last executing test programs: 2.78318232s ago: executing program 2 (id=4658): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(r0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x13, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000f300450000200000000000119078e0000002e005000100004e2062aa0000"], 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001640)=ANY=[@ANYBLOB="1800000006000000000000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000c602000014000000b7030000000700008500000086000000bf0900000000000055090100000000009500000000000000cd0a010000000000c500000001000000180000000000000000000000090000002d90f8ff00000000bf91000000000000ee9c7ddc956e1b7da0c657b74e2c3b43b702000003000c75e549770c7292f628ca655e233db000002a000000"], &(0x7f0000000080)='GPL\x00', 0x3, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41100, 0x2}, 0x94) close(r5) unshare(0x20000400) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) socket$nl_route(0x10, 0x3, 0x0) splice(r7, 0x0, r8, 0x0, 0x6, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="18000000560001060247de0354b30a50b6536334971a0000000000000007003f02bab8b3b7ecf6000000000000"], 0x18}], 0x1}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x88c1}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r11, {0x0, 0x10}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.074534113s ago: executing program 2 (id=4665): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x8a080, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r2, 0x7, 0x1, 0x800}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNGETVNETBE(r3, 0x800454df, &(0x7f0000000280)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0x6, 0xb}, {0xd, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1db3}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x1, 0x3, 0x0, 0x9, 0x1}, {0x2, 0x448fb5d2ba34cfda, 0x6d1, 0x7, 0xfffd, 0xed4}, 0x8, 0x1, 0x1fcd}}, @TCA_TBF_BURST={0x8, 0x6, 0xafc5}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x220000e0}, 0x4890) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, &(0x7f0000000180)='+', 0x1, 0x10, &(0x7f0000000200)={0x11, 0x15, r5, 0x1, 0x5, 0x6, @remote}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001000010025bd7000fd5bdf2500000000", @ANYRES32=0x0, @ANYBLOB="10080400010000001400030067656e657665310000000000000000007800198044000200d53dfa02906888b63403ececb1493f59f2969588b0ca01ede4ad5a8befcc2b9aa13154e742b3c29530379cc305e35a119debc1f4fbfb65426991994fdeef9e030800010001040000140004008799f10c3c5263395beda530d5ce0bd41400050009693796816c1e7c275cea2c431d3b340a000100aa"], 0xb8}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) 1.839556141s ago: executing program 0 (id=4667): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) (async, rerun: 64) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (async, rerun: 64) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0xd, 0x81, 0xd, 0x403}]}) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r4, 0x0, 0x6) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r3, @ANYBLOB="08000200ac1414aab2c9f47d6e50a2c07a479bf12fd42027dead2f2f50ff3b7132d50bccd92a63e9416d0e2fe2081304928c1f5edd44b546691a02"], 0x20}}, 0x0) (async) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) (async) r7 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) (async) unshare(0x20000400) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000500)=@ll={0x11, 0x6, 0x0, 0x1, 0x8, 0x6, @multicast}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000580)="305489d7a4a337a3a5ee9fda94f7e6a92896c57512159a766d74e831f9188021a5320b772ba235e9985cdcddbf61a041710f2460f01aab2b47200418727a3eb71d5046e26ce1bb0f837e115e4fd4e208594ab365c697233fc9626a80894d877eced57ec7a6cf9e44da80cfbe3fcefcdec1d79d0039263a32851a415e596ef5abcbe69bd443c87cd43eddd6f8a55d2266d3f688dea5e6d6e6fdb4ac0bbff736a3", 0xa0}, {&(0x7f0000000640)="6e611e99706fa5524bea0e906e82d8dcec96200a5db48d32258b4861128ba23fefeae28c2bd9bdf25f862e2a991d47e31944388cca727f3396476472334361413b1ef052902ff5780f3e68dd28d76a8e3f809cd4df4bb2743873216891c754fadacf13919c15a0504fb08a4e215715d3b3", 0x71}, {&(0x7f00000006c0)="1b076a4611392db6a8df0d1e708afffce21f0540a590407dc59bf6a2dd8ebaa70407fd170067982ac17a70dd9ec7f9d524b550ed7b65b42d429063e377f306e1215fba7b96bda058a8de319856d78e25890578a959e9743b1f82a14773b146b025e3f7a0eb05ca4192576cab38c299b0767c384a9ec3c3e8f986cf4cb5ad2c9c3089ba87d1d90c", 0x87}, {&(0x7f0000000840)="ef833dd69924967e300c2dfd51111c3e3475b1820516ad48eb4ddf384f25664cc4bab265a22e0d0918925c12219a86594263553a8ac2218bb0294dcb316c19f39ecb7bff095d674e83671c586de687e31d8138a03f0b21a7dd4e64121d2ecfbd744db3469159", 0x66}, {&(0x7f00000008c0)="1311756f6ac470ca3f971e078b5684c4e8c2705d8b3a604523dfa7f9bf7861a68f8170cc7fd18608fb4e9caa0f9823e763a82e5efdd52633a4eb804a589452eaa8ba7108d28d8677945dd7471c527b178f081a8a555d96193a881a2baa860ffe940f", 0x62}, {&(0x7f0000000940)="813fa4a6ab6c720493fdeea9a2716996e0528e187315e72f4982bfd55f4ca50cb3a17bcd9b526dc5f8968050bd19017b054acdb1b997693b1fae9a19d6a5bc15cf7f1a544ad5fad8ed", 0x49}, {&(0x7f00000009c0)="967a84d0dff2bdfc1b802149f12d18aa8dad352de73ee9c5f4d9a0d5b4284b76ecca07cc666df516a71eb65f00fe61a8cfaaee973f0f7b7c7161d5ef5b1bfb8f26148f101501548be25639b07ac7f9283973a28cb1a79961e4d450ef0e455c879f5ad681f567afb92979aa33651376246ef09af6a982445e671734c331f8953dd7e6e3ffc233c743193fef3a3e8d9bf7a1100b87d540b57324875529a347c6221bdbd99a9ae18151647068e431f3cb6640", 0xb1}, {&(0x7f0000000f40)="ac726acca648a247b2f15510ce3d454c288f5d1431aa685523983e933ae3ef2f31d6f46ba62ebcec364699bf3df7766687237e1a959527917a4884fbb67246440b692e45a5c0788a9ad92931d777fe65f30118712cd8fb83de65a2429a0bb5a453803930ae6131472de9cd04b058efc78554e921878e891651ec73ea3aafb3015336baabc4d3bae6e8bb863282db2124fe2e92b9530a856c6e8c28288c7825ac4f4a76050ee76de7f96615d9", 0xac}], 0x8}, 0x800) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pread64(r8, &(0x7f0000000480)=""/61, 0x3d, 0x7fffffffffffffff) (async, rerun: 32) r9 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r9, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000001000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="c0f45ddb37cb04f3b4fce6c198e0c556657b3bccbf153dc3f09f5cb4e9474dc05e70759b12b55fb19644cc6ae2dfb49d1fa30df19649749f071ba8e21bdc0009bf3fdb44498e00000000000000"], 0x1c}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="f0020000", @ANYRES16=0x0, @ANYBLOB="00014ccf000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x2f0}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001080)=@delqdisc={0xa0, 0x25, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff1, 0x8}, {0xfff1, 0x9}, {0xffff, 0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7e, 0x30000000, 0xae, 0x3278, 0x8, 0xeef, 0x1, 0x8, 0x16f}}}}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x0, 0x3e6, 0x81, 0x9}}}}, @qdisc_kind_options=@q_etf={{0x4e}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1000000, 0x1, 0x4}}}}, @TCA_RATE={0x6, 0x5, {0xa7, 0xb}}]}, 0xffffffffffffff01}}, 0x0) 1.714700521s ago: executing program 0 (id=4670): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000b00)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001040)={'ip6gre0\x00', &(0x7f0000000cc0)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0xd, 0x8c, 0x10, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x1, 0x6, 0x6}}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x74, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x8800) sendmsg$NFT_BATCH(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28040000000f0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES64=r0], 0x7c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000f40)={0xec, 0x9, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x67}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x100}, @IPSET_ATTR_IFACE={0x14, 0x17, 'pim6reg1\x00'}]}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xffffffffffffff00}}]}, @IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x81}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20008010}, 0x2040001) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000001000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000b0000008500000006000000b708000000000000dbaaf8fff1000000b5080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="00000009000000000100000008000035596f33006a0000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd7000000000000300000040000180760004001400010002004e24e000000100000000000000001406020002004e23e000000200000000000000000d0001007564703a73797a3000000000"], 0x54}}, 0x2004c000) sendmsg$TIPC_NL_KEY_FLUSH(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB=',-\x00\x00', @ANYRES16=r8, @ANYBLOB="080026bd7000ffdbdf2518000000200005801400028008000200030000000800040000000000070001006962000034000380080003009600000008000300be070000080002000c000000080002001000000008000100000800000800010004000000100007800c0003000700000000000000b40004800900010073797a31000000001300010062726f6164636173742d6c696e6b00003c00078008000300080000000800030008000000080001001000000008000400a000000008000200ffff0000080003000900000008000200080000001300010062726f6164636173742d6c696e6b0000040007801300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b00001400078008000400000200000800030002000000440003800800030008000000080002000400000008000100810000000800020000000000080002000000000008000300030000000800030000000000080002000500000014000380080003000200000008000200eb1a00002001048044000780080003000400000008000200020000000800010015000000080004000100000008000400010000800800040005000000080003000100010008000300010000000900010073797a31000000001300010062726f6164636173742d6c696e6b000014000780080002000300000008000200060000000900010073797a31000000001300010062726f6164636173742d6c696e6b00004c000780080004000800000008000200c30800000800010018000000080001001f000000080001001a000000080003000100000008000200080000000800020003000000080003000100000024000780080003000500000008000400f5000000080003000000010008000300070000001300010062726f6164636173742d6c696e6b00001c000980080002000700000008000100060000000800010072000000"], 0x2c0}}, 0x4000000) recvmsg(r0, &(0x7f0000000980)={&(0x7f0000000740)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000800)=""/11}, {&(0x7f0000001140)=""/271, 0x102}, {&(0x7f00000008c0)=""/15, 0xf}, {&(0x7f00000007c0)=""/53}, {&(0x7f0000000d40)=""/196}, {&(0x7f0000000c00)=""/168}, {&(0x7f0000000940)=""/41}, {&(0x7f0000000e40)=""/197}], 0x2, &(0x7f00000000c0)=""/73, 0x3f}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) select(0x40, &(0x7f0000000080), 0xfffffffffffffffe, 0x0, 0x0) sendto$packet(r10, &(0x7f00000002c0)="05031400d3fc220000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@gettfilter={0x34, 0x2e, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x9, 0xfff3}, {0x4, 0xfff3}, {0xa, 0xffe0}}, [{0x8, 0xb, 0xff}, {0x8, 0xb, 0x2a19f8bf}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x50}}, 0x0) 1.680888149s ago: executing program 1 (id=4671): syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x70, r1, 0x1, 0x0, 0xfffffffc, {}, [@IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x19}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0xffffffffffffff29}}, 0x48004) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'macvlan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r5, 0xffffffffffffffff, 0x18, 0x0, @val=@netfilter={0x2, 0x1, 0x4}}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r6, &(0x7f0000000300), 0x0}, 0x20) r7 = socket(0x10, 0x803, 0x0) sendto$inet(r7, &(0x7f0000000200), 0x0, 0xc084, 0x0, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80000000}]}}]}, 0x38}}, 0x24040084) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)={0x54, r3, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x50000000}, @ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7d}]}, 0x54}, 0x1, 0x0, 0x0, 0x48041}, 0x801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="00012100", @ANYRESOCT, @ANYBLOB="c30000000000000000000000000000000000003b12e93e893ba379732eee6f139ef4e7067321ac3a5991b5ed34cdf103b4a3577c41ead26609b658092ba95f7bfccaeabb78076822729ec2f0025ec05409981900000000c597937ff08281ef493f0c1e988b46fc77d71644f4023148b9c89acaf3a92511ec208829ae1d7e2d8435d00a7880eed9cbb2a24af9a83980c27f"], 0x2c}}, 0x0) 1.554628519s ago: executing program 3 (id=4672): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Q', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000140)) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x5fc168c9d6b4368d}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 1.494163788s ago: executing program 1 (id=4673): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) unshare(0x22060600) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bc7ef9642d29ba564165605dca29708efdf9b15a5c10a126121b2751f642635bcd9a8bf7a928a5d054b0d2c54d519ea75c52f41ed6f2886973626b684c8bd9108c0b0b2ea7e556948f0367aff4fbcede3294f6e73d06ad16dc2d26725ff833b5f83b499918e6a6ec245b781d41aee9624c847e2f2312d6b9db45bad354fc1a3f20407ffe406483a0524937ee7559e4bf70136746b37fdfbbb152758d37ed8bcac41fb7243bdcd536249c7996e898b61927eaa5a8790054ba13d3ade593220f96027090a34aaf7ea92f41aab73e7a85eef87e956bb7c5c76a347264fd99359f4e57b0dcc2bcc188ea880a4b11a8bb81eb22b0ddfc689e3218cf310dcc61cab354149d9107d8a88b0aa5b5661555f00443aee5e714009e52cee5e88f008148ddbc0fa81bf938bed4a1ac778d5337cc0311d0772eeac3eab38426e8d1472ff514aa5379ed21551790cc10148410b4fc27582fd7106a8887a9a0b613dfe10aee77542d887208f5534f5dce4d43f258fc9ef975834e1917666e2aff1cebfc3ce2c1e8ff66bba1d9050000000000000078db7024bf321636bede8651e672ed4f01ba5da2c3f9042a8552bd3f2c9ad546ad0ea20b4d35fb0a15c6239f67c7747a40fe26a88adf727fd1b801b4e56fbffcad99ce68fe2af0d94fdc78d27268de435021dca51acaa7a9e0944bdf579c170db6405944b6791a7713ee54f650fdf71b57c3629fb185efce700620ef5744623be08ec935dd563e6ba0b461bda98b364acf3dcdafa9b0e68c21ea509212c2938aa09cc31aa4ee5bfb8e507181909f5854b13997af4888cd61c8aab5fdfd701a16d546e5a533cd9b985dcc582b67979551dcc750fc51f2c9b6814edeffc76a86ea9f58b7c66fa24540daf14c2163d064f8cf0b4878f81e6b8bc4dabc10dac82b39e033963a6d02434cb783a198829d1373790a85c0e01a362d89e80165d280283af3c2060000000000000034b12a73b0c53bfae5d2f6e55728052247adfe0966c6c5eca57918c4540c979a70a281ba00e408c9fe1b20fa208976dd6a56f9bd9a74d81447c9b265d8c23f0e983e0b1d2d62d1e57c9188e4882634476e62ab1b7415a58208eaaf166d14720092f79a6197fe8b4ea7d5485cc6b3630afed8d3403cfa4d7bf48efb371706e0e65901eea3743c98261cbb7a246cf62f99bbc918741d32539ec0754e7d7f08dd45aaf49623342eabf466e54d8da4346e73da54ba2e4b5e2ae2823864d4147b490e55c9509f75c8828500ac32cab11b0262e75fa9e39e3792d01e0b210fdfb686bfffdc677432f6332c1a27502b43997060acdf7784c79fed0325e06f6b64b6434ebf4730509bcf95b9a1d0ba7c469d55351cc1dce6c90f5872e7ad5eed5f850d9d1f928b4e0263b241e8fe03e5e66252c8a3bd320e8deee5b91c653b8f22f58cff36c2ba4d6774f14229939595d2beb998c9312212de00468fc488591aca07ab75fba4a318d3ee4581711927b77a7f14dbcd639892f8cb0000000000000080411736eb1ee86eec338197a56293c9cdb72e84155681553b896d58b62a96852320e74dc4c9b41d6f90d2353dc573a94a092a84209c12da57f8c78e161b0899eb1c8b694d26c5fbf7f65fefacdbf39151f335dddc3b179a13f6de93ffb338e94738c86e35e9fcc654e4d6618dc1201cbd16e1281df911e6c699da16fbbb7a2e5c77966c98d3e7edd58cabfe6bf1bb7f6329084e3e4a2a36da07bbac3ebc00472f55b7966f250109fcce0ad5d4526d20ef74d1a634d724"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) (async) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x4, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) 1.476799128s ago: executing program 2 (id=4674): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000060000000000000d00000000000000000400000003000000000000000100000000000012050000000400000000000012030000000061615f5f00"], 0x0, 0x4e, 0x0, 0x1}, 0x28) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="bc0100001900010001000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000003000bffff00000a00800006000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000080000000000000000000000000000000000000000000000000000204010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff3400000202000000000000000000000000000064010102000000000000000000000000000000003c0000000a00000000000000000000000000000000000000000008000000080000fcffffff000000000000000000000000000000006b014a2adc5ea76b0b0803139e3e0032000000000000007f0000010000000000000000000000000335000004030000000000000002000000000000ac1414bb000000000000000000000000000000002b000000000000000a010101000000000000000000000000043500000101010000000000bf0a0000000000010000000000"], 0x1bc}}, 0x4000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept$alg(r0, 0x0, 0x0) recvmsg(r3, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}], 0x39}, 0x40000102) sendmmsg$alg(r3, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24001084}], 0x1, 0x24008844) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}, @IFLA_GRE_TTL={0x5, 0x8, 0x72}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) sendto$packet(r5, &(0x7f00000001c0)="11eb0300fc0b", 0x6, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r8, 0x1, 0x4, 0x6, @multicast}, 0x14) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x4008000) close(0x3) socket(0x2, 0x80805, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 1.147692016s ago: executing program 0 (id=4675): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x7, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7659}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xcc}]}, 0x44}}, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a87080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.085753724s ago: executing program 3 (id=4676): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x9, 0x9, 0x7f}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={r1, 0x0, &(0x7f0000000380)}, &(0x7f0000000080)=0x10) 1.042345549s ago: executing program 4 (id=4677): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100"], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r3], 0x14) 955.604122ms ago: executing program 0 (id=4678): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="240012800b00010062726964656500001400028005000700060000000600270000000000b7934ddc34a83b42b5c3c7cbe8556d27b776f29f5c7d0dd24c74473d1e7c953dcf"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 954.947015ms ago: executing program 3 (id=4679): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x18, 0x30, 0x48b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x980) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x3, 0x800000, 0x0, 0x4000000000000001, 0xfffffffffffffffb}, {0x0, 0x1, 0x2}, 0x800}}, 0xb8}}, 0x2c000010) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$BTRFS_IOC_FS_INFO(r4, 0x8400941f, &(0x7f00000004c0)) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r5, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x10000}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfffffff8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 935.272982ms ago: executing program 1 (id=4680): socket$kcm(0x10, 0x2, 0x10) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20048054}, 0x24004090) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000721f86fb8edae41400ff93dbdf25087c0000080001800400dd80040003"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = epoll_create(0x7) r6 = epoll_create1(0x0) epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffffc}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB=':'], 0x20) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7c00000021002000000000000100000000000000000000000000000000000000fe8000000000000000000005000000bb00"/64, @ANYRESHEX=0x0, @ANYRESOCT=r0, @ANYRES8=r4], 0x7c}}, 0x40088f5) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) socket(0x31, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 833.881319ms ago: executing program 4 (id=4681): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x15, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37}, 0x94) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x88, @private2, 0xa77}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xfffe}, 0x1b, 0x0, 0x0, &(0x7f0000000140)=[@dstopts={{0x28, 0x29, 0x32, {0xff, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0xfc5}, @enc_lim={0x4, 0x1, 0x80}]}}}], 0x28}, 0x40) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0xfc, 0x1, 0x2, 0x3, 0x0, 0x0, {0x5}, [@CTA_EXPECT_MASTER={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x324e725f}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0xfc}}, 0x400c001) sendmmsg$inet6(r0, &(0x7f0000000840)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x30}, 0xa}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000200)="a2", 0x1}], 0x1}}], 0x1, 0xc010) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 707.313547ms ago: executing program 3 (id=4682): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000d042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="1fa5960d000304001c00128009000100626f6e64000000000c000280080002004ba39e702b007fa891387c015a6651763c0bddc39cc3c9933fcee786011e36d66a80814b53afab67cc9458207932b6a5dc778e9d6ce91c92d6eb237e6fcf021476373301bf9105f7fc547308ddbcc8b20cd49bc8f172785e166f49b4b369e8c84079b922823c1eb0f130797027ecf174ac5a47578e6cd37d94848a043f38182e9c8c6d34c14124cc0dc597863945e59440c7e5ce9069fc28d73d0c81e4c7f1189093a79604a527", @ANYRES32=r1, @ANYBLOB], 0x3c}}, 0x0) 675.932207ms ago: executing program 0 (id=4683): socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x810) r3 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x44) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/219, 0xdb}], 0x1, &(0x7f0000000480)=""/19, 0x13}, 0x40000010) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000000280)=[{&(0x7f0000000080)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000340)="00e9b72f", 0x4}], 0x1, &(0x7f0000000600)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x3}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x0, 0x4, 0x2e}}], 0x38, 0x800}], 0x1, 0x4008080) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x38, r7, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x41, 0x5f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x38}}, 0x440c0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x24, r9, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x40040) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r7, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_USER_PRIO={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000841}, 0x8811) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=@mpls_delroute={0x154, 0x19, 0x1, 0x70bd2a, 0x25dfdbfc, {0x1c, 0x10, 0x20, 0x6, 0xfe, 0x0, 0xfd, 0x8, 0xc00}, [@RTA_DST={0x8, 0x1, {0x1}}, @RTA_NEWDST={0x84, 0x13, [{0x9}, {}, {0x81}, {0xff}, {0xb, 0x0, 0x1}, {0x27}, {0xfff, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xffb0, 0x0, 0x1}, {0x100}, {0x7fff}, {0x4, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x63cf}, {0x4}, {0x4, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x8}, {0x2}, {0x284e, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x3}, {0x50f, 0x0, 0x1}, {}, {0x4}, {0x4}, {0x1}, {0x3ff, 0x0, 0x1}]}, @RTA_MULTIPATH={0xc, 0x9, {0xfffd, 0x10, 0x40, r1}}, @RTA_NEWDST={0x84, 0x13, [{0x5, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0xffff9, 0x0, 0x1}, {0xa}, {0x4}, {0x8}, {0x7}, {0x4}, {0x3ff}, {0x15}, {0xff}, {0x9}, {0x8, 0x0, 0x1}, {0xff}, {0x8}, {0x89ec}, {0x4}, {0x40}, {0x6}, {0x6, 0x0, 0x1}, {0x3}, {0x60}, {0x9, 0x0, 0x1}, {0x4e}, {0xeb2b2, 0x0, 0x1}, {0xffff6}, {0xdc6, 0x0, 0x1}, {0x4}, {0x10}, {0x3}, {0x4}, {0xe}]}, @RTA_VIA={0x14, 0x12, {0x3, "52e1f1990db0e49c7b5fd88cb9ec"}}, @RTA_DST={0x8, 0x1, {0xffffd}}]}, 0x154}, 0x1, 0x0, 0x0, 0xc1}, 0x20040000) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x23}, [@ldst={0x1, 0x0, 0x3, 0x1, 0x1, 0x8}, @call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d20", 0x18}], 0x2}], 0x1, 0x40800) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 674.498213ms ago: executing program 4 (id=4684): sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, &(0x7f0000010200)={&(0x7f00000001c0)={0x10020, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x7, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x10448) (async) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x10448) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000010340), 0x2) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d10300000c000440000000002df31ab30c00008008000340000000020100000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r3, 0xc038586c, &(0x7f0000010300)={r0, &(0x7f0000000040)='$**{./\x00', 0x101000, &(0x7f0000000080)={@align=0x300000000000, {0x8, 0xe201, 0x5, 0x5}}, 0x200, &(0x7f0000010280)={@_ha_fsid}, &(0x7f00000102c0)=0x5}) sendmsg$nl_route(r3, 0x0, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000000906010200120000000c0000000000000900020073797a310000000005000100070000001c0007800c00018008000140ff1600ff0c00028008000140594c"], 0x44}, 0x1, 0x0, 0x0, 0x30008003}, 0x4000050) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r6, 0x113, 0x3, &(0x7f0000004500)=0xa57, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x24, 0x0, &(0x7f00000000c0)) 639.128772ms ago: executing program 4 (id=4685): r0 = socket$nl_route(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000040)="5c3d725902284b29d374f2b790e142c89df7de52edaaff492c05739ac506ca0e7b7dd5dfc5e498003f3c79b4a4fe2c97a7daa2cb788e61c047bdc7f897282ba19d5e3820c7b8b88af556be06a50431f0f1d7c2991f3abbc8361d12cb53799b78b898062fe1f3bc13d3921bd24d768e3d82", 0x71, 0x0, &(0x7f00000000c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1d, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000ae00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x12, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000210001002cbd7000fddbdf250a000024"], 0xa4}, 0x1, 0x0, 0x0, 0x40040c1}, 0x3000c0d0) 620.617497ms ago: executing program 1 (id=4686): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x40880}], 0x1, 0x4814) recvmmsg(r1, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x2, 0x2001, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) sendmmsg(r3, &(0x7f000000a400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r4 = socket(0x1, 0x3, 0x3) sendmsg$sock(r4, &(0x7f0000001440)={&(0x7f0000000280)=@l2tp={0x2, 0x0, @private=0xa010101, 0x4}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="3ff45eca8d81b549e36cedfcb399ca5f60a42d2e83ad292639107ac90ff83b47adb12163e4ccaf9d07193bcea8cad80e04df53314357505f94aaa2741434e052d7ffc3ec9006bcbbcfcd87f29a62177be4ed87d482c34c3683cb2defa22b1d3d53450074e78d57365e89c01139376a5c7bfa1b7c4e20c9ee89d6a5c6133a3c8b4784f25937a572f187a963cc3c48a50155efc9", 0x93}], 0x2, &(0x7f0000001400)=[@mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}, 0x48001) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x7800, 0x40, 0x7, 0xd, {{0x6, 0x4, 0x2, 0x3, 0x18, 0x64, 0x0, 0x8, 0x2f, 0x0, @remote, @local, {[@noop]}}}}}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@deltclass={0x48, 0x29, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xd, 0x7}, {0xffe0, 0x2}, {0x2, 0xf}}, [@TCA_RATE={0x6, 0x5, {0xc0, 0x3}}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040064}, 0x4008004) 585.289262ms ago: executing program 0 (id=4687): r0 = socket$packet(0x11, 0x3, 0x300) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000380)="8b99cf", 0x3}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) syz_init_net_socket$rose(0xb, 0x5, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1900000004000000040000000100020000000000bf6f3b00121f13ab0dbdf58f9df9"], 0x1d) vmsplice(r1, 0x0, 0x0, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) splice(r3, 0x0, r2, 0x0, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) 492.018881ms ago: executing program 1 (id=4688): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x4004011}, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000080000007910000000000000d31030001001000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x5}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 448.146948ms ago: executing program 2 (id=4689): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0), 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x30e64}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000891}, 0x20044024) r2 = socket(0x25, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000680)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x40000000, 0x400, 0xffffffff, 0x3, 0xfffffffd}}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001400add427323b472545b45602117fffffff81000e220e227f000008925a8e0013007b000b00984d000000000000008100ff0000f03a86100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYRES16=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r3) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x54, r4, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x2e}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x404}, 0x4974bb69b5c3699e) 408.716849ms ago: executing program 4 (id=4690): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x68, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x1415, 0x103, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x83}, 0x1, 0x0, 0x0, 0x40008000}, 0x4000) mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r5, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0xfffff000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r8, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x700000004}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x90) sendmsg$NL802154_CMD_NEW_SEC_DEV(r8, 0x0, 0x4000080) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1}}}}}}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000080)={0x0, 0x2}, 0x8) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56141, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="58000000100001002cbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="10080400000000001c002b80080003001100000008000100", @ANYRES32, @ANYBLOB="27030800", @ANYRES32, @ANYBLOB="14003500626f6e645f736c6176655f3000000000080028"], 0x58}}, 0x0) 312.113696ms ago: executing program 3 (id=4691): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r3], 0x14) 310.967906ms ago: executing program 1 (id=4692): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000046001400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="b8914b3f677210a5befd00000500", 0x0, 0x10012000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x2b}}, &(0x7f0000000040)=0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000030000000000000003000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000600000085000000050000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000006c0)={r3}, 0xffffffffffffff01) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x6}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffffff00, 0xffffff00, 0xff000000, 0xffffff00]}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x893}, 0x20040084) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0113f9d", @ANYRES16=r4, @ANYBLOB="0100ffffffff00000000370000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800730000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x400c001}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00042bbd7000fddbdf25410000000e0001006e6574646d7673696d3000000d0087006c325f64726f707300000000"], 0x44}, 0x1, 0x0, 0x0, 0x20040081}, 0x20008880) r6 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r10, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0xffff, 0x7, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e21, 0x4, @private1, 0x9}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000003c0), 0x1}], 0x1}}], 0x50, 0x20000004) splice(r6, 0x0, r9, 0x0, 0x2, 0x0) splice(r8, 0x0, r7, 0x0, 0x1c, 0xe) ioctl$sock_qrtr_TIOCINQ(r9, 0x541b, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) 301.963908ms ago: executing program 2 (id=4693): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newroute={0x2c, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x14, 0x0, 0x0, 0x2, 0x0, 0x8}, [@RTA_PRIORITY={0x8, 0x6, 0xe0}, @RTA_EXPIRES={0x8, 0x17, 0x4006}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4805}, 0x4) 129.333119ms ago: executing program 3 (id=4694): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) 84.763619ms ago: executing program 4 (id=4695): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000001000030400000000fedbdf2500007400f728ab93db3c140d69363e3273752c18fb3ff28f25abc8f645000ea41d2c292d330aaf5f6c5bf158a72d1c01b4de725a894ffa6fc8934ef3402a646fc57b88bf57de4902c3699b4f6c9b7fa498e9356c7906056c02f02b4f9b6708737b9fe80ffb8fda620b071256eb58a45c85d673480dcf8a9036c4ea97302c3a5dbcfe7135c8ac04e1fd50", @ANYRES32=r1, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20802, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) setsockopt(0xffffffffffffffff, 0xc, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c00160002ac0f0000000000140017"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r9 = socket(0x10, 0x3, 0x0) connect$rose(r9, &(0x7f0000000100)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, @null}, 0xffffffffffffff9a) connect$rose(r8, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3, [@bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x5, 0x1, 0x6}, 0x10) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x15, 0xff, 0xf}, 0x2c) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="7800000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000480012800b0001006772657461700000380002800400120008001500d57002000500", @ANYRES32, @ANYBLOB, @ANYRES32], 0x78}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) 0s ago: executing program 2 (id=4696): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback={0x97}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x30}}], 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44891}, 0x44) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) socket$unix(0x1, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r8}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r9}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r8}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r9}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r8}, 0x20) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r6, {0xd, 0x10}, {0xfff8, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) kernel console output (not intermixed with test programs): evsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.603325][T15408] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.647170][T15408] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.676709][T15408] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.894832][T15408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.922033][T15408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.012698][T11312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.039277][T11312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.112213][T17879] lo speed is unknown, defaulting to 1000 [ 455.234954][T11308] net_ratelimit: 5 callbacks suppressed [ 455.234978][T11308] bond6: (slave bridge6): failed to get link speed/duplex [ 455.414405][T15409] bond6: (slave bridge6): failed to get link speed/duplex [ 455.596922][T11312] bond6: (slave bridge6): failed to get link speed/duplex [ 455.748398][T11312] bond6: (slave bridge6): failed to get link speed/duplex [ 455.807649][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 455.818486][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 455.827996][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 455.853266][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 455.874123][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 455.934017][T15410] bond6: (slave bridge6): failed to get link speed/duplex [ 456.043926][T15408] bond6: (slave bridge6): failed to get link speed/duplex [ 456.130693][T17978] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3185'. [ 456.141645][T17978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3185'. [ 456.156775][T15410] bond6: (slave bridge6): failed to get link speed/duplex [ 456.214766][T17879] lo speed is unknown, defaulting to 1000 [ 456.285443][T17980] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3187'. [ 456.295182][T15408] bond6: (slave bridge6): failed to get link speed/duplex [ 456.331148][T17982] FAULT_INJECTION: forcing a failure. [ 456.331148][T17982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.348632][T17982] CPU: 0 UID: 0 PID: 17982 Comm: syz.4.3188 Not tainted syzkaller #0 PREEMPT(full) [ 456.348662][T17982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 456.348674][T17982] Call Trace: [ 456.348682][T17982] [ 456.348690][T17982] dump_stack_lvl+0xe8/0x150 [ 456.348727][T17982] should_fail_ex+0x412/0x560 [ 456.348762][T17982] _copy_to_user+0x31/0xb0 [ 456.348788][T17982] simple_read_from_buffer+0xe1/0x170 [ 456.348822][T17982] proc_fail_nth_read+0x1bb/0x230 [ 456.348855][T17982] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 456.348887][T17982] ? rw_verify_area+0x2a6/0x4d0 [ 456.348910][T17982] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 456.348939][T17982] vfs_read+0x20c/0xa70 [ 456.348963][T17982] ? __pfx_sctp_getsockopt+0x10/0x10 [ 456.348984][T17982] ? __might_fault+0xaf/0x130 [ 456.349005][T17982] ? __pfx_vfs_read+0x10/0x10 [ 456.349026][T17982] ? __get_user_nocheck_8+0x20/0x20 [ 456.349053][T17982] ? sctp_getsockopt+0x82/0xb90 [ 456.349072][T17982] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 456.349096][T17982] ? do_sock_getsockopt+0x2d3/0x3f0 [ 456.349132][T17982] ksys_read+0x150/0x270 [ 456.349156][T17982] ? __pfx_ksys_read+0x10/0x10 [ 456.349178][T17982] ? __x64_sys_getsockopt+0x1a4/0x240 [ 456.349222][T17982] do_syscall_64+0x14d/0xf80 [ 456.349249][T17982] ? trace_irq_disable+0x3b/0x150 [ 456.349267][T17982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.349288][T17982] ? clear_bhb_loop+0x40/0x90 [ 456.349313][T17982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.349332][T17982] RIP: 0033:0x7f222b15d04e [ 456.349353][T17982] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 456.349370][T17982] RSP: 002b:00007f222c07afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 456.349393][T17982] RAX: ffffffffffffffda RBX: 00007f222c07b6c0 RCX: 00007f222b15d04e [ 456.349408][T17982] RDX: 000000000000000f RSI: 00007f222c07b0a0 RDI: 0000000000000004 [ 456.349421][T17982] RBP: 00007f222c07b090 R08: 0000000000000000 R09: 0000000000000000 [ 456.349434][T17982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.349446][T17982] R13: 00007f222b416038 R14: 00007f222b415fa0 R15: 00007fff92904858 [ 456.349479][T17982] [ 456.605852][ T5821] team0: Port device syz_tun removed [ 456.660521][T17879] lo speed is unknown, defaulting to 1000 [ 456.667580][T15408] bond6: (slave bridge6): failed to get link speed/duplex [ 456.791920][T15408] bond6: (slave bridge6): failed to get link speed/duplex [ 457.000611][T17879] lo speed is unknown, defaulting to 1000 [ 457.297257][T17879] lo speed is unknown, defaulting to 1000 [ 457.847677][T17998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3193'. [ 457.993317][ T5827] Bluetooth: hci2: command tx timeout [ 458.198545][T17972] chnl_net:caif_netlink_parms(): no params data found [ 458.401233][T17972] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.414034][T17972] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.423682][T17972] bridge_slave_0: entered allmulticast mode [ 458.435562][T17972] bridge_slave_0: entered promiscuous mode [ 458.452958][T17972] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.462388][T17972] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.470930][T17972] bridge_slave_1: entered allmulticast mode [ 458.481765][T17972] bridge_slave_1: entered promiscuous mode [ 458.528349][T17972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.551084][T17972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.684354][T17972] team0: Port device team_slave_0 added [ 458.706075][T17972] team0: Port device team_slave_1 added [ 458.745548][T18037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3204'. [ 458.781195][T17972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.791442][T17972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.819203][T17972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.833115][T17972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.840478][T17972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.867049][T17972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.891456][T18037] syzkaller0: entered promiscuous mode [ 458.897468][T18037] syzkaller0: entered allmulticast mode [ 458.907039][T18043] tipc: Can't bind to reserved service type 2 [ 459.065699][T17972] hsr_slave_0: entered promiscuous mode [ 459.096131][T17972] hsr_slave_1: entered promiscuous mode [ 459.102894][T17972] debugfs: 'hsr0' already exists in 'hsr' [ 459.110037][T17972] Cannot create hsr debugfs directory [ 460.071566][ T5827] Bluetooth: hci2: command tx timeout [ 460.122046][T18051] team0: default FDB implementation only supports local addresses [ 460.151684][T18051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3206'. [ 460.198124][T17972] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 460.242180][T17972] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 460.262714][T17972] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 460.286424][T17972] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 460.324088][ T1157] net_ratelimit: 15 callbacks suppressed [ 460.324114][ T1157] bond6: (slave bridge6): failed to get link speed/duplex [ 460.464002][T11313] bond6: (slave bridge6): failed to get link speed/duplex [ 460.487232][T18093] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3216'. [ 460.504066][T17972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.536336][T18093] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3216'. [ 460.573113][T17972] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.623513][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.630806][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.686547][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.693947][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.793929][ T13] bond6: (slave bridge6): failed to get link speed/duplex [ 460.983995][T11310] bond6: (slave bridge6): failed to get link speed/duplex [ 461.038068][T18113] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3220'. [ 461.049715][T18112] netlink: 'syz.1.3221': attribute type 30 has an invalid length. [ 461.110693][T18119] netlink: 'syz.4.3222': attribute type 11 has an invalid length. [ 461.152490][T18119] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3222'. [ 461.154062][ T8988] bond6: (slave bridge6): failed to get link speed/duplex [ 461.314284][ T8988] bond6: (slave bridge6): failed to get link speed/duplex [ 461.456238][T17972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.464733][ T223] bond6: (slave bridge6): failed to get link speed/duplex [ 461.615311][ T8988] bond6: (slave bridge6): failed to get link speed/duplex [ 461.662278][T17972] veth0_vlan: entered promiscuous mode [ 461.709647][T18141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3226'. [ 461.735228][T17972] veth1_vlan: entered promiscuous mode [ 461.755245][T18141] netlink: 'syz.0.3226': attribute type 13 has an invalid length. [ 461.773974][T18141] netlink: 'syz.0.3226': attribute type 17 has an invalid length. [ 461.784594][T11307] bond6: (slave bridge6): failed to get link speed/duplex [ 461.928531][T18141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 461.993091][T18155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3230'. [ 461.996756][T17972] veth0_macvtap: entered promiscuous mode [ 462.022119][T18155] hsr0: entered promiscuous mode [ 462.029048][T18155] macvlan2: entered allmulticast mode [ 462.035221][T18155] hsr0: entered allmulticast mode [ 462.040531][T18155] hsr_slave_0: entered allmulticast mode [ 462.047544][T18155] hsr_slave_1: entered allmulticast mode [ 462.086706][T17972] veth1_macvtap: entered promiscuous mode [ 462.156462][T17972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.159873][ T5830] Bluetooth: hci2: command tx timeout [ 462.219612][T17972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.261003][T11310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.292447][T11310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.318572][T11310] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.337709][T11310] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.552031][ T223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.567031][ T223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.669402][ T8988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.692068][ T8988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.805530][T18180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3237'. [ 462.838402][T18180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3237'. [ 462.914419][T18191] ±ÿ: renamed from lo (while UP) [ 463.197897][T18197] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 463.208110][T18198] netlink: 'syz.4.3240': attribute type 1 has an invalid length. [ 463.300525][T18199] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3240'. [ 463.314359][T18198] bond1 (unregistering): Released all slaves [ 463.426821][T18208] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 463.436237][T18208] bridge1: entered allmulticast mode [ 463.465263][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 463.474317][T18207] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 463.483418][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 463.483758][T18207] bridge2: entered allmulticast mode [ 463.498327][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 463.511045][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 463.525857][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 463.659239][T18211] lo speed is unknown, defaulting to 1000 [ 463.762937][T18221] netlink: 'syz.2.3246': attribute type 1 has an invalid length. [ 463.813335][T18222] x_tables: duplicate underflow at hook 2 [ 464.120916][T18233] netlink: 'syz.1.3251': attribute type 9 has an invalid length. [ 464.143043][T18233] netlink: 'syz.1.3251': attribute type 6 has an invalid length. [ 464.176553][T18233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3251'. [ 464.240958][ T5827] Bluetooth: hci2: command tx timeout [ 464.280291][ T5823] syz_tun (unregistering): left allmulticast mode [ 464.506542][T11310] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.661779][T11310] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.691030][T18244] syzkaller0: entered promiscuous mode [ 464.709085][T18244] syzkaller0: entered allmulticast mode [ 464.762438][T11310] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.842837][T11310] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.147480][T18211] chnl_net:caif_netlink_parms(): no params data found [ 465.306995][T18284] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3265'. [ 465.338617][T11310] bridge_slave_1: left allmulticast mode [ 465.341636][T18286] Bluetooth: MGMT ver 1.23 [ 465.346292][T11310] bridge_slave_1: left promiscuous mode [ 465.358020][T11310] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.375894][T11310] bridge_slave_0: left allmulticast mode [ 465.381850][T11310] bridge_slave_0: left promiscuous mode [ 465.388251][T11310] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.596592][ T5827] Bluetooth: hci0: command tx timeout [ 465.737647][T18305] netlink: 'syz.1.3270': attribute type 1 has an invalid length. [ 465.944958][T11310] bond4 (unregistering): (slave geneve2): Releasing backup interface [ 465.970504][T11310] team0: Port device geneve0 removed [ 466.248774][T11310] bond6 (unregistering): (slave bridge6): Removing an active aggregator [ 466.258557][T11310] bond6 (unregistering): (slave bridge6): Releasing backup interface [ 466.267764][T11310] bridge6 (unregistering): left promiscuous mode [ 466.274231][T11310] bridge6 (unregistering): left allmulticast mode [ 466.329189][T11310] bond0 (unregistering): Released all slaves [ 466.344222][T11310] bond1 (unregistering): (slave veth7): Releasing active interface [ 466.357873][T11310] bond1 (unregistering): Released all slaves [ 466.376503][T11310] bond2 (unregistering): Released all slaves [ 466.391748][T11310] bond3 (unregistering): Released all slaves [ 466.408500][T11310] bond4 (unregistering): Released all slaves [ 466.428609][T11310] bond5 (unregistering): (slave veth9): Releasing active interface [ 466.441699][T11310] bond5 (unregistering): Released all slaves [ 466.457818][T11310] bond6 (unregistering): Released all slaves [ 466.477621][T11310] bond7 (unregistering): (slave veth13): Releasing active interface [ 466.487446][T11310] bond7 (unregistering): Released all slaves [ 466.505203][T11310] bond8 (unregistering): Released all slaves [ 466.602532][T18309] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 466.618959][T18309] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 466.633128][T18309] bond2: (slave ip6gre1): making interface the new active one [ 466.661772][T18309] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 466.910080][T11310] !©9: left promiscuous mode [ 466.931477][T18329] net_ratelimit: 15 callbacks suppressed [ 466.931502][T18329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.973141][T18211] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.986434][T18211] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.995824][T18211] bridge_slave_0: entered allmulticast mode [ 467.003561][T18211] bridge_slave_0: entered promiscuous mode [ 467.041450][T11310] tipc: Disabling bearer [ 467.065173][T11310] tipc: Left network mode [ 467.071795][T18211] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.097819][T18211] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.124819][T18211] bridge_slave_1: entered allmulticast mode [ 467.146155][T18211] bridge_slave_1: entered promiscuous mode [ 467.218466][T18343] netlink: 'syz.3.3278': attribute type 3 has an invalid length. [ 467.334028][T18211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.407831][T18211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.495153][T18354] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3280'. [ 467.547991][T18356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3279'. [ 467.621332][T18358] Cannot find set identified by id 1 to match [ 467.653760][T18357] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3281'. [ 467.666986][ T5827] Bluetooth: hci0: command tx timeout [ 467.675509][T18353] siw: device registration error -23 [ 467.699635][T18211] team0: Port device team_slave_0 added [ 467.725292][T18211] team0: Port device team_slave_1 added [ 467.927152][T18211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.961740][T18211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.022861][T18211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.042865][T18382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3279'. [ 468.062751][T18383] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3285'. [ 468.088745][T18211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.108932][T18211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.138236][T18211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.153108][T18382] veth0_macvtap: left promiscuous mode [ 468.330790][T18392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3287'. [ 468.379318][T18211] hsr_slave_0: entered promiscuous mode [ 468.392386][T18211] hsr_slave_1: entered promiscuous mode [ 468.400691][T18211] debugfs: 'hsr0' already exists in 'hsr' [ 468.443009][T18211] Cannot create hsr debugfs directory [ 468.529107][T18404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3290'. [ 469.746016][ T5827] Bluetooth: hci0: command tx timeout [ 469.779800][T18461] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3298'. [ 469.954805][T18468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3301'. [ 470.015062][T18467] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 470.213713][T11310] hsr_slave_0: left promiscuous mode [ 470.230550][T11310] hsr_slave_1: left promiscuous mode [ 470.510769][T11310] team0 (unregistering): Port device team_slave_1 removed [ 470.546406][T11310] team0 (unregistering): Port device team_slave_0 removed [ 470.549442][ T6337] IPVS: starting estimator thread 0... [ 470.644077][T18485] IPVS: using max 25 ests per chain, 60000 per kthread [ 470.738540][T18483] pim6reg: entered allmulticast mode [ 470.774707][T18480] pim6reg: left allmulticast mode [ 470.986403][T18496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3309'. [ 470.995833][T18496] netlink: 'syz.3.3309': attribute type 18 has an invalid length. [ 471.155375][T18489] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 471.238677][T18506] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 471.285679][T18513] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 471.292628][T18511] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 471.303615][T18506] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 471.346487][T11310] IPVS: stop unused estimator thread 0... [ 471.471374][T18519] syz_tun: left allmulticast mode [ 471.488069][T18519] syz_tun: left promiscuous mode [ 471.493446][T18519] bridge0: port 3(syz_tun) entered disabled state [ 471.506578][T18519] bridge_slave_1: left allmulticast mode [ 471.540736][T18519] bridge_slave_1: left promiscuous mode [ 471.547653][T18519] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.563728][T18519] bridge_slave_0: left allmulticast mode [ 471.583584][T18519] bridge_slave_0: left promiscuous mode [ 471.591601][T18519] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.708511][T18211] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 471.786276][T18211] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 471.824180][ T5827] Bluetooth: hci0: command tx timeout [ 471.853237][T18211] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 471.944377][T11310] vlan5: left allmulticast mode [ 471.949311][T11310] bridge_slave_0: left allmulticast mode [ 471.988988][T11310] vlan5: left promiscuous mode [ 471.993934][T11310] bridge_slave_0: left promiscuous mode [ 472.001021][T11310] bridge0: port 2(vlan5) entered disabled state [ 472.040709][T11310] vlan2: left allmulticast mode [ 472.066348][T11310] bond0: left allmulticast mode [ 472.076200][T11310] dummy0: left allmulticast mode [ 472.091635][T11310] vlan2: left promiscuous mode [ 472.107633][T11310] bridge0: port 1(vlan2) entered disabled state [ 472.201881][T11310] bond8: left allmulticast mode [ 472.214773][T11310] vcan1: left allmulticast mode [ 472.438508][T11310] bond7 (unregistering): (slave ip6gretap2): Releasing active interface [ 472.567970][T18571] x_tables: duplicate underflow at hook 1 [ 472.643736][T11310] bond4 (unregistering): (slave geneve3): Releasing active interface [ 472.644500][T18573] __nla_validate_parse: 5 callbacks suppressed [ 472.644517][T18573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3322'. [ 472.686530][T11310] bond1 (unregistering): (slave geneve2): Releasing active interface [ 473.145457][T11310] bond0 (unregistering): left promiscuous mode [ 473.151945][T11310] dummy0: left promiscuous mode [ 473.168972][T11310] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 473.185743][T11310] bond0 (unregistering): Released all slaves [ 473.202438][T11310] bond1 (unregistering): Released all slaves [ 473.233431][T11310] bond2 (unregistering): Released all slaves [ 473.252563][T11310] bond3 (unregistering): (slave veth7): Releasing active interface [ 473.263612][T11310] bond3 (unregistering): (slave veth9): Releasing active interface [ 473.273007][T11310] bond3 (unregistering): Released all slaves [ 473.289750][T11310] bond4 (unregistering): Released all slaves [ 473.303236][T11310] bond5 (unregistering): Released all slaves [ 473.324101][T11310] bond6 (unregistering): Released all slaves [ 473.339099][T11310] bond7 (unregistering): Released all slaves [ 473.361825][T11310] bond8 (unregistering): (slave vcan1): Releasing backup interface [ 473.370527][T11310] bond8 (unregistering): Released all slaves [ 473.384924][T11310] bond9 (unregistering): Released all slaves [ 473.401736][T11310] bond11 (unregistering): Released all slaves [ 473.419918][T18211] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 473.512289][T18571] tipc: Failed to obtain node identity [ 473.536663][T18571] tipc: Enabling of bearer rejected, failed to enable media [ 473.716452][T18573] team0: Port device team_slave_0 removed [ 473.807050][T11310] tipc: Disabling bearer [ 473.822375][T11310] tipc: Left network mode [ 473.906277][ T5827] Bluetooth: hci0: command tx timeout [ 473.920962][T11310] IPVS: stopping backup sync thread 6993 ... [ 473.996639][T18608] sock: sock_set_timeout: `syz.2.3327' (pid 18608) tries to set negative timeout [ 474.109730][T18612] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3329'. [ 474.179162][T18608] netlink: 'syz.2.3327': attribute type 8 has an invalid length. [ 474.317099][T18211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.445940][T18626] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 474.498358][T18624] pim6reg: entered allmulticast mode [ 474.521872][T18211] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.553954][T18623] pim6reg: left allmulticast mode [ 474.599213][ T8988] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.606470][ T8988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.696666][ T654] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.704028][ T654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.952098][T18641] team0 (unregistering): Port device team_slave_1 removed [ 475.539274][T18211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.213863][T18680] netlink: 'syz.1.3346': attribute type 6 has an invalid length. [ 476.282375][T18686] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3346'. [ 476.964160][T18211] veth0_vlan: entered promiscuous mode [ 477.070893][T18211] veth1_vlan: entered promiscuous mode [ 477.206954][T18720] netlink: 'syz.2.3352': attribute type 6 has an invalid length. [ 477.235078][T18722] tipc: Trying to set illegal importance in message [ 477.421209][T18211] veth0_macvtap: entered promiscuous mode [ 477.457585][T18211] veth1_macvtap: entered promiscuous mode [ 477.471177][T18733] xt_hashlimit: size too large, truncated to 1048576 [ 477.530606][T18736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3358'. [ 477.547217][T11310] IPVS: stop unused estimator thread 0... [ 477.555584][T18737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3357'. [ 477.556940][T18211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.565133][T18737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3357'. [ 477.648272][T18211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.739773][T18736] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3358'. [ 477.797985][ T654] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.817988][ T654] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.964512][T18732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3355'. [ 478.020798][ T654] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.056958][ T654] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.266624][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.295924][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.386611][T18755] lo speed is unknown, defaulting to 1000 [ 478.488627][ T654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.514063][ T654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.656910][T18760] xt_socket: unknown flags 0xfc [ 478.716596][T18765] batman_adv: batadv0: Adding interface: wlan1 [ 478.744837][T18765] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.790531][T18765] batman_adv: batadv0: Interface activated: wlan1 [ 478.850221][T18765] trusted_key: syz.4.3364 sent an empty control message without MSG_MORE. [ 478.882115][T18765] syzkaller1: entered promiscuous mode [ 478.901125][T18765] syzkaller1: entered allmulticast mode [ 479.093152][T18770] lo speed is unknown, defaulting to 1000 [ 479.698527][T18800] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3374'. [ 479.826803][T18802] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 479.858080][T18802] bond1 (unregistering): Released all slaves [ 480.130512][T18818] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.154157][T18822] netlink: 'syz.0.3380': attribute type 39 has an invalid length. [ 480.172680][T18818] bridge_slave_0 (unregistering): left allmulticast mode [ 480.208819][T18818] bridge_slave_0 (unregistering): left promiscuous mode [ 480.216931][T18818] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.507423][T18823] lo speed is unknown, defaulting to 1000 [ 480.869515][T18849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3387'. [ 482.016490][T18882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3394'. [ 482.072954][T18886] pim6reg: entered allmulticast mode [ 482.097924][T18878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3392'. [ 482.880321][T18884] pim6reg: left allmulticast mode [ 483.211258][T18926] syzkaller0: entered promiscuous mode [ 483.217181][T18926] syzkaller0: entered allmulticast mode [ 483.264239][ T5830] Bluetooth: hci5: command 0x0406 tx timeout [ 483.690215][T18837] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 483.852041][T18950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3402'. [ 484.379067][T18969] syzkaller0: entered promiscuous mode [ 484.393940][T18969] syzkaller0: entered allmulticast mode [ 484.552287][T18978] Bluetooth: MGMT ver 1.23 [ 484.611632][T18978] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3409'. [ 484.798168][T18952] delete_channel: no stack [ 485.045249][T18997] netlink: 'syz.3.3414': attribute type 39 has an invalid length. [ 485.198461][T19006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3415'. [ 485.237141][T19014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3415'. [ 485.246613][T19014] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3415'. [ 485.289141][T11307] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.333735][T11307] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.366316][T11307] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.384534][T11307] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.884384][T19046] netlink: 'syz.2.3427': attribute type 1 has an invalid length. [ 486.031081][T19033] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3424'. [ 486.308439][T19068] hsr0: entered promiscuous mode [ 486.314381][T19068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3432'. [ 486.325166][T19068] hsr_slave_0: left promiscuous mode [ 486.331320][T19068] hsr_slave_1: left promiscuous mode [ 486.341518][T19068] hsr0 (unregistering): left promiscuous mode [ 486.525038][T19072] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3433'. [ 486.541008][T19072] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3433'. [ 487.376846][T19082] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 487.397209][T19082] syzkaller0: entered promiscuous mode [ 487.402947][T19082] syzkaller0: entered allmulticast mode [ 487.674855][ T6438] lec:lec_start_xmit: lec0:No lecd attached [ 487.757684][T19086] netlink: 'syz.0.3438': attribute type 10 has an invalid length. [ 487.780155][T19086] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 488.699605][T19031] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 488.953005][T19102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3443'. [ 489.026643][T19102] : renamed from veth0_to_bond (while UP) [ 489.187908][T19121] €Â: renamed from dummy0 (while UP) [ 489.615375][T19139] netlink: 'syz.3.3452': attribute type 4 has an invalid length. [ 489.659678][T19139] netlink: 'syz.3.3452': attribute type 4 has an invalid length. [ 489.681320][T19139] netlink: 'syz.3.3452': attribute type 4 has an invalid length. [ 489.769495][T19144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.906578][T19144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.072673][T19144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.178018][T19175] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3463'. [ 490.193465][T19144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.237418][T19175] Cannot find add_set index 0 as target [ 490.264848][T19175] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3463'. [ 490.276635][T19175] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3463'. [ 490.381766][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.401018][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.447953][ T654] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.477494][T19182] vlan2: entered promiscuous mode [ 490.483061][T19182] hsr0: entered promiscuous mode [ 490.495316][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.619644][T19184] pim6reg: entered allmulticast mode [ 490.630394][T19188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3468'. [ 490.638150][T19183] pim6reg: left allmulticast mode [ 490.640341][T19188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3468'. [ 490.661489][T19187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3467'. [ 491.663540][T19227] pim6reg: entered allmulticast mode [ 491.702221][ T5945] IPVS: starting estimator thread 0... [ 491.709248][T19226] pim6reg: left allmulticast mode [ 491.813952][T19228] IPVS: using max 29 ests per chain, 69600 per kthread [ 491.943231][T19236] netlink: 'syz.0.3483': attribute type 1 has an invalid length. [ 492.063216][T19244] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3483'. [ 492.080699][T19237] bond3: entered promiscuous mode [ 492.090523][T19237] 8021q: adding VLAN 0 to HW filter on device bond3 [ 492.215077][T19241] bond1: (slave geneve2): making interface the new active one [ 492.235661][T19241] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 492.327014][T19244] 8021q: adding VLAN 0 to HW filter on device bond1 [ 492.512479][T19266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3489'. [ 492.637560][ T654] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 493.023848][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5350 ms [ 493.032279][ C1] lec:lec_tx_timeout: lec0 [ 493.304051][T11310] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 493.336208][T19288] pim6reg: entered allmulticast mode [ 493.368959][T11310] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 493.385191][T19301] netlink: 'syz.1.3494': attribute type 7 has an invalid length. [ 493.396022][T11310] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 493.407086][T19301] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3494'. [ 493.417973][T19277] pim6reg: left allmulticast mode [ 493.482984][T19301] : entered promiscuous mode [ 493.913626][T19326] xt_hashlimit: max too large, truncated to 1048576 [ 493.945950][T19328] veth0_to_bridge: entered promiscuous mode [ 493.985692][T19327] veth0_to_bridge: left promiscuous mode [ 494.072318][T19339] __nla_validate_parse: 3 callbacks suppressed [ 494.072343][T19339] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3507'. [ 494.249265][T19350] @0Ù: renamed from bond_slave_1 (while UP) [ 494.558264][T19361] lo speed is unknown, defaulting to 1000 [ 495.174979][T19387] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.3515'. [ 495.468192][T19403] xt_hashlimit: max too large, truncated to 1048576 [ 496.106226][T19421] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3522'. [ 496.891716][T19426] vlan3: entered promiscuous mode [ 496.897105][T19426] geneve1: entered promiscuous mode [ 496.902615][T19426] vlan3: entered allmulticast mode [ 496.910074][T19426] geneve1: entered allmulticast mode [ 496.949166][T19428] netlink: 'syz.2.3525': attribute type 1 has an invalid length. [ 496.978119][T19428] 8021q: adding VLAN 0 to HW filter on device bond1 [ 496.987988][T19428] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3525'. [ 497.019463][T19334] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 497.102484][T19431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.262230][T19436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3530'. [ 499.433600][T19533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3545'. [ 499.586449][T19545] netlink: 'syz.2.3547': attribute type 1 has an invalid length. [ 499.606585][T19545] netlink: 'syz.2.3547': attribute type 2 has an invalid length. [ 499.649452][T19545] !: entered promiscuous mode [ 499.838613][T19554] netlink: 'syz.0.3550': attribute type 1 has an invalid length. [ 499.906790][T19554] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3550'. [ 499.932872][T19554] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3550'. [ 499.941501][T19557] netlink: 'syz.3.3552': attribute type 10 has an invalid length. [ 500.097257][T19565] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3553'. [ 500.118492][T19565] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3553'. [ 500.239405][T19567] syzkaller0: entered promiscuous mode [ 500.254005][T19567] syzkaller0: entered allmulticast mode [ 500.434875][ T5825] IPVS: starting estimator thread 0... [ 500.466756][T19580] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3556'. [ 500.564477][T19578] IPVS: using max 28 ests per chain, 67200 per kthread [ 500.733460][T19585] vlan4: entered promiscuous mode [ 500.749850][T19585] vlan4: entered allmulticast mode [ 500.758328][T19585] hsr_slave_1: entered allmulticast mode [ 501.001274][T19603] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3564'. [ 501.055730][T19603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3564'. [ 501.107989][T19603] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3564'. [ 501.139636][T19611] netlink: 'syz.0.3566': attribute type 1 has an invalid length. [ 501.165638][T19603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3564'. [ 501.175132][T19611] netlink: 'syz.0.3566': attribute type 4 has an invalid length. [ 501.246447][T19613] netlink: 'syz.0.3566': attribute type 7 has an invalid length. [ 501.266563][T19613] netlink: 'syz.0.3566': attribute type 8 has an invalid length. [ 501.614245][T19637] netlink: 'syz.2.3571': attribute type 12 has an invalid length. [ 501.683683][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 501.848505][T19647] lo speed is unknown, defaulting to 1000 [ 503.086648][T19673] FAULT_INJECTION: forcing a failure. [ 503.086648][T19673] name failslab, interval 1, probability 0, space 0, times 0 [ 503.100209][T19673] CPU: 1 UID: 0 PID: 19673 Comm: syz.3.3579 Not tainted syzkaller #0 PREEMPT(full) [ 503.100238][T19673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 503.100249][T19673] Call Trace: [ 503.100258][T19673] [ 503.100267][T19673] dump_stack_lvl+0xe8/0x150 [ 503.100298][T19673] should_fail_ex+0x412/0x560 [ 503.100319][T19673] should_failslab+0xa8/0x100 [ 503.100336][T19673] __kmalloc_cache_noprof+0x88/0x660 [ 503.100351][T19673] ? j1939_ecu_create_locked+0xcf/0x310 [ 503.100371][T19673] j1939_ecu_create_locked+0xcf/0x310 [ 503.100387][T19673] ? j1939_ecu_get_by_name_locked+0x139/0x230 [ 503.100405][T19673] j1939_local_ecu_get+0xbb/0x200 [ 503.100430][T19673] j1939_sk_bind+0x724/0xc70 [ 503.100453][T19673] __sys_bind+0x2e3/0x410 [ 503.100469][T19673] ? __pfx___sys_bind+0x10/0x10 [ 503.100488][T19673] ? __pfx_ksys_write+0x10/0x10 [ 503.100505][T19673] __x64_sys_bind+0x7a/0x90 [ 503.100527][T19673] do_syscall_64+0x14d/0xf80 [ 503.100544][T19673] ? trace_irq_disable+0x3b/0x150 [ 503.100554][T19673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.100567][T19673] ? clear_bhb_loop+0x40/0x90 [ 503.100581][T19673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.100593][T19673] RIP: 0033:0x7fd58a59c819 [ 503.100606][T19673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.100618][T19673] RSP: 002b:00007fd58b3c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 503.100632][T19673] RAX: ffffffffffffffda RBX: 00007fd58a815fa0 RCX: 00007fd58a59c819 [ 503.100641][T19673] RDX: 0000000000000018 RSI: 0000200000000000 RDI: 0000000000000003 [ 503.100649][T19673] RBP: 00007fd58b3c2090 R08: 0000000000000000 R09: 0000000000000000 [ 503.100656][T19673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.100664][T19673] R13: 00007fd58a816038 R14: 00007fd58a815fa0 R15: 00007fff22df1e68 [ 503.100682][T19673] [ 504.413517][T19638] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 505.009417][T19723] __nla_validate_parse: 8 callbacks suppressed [ 505.009435][T19723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3596'. [ 505.030095][T19723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3596'. [ 507.023971][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5340 ms [ 507.032035][ C1] lec:lec_tx_timeout: lec0 [ 549.100003][T19752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3601'. [ 549.109977][T19752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3601'. [ 549.119701][T19749] netlink: 'syz.2.3599': attribute type 1 has an invalid length. [ 549.247698][T19749] bond2: entered promiscuous mode [ 549.253316][T19749] 8021q: adding VLAN 0 to HW filter on device bond2 [ 549.287099][T19757] syz_tun: entered allmulticast mode [ 549.358834][T19771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3600'. [ 549.367972][T19771] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3600'. [ 549.550722][T19749] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3599'. [ 549.575878][T19749] bond2: entered allmulticast mode [ 549.684466][T19749] bond2: (slave bridge3): making interface the new active one [ 549.717562][T19749] bridge3: entered promiscuous mode [ 549.742057][T19749] bridge3: entered allmulticast mode [ 549.763952][T19749] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 549.880693][T19790] netlink: 'syz.1.3605': attribute type 1 has an invalid length. [ 550.511852][T19812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3611'. [ 550.597284][T19814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3612'. [ 550.669768][T19812] 8021q: adding VLAN 0 to HW filter on device bond4 [ 550.750547][T19814] 8021q: adding VLAN 0 to HW filter on device bond2 [ 550.779177][T19818] macsec1: entered promiscuous mode [ 550.790898][T19825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3614'. [ 550.800242][T19825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3614'. [ 550.803196][T19818] bond4: (slave macsec1): Error -34 calling dev_set_mtu [ 550.811340][T19825] netlink: 'syz.2.3614': attribute type 15 has an invalid length. [ 550.846066][T19825] netlink: 'syz.2.3614': attribute type 18 has an invalid length. [ 550.884543][T19822] bond2: entered promiscuous mode [ 550.889928][T19822] bond2: entered allmulticast mode [ 550.901578][T19822] 8021q: adding VLAN 0 to HW filter on device bond2 [ 550.906122][T19829] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3616'. [ 550.921539][T19822] team0: Port device bond2 added [ 551.013323][T19823] ip6gretap1: entered promiscuous mode [ 551.025384][T19823] ip6gretap1: entered allmulticast mode [ 551.037529][T19823] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 551.203139][T19840] FAULT_INJECTION: forcing a failure. [ 551.203139][T19840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.253635][T19840] CPU: 0 UID: 0 PID: 19840 Comm: syz.1.3618 Not tainted syzkaller #0 PREEMPT(full) [ 551.253669][T19840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 551.253681][T19840] Call Trace: [ 551.253689][T19840] [ 551.253699][T19840] dump_stack_lvl+0xe8/0x150 [ 551.253736][T19840] should_fail_ex+0x412/0x560 [ 551.253776][T19840] _copy_to_iter+0x404/0x17d0 [ 551.253806][T19840] ? kasan_quarantine_put+0xbb/0x1f0 [ 551.253841][T19840] ? __pfx__copy_to_iter+0x10/0x10 [ 551.253868][T19840] ? proc_cgroup_show+0x6ec/0x740 [ 551.253892][T19840] ? proc_cgroup_show+0x6e/0x740 [ 551.253921][T19840] ? proc_single_show+0x15b/0x190 [ 551.253949][T19840] seq_read_iter+0xbf5/0xe10 [ 551.253996][T19840] seq_read+0x367/0x480 [ 551.254028][T19840] ? __pfx_seq_read+0x10/0x10 [ 551.254065][T19840] ? rw_verify_area+0x2a6/0x4d0 [ 551.254096][T19840] ? __pfx_seq_read+0x10/0x10 [ 551.254120][T19840] vfs_read+0x20c/0xa70 [ 551.254140][T19840] ? fdget_pos+0x246/0x320 [ 551.254157][T19840] ? ksys_write+0x1e6/0x270 [ 551.254184][T19840] ? __pfx___mutex_lock+0x10/0x10 [ 551.254216][T19840] ? __pfx_vfs_read+0x10/0x10 [ 551.254241][T19840] ? __fget_files+0x2a/0x420 [ 551.254275][T19840] ? __fget_files+0x3a0/0x420 [ 551.254302][T19840] ? __fget_files+0x2a/0x420 [ 551.254342][T19840] ksys_read+0x150/0x270 [ 551.254366][T19840] ? __pfx_ksys_read+0x10/0x10 [ 551.254398][T19840] do_syscall_64+0x14d/0xf80 [ 551.254422][T19840] ? trace_irq_disable+0x3b/0x150 [ 551.254439][T19840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.254459][T19840] ? clear_bhb_loop+0x40/0x90 [ 551.254485][T19840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.254506][T19840] RIP: 0033:0x7f0b0459c819 [ 551.254527][T19840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.254545][T19840] RSP: 002b:00007f0b0549f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 551.254568][T19840] RAX: ffffffffffffffda RBX: 00007f0b04816090 RCX: 00007f0b0459c819 [ 551.254582][T19840] RDX: 00000000000000c4 RSI: 0000200000000200 RDI: 0000000000000007 [ 551.254594][T19840] RBP: 00007f0b0549f090 R08: 0000000000000000 R09: 0000000000000000 [ 551.254606][T19840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.254618][T19840] R13: 00007f0b04816128 R14: 00007f0b04816090 R15: 00007fff677f9678 [ 551.254653][T19840] [ 552.188101][ T6438] lec:lec_start_xmit: lec0:No lecd attached [ 553.130652][T19924] lo speed is unknown, defaulting to 1000 [ 553.534298][T19951] FAULT_INJECTION: forcing a failure. [ 553.534298][T19951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.547611][T19951] CPU: 0 UID: 0 PID: 19951 Comm: syz.1.3637 Not tainted syzkaller #0 PREEMPT(full) [ 553.547643][T19951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 553.547655][T19951] Call Trace: [ 553.547664][T19951] [ 553.547672][T19951] dump_stack_lvl+0xe8/0x150 [ 553.547710][T19951] should_fail_ex+0x412/0x560 [ 553.547745][T19951] _copy_to_user+0x31/0xb0 [ 553.547771][T19951] simple_read_from_buffer+0xe1/0x170 [ 553.547815][T19951] proc_fail_nth_read+0x1bb/0x230 [ 553.547850][T19951] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 553.547883][T19951] ? rw_verify_area+0x2a6/0x4d0 [ 553.547905][T19951] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 553.547936][T19951] vfs_read+0x20c/0xa70 [ 553.547957][T19951] ? fdget_pos+0x246/0x320 [ 553.547975][T19951] ? ksys_read+0x1e6/0x270 [ 553.548000][T19951] ? __pfx___mutex_lock+0x10/0x10 [ 553.548033][T19951] ? __pfx_vfs_read+0x10/0x10 [ 553.548056][T19951] ? __fget_files+0x2a/0x420 [ 553.548090][T19951] ? __fget_files+0x3a0/0x420 [ 553.548118][T19951] ? __fget_files+0x2a/0x420 [ 553.548158][T19951] ksys_read+0x150/0x270 [ 553.548183][T19951] ? __pfx_ksys_read+0x10/0x10 [ 553.548218][T19951] do_syscall_64+0x14d/0xf80 [ 553.548246][T19951] ? trace_irq_disable+0x3b/0x150 [ 553.548263][T19951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.548284][T19951] ? clear_bhb_loop+0x40/0x90 [ 553.548310][T19951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.548329][T19951] RIP: 0033:0x7f0b0455d04e [ 553.548351][T19951] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 553.548368][T19951] RSP: 002b:00007f0b0549efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 553.548393][T19951] RAX: ffffffffffffffda RBX: 00007f0b0549f6c0 RCX: 00007f0b0455d04e [ 553.548408][T19951] RDX: 000000000000000f RSI: 00007f0b0549f0a0 RDI: 0000000000000008 [ 553.548420][T19951] RBP: 00007f0b0549f090 R08: 0000000000000000 R09: 0000000000000000 [ 553.548433][T19951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.548446][T19951] R13: 00007f0b04816128 R14: 00007f0b04816090 R15: 00007fff677f9678 [ 553.548480][T19951] [ 554.076808][T19958] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 554.135627][ T29] audit: type=1800 audit(1775030497.711:10): pid=19949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3635" name="memory.events" dev="tmpfs" ino=552 res=0 errno=0 [ 554.186573][T19970] FAULT_INJECTION: forcing a failure. [ 554.186573][T19970] name failslab, interval 1, probability 0, space 0, times 0 [ 554.204120][T19970] CPU: 0 UID: 0 PID: 19970 Comm: syz.1.3642 Not tainted syzkaller #0 PREEMPT(full) [ 554.204153][T19970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 554.204166][T19970] Call Trace: [ 554.204174][T19970] [ 554.204183][T19970] dump_stack_lvl+0xe8/0x150 [ 554.204223][T19970] should_fail_ex+0x412/0x560 [ 554.204261][T19970] should_failslab+0xa8/0x100 [ 554.204288][T19970] ? dst_alloc+0x105/0x170 [ 554.204318][T19970] kmem_cache_alloc_noprof+0x87/0x650 [ 554.204341][T19970] ? __pfx_find_exception+0x10/0x10 [ 554.204374][T19970] dst_alloc+0x105/0x170 [ 554.204407][T19970] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 554.204433][T19970] ? ip_route_output_key_hash_rcu+0x12c1/0x25d0 [ 554.204467][T19970] ? ip_route_output_key_hash+0xd8/0x2a0 [ 554.204494][T19970] ip_route_output_key_hash+0x18d/0x2a0 [ 554.204523][T19970] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 554.204554][T19970] ? crng_fast_key_erasure+0x196/0x270 [ 554.204585][T19970] ? __pfx_crng_fast_key_erasure+0x10/0x10 [ 554.204616][T19970] ip_route_output_flow+0x2a/0x150 [ 554.204644][T19970] sctp_v4_get_dst+0x3f8/0x12b0 [ 554.204675][T19970] ? crng_make_state+0x2c5/0x600 [ 554.204700][T19970] ? lockdep_hardirqs_on+0x7a/0x110 [ 554.204730][T19970] ? crng_make_state+0x36a/0x600 [ 554.204761][T19970] ? __pfx_sctp_v4_get_dst+0x10/0x10 [ 554.204787][T19970] ? _get_random_bytes+0x1e7/0x260 [ 554.204832][T19970] ? dst_release+0x72/0x1b0 [ 554.204863][T19970] sctp_transport_route+0x118/0x2f0 [ 554.204898][T19970] sctp_assoc_add_peer+0x650/0x13b0 [ 554.204934][T19970] sctp_connect_new_asoc+0x329/0x6b0 [ 554.204962][T19970] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 554.204992][T19970] ? sctp_get_af_specific+0x29/0x80 [ 554.205019][T19970] ? sctp_inet6_send_verify+0x80/0x300 [ 554.205046][T19970] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 554.205079][T19970] __sctp_connect+0x5cb/0xdc0 [ 554.205116][T19970] ? __pfx___sctp_connect+0x10/0x10 [ 554.205137][T19970] ? security_sctp_bind_connect+0x7e/0x2c0 [ 554.205168][T19970] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 554.205200][T19970] sctp_getsockopt_connectx3+0x227/0x360 [ 554.205233][T19970] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 554.205268][T19970] ? sctp_getsockopt+0x12f/0xb90 [ 554.205291][T19970] ? __local_bh_enable_ip+0xd0/0x130 [ 554.205325][T19970] sctp_getsockopt+0x984/0xb90 [ 554.205345][T19970] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 554.205369][T19970] do_sock_getsockopt+0x2d3/0x3f0 [ 554.205399][T19970] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 554.205430][T19970] ? ksys_write+0x1fc/0x270 [ 554.205459][T19970] __x64_sys_getsockopt+0x1a4/0x240 [ 554.205496][T19970] do_syscall_64+0x14d/0xf80 [ 554.205523][T19970] ? trace_irq_disable+0x3b/0x150 [ 554.205541][T19970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.205562][T19970] ? clear_bhb_loop+0x40/0x90 [ 554.205587][T19970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.205608][T19970] RIP: 0033:0x7f0b0459c819 [ 554.205628][T19970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.205646][T19970] RSP: 002b:00007f0b054c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 554.205670][T19970] RAX: ffffffffffffffda RBX: 00007f0b04815fa0 RCX: 00007f0b0459c819 [ 554.205685][T19970] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 554.205698][T19970] RBP: 00007f0b054c0090 R08: 0000200000000440 R09: 0000000000000000 [ 554.205711][T19970] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 554.205724][T19970] R13: 00007f0b04816038 R14: 00007f0b04815fa0 R15: 00007fff677f9678 [ 554.205778][T19970] [ 554.859692][T19981] __nla_validate_parse: 2 callbacks suppressed [ 554.859715][T19981] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3645'. [ 554.945451][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 555.009766][T19977] mac80211_hwsim hwsim46 wlan1: entered allmulticast mode [ 555.125809][T19977] syzkaller0: entered promiscuous mode [ 555.143979][T19977] syzkaller0: entered allmulticast mode [ 555.856390][T20014] gretap1: entered allmulticast mode [ 556.069921][T20032] FAULT_INJECTION: forcing a failure. [ 556.069921][T20032] name failslab, interval 1, probability 0, space 0, times 0 [ 556.084111][T20032] CPU: 1 UID: 0 PID: 20032 Comm: syz.2.3654 Not tainted syzkaller #0 PREEMPT(full) [ 556.084143][T20032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 556.084155][T20032] Call Trace: [ 556.084165][T20032] [ 556.084173][T20032] dump_stack_lvl+0xe8/0x150 [ 556.084211][T20032] should_fail_ex+0x412/0x560 [ 556.084244][T20032] should_failslab+0xa8/0x100 [ 556.084271][T20032] __kmalloc_cache_noprof+0x88/0x660 [ 556.084296][T20032] ? sctp_add_bind_addr+0x8c/0x370 [ 556.084332][T20032] sctp_add_bind_addr+0x8c/0x370 [ 556.084365][T20032] sctp_copy_local_addr_list+0x314/0x4f0 [ 556.084398][T20032] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 556.084425][T20032] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 556.084456][T20032] ? sctp_v6_is_any+0x64/0x80 [ 556.084487][T20032] ? sctp_copy_one_addr+0x93/0x360 [ 556.084518][T20032] sctp_bind_addr_copy+0xb3/0x3c0 [ 556.084547][T20032] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 556.084577][T20032] sctp_connect_new_asoc+0x2ff/0x6b0 [ 556.084603][T20032] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 556.084628][T20032] ? sctp_get_af_specific+0x29/0x80 [ 556.084653][T20032] ? sctp_inet6_send_verify+0x80/0x300 [ 556.084678][T20032] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 556.084703][T20032] __sctp_connect+0x5cb/0xdc0 [ 556.084735][T20032] ? __pfx___sctp_connect+0x10/0x10 [ 556.084756][T20032] ? security_sctp_bind_connect+0x7e/0x2c0 [ 556.084795][T20032] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 556.084825][T20032] sctp_getsockopt_connectx3+0x227/0x360 [ 556.084859][T20032] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 556.084892][T20032] ? sctp_getsockopt+0x12f/0xb90 [ 556.084914][T20032] ? __local_bh_enable_ip+0xd0/0x130 [ 556.084946][T20032] sctp_getsockopt+0x984/0xb90 [ 556.084964][T20032] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 556.084989][T20032] do_sock_getsockopt+0x2d3/0x3f0 [ 556.085017][T20032] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 556.085047][T20032] ? ksys_write+0x1fc/0x270 [ 556.085081][T20032] __x64_sys_getsockopt+0x1a4/0x240 [ 556.085116][T20032] do_syscall_64+0x14d/0xf80 [ 556.085142][T20032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.085162][T20032] ? clear_bhb_loop+0x40/0x90 [ 556.085186][T20032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.085205][T20032] RIP: 0033:0x7f4690d9c819 [ 556.085226][T20032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.085246][T20032] RSP: 002b:00007f468efee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 556.085269][T20032] RAX: ffffffffffffffda RBX: 00007f4691015fa0 RCX: 00007f4690d9c819 [ 556.085284][T20032] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 556.085295][T20032] RBP: 00007f468efee090 R08: 0000200000000440 R09: 0000000000000000 [ 556.085307][T20032] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 556.085319][T20032] R13: 00007f4691016038 R14: 00007f4691015fa0 R15: 00007ffd1a54a488 [ 556.085348][T20032] [ 556.541933][T20036] team_slave_0: entered promiscuous mode [ 556.547738][T20036] team_slave_1: entered promiscuous mode [ 556.554335][T20036] vlan6: entered promiscuous mode [ 556.559401][T20036] team0: entered promiscuous mode [ 556.706169][T20040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.744937][T20038] syzkaller0: create flow: hash 1456357051 index 1 [ 556.754345][ T5825] syzkaller0: tun_net_xmit 76 [ 556.794280][ T5945] syzkaller0: tun_net_xmit 76 [ 557.203920][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 557.211969][ C1] lec:lec_tx_timeout: lec0 [ 557.324862][ T5945] syzkaller0: tun_net_xmit 76 [ 557.483270][T20037] syzkaller0: delete flow: hash 1456357051 index 2 [ 558.535018][T20004] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 559.587882][T20047] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 559.846784][T20082] lo speed is unknown, defaulting to 1000 [ 560.083714][T20096] FAULT_INJECTION: forcing a failure. [ 560.083714][T20096] name failslab, interval 1, probability 0, space 0, times 0 [ 560.129296][T20101] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3667'. [ 560.149340][T20096] CPU: 1 UID: 0 PID: 20096 Comm: syz.2.3665 Not tainted syzkaller #0 PREEMPT(full) [ 560.149381][T20096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 560.149394][T20096] Call Trace: [ 560.149403][T20096] [ 560.149412][T20096] dump_stack_lvl+0xe8/0x150 [ 560.149449][T20096] should_fail_ex+0x412/0x560 [ 560.149485][T20096] should_failslab+0xa8/0x100 [ 560.149514][T20096] __kmalloc_cache_noprof+0x88/0x660 [ 560.149539][T20096] ? sctp_add_bind_addr+0x8c/0x370 [ 560.149575][T20096] sctp_add_bind_addr+0x8c/0x370 [ 560.149609][T20096] sctp_copy_local_addr_list+0x314/0x4f0 [ 560.149642][T20096] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 560.149680][T20096] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 560.149709][T20096] ? sctp_v6_is_any+0x64/0x80 [ 560.149740][T20096] ? sctp_copy_one_addr+0x93/0x360 [ 560.149772][T20096] sctp_bind_addr_copy+0xb3/0x3c0 [ 560.149802][T20096] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 560.149849][T20096] sctp_connect_new_asoc+0x2ff/0x6b0 [ 560.149875][T20096] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 560.149904][T20096] ? sctp_get_af_specific+0x29/0x80 [ 560.149999][T20096] ? sctp_inet6_send_verify+0x80/0x300 [ 560.150036][T20096] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 560.150062][T20096] __sctp_connect+0x5cb/0xdc0 [ 560.150098][T20096] ? __pfx___sctp_connect+0x10/0x10 [ 560.150119][T20096] ? security_sctp_bind_connect+0x7e/0x2c0 [ 560.150149][T20096] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 560.150178][T20096] sctp_getsockopt_connectx3+0x227/0x360 [ 560.150210][T20096] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 560.150241][T20096] ? sctp_getsockopt+0x12f/0xb90 [ 560.150264][T20096] ? __local_bh_enable_ip+0xd0/0x130 [ 560.150296][T20096] sctp_getsockopt+0x984/0xb90 [ 560.150316][T20096] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 560.150340][T20096] do_sock_getsockopt+0x2d3/0x3f0 [ 560.150378][T20096] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 560.150409][T20096] ? ksys_write+0x1fc/0x270 [ 560.150437][T20096] __x64_sys_getsockopt+0x1a4/0x240 [ 560.150481][T20096] do_syscall_64+0x14d/0xf80 [ 560.150517][T20096] ? trace_irq_disable+0x3b/0x150 [ 560.150545][T20096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.150566][T20096] ? clear_bhb_loop+0x40/0x90 [ 560.150592][T20096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.150613][T20096] RIP: 0033:0x7f4690d9c819 [ 560.150635][T20096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.150654][T20096] RSP: 002b:00007f468efee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 560.150690][T20096] RAX: ffffffffffffffda RBX: 00007f4691015fa0 RCX: 00007f4690d9c819 [ 560.150705][T20096] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 560.150717][T20096] RBP: 00007f468efee090 R08: 0000200000000440 R09: 0000000000000000 [ 560.150739][T20096] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 560.150752][T20096] R13: 00007f4691016038 R14: 00007f4691015fa0 R15: 00007ffd1a54a488 [ 560.150787][T20096] [ 560.173904][T20100] netlink: 'syz.3.3666': attribute type 1 has an invalid length. [ 560.514981][T20100] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.3666'. [ 560.594043][T20110] veth0_virt_wifi: entered allmulticast mode [ 561.181034][T20140] netlink: 'syz.0.3675': attribute type 5 has an invalid length. [ 561.237150][T20140] netlink: 'syz.0.3675': attribute type 5 has an invalid length. [ 561.272820][T20140] netlink: 'syz.0.3675': attribute type 5 has an invalid length. [ 561.284761][T20140] netlink: 'syz.0.3675': attribute type 5 has an invalid length. [ 561.293165][T20140] netlink: 'syz.0.3675': attribute type 5 has an invalid length. [ 561.302048][T20140] netlink: 'syz.0.3675': attribute type 5 has an invalid length. [ 561.341218][T20140] netlink: 'syz.0.3675': attribute type 5 has an invalid length. [ 561.356137][T20140] netlink: 'syz.0.3675': attribute type 5 has an invalid length. [ 561.366182][T20140] netlink: 'syz.0.3675': attribute type 5 has an invalid length. [ 561.374197][T20145] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3676'. [ 561.386009][T20145] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3676'. [ 561.668687][T20154] Dead loop on virtual device ip6_vti0, fix it urgently! [ 561.679296][T20150] Dead loop on virtual device ip6_vti0, fix it urgently! [ 562.704670][ C0] Dead loop on virtual device ip6_vti0, fix it urgently! [ 562.796131][T20182] ip6gre0: entered allmulticast mode [ 563.129835][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 563.332311][T20199] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3692'. [ 563.385420][T20199] tap0: tun_chr_ioctl cmd 1074025676 [ 563.390780][T20199] tap0: owner set to 0 [ 563.410627][T20203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3695'. [ 563.424343][T20203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3695'. [ 563.437231][T20203] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3695'. [ 563.503542][T20205] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3696'. [ 564.018492][T20226] lo speed is unknown, defaulting to 1000 [ 564.244649][T20240] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3709'. [ 564.670353][T20253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.784293][ C0] Dead loop on virtual device ip6_vti0, fix it urgently! [ 564.791974][ T5830] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 565.153903][T20226] lo speed is unknown, defaulting to 1000 [ 565.172572][T20235] __nla_validate_parse: 3 callbacks suppressed [ 565.172594][T20235] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3704'. [ 565.179439][T20273] batman_adv: batadv0: Interface deactivated: wlan1 [ 565.198275][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 565.240427][T20235] openvswitch: netlink: IPv4 tunnel dst address is zero [ 565.244318][T20273] batman_adv: batadv0: Removing interface: wlan1 [ 565.279998][T20273] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 565.502521][T20277] syzkaller0: entered promiscuous mode [ 565.508835][T20277] syzkaller0: entered allmulticast mode [ 565.747318][T20298] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3725'. [ 565.757416][T20298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3725'. [ 567.562272][T20298] geneve1: entered promiscuous mode [ 567.568830][T20298] macsec1: entered promiscuous mode [ 567.576201][T20298] macsec1: entered allmulticast mode [ 567.582376][T20298] geneve1: entered allmulticast mode [ 567.720483][T20314] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3726'. [ 567.792965][T20310] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3726'. [ 567.837407][T20316] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3729'. [ 568.073522][T20327] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3732'. [ 568.143854][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 568.151955][ C1] lec:lec_tx_timeout: lec0 [ 568.257011][T20332] validate_nla: 31 callbacks suppressed [ 568.257038][T20332] netlink: 'syz.1.3734': attribute type 298 has an invalid length. [ 568.538197][T20345] openvswitch: netlink: Invalid VLAN frame [ 568.594084][T20345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3738'. [ 568.718909][T20352] vlan3: entered promiscuous mode [ 568.807367][T20352] geneve1: entered promiscuous mode [ 568.813047][T20352] vlan3: entered allmulticast mode [ 568.820857][T20352] geneve1: entered allmulticast mode [ 569.054193][T20369] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 569.080746][T20367] lo speed is unknown, defaulting to 1000 [ 569.119963][T20369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3742'. [ 569.318093][T20388] xt_ecn: cannot match TCP bits for non-tcp packets [ 569.373318][T20388] netlink: 212916 bytes leftover after parsing attributes in process `syz.4.3749'. [ 570.341663][T20416] lo speed is unknown, defaulting to 1000 [ 570.568694][T20421] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3757'. [ 570.582051][T20429] syzkaller0: entered promiscuous mode [ 570.588624][T20429] syzkaller0: entered allmulticast mode [ 571.026358][T20439] lo speed is unknown, defaulting to 1000 [ 571.785711][T20462] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.815289][T20464] netlink: 'syz.4.3767': attribute type 13 has an invalid length. [ 571.823176][T20464] netlink: 'syz.4.3767': attribute type 17 has an invalid length. [ 571.941322][T20462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.958352][T20462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.979925][T20471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3769'. [ 572.078869][T20462] hsr0: left allmulticast mode [ 572.084792][T20462] hsr_slave_0: left allmulticast mode [ 572.090376][T20462] hsr_slave_1: left allmulticast mode [ 572.110325][T20462] geneve1: left allmulticast mode [ 572.201799][T20464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.210441][T20464] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.221378][T20464] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 572.253968][ T1155] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.262834][ T1155] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.275238][ T8982] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.306908][ T8982] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.956212][T20504] netlink: 'syz.3.3780': attribute type 1 has an invalid length. [ 572.994205][T20504] netlink: 'syz.3.3780': attribute type 3 has an invalid length. [ 573.002037][T20504] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3780'. [ 573.151677][T20513] lo speed is unknown, defaulting to 1000 [ 573.181446][T20518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.839021][T20550] netlink: 'syz.0.3795': attribute type 10 has an invalid length. [ 573.878471][T20550] team0: Port device netdevsim0 added [ 574.108124][T20560] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3798'. [ 574.173987][T20560] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3798'. [ 574.373106][T20569] lo speed is unknown, defaulting to 1000 [ 616.047131][ T6438] lec:lec_start_xmit: lec0:No lecd attached [ 621.053833][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 621.061882][ C1] lec:lec_tx_timeout: lec0 [ 624.551635][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 626.624210][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 627.954363][T20643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3807'. [ 627.995251][T20645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3808'. [ 628.010834][T20643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3807'. [ 628.157050][T20658] netlink: 'syz.4.3813': attribute type 298 has an invalid length. [ 628.162751][T20660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3812'. [ 628.565701][T20661] tipc: Started in network mode [ 628.584285][T20661] tipc: Node identity eef49f3fc2cd, cluster identity 4711 [ 628.627703][T20661] tipc: Enabled bearer , priority 0 [ 628.854384][T20663] syzkaller0: entered promiscuous mode [ 628.859932][T20663] syzkaller0: entered allmulticast mode [ 628.885090][T20650] tipc: Resetting bearer [ 628.964984][T20650] tipc: Disabling bearer [ 629.483466][T20685] tipc: Enabling of bearer rejected, failed to enable media [ 629.528679][T20685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3816'. [ 629.937452][T20700] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 630.050714][T20709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3823'. [ 630.063818][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5510 ms [ 630.071932][ C1] lec:lec_tx_timeout: lec0 [ 630.542744][T20722] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 630.551661][T20722] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 630.559905][T20722] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 630.568059][T20722] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 630.576250][T20722] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 630.584364][T20722] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 630.592371][T20722] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 630.600430][T20722] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 630.601965][T20736] pim6reg1: entered allmulticast mode [ 630.608611][T20722] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 630.792678][T20744] netlink: 'syz.2.3832': attribute type 1 has an invalid length. [ 630.863961][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 631.001689][T20759] netlink: 'syz.1.3836': attribute type 89 has an invalid length. [ 631.296343][T20766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3836'. [ 631.388705][T20766] ip6erspan1: entered allmulticast mode [ 631.544299][T20787] lo speed is unknown, defaulting to 1000 [ 631.620775][T20790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3843'. [ 631.680678][T20790] team0: Port device team_slave_0 removed [ 631.969453][T20797] geneve3: entered promiscuous mode [ 631.991094][T20797] geneve3: entered allmulticast mode [ 632.048565][T20809] vlan2: entered promiscuous mode [ 632.053998][T20809] bridge0: entered promiscuous mode [ 632.122421][T20813] vxcan0: entered allmulticast mode [ 632.530061][T20825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3852'. [ 632.539587][T20825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3852'. [ 633.106781][T20854] netlink: 'syz.3.3861': attribute type 89 has an invalid length. [ 634.808546][T20796] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 634.822158][T20854] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3861'. [ 635.056337][T20868] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3864'. [ 635.117623][T20863] lo speed is unknown, defaulting to 1000 [ 635.216100][T20878] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3862'. [ 635.240680][T20878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3862'. [ 635.298946][T20883] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.3863'. [ 635.418537][T20885] bridge1: entered promiscuous mode [ 635.434021][T20885] bridge1: entered allmulticast mode [ 636.046879][T20899] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3875'. [ 636.056250][T20899] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3875'. [ 636.861925][T20922] tipc: Started in network mode [ 636.893853][T20922] tipc: Node identity 4a4605590e0e, cluster identity 4711 [ 636.901302][T20922] tipc: Enabled bearer , priority 0 [ 637.057105][T20921] tipc: Disabling bearer [ 637.273343][T20943] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3885'. [ 637.807998][T20973] sit1: entered allmulticast mode [ 638.429564][T20984] lo speed is unknown, defaulting to 1000 [ 638.478399][T20986] net_ratelimit: 45 callbacks suppressed [ 638.478423][T20986] netlink: zone id is out of range [ 638.489956][T20986] netlink: zone id is out of range [ 638.510506][T20986] netlink: zone id is out of range [ 638.524129][T20986] netlink: zone id is out of range [ 638.545434][T20986] netlink: zone id is out of range [ 638.573620][T20986] netlink: zone id is out of range [ 638.604138][T20986] netlink: zone id is out of range [ 638.611931][T20986] netlink: zone id is out of range [ 638.611947][ T6337] IPVS: starting estimator thread 0... [ 638.677180][T20996] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 638.704888][T20986] netlink: zone id is out of range [ 638.812302][T20991] lo speed is unknown, defaulting to 1000 [ 638.853951][T20994] IPVS: using max 30 ests per chain, 72000 per kthread [ 639.147143][T21006] veth0_to_batadv: entered promiscuous mode [ 639.155483][T21006] veth0_to_batadv: entered allmulticast mode [ 639.199332][T21011] netlink: 'syz.1.3906': attribute type 33 has an invalid length. [ 639.286126][T21008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3905'. [ 640.794351][T21067] netlink: 'syz.0.3918': attribute type 4 has an invalid length. [ 640.870041][T21067] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3918'. [ 641.028064][ T29] audit: type=1107 audit(1775030584.601:11): pid=21075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 641.107401][T21081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3923'. [ 641.325241][T21091] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3926'. [ 641.536195][T21102] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.3930'. [ 642.375859][T21128] sctp: [Deprecated]: syz.3.3933 (pid 21128) Use of struct sctp_assoc_value in delayed_ack socket option. [ 642.375859][T21128] Use struct sctp_sack_info instead [ 642.402910][T21131] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3935'. [ 642.786918][T21150] bond2 (unregistering): Released all slaves [ 642.979536][T21159] vti0: entered promiscuous mode [ 643.218681][T21173] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3945'. [ 643.425299][T21181] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 643.475943][T21177] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3947'. [ 643.604297][T21190] tipc: Enabled bearer , priority 0 [ 643.710232][T21191] syzkaller0: entered promiscuous mode [ 643.732691][T21191] syzkaller0: entered allmulticast mode [ 643.746914][T21191] tipc: Resetting bearer [ 643.826327][T21208] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3953'. [ 643.856964][T21207] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3953'. [ 643.872304][ T1155] tipc: Resetting bearer [ 643.897033][T21191] tipc: Resetting bearer [ 645.928330][T21191] tipc: Disabling bearer [ 645.970065][T21214] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 645.993369][ T6341] tipc: Node number set to 741973823 [ 646.117234][T21237] netlink: 'syz.1.3960': attribute type 2 has an invalid length. [ 646.233446][T21244] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.3963'. [ 646.248973][T21239] lo speed is unknown, defaulting to 1000 [ 646.635461][T21258] netlink: 'syz.4.3965': attribute type 11 has an invalid length. [ 646.643854][T21258] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3965'. [ 646.694207][T21260] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3964'. [ 646.726146][T21263] netlink: 'syz.4.3965': attribute type 1 has an invalid length. [ 646.810884][T21256] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3964'. [ 646.832268][T21258] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3965'. [ 646.850431][T21266] bond2 (unregistering): Released all slaves [ 647.004124][T21271] bridge0: port 3(vlan4) entered blocking state [ 647.010715][T21271] bridge0: port 3(vlan4) entered disabled state [ 647.035523][T21271] vlan4: entered allmulticast mode [ 647.040716][T21271] dummy0: entered allmulticast mode [ 647.087698][T21271] vlan4: entered promiscuous mode [ 647.092845][T21271] dummy0: entered promiscuous mode [ 647.334337][T21280] lo speed is unknown, defaulting to 1000 [ 647.387616][T21292] netem: incorrect ge model size [ 647.405857][T21292] netem: change failed [ 647.493554][T21295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3974'. [ 647.573001][T21295] 8021q: adding VLAN 0 to HW filter on device bond5 [ 648.355658][T21319] lo speed is unknown, defaulting to 1000 [ 648.878304][T21345] netlink: 'syz.1.3987': attribute type 3 has an invalid length. [ 648.892606][T21345] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3987'. [ 648.903407][T21345] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3987'. [ 649.568569][T21354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 649.572933][T21362] netlink: 'syz.3.3990': attribute type 1 has an invalid length. [ 649.614885][T21362] netlink: 'syz.3.3990': attribute type 2 has an invalid length. [ 649.861417][T21375] netlink: 332 bytes leftover after parsing attributes in process `syz.3.3994'. [ 649.871936][T21375] netlink: 'syz.3.3994': attribute type 9 has an invalid length. [ 649.880656][T21375] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3994'. [ 649.890068][T21373] syzkaller1: entered promiscuous mode [ 649.890094][T21373] syzkaller1: entered allmulticast mode [ 649.892349][T21373] netlink: 'syz.1.3993': attribute type 1 has an invalid length. [ 650.615236][T21410] netdevsim netdevsim1: loading /lib/firmware// failed with error -22 [ 650.646308][T21410] netdevsim netdevsim1: Direct firmware load for / failed with error -22 [ 650.657624][T21410] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 650.823068][T21418] bond0: (slave bond_slave_0): Releasing backup interface [ 650.839192][T21418] bond0: (slave bond_slave_1): Releasing backup interface [ 650.856920][T21418] team_slave_0: left promiscuous mode [ 650.885449][T21418] team0: Port device team_slave_0 removed [ 650.893503][T21418] team_slave_1: left promiscuous mode [ 650.921021][T21418] team0: Port device team_slave_1 removed [ 650.928595][T21418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 650.936184][T21418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 650.946070][T21418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 650.953656][T21418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 650.963625][T21418] net_ratelimit: 46 callbacks suppressed [ 650.963642][T21418] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 650.990117][ T5945] lo speed is unknown, defaulting to 1000 [ 651.155608][T21438] syzkaller0: entered promiscuous mode [ 651.161243][T21438] syzkaller0: entered allmulticast mode [ 651.654898][T21457] netlink: 'syz.3.4011': attribute type 13 has an invalid length. [ 651.666194][T21457] netlink: 'syz.3.4011': attribute type 17 has an invalid length. [ 653.419728][T21450] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.427226][T21450] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.506447][T21450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 653.521979][T21450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 653.524869][T21470] __nla_validate_parse: 1 callbacks suppressed [ 653.524888][T21470] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4015'. [ 653.676428][T21457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.689121][T21457] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 653.725287][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.734640][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.743649][T21472] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4016'. [ 653.867084][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.888350][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.926875][T21479] IPVS: set_ctl: invalid protocol: 234 172.20.20.60:20003 [ 654.059907][T21487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4020'. [ 654.063906][T21490] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4023'. [ 654.103924][T21487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4020'. [ 654.469109][T21501] x_tables: unsorted underflow at hook 2 [ 654.519023][T21484] : entered promiscuous mode [ 654.524320][T21496] syzkaller1: entered promiscuous mode [ 654.530115][T21496] syzkaller1: entered allmulticast mode [ 654.886508][T21513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4030'. [ 654.969092][T21513] team_slave_0 (unregistering): left promiscuous mode [ 654.984452][T21513] team0: Port device team_slave_0 removed [ 655.030444][T21519] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4033'. [ 655.368900][T21536] syzkaller0: entered promiscuous mode [ 655.375002][T21536] syzkaller0: entered allmulticast mode [ 655.486381][T21548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4037'. [ 655.622719][T21555] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4041'. [ 655.647960][T21555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4041'. [ 656.016834][T21566] macvtap0: entered promiscuous mode [ 656.142547][T21578] netlink: 'syz.0.4050': attribute type 13 has an invalid length. [ 656.183506][T21578] netlink: 'syz.0.4050': attribute type 17 has an invalid length. [ 656.436964][T21578] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 656.548242][T21591] netlink: 'syz.3.4053': attribute type 3 has an invalid length. [ 657.667833][T21634] netlink: 'syz.1.4064': attribute type 1 has an invalid length. [ 657.698841][T21634] netlink: 'syz.1.4064': attribute type 1 has an invalid length. [ 657.820400][T21634] bond7 (unregistering): Released all slaves [ 658.264325][T21657] sctp: [Deprecated]: syz.0.4069 (pid 21657) Use of struct sctp_assoc_value in delayed_ack socket option. [ 658.264325][T21657] Use struct sctp_sack_info instead [ 658.492515][T21667] netlink: 'syz.3.4073': attribute type 1 has an invalid length. [ 658.541651][T21672] netlink: 'syz.4.4076': attribute type 1 has an invalid length. [ 658.662867][T21681] __nla_validate_parse: 8 callbacks suppressed [ 658.662893][T21681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4076'. [ 658.731510][T21674] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 658.747135][T21674] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 658.787347][T21687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4079'. [ 658.912008][T21690] delete_channel: no stack [ 658.931969][T21674] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4076'. [ 658.995283][T21692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4080'. [ 659.063585][T21687] lo speed is unknown, defaulting to 1000 [ 659.360016][T21706] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4082'. [ 659.987500][T21732] geneve2: entered allmulticast mode [ 660.310584][T21744] Nßôž: entered allmulticast mode [ 660.513379][T21754] netlink: 632 bytes leftover after parsing attributes in process `syz.4.4098'. [ 660.525249][T21754] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4098'. [ 660.663057][T21755] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4096'. [ 660.713537][T21762] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4098'. [ 661.106288][T21776] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4102'. [ 661.283092][T21783] netlink: 'syz.2.4102': attribute type 5 has an invalid length. [ 661.606757][T21793] netem: invalid attributes len -1 [ 661.615149][T21793] netem: change failed [ 662.206739][T21818] netlink: 'syz.0.4107': attribute type 1 has an invalid length. [ 662.298223][T21820] netlink: 'syz.1.4112': attribute type 58 has an invalid length. [ 662.392310][T21814] netlink: 'syz.3.4110': attribute type 2 has an invalid length. [ 662.440232][T21825] lo speed is unknown, defaulting to 1000 [ 662.468271][T21814] netlink: 'syz.3.4110': attribute type 1 has an invalid length. [ 662.481447][T21828] can: request_module (can-proto-3) failed. [ 663.235549][T21860] veth3: entered promiscuous mode [ 663.402855][T21871] lo speed is unknown, defaulting to 1000 [ 663.534642][T21880] syzkaller0: entered promiscuous mode [ 663.540382][T21880] syzkaller0: entered allmulticast mode [ 663.640151][T21882] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 663.659425][T21882] bond3: (slave lo): Enslaving as an active interface with an up link [ 663.724152][T21882] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 663.765189][T21886] syzkaller1: entered promiscuous mode [ 663.771065][T21886] syzkaller1: entered allmulticast mode [ 664.007530][T21888] netlink: 'syz.0.4126': attribute type 27 has an invalid length. [ 664.191861][T21896] __nla_validate_parse: 7 callbacks suppressed [ 664.191885][T21896] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4129'. [ 664.424758][T21888] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.432444][T21888] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.752159][T21888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 664.803958][T21888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 665.044960][T21888] macvtap0: left promiscuous mode [ 665.146358][T21888] mac80211_hwsim hwsim46 wlan1: left allmulticast mode [ 665.174030][T21888] bond2: left promiscuous mode [ 665.178835][T21888] ip6gretap1: left promiscuous mode [ 665.189711][T21888] bond2: left allmulticast mode [ 665.194761][T21888] ip6gretap1: left allmulticast mode [ 665.211851][T21888] gretap1: left allmulticast mode [ 665.260363][T21891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.269176][T21891] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.281115][T21891] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 665.338580][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.348058][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 665.357615][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.375769][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 665.426720][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.449879][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 665.474506][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.502869][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 665.569907][T21908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4131'. [ 665.895417][T21921] netlink: 'syz.1.4132': attribute type 13 has an invalid length. [ 666.121055][T21921] ip6gre0: left allmulticast mode [ 666.181719][T21921] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 666.605717][T21922] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.613155][T21922] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.979238][T21922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.018605][T21922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.217874][T21920] vlan5: entered allmulticast mode [ 667.223573][T21920] bridge0: port 4(vlan5) entered blocking state [ 667.230457][T21920] bridge0: port 4(vlan5) entered disabled state [ 667.241521][T21920] vlan5: entered promiscuous mode [ 667.260697][T11307] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.277582][T11307] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.311338][T11307] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.389712][T11307] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.561676][T21965] netlink: 16158 bytes leftover after parsing attributes in process `syz.0.4139'. [ 667.651291][T21966] lo speed is unknown, defaulting to 1000 [ 668.058346][T21974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4142'. [ 668.150990][T21991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4147'. [ 668.623522][T22005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4151'. [ 668.851733][T22031] xt_hashlimit: size too large, truncated to 1048576 [ 669.059752][T22037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4154'. [ 669.251889][T22048] tipc: Enabling of bearer rejected, failed to enable media [ 669.306616][T22050] netlink: 'syz.4.4158': attribute type 8 has an invalid length. [ 669.333913][T22050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4158'. [ 669.389152][T22057] netlink: 'syz.4.4158': attribute type 2 has an invalid length. [ 669.395689][T22044] vlan2: entered allmulticast mode [ 669.402321][T22044] bridge2: entered allmulticast mode [ 669.424387][T22057] netlink: 'syz.4.4158': attribute type 2 has an invalid length. [ 669.749650][ T654] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.784320][ T654] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.793202][ T654] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.829562][ T654] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.932476][T22083] netlink: 'syz.3.4166': attribute type 83 has an invalid length. [ 669.948533][T22082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4164'. [ 669.965895][T22082] ip6gretap0: entered promiscuous mode [ 669.983628][T22082] ip6gretap0: left promiscuous mode [ 670.050425][T22091] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4164'. [ 670.073214][T22096] netlink: 'syz.3.4169': attribute type 2 has an invalid length. [ 670.132270][T22081] syzkaller0: entered promiscuous mode [ 670.148279][T22081] syzkaller0: entered allmulticast mode [ 670.272479][T22081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4165'. [ 670.300357][T22102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4171'. [ 670.329899][T22102] openvswitch: netlink: Flow key attr not present in new flow. [ 670.404345][T22102] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4171'. [ 670.583131][T22108] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4172'. [ 671.135037][T22132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4181'. [ 671.303614][T22139] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4183'. [ 671.459649][T22146] syzkaller1: entered promiscuous mode [ 671.483406][T22149] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4186'. [ 671.492648][T22146] syzkaller1: entered allmulticast mode [ 671.506207][T22151] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 671.688629][T22162] netlink: 'syz.2.4190': attribute type 1 has an invalid length. [ 671.964703][T22168] lo speed is unknown, defaulting to 1000 [ 672.900300][T22169] lo speed is unknown, defaulting to 1000 [ 673.152202][T22226] hmó3)óÿ: entered promiscuous mode [ 673.376710][T22205] lo speed is unknown, defaulting to 1000 [ 673.779298][T22240] netlink: 'syz.4.4208': attribute type 13 has an invalid length. [ 673.791193][T22240] netlink: 'syz.4.4208': attribute type 17 has an invalid length. [ 673.849078][T22240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 674.575823][T22252] bond3: option packets_per_slave: invalid value (1048582) [ 674.583109][T22252] bond3: option packets_per_slave: allowed values 0 - 65535 [ 674.646402][T22252] bond3 (unregistering): Released all slaves [ 674.779710][T22266] __nla_validate_parse: 9 callbacks suppressed [ 674.779732][T22266] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4215'. [ 675.516672][T22304] bond7: Unable to set up delay as MII monitoring is disabled [ 675.547742][T22304] bond7 (unregistering): Released all slaves [ 675.579389][T22313] netlink: 'syz.4.4227': attribute type 4 has an invalid length. [ 675.604094][T22313] netlink: 'syz.4.4227': attribute type 4 has an invalid length. [ 675.864860][T22333] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4231'. [ 675.876312][T22333] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4231'. [ 676.086535][T22347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4234'. [ 676.175936][T22347] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 676.192991][T22347] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 676.213100][T22347] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 676.420695][T22360] lo speed is unknown, defaulting to 1000 [ 676.510943][T22358] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4237'. [ 676.616905][T22374] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4240'. [ 676.645115][T22374] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 676.653501][T22374] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 676.664636][T22377] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 676.694122][T22374] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 676.740053][T22373] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4239'. [ 676.751156][T22373] netlink: 175 bytes leftover after parsing attributes in process `syz.2.4239'. [ 679.874411][T22400] netlink: 468 bytes leftover after parsing attributes in process `syz.2.4247'. [ 679.887556][T22400] netlink: 'syz.2.4247': attribute type 1 has an invalid length. [ 679.960718][T22412] netlink: 'syz.2.4247': attribute type 1 has an invalid length. [ 680.009412][T22409] netlink: 'syz.1.4248': attribute type 1 has an invalid length. [ 680.042217][T22409] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4248'. [ 680.059965][T22409] netlink: 658 bytes leftover after parsing attributes in process `syz.1.4248'. [ 680.080361][T22412] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4247'. [ 680.112699][T22409] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4248'. [ 680.143473][T22400] bond3 (unregistering): Released all slaves [ 680.260421][T22418] tunl0: Caught tx_queue_len zero misconfig [ 680.468956][T22431] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4255'. [ 680.660519][T22444] netlink: 6856 bytes leftover after parsing attributes in process `syz.2.4257'. [ 680.713829][T22444] netlink: 6856 bytes leftover after parsing attributes in process `syz.2.4257'. [ 680.836349][T22446] lo speed is unknown, defaulting to 1000 [ 680.903893][T22449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4260'. [ 681.039229][ T6438] lec:lec_start_xmit: lec0:No lecd attached [ 681.098006][T22464] ip6gretap0: entered promiscuous mode [ 681.104352][T22464] macvtap0: entered allmulticast mode [ 681.109858][T22464] ip6gretap0: entered allmulticast mode [ 681.126714][T22464] ip6gretap0: left allmulticast mode [ 681.132083][T22464] ip6gretap0: left promiscuous mode [ 681.937371][T22493] netlink: 'syz.2.4273': attribute type 1 has an invalid length. [ 681.968297][T22493] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4273'. [ 682.528214][T22525] tc_dump_action: action bad kind [ 682.551407][T22528] tc_dump_action: action bad kind [ 682.803143][T22538] block nbd1: Unsupported socket: should be TCP or UNIX. [ 682.967429][T22547] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 683.431132][ T8982] bond0: (slave bond_slave_0): interface is now down [ 683.433211][T22562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.458762][ T8982] bond0: (slave bond_slave_1): interface is now down [ 683.466953][T22564] 8021q: VLANs not supported on sit0 [ 683.473945][ T8982] bond0: (slave dummy0): interface is now down [ 683.626966][T22577] delete_channel: no stack [ 683.635305][ T8982] bond0: (slave bond_slave_0): interface is now down [ 683.642230][ T8982] bond0: (slave bond_slave_1): interface is now down [ 683.655123][ T8982] bond0: (slave dummy0): interface is now down [ 683.682384][T22579] netlink: 'syz.2.4300': attribute type 1 has an invalid length. [ 683.697089][T22585] netlink: 'syz.2.4300': attribute type 1 has an invalid length. [ 683.796494][ T8977] bond0: (slave bond_slave_0): interface is now down [ 683.803530][ T8977] bond0: (slave bond_slave_1): interface is now down [ 683.810850][ T8977] bond0: (slave dummy0): interface is now down [ 683.869815][T22590] lo speed is unknown, defaulting to 1000 [ 683.954036][ T8982] bond0: (slave bond_slave_0): interface is now down [ 683.962174][ T8982] bond0: (slave bond_slave_1): interface is now down [ 683.989908][ T8982] bond0: (slave dummy0): interface is now down [ 684.024914][ T8982] bond0: now running without any active interface! [ 684.631526][T22625] netlink: 'syz.1.4312': attribute type 29 has an invalid length. [ 684.670280][T22625] lo: Caught tx_queue_len zero misconfig [ 684.693923][T22624] netlink: 'syz.1.4312': attribute type 29 has an invalid length. [ 684.887724][T22641] netlink: 'syz.1.4315': attribute type 4 has an invalid length. [ 685.066656][T22641] __nla_validate_parse: 8 callbacks suppressed [ 685.066679][T22641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4315'. [ 685.221024][T22594] netlink: 'syz.4.4304': attribute type 11 has an invalid length. [ 685.284431][T22594] netlink: 'syz.4.4304': attribute type 11 has an invalid length. [ 685.292321][T22594] netlink: 192 bytes leftover after parsing attributes in process `syz.4.4304'. [ 686.063749][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 686.072178][ C1] lec:lec_tx_timeout: lec0 [ 686.077068][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 686.239753][T22713] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4336'. [ 686.265630][T22713] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4336'. [ 686.277674][T22713] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4336'. [ 686.312084][T22719] lo speed is unknown, defaulting to 1000 [ 686.926547][T22746] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 686.958740][T22746] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4347'. [ 686.984588][ T980] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 687.477818][T22773] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4352'. [ 687.489433][T22773] x_tables: duplicate underflow at hook 2 [ 687.724104][ T980] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 687.744963][T22023] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 688.273474][T22790] netlink: 'syz.4.4358': attribute type 1 has an invalid length. [ 688.350366][T22790] 8021q: adding VLAN 0 to HW filter on device bond3 [ 688.365188][T22797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4360'. [ 688.784548][T22025] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 688.800080][T22025] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 688.837054][T22820] netlink: 'syz.2.4367': attribute type 1 has an invalid length. [ 688.981153][T22829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4370'. [ 689.004004][ T6337] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 689.031397][T22832] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4371'. [ 689.115578][T22834] nbd: device at index 64 is going down [ 689.340889][T22408] udevd[22408]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 689.384456][T22408] udevd[22408]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 689.560509][T22853] lo speed is unknown, defaulting to 1000 [ 689.596173][T22861] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 689.600698][T22862] netlink: 'syz.3.4379': attribute type 1 has an invalid length. [ 689.824217][T22866] sit0: entered promiscuous mode [ 689.846865][T22866] netlink: 'syz.0.4380': attribute type 1 has an invalid length. [ 690.178125][T22877] __nla_validate_parse: 7 callbacks suppressed [ 690.178150][T22877] netlink: 428 bytes leftover after parsing attributes in process `syz.0.4382'. [ 690.194394][T22877] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4382'. [ 690.196984][T22879] lo speed is unknown, defaulting to 1000 [ 690.311938][T22877] team0: Device vlan2 is already an upper device of the team interface [ 690.539113][T22893] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4386'. [ 690.832174][T22887] syzkaller0: entered promiscuous mode [ 690.838281][T22887] syzkaller0: entered allmulticast mode [ 690.973208][T22915] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 691.083769][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 691.092100][ C1] lec:lec_tx_timeout: lec0 [ 691.525574][T22923] ip6_vti0: entered promiscuous mode [ 691.531325][T22923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4394'. [ 691.889659][T22941] syzkaller1: entered promiscuous mode [ 691.896086][T22941] syzkaller1: entered allmulticast mode [ 691.932394][T22941] syzkaller1: left promiscuous mode [ 691.937789][T22941] syzkaller1: left allmulticast mode [ 692.623997][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 692.658352][T22962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4405'. [ 692.689150][T22965] pim6reg: entered allmulticast mode [ 692.716735][T22965] pim6reg: left allmulticast mode [ 692.878101][T22970] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 692.957758][T22975] syz_tun: entered allmulticast mode [ 693.627286][T23017] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 693.652688][T23017] hsr0: entered promiscuous mode [ 693.658786][T23017] hsr0: entered allmulticast mode [ 693.664966][T23017] hsr_slave_0: entered allmulticast mode [ 694.334179][T23041] tipc: Enabled bearer , priority 0 [ 694.341743][T23039] syzkaller0: entered promiscuous mode [ 694.353602][T23039] syzkaller0: entered allmulticast mode [ 694.381404][T23039] tipc: Resetting bearer [ 694.450380][T23039] tipc: Disabling bearer [ 694.489269][T23048] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4428'. [ 694.588862][T23053] ip6erspan1: entered allmulticast mode [ 694.710191][T23054] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 694.752529][T23054] bond2 (unregistering): Released all slaves [ 695.102981][T23074] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 695.116787][T23074] bond4 (unregistering): Released all slaves [ 695.424261][T23087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4437'. [ 695.506733][T23087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.780506][T23094] netlink: 'syz.3.4441': attribute type 3 has an invalid length. [ 695.789616][T23094] netlink: 'syz.3.4441': attribute type 3 has an invalid length. [ 695.803663][T23094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4441'. [ 695.954453][T23105] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4444'. [ 695.964669][T23105] netlink: 'syz.2.4444': attribute type 5 has an invalid length. [ 695.972539][T23105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4444'. [ 696.203589][T23118] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4446'. [ 696.203968][T23119] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4446'. [ 696.259602][T23119] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4446'. [ 696.717933][T23138] lo speed is unknown, defaulting to 1000 [ 696.784124][T23139] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4451'. [ 697.652917][T23172] pim6reg: entered allmulticast mode [ 697.678762][T23171] pim6reg: left allmulticast mode [ 697.729148][T23176] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4465'. [ 697.747882][T23175] netlink: 'syz.2.4464': attribute type 7 has an invalid length. [ 697.759049][T23176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4465'. [ 697.798155][T23176] netlink: 'syz.3.4465': attribute type 62 has an invalid length. [ 697.995367][T23178] netlink: 'syz.0.4466': attribute type 10 has an invalid length. [ 698.031388][T23178] 8021q: adding VLAN 0 to HW filter on device team0 [ 698.047587][T23178] bond0: (slave team0): Enslaving as an active interface with an up link [ 698.296208][T23198] sctp: [Deprecated]: syz.1.4472 (pid 23198) Use of int in max_burst socket option. [ 698.296208][T23198] Use struct sctp_assoc_value instead [ 698.441135][T23205] 8021q: adding VLAN 0 to HW filter on device bond7 [ 698.461853][T23205] bond7: entered promiscuous mode [ 698.470770][T23205] bond7: entered allmulticast mode [ 698.480990][T23205] 8021q: adding VLAN 0 to HW filter on device bond7 [ 698.492195][T23205] team0: Port device bond7 added [ 698.535087][T23205] vxcan1: entered promiscuous mode [ 698.540619][T23205] bond7: (slave vxcan1): refused to change device type [ 698.886408][T23224] openvswitch: netlink: Key type 8199 is out of range max 32 [ 698.914960][T23233] openvswitch: netlink: Message has 496 unknown bytes. [ 698.922350][T23233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 698.982127][T23233] bridge_slave_1: left allmulticast mode [ 698.989455][T23240] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 699.002403][T23233] bridge_slave_1: left promiscuous mode [ 699.005851][T23240] netlink: 'syz.2.4487': attribute type 1 has an invalid length. [ 699.013467][T23233] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.041219][T23233] bridge_slave_0: left allmulticast mode [ 699.090838][T23233] bridge_slave_0: left promiscuous mode [ 699.110474][T23233] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.536835][T23255] netlink: 'syz.3.4491': attribute type 27 has an invalid length. [ 699.692421][T23255] veth0_to_batadv: left promiscuous mode [ 699.707939][T23255] veth0_to_batadv: left allmulticast mode [ 699.731631][T23260] netlink: 'syz.3.4491': attribute type 39 has an invalid length. [ 699.751403][T23255] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 699.759352][T23255] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 699.770367][T23255] bridge1: left promiscuous mode [ 699.775972][T23255] bridge1: left allmulticast mode [ 699.781670][T23255] sit1: left allmulticast mode [ 699.790563][T23255] vti0: left promiscuous mode [ 699.800799][T23255] vlan2: left allmulticast mode [ 699.806595][T23255] bridge2: left allmulticast mode [ 699.869948][T23270] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 699.949087][T23258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.972044][T23258] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 700.056967][T23284] block nbd1: Unsupported socket: should be TCP or UNIX. [ 700.280011][T23296] netlink: 'syz.4.4500': attribute type 15 has an invalid length. [ 700.464757][T23306] 8021q: VLANs not supported on ip6gre0 [ 700.755621][T23325] __nla_validate_parse: 9 callbacks suppressed [ 700.755642][T23325] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4509'. [ 700.933355][T23342] openvswitch: netlink: Message has 8 unknown bytes. [ 700.976758][T23340] netlink: 'syz.0.4514': attribute type 14 has an invalid length. [ 700.985074][T23340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4514'. [ 701.323380][T23362] xfrm1: entered allmulticast mode [ 701.554556][T23375] netlink: 'syz.3.4525': attribute type 3 has an invalid length. [ 701.584731][T23375] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4525'. [ 701.664408][T23381] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4526'. [ 701.767984][T23381] bond3: (slave lo): Releasing backup interface [ 701.808136][T23381] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 701.842295][T23381] bond0: (slave team0): Releasing backup interface [ 701.850296][T23389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4529'. [ 701.860000][T23389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4529'. [ 701.894454][T23381] bond0: (slave bond_slave_0): Releasing backup interface [ 701.906693][T23381] bond0: (slave bond_slave_1): Releasing backup interface [ 701.924154][T23381] team0: Port device team_slave_0 removed [ 701.946071][T23381] team0: Port device team_slave_1 removed [ 701.946362][T23391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4530'. [ 701.952266][T23381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.995817][T23381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.007633][T23381] team0: Port device netdevsim0 removed [ 702.018115][T23381] bond0: (slave wlan1): Releasing backup interface [ 702.030141][T23381] bond1: (slave geneve2): Releasing active interface [ 702.049719][T23381] team0: Port device bond2 removed [ 702.058190][T23381] bond2: (slave ip6gretap1): Releasing backup interface [ 702.214865][T23403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4532'. [ 702.315247][T23409] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4534'. [ 702.427117][T23415] xt_TCPMSS: Only works on TCP SYN packets [ 702.485151][T23417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4535'. [ 702.547045][T23422] pim6reg: entered allmulticast mode [ 702.627354][T23421] pim6reg: left allmulticast mode [ 703.819217][T23470] tap0: tun_chr_ioctl cmd 1074025677 [ 703.836225][T23470] tap0: linktype set to 778 [ 704.081135][T23481] tipc: Enabled bearer , priority 0 [ 704.107793][T23480] tipc: Enabling of bearer rejected, already enabled [ 704.259252][T23481] syzkaller0: entered promiscuous mode [ 704.266831][T23481] syzkaller0: entered allmulticast mode [ 704.273436][T23481] tipc: Resetting bearer [ 704.326057][ T8982] tipc: Resetting bearer [ 704.338115][T23480] gretap0: entered promiscuous mode [ 704.355735][T23480] vlan2: entered promiscuous mode [ 704.382510][T23496] bond0: Caught tx_queue_len zero misconfig [ 704.407656][T23478] tipc: Resetting bearer [ 706.159024][T23478] tipc: Disabling bearer [ 706.167718][T23491] lo speed is unknown, defaulting to 1000 [ 706.427312][T23518] xt_CT: You must specify a L4 protocol and not use inversions on it [ 706.507983][T23522] A link change request failed with some changes committed already. Interface sit2 may have been left with an inconsistent configuration, please check. [ 706.791352][T23541] __nla_validate_parse: 7 callbacks suppressed [ 706.791373][T23541] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4565'. [ 706.829128][T23544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4566'. [ 707.061860][T23548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4568'. [ 707.087615][T23548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4568'. [ 707.183219][T23548] 8021q: adding VLAN 0 to HW filter on device bond2 [ 707.212637][T23550] pim6reg: entered allmulticast mode [ 707.220380][T23549] pim6reg: left allmulticast mode [ 707.237768][T23548] syzkaller0: entered promiscuous mode [ 707.243383][T23548] syzkaller0: entered allmulticast mode [ 707.501466][T23567] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4574'. [ 707.555995][T23567] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4574'. [ 707.638634][T23570] lo speed is unknown, defaulting to 1000 [ 707.748238][T23581] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4577'. [ 707.858033][T23586] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.4577'. [ 707.905203][T23581] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 707.920464][T23581] bond0 (unregistering): (slave 4@0Ù): Releasing backup interface [ 707.931972][T23581] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 707.936666][T23591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4579'. [ 707.997045][ T5827] block nbd1: Receive control failed (result -107) [ 708.009467][T23581] bond0 (unregistering): Released all slaves [ 708.342369][T23600] macsec1: entered allmulticast mode [ 708.354732][T23600] macsec0: entered allmulticast mode [ 708.411351][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803192a400: rx timeout, send abort [ 708.423655][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803192a400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 708.560679][T23607] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 708.569120][T23607] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 744.792671][ T6438] lec:lec_start_xmit: lec0:No lecd attached [ 750.063894][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5270 ms [ 750.072299][ C1] lec:lec_tx_timeout: lec0 [ 750.077125][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 755.093763][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 755.101903][ C1] lec:lec_tx_timeout: lec0 [ 760.895973][T23637] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4590'. [ 760.916837][T23636] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.4591'. [ 760.976334][T23642] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4592'. [ 760.987645][T23642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4592'. [ 761.107680][T23655] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 761.356964][T23661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4593'. [ 761.850304][T23646] lo speed is unknown, defaulting to 1000 [ 761.974903][T23667] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 762.378108][T23671] bond8 (unregistering): Released all slaves [ 763.206011][T23677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4598'. [ 763.518611][T23676] lo speed is unknown, defaulting to 1000 [ 763.657286][T23680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4600'. [ 764.010001][ T5927] IPVS: starting estimator thread 0... [ 764.124476][T23695] IPVS: using max 25 ests per chain, 60000 per kthread [ 764.525005][T23704] netlink: 292 bytes leftover after parsing attributes in process `syz.4.4605'. [ 765.334223][T23731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4611'. [ 765.343233][T23731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4611'. [ 765.688287][T23749] netlink: 'syz.3.4618': attribute type 1 has an invalid length. [ 765.708927][T23752] netlink: 'syz.3.4618': attribute type 1 has an invalid length. [ 765.755625][T23749] 8021q: adding VLAN 0 to HW filter on device bond3 [ 765.771619][T23756] vlan3: entered promiscuous mode [ 765.777040][T23756] bond3: entered promiscuous mode [ 765.782253][T23756] vlan3: entered allmulticast mode [ 765.787848][T23756] bond3: entered allmulticast mode [ 765.802879][T23752] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 765.832034][T23749] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 765.873362][T23759] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 765.880730][T23759] IPv6: NLM_F_CREATE should be set when creating new route [ 765.946339][T23759] netlink: 'syz.1.4620': attribute type 13 has an invalid length. [ 765.973641][T23759] netlink: 'syz.1.4620': attribute type 17 has an invalid length. [ 766.026025][T23766] sctp: [Deprecated]: syz.3.4621 (pid 23766) Use of int in max_burst socket option. [ 766.026025][T23766] Use struct sctp_assoc_value instead [ 766.072363][T23763] syzkaller0: entered promiscuous mode [ 766.078701][T23763] syzkaller0: entered allmulticast mode [ 766.139644][T23759] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 766.890100][T23795] __nla_validate_parse: 1 callbacks suppressed [ 766.890124][T23795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4628'. [ 767.273544][T23807] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 768.775878][T23822] syzkaller0: entered promiscuous mode [ 768.803327][T23822] syzkaller0: entered allmulticast mode [ 768.832128][T23825] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4636'. [ 768.883231][T23827] netlink: 'syz.3.4635': attribute type 11 has an invalid length. [ 768.893276][T23829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4637'. [ 769.065852][T23832] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4637'. [ 769.082188][T23837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4638'. [ 769.093303][T23837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4638'. [ 769.424138][T23847] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4640'. [ 769.447939][T23850] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 769.739354][T23859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 770.280308][T23886] lo speed is unknown, defaulting to 1000 [ 770.302673][T23890] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4652'. [ 770.754940][T23904] netlink: 'syz.0.4657': attribute type 21 has an invalid length. [ 770.811515][T23904] netlink: 'syz.0.4657': attribute type 1 has an invalid length. [ 770.904615][T23911] tipc: Enabling of bearer rejected, failed to enable media [ 771.523896][T23934] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 771.546486][T23934] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 771.675631][T23937] syzkaller0: entered promiscuous mode [ 771.681269][T23937] syzkaller0: entered allmulticast mode [ 771.817785][T23945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4668'. [ 771.841218][T23937] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 772.009660][T23956] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4670'. [ 772.105064][T23959] vlan4: entered promiscuous mode [ 772.110190][T23959] batadv0: entered promiscuous mode [ 772.247357][T23975] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4674'. [ 772.308606][ T5827] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 772.404120][T23978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4674'. [ 772.413350][T23978] netlink: 312 bytes leftover after parsing attributes in process `syz.2.4674'. [ 772.437019][T23978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4674'. [ 772.448017][T23980] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4675'. [ 772.792727][T23997] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 773.038004][T24005] bond4 (unregistering): Released all slaves [ 773.071267][T24010] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4685'. [ 773.301871][T24019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4690'. [ 773.311086][T24019] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 773.415821][T24031] IPv6: Can't replace route, no match found [ 773.445425][T24024] lo speed is unknown, defaulting to 1000 [ 773.598443][T24038] netlink: 'syz.4.4695': attribute type 11 has an invalid length. [ 773.631542][T24038] netlink: 'syz.4.4695': attribute type 23 has an invalid length. [ 773.645456][T24036] nftables ruleset with unbound set [ 773.651053][T24038] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4695'. [ 773.692771][T24041] netlink: 'syz.2.4696': attribute type 13 has an invalid length. [ 773.700688][T24038] [ 773.700707][T24038] ====================================================== [ 773.700718][T24038] WARNING: possible circular locking dependency detected [ 773.700730][T24038] syzkaller #0 Not tainted [ 773.700743][T24038] ------------------------------------------------------ [ 773.700752][T24038] syz.4.4695/24038 is trying to acquire lock: [ 773.700767][T24038] ffff88801badda20 ( [ 773.703768][T24041] netlink: 'syz.2.4696': attribute type 17 has an invalid length. [ 773.710148][T24038] &root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 773.755557][T24038] [ 773.755557][T24038] but task is already holding lock: [ 773.763118][T24038] ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 773.773582][T24038] [ 773.773582][T24038] which lock already depends on the new lock. [ 773.773582][T24038] [ 773.784163][T24038] [ 773.784163][T24038] the existing dependency chain (in reverse order) is: [ 773.793359][T24038] [ 773.793359][T24038] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 773.801451][T24038] down_write+0x96/0x200 [ 773.806314][T24038] kernfs_add_one+0x41/0x5c0 [ 773.811533][T24038] kernfs_create_dir_ns+0xde/0x130 [ 773.817194][T24038] internal_create_group+0x425/0x1180 [ 773.823096][T24038] cpuhp_invoke_callback+0x445/0x860 [ 773.829053][T24038] cpuhp_issue_call+0x430/0x7a0 [ 773.834469][T24038] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 773.841161][T24038] __cpuhp_setup_state+0x3f/0x60 [ 773.846632][T24038] do_one_initcall+0x250/0x8d0 [ 773.851966][T24038] do_initcall_level+0x104/0x190 [ 773.857525][T24038] do_initcalls+0x59/0xa0 [ 773.862415][T24038] kernel_init_freeable+0x2a6/0x3e0 [ 773.868156][T24038] kernel_init+0x1d/0x1d0 [ 773.873124][T24038] ret_from_fork+0x51e/0xb90 [ 773.878347][T24038] ret_from_fork_asm+0x1a/0x30 [ 773.883679][T24038] [ 773.883679][T24038] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 773.891809][T24038] [ 773.891809][T24038] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 773.899566][T24038] cpus_read_lock+0x42/0x160 [ 773.904789][T24038] static_key_slow_inc+0x12/0x30 [ 773.910348][T24038] setup_udp_tunnel_sock+0x2fd/0x510 [ 773.916260][T24038] l2tp_tunnel_register+0xda0/0x1460 [ 773.922349][T24038] pppol2tp_connect+0x8b7/0x17c0 [ 773.927914][T24038] __sys_connect+0x312/0x450 [ 773.933118][T24038] __x64_sys_connect+0x7a/0x90 [ 773.938494][T24038] do_syscall_64+0x14d/0xf80 [ 773.943652][T24038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.950334][T24038] [ 773.950334][T24038] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 773.958142][T24038] lock_sock_nested+0x41/0x100 [ 773.963443][T24038] inet_shutdown+0x6a/0x390 [ 773.968476][T24038] nbd_mark_nsock_dead+0x2e9/0x560 [ 773.974142][T24038] recv_work+0x1c7f/0x1d90 [ 773.979185][T24038] process_scheduled_works+0xb6e/0x18c0 [ 773.985346][T24038] worker_thread+0xa53/0xfc0 [ 773.990590][T24038] kthread+0x388/0x470 [ 773.995568][T24038] ret_from_fork+0x51e/0xb90 [ 774.000717][T24038] ret_from_fork_asm+0x1a/0x30 [ 774.006101][T24038] [ 774.006101][T24038] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 774.013932][T24038] __mutex_lock+0x19f/0x1300 [ 774.019146][T24038] nbd_queue_rq+0x37b/0x1100 [ 774.024352][T24038] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 774.030441][T24038] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 774.037322][T24038] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 774.043934][T24038] blk_mq_run_hw_queue+0x348/0x4f0 [ 774.049667][T24038] blk_mq_dispatch_list+0xd16/0xe10 [ 774.055570][T24038] blk_mq_flush_plug_list+0x48d/0x570 [ 774.061561][T24038] __blk_flush_plug+0x3ed/0x4d0 [ 774.067153][T24038] __submit_bio+0x28d/0x580 [ 774.072231][T24038] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 774.078481][T24038] block_read_full_folio+0x599/0x830 [ 774.084503][T24038] filemap_read_folio+0x137/0x3b0 [ 774.090259][T24038] do_read_cache_folio+0x358/0x590 [ 774.095936][T24038] read_part_sector+0xb6/0x2b0 [ 774.101233][T24038] adfspart_check_ICS+0xa5/0xa40 [ 774.106906][T24038] bdev_disk_changed+0x7ba/0x1550 [ 774.112458][T24038] blkdev_get_whole+0x380/0x510 [ 774.117919][T24038] bdev_open+0x31e/0xd30 [ 774.122950][T24038] blkdev_open+0x470/0x610 [ 774.127895][T24038] do_dentry_open+0x785/0x14e0 [ 774.133194][T24038] vfs_open+0x3b/0x340 [ 774.137788][T24038] path_openat+0x2e08/0x3860 [ 774.142905][T24038] do_file_open+0x23e/0x4a0 [ 774.147941][T24038] do_sys_openat2+0x113/0x200 [ 774.153147][T24038] __x64_sys_openat+0x138/0x170 [ 774.158622][T24038] do_syscall_64+0x14d/0xf80 [ 774.163937][T24038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.170879][T24038] [ 774.170879][T24038] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 774.178449][T24038] __mutex_lock+0x19f/0x1300 [ 774.183660][T24038] nbd_queue_rq+0xc6/0x1100 [ 774.188716][T24038] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 774.194905][T24038] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 774.201879][T24038] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 774.208418][T24038] blk_mq_run_hw_queue+0x348/0x4f0 [ 774.214157][T24038] blk_mq_dispatch_list+0xd16/0xe10 [ 774.219892][T24038] blk_mq_flush_plug_list+0x48d/0x570 [ 774.225792][T24038] __blk_flush_plug+0x3ed/0x4d0 [ 774.231176][T24038] __submit_bio+0x28d/0x580 [ 774.236205][T24038] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 774.242363][T24038] block_read_full_folio+0x599/0x830 [ 774.248238][T24038] filemap_read_folio+0x137/0x3b0 [ 774.253877][T24038] do_read_cache_folio+0x358/0x590 [ 774.259527][T24038] read_part_sector+0xb6/0x2b0 [ 774.264987][T24038] adfspart_check_ICS+0xa5/0xa40 [ 774.271077][T24038] bdev_disk_changed+0x7ba/0x1550 [ 774.276638][T24038] blkdev_get_whole+0x380/0x510 [ 774.282036][T24038] bdev_open+0x31e/0xd30 [ 774.286832][T24038] blkdev_open+0x470/0x610 [ 774.291784][T24038] do_dentry_open+0x785/0x14e0 [ 774.297180][T24038] vfs_open+0x3b/0x340 [ 774.301780][T24038] path_openat+0x2e08/0x3860 [ 774.306908][T24038] do_file_open+0x23e/0x4a0 [ 774.311960][T24038] do_sys_openat2+0x113/0x200 [ 774.317212][T24038] __x64_sys_openat+0x138/0x170 [ 774.322705][T24038] do_syscall_64+0x14d/0xf80 [ 774.327911][T24038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.334469][T24038] [ 774.334469][T24038] -> #4 (set->srcu){.+.+}-{0:0}: [ 774.341669][T24038] __synchronize_srcu+0xca/0x300 [ 774.347164][T24038] elevator_switch+0x1e8/0x7a0 [ 774.352647][T24038] elevator_change+0x2cc/0x450 [ 774.358109][T24038] elevator_set_default+0x36c/0x430 [ 774.363831][T24038] blk_register_queue+0x366/0x430 [ 774.369587][T24038] __add_disk+0x677/0xd50 [ 774.374629][T24038] add_disk_fwnode+0xfb/0x480 [ 774.379923][T24038] nbd_dev_add+0x72c/0xb50 [ 774.384951][T24038] nbd_init+0x168/0x1f0 [ 774.389642][T24038] do_one_initcall+0x250/0x8d0 [ 774.395024][T24038] do_initcall_level+0x104/0x190 [ 774.400490][T24038] do_initcalls+0x59/0xa0 [ 774.405352][T24038] kernel_init_freeable+0x2a6/0x3e0 [ 774.411198][T24038] kernel_init+0x1d/0x1d0 [ 774.416156][T24038] ret_from_fork+0x51e/0xb90 [ 774.421429][T24038] ret_from_fork_asm+0x1a/0x30 [ 774.426988][T24038] [ 774.426988][T24038] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 774.435163][T24038] __mutex_lock+0x19f/0x1300 [ 774.440375][T24038] elevator_change+0x1b3/0x450 [ 774.445838][T24038] elevator_set_none+0xb5/0x140 [ 774.451211][T24038] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 774.457602][T24038] nbd_start_device+0x17f/0xb10 [ 774.462978][T24038] nbd_genl_connect+0x165b/0x1cf0 [ 774.468529][T24038] genl_family_rcv_msg_doit+0x22a/0x330 [ 774.474610][T24038] genl_rcv_msg+0x61c/0x7a0 [ 774.479737][T24038] netlink_rcv_skb+0x232/0x4b0 [ 774.485114][T24038] genl_rcv+0x28/0x40 [ 774.489713][T24038] netlink_unicast+0x80f/0x9b0 [ 774.495018][T24038] netlink_sendmsg+0x813/0xb40 [ 774.500311][T24038] ____sys_sendmsg+0x972/0x9f0 [ 774.505612][T24038] ___sys_sendmsg+0x2a5/0x360 [ 774.510999][T24038] __x64_sys_sendmsg+0x1bd/0x2a0 [ 774.516549][T24038] do_syscall_64+0x14d/0xf80 [ 774.521758][T24038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.528270][T24038] [ 774.528270][T24038] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 774.536982][T24038] blk_alloc_queue+0x546/0x680 [ 774.542271][T24038] __blk_mq_alloc_disk+0x197/0x390 [ 774.547924][T24038] nbd_dev_add+0x499/0xb50 [ 774.552890][T24038] nbd_init+0x168/0x1f0 [ 774.557581][T24038] do_one_initcall+0x250/0x8d0 [ 774.563145][T24038] do_initcall_level+0x104/0x190 [ 774.568703][T24038] do_initcalls+0x59/0xa0 [ 774.573647][T24038] kernel_init_freeable+0x2a6/0x3e0 [ 774.579376][T24038] kernel_init+0x1d/0x1d0 [ 774.584576][T24038] ret_from_fork+0x51e/0xb90 [ 774.589703][T24038] ret_from_fork_asm+0x1a/0x30 [ 774.594998][T24038] [ 774.594998][T24038] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 774.602480][T24038] fs_reclaim_acquire+0x71/0x100 [ 774.607960][T24038] kmem_cache_alloc_noprof+0x40/0x650 [ 774.614041][T24038] __kernfs_iattrs+0xdf/0x340 [ 774.619397][T24038] kernfs_iop_setattr+0xea/0x3f0 [ 774.624894][T24038] notify_change+0xc1a/0xf40 [ 774.630015][T24038] do_truncate+0x1c2/0x250 [ 774.634955][T24038] path_openat+0x2f89/0x3860 [ 774.640074][T24038] do_file_open+0x23e/0x4a0 [ 774.645103][T24038] do_sys_openat2+0x113/0x200 [ 774.650312][T24038] __x64_sys_openat+0x138/0x170 [ 774.655697][T24038] do_syscall_64+0x14d/0xf80 [ 774.660819][T24038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.667235][T24038] [ 774.667235][T24038] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 774.675844][T24038] __lock_acquire+0x15a5/0x2cf0 [ 774.681312][T24038] lock_acquire+0xf0/0x2e0 [ 774.686260][T24038] down_write+0x96/0x200 [ 774.691213][T24038] kernfs_unlink_sibling+0x71/0x180 [ 774.696961][T24038] __kernfs_remove+0x3e7/0x660 [ 774.702253][T24038] kernfs_remove_by_name_ns+0xaf/0x130 [ 774.708238][T24038] device_release_driver_internal+0x387/0x870 [ 774.714847][T24038] mac80211_hwsim_new_radio+0x4617/0x5ba0 [ 774.721190][T24038] hwsim_new_radio_nl+0xf6a/0x1c00 [ 774.726849][T24038] genl_family_rcv_msg_doit+0x22a/0x330 [ 774.733222][T24038] genl_rcv_msg+0x61c/0x7a0 [ 774.738360][T24038] netlink_rcv_skb+0x232/0x4b0 [ 774.743749][T24038] genl_rcv+0x28/0x40 [ 774.748357][T24038] netlink_unicast+0x80f/0x9b0 [ 774.753714][T24038] netlink_sendmsg+0x813/0xb40 [ 774.759132][T24038] ____sys_sendmsg+0x972/0x9f0 [ 774.764452][T24038] ___sys_sendmsg+0x2a5/0x360 [ 774.769700][T24038] __x64_sys_sendmsg+0x1bd/0x2a0 [ 774.775265][T24038] do_syscall_64+0x14d/0xf80 [ 774.780407][T24038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.786845][T24038] [ 774.786845][T24038] other info that might help us debug this: [ 774.786845][T24038] [ 774.797083][T24038] Chain exists of: [ 774.797083][T24038] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 774.797083][T24038] [ 774.811781][T24038] Possible unsafe locking scenario: [ 774.811781][T24038] [ 774.819589][T24038] CPU0 CPU1 [ 774.824961][T24038] ---- ---- [ 774.830323][T24038] lock(&root->kernfs_rwsem); [ 774.835176][T24038] lock(cpuhp_state_mutex); [ 774.842467][T24038] lock(&root->kernfs_rwsem); [ 774.849766][T24038] lock(&root->kernfs_iattr_rwsem); [ 774.855056][T24038] [ 774.855056][T24038] *** DEADLOCK *** [ 774.855056][T24038] [ 774.863499][T24038] 4 locks held by syz.4.4695/24038: [ 774.868876][T24038] #0: ffffffff8fc37a50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 774.877175][T24038] #1: ffffffff8fc37888 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 774.886324][T24038] #2: ffff88808ae8e130 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 774.897158][T24038] #3: ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 774.908038][T24038] [ 774.908038][T24038] stack backtrace: [ 774.913929][T24038] CPU: 1 UID: 0 PID: 24038 Comm: syz.4.4695 Not tainted syzkaller #0 PREEMPT(full) [ 774.913950][T24038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 774.913961][T24038] Call Trace: [ 774.913968][T24038] [ 774.913976][T24038] dump_stack_lvl+0xe8/0x150 [ 774.914001][T24038] print_circular_bug+0x2e1/0x300 [ 774.914028][T24038] check_noncircular+0x12e/0x150 [ 774.914056][T24038] __lock_acquire+0x15a5/0x2cf0 [ 774.914080][T24038] ? __lock_acquire+0x6b5/0x2cf0 [ 774.914105][T24038] lock_acquire+0xf0/0x2e0 [ 774.914125][T24038] ? kernfs_unlink_sibling+0x71/0x180 [ 774.914145][T24038] down_write+0x96/0x200 [ 774.914161][T24038] ? kernfs_unlink_sibling+0x71/0x180 [ 774.914177][T24038] ? __pfx_down_write+0x10/0x10 [ 774.914192][T24038] ? kernfs_root+0x1c/0x230 [ 774.914214][T24038] ? kernfs_root+0x1c/0x230 [ 774.914235][T24038] ? kernfs_root+0x1c/0x230 [ 774.914257][T24038] ? kernfs_root+0x1ea/0x230 [ 774.914280][T24038] kernfs_unlink_sibling+0x71/0x180 [ 774.914298][T24038] __kernfs_remove+0x3e7/0x660 [ 774.914316][T24038] kernfs_remove_by_name_ns+0xaf/0x130 [ 774.914334][T24038] device_release_driver_internal+0x387/0x870 [ 774.914360][T24038] mac80211_hwsim_new_radio+0x4617/0x5ba0 [ 774.914387][T24038] ? _printk+0xdd/0x130 [ 774.914405][T24038] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 774.914435][T24038] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 774.914457][T24038] ? do_trace_netlink_extack+0x80/0x200 [ 774.914484][T24038] hwsim_new_radio_nl+0xf6a/0x1c00 [ 774.914514][T24038] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 774.914539][T24038] ? rcu_is_watching+0x15/0xb0 [ 774.914561][T24038] ? trace_kmalloc+0x2a/0x110 [ 774.914581][T24038] ? __nla_parse+0x40/0x60 [ 774.914599][T24038] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 774.914622][T24038] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 774.914648][T24038] genl_family_rcv_msg_doit+0x22a/0x330 [ 774.914673][T24038] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 774.914701][T24038] ? bpf_lsm_capable+0x9/0x20 [ 774.914724][T24038] ? security_capable+0x7e/0x2c0 [ 774.914749][T24038] genl_rcv_msg+0x61c/0x7a0 [ 774.914772][T24038] ? __pfx_genl_rcv_msg+0x10/0x10 [ 774.914793][T24038] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 774.914815][T24038] ? __lock_acquire+0x6b5/0x2cf0 [ 774.914839][T24038] netlink_rcv_skb+0x232/0x4b0 [ 774.914856][T24038] ? __pfx_genl_rcv_msg+0x10/0x10 [ 774.914878][T24038] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 774.914901][T24038] ? down_read+0x272/0x2e0 [ 774.914915][T24038] ? genl_rcv+0xd/0x40 [ 774.914935][T24038] genl_rcv+0x28/0x40 [ 774.914955][T24038] netlink_unicast+0x80f/0x9b0 [ 774.914983][T24038] ? __pfx_netlink_unicast+0x10/0x10 [ 774.915008][T24038] ? netlink_sendmsg+0x650/0xb40 [ 774.915025][T24038] ? skb_put+0x11b/0x210 [ 774.915045][T24038] netlink_sendmsg+0x813/0xb40 [ 774.915066][T24038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 774.915084][T24038] ? aa_sock_msg_perm+0xf1/0x1b0 [ 774.915109][T24038] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 774.915129][T24038] ____sys_sendmsg+0x972/0x9f0 [ 774.915153][T24038] ? __pfx_____sys_sendmsg+0x10/0x10 [ 774.915178][T24038] ? import_iovec+0x73/0xa0 [ 774.915197][T24038] ___sys_sendmsg+0x2a5/0x360 [ 774.915219][T24038] ? __pfx____sys_sendmsg+0x10/0x10 [ 774.915243][T24038] ? futex_wake+0x4ac/0x580 [ 774.915275][T24038] ? __fget_files+0x2a/0x420 [ 774.915299][T24038] ? __fget_files+0x3a0/0x420 [ 774.915326][T24038] __x64_sys_sendmsg+0x1bd/0x2a0 [ 774.915348][T24038] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 774.915372][T24038] ? rcu_is_watching+0x15/0xb0 [ 774.915399][T24038] do_syscall_64+0x14d/0xf80 [ 774.915422][T24038] ? trace_irq_disable+0x3b/0x150 [ 774.915443][T24038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.915459][T24038] ? clear_bhb_loop+0x40/0x90 [ 774.915477][T24038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.915493][T24038] RIP: 0033:0x7f222b19c819 [ 774.915509][T24038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.915524][T24038] RSP: 002b:00007f222c05a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 774.915541][T24038] RAX: ffffffffffffffda RBX: 00007f222b416090 RCX: 00007f222b19c819 [ 774.915553][T24038] RDX: 0000000004008080 RSI: 00002000000001c0 RDI: 0000000000000009 [ 774.915565][T24038] RBP: 00007f222b232c91 R08: 0000000000000000 R09: 0000000000000000 [ 774.915575][T24038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.915586][T24038] R13: 00007f222b416128 R14: 00007f222b416090 R15: 00007fff92904858 [ 774.915604][T24038] [ 774.937914][T24041] ip6_vti0: left promiscuous mode [ 775.199328][T24039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4696'. [ 775.291934][T24041] syz_tun: left allmulticast mode [ 775.324029][T24033] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 775.331130][T24041] 8021q: adding VLAN 0 to HW filter on device team0 [ 775.448512][T24041] bridge0: port 3(vlan4) entered blocking state [ 775.455023][T24041] bridge0: port 3(vlan4) entered forwarding state [ 775.463509][T24041] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 [ 775.513727][T24041] caif:caif_disconnect_client(): nothing to disconnect [ 775.613269][T24041] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 775.624934][T24041] chnl_net:chnl_net_open(): state disconnected [ 775.631685][T24041] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 775.662317][T24054] gretap1: entered promiscuous mode