15: 00007ffead665f78 [ 406.660122][T15128] [ 406.965837][T15130] bond8: entered allmulticast mode [ 407.514751][T15157] lo speed is unknown, defaulting to 1000 [ 407.663688][T15170] __nla_validate_parse: 5 callbacks suppressed [ 407.663708][T15170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2369'. [ 407.744170][T15166] syzkaller0: entered promiscuous mode [ 407.750141][T15166] syzkaller0: entered allmulticast mode [ 407.953438][T10629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.992437][T10629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.444807][T15213] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2381'. [ 410.568507][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 410.639531][T15217] block nbd3: server does not support multiple connections per device. [ 410.666146][T15217] block nbd3: shutting down sockets [ 410.916559][T15241] set match dimension is over the limit! [ 411.004201][T15245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2392'. [ 411.062576][T15245] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 411.451651][T15264] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 411.500158][T15266] ip6gre2: entered promiscuous mode [ 411.523359][T15266] ip6gre2: entered allmulticast mode [ 411.570854][T15268] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 411.636634][T15267] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2398'. [ 411.873053][T15282] IPVS: length: 33 != 8 [ 411.903416][T15279] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 411.921087][T15279] bond3 (unregistering): Released all slaves [ 412.208004][T15297] netlink: 'syz.5.2407': attribute type 1 has an invalid length. [ 412.218390][T15297] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2407'. [ 412.391149][T15302] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2410'. [ 412.401704][T15305] netlink: 'syz.2.2411': attribute type 1 has an invalid length. [ 412.410821][T15305] netlink: 'syz.2.2411': attribute type 1 has an invalid length. [ 412.423348][ T6686] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 412.452145][T13673] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 412.466666][ T6686] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 413.099029][T15335] netlink: 'syz.5.2418': attribute type 1 has an invalid length. [ 413.187023][T15337] netlink: 'syz.5.2418': attribute type 5 has an invalid length. [ 413.253144][T15337] netlink: 'syz.5.2418': attribute type 9 has an invalid length. [ 413.261319][T15337] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2418'. [ 413.288574][T13673] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 413.339239][T15341] FAULT_INJECTION: forcing a failure. [ 413.339239][T15341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.354290][T15335] 8021q: adding VLAN 0 to HW filter on device bond7 [ 413.426411][T15341] CPU: 0 UID: 0 PID: 15341 Comm: syz.4.2419 Not tainted syzkaller #0 PREEMPT(full) [ 413.426441][T15341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 413.426455][T15341] Call Trace: [ 413.426463][T15341] [ 413.426472][T15341] dump_stack_lvl+0xe8/0x150 [ 413.426515][T15341] should_fail_ex+0x410/0x560 [ 413.426554][T15341] _copy_from_user+0x2d/0xb0 [ 413.426577][T15341] ___sys_sendmsg+0x1c6/0x360 [ 413.426611][T15341] ? __lock_acquire+0x683/0x2cf0 [ 413.426648][T15341] ? __pfx____sys_sendmsg+0x10/0x10 [ 413.426718][T15341] ? __fget_files+0x2a/0x420 [ 413.426748][T15341] ? __fget_files+0x3a2/0x420 [ 413.426789][T15341] __x64_sys_sendmsg+0x1b1/0x290 [ 413.426827][T15341] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 413.426883][T15341] do_syscall_64+0x166/0x520 [ 413.426908][T15341] ? trace_irq_disable+0x3b/0x140 [ 413.426939][T15341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.426962][T15341] ? clear_bhb_loop+0x70/0xc0 [ 413.426990][T15341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.427012][T15341] RIP: 0033:0x7ffb42f9e0d9 [ 413.427033][T15341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.427052][T15341] RSP: 002b:00007ffb43dff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.427074][T15341] RAX: ffffffffffffffda RBX: 00007ffb43225fa0 RCX: 00007ffb42f9e0d9 [ 413.427090][T15341] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000005 [ 413.427103][T15341] RBP: 00007ffb43dff090 R08: 0000000000000000 R09: 0000000000000000 [ 413.427115][T15341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.427128][T15341] R13: 00007ffb43226038 R14: 00007ffb43225fa0 R15: 00007ffead665f78 [ 413.427163][T15341] [ 413.610255][T15338] bond7: (slave gretap1): Enslaving as a backup interface with an up link [ 413.633086][ T6686] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 413.671625][T13674] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 413.697363][T15347] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2420'. [ 413.779137][T15335] bond7 (unregistering): (slave gretap1): Removing an active aggregator [ 413.789025][T15335] bond7 (unregistering): (slave gretap1): Releasing backup interface [ 413.816520][T15335] bond7 (unregistering): Released all slaves [ 413.872546][T15354] netlink: 'syz.4.2422': attribute type 11 has an invalid length. [ 414.137225][T15367] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2427'. [ 414.353777][T15378] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20014 [ 414.354130][T15376] netlink: 'syz.3.2431': attribute type 1 has an invalid length. [ 414.402477][T15376] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2431'. [ 414.431436][T15379] macsec2: entered allmulticast mode [ 414.442630][T15379] veth1_macvtap: entered allmulticast mode [ 414.461021][T15379] veth1_macvtap: left allmulticast mode [ 414.660239][T15388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2434'. [ 414.713673][T15391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2436'. [ 414.808105][T15391] xfrm1: entered promiscuous mode [ 414.828446][T15391] xfrm1: entered allmulticast mode [ 414.858508][T15391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2436'. [ 415.391293][T15420] netlink: 'syz.3.2446': attribute type 1 has an invalid length. [ 415.435126][T15420] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2446'. [ 415.541179][T15424] syzkaller0: entered promiscuous mode [ 415.557765][T15424] syzkaller0: entered allmulticast mode [ 415.568028][T15427] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20014 [ 415.761484][T15432] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2449'. [ 415.805708][T15441] wg2: Caught tx_queue_len zero misconfig [ 416.043050][T15445] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 416.767968][T15486] netlink: 'syz.3.2460': attribute type 1 has an invalid length. [ 416.804077][T15486] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2460'. [ 416.817662][T15492] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20014 [ 416.888457][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 417.877550][T15526] bridge0: entered allmulticast mode [ 417.921260][T15528] 8021q: VLANs not supported on ip_vti0 [ 417.953668][T15529] vlan1: left promiscuous mode [ 417.965905][T15529] bridge_slave_0: left promiscuous mode [ 417.983843][T15529] bridge0: port 1(vlan1) entered disabled state [ 418.426491][T15554] syzkaller0: entered promiscuous mode [ 418.444871][T15554] syzkaller0: entered allmulticast mode [ 418.470314][T15554] __nla_validate_parse: 3 callbacks suppressed [ 418.470333][T15554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2480'. [ 418.535316][T15555] tipc: Failed to remove unknown binding: 66,1,1/472239398:914729955/914729957 [ 418.952302][T15588] set match dimension is over the limit! [ 418.976811][T15578] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 419.068763][T15583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2485'. [ 419.210760][T15598] netlink: 'syz.2.2487': attribute type 1 has an invalid length. [ 419.438135][T15607] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2491'. [ 419.522989][T15612] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2489'. [ 419.553620][T13674] ------------[ cut here ]------------ [ 419.560108][T13674] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 419.570120][T13674] WARNING: net/mac80211/rate.c:404 at __rate_control_send_low+0x60c/0x8a0, CPU#0: kworker/0:11/13674 [ 419.581072][T13674] Modules linked in: [ 419.585314][T13674] CPU: 0 UID: 0 PID: 13674 Comm: kworker/0:11 Not tainted syzkaller #0 PREEMPT(full) [ 419.594951][T13674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 419.605112][T13674] Workqueue: mld mld_ifc_work [ 419.609883][T13674] RIP: 0010:__rate_control_send_low+0x638/0x8a0 [ 419.616173][T13674] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f [ 419.635913][T13674] RSP: 0018:ffffc90004fde378 EFLAGS: 00010246 [ 419.642056][T13674] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 419.650126][T13674] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff906a7a60 [ 419.658131][T13674] RBP: ffff8880662a0f40 R08: 0000000000000000 R09: 0000000000000000 [ 419.666202][T13674] R10: 0000000000000004 R11: 0000000000000000 R12: ffff88807a5a5528 [ 419.674313][T13674] R13: dffffc0000000000 R14: ffffffff906a7a60 R15: ffff8880662a3258 [ 419.682383][T13674] FS: 0000000000000000(0000) GS:ffff888124f24000(0000) knlGS:0000000000000000 [ 419.691390][T13674] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 419.698014][T13674] CR2: 0000001b2e823ffc CR3: 000000000e946000 CR4: 00000000003526f0 [ 419.706088][T13674] Call Trace: [ 419.709429][T13674] [ 419.712415][T13674] rate_control_send_low+0x1a7/0x7b0 [ 419.717752][T13674] ? __lock_acquire+0x683/0x2cf0 [ 419.722798][T13674] rate_control_get_rate+0x20b/0x5d0 [ 419.728140][T13674] ieee80211_tx_h_rate_ctrl+0xafa/0x1760 [ 419.733902][T13674] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 419.740108][T13674] invoke_tx_handlers_late+0xb5/0x1830 [ 419.745657][T13674] ? ieee80211_tx_h_select_key+0xd1c/0x1a90 [ 419.751685][T13674] ieee80211_tx_dequeue+0x3fba/0x55b0 [ 419.757119][T13674] ? __pfx_hlock_conflict+0x10/0x10 [ 419.762471][T13674] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 419.768304][T13674] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 419.773728][T13674] ? do_raw_spin_lock+0x12b/0x2f0 [ 419.778850][T13674] ? ieee80211_queue_skb+0x16dd/0x22e0 [ 419.784369][T13674] ieee80211_hwsim_wake_tx_queue+0xbb/0x150 [ 419.790355][T13674] ieee80211_queue_skb+0x1918/0x22e0 [ 419.795723][T13674] ieee80211_tx+0x2c2/0x4b0 [ 419.800346][T13674] ? __pfx_ieee80211_tx+0x10/0x10 [ 419.805456][T13674] ? ieee80211_xmit+0x2e5/0x3c0 [ 419.810405][T13674] __ieee80211_subif_start_xmit+0xf06/0x1690 [ 419.816434][T13674] ? __ieee80211_subif_start_xmit+0x2ca/0x1690 [ 419.822691][T13674] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 419.829219][T13674] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 419.835519][T13674] ieee80211_subif_start_xmit+0xf1/0x570 [ 419.841247][T13674] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 419.847566][T13674] dev_hard_start_xmit+0x2cd/0x830 [ 419.852838][T13674] __dev_queue_xmit+0x14c0/0x3820 [ 419.857934][T13674] ? __dev_queue_xmit+0x29b/0x3820 [ 419.863141][T13674] ? unwind_next_frame+0x8f/0x2550 [ 419.868357][T13674] ? __pfx___dev_queue_xmit+0x10/0x10 [ 419.873789][T13674] ? skb_network_protocol+0x23d/0x400 [ 419.879298][T13674] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 419.885538][T13674] ? __pfx_netif_skb_features+0x10/0x10 [ 419.891186][T13674] macvlan_start_xmit+0x336/0x5f0 [ 419.896304][T13674] dev_hard_start_xmit+0x2cd/0x830 [ 419.901560][T13674] __dev_queue_xmit+0x14c0/0x3820 [ 419.906626][T13674] ? __lock_acquire+0x683/0x2cf0 [ 419.911671][T13674] ? __dev_queue_xmit+0x29b/0x3820 [ 419.916865][T13674] ? ___neigh_create+0x1cd2/0x22b0 [ 419.922068][T13674] ? __pfx___dev_queue_xmit+0x10/0x10 [ 419.927488][T13674] ? neigh_resolve_output+0x428/0x720 [ 419.932961][T13674] ? eth_header+0x11b/0x200 [ 419.937514][T13674] ? __asan_memcpy+0x40/0x70 [ 419.942222][T13674] ? ip6_output+0x11e/0x540 [ 419.946777][T13674] ip6_output+0x337/0x540 [ 419.951198][T13674] ? __pfx_ip6_output+0x10/0x10 [ 419.956106][T13674] NF_HOOK+0x177/0x4f0 [ 419.960266][T13674] ? __pfx_NF_HOOK+0x10/0x10 [ 419.964905][T13674] ? icmp6_dst_alloc+0x39b/0x430 [ 419.969926][T13674] ? __pfx_dst_output+0x10/0x10 [ 419.974818][T13674] ? __local_bh_enable_ip+0xd6/0x140 [ 419.980190][T13674] ? icmp6_dst_alloc+0x39b/0x430 [ 419.985189][T13674] ? icmp6_dst_alloc+0x39b/0x430 [ 419.990253][T13674] mld_sendpack+0x890/0xe10 [ 419.994853][T13674] ? mld_sendpack+0x206/0xe10 [ 419.999614][T13674] ? __pfx_mld_sendpack+0x10/0x10 [ 420.004713][T13674] mld_ifc_work+0x842/0xd60 [ 420.009321][T13674] ? process_scheduled_works+0xa1a/0x14c0 [ 420.015088][T13674] process_scheduled_works+0xa88/0x14c0 [ 420.020762][T13674] ? __pfx_process_scheduled_works+0x10/0x10 [ 420.026800][T13674] ? assign_work+0x3cf/0x5d0 [ 420.031490][T13674] worker_thread+0xa47/0xfb0 [ 420.036152][T13674] ? __kthread_parkme+0x71/0x1f0 [ 420.041224][T13674] kthread+0x38b/0x480 [ 420.045347][T13674] ? __pfx_worker_thread+0x10/0x10 [ 420.050547][T13674] ? __pfx_kthread+0x10/0x10 [ 420.055197][T13674] ret_from_fork+0x514/0xb70 [ 420.059877][T13674] ? __pfx_ret_from_fork+0x10/0x10 [ 420.065092][T13674] ? __switch_to+0xc89/0x1420 [ 420.069858][T13674] ? __pfx_kthread+0x10/0x10 [ 420.074505][T13674] ret_from_fork_asm+0x1a/0x30 [ 420.079385][T13674] [ 420.082489][T13674] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 420.089804][T13674] CPU: 0 UID: 0 PID: 13674 Comm: kworker/0:11 Not tainted syzkaller #0 PREEMPT(full) [ 420.099384][T13674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 420.109472][T13674] Workqueue: mld mld_ifc_work [ 420.114220][T13674] Call Trace: [ 420.117534][T13674] [ 420.120495][T13674] vpanic+0x56d/0xa60 [ 420.124528][T13674] ? __pfx__printk+0x10/0x10 [ 420.129157][T13674] ? __pfx_vpanic+0x10/0x10 [ 420.133706][T13674] ? is_bpf_text_address+0x292/0x2b0 [ 420.139044][T13674] ? is_bpf_text_address+0x26/0x2b0 [ 420.144303][T13674] panic+0xc5/0xd0 [ 420.148071][T13674] ? __pfx_panic+0x10/0x10 [ 420.152557][T13674] ? ret_from_fork_asm+0x1a/0x30 [ 420.157560][T13674] __warn+0x315/0x4c0 [ 420.161601][T13674] ? __rate_control_send_low+0x60c/0x8a0 [ 420.167278][T13674] ? __rate_control_send_low+0x60c/0x8a0 [ 420.172955][T13674] __report_bug+0x276/0x570 [ 420.177598][T13674] ? __rate_control_send_low+0x60c/0x8a0 [ 420.183279][T13674] ? __pfx___report_bug+0x10/0x10 [ 420.188368][T13674] report_bug_entry+0x19b/0x290 [ 420.193263][T13674] ? __rate_control_send_low+0x638/0x8a0 [ 420.199040][T13674] ? __rate_control_send_low+0x63d/0x8a0 [ 420.204717][T13674] handle_bug+0xce/0x200 [ 420.209009][T13674] exc_invalid_op+0x1a/0x50 [ 420.213552][T13674] asm_exc_invalid_op+0x1a/0x20 [ 420.218439][T13674] RIP: 0010:__rate_control_send_low+0x638/0x8a0 [ 420.224717][T13674] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f [ 420.244360][T13674] RSP: 0018:ffffc90004fde378 EFLAGS: 00010246 [ 420.250473][T13674] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 420.258484][T13674] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff906a7a60 [ 420.266484][T13674] RBP: ffff8880662a0f40 R08: 0000000000000000 R09: 0000000000000000 [ 420.274490][T13674] R10: 0000000000000004 R11: 0000000000000000 R12: ffff88807a5a5528 [ 420.282497][T13674] R13: dffffc0000000000 R14: ffffffff906a7a60 R15: ffff8880662a3258 [ 420.290528][T13674] ? __rate_control_send_low+0x600/0x8a0 [ 420.296243][T13674] rate_control_send_low+0x1a7/0x7b0 [ 420.301571][T13674] ? __lock_acquire+0x683/0x2cf0 [ 420.306555][T13674] rate_control_get_rate+0x20b/0x5d0 [ 420.311890][T13674] ieee80211_tx_h_rate_ctrl+0xafa/0x1760 [ 420.317576][T13674] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 420.323711][T13674] invoke_tx_handlers_late+0xb5/0x1830 [ 420.329228][T13674] ? ieee80211_tx_h_select_key+0xd1c/0x1a90 [ 420.335200][T13674] ieee80211_tx_dequeue+0x3fba/0x55b0 [ 420.340626][T13674] ? __pfx_hlock_conflict+0x10/0x10 [ 420.345917][T13674] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 420.351703][T13674] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 420.357158][T13674] ? do_raw_spin_lock+0x12b/0x2f0 [ 420.362238][T13674] ? ieee80211_queue_skb+0x16dd/0x22e0 [ 420.367731][T13674] ieee80211_hwsim_wake_tx_queue+0xbb/0x150 [ 420.373677][T13674] ieee80211_queue_skb+0x1918/0x22e0 [ 420.379025][T13674] ieee80211_tx+0x2c2/0x4b0 [ 420.383587][T13674] ? __pfx_ieee80211_tx+0x10/0x10 [ 420.388692][T13674] ? ieee80211_xmit+0x2e5/0x3c0 [ 420.393604][T13674] __ieee80211_subif_start_xmit+0xf06/0x1690 [ 420.399628][T13674] ? __ieee80211_subif_start_xmit+0x2ca/0x1690 [ 420.405830][T13674] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 420.412294][T13674] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 420.418568][T13674] ieee80211_subif_start_xmit+0xf1/0x570 [ 420.424251][T13674] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 420.430585][T13674] dev_hard_start_xmit+0x2cd/0x830 [ 420.435750][T13674] __dev_queue_xmit+0x14c0/0x3820 [ 420.440817][T13674] ? __dev_queue_xmit+0x29b/0x3820 [ 420.445964][T13674] ? unwind_next_frame+0x8f/0x2550 [ 420.451116][T13674] ? __pfx___dev_queue_xmit+0x10/0x10 [ 420.456547][T13674] ? skb_network_protocol+0x23d/0x400 [ 420.461998][T13674] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 420.468191][T13674] ? __pfx_netif_skb_features+0x10/0x10 [ 420.473795][T13674] macvlan_start_xmit+0x336/0x5f0 [ 420.478867][T13674] dev_hard_start_xmit+0x2cd/0x830 [ 420.484052][T13674] __dev_queue_xmit+0x14c0/0x3820 [ 420.489125][T13674] ? __lock_acquire+0x683/0x2cf0 [ 420.494143][T13674] ? __dev_queue_xmit+0x29b/0x3820 [ 420.499478][T13674] ? ___neigh_create+0x1cd2/0x22b0 [ 420.504641][T13674] ? __pfx___dev_queue_xmit+0x10/0x10 [ 420.510070][T13674] ? neigh_resolve_output+0x428/0x720 [ 420.515529][T13674] ? eth_header+0x11b/0x200 [ 420.520085][T13674] ? __asan_memcpy+0x40/0x70 [ 420.524758][T13674] ? ip6_output+0x11e/0x540 [ 420.529321][T13674] ip6_output+0x337/0x540 [ 420.533734][T13674] ? __pfx_ip6_output+0x10/0x10 [ 420.538633][T13674] NF_HOOK+0x177/0x4f0 [ 420.542787][T13674] ? __pfx_NF_HOOK+0x10/0x10 [ 420.547420][T13674] ? icmp6_dst_alloc+0x39b/0x430 [ 420.552396][T13674] ? __pfx_dst_output+0x10/0x10 [ 420.557283][T13674] ? __local_bh_enable_ip+0xd6/0x140 [ 420.562620][T13674] ? icmp6_dst_alloc+0x39b/0x430 [ 420.567616][T13674] ? icmp6_dst_alloc+0x39b/0x430 [ 420.572617][T13674] mld_sendpack+0x890/0xe10 [ 420.577198][T13674] ? mld_sendpack+0x206/0xe10 [ 420.581926][T13674] ? __pfx_mld_sendpack+0x10/0x10 [ 420.587016][T13674] mld_ifc_work+0x842/0xd60 [ 420.591570][T13674] ? process_scheduled_works+0xa1a/0x14c0 [ 420.597343][T13674] process_scheduled_works+0xa88/0x14c0 [ 420.602988][T13674] ? __pfx_process_scheduled_works+0x10/0x10 [ 420.609027][T13674] ? assign_work+0x3cf/0x5d0 [ 420.613686][T13674] worker_thread+0xa47/0xfb0 [ 420.618344][T13674] ? __kthread_parkme+0x71/0x1f0 [ 420.623359][T13674] kthread+0x38b/0x480 [ 420.627481][T13674] ? __pfx_worker_thread+0x10/0x10 [ 420.632634][T13674] ? __pfx_kthread+0x10/0x10 [ 420.637267][T13674] ret_from_fork+0x514/0xb70 [ 420.641905][T13674] ? __pfx_ret_from_fork+0x10/0x10 [ 420.647050][T13674] ? __switch_to+0xc89/0x1420 [ 420.651755][T13674] ? __pfx_kthread+0x10/0x10 [ 420.656384][T13674] ret_from_fork_asm+0x1a/0x30 [ 420.661207][T13674] [ 420.664885][T13674] Kernel Offset: disabled [ 420.669232][T13674] Rebooting in 86400 seconds..