last executing test programs: 2.031118501s ago: executing program 0 (id=1543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1404, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800a00010072616e67650000002c0002800c0004800500010084000000080001400002000008000240000000000c00038005000100430000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 1.954500004s ago: executing program 3 (id=1545): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000140)=0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000440)={'veth1_macvtap\x00', 0x102}) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x11a, 0x3, &(0x7f0000000100)=0x304, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", "", ""]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) 1.879231588s ago: executing program 3 (id=1546): r0 = socket(0x10, 0x80002, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x3, @fixed}, 0xe) (async, rerun: 64) r2 = socket$rds(0x15, 0x5, 0x0) (rerun: 64) bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10) (async) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x214, 0x30, 0x51b, 0x0, 0x0, {}, [{0x200, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x2, 0x0, 0x0, {{0x7}, {0xfffffffffffffff5, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xec, 0x0, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x3}}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x0, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010103}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x34e80bc827e65cec}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x0, 0x3, @rand_addr=0x64010101}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x214}}, 0x0) (rerun: 32) 1.872942343s ago: executing program 4 (id=1547): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000004, 0x13, r0, 0xf45f2000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xe) shutdown(r1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000200)={r4, 0x1}, &(0x7f0000000380)=0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x7, 'bridge0\x00', {0x6}, 0x2d47}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x80, 0x80, 0x0, 0x10, {{0x1d, 0x4, 0x3, 0x13, 0x74, 0x65, 0x0, 0x2, 0x4, 0x0, @multicast2, @broadcast, {[@cipso={0x86, 0x2f, 0x3, [{0x6, 0x5, ')H+'}, {0x5, 0x5, "dd1c0c"}, {0x7, 0xc, "4eb3a9d924f7c05b3c2d"}, {0x5, 0x3, '3'}, {0x0, 0x10, "9f89e03a7832fdfe6a56f28ef343"}]}, @cipso={0x86, 0x1a, 0x1, [{0x6, 0x4, "053d"}, {0x5, 0x10, "141de5a3eb8c058ffbf6f0b642fe"}]}, @ssrr={0x89, 0x17, 0x98, [@multicast1, @broadcast, @private=0xa010100, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r5, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)={0xa8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xcf}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000805}, 0x8810) ioctl$FS_IOC_RESVSP(r5, 0x4030582a, &(0x7f0000000380)={0x0, 0x1, 0x10, 0x7}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0xb}, 0x518}, @in6={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0xf}}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e21, 0x7, @mcast2, 0x8}, @in6={0xa, 0x4e20, 0xffffffff, @loopback, 0xfffffff9}], 0xa0) 1.77816122s ago: executing program 0 (id=1549): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240), 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x23, 0x3, 0x1000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240), 0x4) (async) socket(0x10, 0x3, 0x0) (async) socket(0x23, 0x3, 0x1000000) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async) 1.709871955s ago: executing program 4 (id=1551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8001}, [@NFTA_SET_EXPRESSIONS={0x48, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x400000}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0xd8, 0x18, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xb8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf8f}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}]}]}, @NFT_MSG_DELTABLE={0x210, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0xde, 0x6, "e1418c579798383b82488cbdbe91aad419414ae4851de02e50dcba1b783d7739a2d1865e70e86e94b02894939ec663ec045aa98bc7f503f3d14ecfd4cbda31441b621b092ff7311aac65645e11ee4fc161edeb9c7a7d646c4caa4ff2c786117287c86e2b56a948fdee809313865bdaabd081334921153a31d4c355486290e935acfaa08d57e263f90319d22775a58a87e5195f0f754da65fa56f27009077d75c1700d29874902c5fd548ac73f28bee624424188485d524ab2a448145f15ecdae5d0a07094fbb44f93cfdd0a3ce511832082e551538beb57ed5c1"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xc6, 0x6, "ce0d1af6545bcfa43eaa53aa719b2a33403fc2ffb2e9a027d456d782e88b1b5e5ee999a503371e57f1d3a1aa2d1043490b640a8da0913859d2d347f6d87f91e3b2dcb416c63966f8a79aad30d6c3d3c3e5e788fabbc15af65511750c08b64f6e0c1a86956670fb1cc22eeda67381b4f56ca07bf3caff06c3cbc26a87b671243608acde0ef5e32635386582d57a8df92a0dd2bf013733907f34b46c89d9b8e8bd66b1a0e6196520208b1ec3936d064a93a6aaa0092ade62924886195c7345b09a96ae"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x388}, 0x1, 0x0, 0x0, 0x4008800}, 0x40010) 1.511052255s ago: executing program 4 (id=1553): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x37, 0x800, 0x70bd28, 0x25dfdbfd, {0x17}, [@typed={0x8, 0x142, 0x0, 0x0, @u32=0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000240)=[{0x48, 0x0, 0x0, 0xffefffff}, {0x6}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="54000000020601030000000000000000000000000900020073797a30000000000500010006000000050005800000000005000400000000000c00078008000600000000010d000300686173683a6d616300"], 0x54}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_getnetconf={0x1c, 0x52, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NETCONFA_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000d00)={0x80, r8, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@void, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x52, 0xe, {{{0x0, 0x2}, {0x9}, @device_b, @broadcast, @random="ec03f3b85ad3"}, 0xffffffffffffffa1, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @val={0x4, 0x6, {0xa, 0x1, 0x8}}, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_SSID={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x8810}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)=@ethtool_channels={0x3d, 0x1, 0xb, 0x100, 0x4, 0xffffff81, 0x0, 0x7, 0x6ac}}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETSNDBUF(r12, 0x400454d4, &(0x7f00000001c0)) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) socketpair(0x6, 0xa, 0x6, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) sendmsg$NL80211_CMD_GET_KEY(r13, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r14, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x8}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0xc040}, 0x8001) 1.510091114s ago: executing program 0 (id=1554): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x24, 0x2b, 0xb, 0x0, 0x0, {0x5}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x10004}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x8d, 0x0, 0x0, @binary}]}]}, 0x24}}, 0x8000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_int(r6, 0x1, 0x2e, 0x0, &(0x7f0000000500)=0x5c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) (async) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x4, 0xf534, 0xffffffff, 0x0, 0x8, 0x8d, 0x1}}, {0x6, 0x2, [0x7]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x2400c041}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000ff", @ANYRES16=r11, @ANYBLOB="31830000000000000000190000000c0001800800030001000000"], 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x0) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000ff", @ANYRES16=r11, @ANYBLOB="31830000000000000000190000000c0001800800030001000000"], 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x0) 1.331118298s ago: executing program 3 (id=1557): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1c17}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) 1.16621871s ago: executing program 0 (id=1560): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000280), &(0x7f0000000340), 0x12}, 0x20) sendmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4005) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000010240)={&(0x7f0000000180), 0xc, &(0x7f0000010200)={&(0x7f00000001c0)={0x10, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x453, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x9, 0x0, 0x0) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x100) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ppoll(&(0x7f0000000140)=[{r4, 0x11}, {r3, 0x4220}], 0x2, &(0x7f0000010280)={0x0, 0x3938700}, &(0x7f00000102c0), 0x8) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000004080), 0x4) 940.681362ms ago: executing program 2 (id=1563): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x28}}, 0x48080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x4e2a, @broadcast}, {0x0, @multicast}, 0x68, {0x2, 0xce23, @empty}, 'lo\x00'}) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e22, 0x4, @loopback}, 0x1c) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={r2, r3+60000000}) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_NH_ID={0x8, 0x1e, 0x3}, @RTA_MULTIPATH={0xc}]}, 0x30}}, 0x0) socket$igmp(0x2, 0x3, 0x2) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x88}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x80}}, 0xc0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xc03, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x14, 0x14, 0x0, 0x7f}, [@FRA_SRC={0x8}]}, 0x24}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001400010000000000000000000a000000", @ANYRES32, @ANYBLOB="14000100ff010000000000400000000000000001140006000000000065000000000000000000000008000b"], 0x48}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xf6}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x70}}, 0x4000) 842.691258ms ago: executing program 2 (id=1565): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffff7fc0, 0x50}], {0x95, 0x0, 0x74}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffff7fc0, 0x50}], {0x95, 0x0, 0x74}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x12, &(0x7f0000000400)={&(0x7f00000005c0)=@can_newroute={0x0, 0x18, 0x2, 0x70bd27, 0x25dfdbff, {0x1d, 0x1, 0x7}, [@CGW_MOD_AND={0x0, 0x1, {{{0x4, 0x0, 0x1}, 0x1, 0x3, 0x0, 0x0, "2d4d28b44e1792e1"}}}, @CGW_CS_CRC8={0x0, 0x6, {0x78, 0x41, 0xb, 0xb, 0x0, "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", 0x3, "b4da9512220b27ea8a1bca2e0c816cccb23e72c3"}}, @CGW_DST_IF={0x0, 0xa, r6}]}, 0x3c}}, 0x48000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000b, 0x200000005c831, 0xffffffffffffffff, 0x18ba3000) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000b, 0x200000005c831, 0xffffffffffffffff, 0x18ba3000) shutdown(r4, 0x2) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x40, r3, 0x1, 0x70bd2f, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x3}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x7ff}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x2}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x400}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400fd001000010000000000000000000000000a54000000caa3b9c3029b89a609040000000000000000020000000900010073797a30000000000900020073797a320000000028000480240001800b00010065787468647200001400028008000640000000010800054000000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400fd001000010000000000000000000000000a54000000caa3b9c3029b89a609040000000000000000020000000900010073797a30000000000900020073797a320000000028000480240001800b00010065787468647200001400028008000640000000010800054000000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) socket$inet(0x2b, 0x801, 0x0) (async) socket$inet(0x2b, 0x801, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) 823.811233ms ago: executing program 1 (id=1566): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'fo\x00', 0x30, 0x4, 0x66}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'fo\x00', 0x30, 0x4, 0x66}, 0x2c) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x3d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x0, 0xc24, 0x9, 0xfffffffb}}, 0x44) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="60903110408fb4cf46b090420300000004000000040000000a00000000000000bcacfe1ea815745313", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f00000001c0), &(0x7f0000000200)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1c, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x2}}, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x30}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, r5}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r6) (async) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r6) sendmsg$NLBL_MGMT_C_PROTOCOLS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="210326bd7000ffcbdf2507"], 0x1c}}, 0x880) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r6) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r6) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r8, 0x29, 0x5, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x30, r13, 0x1, 0x0, 0x80000003, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000240)="7d2371115107f171844664966c7b4091f4a0ea10dc11cde5ca83a343f041cbcc0e38bab9d8eca40f33212671f6ea152d8ab7477fd9c725a3553553f4010a0b57334934bf1d4f05dd307d859e38f3e3e9676a45a79b01", 0x56}], 0x1) (async) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000240)="7d2371115107f171844664966c7b4091f4a0ea10dc11cde5ca83a343f041cbcc0e38bab9d8eca40f33212671f6ea152d8ab7477fd9c725a3553553f4010a0b57334934bf1d4f05dd307d859e38f3e3e9676a45a79b01", 0x56}], 0x1) r14 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r14, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r14, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) 659.030659ms ago: executing program 1 (id=1567): socketpair(0x1, 0x20000000000001, 0xff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0xa) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="7b8ea772a858e8000000000000000000"], 0x2c}}, 0xc010) listen(r1, 0x7) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000340)=0x800001, 0x4) (async) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffc, @remote, 0xfffff3a1}, 0x1c) listen(r5, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @broadcast}, &(0x7f00000001c0)=0xc) (async) r6 = socket$inet6(0xa, 0x5, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x8, &(0x7f0000000500)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0xf}, 0x94) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) (async) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000305000000e100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000a0017000000"], 0x3c}}, 0x0) (async) getsockname$inet6(r6, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000300)=0x1c) mkdirat$cgroup(r7, &(0x7f0000000240)='syz1\x00', 0x1ff) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @local}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}}], 0x2c) 658.444035ms ago: executing program 2 (id=1568): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x10000, 0x77}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe7b}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x8a3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xc9a}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1160}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xae9}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x8000000) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r1, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x801}, 0x8001) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000300)={0x8, 'bridge_slave_1\x00', {'veth0_to_bridge\x00'}, 0x2e}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r1, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x51}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008004}, 0x44000) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000440)={'team0\x00', {0x2, 0x0, @dev}}) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x24008801) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r3) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r4, 0x0, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="aad72f6ef4"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1c00000}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001b00)={'erspan0\x00', &(0x7f0000001940)={'gre0\x00', 0x0, 0x40, 0x8000, 0x3ff, 0x400, {{0x5c, 0x4, 0x3, 0x5, 0x170, 0x67, 0x0, 0x9, 0x29, 0x0, @remote, @remote, {[@noop, @cipso={0x86, 0x19, 0x3, [{0x2, 0x9, "95b139f7663ade"}, {0x7, 0xa, "132f98d7816e68fa"}]}, @cipso={0x86, 0x75, 0x3, [{0x4, 0x10, "998a6a368af53bfa5f895b8b637a"}, {0x3, 0x4, "84c8"}, {0x6, 0x12, "ea3d56afef237a523fcaedb105fd3fde"}, {0x5, 0x8, "96bdb0862896"}, {0x5, 0xa, "38e40d74077d118c"}, {0x2, 0xe, "5fc62c65ba1618c9472e426a"}, {0x2, 0xf, "5bfd690fb356ce41f5a4e9f8f5"}, {0x6, 0xb, "db2b941c48b8d26291"}, {0x7, 0xf, "8c6623f95e26adfc7784f3a084"}]}, @lsrr={0x83, 0xf, 0xeb, [@multicast1, @rand_addr=0x64010102, @local]}, @ssrr={0x89, 0x1b, 0xe0, [@broadcast, @multicast1, @broadcast, @broadcast, @remote, @empty]}, @cipso={0x86, 0x38, 0x3, [{0x2, 0x2}, {0x1, 0x8, "ea69133c6405"}, {0x1, 0x2}, {0x1, 0xe, "aeee6078657e4e9b1c1b5322"}, {0x6, 0xa, "f4766d5275a50460"}, {0x5, 0xe, "0c401d6901d806ded9543708"}]}, @timestamp_prespec={0x44, 0x3c, 0x8f, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x1d}, 0xb}, {@remote, 0x2}, {@empty, 0x1}, {@private=0xa010100, 0x80000001}, {@private=0xa010100, 0x400}, {@remote, 0xd}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x6}]}, @noop, @rr={0x7, 0x2b, 0x8d, [@broadcast, @multicast2, @local, @multicast2, @multicast2, @local, @remote, @empty, @broadcast, @broadcast]}]}}}}}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001d00)={&(0x7f0000001b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbf, 0xbf, 0x8, [@float={0x8, 0x0, 0x0, 0x10, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x2}}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x47, 0x0, 0x7d, 0x5}, @struct={0x5, 0x3, 0x0, 0x4, 0x0, 0x3, [{0xf, 0x1, 0x9}, {0x2, 0x4, 0x3f70}, {0x7, 0x2, 0x3}]}, @func={0x3, 0x0, 0x0, 0xc, 0x4}, @datasec={0x2, 0x3, 0x0, 0xf, 0x3, [{0x4, 0x6, 0x2}, {0x1, 0x9, 0xe}, {0x1, 0x0, 0x7f87}], "022afe"}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x42, 0x0, 0x5d, 0x4}, @float={0x3, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x0, 0x0, 0x0, 0x30, 0x30, 0x0]}}, &(0x7f0000001c40)=""/189, 0xe0, 0xbd, 0x0, 0x1ffc00, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x18, 0x7, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x39a06322, 0x0, 0x0, 0x0, 0x2}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x8d9}]}, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000940)=""/4096, 0x41100, 0x63, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000001d40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001d80)={0x4, 0x4, 0x380000, 0x7ff}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000001dc0)=[{0x5, 0x4, 0x2, 0x4}, {0x5, 0x1, 0x9, 0x9}, {0x5, 0x5, 0x10, 0x7}, {0x5, 0x3, 0x0, 0xa}, {0x4, 0x2, 0x2, 0x3}, {0x2, 0x3, 0x1, 0x1}, {0x3, 0x3, 0x5, 0xc}, {0x4, 0x1, 0x9, 0x9}, {0x0, 0x3, 0x10, 0xf}, {0x0, 0x5, 0x0, 0x6}], 0x10, 0x800}, 0x94) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x1c, 0x1, 0x9, 0x401, 0x0, 0x0, {0xa}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x18}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0xc9ff3d0e87a886e2) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000002080), r3) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x30, r8, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20044041}, 0x50) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000002180)={0x2, [0x0, 0x0]}) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000021c0), &(0x7f0000002200)=0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000002240), r0) ioctl$F2FS_IOC_RESIZE_FS(r5, 0x4008f510, &(0x7f0000002280)=0x582) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f00000022c0)={@local, @mcast2, @mcast2, 0x2, 0x231e, 0x0, 0x500, 0x10000, 0x20000, r6}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000002380)={'veth1\x00', @random="c41e5361d225"}) 623.067746ms ago: executing program 1 (id=1569): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061119400000000000620000000000000950000d700000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd606410a600000400fc020000000000000000f8ffffff0000ff020000000000000000000000000001b589bbfc326e2af473dcec753bc37f4e9948401d1ccf21d28f626c79b5e4998a0c233f011b3ee80693587e3adbfdba6643"], 0x0) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000001080), &(0x7f00000010c0)=0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="12c3f3900a1487888800db27801ce461cd69c5aa0eebd0e719d338085784c0f9453d9127db7ef0041747", 0x2a}, {&(0x7f0000000300)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51", 0x17}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) connect$can_j1939(r0, &(0x7f0000000640)={0x1d, r1, 0xffffffffffffffff, {0x0, 0x1}}, 0x18) syz_emit_ethernet(0x56, &(0x7f00000000c0)={@broadcast, @local, @val={@val={0x88a8, 0x0, 0x1}, {0x8100, 0x7, 0x1, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x18, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c, 0x1, '\x00', [@padn, @jumbo={0xc2, 0x4, 0x3}]}], @echo_reply}}}}}, 0x0) 593.097178ms ago: executing program 2 (id=1570): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="0400848038002d800a0000"], 0x58}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4000) 466.912528ms ago: executing program 4 (id=1571): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000000, 0x0, 0x1, 0xa, 0x0, 0x2}, 0x20) socket$netlink(0x10, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c00000000010106000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x7c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0xac, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x20}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}, @TCA_RATE={0x6, 0x5, {0x2, 0xf3}}, @TCA_STAB={0x60, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0xb, 0x1, 0x0, 0x0, 0x217, 0x2ce, 0x2}}, {0x8, 0x2, [0x5478, 0xc5ee]}}, {{0x1c, 0x1, {0x80, 0x8, 0x67, 0x8, 0x2, 0x8, 0x5, 0xb}}, {0x1a, 0x2, [0x9, 0x8db, 0x7f8, 0x2, 0x7, 0x6, 0x700, 0xfff, 0x6, 0xa, 0x8000]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0xac}}, 0x800) 446.058518ms ago: executing program 2 (id=1572): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7ff}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x2}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0xfffffffc}]}}]}, 0x58}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xe1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r1, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7ff}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x2}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0xfffffffc}]}}]}, 0x58}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xe1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}}, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r1, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) (async) 439.310248ms ago: executing program 3 (id=1573): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x14, r1, 0xa17, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0xc194) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x16, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 299.049646ms ago: executing program 3 (id=1574): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x80}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="080000000000010076746900140002800800030002000000080004f9ac140400"], 0x40}, 0x1, 0x2000000000000000}, 0x0) r2 = accept4(r1, &(0x7f0000000200)=@ieee802154, &(0x7f0000000300)=0x80, 0x800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) 298.736801ms ago: executing program 1 (id=1575): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x800) 285.038324ms ago: executing program 4 (id=1576): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4e20, 0x8000, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x4007, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x84, 0x5, [{{@in=@multicast2, 0x4d6, 0x3c}, 0x2, @in6=@mcast2, 0x3505, 0x0, 0x2, 0x7, 0x5, 0x1, 0x80000001}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x4d2, 0x33}, 0x2, @in6=@mcast1, 0x3502, 0x4, 0x1, 0x7f, 0x6, 0x0, 0x55}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="fff50000140003000700000000000000000000000000000014000100ff"], 0x44}}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) 255.213268ms ago: executing program 0 (id=1577): r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 171.071837ms ago: executing program 1 (id=1578): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x5, 0x2, 0x1}, &(0x7f0000000100)=0x10) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="02042c08c9fb4802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r6, 0x5452, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@jmp={0x5, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffff4}]}, &(0x7f0000000200)='syzkaller\x00', 0x2e, 0xb5, &(0x7f00000004c0)=""/181, 0x41000, 0x18, '\x00', r7, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x17349, 0xffffffffffffffff, 0x8, &(0x7f0000000380)=[r6, r8], &(0x7f0000000580)=[{0x1, 0x5, 0xb, 0x5}, {0x2, 0x4, 0xd, 0xe}, {0x5, 0x1, 0x8}, {0x4, 0x4, 0xc, 0xb}, {0x5, 0x3, 0x4088, 0x3}, {0x0, 0x2, 0x5, 0x6}, {0x1, 0x3, 0xa, 0x6}, {0x0, 0xfffffffe, 0x1, 0x1}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000}, @exit, @exit, @call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 145.301498ms ago: executing program 4 (id=1579): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000cc0), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d00)={0x30, r5, 0x43ea4d35e0958cf7, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'veth0_macvtap\x00'}]}, 0x30}}, 0x0) setsockopt$inet_int(r2, 0x0, 0x1, &(0x7f0000000140)=0x7ffffbfd, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) listen(0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4, 0xf}]}, 0x68}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x7, &(0x7f0000000480)=ANY=[@ANYBLOB="180000d7b07d1b00000000000800000085b32000ffffffff184b0000f9ffffff0000080000000000057b0000100000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, r7}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r8, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}, {&(0x7f0000000400)="cab1169bc72a26ac53d9e68707945a25c91ae28bee0077351181d96b42f3a3427a245905e2b67decea085ab79c72907e58ea7494672855b12e874e737963a8cd06fba51c6afc4f06129cfa2f1081bf07b1aafdf0a4a605c6a95f4e03012294f5ea0dc43e49f9f90c81ba04d3f845ac31c2b1c8ffd1605defcd3a10beb344c9", 0x7f}, {&(0x7f0000000380)="0fe21642e4d76cd711d1a1956307ee68681b420eaf46e4a91577ec8cdd450a75653e48f121aefbbcb68c93235ffff6ab8268f859624e5f4573f92da3b86e7b6cf9fd46747e4327f757362c879dcf2a0a31b02502afb69d4454bc848da1b060edc1abd7af9c8a680c05ba6e", 0x6b}, {&(0x7f0000000240)="91ccdbb3c2e137ade029ebbbcb9e64c48af7d76163db3776fa88f02a18aeeabed76e8057012b025f058a90d377d0ee7d406bd612116b58887965d5da1532c93c9c5fe8eb8cc072fafc29d50cbc6622b5b31f0bf4dcdf993f73467de1569b6ecbad43d55bd2342d05f2a67173ea", 0x6d}], 0x4}, 0x800) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200), 0x4) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) 134.850353ms ago: executing program 2 (id=1580): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) close(0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)={0x11c, 0x2b, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x10a, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x8, 0xec, 0x0, 0x0, @pid}]}]}, 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000002c0)=@newtaction={0x16c, 0x30, 0x9, 0x0, 0x0, {}, [{0x158, 0x1, [@m_gact={0x128, 0x12, 0x0, 0x0, {{0x9}, {0xc4, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x4, 0x6, 0x6, 0x7f}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xc2f, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x10000, 0x9, 0x4, 0x7fffffff, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x54ad, 0x8, 0x5, 0x7f, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x804e, 0x4, 0x6, 0x2, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x4, 0x7, 0x1, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x8, 0x7, 0x3, 0x3ff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x581, 0x0, 0x6, 0x9, 0x2a}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x270a, 0x8}}]}, {0x3a, 0x6, "0acfff020b5ad755b6860ca40b264addaa8e1767242924de32e125802c2b252d4c5e0c5527ae5a311f8f035d2b835ad9b0788ca55ce4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}]}]}, 0x16c}}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x4, 0x2, 0xe, {0x77359400}, {r4, r5/1000+60000}, {0x2, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x0, 0x1}, 0x2, 0x0, 0x0, 0x0, "35310cd5d3681094"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x81) r6 = socket$kcm(0x29, 0x0, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x16, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='GPL\x00', 0x7fffffff, 0x2b, &(0x7f0000000480)=""/43, 0x41100, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xa, 0x401}, 0x10, 0xd855, 0xffffffffffffffff, 0x2, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000005c0)=[{0x4, 0x2, 0x9, 0x8}, {0x2, 0x5, 0x1, 0x6}], 0x10, 0x7}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f00000006c0)={r0, r7}) 134.19119ms ago: executing program 3 (id=1581): sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c000024b693d600", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fcdbdf253d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x8c}, 0x1, 0x0, 0x0, 0x84}, 0x8044) getpid() r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x9}]}, 0x30}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2830], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000006c0)="764b9e147583ddd0569ba56a5cfd", 0x0, 0x7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) sendto$unix(r7, &(0x7f0000000000)="96e1825a8935527e2e610c701cea2bb564c4f3345c6a44b804bc2842519c666846c34acc07959ab1775837fe47f7d71eb72ae94e20ca5d34dcc577b4bebc0efe60e6fcb7f0aa9cb21196ab6f65d5e43b36c44f8887a13103f665e9fd646b65e2f4a9ba21d5214c4a6c936bc78f2f59c7a1bf221a1171c6cd4881942dd7acb7803ad6a8f4b8841bc19b805d9ab9765bd220c0b6ac8b051815481268175ff7409d4b1bf71b36818e8bf3c1", 0xfffffffffffffd2e, 0x20044801, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r8) syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$can_bcm(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r4}, 0x10, &(0x7f0000000280)={&(0x7f0000000000)={0x1, 0x59b, 0x5, {}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3}}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r10 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r10, &(0x7f0000000000)={0x1d, r9}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xfff1, 0xfff3}, {0xb}}}, 0x1}}, 0x40844) 75.026794ms ago: executing program 0 (id=1582): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r3, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0xdc, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_NAT_SRC={0x48, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @CTA_SYNPROXY={0x44, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x12000000}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8001}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x101}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0xdc}}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' @\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000004"], 0x24}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$inet(r4, &(0x7f0000000380)="b9d130", 0x3, 0x24040005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r4, 0x1) socket(0x400000000010, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$unix(0x1, 0x1, 0x0) 0s ago: executing program 1 (id=1583): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)={0x274, r1, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x896}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0xc0, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x9}, @device_a, @device_a, @initial, {0x5, 0xff}, @value=@ver_80211n={0x0, 0x18, 0x2, 0x3}}, @tdls_teardown={0xc, 0x3, {0x37, {0x37, 0x86, {0x4, 0x2, "88c795154fbeebb021456d660207ab11", "f1460b39c8d6ce24f4f2bc8cf95d217ef95851f04e10f493675c96e33247faf2", "4347a3c27073cf919eb1ff9b2c1b5c0c37b5be13ff667f09b7f6cf4cb4dea58d", [{0x2, 0xb, "6c3784c10bea75496e6b81"}, {0x1, 0x25, "946cfadda9064ad2d1a06436c66fa9b4321860ff25217a80e65c1f2f4feae530e2420bf506"}]}}, {0x65, 0x12, {@random="06cf2c649d36", @device_a, @broadcast}}}}}}, @NL80211_ATTR_FRAME={0x187, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_b, @initial, {0x3}}, 0x5000, 0x26, @random=0xffff, @void, @val={0x2d, 0x1a, {0x20, 0x3, 0x3, 0x0, {0x5, 0x40, 0x0, 0x4, 0x0, 0x1, 0x1, 0x2}, 0x800, 0xfff, 0x40}}, [{0xdd, 0x9f, "b842f05e469c499c7fc30889bbeeba9d7018b86bbe6ef6f39473517bdcad63ccd48a979415bd8389eebd4e2ba8f2fe74fbcea97bf594ed3b3f6340cf71cabf7e4dd33916dc972206537fede492801db90cd2d86e7d31188fa8391dbdef6aaf09d7e065230ce7c850fc44cd38da71029f4da361d2dc757e67d94c1607632084636f3041546662dde9d3e734d590078c6b4bcb14dcc7de0c26aa7e8b7d147b61"}, {0xdd, 0xa6, "7413480bb324ab365d9c930163dcdc4790a57a2711ba9c918253237619c656be4d83995d04e67a3fc5a6f48b2d648d38bd3c9251f3beca09ef420a7e70669c314fa732c94e435e37082346548415202335193762a3d6ae9368cb9f1bbb01dbc7d9f8e2dbb3366a0160adb9513fce4575e0e15014dd8d5508bba4b3cfaa75f1bfd4910f1bd2fe580f3229e04dcfec9469a0e753016da4ce5c24503253033ee6f9c0ef862f5dc4"}]}}]}, 0x274}, 0x1, 0x0, 0x0, 0x1}, 0x400c884) r3 = socket$netlink(0x10, 0x3, 0xc) syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), r3) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0xeb, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0x10}]}, {0x0, [0x61, 0x0, 0x61]}}, &(0x7f0000000900)=""/174, 0x29, 0xae, 0x1, 0x4}, 0x28) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b00)={0x1, 0xffffffffffffffff}, 0x4) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b40)={0x0, 0x2, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xd, 0x30, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x74}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8bf2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x14}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @printk={@ld}, @ldst={0x3, 0x0, 0x4, 0x0, 0x4, 0x100, 0x4}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @jmp={0x5, 0x1, 0x3, 0x1, 0xa, 0x4, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4800}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000800)='syzkaller\x00', 0x9, 0x78, &(0x7f0000000840)=""/120, 0x0, 0x50, '\x00', 0x0, @sock_ops=0x3, r6, 0x8, &(0x7f0000000a00)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0x3, 0x80000000, 0xb83}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000000b80)=[r7, r8, r9, 0xffffffffffffffff], &(0x7f0000000bc0)=[{0x0, 0x2, 0x2, 0xa}, {0x0, 0x5, 0xb, 0x6}, {0x3, 0x2, 0x1, 0x8}, {0x2, 0x5, 0x4, 0x5}, {0x2, 0x3, 0x0, 0x9}, {0x4, 0x1, 0x9, 0x2}, {0x3, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x54, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xb36, 0x20}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x2}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xc}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x400}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xfb}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000e40)=0xc) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000e80)={'wg0\x00'}) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000ec0)=0xffffffffffffffff, 0x4) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000f00)={r10}, 0x8) r12 = accept$inet(r11, &(0x7f0000000f40)={0x2, 0x0, @remote}, &(0x7f0000000f80)=0x10) recvmsg(r12, &(0x7f0000001140)={&(0x7f0000000fc0)=@x25, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001040)=""/54, 0x36}, {&(0x7f0000001080)=""/31, 0x1f}], 0x2, &(0x7f0000001100)=""/37, 0x25}, 0x40018020) pselect6(0x40, &(0x7f0000001180)={0x71, 0xff, 0x1, 0x0, 0x80000001, 0x2, 0x4, 0x8}, &(0x7f00000011c0)={0x1, 0x83, 0x101, 0x2, 0x400, 0x4, 0xffffffffbd1b7915, 0x7fffffff}, &(0x7f0000001200)={0x1, 0x3, 0x74fd, 0x6, 0x0, 0x8f, 0x5, 0xffffffffffffffff}, &(0x7f0000001240)={0x0, 0x989680}, &(0x7f00000012c0)={&(0x7f0000001280)={[0xd]}, 0x8}) sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000002cc0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002c80)={&(0x7f0000001340)={0x1940, r1, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x3f}, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x1924, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x4a4, 0x4, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x7e, 0x2, "de2cf14368eaeb9385d7f784c0f216c7e51a88bb87c8aef077e0a4066fa54cec8c6a0a73c09c58567301708db69b5c6bf0fdf584c5fa588fd71ee932d7f6f99ad1e8daf8e0f5151b9dc8d241b1dbed1388d47e195ea411bf79b90724e5dc98920cd2b53d388f2825fa4bd3980ad8747895fb6add048533bfd033"}]}, {0x154, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_MASK={0xce, 0x1, "8bba164c025649fd3b727237551469f710bdfbb37ad93b5ee12c826ce46686592f092844eac44fc05e1ec61ce875f2879e52fbdc05ba59985e3f5c3d614c36409e1cd2727e3907dc813b13a4c578b6bb6654ffedee54c114dfca34ffdc7a0ac857f0af9654e657bb7d67062982fd7023974de8db1a7746b77b92dca65b187c9d3f8914191c256c5331c196d3f5b91c3cd8195e5deafa4e9557ecb36f5c74dd34d42e8077ba555d11d171958b47818ad2e19688c0771fa78c158d0d1b0d74e714f0c358cbc6e3c95d343b"}, @NL80211_PKTPAT_PATTERN={0x70, 0x2, "dbce05737a2c1b47049ab208a4a2fb82416ef49ead94384760ee3d3d8dc33ed39009a80d7faddc1cb4c7e2b3a339be5237c3f65b758b5581ea167985716619b75f7d9042a7ca2fb5c8619ee465a471e95b378d633272f7612ef441e2f35d3e859a81de9b115db5a421802a84"}]}, {0x2c8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x5e, 0x2, "603f924473e7a31ceac125a20589cd75a3bc2c35f26b1ec1d33e1a2fb4a1b408d71a91c5d5b53aaacf7097147e1e628fdfb0a79de107b7486d86d4a01362ef1e376d3fa9b3fb0a4cae22842086ebbd41e980f785b35f6a0be04a"}, @NL80211_PKTPAT_PATTERN={0xe2, 0x2, "dff93c053fb146120ed849ffdf64839baffbd358cba907f5d49e17f529da6a2bf5ca06f4baff5e765fd3a8759b505087d6df241a55f474e23eb05c52afaa79e9d268339104bd7c653e54d8b56f642b642f94b250eb33c152be96636727914056a3d6b685afbdab832fd36ed58cc99c2767429573eaf79ecf0b2a76d83798678da7c748d43453219d34990f558360fb3d4b6cdac3efacc0f7e271446ab599345589d755f613d515582b2a293736b0268578911c30b1ca8c01e6767b3cee07e01673df2e9f6c488088b8e3fc15e32f7bf066b9461431ba1cc003fe7abf5969"}, @NL80211_PKTPAT_MASK={0x71, 0x1, "bac97daad00cd8cf7d181d48b695ac9ce61548408c4d3e57920424c51e6abc0a2979d721c7479ed095ddac8df2bec471051c2b51db66c9f996344bdb562c62da814ea678196bebffd04451b0e2705ce29a1617da139f5dbd8eb776bddb07a1baed4bae911f17cabbb099a5c87f"}, @NL80211_PKTPAT_PATTERN={0x36, 0x2, "5a9a1382582d2aba8875010548dc32b44c24a02deb279eb1e7e2b963c4a0bd3293981f97c6a153ad65849b7d012c466da03b"}, @NL80211_PKTPAT_PATTERN={0xc9, 0x2, "82d4ac61fbddd9f51d1f750804f330f53384ab5a17007c6fffcb737bec77344611713e9e37a9b70fd3aa63ee2092ac3b7b0663a795b52331a6b945f40c7e96d20fcc3b41cd83d2edf172141b8a7815a2735194ae88f624175a459e80595b6bc6985772bef9f181832375feb1c4c3c1727e8848da20848a313201b2ef43e0607ac8814aa0af76483aab60e17753724ae584a7848499263fc6fac2727a4717f8c32a8cfeca44e1389614feed0cff62c062881e221a10dea562c6fc98bfe3a84cf95f3ed28c55"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x70000000}]}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x1304, 0x4, 0x0, 0x1, [{0x10f0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x1004, 0x1, "eb3c9657c692caa7b2e9ad1dc3fe33916640953216f1db8345a9b6d3f6a029ac519839a827c69b97ea083d66b95a3e3471f82b78691f9424c736fc454ac2cf2e962edaa27eb88beae727c34ef5553a3fa719387ae92fd3a3be9cd6918d53f23cd02f1e2ba4e62479d615107620a56f218b82699eea7453eddf2b579d34b71cfacc890935f290c0506fac68d2cf07d9ae4d9f35e775ea46eb0fa4788bea108b18a97deede4bc076eda8b0e90cf8f6d1f38f5df75a83ed3a4c3dee99b5544300caf93c32d4b0f9aa14695b6c840e5ee36721d7bc89178009181ecbbe002626e5ef133aef52e8cd1218cafaddb6cef17a1dd77ac25596c0096b43862d36b0c4984fa6fcdda995088c1c97e623da1f985c40f5d73b679b1843ad170fcc4834dbd94631c3fd24ea8cafb68ae664a41ea53148c31b53ea42cc8e1bc23fef3ec7ebb5d947f35058a323a80a26cd7fd978ff0ff4cfc31a02412f9f6ea34beb640b27e9d25e3fdfdace9695583e3c9e03d8faf42e23caac6add6968f8263810ee4f16c28f9794865dcfe0a8d7993a43581aa4b6e76d4775806a38a2318e0ee31289dfda84123bbfc894b1664d4eb63a2eae1cb6455e9d8a6d751ecf4329ea7d6ddee5e84307aae7707025608be1eb778fda6b9e45697a958e3f7791018628555e0591825865d29c7f4a89fe9261f9ec428a5859e7a1037ed0b2629594626aaa53fe089cdaff4fcd34a07c44b1f0c720547577be5bc12044f4a15933181b622b0513b6ad5b2e01d69e28fea162cf321faaed96a1d6dff1a7a670e4eced89173b7dfc75350c3984d46766bb5150d7f2d387863a2be8bd5b550e09698e2c547f9f70bda088fa30651be1940cd652585169af633eb94f13f471f6cba91ada02f50f94a301a645c65c73d33079015301639fc9498e4b3387c20cef7c6305700e95808d1bead34c1648eaf439f6228959515cd867c41f829d4bb6a8f7685424e92548c782a15887757dc82f539997a6583a609e124e0674c67149d2e5c3133fb73989ac47f6666acf72b0871e00c701aeeffa2565df40d0f79bba116991750d37da85d6521670036590e2ca9029503e454c77a24ad0fb2b37f7a95021dac9819f897d74987542b897f4f5f5ee4c6e9c7487e63a64f61ece33ea8aed1e3217bf2e8d3346d1d386b410ce438f7383fcb7e866cd0a6f76920c87fbda6b27702695d60528844b1f89d1e59a04eb1695862513775abe0919e07dd16ccdb6f9d7b9ee61249a9d8a3c85ea1311185c837a60a4c166992e3ad5496a611a47b59fbf94c392f1a266b5fe679326d81aaf13256e2b3d8d6ff88d2adfa210314a2b23d865c6d545b5670050967ec17d25843f8cc19360872820c176d07b5121e8a699bb92bddf6929afb4d4dd9d084ccf18b28d9bac7afa91a450fdded3b145f31bc0c031550f910184054063520cb7634ec2cfdec3c3710834f3095ccfa0effd57e8606d7a28c2b95587321403d61f6719768166aa6d161957df36bbab322d82346c804ef5c4cae5eccce64f83a0cf6ad5771cc478b91acfbe9e2bbb28b88f9ef6f209175f2192bacc130c51925c54307ae86b21175cf65a9efb0a7a4bf2298fa64449aea1873e7d6d75b6740f7fa80af5b59a3a882181ce88342b1264dbbab789416f68e9bcfde495a36fe283ee3681ad70f10f6cb5667828a1e0e724ee7ce62318a151c2abdcfd2c98162410082b12de37fa2abd183ef418a5b9a0a9723373f12d5967c388701ccc2168bc97d8c5f4191f9a0f94217e33723d0008655f143c4b7cb7fda942fa88ac8f244af41c9b392c11e24a8ba76b6a694824c2009ec2605ab716f4c8e90c398ad64b90d14d691e50f18007c5b58861cca48ea6da741ff24ddd89c11de3f7c2604d46a08a1de2b5a1343381fce4bfef4bcc0db6471f5ae1d367ec2afc523ef122d40f2e20b89a5a2f2043485cac9835049c0e38898905a55154b1edc0a0da6af2143dc21240e71f7df3b3e622286e79e1649384a7f90a962927cc59681554c7a05bbae023321f492a0c3e2650508907530c367c697fc8a1a81d9786e671deeac4482bb2ccbff267fcb99ec7643a069b06457994f67cd5e20bb6f1e98ce1b2db7e552ba4b4ba8a90f66c8dfe2829219e57a16bd31db11f7a94d8b35ea285c4e4e871a5932f3d7ac44f71eae33b36b1f215d66ec65a2566c75c0576a91fd05dd26bbadea2837dc3479fe778a95550112cfb01a6c7e2f2350fb70c843ee62ede3816a1812bae264338a4da78353b17759c135e2b1a52cf10fe75626689908ee643f58b2f60c2fe82a9a3a346b0ee6d5a72e42c30dfcf10b6f243908dbd701f66eebd36b0120ea8f11f1bd3bb5c5bd7b9314a28cfe9f53fc21c8bfd41a9aaec0e5b45c8b317247763e00d46eb441282e51265cb16e399b3d1163c34249e48e30a561a5f5dc8d8beaf428a143fafe2ddcb7ce6cfc277a5f64e98ac4667404fa3b77410bdba88139e87ca97a5f0790a0db03a0faa678f806e7213d166d477ba260db741c784efc15333cdeb85e8201308fded86c958ca81ab239eddf1c2ac8e1834dd8b2cfb7ecf853745ff573034c15dc57578245b8814b6f1b475f94e3c32c56dde4e63bd3d9fa7e74f2f521b18606461507616aae68bc3628fb45cd82177369f212b38a82036ee083c0f58adf230fcf9508b194d30fe855edc60ba980e99faa7e5482fbc012c382e06e3c4985372f98133934bdd8a862e9a3efda495d83f529a1a7f90c95a06d8f56451be7e3e8d6adc5928527efa367f583747fa70e896517308e774f9379c330d01377f7c804ae1180ff32997e652de6301973c01004fbd47be902492d5b78d15cb8c5f2d8969be1c99d8a44162821d35b1f263ff598f5ed45096ca8b8bc29fb89d200f8d24c7442e61c37844ed6f8af5dbeb830bce91f2f2c235b17c2489731220577cb926e694b33b2304c0f1fba46743fbf041bc15743944cba3c90f439f47e82102f877655363c47fba36dbeebf227b28e3b0bd9d24494ac11ba9d9240687b2009f3f13582928b5f899ff02459cb665418602cdc38dcf640b6abcd1aec1ccfec4d964ed5fab27a2e6eef79ff46248e61267027e81513197d414778cb1ca673f1975d9d1efb4eeae78abaa1c2917d66bc7b8480fcc74add1e457b241f8b829fcdb8eaa5f55f1c358341753c84752255192c43deda0b1d0d546a43ba58f44fd7ed552985cd709ee92e6600d87157aa9a0c9cd08d876781a61618bbb66d9e5fe42f7dea812db74713a1badad243e93b6f4d144add607d29b49c020401cab1fcc80f02a32eeab5d6ed991f828211ad70cbe67bfbc08c99e08c4f8dd8dd490826fffe8ec6a4bc9c6af48ef3332497eb6b2184ff57ab39d730ba58b03a9f82f228c0e011003c4c69b11cf131ae52a8548a464a3c24bce2b8c06b4e1f317ce887de1b6bd71bbc32b8803478966f3d188a07641f7121596b2cc897506a42c9747dbb177392e8063e3e3a2a8ad7efb034f14591b9cf19751078fd619e620cbe10b3254e6c474aa780bc6c539eb3288b0c757958ab6739c4459fdd60c88f1198001765909152a17afe621e46321232fc2d42a83fb236a2ad8ae72236e23b0ba13600adefb5f480b964252d142b4e086f1e6311d453d68c63f634f7d58ae15e44a584c95ed744ec5f8b720e18e72570793fb0e2064bcf12a81abf31bfffd24cde0ae30a3981e944825c7e537e16839400ff2c5346163e745f9aa9d1745127abef5e93653d228dc1a41f8cbd4ce1dcff1198224fe78910cdf95b6b95e46818f3e6e9e9869fbe05ce93263dfc72ab9a2e51373f0c0dda7fe2ed13764cdceeb52763770cf889744ef8a7bea169009303d7f1b566a57d95ae9ec1d872c2d64c357582009d7c659badc05f07b3044ceb3e523117dc198956dc6416d06da2ad0a3a7033672935559631b60fcf0809fbdfb7f900ee2495d6c7117a9990018b9b87898afe08c3b699d70fd3c1a8d9d219c19cecce32b3776a5b3a758d80bef24b69a66227fa90f2ef8d4e8c71c3127a7b17002de2b9d7d9d28b2b13b65a987f62732aefd96d8f98df6b7554d028b9a86025f0aabe25a58d06d66276dbf9de147996c23a019f5f0082b400cfa216e1bd732f3c09ffc889f2b2517d6b22214931495ef5eec9c384fa5eea2c3fb8bf22592ef3faab15946aa57d0ba9d65b2d06ba4bf0846767696e2efa9c91149f797e7acbc011e9bf4ed22e7d78dbfa327eff5bb1c0dd935ae3de37858ea5eaeb2b999fc417ea882dd68ad3c691c06ab317c82e426c2cbb3ab8f5e785507288a6cf60a22b33797788bd6e8d54c6c78b212c879f6a6612716d8e994c1969af17a8c7ca3c06737749bfff4e557068e084e43aa63b707bce5afd8167f1d3a1a5d20639ed02910e92217e9d63e99e46b702c2019083430a38983dfa2f687b252c96122878eeb174b6171d2c05cf4b060e22efc74af08aab31a1e0ced395430b572bdaf126f24fb79f315864b12364593064b5d70eb748648d70af7491e8d9f74dcce6a43f52287edf6f2e8ab59b462dfcd45a77e0e258f130c8a608aea43756503c32c98084d0cf94856683cca4452910e0af495ae2cbf37c013842a40f510b4a8019bf3c4c4d8ecfef3b8d33b5b0965c9f3646b17e07dd0bc172075d1a91dc605390e1044ac9ec8a8de279b503b1f5335f9c2d0c3d80e06adcee85a5f801a3cf6f49c28598326e4e1426d42416d1c7f870f02b9aa0784be8f94a4d7bb3f12e294f8ca74ee326aede0f72d99ae158a005bcb263ec9a1ccb7ec59897d2b98fd00cc6c1ca1b9c52faf34986529ff62f9cafc63613b404763b0fb42fd0d2af965ad9dfcbb9a954b227880fd494363df07d80d4bc99f3626be629b72be96790a0a2e5b227c85189de4892603a775e7463f51af4178f2391d5536ea8dcae1394f6bb72dcfd14105118599bfefe5b95a57a99cd2c3610edfa1b93099614c5845f5855e8b2f79106ce11f7fd7bd9c2456660ce667ca152f0859b336d99b2b087829fecd6154e68afe071f2782165dcacca264bb2bb8097ab403b4e53e1e740a8bf905309d2d90a97d80da2da2a1bb0b42370ed9df1de392e475900019908050ba99587a2d3ac89bb5eb852c406cfc5214245c198dc5754c5914f435a18b868c12031db38bc8c230617dd8633078307252770476b2de3596985f2757c60c82f9eb95fdea4588df04fca77ed74cfb37e36530886efce1a61e519d0807285814c8619ef965f871e999c8460fe1798448fd2f5e767b5a7b3c84b948406e0c06a59dfd999909b2d2c906dd5169b7a8bd4d27d6eab04de62a44804aafc49fb8ccdc1e0d8b0d1c5a82d5d033da1bad451fad5e8f8b898baae9a06484f329f78ace06bbb1f6dae8b5d20d0b518f46aa29c14784bcdb09cc1308d3f4af8d1a2cb2e2a0480e4208687e575012c7c1fdfc3ba65b3e4fdd8a143b91c23fd53db79b4027ccfc0152ecb6da7b11a756bc628ff3d264bbacc4ff216d92a6df7b33bc424360e2cefb32eb62529cd6b9f8f7dd9d14c827d7c8315753ac4d9985096f83853219d38ff36db4fb6a4f078e1abe43099a334fc367071584fa48418a0c80660e6cf1d3f22377131c66c6559551bc8ae8ff55f2c3deec9e55311fb0b33b95fefb3a030173952d5e42e8771df54ae9f87406722fa500f664956c140d094e410265f9a5cb78203b974d49a1c4dacb6c28449d010f40fe15631b6724210cf6f13db61f04b5276999b9e4ae276eb902687d50fb3144ed02f1478a2a2dc44729a6c63137f3a381"}, @NL80211_PKTPAT_MASK={0xe8, 0x1, "4ad8063427da1b979bfb9fb7dfdb2bdf6630b481f2965e87ffa034d43c1643b4a12f20f5bc8f58dd4b23620e385481f0aa19010af33b2b1edbdde4ab926076541da4e69b5a3e59a12bae705fed161b5c168bbdaddc1bbc88d2b2d0cd62f4803cf61706e49d2527ed2515c7024694194de1eb04abbf5d991a84095dbf8243bfc3e4f67591ada67a6844e7178091a1e2dc12aeaa46f22b7486e204c6fb9f2a1ef350113013f92f746a7654eb9aa311211d0eb5557240be81886c1a3afee1aa1e4c190ab1cc194f60308930a8a9a9942ef0c01677d474519db1ca71def87a5c8c51beea5206"}]}, {0x128, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x18, 0x1, "60eaab280142d78a56a1cf42879bfaf95cf434a2"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_MASK={0xfc, 0x1, "b5a987add4395d00b0990bcf2e38b60ce68f2cbe60e7ffe41926234aed475e5e98fd193df6ed268ffbfba947b41cfd73a397b8ed77a5694949cc3101c70c21f9e939f179c76b6e6c6edd4cbaa918c217c721905be19e85437ccc54be7fde4cf3ea2768b3b8210f2af538a8663ab230fed531ce5ce1f0d565a25f2a32d3f0075d373f1a02e2e33db8950ba687e306f49b5daa361e4e4b77b7795981b3992b4947fa69c1a0960e6029ab2874997bdaf1d04cd4224f82dbf35fd6258a17da85403323ada8bcc6105b838611d202bd74a78f74a85d7d4eab7b3d04f97f51020eba3ddb9713e522fd8b7ee0f611f9b7ddfc8646d038ec31660d6a"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8}]}, {0xdc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x74, 0x2, "e1b638b4beeac83b5d7f0da78b48864e3c6c335029e5a20e0e6d9d1c8fa09ae878a24c9bee60c7211bead624a26f79ec10a0f476bf4b24138ab3224f0159dce2a4bdf589f1d054f34bd49c225e3f5108a0c2b8fbf6cd71255327729cc2114dd7bb98174d35a1073a11ba43f6439ca166"}, @NL80211_PKTPAT_MASK={0x64, 0x1, "bd5844f20989fa84702d92320ca89f0718fd3f534352b883a39f8ec74e2e779812cf886dce7f3e1fd9c0196f5dc16c0834af5c4214b0d333f715f575daa994a492419ed7564cb637be55ee841b3a2d395da8ec6d323157c52e31fa89943ba4fc"}]}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x160, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x37, 0xa, "356851b8386669a180ce1a964fb22675af4ffde958879eeaa6e55e97ffafdb3c32057602ad22ab2717ac3947558c1b6960ad5e"}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x2389}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @device_b}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x6}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x106, 0x8, {0x3, 0x8, "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"}}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}]}, 0x1940}, 0x1, 0x0, 0x0, 0x85}, 0x20000846) write$tun(r11, &(0x7f0000002d00)={@void, @val={0x2, 0x3, 0x4, 0x2, 0xfffc, 0x7}, @x25={0x1, 0x1, 0x9, "efb7bbf8bf"}}, 0x12) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r8, 0x660c) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000002e00)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d80)={0x2c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x2000890) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000002f00)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x20, r1, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x4044000) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r10, 0xf50f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002f40)={{{@in6=@dev, @in6=@initdev}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000003040)=0xe8) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000003080)=0x6) kernel console output (not intermixed with test programs): etlink: zone id is out of range [ 102.903329][ T6268] netlink: zone id is out of range [ 102.922827][ T6268] netlink: zone id is out of range [ 102.934650][ T6274] netlink: 28 bytes leftover after parsing attributes in process `syz.0.84'. [ 103.076270][ T6276] netlink: 40 bytes leftover after parsing attributes in process `syz.3.85'. [ 103.527466][ T6298] netlink: 'syz.0.90': attribute type 11 has an invalid length. [ 103.726310][ T6300] netlink: 44 bytes leftover after parsing attributes in process `syz.3.91'. [ 104.394860][ T6315] warning: `syz.3.97' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.487805][ T6319] netlink: 'syz.1.99': attribute type 1 has an invalid length. [ 104.535021][ T6319] netlink: 36 bytes leftover after parsing attributes in process `syz.1.99'. [ 104.857096][ T6326] netlink: 284 bytes leftover after parsing attributes in process `syz.4.101'. [ 104.886994][ T6323] netlink: 80 bytes leftover after parsing attributes in process `syz.3.100'. [ 105.334480][ T6339] tipc: Started in network mode [ 105.342449][ T6339] tipc: Node identity , cluster identity 4711 [ 105.348648][ T6339] tipc: Failed to obtain node identity [ 105.373023][ T6339] tipc: Enabling of bearer rejected, failed to enable media [ 105.750585][ T49] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.790808][ T6362] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 105.803709][ T49] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.853032][ T6362] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 105.864484][ T49] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.912585][ T6362] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 105.916639][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.961165][ T6372] Bluetooth: MGMT ver 1.23 [ 106.823730][ T6405] __nla_validate_parse: 8 callbacks suppressed [ 106.823751][ T6405] netlink: 19 bytes leftover after parsing attributes in process `syz.3.125'. [ 106.944244][ T6409] netlink: 104 bytes leftover after parsing attributes in process `syz.4.127'. [ 107.111530][ T6427] netlink: 'syz.1.128': attribute type 6 has an invalid length. [ 107.174104][ T6409] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.182798][ T6409] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.306838][ T6409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.327360][ T6409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.563586][ T6415] geneve2: entered promiscuous mode [ 107.568851][ T6415] geneve2: entered allmulticast mode [ 107.590094][ T6421] tipc: Started in network mode [ 107.595274][ T6421] tipc: Node identity 3ecefba7ddce, cluster identity 4711 [ 107.603294][ T6421] tipc: Enabled bearer , priority 0 [ 107.625846][ T6438] netlink: 80 bytes leftover after parsing attributes in process `syz.0.133'. [ 107.653577][ T6421] tipc: Disabling bearer [ 107.735892][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.745438][ T12] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 107.756145][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.767440][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 107.768449][ T6442] net_ratelimit: 14 callbacks suppressed [ 107.768464][ T6442] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 107.810697][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.851141][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 107.882885][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.918446][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 108.390994][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.143'. [ 108.411958][ T64] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 108.415829][ T6468] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 108.425588][ T64] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 108.428419][ T6468] IPv6: NLM_F_CREATE should be set when creating new route [ 108.444774][ T6468] IPv6: NLM_F_CREATE should be set when creating new route [ 108.452156][ T6468] IPv6: NLM_F_CREATE should be set when creating new route [ 108.467577][ T6466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.143'. [ 108.491260][ T64] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 108.508846][ T6470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.143'. [ 108.524603][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.144'. [ 108.528971][ T64] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 108.641016][ T6464] bridge_slave_1: left allmulticast mode [ 108.668547][ T6464] bridge_slave_1: left promiscuous mode [ 108.707797][ T6464] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.767045][ T6464] bridge_slave_0: left allmulticast mode [ 108.812838][ T6464] bridge_slave_0: left promiscuous mode [ 108.828532][ T6464] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.915110][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.144'. [ 108.934675][ T6481] netlink: 'syz.1.146': attribute type 1 has an invalid length. [ 108.951279][ T6481] netlink: 'syz.1.146': attribute type 1 has an invalid length. [ 109.303713][ T6506] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 109.380815][ T6506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.154'. [ 109.390542][ T6512] netlink: 'syz.3.156': attribute type 1 has an invalid length. [ 109.415072][ T6514] netlink: 60 bytes leftover after parsing attributes in process `syz.1.157'. [ 109.430723][ T6512] netlink: 'syz.3.156': attribute type 1 has an invalid length. [ 109.512308][ T6521] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 109.771133][ T6533] veth0: entered promiscuous mode [ 109.890435][ T6531] veth0: left promiscuous mode [ 110.115633][ T6549] syz.1.168 uses obsolete (PF_INET,SOCK_PACKET) [ 110.182615][ T6547] bond2: entered allmulticast mode [ 110.188547][ T6547] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.196755][ T6547] bridge0: port 3(bond2) entered blocking state [ 110.205538][ T6547] bridge0: port 3(bond2) entered disabled state [ 110.217309][ T6547] bond2: entered promiscuous mode [ 110.225000][ T6547] bridge0: port 3(bond2) entered blocking state [ 110.231778][ T6547] bridge0: port 3(bond2) entered forwarding state [ 110.242196][ T6551] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 110.251559][ T6550] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 110.306282][ T13] bridge0: port 3(bond2) entered disabled state [ 110.365455][ T6549] smc: net device erspan0 applied user defined pnetid SYZ0 [ 110.423932][ T6565] netlink: 'syz.3.170': attribute type 7 has an invalid length. [ 110.815326][ T6583] delete_channel: no stack [ 111.419318][ T5184] Bluetooth: hci4: command 0x0405 tx timeout [ 111.560343][ T6615] tipc: Enabling of bearer rejected, failed to enable media [ 111.617214][ T6618] FAULT_INJECTION: forcing a failure. [ 111.617214][ T6618] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 111.687987][ T6618] CPU: 0 UID: 0 PID: 6618 Comm: syz.4.186 Not tainted syzkaller #0 PREEMPT(full) [ 111.688014][ T6618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 111.688025][ T6618] Call Trace: [ 111.688032][ T6618] [ 111.688040][ T6618] dump_stack_lvl+0x189/0x250 [ 111.688068][ T6618] ? __pfx____ratelimit+0x10/0x10 [ 111.688094][ T6618] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.688116][ T6618] ? __pfx__printk+0x10/0x10 [ 111.688140][ T6618] ? __might_fault+0xb0/0x130 [ 111.688176][ T6618] should_fail_ex+0x414/0x560 [ 111.688204][ T6618] _copy_from_user+0x2d/0xb0 [ 111.688226][ T6618] ___sys_sendmsg+0x158/0x2a0 [ 111.688249][ T6618] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.688306][ T6618] ? __fget_files+0x2a/0x420 [ 111.688322][ T6618] ? __fget_files+0x3a0/0x420 [ 111.688349][ T6618] __x64_sys_sendmsg+0x19b/0x260 [ 111.688373][ T6618] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 111.688405][ T6618] ? __pfx_ksys_write+0x10/0x10 [ 111.688426][ T6618] ? rcu_is_watching+0x15/0xb0 [ 111.688461][ T6618] ? do_syscall_64+0xbe/0x3b0 [ 111.688483][ T6618] do_syscall_64+0xfa/0x3b0 [ 111.688499][ T6618] ? lockdep_hardirqs_on+0x9c/0x150 [ 111.688525][ T6618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.688543][ T6618] ? clear_bhb_loop+0x60/0xb0 [ 111.688565][ T6618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.688583][ T6618] RIP: 0033:0x7f02ad38ebe9 [ 111.688600][ T6618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.688615][ T6618] RSP: 002b:00007f02ae2ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.688636][ T6618] RAX: ffffffffffffffda RBX: 00007f02ad5c5fa0 RCX: 00007f02ad38ebe9 [ 111.688650][ T6618] RDX: 0000000004050884 RSI: 0000200000002080 RDI: 0000000000000005 [ 111.688662][ T6618] RBP: 00007f02ae2ae090 R08: 0000000000000000 R09: 0000000000000000 [ 111.688673][ T6618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.688684][ T6618] R13: 00007f02ad5c6038 R14: 00007f02ad5c5fa0 R15: 00007ffc63630528 [ 111.688717][ T6618] [ 112.034107][ T6635] __nla_validate_parse: 5 callbacks suppressed [ 112.034129][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.191'. [ 112.066838][ T6635] netlink: 'syz.4.191': attribute type 1 has an invalid length. [ 112.078554][ T6635] netlink: 'syz.4.191': attribute type 2 has an invalid length. [ 112.100188][ T6635] netlink: 3 bytes leftover after parsing attributes in process `syz.4.191'. [ 112.334298][ T6648] netlink: 44 bytes leftover after parsing attributes in process `syz.0.194'. [ 112.440041][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.195'. [ 112.551765][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'. [ 112.797891][ T6670] FAULT_INJECTION: forcing a failure. [ 112.797891][ T6670] name failslab, interval 1, probability 0, space 0, times 1 [ 112.811671][ T6670] CPU: 0 UID: 0 PID: 6670 Comm: syz.3.201 Not tainted syzkaller #0 PREEMPT(full) [ 112.811696][ T6670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 112.811707][ T6670] Call Trace: [ 112.811715][ T6670] [ 112.811723][ T6670] dump_stack_lvl+0x189/0x250 [ 112.811751][ T6670] ? __pfx____ratelimit+0x10/0x10 [ 112.811780][ T6670] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.811802][ T6670] ? __pfx__printk+0x10/0x10 [ 112.811835][ T6670] ? __pfx___might_resched+0x10/0x10 [ 112.811859][ T6670] should_fail_ex+0x414/0x560 [ 112.811890][ T6670] should_failslab+0xa8/0x100 [ 112.811920][ T6670] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 112.811945][ T6670] ? __alloc_skb+0x112/0x2d0 [ 112.811968][ T6670] __alloc_skb+0x112/0x2d0 [ 112.811991][ T6670] netlink_sendmsg+0x5c6/0xb30 [ 112.812021][ T6670] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.812042][ T6670] ? aa_sock_msg_perm+0xf1/0x1d0 [ 112.812063][ T6670] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 112.812083][ T6670] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.812102][ T6670] __sock_sendmsg+0x21c/0x270 [ 112.812141][ T6670] ____sys_sendmsg+0x505/0x830 [ 112.812169][ T6670] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.812199][ T6670] ? import_iovec+0x74/0xa0 [ 112.812225][ T6670] ___sys_sendmsg+0x21f/0x2a0 [ 112.812249][ T6670] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.812310][ T6670] ? __fget_files+0x2a/0x420 [ 112.812326][ T6670] ? __fget_files+0x3a0/0x420 [ 112.812354][ T6670] __x64_sys_sendmsg+0x19b/0x260 [ 112.812378][ T6670] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 112.812409][ T6670] ? __pfx_ksys_write+0x10/0x10 [ 112.812431][ T6670] ? rcu_is_watching+0x15/0xb0 [ 112.812456][ T6670] ? do_syscall_64+0xbe/0x3b0 [ 112.812479][ T6670] do_syscall_64+0xfa/0x3b0 [ 112.812495][ T6670] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.812520][ T6670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.812538][ T6670] ? clear_bhb_loop+0x60/0xb0 [ 112.812561][ T6670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.812579][ T6670] RIP: 0033:0x7fc3c9f8ebe9 [ 112.812596][ T6670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.812610][ T6670] RSP: 002b:00007fc3c81ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.812628][ T6670] RAX: ffffffffffffffda RBX: 00007fc3ca1c5fa0 RCX: 00007fc3c9f8ebe9 [ 112.812642][ T6670] RDX: 0000000004050884 RSI: 0000200000002080 RDI: 0000000000000005 [ 112.812653][ T6670] RBP: 00007fc3c81ee090 R08: 0000000000000000 R09: 0000000000000000 [ 112.812664][ T6670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.812675][ T6670] R13: 00007fc3ca1c6038 R14: 00007fc3ca1c5fa0 R15: 00007ffea3ff52a8 [ 112.812705][ T6670] [ 113.113205][ T6657] netlink: 388 bytes leftover after parsing attributes in process `syz.1.197'. [ 113.589607][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'. [ 113.598452][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'. [ 113.667052][ T6693] netlink: 'syz.4.208': attribute type 1 has an invalid length. [ 113.677964][ T6694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.208'. [ 113.748203][ T6689] tipc: Started in network mode [ 113.753346][ T6689] tipc: Node identity 6aa5271dc19a, cluster identity 4711 [ 113.766677][ T6689] tipc: Enabled bearer , priority 0 [ 113.824095][ T6689] syzkaller0: entered promiscuous mode [ 113.848624][ T6689] syzkaller0: entered allmulticast mode [ 113.981140][ T6689] tipc: Resetting bearer [ 114.166590][ T6688] tipc: Resetting bearer [ 114.192936][ T6688] tipc: Disabling bearer [ 114.269715][ T6722] netlink: 'syz.2.219': attribute type 1 has an invalid length. [ 114.640501][ T6745] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 114.724032][ T6762] FAULT_INJECTION: forcing a failure. [ 114.724032][ T6762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.749836][ T6762] CPU: 0 UID: 0 PID: 6762 Comm: syz.4.228 Not tainted syzkaller #0 PREEMPT(full) [ 114.749863][ T6762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 114.749874][ T6762] Call Trace: [ 114.749881][ T6762] [ 114.749889][ T6762] dump_stack_lvl+0x189/0x250 [ 114.749917][ T6762] ? __pfx____ratelimit+0x10/0x10 [ 114.749947][ T6762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.749969][ T6762] ? __pfx__printk+0x10/0x10 [ 114.749994][ T6762] ? __might_fault+0xb0/0x130 [ 114.750033][ T6762] should_fail_ex+0x414/0x560 [ 114.750079][ T6762] _copy_from_iter+0x1de/0x1790 [ 114.750107][ T6762] ? rcu_is_watching+0x15/0xb0 [ 114.750128][ T6762] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 114.750155][ T6762] ? __pfx__copy_from_iter+0x10/0x10 [ 114.750177][ T6762] ? __build_skb_around+0x257/0x3e0 [ 114.750198][ T6762] ? netlink_sendmsg+0x642/0xb30 [ 114.750213][ T6762] ? skb_put+0x11b/0x210 [ 114.750235][ T6762] netlink_sendmsg+0x6b2/0xb30 [ 114.750264][ T6762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.750286][ T6762] ? aa_sock_msg_perm+0xf1/0x1d0 [ 114.750307][ T6762] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 114.750327][ T6762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.750346][ T6762] __sock_sendmsg+0x21c/0x270 [ 114.750388][ T6762] ____sys_sendmsg+0x505/0x830 [ 114.750416][ T6762] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.750448][ T6762] ? import_iovec+0x74/0xa0 [ 114.750474][ T6762] ___sys_sendmsg+0x21f/0x2a0 [ 114.750498][ T6762] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.750560][ T6762] ? __fget_files+0x2a/0x420 [ 114.750576][ T6762] ? __fget_files+0x3a0/0x420 [ 114.750605][ T6762] __x64_sys_sendmsg+0x19b/0x260 [ 114.750630][ T6762] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 114.750662][ T6762] ? __pfx_ksys_write+0x10/0x10 [ 114.750684][ T6762] ? rcu_is_watching+0x15/0xb0 [ 114.750708][ T6762] ? do_syscall_64+0xbe/0x3b0 [ 114.750731][ T6762] do_syscall_64+0xfa/0x3b0 [ 114.750746][ T6762] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.750773][ T6762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.750791][ T6762] ? clear_bhb_loop+0x60/0xb0 [ 114.750814][ T6762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.750832][ T6762] RIP: 0033:0x7f02ad38ebe9 [ 114.750850][ T6762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.750864][ T6762] RSP: 002b:00007f02ae2ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.750885][ T6762] RAX: ffffffffffffffda RBX: 00007f02ad5c5fa0 RCX: 00007f02ad38ebe9 [ 114.750899][ T6762] RDX: 0000000004050884 RSI: 0000200000002080 RDI: 0000000000000005 [ 114.750911][ T6762] RBP: 00007f02ae2ae090 R08: 0000000000000000 R09: 0000000000000000 [ 114.750922][ T6762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.750933][ T6762] R13: 00007f02ad5c6038 R14: 00007f02ad5c5fa0 R15: 00007ffc63630528 [ 114.750965][ T6762] [ 115.220766][ T6766] syzkaller0: entered promiscuous mode [ 115.250704][ T6766] syzkaller0: entered allmulticast mode [ 115.500854][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 115.797398][ T6793] tipc: Enabled bearer , priority 0 [ 115.811491][ T6793] syzkaller0: entered promiscuous mode [ 115.843173][ T6793] syzkaller0: entered allmulticast mode [ 115.972776][ T6799] Illegal XDP return value 1189195744 on prog (id 50) dev N/A, expect packet loss! [ 116.016630][ T6795] tipc: Resetting bearer [ 116.047270][ T6792] tipc: Resetting bearer [ 116.135528][ T6808] FAULT_INJECTION: forcing a failure. [ 116.135528][ T6808] name failslab, interval 1, probability 0, space 0, times 0 [ 116.228477][ T6792] tipc: Disabling bearer [ 116.259969][ T6808] CPU: 1 UID: 0 PID: 6808 Comm: syz.4.242 Not tainted syzkaller #0 PREEMPT(full) [ 116.259996][ T6808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.260007][ T6808] Call Trace: [ 116.260015][ T6808] [ 116.260023][ T6808] dump_stack_lvl+0x189/0x250 [ 116.260050][ T6808] ? __pfx____ratelimit+0x10/0x10 [ 116.260077][ T6808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.260098][ T6808] ? __pfx__printk+0x10/0x10 [ 116.260126][ T6808] ? __pfx___might_resched+0x10/0x10 [ 116.260143][ T6808] ? fs_reclaim_acquire+0x7d/0x100 [ 116.260177][ T6808] should_fail_ex+0x414/0x560 [ 116.260205][ T6808] should_failslab+0xa8/0x100 [ 116.260232][ T6808] __kmalloc_noprof+0xcb/0x4f0 [ 116.260253][ T6808] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 116.260279][ T6808] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 116.260306][ T6808] genl_family_rcv_msg_doit+0xb8/0x300 [ 116.260334][ T6808] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 116.260373][ T6808] ? apparmor_capable+0x137/0x1b0 [ 116.260396][ T6808] ? bpf_lsm_capable+0x9/0x20 [ 116.260417][ T6808] ? security_capable+0x7e/0x2e0 [ 116.260451][ T6808] genl_rcv_msg+0x60e/0x790 [ 116.260478][ T6808] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.260496][ T6808] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 116.260517][ T6808] ? __pfx_nl802154_del_llsec_devkey+0x10/0x10 [ 116.260534][ T6808] ? __pfx_nl802154_post_doit+0x10/0x10 [ 116.260572][ T6808] netlink_rcv_skb+0x205/0x470 [ 116.260594][ T6808] ? __lock_acquire+0xab9/0xd20 [ 116.260619][ T6808] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.260641][ T6808] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.260689][ T6808] ? down_read+0x1ad/0x2e0 [ 116.260710][ T6808] genl_rcv+0x28/0x40 [ 116.260728][ T6808] netlink_unicast+0x82c/0x9e0 [ 116.260761][ T6808] ? __pfx_netlink_unicast+0x10/0x10 [ 116.260786][ T6808] ? netlink_sendmsg+0x642/0xb30 [ 116.260801][ T6808] ? skb_put+0x11b/0x210 [ 116.260824][ T6808] netlink_sendmsg+0x805/0xb30 [ 116.260851][ T6808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.260873][ T6808] ? aa_sock_msg_perm+0xf1/0x1d0 [ 116.260893][ T6808] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 116.260911][ T6808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.260929][ T6808] __sock_sendmsg+0x21c/0x270 [ 116.260956][ T6808] ____sys_sendmsg+0x505/0x830 [ 116.260982][ T6808] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.261013][ T6808] ? import_iovec+0x74/0xa0 [ 116.261038][ T6808] ___sys_sendmsg+0x21f/0x2a0 [ 116.261060][ T6808] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.261124][ T6808] ? __fget_files+0x2a/0x420 [ 116.261140][ T6808] ? __fget_files+0x3a0/0x420 [ 116.261170][ T6808] __x64_sys_sendmsg+0x19b/0x260 [ 116.261194][ T6808] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 116.261228][ T6808] ? __pfx_ksys_write+0x10/0x10 [ 116.261250][ T6808] ? rcu_is_watching+0x15/0xb0 [ 116.261276][ T6808] ? do_syscall_64+0xbe/0x3b0 [ 116.261300][ T6808] do_syscall_64+0xfa/0x3b0 [ 116.261316][ T6808] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.261352][ T6808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.261371][ T6808] ? clear_bhb_loop+0x60/0xb0 [ 116.261395][ T6808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.261412][ T6808] RIP: 0033:0x7f02ad38ebe9 [ 116.261430][ T6808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.261444][ T6808] RSP: 002b:00007f02ae2ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.261465][ T6808] RAX: ffffffffffffffda RBX: 00007f02ad5c5fa0 RCX: 00007f02ad38ebe9 [ 116.261478][ T6808] RDX: 0000000004050884 RSI: 0000200000002080 RDI: 0000000000000005 [ 116.261491][ T6808] RBP: 00007f02ae2ae090 R08: 0000000000000000 R09: 0000000000000000 [ 116.261502][ T6808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.261513][ T6808] R13: 00007f02ad5c6038 R14: 00007f02ad5c5fa0 R15: 00007ffc63630528 [ 116.261547][ T6808] [ 116.745515][ T6813] FAULT_INJECTION: forcing a failure. [ 116.745515][ T6813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.797591][ T6813] CPU: 1 UID: 0 PID: 6813 Comm: syz.1.244 Not tainted syzkaller #0 PREEMPT(full) [ 116.797618][ T6813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.797628][ T6813] Call Trace: [ 116.797636][ T6813] [ 116.797644][ T6813] dump_stack_lvl+0x189/0x250 [ 116.797671][ T6813] ? __pfx____ratelimit+0x10/0x10 [ 116.797698][ T6813] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.797720][ T6813] ? __pfx__printk+0x10/0x10 [ 116.797745][ T6813] ? __might_fault+0xb0/0x130 [ 116.797782][ T6813] should_fail_ex+0x414/0x560 [ 116.797813][ T6813] _copy_from_user+0x2d/0xb0 [ 116.797837][ T6813] ___sys_sendmsg+0x158/0x2a0 [ 116.797861][ T6813] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.797921][ T6813] ? __fget_files+0x2a/0x420 [ 116.797937][ T6813] ? __fget_files+0x3a0/0x420 [ 116.797965][ T6813] __x64_sys_sendmsg+0x19b/0x260 [ 116.797989][ T6813] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 116.798019][ T6813] ? __pfx_ksys_write+0x10/0x10 [ 116.798063][ T6813] ? rcu_is_watching+0x15/0xb0 [ 116.798087][ T6813] ? do_syscall_64+0xbe/0x3b0 [ 116.798109][ T6813] do_syscall_64+0xfa/0x3b0 [ 116.798125][ T6813] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.798150][ T6813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.798167][ T6813] ? clear_bhb_loop+0x60/0xb0 [ 116.798190][ T6813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.798206][ T6813] RIP: 0033:0x7f1a16d8ebe9 [ 116.798223][ T6813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.798237][ T6813] RSP: 002b:00007f1a17bcb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.798257][ T6813] RAX: ffffffffffffffda RBX: 00007f1a16fc5fa0 RCX: 00007f1a16d8ebe9 [ 116.798271][ T6813] RDX: 0000000004050884 RSI: 0000200000002080 RDI: 0000000000000005 [ 116.798283][ T6813] RBP: 00007f1a17bcb090 R08: 0000000000000000 R09: 0000000000000000 [ 116.798294][ T6813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.798305][ T6813] R13: 00007f1a16fc6038 R14: 00007f1a16fc5fa0 R15: 00007ffcdb552a28 [ 116.798341][ T6813] [ 117.255568][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'. [ 117.265940][ T6827] netlink: 16 bytes leftover after parsing attributes in process `syz.1.249'. [ 117.481717][ T6836] netlink: 248 bytes leftover after parsing attributes in process `syz.1.253'. [ 117.587942][ T6841] FAULT_INJECTION: forcing a failure. [ 117.587942][ T6841] name failslab, interval 1, probability 0, space 0, times 0 [ 117.647982][ T6841] CPU: 0 UID: 0 PID: 6841 Comm: syz.0.255 Not tainted syzkaller #0 PREEMPT(full) [ 117.648010][ T6841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.648021][ T6841] Call Trace: [ 117.648029][ T6841] [ 117.648037][ T6841] dump_stack_lvl+0x189/0x250 [ 117.648063][ T6841] ? __pfx____ratelimit+0x10/0x10 [ 117.648090][ T6841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.648113][ T6841] ? __pfx__printk+0x10/0x10 [ 117.648145][ T6841] ? __pfx___might_resched+0x10/0x10 [ 117.648161][ T6841] ? fs_reclaim_acquire+0x7d/0x100 [ 117.648195][ T6841] should_fail_ex+0x414/0x560 [ 117.648225][ T6841] should_failslab+0xa8/0x100 [ 117.648252][ T6841] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 117.648275][ T6841] ? __alloc_skb+0x112/0x2d0 [ 117.648307][ T6841] __alloc_skb+0x112/0x2d0 [ 117.648331][ T6841] netlink_ack+0x146/0xa50 [ 117.648354][ T6841] ? __pfx_genl_rcv_msg+0x10/0x10 [ 117.648373][ T6841] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 117.648396][ T6841] ? __pfx_nl802154_post_doit+0x10/0x10 [ 117.648439][ T6841] netlink_rcv_skb+0x28c/0x470 [ 117.648464][ T6841] ? __lock_acquire+0xab9/0xd20 [ 117.648491][ T6841] ? __pfx_genl_rcv_msg+0x10/0x10 [ 117.648516][ T6841] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 117.648565][ T6841] ? down_read+0x1ad/0x2e0 [ 117.648586][ T6841] genl_rcv+0x28/0x40 [ 117.648605][ T6841] netlink_unicast+0x82c/0x9e0 [ 117.648641][ T6841] ? __pfx_netlink_unicast+0x10/0x10 [ 117.648669][ T6841] ? netlink_sendmsg+0x642/0xb30 [ 117.648685][ T6841] ? skb_put+0x11b/0x210 [ 117.648708][ T6841] netlink_sendmsg+0x805/0xb30 [ 117.648735][ T6841] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.648756][ T6841] ? aa_sock_msg_perm+0xf1/0x1d0 [ 117.648777][ T6841] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 117.648797][ T6841] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.648815][ T6841] __sock_sendmsg+0x21c/0x270 [ 117.648844][ T6841] ____sys_sendmsg+0x505/0x830 [ 117.648872][ T6841] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.648904][ T6841] ? import_iovec+0x74/0xa0 [ 117.648930][ T6841] ___sys_sendmsg+0x21f/0x2a0 [ 117.648954][ T6841] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.649017][ T6841] ? __fget_files+0x2a/0x420 [ 117.649035][ T6841] ? __fget_files+0x3a0/0x420 [ 117.649067][ T6841] __x64_sys_sendmsg+0x19b/0x260 [ 117.649089][ T6841] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 117.649120][ T6841] ? __pfx_ksys_write+0x10/0x10 [ 117.649142][ T6841] ? rcu_is_watching+0x15/0xb0 [ 117.649165][ T6841] ? do_syscall_64+0xbe/0x3b0 [ 117.649189][ T6841] do_syscall_64+0xfa/0x3b0 [ 117.649204][ T6841] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.649230][ T6841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.649248][ T6841] ? clear_bhb_loop+0x60/0xb0 [ 117.649271][ T6841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.649288][ T6841] RIP: 0033:0x7effe2f8ebe9 [ 117.649315][ T6841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.649329][ T6841] RSP: 002b:00007effe3e7a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.649349][ T6841] RAX: ffffffffffffffda RBX: 00007effe31c5fa0 RCX: 00007effe2f8ebe9 [ 117.649363][ T6841] RDX: 0000000004050884 RSI: 0000200000002080 RDI: 0000000000000005 [ 117.649374][ T6841] RBP: 00007effe3e7a090 R08: 0000000000000000 R09: 0000000000000000 [ 117.649384][ T6841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.649395][ T6841] R13: 00007effe31c6038 R14: 00007effe31c5fa0 R15: 00007ffc3fe9bf68 [ 117.649426][ T6841] [ 118.202131][ T6839] netlink: 36 bytes leftover after parsing attributes in process `syz.3.254'. [ 118.232972][ T6847] veth0: renamed from ipvlan1 [ 118.286865][ T6860] FAULT_INJECTION: forcing a failure. [ 118.286865][ T6860] name failslab, interval 1, probability 0, space 0, times 0 [ 118.299848][ T6860] CPU: 0 UID: 0 PID: 6860 Comm: syz.0.259 Not tainted syzkaller #0 PREEMPT(full) [ 118.299872][ T6860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 118.299883][ T6860] Call Trace: [ 118.299891][ T6860] [ 118.299899][ T6860] dump_stack_lvl+0x189/0x250 [ 118.299927][ T6860] ? __pfx____ratelimit+0x10/0x10 [ 118.299954][ T6860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.299973][ T6860] ? __pfx__printk+0x10/0x10 [ 118.300004][ T6860] ? __pfx___might_resched+0x10/0x10 [ 118.300029][ T6860] should_fail_ex+0x414/0x560 [ 118.300060][ T6860] should_failslab+0xa8/0x100 [ 118.300089][ T6860] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 118.300148][ T6860] ? __alloc_skb+0x112/0x2d0 [ 118.300171][ T6860] __alloc_skb+0x112/0x2d0 [ 118.300194][ T6860] netlink_sendmsg+0x5c6/0xb30 [ 118.300223][ T6860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.300244][ T6860] ? aa_sock_msg_perm+0xf1/0x1d0 [ 118.300263][ T6860] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 118.300284][ T6860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.300303][ T6860] __sock_sendmsg+0x21c/0x270 [ 118.300332][ T6860] ____sys_sendmsg+0x505/0x830 [ 118.300358][ T6860] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.300388][ T6860] ? import_iovec+0x74/0xa0 [ 118.300415][ T6860] ___sys_sendmsg+0x21f/0x2a0 [ 118.300438][ T6860] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.300500][ T6860] ? __fget_files+0x2a/0x420 [ 118.300515][ T6860] ? __fget_files+0x3a0/0x420 [ 118.300542][ T6860] __x64_sys_sendmsg+0x19b/0x260 [ 118.300566][ T6860] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 118.300598][ T6860] ? __pfx_ksys_write+0x10/0x10 [ 118.300619][ T6860] ? rcu_is_watching+0x15/0xb0 [ 118.300641][ T6860] ? do_syscall_64+0xbe/0x3b0 [ 118.300662][ T6860] do_syscall_64+0xfa/0x3b0 [ 118.300678][ T6860] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.300703][ T6860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.300721][ T6860] ? clear_bhb_loop+0x60/0xb0 [ 118.300743][ T6860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.300759][ T6860] RIP: 0033:0x7effe2f8ebe9 [ 118.300776][ T6860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.300791][ T6860] RSP: 002b:00007effe3e7a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.300813][ T6860] RAX: ffffffffffffffda RBX: 00007effe31c5fa0 RCX: 00007effe2f8ebe9 [ 118.300826][ T6860] RDX: 0000000004050884 RSI: 0000200000002080 RDI: 0000000000000005 [ 118.300837][ T6860] RBP: 00007effe3e7a090 R08: 0000000000000000 R09: 0000000000000000 [ 118.300848][ T6860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.300859][ T6860] R13: 00007effe31c6038 R14: 00007effe31c5fa0 R15: 00007ffc3fe9bf68 [ 118.300890][ T6860] [ 118.583161][ T6870] tipc: Started in network mode [ 118.644174][ T6870] tipc: Node identity 36d9e1fc02d8, cluster identity 4711 [ 118.705862][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.263'. [ 118.719608][ T6870] tipc: Enabled bearer , priority 0 [ 118.742440][ T6873] syzkaller0: entered promiscuous mode [ 118.747969][ T6873] syzkaller0: entered allmulticast mode [ 118.909403][ T6873] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 118.967061][ T6876] netlink: 24 bytes leftover after parsing attributes in process `syz.0.262'. [ 119.030530][ T6870] tipc: Resetting bearer [ 119.065086][ T6869] tipc: Resetting bearer [ 119.136269][ T6869] tipc: Disabling bearer [ 119.191537][ T6894] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.267'. [ 119.236461][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.267'. [ 119.873743][ T6923] netlink: 'syz.4.274': attribute type 10 has an invalid length. [ 119.903344][ T6923] netlink: 40 bytes leftover after parsing attributes in process `syz.4.274'. [ 119.987057][ T6923] team0: Port device geneve0 added [ 120.023919][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.082114][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.116331][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.161754][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.209309][ T6932] netlink: 32 bytes leftover after parsing attributes in process `syz.0.278'. [ 120.536370][ T6943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.985551][ T6968] FAULT_INJECTION: forcing a failure. [ 120.985551][ T6968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.043512][ T6968] CPU: 0 UID: 0 PID: 6968 Comm: syz.1.285 Not tainted syzkaller #0 PREEMPT(full) [ 121.043541][ T6968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 121.043550][ T6968] Call Trace: [ 121.043558][ T6968] [ 121.043565][ T6968] dump_stack_lvl+0x189/0x250 [ 121.043594][ T6968] ? __pfx____ratelimit+0x10/0x10 [ 121.043623][ T6968] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.043644][ T6968] ? __pfx__printk+0x10/0x10 [ 121.043669][ T6968] ? __might_fault+0xb0/0x130 [ 121.043706][ T6968] should_fail_ex+0x414/0x560 [ 121.043735][ T6968] _copy_from_iter+0x1de/0x1790 [ 121.043764][ T6968] ? rcu_is_watching+0x15/0xb0 [ 121.043784][ T6968] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 121.043810][ T6968] ? __pfx__copy_from_iter+0x10/0x10 [ 121.043831][ T6968] ? __build_skb_around+0x257/0x3e0 [ 121.043854][ T6968] ? netlink_sendmsg+0x642/0xb30 [ 121.043870][ T6968] ? skb_put+0x11b/0x210 [ 121.043892][ T6968] netlink_sendmsg+0x6b2/0xb30 [ 121.043922][ T6968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.043944][ T6968] ? aa_sock_msg_perm+0xf1/0x1d0 [ 121.043965][ T6968] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 121.043985][ T6968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.044004][ T6968] __sock_sendmsg+0x21c/0x270 [ 121.044043][ T6968] ____sys_sendmsg+0x505/0x830 [ 121.044071][ T6968] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.044102][ T6968] ? import_iovec+0x74/0xa0 [ 121.044129][ T6968] ___sys_sendmsg+0x21f/0x2a0 [ 121.044152][ T6968] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.044215][ T6968] ? __fget_files+0x2a/0x420 [ 121.044231][ T6968] ? __fget_files+0x3a0/0x420 [ 121.044259][ T6968] __x64_sys_sendmsg+0x19b/0x260 [ 121.044283][ T6968] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 121.044314][ T6968] ? __pfx_ksys_write+0x10/0x10 [ 121.044337][ T6968] ? rcu_is_watching+0x15/0xb0 [ 121.044361][ T6968] ? do_syscall_64+0xbe/0x3b0 [ 121.044384][ T6968] do_syscall_64+0xfa/0x3b0 [ 121.044400][ T6968] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.044427][ T6968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.044445][ T6968] ? clear_bhb_loop+0x60/0xb0 [ 121.044468][ T6968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.044486][ T6968] RIP: 0033:0x7f1a16d8ebe9 [ 121.044504][ T6968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.044519][ T6968] RSP: 002b:00007f1a17bcb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.044540][ T6968] RAX: ffffffffffffffda RBX: 00007f1a16fc5fa0 RCX: 00007f1a16d8ebe9 [ 121.044553][ T6968] RDX: 0000000004050884 RSI: 0000200000002080 RDI: 0000000000000005 [ 121.044565][ T6968] RBP: 00007f1a17bcb090 R08: 0000000000000000 R09: 0000000000000000 [ 121.044576][ T6968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.044587][ T6968] R13: 00007f1a16fc6038 R14: 00007f1a16fc5fa0 R15: 00007ffcdb552a28 [ 121.044619][ T6968] [ 121.496027][ T6987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.251596][ T5938] hid (null): unknown global tag 0xe0 [ 122.278252][ T5938] hid (null): report_id 3522079371 is invalid [ 122.293788][ T5938] hid-generic 0005:0004:000F.0001: unexpected long global item [ 122.301964][ T7013] __nla_validate_parse: 1 callbacks suppressed [ 122.301981][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.294'. [ 122.309825][ T5938] hid-generic 0005:0004:000F.0001: probe with driver hid-generic failed with error -22 [ 122.415521][ T7021] netlink: 256 bytes leftover after parsing attributes in process `syz.1.297'. [ 122.602422][ T7027] netlink: 'syz.3.299': attribute type 1 has an invalid length. [ 122.617387][ T7027] netlink: 136 bytes leftover after parsing attributes in process `syz.3.299'. [ 122.647980][ T7027] netlink: 'syz.3.299': attribute type 2 has an invalid length. [ 122.666891][ T7027] netlink: 'syz.3.299': attribute type 1 has an invalid length. [ 122.880831][ T7040] FAULT_INJECTION: forcing a failure. [ 122.880831][ T7040] name failslab, interval 1, probability 0, space 0, times 0 [ 122.919984][ T7038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.303'. [ 122.935376][ T7040] CPU: 0 UID: 0 PID: 7040 Comm: syz.4.301 Not tainted syzkaller #0 PREEMPT(full) [ 122.935404][ T7040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 122.935415][ T7040] Call Trace: [ 122.935423][ T7040] [ 122.935431][ T7040] dump_stack_lvl+0x189/0x250 [ 122.935459][ T7040] ? __pfx____ratelimit+0x10/0x10 [ 122.935487][ T7040] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.935510][ T7040] ? __pfx__printk+0x10/0x10 [ 122.935539][ T7040] ? __pfx___might_resched+0x10/0x10 [ 122.935557][ T7040] ? fs_reclaim_acquire+0x7d/0x100 [ 122.935591][ T7040] should_fail_ex+0x414/0x560 [ 122.935622][ T7040] should_failslab+0xa8/0x100 [ 122.935651][ T7040] __kmalloc_noprof+0xcb/0x4f0 [ 122.935675][ T7040] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 122.935705][ T7040] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 122.935737][ T7040] genl_family_rcv_msg_doit+0xb8/0x300 [ 122.935767][ T7040] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 122.935800][ T7040] ? apparmor_capable+0x137/0x1b0 [ 122.935825][ T7040] ? bpf_lsm_capable+0x9/0x20 [ 122.935847][ T7040] ? security_capable+0x7e/0x2e0 [ 122.935887][ T7040] genl_rcv_msg+0x60e/0x790 [ 122.935916][ T7040] ? __pfx_genl_rcv_msg+0x10/0x10 [ 122.935937][ T7040] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 122.935960][ T7040] ? __pfx_nl802154_del_llsec_devkey+0x10/0x10 [ 122.935977][ T7040] ? __pfx_nl802154_post_doit+0x10/0x10 [ 122.936017][ T7040] netlink_rcv_skb+0x205/0x470 [ 122.936041][ T7040] ? __lock_acquire+0xab9/0xd20 [ 122.936068][ T7040] ? __pfx_genl_rcv_msg+0x10/0x10 [ 122.936092][ T7040] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 122.936140][ T7040] ? down_read+0x1ad/0x2e0 [ 122.936164][ T7040] genl_rcv+0x28/0x40 [ 122.936184][ T7040] netlink_unicast+0x82c/0x9e0 [ 122.936220][ T7040] ? __pfx_netlink_unicast+0x10/0x10 [ 122.936246][ T7040] ? netlink_sendmsg+0x642/0xb30 [ 122.936261][ T7040] ? skb_put+0x11b/0x210 [ 122.936285][ T7040] netlink_sendmsg+0x805/0xb30 [ 122.936323][ T7040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.936345][ T7040] ? aa_sock_msg_perm+0xf1/0x1d0 [ 122.936365][ T7040] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 122.936385][ T7040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.936405][ T7040] __sock_sendmsg+0x21c/0x270 [ 122.936434][ T7040] ____sys_sendmsg+0x505/0x830 [ 122.936464][ T7040] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.936497][ T7040] ? import_iovec+0x74/0xa0 [ 122.936525][ T7040] ___sys_sendmsg+0x21f/0x2a0 [ 122.936549][ T7040] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.936615][ T7040] ? __fget_files+0x2a/0x420 [ 122.936631][ T7040] ? __fget_files+0x3a0/0x420 [ 122.936661][ T7040] __x64_sys_sendmsg+0x19b/0x260 [ 122.936686][ T7040] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 122.936719][ T7040] ? __pfx_ksys_write+0x10/0x10 [ 122.936741][ T7040] ? rcu_is_watching+0x15/0xb0 [ 122.936766][ T7040] ? do_syscall_64+0xbe/0x3b0 [ 122.936789][ T7040] do_syscall_64+0xfa/0x3b0 [ 122.936804][ T7040] ? lockdep_hardirqs_on+0x9c/0x150 [ 122.936831][ T7040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.936850][ T7040] ? clear_bhb_loop+0x60/0xb0 [ 122.936873][ T7040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.936891][ T7040] RIP: 0033:0x7f02ad38ebe9 [ 122.936909][ T7040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.936924][ T7040] RSP: 002b:00007f02ae2ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.936944][ T7040] RAX: ffffffffffffffda RBX: 00007f02ad5c5fa0 RCX: 00007f02ad38ebe9 [ 122.936958][ T7040] RDX: 0000000004050884 RSI: 0000200000002080 RDI: 0000000000000005 [ 122.936970][ T7040] RBP: 00007f02ae2ae090 R08: 0000000000000000 R09: 0000000000000000 [ 122.936981][ T7040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.936991][ T7040] R13: 00007f02ad5c6038 R14: 00007f02ad5c5fa0 R15: 00007ffc63630528 [ 122.937025][ T7040] [ 122.975259][ T7042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.304'. [ 123.173321][ T7047] netlink: 'syz.4.305': attribute type 1 has an invalid length. [ 123.213315][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.304'. [ 123.287038][ T7047] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 123.447425][ T7059] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 123.582155][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.307'. [ 124.192739][ T7094] netlink: 16 bytes leftover after parsing attributes in process `syz.3.315'. [ 124.237678][ T7094] netlink: 16 bytes leftover after parsing attributes in process `syz.3.315'. [ 125.867920][ T7156] tipc: Enabling of bearer rejected, failed to enable media [ 125.903032][ T5184] Bluetooth: hci4: command 0x0405 tx timeout [ 126.061268][ T7168] netem: unknown loss type 0 [ 126.095345][ T7168] netem: change failed [ 126.524440][ T7184] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 126.754164][ T7198] netlink: 'syz.0.344': attribute type 1 has an invalid length. [ 126.957376][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.349'. [ 127.578006][ T7239] netlink: 'syz.2.358': attribute type 1 has an invalid length. [ 127.924831][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.360'. [ 128.006775][ T7252] trusted_key: syz.1.362 sent an empty control message without MSG_MORE. [ 128.017081][ T7252] netlink: 80 bytes leftover after parsing attributes in process `syz.1.362'. [ 128.026088][ T7252] netlink: 80 bytes leftover after parsing attributes in process `syz.1.362'. [ 128.452561][ T7271] Bluetooth: MGMT ver 1.23 [ 128.585008][ T7273] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.368'. [ 128.790476][ T7276] bond1 (unregistering): Released all slaves [ 129.677078][ T7300] team0: Device vti0 is of different type [ 129.850985][ T7331] netlink: 'syz.0.383': attribute type 12 has an invalid length. [ 129.858895][ T7331] netlink: 'syz.0.383': attribute type 29 has an invalid length. [ 129.867665][ T7331] netlink: 148 bytes leftover after parsing attributes in process `syz.0.383'. [ 129.881643][ T7331] netlink: 59 bytes leftover after parsing attributes in process `syz.0.383'. [ 129.914541][ T7331] tipc: Enabled bearer , priority 0 [ 129.922542][ T7331] syzkaller0: entered allmulticast mode [ 129.932741][ T7331] tipc: Resetting bearer [ 130.002088][ T7330] tipc: Disabling bearer [ 130.253471][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.386'. [ 130.366635][ T7352] tipc: Enabled bearer , priority 0 [ 130.416546][ T7347] syzkaller0: entered promiscuous mode [ 130.439430][ T7347] syzkaller0: entered allmulticast mode [ 130.521949][ T7359] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20002 [ 130.576648][ T7352] tipc: Resetting bearer [ 130.635276][ T7364] netlink: 68 bytes leftover after parsing attributes in process `syz.4.396'. [ 130.986889][ T7377] netlink: 48 bytes leftover after parsing attributes in process `syz.3.399'. [ 131.032184][ T7377] IPv6: Can't replace route, no match found [ 131.050433][ T7377] netlink: 88 bytes leftover after parsing attributes in process `syz.3.399'. [ 131.115648][ T7343] tipc: Resetting bearer [ 131.174759][ T7343] tipc: Disabling bearer [ 131.413773][ T7399] delete_channel: no stack [ 131.447025][ T7401] netlink: 'syz.3.405': attribute type 5 has an invalid length. [ 131.706145][ T7410] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.881439][ T7417] netlink: 'syz.0.412': attribute type 3 has an invalid length. [ 131.982677][ T7425] netlink: 'syz.2.414': attribute type 1 has an invalid length. [ 132.175148][ T7392] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 132.190221][ T7434] tipc: Can't bind to reserved service type 0 [ 132.193671][ T7432] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 132.514358][ T7458] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 132.628561][ T7459] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.704364][ T7468] netlink: 'syz.3.424': attribute type 39 has an invalid length. [ 132.946458][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.952878][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.962067][ T1304] aoe: packet could not be sent on veth0. consider increasing tx_queue_len [ 133.428887][ T7486] __nla_validate_parse: 18 callbacks suppressed [ 133.428908][ T7486] netlink: 128 bytes leftover after parsing attributes in process `syz.0.430'. [ 133.531003][ T7486] netlink: 20 bytes leftover after parsing attributes in process `syz.0.430'. [ 133.677000][ T7497] netlink: 16 bytes leftover after parsing attributes in process `syz.1.434'. [ 134.681642][ T7535] netlink: 84 bytes leftover after parsing attributes in process `syz.0.441'. [ 134.758288][ T7545] !: renamed from bond_slave_0 (while UP) [ 134.835573][ T7548] tipc: Enabling of bearer rejected, failed to enable media [ 134.932574][ T7553] netlink: 44 bytes leftover after parsing attributes in process `syz.1.447'. [ 134.950579][ T7554] netlink: 28 bytes leftover after parsing attributes in process `syz.3.446'. [ 135.027734][ T7553] netlink: 21 bytes leftover after parsing attributes in process `syz.1.447'. [ 135.048905][ T7553] netlink: 21 bytes leftover after parsing attributes in process `syz.1.447'. [ 135.518931][ T7584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.453'. [ 135.542945][ T7581] Unsupported ieee802154 address type: 0 [ 135.616236][ T24] IPVS: starting estimator thread 0... [ 135.752213][ T7585] IPVS: using max 27 ests per chain, 64800 per kthread [ 136.016237][ T7607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.460'. [ 136.143626][ T7612] openvswitch: netlink: Multiple metadata blocks provided [ 136.396143][ T7626] netlink: 'syz.1.466': attribute type 1 has an invalid length. [ 136.434341][ T7629] netlink: 'syz.1.466': attribute type 1 has an invalid length. [ 137.893847][ T7698] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 138.164131][ T7700] team0 (unregistering): Port device team_slave_0 removed [ 138.206314][ T7700] team0 (unregistering): Port device team_slave_1 removed [ 138.258872][ T7700] team0 (unregistering): Port device bond1 removed [ 138.540614][ T7724] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 138.618823][ T7732] __nla_validate_parse: 10 callbacks suppressed [ 138.618844][ T7732] netlink: 24 bytes leftover after parsing attributes in process `syz.1.493'. [ 139.529743][ T7776] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.502'. [ 139.552235][ T7764] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.560092][ T7764] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.842028][ T7764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.865652][ T7764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.069928][ T2994] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.078889][ T2994] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.210113][ T2994] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.242331][ T2994] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.435675][ T7811] netlink: 56 bytes leftover after parsing attributes in process `syz.4.511'. [ 140.603296][ T7820] netlink: 'syz.4.513': attribute type 24 has an invalid length. [ 140.648446][ T7822] openvswitch: netlink: IP tunnel TTL not specified. [ 140.660357][ T7823] openvswitch: netlink: Message has 2 unknown bytes. [ 140.709248][ T7823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.758365][ T7822] netlink: 'syz.1.512': attribute type 2 has an invalid length. [ 140.783918][ T7825] netlink: 'syz.0.514': attribute type 142 has an invalid length. [ 140.992587][ T7835] netlink: 16 bytes leftover after parsing attributes in process `syz.3.515'. [ 141.563647][ T7859] macvtap1: entered promiscuous mode [ 141.579920][ T7859] vlan0: entered promiscuous mode [ 141.603648][ T7859] team0: Device macvtap1 failed to register rx_handler [ 141.621309][ T7859] vlan0: left promiscuous mode [ 141.696251][ T7868] tipc: Enabling of bearer rejected, failed to enable media [ 141.707736][ T7867] tipc: Started in network mode [ 141.715243][ T7863] openvswitch: netlink: IP tunnel dst address not specified [ 141.720008][ T7867] tipc: Node identity 4e23b179ab06, cluster identity 4711 [ 141.740251][ T7867] tipc: Enabled bearer , priority 0 [ 141.761271][ T7867] syzkaller0: entered promiscuous mode [ 141.766795][ T7867] syzkaller0: entered allmulticast mode [ 141.893315][ T7874] tipc: Resetting bearer [ 141.941566][ T7866] tipc: Resetting bearer [ 141.954657][ T7877] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 142.024008][ T7866] tipc: Disabling bearer [ 142.118859][ T7884] : renamed from hsr0 (while UP) [ 142.124771][ T7882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.535'. [ 142.213201][ T7882] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.267564][ T7891] sctp: [Deprecated]: syz.4.538 (pid 7891) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.267564][ T7891] Use struct sctp_sack_info instead [ 142.496983][ T7882] bridge_slave_1 (unregistering): left allmulticast mode [ 142.553239][ T7882] bridge_slave_1 (unregistering): left promiscuous mode [ 142.588799][ T7900] netlink: 68 bytes leftover after parsing attributes in process `syz.4.540'. [ 142.594428][ T7882] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.940806][ T7912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.002792][ T7915] netlink: 28 bytes leftover after parsing attributes in process `syz.4.543'. [ 143.041519][ T7915] netlink: 28 bytes leftover after parsing attributes in process `syz.4.543'. [ 143.088365][ T7918] netlink: 28 bytes leftover after parsing attributes in process `syz.3.545'. [ 143.126665][ T7915] erspan0: entered promiscuous mode [ 143.132246][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.545'. [ 143.162115][ T7915] batadv_slave_1: entered promiscuous mode [ 143.182512][ T7915] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 143.232154][ T7915] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 143.284209][ T7928] veth0: entered promiscuous mode [ 143.443380][ T7928] veth0 (unregistering): left promiscuous mode [ 143.810355][ T7952] __nla_validate_parse: 3 callbacks suppressed [ 143.810374][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.556'. [ 143.862873][ T7955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.556'. [ 143.864740][ T7943] syzkaller0: entered promiscuous mode [ 143.880529][ T7943] syzkaller0: entered allmulticast mode [ 143.888584][ T7945] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 143.902828][ T7945] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.910571][ T7945] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.262635][ T7974] netlink: 20 bytes leftover after parsing attributes in process `syz.2.558'. [ 145.684406][ T7982] netlink: 'syz.2.561': attribute type 10 has an invalid length. [ 145.797669][ T7982] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.817584][ T7982] bond0: (slave team0): Enslaving as an active interface with an up link [ 146.162963][ T8012] xt_limit: Overflow, try lower: 271964/0 [ 146.202837][ T8009] mac80211_hwsim hwsim6 : renamed from wlan1 [ 146.524372][ T51] Bluetooth: hci4: link tx timeout [ 146.530062][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 146.547378][ T51] Bluetooth: hci4: link tx timeout [ 146.552647][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 146.590476][ T51] Bluetooth: hci4: link tx timeout [ 146.596316][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 146.604184][ T51] Bluetooth: hci4: link tx timeout [ 146.609378][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 146.617055][ T51] Bluetooth: hci4: link tx timeout [ 146.622977][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.092025][ T8050] : entered promiscuous mode [ 147.964218][ T8087] netlink: 20 bytes leftover after parsing attributes in process `syz.1.584'. [ 147.984736][ T8090] netlink: 20 bytes leftover after parsing attributes in process `syz.4.583'. [ 147.993912][ T8090] tipc: Invalid UDP bearer configuration [ 147.993977][ T8090] tipc: Enabling of bearer rejected, failed to enable media [ 148.017468][ T8089] netlink: 'syz.0.585': attribute type 1 has an invalid length. [ 148.082511][ T8089] 8021q: adding VLAN 0 to HW filter on device bond3 [ 148.111181][ T8092] vlan2: entered promiscuous mode [ 148.116368][ T8092] bond3: entered promiscuous mode [ 148.129932][ T8092] vlan2: entered allmulticast mode [ 148.140125][ T8092] bond3: entered allmulticast mode [ 148.167926][ T8089] gretap1: entered promiscuous mode [ 148.245351][ T8097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.587'. [ 148.290503][ T8097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.587'. [ 148.389607][ T8101] nbd0: detected capacity change from 0 to 127 [ 148.476190][ T8107] geneve0: entered promiscuous mode [ 148.498827][ T8107] geneve0: entered allmulticast mode [ 148.505574][ T8100] nbd1: detected capacity change from 0 to 127 [ 148.557077][ T5871] block nbd1: Receive control failed (result -104) [ 148.557077][ T51] block nbd0: Receive control failed (result -32) [ 148.633762][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 148.691152][ T8109] netlink: 24 bytes leftover after parsing attributes in process `syz.1.591'. [ 148.740415][ T8112] netlink: 16 bytes leftover after parsing attributes in process `syz.0.590'. [ 149.124061][ T8129] netlink: 20 bytes leftover after parsing attributes in process `syz.0.597'. [ 149.137027][ T8130] sctp: [Deprecated]: syz.4.596 (pid 8130) Use of struct sctp_assoc_value in delayed_ack socket option. [ 149.137027][ T8130] Use struct sctp_sack_info instead [ 150.014725][ T8160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.605'. [ 150.712957][ T8192] netlink: 'syz.2.614': attribute type 6 has an invalid length. [ 150.773878][ T8193] netlink: 'syz.2.614': attribute type 6 has an invalid length. [ 150.881588][ T8200] team0: Device vti0 is of different type [ 150.963985][ T8206] netlink: 45 bytes leftover after parsing attributes in process `syz.4.619'. [ 151.015512][ T8212] netlink: 45 bytes leftover after parsing attributes in process `syz.4.619'. [ 151.028555][ T8210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.147270][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.621'. [ 151.179721][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.621'. [ 151.235854][ T8210] netlink: 'syz.3.621': attribute type 12 has an invalid length. [ 151.246227][ T8210] netlink: 'syz.3.621': attribute type 11 has an invalid length. [ 151.563364][ T8236] netlink: 'syz.3.626': attribute type 30 has an invalid length. [ 151.660389][ T8247] netlink: 44 bytes leftover after parsing attributes in process `syz.2.628'. [ 151.670226][ T8247] netlink: 43 bytes leftover after parsing attributes in process `syz.2.628'. [ 151.692210][ T8247] netlink: 'syz.2.628': attribute type 6 has an invalid length. [ 151.731897][ T8247] netlink: 'syz.2.628': attribute type 5 has an invalid length. [ 151.768865][ T8247] netlink: 43 bytes leftover after parsing attributes in process `syz.2.628'. [ 151.908464][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.629'. [ 152.905233][ T8291] gretap1: entered promiscuous mode [ 153.107943][ T8304] openvswitch: netlink: Missing key (keys=40, expected=80) [ 153.282172][ T8299] nbd2: detected capacity change from 0 to 127 [ 153.289751][ T8306] netlink: 'syz.4.644': attribute type 1 has an invalid length. [ 153.298848][ T5184] block nbd2: Receive control failed (result -32) [ 153.300754][ T51] block nbd2: Receive control failed (result -32) [ 153.312608][ T6671] block nbd2: Send control failed (result -32) [ 153.340498][ T8315] netlink: 'syz.3.645': attribute type 2 has an invalid length. [ 153.357439][ T6671] block nbd2: Request send failed, requeueing [ 153.423598][ T6671] block nbd2: Dead connection, failed to find a fallback [ 153.466111][ T55] block nbd2: Dead connection, failed to find a fallback [ 153.473949][ T55] block nbd2: shutting down sockets [ 153.480301][ T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.490538][ T55] Buffer I/O error on dev nbd2, logical block 0, async page read [ 153.516201][ T6671] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.548549][ T6671] Buffer I/O error on dev nbd2, logical block 1, async page read [ 153.557868][ T6671] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.567191][ T6671] Buffer I/O error on dev nbd2, logical block 2, async page read [ 153.575267][ T6671] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.585598][ T6671] Buffer I/O error on dev nbd2, logical block 3, async page read [ 153.593591][ T6671] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.603967][ T6671] Buffer I/O error on dev nbd2, logical block 0, async page read [ 153.615437][ T6671] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.639253][ T6671] Buffer I/O error on dev nbd2, logical block 1, async page read [ 153.679554][ T6671] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.688655][ T6671] Buffer I/O error on dev nbd2, logical block 2, async page read [ 153.746450][ T6671] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.799434][ T6671] Buffer I/O error on dev nbd2, logical block 3, async page read [ 153.808237][ T6671] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.868242][ T6671] Buffer I/O error on dev nbd2, logical block 0, async page read [ 153.918492][ T6671] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.952980][ T6671] Buffer I/O error on dev nbd2, logical block 1, async page read [ 153.985335][ T6671] ldm_validate_partition_table(): Disk read failed. [ 154.001468][ T6671] Dev nbd2: unable to read RDB block 0 [ 154.062871][ T6671] nbd2: unable to read partition table [ 154.145200][ T6671] ldm_validate_partition_table(): Disk read failed. [ 154.182842][ T6671] Dev nbd2: unable to read RDB block 0 [ 154.205456][ T6671] nbd2: unable to read partition table [ 154.631859][ T8363] __nla_validate_parse: 3 callbacks suppressed [ 154.631879][ T8363] netlink: 20 bytes leftover after parsing attributes in process `syz.1.657'. [ 154.721717][ T8369] syzkaller1: entered promiscuous mode [ 154.727524][ T8369] syzkaller1: entered allmulticast mode [ 154.785019][ T8369] netlink: 20 bytes leftover after parsing attributes in process `syz.2.659'. [ 155.071258][ T8382] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.948686][ T8425] IPVS: length: 118 != 8 [ 156.196110][ T8433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.674'. [ 156.272444][ T8433] nbd: socks must be embedded in a SOCK_ITEM attr [ 156.301240][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.675'. [ 156.473352][ T8442] netlink: 2 bytes leftover after parsing attributes in process `syz.1.675'. [ 156.788594][ T8465] tipc: Enabling of bearer rejected, failed to enable media [ 157.073562][ T8486] netlink: 528 bytes leftover after parsing attributes in process `syz.4.686'. [ 157.105716][ T8484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.684'. [ 157.254755][ T8493] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20000 [ 157.525637][ T8513] sctp: [Deprecated]: syz.2.692 (pid 8513) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.525637][ T8513] Use struct sctp_sack_info instead [ 157.602560][ T8513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.692'. [ 157.658390][ T8513] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 157.850301][ T8524] netlink: 48 bytes leftover after parsing attributes in process `syz.0.695'. [ 157.977391][ T8533] netlink: 'syz.4.697': attribute type 1 has an invalid length. [ 157.988534][ T8533] netlink: 'syz.4.697': attribute type 3 has an invalid length. [ 158.003065][ T8533] netlink: 224 bytes leftover after parsing attributes in process `syz.4.697'. [ 158.306299][ T8537] netlink: 'syz.4.699': attribute type 21 has an invalid length. [ 158.449035][ T8547] tipc: Enabling of bearer rejected, failed to enable media [ 158.819292][ T8529] syz.1.698 (8529) used greatest stack depth: 15352 bytes left [ 159.333936][ T8578] bond2 (unregistering): Released all slaves [ 159.588469][ T8592] macsec1: entered promiscuous mode [ 159.616037][ T8592] bridge0: entered promiscuous mode [ 159.638781][ T8592] macsec1: entered allmulticast mode [ 159.668906][ T8592] bridge0: entered allmulticast mode [ 159.695928][ T8592] bridge0: port 3(macsec1) entered blocking state [ 159.712767][ T8592] bridge0: port 3(macsec1) entered disabled state [ 159.745580][ T8592] bridge0: left allmulticast mode [ 159.784143][ T8592] bridge0: left promiscuous mode [ 159.883843][ T8608] __nla_validate_parse: 7 callbacks suppressed [ 159.883876][ T8608] netlink: 32 bytes leftover after parsing attributes in process `syz.0.718'. [ 160.209744][ T8616] IPVS: set_ctl: invalid protocol: 85 172.30.1.4:20004 [ 160.403254][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.725'. [ 160.404665][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.725'. [ 160.446836][ T8630] netlink: 36 bytes leftover after parsing attributes in process `syz.0.727'. [ 160.588232][ T8635] bridge_slave_0: left allmulticast mode [ 160.615785][ T8635] bridge_slave_0: left promiscuous mode [ 160.697071][ T8635] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.699861][ T8639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.729'. [ 160.773391][ T8635] bridge_slave_1: left allmulticast mode [ 160.822014][ T8635] bridge_slave_1: left promiscuous mode [ 160.889971][ T8635] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.933613][ T8635] bond0: (slave bond_slave_0): Releasing backup interface [ 160.956809][ T8635] bond0: (slave bond_slave_1): Releasing backup interface [ 161.063553][ T8635] team0: Port device team_slave_0 removed [ 161.117842][ T8635] team0: Port device team_slave_1 removed [ 161.146855][ T8635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.182351][ T8635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.271491][ T8641] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 161.336107][ T8639] erspan0: entered promiscuous mode [ 161.353794][ T8639] macvtap1: entered promiscuous mode [ 161.371340][ T8639] macvtap1: entered allmulticast mode [ 161.384957][ T8639] erspan0: entered allmulticast mode [ 161.427869][ T8643] erspan0: left allmulticast mode [ 161.436753][ T8643] erspan0: left promiscuous mode [ 161.513260][ T8657] tipc: Enabled bearer , priority 0 [ 161.602783][ T8657] syzkaller0: entered promiscuous mode [ 161.611073][ T8657] syzkaller0: entered allmulticast mode [ 161.634171][ T8657] tipc: Resetting bearer [ 161.680778][ T8656] tipc: Resetting bearer [ 161.726527][ T8656] tipc: Disabling bearer [ 161.982166][ T8689] netlink: 244 bytes leftover after parsing attributes in process `syz.4.743'. [ 162.068270][ T8689] netlink: 516 bytes leftover after parsing attributes in process `syz.4.743'. [ 162.071601][ T8697] netlink: 'syz.1.746': attribute type 9 has an invalid length. [ 162.079784][ T8694] netlink: 28 bytes leftover after parsing attributes in process `syz.2.745'. [ 162.182883][ T8689] syzkaller0: entered promiscuous mode [ 162.188417][ T8689] syzkaller0: entered allmulticast mode [ 162.195302][ T8703] netlink: 24 bytes leftover after parsing attributes in process `syz.1.747'. [ 162.263621][ T8703] team0: Mode changed to "loadbalance" [ 162.311938][ T8708] netlink: 'syz.2.748': attribute type 2 has an invalid length. [ 162.323930][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.748'. [ 164.054905][ T8735] netlink: 'syz.1.755': attribute type 9 has an invalid length. [ 164.136588][ T1145] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.136725][ T8735] netlink: 'syz.1.755': attribute type 9 has an invalid length. [ 164.168732][ T1145] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.194500][ T1145] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.215991][ T1145] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.295567][ T8741] netlink: 'syz.1.757': attribute type 1 has an invalid length. [ 164.464826][ T8741] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 164.473995][ T8752] netlink: 'syz.2.760': attribute type 1 has an invalid length. [ 164.527797][ T8759] IPVS: set_ctl: invalid protocol: 135 172.30.0.1:20004 [ 165.087690][ T8781] __nla_validate_parse: 8 callbacks suppressed [ 165.087711][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.769'. [ 165.355970][ T8783] syzkaller0: entered promiscuous mode [ 165.399149][ T8783] syzkaller0: entered allmulticast mode [ 165.912867][ T8802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.774'. [ 165.983384][ T8808] sctp: [Deprecated]: syz.1.772 (pid 8808) Use of int in max_burst socket option. [ 165.983384][ T8808] Use struct sctp_assoc_value instead [ 167.642992][ T8802] batadv_slave_1: Device is already in use. [ 167.657580][ T8825] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 167.665085][ T8825] syzkaller0: linktype set to 264 [ 167.842763][ T8844] macvtap1: entered promiscuous mode [ 167.860650][ T8844] vlan0: entered promiscuous mode [ 167.868939][ T8844] team0: Device macvtap1 failed to register rx_handler [ 167.903316][ T8844] vlan0: left promiscuous mode [ 168.073701][ T8855] 8021q: VLANs not supported on lo [ 168.080858][ T8856] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 168.145351][ T8856] netlink: 'syz.1.787': attribute type 12 has an invalid length. [ 168.216748][ T8857] tap0: tun_chr_ioctl cmd 1074025672 [ 168.248749][ T8857] tap0: ignored: set checksum disabled [ 168.307006][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.789'. [ 168.334113][ T8863] netlink: 24 bytes leftover after parsing attributes in process `syz.0.789'. [ 168.350401][ T8862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.482323][ T8870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.706473][ T8878] sctp: [Deprecated]: syz.3.792 (pid 8878) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.706473][ T8878] Use struct sctp_sack_info instead [ 168.820750][ T8878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.006560][ T8890] netlink: 'syz.1.801': attribute type 11 has an invalid length. [ 169.535960][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.811'. [ 169.572666][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.811'. [ 169.595005][ T8923] netlink: 296 bytes leftover after parsing attributes in process `syz.4.811'. [ 169.627786][ T8930] netlink: 16 bytes leftover after parsing attributes in process `syz.3.812'. [ 170.058775][ T8936] netlink: 28 bytes leftover after parsing attributes in process `syz.2.814'. [ 170.194672][ T8938] netlink: 'syz.1.815': attribute type 1 has an invalid length. [ 170.203031][ T8938] netlink: 232 bytes leftover after parsing attributes in process `syz.1.815'. [ 170.862862][ T8948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.818'. [ 170.991059][ T8952] netlink: 24 bytes leftover after parsing attributes in process `syz.0.819'. [ 171.152336][ T5184] block nbd3: Receive control failed (result -32) [ 171.313918][ T8959] netlink: 48 bytes leftover after parsing attributes in process `syz.1.822'. [ 171.404955][ T8963] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 171.455958][ T8964] netlink: 'syz.0.824': attribute type 32 has an invalid length. [ 171.476608][ T8964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.824'. [ 171.498895][ T8964] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 171.550009][ T8973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.826'. [ 171.664381][ T5184] Bluetooth: hci4: command 0x0405 tx timeout [ 171.670834][ T8977] openvswitch: netlink: IP tunnel dst address not specified [ 171.794444][ T8980] netlink: 2 bytes leftover after parsing attributes in process `syz.0.829'. [ 172.098739][ T9002] tipc: Enabled bearer , priority 0 [ 172.106498][ T9002] syzkaller0: entered promiscuous mode [ 172.112901][ T9002] syzkaller0: entered allmulticast mode [ 172.247645][ T9007] pim6reg1: entered promiscuous mode [ 172.258285][ T9007] pim6reg1: entered allmulticast mode [ 172.302497][ T9002] tipc: Resetting bearer [ 172.433711][ T9002] tipc: Resetting bearer [ 172.458425][ T9002] tipc: Disabling bearer [ 172.533040][ T9013] : entered promiscuous mode [ 172.646458][ T9020] netlink: 15 bytes leftover after parsing attributes in process `syz.0.841'. [ 172.705606][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 172.958147][ T9035] netlink: 24 bytes leftover after parsing attributes in process `syz.1.845'. [ 172.989906][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.845'. [ 173.107258][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880566da400: rx timeout, send abort [ 173.607977][ C1] vcan0: j1939_tp_rxtimer: 0xffff888069bd1800: rx timeout, send abort [ 173.617340][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880566da400: abort rx timeout. Force session deactivation [ 173.643488][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888069bd1800: connection exists (fe ff). last cmd: 20 [ 173.893453][ C1] vcan0: j1939_tp_rxtimer: 0xffff888069bd2400: rx timeout, send abort [ 174.401803][ C1] vcan0: j1939_tp_rxtimer: 0xffff888069bd2400: abort rx timeout. Force session deactivation [ 174.994831][ T9126] netlink: 'syz.2.868': attribute type 1 has an invalid length. [ 175.370277][ T9144] netlink: 'syz.0.874': attribute type 1 has an invalid length. [ 175.915295][ T9166] FAULT_INJECTION: forcing a failure. [ 175.915295][ T9166] name failslab, interval 1, probability 0, space 0, times 0 [ 175.931479][ T9166] CPU: 1 UID: 0 PID: 9166 Comm: syz.3.881 Not tainted syzkaller #0 PREEMPT(full) [ 175.931507][ T9166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 175.931517][ T9166] Call Trace: [ 175.931526][ T9166] [ 175.931534][ T9166] dump_stack_lvl+0x189/0x250 [ 175.931562][ T9166] ? __pfx____ratelimit+0x10/0x10 [ 175.931592][ T9166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.931614][ T9166] ? __pfx__printk+0x10/0x10 [ 175.931644][ T9166] ? __pfx___might_resched+0x10/0x10 [ 175.931663][ T9166] ? fs_reclaim_acquire+0x7d/0x100 [ 175.931706][ T9166] should_fail_ex+0x414/0x560 [ 175.931738][ T9166] should_failslab+0xa8/0x100 [ 175.931768][ T9166] __kmalloc_noprof+0xcb/0x4f0 [ 175.931791][ T9166] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 175.931823][ T9166] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 175.931856][ T9166] genl_family_rcv_msg_doit+0xb8/0x300 [ 175.931887][ T9166] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 175.931921][ T9166] ? apparmor_capable+0x137/0x1b0 [ 175.931947][ T9166] ? bpf_lsm_capable+0x9/0x20 [ 175.931970][ T9166] ? security_capable+0x7e/0x2e0 [ 175.932012][ T9166] genl_rcv_msg+0x60e/0x790 [ 175.932043][ T9166] ? __pfx_genl_rcv_msg+0x10/0x10 [ 175.932063][ T9166] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 175.932087][ T9166] ? __pfx_nl802154_del_llsec_devkey+0x10/0x10 [ 175.932104][ T9166] ? __pfx_nl802154_post_doit+0x10/0x10 [ 175.932149][ T9166] netlink_rcv_skb+0x205/0x470 [ 175.932174][ T9166] ? __lock_acquire+0xab9/0xd20 [ 175.932202][ T9166] ? __pfx_genl_rcv_msg+0x10/0x10 [ 175.932227][ T9166] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 175.932280][ T9166] ? down_read+0x1ad/0x2e0 [ 175.932304][ T9166] genl_rcv+0x28/0x40 [ 175.932324][ T9166] netlink_unicast+0x82c/0x9e0 [ 175.932362][ T9166] ? __pfx_netlink_unicast+0x10/0x10 [ 175.932390][ T9166] ? netlink_sendmsg+0x642/0xb30 [ 175.932406][ T9166] ? skb_put+0x11b/0x210 [ 175.932430][ T9166] netlink_sendmsg+0x805/0xb30 [ 175.932459][ T9166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.932482][ T9166] ? aa_sock_msg_perm+0xf1/0x1d0 [ 175.932502][ T9166] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 175.932522][ T9166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.932541][ T9166] __sock_sendmsg+0x21c/0x270 [ 175.932571][ T9166] ____sys_sendmsg+0x505/0x830 [ 175.932600][ T9166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.932634][ T9166] ? import_iovec+0x74/0xa0 [ 175.932661][ T9166] ___sys_sendmsg+0x21f/0x2a0 [ 175.932692][ T9166] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.932762][ T9166] ? __fget_files+0x2a/0x420 [ 175.932778][ T9166] ? __fget_files+0x3a0/0x420 [ 175.932809][ T9166] __x64_sys_sendmsg+0x19b/0x260 [ 175.932834][ T9166] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 175.932869][ T9166] ? __pfx_ksys_write+0x10/0x10 [ 175.932890][ T9166] ? rcu_is_watching+0x15/0xb0 [ 175.932916][ T9166] ? do_syscall_64+0xbe/0x3b0 [ 175.932939][ T9166] do_syscall_64+0xfa/0x3b0 [ 175.932955][ T9166] ? lockdep_hardirqs_on+0x9c/0x150 [ 175.932981][ T9166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.933000][ T9166] ? clear_bhb_loop+0x60/0xb0 [ 175.933024][ T9166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.933041][ T9166] RIP: 0033:0x7fc3c9f8ebe9 [ 175.933059][ T9166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.933074][ T9166] RSP: 002b:00007fc3c81ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.933095][ T9166] RAX: ffffffffffffffda RBX: 00007fc3ca1c5fa0 RCX: 00007fc3c9f8ebe9 [ 175.933108][ T9166] RDX: 0000000004050884 RSI: 0000200000002080 RDI: 0000000000000005 [ 175.933119][ T9166] RBP: 00007fc3c81ee090 R08: 0000000000000000 R09: 0000000000000000 [ 175.933129][ T9166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.933139][ T9166] R13: 00007fc3ca1c6038 R14: 00007fc3ca1c5fa0 R15: 00007ffea3ff52a8 [ 175.933171][ T9166] [ 175.962750][ T9168] __nla_validate_parse: 58 callbacks suppressed [ 175.962766][ T9168] netlink: 32 bytes leftover after parsing attributes in process `syz.1.882'. [ 176.132994][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.882'. [ 176.244496][ T9173] tipc: Enabled bearer , priority 0 [ 176.377089][ T9174] dummy0: entered promiscuous mode [ 176.395114][ T9174] batadv_slave_1: entered promiscuous mode [ 176.408364][ T9174] debugfs: 'hsr1' already exists in 'hsr' [ 176.415101][ T9174] Cannot create hsr debugfs directory [ 176.445069][ T9181] syzkaller0: entered promiscuous mode [ 176.460058][ T9181] syzkaller0: entered allmulticast mode [ 176.528975][ T9186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.809957][ T9172] tipc: Resetting bearer [ 176.898687][ T9172] tipc: Disabling bearer [ 177.321505][ T9224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.900'. [ 177.809980][ T9236] syzkaller1: entered promiscuous mode [ 177.828896][ T9236] syzkaller1: entered allmulticast mode [ 178.023523][ T9242] netlink: 40 bytes leftover after parsing attributes in process `syz.1.904'. [ 178.552182][ T9262] netlink: 'syz.3.913': attribute type 2 has an invalid length. [ 178.573281][ T9262] netlink: 'syz.3.913': attribute type 1 has an invalid length. [ 178.734609][ T9271] openvswitch: netlink: Flow actions attr not present in new flow. [ 178.953972][ T9283] netlink: 'syz.4.920': attribute type 6 has an invalid length. [ 178.965034][ T9280] netlink: 'syz.4.920': attribute type 6 has an invalid length. [ 179.025266][ T25] block nbd0: Possible stuck request ffff8880253b7000: control (read@0,1024B). Runtime 30 seconds [ 179.029978][ T55] block nbd1: Possible stuck request ffff8880253f5080: control (read@0,1024B). Runtime 30 seconds [ 179.037611][ T25] block nbd0: Possible stuck request ffff8880253b71c0: control (read@1024,1024B). Runtime 30 seconds [ 179.047295][ T55] block nbd1: Possible stuck request ffff8880253f5240: control (read@1024,1024B). Runtime 30 seconds [ 179.047326][ T55] block nbd1: Possible stuck request ffff8880253f5400: control (read@2048,1024B). Runtime 30 seconds [ 179.047352][ T55] block nbd1: Possible stuck request ffff8880253f55c0: control (read@3072,1024B). Runtime 30 seconds [ 179.096335][ T25] block nbd0: Possible stuck request ffff8880253b7380: control (read@2048,1024B). Runtime 30 seconds [ 179.109658][ T25] block nbd0: Possible stuck request ffff8880253b7540: control (read@3072,1024B). Runtime 30 seconds [ 179.311961][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.924'. [ 179.363337][ T9299] vlan3: entered allmulticast mode [ 179.368526][ T9299] hsr0: entered allmulticast mode [ 179.374261][ T9299] hsr_slave_0: entered allmulticast mode [ 179.390324][ T9299] hsr_slave_1: entered allmulticast mode [ 179.634413][ T9315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.930'. [ 179.661785][ T9315] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 179.893938][ T9332] tipc: Enabled bearer , priority 0 [ 179.918608][ T9332] syzkaller0: entered promiscuous mode [ 179.936147][ T9332] syzkaller0: entered allmulticast mode [ 180.084896][ T9339] syzkaller1: entered promiscuous mode [ 180.091866][ T9339] syzkaller1: entered allmulticast mode [ 180.106725][ T9345] netlink: 'syz.3.935': attribute type 10 has an invalid length. [ 180.124937][ T9332] tipc: Resetting bearer [ 180.156335][ T9341] netlink: 64 bytes leftover after parsing attributes in process `syz.2.936'. [ 180.182481][ T9345] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.194718][ T9345] bond0: (slave team0): Enslaving as an active interface with an up link [ 180.203879][ T9336] netlink: 'syz.0.933': attribute type 1 has an invalid length. [ 180.222217][ T9336] netlink: 224 bytes leftover after parsing attributes in process `syz.0.933'. [ 180.246718][ T9352] netlink: 'syz.3.935': attribute type 10 has an invalid length. [ 180.274777][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.933'. [ 180.285677][ T9355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.933'. [ 180.314939][ T9352] team0: Device veth1_macvtap failed to register rx_handler [ 180.645014][ T9326] tipc: Resetting bearer [ 180.696496][ T9326] tipc: Disabling bearer [ 181.050503][ T9384] __nla_validate_parse: 1 callbacks suppressed [ 181.050524][ T9384] netlink: 36 bytes leftover after parsing attributes in process `syz.0.947'. [ 181.107923][ T9384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.947'. [ 181.133610][ T9384] netlink: 36 bytes leftover after parsing attributes in process `syz.0.947'. [ 181.154893][ T9384] netlink: 36 bytes leftover after parsing attributes in process `syz.0.947'. [ 181.216543][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.949'. [ 181.378699][ T9393] netlink: 'syz.2.948': attribute type 29 has an invalid length. [ 181.906714][ T9420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.976583][ T9427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.960'. [ 182.035512][ T9427] geneve2: entered promiscuous mode [ 182.354108][ T9438] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 182.377163][ T9438] veth0: entered promiscuous mode [ 182.387393][ T9437] veth0: left promiscuous mode [ 182.715875][ T9450] netlink: 32 bytes leftover after parsing attributes in process `syz.3.967'. [ 182.738681][ T9450] netlink: 32 bytes leftover after parsing attributes in process `syz.3.967'. [ 182.910426][ T9458] netlink: 'syz.4.970': attribute type 1 has an invalid length. [ 182.925647][ T9458] netlink: 244 bytes leftover after parsing attributes in process `syz.4.970'. [ 182.980362][ T9462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.971'. [ 183.418678][ T9470] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.595589][ T9470] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.768900][ T9470] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.963260][ T9470] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.637300][ T64] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.753359][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.937756][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.968086][ T9545] netlink: 'syz.0.993': attribute type 1 has an invalid length. [ 184.988908][ T1145] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.038627][ T9551] netlink: 'syz.2.994': attribute type 4 has an invalid length. [ 185.621934][ T9580] netlink: 'syz.3.1004': attribute type 2 has an invalid length. [ 185.635375][ T9580] netlink: 'syz.3.1004': attribute type 1 has an invalid length. [ 185.645306][ T9580] netlink: 'syz.3.1004': attribute type 1 has an invalid length. [ 185.658619][ T9580] netlink: 'syz.3.1004': attribute type 2 has an invalid length. [ 186.072622][ T9606] __nla_validate_parse: 6 callbacks suppressed [ 186.072640][ T9606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1009'. [ 186.149878][ T9608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1011'. [ 186.250314][ T9614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1013'. [ 186.261679][ T9614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1013'. [ 186.272117][ T9614] netlink: 'syz.3.1013': attribute type 11 has an invalid length. [ 186.284160][ T9614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1013'. [ 186.293971][ T9614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1013'. [ 186.305143][ T9614] netlink: 'syz.3.1013': attribute type 11 has an invalid length. [ 186.474087][ T9623] netlink: 'syz.4.1015': attribute type 1 has an invalid length. [ 186.586054][ T9625] netlink: 'syz.0.1016': attribute type 10 has an invalid length. [ 186.610778][ T9625] veth0_vlan: entered allmulticast mode [ 186.663313][ T9630] netlink: 'syz.4.1017': attribute type 1 has an invalid length. [ 186.833705][ T9630] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 187.127726][ T9654] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1023'. [ 187.154018][ T9654] netlink: 'syz.1.1023': attribute type 7 has an invalid length. [ 187.165872][ T9654] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1023'. [ 187.615405][ T9674] nftables ruleset with unbound set [ 187.709564][ T9687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1031'. [ 188.013604][ T9701] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1035'. [ 188.115538][ T9699] syzkaller0: entered promiscuous mode [ 188.136993][ T9699] syzkaller0: entered allmulticast mode [ 188.153367][ T9705] team_slave_0: mtu greater than device maximum [ 188.264186][ T9715] macsec0: entered promiscuous mode [ 188.275261][ T9715] macsec0: entered allmulticast mode [ 188.286069][ T9715] veth1_macvtap: entered allmulticast mode [ 188.299719][ T9715] macsec0: left promiscuous mode [ 188.305072][ T9715] macsec0: left allmulticast mode [ 188.316587][ T9715] veth1_macvtap: left allmulticast mode [ 188.845678][ T9740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.672957][ T9771] veth5: entered promiscuous mode [ 190.767385][ T9780] netlink: 'syz.3.1055': attribute type 3 has an invalid length. [ 190.799274][ T9780] netlink: 'syz.3.1055': attribute type 3 has an invalid length. [ 191.049998][ T9793] openvswitch: netlink: IPv4 tun info is not correct [ 191.050046][ T9791] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 191.072499][ T9793] netlink: 'syz.4.1059': attribute type 1 has an invalid length. [ 191.332527][ T9806] veth0: entered promiscuous mode [ 191.371038][ T9803] veth0: left promiscuous mode [ 191.376903][ T9809] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 191.476424][ T9818] __nla_validate_parse: 6 callbacks suppressed [ 191.476443][ T9818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1064'. [ 191.596134][ T9822] netlink: 'syz.4.1065': attribute type 24 has an invalid length. [ 191.862589][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1069'. [ 192.195346][ T9846] netlink: 'syz.1.1072': attribute type 2 has an invalid length. [ 192.216203][ T9846] netlink: 119 bytes leftover after parsing attributes in process `syz.1.1072'. [ 192.363706][ T9852] tipc: Enabled bearer , priority 0 [ 192.387539][ T9852] syzkaller0: entered promiscuous mode [ 192.406423][ T9852] syzkaller0: entered allmulticast mode [ 192.475628][ T9852] tipc: Resetting bearer [ 192.577388][ T9850] tipc: Resetting bearer [ 192.620736][ T9850] tipc: Disabling bearer [ 192.675274][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1078'. [ 192.978889][ T9881] netem: incorrect gi model size [ 193.010512][ T9881] netem: change failed [ 193.491178][ T9898] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 193.499652][ T9898] veth0: entered promiscuous mode [ 193.509824][ T9898] syzkaller0: tun_chr_ioctl cmd 35092 [ 193.564991][ T9898] veth0: left promiscuous mode [ 193.576109][ T9904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1089'. [ 193.667533][ T9912] team0: Device gtp1 is of different type [ 193.706284][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1089'. [ 193.903019][ T9921] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1093'. [ 193.933711][ T9921] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.957534][ T9922] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1093'. [ 193.967584][ T9922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.109597][ T9934] netlink: 'syz.0.1096': attribute type 24 has an invalid length. [ 194.240552][ T9936] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1097'. [ 194.384605][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.392287][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.394475][ T9944] syz.0.1098: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 194.404223][ T1304] aoe: packet could not be sent on veth0. consider increasing tx_queue_len [ 194.479257][ T9944] CPU: 1 UID: 0 PID: 9944 Comm: syz.0.1098 Not tainted syzkaller #0 PREEMPT(full) [ 194.479285][ T9944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 194.479295][ T9944] Call Trace: [ 194.479304][ T9944] [ 194.479312][ T9944] dump_stack_lvl+0x189/0x250 [ 194.479344][ T9944] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.479367][ T9944] ? __pfx__printk+0x10/0x10 [ 194.479394][ T9944] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 194.479417][ T9944] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 194.479441][ T9944] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 194.479467][ T9944] warn_alloc+0x214/0x310 [ 194.479503][ T9944] ? __pfx_warn_alloc+0x10/0x10 [ 194.479543][ T9944] ? __get_vm_area_node+0x28f/0x300 [ 194.479569][ T9944] ? hash_netport_create+0x358/0xfe0 [ 194.479603][ T9944] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 194.479629][ T9944] ? do_syscall_64+0xfa/0x3b0 [ 194.479682][ T9944] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 194.479716][ T9944] ? rcu_is_watching+0x15/0xb0 [ 194.479737][ T9944] ? hash_netport_create+0x358/0xfe0 [ 194.479756][ T9944] ? hash_netport_create+0x358/0xfe0 [ 194.479772][ T9944] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 194.479799][ T9944] ? hash_netport_create+0x358/0xfe0 [ 194.479819][ T9944] ? hash_netport_create+0x2fe/0xfe0 [ 194.479845][ T9944] hash_netport_create+0x358/0xfe0 [ 194.479875][ T9944] ? __nla_parse+0x40/0x60 [ 194.479903][ T9944] ? __pfx_hash_netport_create+0x10/0x10 [ 194.479926][ T9944] ip_set_create+0xa94/0x1940 [ 194.479951][ T9944] ? ip_set_create+0x4a2/0x1940 [ 194.479989][ T9944] ? __pfx_ip_set_create+0x10/0x10 [ 194.480058][ T9944] nfnetlink_rcv_msg+0xb4d/0x1130 [ 194.480085][ T9944] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 194.480133][ T9944] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 194.480156][ T9944] ? kasan_save_free_info+0x46/0x50 [ 194.480238][ T9944] netlink_rcv_skb+0x205/0x470 [ 194.480268][ T9944] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 194.480301][ T9944] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 194.480343][ T9944] ? bpf_lsm_capable+0x9/0x20 [ 194.480367][ T9944] ? security_capable+0x7e/0x2e0 [ 194.480404][ T9944] nfnetlink_rcv+0x26a/0x2520 [ 194.480434][ T9944] ? __dev_queue_xmit+0x1d79/0x3b50 [ 194.480470][ T9944] ? __dev_queue_xmit+0x27b/0x3b50 [ 194.480508][ T9944] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 194.480533][ T9944] ? __pfx___dev_queue_xmit+0x10/0x10 [ 194.480580][ T9944] ? ref_tracker_free+0x63a/0x7d0 [ 194.480608][ T9944] ? __asan_memcpy+0x40/0x70 [ 194.480628][ T9944] ? __pfx_ref_tracker_free+0x10/0x10 [ 194.480652][ T9944] ? __skb_clone+0x63/0x7a0 [ 194.480679][ T9944] ? __skb_clone+0x483/0x7a0 [ 194.480709][ T9944] ? skb_clone+0x246/0x3a0 [ 194.480735][ T9944] ? __netlink_deliver_tap+0x807/0x850 [ 194.480763][ T9944] ? netlink_deliver_tap+0x2e/0x1b0 [ 194.480799][ T9944] ? netlink_deliver_tap+0x2e/0x1b0 [ 194.480837][ T9944] netlink_unicast+0x82c/0x9e0 [ 194.480875][ T9944] ? __pfx_netlink_unicast+0x10/0x10 [ 194.480903][ T9944] ? netlink_sendmsg+0x642/0xb30 [ 194.480918][ T9944] ? skb_put+0x11b/0x210 [ 194.480941][ T9944] netlink_sendmsg+0x805/0xb30 [ 194.480971][ T9944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.480994][ T9944] ? aa_sock_msg_perm+0xf1/0x1d0 [ 194.481014][ T9944] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 194.481034][ T9944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.481053][ T9944] __sock_sendmsg+0x21c/0x270 [ 194.481084][ T9944] ____sys_sendmsg+0x505/0x830 [ 194.481112][ T9944] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.481146][ T9944] ? import_iovec+0x74/0xa0 [ 194.481172][ T9944] ___sys_sendmsg+0x21f/0x2a0 [ 194.481197][ T9944] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.481264][ T9944] ? __fget_files+0x2a/0x420 [ 194.481280][ T9944] ? __fget_files+0x3a0/0x420 [ 194.481310][ T9944] __x64_sys_sendmsg+0x19b/0x260 [ 194.481334][ T9944] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 194.481369][ T9944] ? rcu_is_watching+0x15/0xb0 [ 194.481394][ T9944] ? do_syscall_64+0xbe/0x3b0 [ 194.481417][ T9944] do_syscall_64+0xfa/0x3b0 [ 194.481433][ T9944] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.481459][ T9944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.481478][ T9944] ? clear_bhb_loop+0x60/0xb0 [ 194.481502][ T9944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.481519][ T9944] RIP: 0033:0x7effe2f8ebe9 [ 194.481537][ T9944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.481551][ T9944] RSP: 002b:00007effe3e7a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.481579][ T9944] RAX: ffffffffffffffda RBX: 00007effe31c5fa0 RCX: 00007effe2f8ebe9 [ 194.481593][ T9944] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 194.481604][ T9944] RBP: 00007effe3011e19 R08: 0000000000000000 R09: 0000000000000000 [ 194.481616][ T9944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.481627][ T9944] R13: 00007effe31c6038 R14: 00007effe31c5fa0 R15: 00007ffc3fe9bf68 [ 194.481662][ T9944] [ 194.549512][ T9944] Mem-Info: [ 194.756174][ T9958] netlink: 'syz.4.1101': attribute type 8 has an invalid length. [ 194.809103][ T9944] active_anon:9602 inactive_anon:0 isolated_anon:0 [ 194.809103][ T9944] active_file:2831 inactive_file:39889 isolated_file:0 [ 194.809103][ T9944] unevictable:768 dirty:63 writeback:0 [ 194.809103][ T9944] slab_reclaimable:11165 slab_unreclaimable:99744 [ 194.809103][ T9944] mapped:29238 shmem:1371 pagetables:1379 [ 194.809103][ T9944] sec_pagetables:0 bounce:0 [ 194.809103][ T9944] kernel_misc_reclaimable:0 [ 194.809103][ T9944] free:1326307 free_pcp:13461 free_cma:0 [ 194.890736][ T9959] openvswitch: netlink: Unknown key attributes 2 [ 194.909156][ T9944] Node 0 active_anon:38308kB inactive_anon:0kB active_file:11324kB inactive_file:159348kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116952kB dirty:252kB writeback:0kB shmem:3948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12424kB pagetables:5288kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 195.138616][ T9964] netlink: 'syz.2.1103': attribute type 21 has an invalid length. [ 195.165510][ T9944] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 195.207188][ T9968] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 195.214490][ T9968] IPv6: NLM_F_CREATE should be set when creating new route [ 195.263965][ T9944] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 195.349364][ T9944] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 195.355211][ T9944] Node 0 DMA32 free:1396080kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38056kB inactive_anon:0kB active_file:11324kB inactive_file:157768kB unevictable:1536kB writepending:252kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:38220kB local_pcp:20792kB free_cma:0kB [ 195.429827][ T9944] lowmem_reserve[]: 0 0 1 1 1 [ 195.448530][ T9944] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 195.508934][ T9975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1105'. [ 195.599376][ T9944] lowmem_reserve[]: 0 0 0 0 0 [ 195.604185][ T9944] Node 1 Normal free:3893824kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17312kB local_pcp:8864kB free_cma:0kB [ 195.695034][ T9990] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 195.704102][ T9944] lowmem_reserve[]: 0 0 0 0 0 [ 195.708876][ T9944] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 195.794859][ T9944] Node 0 DMA32: 1506*4kB (UME) 495*8kB (U) 41*16kB (UE) 440*32kB (UME) 129*64kB (UM) 26*128kB (UME) 16*256kB (UME) 7*512kB (UM) 5*1024kB (UM) 6*2048kB (UME) 326*4096kB (M) = 1396688kB [ 195.863533][ T9944] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 195.886150][ T9944] Node 1 Normal: 206*4kB (UE) 53*8kB (UME) 52*16kB (UME) 87*32kB (UME) 27*64kB (UME) 9*128kB (UME) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 947*4096kB (ME) = 3893824kB [ 195.911760][ T9944] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 195.925294][ T9944] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 195.935362][ T9944] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 195.961888][ T9944] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 195.981775][ T9944] 44216 total pagecache pages [ 195.995225][ T9944] 0 pages in swap cache [ 196.013544][ T9944] Free swap = 124996kB [ 196.018000][ T9944] Total swap = 124996kB [ 196.027617][ T9944] 2097051 pages RAM [ 196.032494][ T9944] 0 pages HighMem/MovableOnly [ 196.037360][ T9944] 425667 pages reserved [ 196.047443][ T9944] 0 pages cma reserved [ 196.821267][T10046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1119'. [ 196.885842][T10050] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1120'. [ 196.952099][T10050] gretap0: entered promiscuous mode [ 197.007285][T10052] lo speed is unknown, defaulting to 1000 [ 197.014977][T10053] rdma_rxe: rxe_newlink: failed to add lo [ 197.028834][T10052] lo speed is unknown, defaulting to 1000 [ 197.094022][T10052] lo speed is unknown, defaulting to 1000 [ 197.299708][T10071] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1125'. [ 197.600055][ T24] lo speed is unknown, defaulting to 1000 [ 197.606538][T10052] infiniband syz0: set active [ 197.629352][T10052] infiniband syz0: added lo [ 197.636199][T10052] syz0: rxe_create_cq: returned err = -12 [ 197.656746][T10052] infiniband syz0: Couldn't create ib_mad CQ [ 197.666520][T10052] infiniband syz0: Couldn't open port 1 [ 197.735471][T10052] RDS/IB: syz0: added [ 197.747358][T10052] smc: adding ib device syz0 with port count 1 [ 197.756346][T10052] smc: ib device syz0 port 1 has pnetid [ 197.768801][ T1211] lo speed is unknown, defaulting to 1000 [ 197.820647][T10052] lo speed is unknown, defaulting to 1000 [ 197.949530][T10087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.082284][T10091] netlink: 'syz.1.1133': attribute type 1 has an invalid length. [ 198.127556][T10091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1133'. [ 198.294840][T10097] netlink: 'syz.2.1138': attribute type 1 has an invalid length. [ 198.381557][T10103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1138'. [ 198.404906][T10097] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.458823][T10097] openvswitch: netlink: Actions may not be safe on all matching packets [ 198.484204][T10107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1139'. [ 198.602577][T10052] lo speed is unknown, defaulting to 1000 [ 198.615679][T10110] veth0: entered promiscuous mode [ 198.700615][T10110] block nbd4: server does not support multiple connections per device. [ 198.721433][T10110] block nbd4: shutting down sockets [ 198.766233][T10108] veth0: left promiscuous mode [ 198.841381][T10116] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1142'. [ 198.929729][T10117] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1142'. [ 198.939934][T10122] veth0: entered promiscuous mode [ 198.952940][T10122] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1143'. [ 198.963332][T10122] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1143'. [ 199.104054][T10121] veth0: left promiscuous mode [ 199.334551][ T1211] IPVS: starting estimator thread 0... [ 199.358725][T10130] tipc: Enabled bearer , priority 10 [ 199.439915][T10135] IPVS: using max 24 ests per chain, 57600 per kthread [ 199.538057][T10052] lo speed is unknown, defaulting to 1000 [ 199.689788][T10150] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 200.477628][ T5938] tipc: Node number set to 872538620 [ 200.777634][T10139] lo speed is unknown, defaulting to 1000 [ 200.984433][T10220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.997706][T10220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.013531][T10220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.024444][T10220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.035424][T10220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.045483][T10220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.056174][T10220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.066386][T10220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.077402][T10220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.087380][T10220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.259573][T10052] lo speed is unknown, defaulting to 1000 [ 201.388740][T10231] syz.4.1167 uses old SIOCAX25GETINFO [ 201.832537][T10251] __nla_validate_parse: 4 callbacks suppressed [ 201.832556][T10251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1171'. [ 201.941229][T10251] bond0: entered promiscuous mode [ 201.961217][T10251] bond_slave_0: entered promiscuous mode [ 201.967684][T10251] bond_slave_1: entered promiscuous mode [ 202.021154][T10251] bond0: left promiscuous mode [ 202.026746][T10251] bond_slave_0: left promiscuous mode [ 202.041274][T10251] bond_slave_1: left promiscuous mode [ 202.207686][T10263] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1175'. [ 202.364999][T10052] lo speed is unknown, defaulting to 1000 [ 202.796256][T10291] veth0_virt_wifi: vlans aren't supported yet for dev_uc|mc_add() [ 203.015327][T10296] netlink: 'syz.2.1184': attribute type 21 has an invalid length. [ 203.036375][T10296] IPv6: NLM_F_CREATE should be specified when creating new route [ 203.069679][T10296] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.076970][T10296] IPv6: NLM_F_CREATE should be set when creating new route [ 203.084312][T10296] IPv6: NLM_F_CREATE should be set when creating new route [ 203.091624][T10296] IPv6: NLM_F_CREATE should be set when creating new route [ 203.280310][T10305] netlink: 'syz.2.1186': attribute type 1 has an invalid length. [ 203.310848][T10305] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 203.448807][T10311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1187'. [ 203.508294][T10316] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1190'. [ 204.288538][T10349] lo speed is unknown, defaulting to 1000 [ 204.422965][T10360] ip6erspan0: entered promiscuous mode [ 204.903233][T10370] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 204.946903][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1206'. [ 205.084639][T10383] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1208'. [ 205.251388][T10383] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1208'. [ 205.408892][T10396] netlink: 146840 bytes leftover after parsing attributes in process `syz.0.1213'. [ 205.510647][T10394] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1212'. [ 205.612077][T10411] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1217'. [ 206.165804][T10437] dvmrp1: entered allmulticast mode [ 206.928795][T10466] __nla_validate_parse: 3 callbacks suppressed [ 206.928815][T10466] netlink: 212364 bytes leftover after parsing attributes in process `syz.2.1236'. [ 206.980145][T10466] net_ratelimit: 58 callbacks suppressed [ 206.980166][T10466] openvswitch: netlink: Message has 5 unknown bytes. [ 207.590887][T10485] syzkaller1: entered promiscuous mode [ 207.597803][T10485] syzkaller1: entered allmulticast mode [ 207.679368][T10489] netlink: 'syz.2.1246': attribute type 2 has an invalid length. [ 207.772095][T10492] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.838618][T10496] IPVS: set_ctl: invalid protocol: 0 172.20.20.30:20000 [ 208.100184][T10513] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1249'. [ 208.126401][T10512] lo: entered promiscuous mode [ 208.142257][T10512] netlink: 'syz.2.1248': attribute type 2 has an invalid length. [ 208.148260][T10513] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1249'. [ 208.151857][T10512] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.174501][T10513] netlink: 'syz.3.1249': attribute type 5 has an invalid length. [ 208.190178][T10513] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1249'. [ 208.376840][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1252'. [ 208.399624][T10521] netlink: 'syz.2.1251': attribute type 1 has an invalid length. [ 208.424698][T10521] netlink: 'syz.2.1251': attribute type 4 has an invalid length. [ 208.449709][T10521] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1251'. [ 208.467480][T10521] NCSI netlink: No device for ifindex 458760 [ 208.483096][T10527] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1254'. [ 208.509686][T10524] netlink: 'syz.2.1251': attribute type 1 has an invalid length. [ 208.517470][T10524] netlink: 'syz.2.1251': attribute type 4 has an invalid length. [ 208.532338][T10524] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1251'. [ 208.546113][T10524] NCSI netlink: No device for ifindex 458760 [ 208.575876][T10539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1257'. [ 208.586466][T10527] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 208.609596][T10533] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 208.876701][T10554] lo speed is unknown, defaulting to 1000 [ 208.884390][ T5917] IPVS: starting estimator thread 0... [ 208.893272][T10554] lo speed is unknown, defaulting to 1000 [ 208.907395][T10554] lo speed is unknown, defaulting to 1000 [ 208.990540][T10558] IPVS: using max 27 ests per chain, 64800 per kthread [ 209.061096][T10562] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1263'. [ 209.099888][ T55] block nbd1: Possible stuck request ffff8880253f5080: control (read@0,1024B). Runtime 60 seconds [ 209.111139][ T55] block nbd1: Possible stuck request ffff8880253f5240: control (read@1024,1024B). Runtime 60 seconds [ 209.122467][ T55] block nbd1: Possible stuck request ffff8880253f5400: control (read@2048,1024B). Runtime 60 seconds [ 209.133590][ T55] block nbd1: Possible stuck request ffff8880253f55c0: control (read@3072,1024B). Runtime 60 seconds [ 209.149216][ T25] block nbd0: Possible stuck request ffff8880253b7000: control (read@0,1024B). Runtime 60 seconds [ 209.164547][ T25] block nbd0: Possible stuck request ffff8880253b71c0: control (read@1024,1024B). Runtime 60 seconds [ 209.179563][ T25] block nbd0: Possible stuck request ffff8880253b7380: control (read@2048,1024B). Runtime 60 seconds [ 209.190843][ T25] block nbd0: Possible stuck request ffff8880253b7540: control (read@3072,1024B). Runtime 60 seconds [ 209.897582][T10592] netlink: 'syz.2.1275': attribute type 10 has an invalid length. [ 210.022492][T10592] team0: Device veth1_macvtap failed to register rx_handler [ 210.106613][T10554] infiniband syz2: set down [ 210.142908][T10554] infiniband syz2: added lo [ 210.148278][T10554] syz2: rxe_create_cq: returned err = -12 [ 210.243450][T10554] infiniband syz2: Couldn't create ib_mad CQ [ 210.289438][T10554] infiniband syz2: Couldn't open port 1 [ 210.357316][T10600] can: request_module (can-proto-0) failed. [ 210.365518][ T5945] lo speed is unknown, defaulting to 1000 [ 210.457384][T10554] RDS/IB: syz2: added [ 210.491002][T10554] smc: adding ib device syz2 with port count 1 [ 210.497269][T10554] smc: ib device syz2 port 1 has pnetid [ 210.625083][T10554] lo speed is unknown, defaulting to 1000 [ 210.641065][ T24] lo speed is unknown, defaulting to 1000 [ 211.826739][ T5869] Bluetooth: hci2: command 0x0406 tx timeout [ 211.833702][ T5869] Bluetooth: hci1: command 0x0406 tx timeout [ 211.836714][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 213.107988][T10554] lo speed is unknown, defaulting to 1000 [ 213.982368][T10554] lo speed is unknown, defaulting to 1000 [ 214.225992][T10719] __nla_validate_parse: 8 callbacks suppressed [ 214.226014][T10719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1306'. [ 214.583058][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1309'. [ 214.610173][T10731] netlink: 'syz.0.1309': attribute type 12 has an invalid length. [ 214.620473][T10732] syzkaller0: entered promiscuous mode [ 214.625978][T10732] syzkaller0: entered allmulticast mode [ 214.634743][T10730] tipc: Enabled bearer , priority 0 [ 214.668315][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.668423][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1309'. [ 214.686871][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.729278][T10731] netlink: 'syz.0.1309': attribute type 12 has an invalid length. [ 214.730962][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.770099][T10730] tipc: Resetting bearer [ 214.785798][T10730] tipc: Disabling bearer [ 214.803369][T10554] lo speed is unknown, defaulting to 1000 [ 215.112642][T10745] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1315'. [ 215.154047][T10747] netlink: 'syz.4.1316': attribute type 1 has an invalid length. [ 215.233285][T10748] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 215.249327][T10748] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 215.266306][T10748] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 215.292552][T10554] lo speed is unknown, defaulting to 1000 [ 215.305931][T10747] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 215.328133][T10747] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 216.530570][T10808] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1331'. [ 216.588887][T10810] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1332'. [ 216.596424][T10812] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1331'. [ 216.631685][T10813] IPVS: set_ctl: invalid protocol: 47 172.30.1.4:20003 [ 216.661052][T10817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1334'. [ 216.993903][T10832] netlink: 'syz.1.1337': attribute type 6 has an invalid length. [ 217.254603][T10845] tipc: Enabled bearer , priority 0 [ 217.288499][T10848] syzkaller0: entered promiscuous mode [ 217.328915][T10848] syzkaller0: entered allmulticast mode [ 217.410638][T10845] tipc: Resetting bearer [ 217.600984][T10844] tipc: Resetting bearer [ 217.777693][T10844] tipc: Disabling bearer [ 217.803631][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1345'. [ 217.834574][T10869] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1345'. [ 217.968509][T10874] netlink: 'syz.0.1348': attribute type 1 has an invalid length. [ 217.987727][T10874] netlink: 'syz.0.1348': attribute type 1 has an invalid length. [ 218.422287][T10902] netlink: 'syz.3.1356': attribute type 4 has an invalid length. [ 218.543567][T10907] netlink: 'syz.1.1359': attribute type 83 has an invalid length. [ 218.624160][T10910] IPVS: length: 123 != 24 [ 219.052182][T10936] unsupported nlmsg_type 40 [ 219.611970][T10970] sctp: [Deprecated]: syz.0.1372 (pid 10970) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.611970][T10970] Use struct sctp_sack_info instead [ 220.008451][T10983] syzkaller0: entered promiscuous mode [ 220.019471][T10983] syzkaller0: entered allmulticast mode [ 220.118757][T10995] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 220.184578][T10993] __nla_validate_parse: 12 callbacks suppressed [ 220.184598][T10993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1379'. [ 220.487693][T11019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1385'. [ 220.866684][T11037] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1390'. [ 221.159548][T11049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1392'. [ 221.572413][T11062] vlan0: entered promiscuous mode [ 221.665658][T11062] vlan0: entered allmulticast mode [ 221.697776][T11062] veth0_vlan: entered allmulticast mode [ 221.886411][T11068] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1398'. [ 222.406479][T11097] tipc: Failed to remove unknown binding: 66,1,1/0:68752624/68752626 [ 222.415918][T11097] tipc: Failed to remove unknown binding: 66,1,1/0:68752624/68752626 [ 222.494905][T11100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1409'. [ 222.504901][T11100] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1409'. [ 222.723673][T11074] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 222.830440][T11113] tipc: Enabled bearer , priority 0 [ 222.848896][T11114] syzkaller0: entered promiscuous mode [ 222.864957][T11114] syzkaller0: entered allmulticast mode [ 222.924903][T11114] tipc: Resetting bearer [ 222.970415][T11114] tipc: Disabling bearer [ 223.143489][T11129] netlink: 'syz.2.1416': attribute type 1 has an invalid length. [ 223.424664][T11139] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1419'. [ 223.482816][T11139] openvswitch: netlink: Flow key attr not present in new flow. [ 223.501009][ T5234] udevd[5234]: worker [6671] terminated by signal 33 (Unknown signal 33) [ 223.701376][T11152] netlink: 'syz.1.1423': attribute type 10 has an invalid length. [ 223.802234][T11159] netlink: 'syz.3.1425': attribute type 33 has an invalid length. [ 223.850459][T11159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1425'. [ 223.856466][T11163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1428'. [ 223.869368][T11159] bridge_slave_1: left allmulticast mode [ 223.902702][T11159] bridge_slave_1: left promiscuous mode [ 223.925895][T11159] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.975605][T11159] bridge_slave_0: left allmulticast mode [ 223.984472][ T5871] Bluetooth: hci2: command 0x0406 tx timeout [ 224.023414][T11159] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.757069][T11213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.029411][T11226] ieee802154 phy0 wpan0: encryption failed: -22 [ 225.412349][T11249] __nla_validate_parse: 5 callbacks suppressed [ 225.412373][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1454'. [ 225.434844][T11249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1454'. [ 225.455940][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1454'. [ 225.506889][T11254] pimreg: entered allmulticast mode [ 225.523224][T11249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1454'. [ 225.533325][T11257] openvswitch: netlink: Missing key (keys=40, expected=100) [ 225.546141][T11254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1457'. [ 225.657668][T11262] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1459'. [ 225.687995][T11262] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1459'. [ 225.794972][T11265] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.1460'. [ 225.826980][T11271] tipc: Enabled bearer , priority 0 [ 225.831901][T11265] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 225.843493][T11271] syzkaller0: entered promiscuous mode [ 225.849430][T11271] syzkaller0: entered allmulticast mode [ 225.873647][T11265] openvswitch: netlink: Duplicate key (type 0). [ 225.887752][T11271] tipc: Resetting bearer [ 225.985377][T11271] tipc: Resetting bearer [ 226.035786][T11271] tipc: Disabling bearer [ 226.127995][T11287] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 226.152316][T11285] sch_tbf: peakrate 60040 is lower than or equals to rate 4294967295 ! [ 226.177321][T11276] lo speed is unknown, defaulting to 1000 [ 226.471218][T11299] dvmrp0: entered allmulticast mode [ 226.488097][T11299] dvmrp0: left allmulticast mode [ 226.782307][T11276] lo speed is unknown, defaulting to 1000 [ 226.807719][T11312] netlink: 'syz.3.1474': attribute type 4 has an invalid length. [ 227.112266][T11323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.119373][T11325] netlink: 'syz.3.1479': attribute type 4 has an invalid length. [ 227.157581][ T1211] lo speed is unknown, defaulting to 1000 [ 227.163871][ T1211] syz0: Port: 1 Link DOWN [ 227.182234][ T1211] lo speed is unknown, defaulting to 1000 [ 227.226010][T11327] netlink: 'syz.2.1478': attribute type 4 has an invalid length. [ 227.326748][T11327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1478'. [ 227.336963][T11331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1481'. [ 227.928570][T11358] 8021q: adding VLAN 0 to HW filter on device bond4 [ 228.056949][T11367] bond0: (slave team0): Releasing backup interface [ 228.107114][T11367] team0: Cannot enslave team device to itself [ 228.567679][T11387] 0{X: renamed from gretap0 [ 228.610907][ T30] audit: type=1804 audit(1757422617.684:2): pid=11390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1499" name="/newroot/287/cgroup.controllers" dev="tmpfs" ino=1468 res=1 errno=0 [ 228.643593][T11387] 0{X: left promiscuous mode [ 228.648691][T11387] 0{X: entered allmulticast mode [ 228.699562][ T30] audit: type=1800 audit(1757422617.714:3): pid=11390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1499" name="cgroup.controllers" dev="tmpfs" ino=1468 res=0 errno=0 [ 228.701593][T11387] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 228.982998][T11406] netlink: 'syz.2.1500': attribute type 12 has an invalid length. [ 229.773170][T11449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.173164][T11471] netlink: 'syz.0.1520': attribute type 1 has an invalid length. [ 230.227085][T11471] netlink: 'syz.0.1520': attribute type 4 has an invalid length. [ 230.364601][T11481] netlink: 'syz.2.1522': attribute type 3 has an invalid length. [ 230.580854][T11496] openvswitch: netlink: IP tunnel dst address not specified [ 231.008387][T11514] team0: Device wireguard0 is of different type [ 231.602156][T11549] __nla_validate_parse: 11 callbacks suppressed [ 231.602179][T11549] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1534'. [ 232.043024][T11571] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1541'. [ 232.211652][T11570] delete_channel: no stack [ 232.356174][T11591] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1546'. [ 232.378535][T11591] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1546'. [ 232.392316][T11595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1550'. [ 232.430649][T11591] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1546'. [ 232.462563][T11591] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1546'. [ 232.529126][T11591] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1546'. [ 232.548789][T11591] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1546'. [ 232.566661][T11591] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1546'. [ 232.656639][T11609] tipc: Enabled bearer , priority 0 [ 232.676872][T11609] netlink: 'syz.0.1554': attribute type 1 has an invalid length. [ 232.727749][T11608] tipc: Disabling bearer [ 232.984985][T11639] netlink: 'syz.2.1561': attribute type 2 has an invalid length. [ 232.999796][ T30] audit: type=1107 audit(1757422622.074:4): pid=11632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 233.002970][T11640] sctp: [Deprecated]: syz.0.1560 (pid 11640) Use of int in maxseg socket option. [ 233.002970][T11640] Use struct sctp_assoc_value instead [ 233.003129][T11635] bond3: entered promiscuous mode [ 233.115348][T11635] bond3: entered allmulticast mode [ 233.121588][T11635] 8021q: adding VLAN 0 to HW filter on device bond3 [ 233.188760][T11642] netlink: 'syz.2.1563': attribute type 11 has an invalid length. [ 233.297802][ T5938] IPVS: starting estimator thread 0... [ 233.315073][T11650] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.332499][T11652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.401972][T11651] IPVS: using max 23 ests per chain, 55200 per kthread [ 233.750747][T11672] sch_fq: defrate 0 ignored. [ 233.795172][T11672] sch_fq: defrate 0 ignored. [ 234.068951][T11689] netlink: 'syz.2.1580': attribute type 1 has an invalid length. [ 234.113122][T11697] [ 234.115500][T11697] ====================================================== [ 234.122542][T11697] WARNING: possible circular locking dependency detected [ 234.129584][T11697] syzkaller #0 Not tainted [ 234.134020][T11697] ------------------------------------------------------ [ 234.141062][T11697] syz.0.1582/11697 is trying to acquire lock: [ 234.147227][T11697] ffffffff8e23f6e0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x153/0x610 [ 234.156386][T11697] [ 234.156386][T11697] but task is already holding lock: [ 234.163747][T11697] ffffffff8e21e628 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x16b0 [ 234.173325][T11697] [ 234.173325][T11697] which lock already depends on the new lock. [ 234.173325][T11697] [ 234.183730][T11697] [ 234.183730][T11697] the existing dependency chain (in reverse order) is: [ 234.192737][T11697] [ 234.192737][T11697] -> #2 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 234.200559][T11697] lock_acquire+0x120/0x360 [ 234.205593][T11697] __mutex_lock+0x187/0x1350 [ 234.210701][T11697] pcpu_alloc_noprof+0x286/0x16b0 [ 234.216252][T11697] sbitmap_init_node+0x1e1/0x630 [ 234.221795][T11697] sbitmap_queue_init_node+0x3e/0x4d0 [ 234.227689][T11697] blk_mq_init_tags+0x110/0x280 [ 234.233085][T11697] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 234.239089][T11697] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 234.245417][T11697] nbd_start_device+0x17f/0xb10 [ 234.250797][T11697] nbd_genl_connect+0x135b/0x18f0 [ 234.256383][T11697] genl_family_rcv_msg_doit+0x215/0x300 [ 234.262448][T11697] genl_rcv_msg+0x60e/0x790 [ 234.267471][T11697] netlink_rcv_skb+0x205/0x470 [ 234.272769][T11697] genl_rcv+0x28/0x40 [ 234.277292][T11697] netlink_unicast+0x82c/0x9e0 [ 234.282588][T11697] netlink_sendmsg+0x805/0xb30 [ 234.287911][T11697] __sock_sendmsg+0x21c/0x270 [ 234.293123][T11697] ____sys_sendmsg+0x505/0x830 [ 234.298410][T11697] ___sys_sendmsg+0x21f/0x2a0 [ 234.303617][T11697] __x64_sys_sendmsg+0x19b/0x260 [ 234.309074][T11697] do_syscall_64+0xfa/0x3b0 [ 234.314096][T11697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.320513][T11697] [ 234.320513][T11697] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 234.329150][T11697] lock_acquire+0x120/0x360 [ 234.334182][T11697] blk_alloc_queue+0x538/0x620 [ 234.339487][T11697] __blk_mq_alloc_disk+0x15c/0x340 [ 234.345121][T11697] nbd_dev_add+0x46c/0xae0 [ 234.350070][T11697] nbd_init+0x168/0x1f0 [ 234.354749][T11697] do_one_initcall+0x233/0x820 [ 234.360124][T11697] do_initcall_level+0x104/0x190 [ 234.365601][T11697] do_initcalls+0x59/0xa0 [ 234.370461][T11697] kernel_init_freeable+0x334/0x4b0 [ 234.376366][T11697] kernel_init+0x1d/0x1d0 [ 234.381222][T11697] ret_from_fork+0x3fc/0x770 [ 234.386332][T11697] ret_from_fork_asm+0x1a/0x30 [ 234.391619][T11697] [ 234.391619][T11697] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 234.398842][T11697] validate_chain+0xb9b/0x2140 [ 234.404128][T11697] __lock_acquire+0xab9/0xd20 [ 234.409357][T11697] lock_acquire+0x120/0x360 [ 234.414386][T11697] fs_reclaim_acquire+0x72/0x100 [ 234.419865][T11697] prepare_alloc_pages+0x153/0x610 [ 234.425496][T11697] __alloc_frozen_pages_noprof+0x123/0x370 [ 234.431827][T11697] __alloc_pages_noprof+0xa/0x30 [ 234.437294][T11697] pcpu_populate_chunk+0x182/0xb30 [ 234.442932][T11697] pcpu_alloc_noprof+0xcbf/0x16b0 [ 234.448479][T11697] bpf_map_alloc_percpu+0xbc/0x1b0 [ 234.454119][T11697] prealloc_init+0x225/0x630 [ 234.459244][T11697] htab_map_alloc+0x6ce/0xc70 [ 234.464637][T11697] map_create+0xaa0/0x14d0 [ 234.469624][T11697] __sys_bpf+0x60f/0x870 [ 234.474403][T11697] __x64_sys_bpf+0x7c/0x90 [ 234.479345][T11697] do_syscall_64+0xfa/0x3b0 [ 234.484395][T11697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.490805][T11697] [ 234.490805][T11697] other info that might help us debug this: [ 234.490805][T11697] [ 234.501205][T11697] Chain exists of: [ 234.501205][T11697] fs_reclaim --> &q->q_usage_counter(io)#51 --> pcpu_alloc_mutex [ 234.501205][T11697] [ 234.514862][T11697] Possible unsafe locking scenario: [ 234.514862][T11697] [ 234.522312][T11697] CPU0 CPU1 [ 234.527684][T11697] ---- ---- [ 234.533066][T11697] lock(pcpu_alloc_mutex); [ 234.537583][T11697] lock(&q->q_usage_counter(io)#51); [ 234.545514][T11697] lock(pcpu_alloc_mutex); [ 234.552547][T11697] lock(fs_reclaim); [ 234.556535][T11697] [ 234.556535][T11697] *** DEADLOCK *** [ 234.556535][T11697] [ 234.564691][T11697] 1 lock held by syz.0.1582/11697: [ 234.569801][T11697] #0: ffffffff8e21e628 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x16b0 [ 234.579818][T11697] [ 234.579818][T11697] stack backtrace: [ 234.585700][T11697] CPU: 0 UID: 0 PID: 11697 Comm: syz.0.1582 Not tainted syzkaller #0 PREEMPT(full) [ 234.585719][T11697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 234.585729][T11697] Call Trace: [ 234.585735][T11697] [ 234.585743][T11697] dump_stack_lvl+0x189/0x250 [ 234.585763][T11697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.585780][T11697] ? __pfx__printk+0x10/0x10 [ 234.585800][T11697] ? print_lock_name+0xde/0x100 [ 234.585819][T11697] print_circular_bug+0x2ee/0x310 [ 234.585838][T11697] check_noncircular+0x134/0x160 [ 234.585855][T11697] validate_chain+0xb9b/0x2140 [ 234.585870][T11697] ? finish_task_switch+0x266/0x950 [ 234.585891][T11697] ? finish_task_switch+0x32b/0x950 [ 234.585909][T11697] ? rcu_is_watching+0x15/0xb0 [ 234.585924][T11697] ? trace_sched_exit_tp+0x36/0x110 [ 234.585943][T11697] ? __schedule+0x17ae/0x4cc0 [ 234.585964][T11697] __lock_acquire+0xab9/0xd20 [ 234.585987][T11697] ? prepare_alloc_pages+0x153/0x610 [ 234.585999][T11697] lock_acquire+0x120/0x360 [ 234.586018][T11697] ? prepare_alloc_pages+0x153/0x610 [ 234.586034][T11697] ? __pfx___schedule+0x10/0x10 [ 234.586054][T11697] fs_reclaim_acquire+0x72/0x100 [ 234.586076][T11697] ? prepare_alloc_pages+0x153/0x610 [ 234.586088][T11697] prepare_alloc_pages+0x153/0x610 [ 234.586104][T11697] __alloc_frozen_pages_noprof+0x123/0x370 [ 234.586120][T11697] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 234.586134][T11697] ? preempt_schedule+0xae/0xc0 [ 234.586158][T11697] __alloc_pages_noprof+0xa/0x30 [ 234.586177][T11697] pcpu_populate_chunk+0x182/0xb30 [ 234.586203][T11697] pcpu_alloc_noprof+0xcbf/0x16b0 [ 234.586229][T11697] bpf_map_alloc_percpu+0xbc/0x1b0 [ 234.586252][T11697] prealloc_init+0x225/0x630 [ 234.586277][T11697] htab_map_alloc+0x6ce/0xc70 [ 234.586297][T11697] map_create+0xaa0/0x14d0 [ 234.586317][T11697] ? security_bpf+0x7e/0x300 [ 234.586337][T11697] __sys_bpf+0x60f/0x870 [ 234.586355][T11697] ? __pfx___sys_bpf+0x10/0x10 [ 234.586379][T11697] ? rcu_is_watching+0x15/0xb0 [ 234.586396][T11697] __x64_sys_bpf+0x7c/0x90 [ 234.586413][T11697] do_syscall_64+0xfa/0x3b0 [ 234.586426][T11697] ? lockdep_hardirqs_on+0x9c/0x150 [ 234.586446][T11697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.586460][T11697] ? clear_bhb_loop+0x60/0xb0 [ 234.586477][T11697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.586490][T11697] RIP: 0033:0x7effe2f8ebe9 [ 234.586504][T11697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.586517][T11697] RSP: 002b:00007effe3e7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 234.586533][T11697] RAX: ffffffffffffffda RBX: 00007effe31c5fa0 RCX: 00007effe2f8ebe9 [ 234.586544][T11697] RDX: 0000000000000050 RSI: 0000200000000840 RDI: 0000000000000000 [ 234.586554][T11697] RBP: 00007effe3011e19 R08: 0000000000000000 R09: 0000000000000000 [ 234.586563][T11697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.586572][T11697] R13: 00007effe31c6038 R14: 00007effe31c5fa0 R15: 00007ffc3fe9bf68 [ 234.586589][T11697] [ 234.922714][T11704] netlink: 'syz.0.1582': attribute type 1 has an invalid length. [ 239.189163][ T55] block nbd1: Possible stuck request ffff8880253f5080: control (read@0,1024B). Runtime 90 seconds [ 239.200534][ T55] block nbd1: Possible stuck request ffff8880253f5240: control (read@1024,1024B). Runtime 90 seconds [ 239.211521][ T55] block nbd1: Possible stuck request ffff8880253f5400: control (read@2048,1024B). Runtime 90 seconds [ 239.222521][ T55] block nbd1: Possible stuck request ffff8880253f55c0: control (read@3072,1024B). Runtime 90 seconds [ 239.233803][ T25] block nbd0: Possible stuck request ffff8880253b7000: control (read@0,1024B). Runtime 90 seconds [ 239.244709][ T25] block nbd0: Possible stuck request ffff8880253b71c0: control (read@1024,1024B). Runtime 90 seconds [ 239.264593][ T25] block nbd0: Possible stuck request ffff8880253b7380: control (read@2048,1024B). Runtime 90 seconds [ 239.275512][ T25] block nbd0: Possible stuck request ffff8880253b7540: control (read@3072,1024B). Runtime 90 seconds