last executing test programs: 14.322995968s ago: executing program 3 (id=9520): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002180)=@newtaction={0x10e8, 0x30, 0xb, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x10d4, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0xa}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ctinfo={0x1040, 0x3, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0x60, 0x2001, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0xfffffffd, 0xffffffffffffffff, 0x0, 0x4}, 0x2}}]}, {0x14, 0x6, "45a41945c0e03655cddc1f8fcb542e5f"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x10e8}}, 0x2000a804) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x148, 0x4c, 0x1a, 0x0, 0x73, 0x220, 0x258, 0x258, 0x220, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [0x0, 0x0, 0xffffff00], 'dvmrp1\x00', 'macvlan1\x00', {}, {0xff}, 0x73, 0xe}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x1, 0x3}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x20}, {0x0, 0x20}, 0x14}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x350) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x580d9462, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0x2, 0xa, 0x6, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffffffffffffff}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0xe, 0xff6, &(0x7f0000001cc0)=""/4086, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0xffffff70, &(0x7f0000000100)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4044000}, 0xd1) r4 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, &(0x7f0000010200)={&(0x7f00000001c0)={0x10020, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x7, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) getsockopt(r4, 0x28, 0x2, 0xfffffffffffffffc, &(0x7f0000000040)) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a0104000000000073797a31000000002400048020000180080001006c6f670014000280080006400000000106000140000100000900020073797a3200000000140000001100010000000000000000000200000a"], 0x78}, 0x1, 0x0, 0x0, 0x4008891}, 0x10) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) sendmsg$inet_sctp(r7, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000200), &(0x7f0000000240)=0x8) 4.390953629s ago: executing program 3 (id=9555): r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x2, &(0x7f00000000c0)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0x9}], &(0x7f0000000100)='GPL\x00', 0x5, 0x8a, &(0x7f0000000140)=""/138, 0x41000, 0x18, '\x00', r1, @fallback=0x4265f7181e6a31f7, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x2, 0xb, 0x7}, {0x4, 0x3, 0xd, 0x7}, {0x3, 0x5, 0xe, 0x6}, {0x3, 0x2, 0xc, 0xb}, {0x0, 0x2, 0xe, 0x8}, {0x5, 0x3, 0x9, 0x3}], 0x10, 0xb10}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@cgroup, 0x3, 0x0, 0x10000, &(0x7f00000003c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x0}, 0x40) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001a00)={{r0, &(0x7f0000000540)=']\x00', 0x0, &(0x7f0000000580)={@_ha_fsid={[0x0, 0xfffffffd]}, {0x2, 0x40, 0x30000000, 0x2c}}, 0x1, &(0x7f00000005c0)={@_ha_fsid}, &(0x7f0000000600)=0xd}, 0x4, &(0x7f0000001980)=[{0x3, 0xffffff31, &(0x7f0000000640)='^^[%^\x00', &(0x7f0000000680)="30ff4aa27446c7969be832bdbdc8cdfb231d7a02d1095d67fd2e76ca0d431c", 0x1f, 0x8}, {0x1, 0x0, &(0x7f00000006c0)='\'$#\x00', &(0x7f0000000700)="9400447f13e70d1ce599e9b21bd66deb50fc86274a71f0168109bff2eff3cc92a4d345b117c4a9d0ec57186dae9565660b5a45cd18354ed2f1250c9ef75508d6f1048e3f2fc784064991db6ab1725014719db5497a3caba5e5a3fa4a4661110217a098b205f1f5f903b1c8743a7fe4c89b6fbf71d0a53a5ff2139272c7981e492d63f3f7a59bdf2490ed96f4c71c5e5c69eac4395bf6a67ae53a38c1d33eb11036286393cd9e815b85bdd0e9e0d66b1a252fa5faae5ef272d9ca43e38bb80bbf00039435b0e43565048259af864d0805432ebd2e656d9ef78e91daac1ae120e39ffe298f3b6da8221152c36abe3c0ec93a9b0eaad01e5788", 0xf8}, {0x1, 0xff, &(0x7f0000000800)='.!\x00', &(0x7f0000000840)="ad7832714a88cb5013ee186852d928faaf8d41730f78d31f37894edb5f2de56ccf9ccf370e3b3a91d410dbf85c5649865a4a4e0b31c8478412599cf51698ce13c103b555ec4608a4e757a4785fc46b4f3192bc0148f3c0cb50df0e9a1906e4bd40ce7120cc09449beff53fa1fa37f9bec409a279ae476d6404862738cfbcd4fe7fc26143241d40695634d60a215d1b9ee9517ebb648159f4a0d34e976af77d28ea32c4413978f0764a966735529981924bb861636b21a5d11a757d564c410906244aca6e709a305ba7de3e0fc75305add768d895767ffb2ad609d1335ee80175d00994eab9657af7b606444105a3c8a820b247b69f8e7dca0c8d2f72092829021904bf4a4828e4a9d1fc7b1df04c99b07ba97d4aeb8ca7fb505e918daf1a70c4e3e24afe3cdd73f73db28b1fe5bc94e29a4667dd7a2b4763bccac12fb4ccae2b5455b6cf6060cd9d4467b30a34425bf50b5504f9d5ff2e15c0ccf08e2b7a9ad83a828f43299365b0e1d1e8cd8c09fab150e4a2b6d2e4cdee6cdb4d570fa9cc5e24cf64e847c77cbb37f6ac34d6c612ddd470c7f08254e5c5709fc6b174d2d06cb25bef3405dfbe0599867648e2b0588e2a01d25cf43f69e5704e4830aa8d19665ae62820d53bc7e0310d880fc814d9274f51aebe651635107f38cbd4048f6f640a41529dcfd275a1a5bc4309f53126b2850732f77e8603fc523cc3142be57933c345e2edb14ded703ce558735594e135c219075480f80c1a0fd57fd4cd7699a2b5bed73a7951f945f3def06b39cafb90a883e1738e774a1c194f044e89a4f9a3abd5e175884a4a9eec094ee5dbab2b08749e0f093380fe843ec1db7e22f271096e3dc74e81a0504104d935436753754a657bf59fbbfcb39c392fad47fa7175c94d201cb0f10c75a2fe47d4a9ae582f27a972db95b08f4b8f14d3ebc3cca4d9d3e089c6b3368af8cc1d15172575e02101fe6e5c3727c5aa0ee4a820904fc76e995d9c229f6638db59dbaff04367a34bdd6ffd60d76843a0cb67584557cc9d1259eab194d2dba67f8b455642ec32202d59b688fdb71e28c71575f353ad01725a11e44a486c6f6efd4e92ba7216aead78c5ec24a94d0f561f08e5b93ba4b45f9a057f8d8878eeb054b4f84de54628d324710a8e544eb9747bd04ec5124e533a3fcc9a3d6d9ad9086e01225d900af1524c1955f38c80040614562b1c7c570e04ae440d33e85832182ad080badecbcbbca2edb2eb88b3db299ca0a09566e55dd818582cb079317c2ff3f14fc54f93048f540f10b4fe97dc3870326cc07689765c83837d60423cf67d2c8ff6c8dd2005289ae529e4839bb365a0b8980ea342a010b95c838eb185cb8c768ce0cd75ad994978bf7eff52f483342747342807ffec34026fadd4e6a79ee5fed7c1138c1b1ede7ae6cab1a11727c06cf02a0b07b7bf028cdfb5a5bc0296dd2e619cec3c355e59018512b7a73cabd9536d9cdbea1ca3c713d3ac15457f89d63750156ec904b88e87ea572e4bee8e24c0d3ecc421ead597372eb35c2b23202e16208c91ce087f7aedc5d3cd34eb21dd05c03ee671bcf06b85105e37e13dcef176513b838fd2ebef3a705e158868513e3339a5ff8eab42645e58ac8a260104d56e907f9000a0af5969c1db0e2308a9c74b0d405414d937fd3200e5f12a86e126d75d3bbba55234a165f8228d6a76bdf4026b51d246001377310823f033053c03a7a591ce510b96155a1fd7792d6d827e29b0bc8e15701e0e13c6e09ab04401f9d7258e08d2b6571b5cace289699636ea7413abadd659c0f8b25a709165d8a21f8d890542317d98e1048b4d11dde3c841eb1209bd7c8cfcccf25f2134560d7587322f1d8d1e52c0eea583d10cecaec229a29ea85ac695a1cae7729bec0127940daf06292fb1540a02f1eeb6b0134a4ce8448c14e03fd07bda8cd10f1b39a4591e2b977bb0fc1f69683172350885f094edfa5c0a7728433286f5bafee78d7619a5f32b868b46b67e66d668e600d9df7680a6bd5592de54dbee2504fe49a9fc1118c96e6ad15e062b841687f472712e8df67c0279b813b457e2e6722c0ae59c8fe7c483262f9e12bcb664e4f4aba30f2ed8a4473af8b3afe4af6d87cf51abaa9c766f78750b2119ff731e237ade318c7d712b43e505924812db9fd90d25c5601463796bdb88cedc815bdddb3ff42d183d42d82698a985d28d523d8819ff97a8703ecdccdf7f6a16d6758c705f7429da419ccf6757248c0a87c35e5357b7b48b93c10064b13576e4731cb1b2243d0328e801feda1231e7705797e2a69373b2aa277a49e17851169d297c5f9e88b658e57dad8cc87365cc9fe77c3bdd877b870ec7cb3d0fcad47be0d1b9704ce849d51b9ada79e0f0a8751c4eb69589c51224fa0e8ca0334f249a5ecfc8b3f8d13334cad916d90854dc8d4e71b19475bfd5af3f200348b786088afea491534587b47337dbc2206a83b4dbe0761a0e106f1aaca8e49d6924d73b9862084d704995f3595572e883afcc89e4581732740415a56513b254cf67ff8b58c6ea77d3c166779b825517cfcb3d2289e154b36400cb72f9691ce4e76af4eab41be7e7711402466d192799ee895af4f08925e93b6c0b0fb82ad418c15e6f29dbe426e36f40dcc14eeb7507d5ab11888f36dc257622438916a647758a031d43ae7f525c2230b871567aeb138d539ef5dd136a1cdc81d3dfc4cd6db0dca95591b88d8e8cff0ce974294a376a6ae66a90691dabb92c0b39e9716a284ae0a30fa1fc801f40a44c39d85c71e25319b5138ef415385b99c3140bd78ee905ae54b851fcf6b7a223c97d44c6442c1a60532eae4bbd85994b512c142b8cddceeea7f5c96b59474d83f51148fa22288a5abeb6b59073512d516f923fef6a6d3b56ed812b8f10dc2dba687686d3f20a2f5748201240afa9d0eaffcc4c142b691a9af5fadc344597b89758ac6f822842c12c2262a89998cb556e4166adf1098f961263957c0eeffd440db64a3d9c359c005ca7630272edbfc6bd7c65a121634fef73b034e0651092ba01b61671a254e8209b22ada2153cd18fe43c2f4f1ac6b8b8e06dd2090cb488f68d3bf5fcb906693c1733cee29c3f50ecdf56c49effbc0c37ce1b1be074dd395d6b50493d115a6b2725f2d4f611531701e738bfec8384ec2c349107292c1d9298fa21796cf1553b75ce21b985f1e372f280aa4405528e106a2a2a27aa8f1c76f5e6349b022fc66656aede4f6be6ba10dcd64807364208afc9bdaae250145f3b052622a3c609c9804644aaca0e7a01c171a3793e26c6f4f652e6de50ab11e441fd1571b44084efed8a841daad5bcab5fa6c90672591766c5ace5035dfb0aa2e53c9e0434bf0263f11246dfed7ad525227148225baf504f8a6b685c33bcc95c65938824f40124767a1fbab0d3bdc2b9c3f6bacc2910dabf38d08a900d61befd2443a4e7829d684160a7423b62c292319dc362984bad268d1e2b9a875da9c7c222bf2dbc18128975c4e1e3e0a4ab175103b07fafda5fe359cff62a4236837663af3a319faa16666e97797fd387e43d963a6e19cd013e395e05181e24b271127f7072ff691f6e5089f87a5094bb90c73ad5a300201e0d6c581147f9be7f4beb05fbb528102164a7255bc87ed139d7664cbbd5c83a2e7a54f3cf2e9afcfcc60531a4e43b21be046af20f56a5158c9b68967d8d4e4285dfcc61bedb317ae7162f04f8e29bdb4e6d7c3ff11f6a9cb9ed6f5cd037ab3143242a709f4700c70a7d8ab253dcdabfa92fa25b7ee1b3886e736b722c4f935470082c8d901415b58d070259715b4e673cab381d8165f3ec38a6fa895292840a9574a6f8d8720ad8b770b28f75ab79acd6e7e3c28e7bd3fe89cf968688df3c925d3975d964379117c009bba90b046696207db3cc7a6b19d7e54cbf48f3947661efc4dd1f2778e651dc9398c58dc7aa0ecaba44a39a1d4bec064eb1626c50c9c3071f2a5cc1c6956c75306d019841f44a5d3067d87f3639ceb5919f0307e2ede8fca4e89451905a85fb65f4f8e4b5f742a61fd090689d505481eda97824248f802611927a5c3981ccbf1cb8df8b64c1ea44b5a533b76cb980e5cdd140e0cf2ba21191752c08afca4dedcd4daa61f65a4ef84deeabb6e3f2cbd6847e4b23f65618e56f2398ad65bf03338057ad7042c04794f5f71a171532bf8a49b362ff3b61c1c05312fdc9666851e74349e0c5f197b8ca98d7980b1e52f8528d96d401beced45c27376d2ef6d706ba522cfc1a1003309481afeff81fe865d582c27fa0c6d190a6fb3cec9d04fb2639a349e38b987cf9fe58063dc769b349146fc53688ef60f6bcf14863cf34a4a995cd11d322990ce1d69194ee3da4a63a178d8170b118f0cea9408a37cfaa7970512cf44f3e388297fe6312800dd063e16a38fc2e67fe83f880e07dd6a886c102c6946c19ea238eaeee779a8bf4adce3c5d87578e828c84dff7b10db77bb12b38ccd1d3ccf509df4c07b9b6d1f587800324531a0880293188c94d40bdda51e0ee91dbb623305f17151d506232ef537b4c9f9b16d53abe8446276156b5f5498f19d6ba4eab459b16b02e3c93031d3403223f579f19177123dbdcf50877e00ce65c75dd3fe9b1db7e7704fe82b64fe17e467a26c5594bad657438c10f40040dd4756cd7dc34daee2d0d3bdf18bd5190f033cd342c9c7610a3116da551deb0d2426bb9c6ff3be2019c36dea0b4d7dea2322d792c549ab35e2c6a1a4b6af825cfbb6744d2378d7518ae114b5c0c04a2e8825ebc1174e8e3b49a715cdb8339f8f422407503fd89f6120d4eb3c48417f3f473c85177f7d96ab3e796cd18d35c518a19446cca88efd076d6e10f5e898dedb57fe0c96bd5daafe2f1dcf1f04d08614f0d7b68194cfebe776bd8a79adda95b2aa662dc3a53da47c0df3e26b0cabf6c701f3a68587aa23afba9c8fccd950e22afc975e7a7fa2e7b703e2841a4689bb2e782f0ef8c02001071bf1b29cba0bf5ad3d7bce1f32963df08f363e728962f1b0fe5b1c6d2d3359b0cf4fa692fdb275537cd5ebe1f3adc703cb0ee614ddde224bae1d8761614f28e0ec86ea9453d5cfc02ca94f84f9b00f9b1d6f85d150de2cdb6a9ec80a5286eaab78fc0ecca3a63170d3490e90752d75346a8550c8848aa089e0fbc0106f500815fae98ca62194aa3ac3d36af3a3a86795608c93ffc27534c989e0995624b1a727695bd2862071000f8c530d1ee3b3a07c1458022999558386725d10cbeba1313317af03f03715bd8c53177b46548b4fd4170ebb92570862f1c2c6df648543efdd66ecdb5c03bbf6c3aad7dc2c0e7fc2fbedba079098410c04de89547ba73ef385abd45e1f8755e2333eba6440995822a41fa89696a887a113bc16898971759c2f71d10b3495b8582965b844cdda80df420531b5bc0e5d170e551a3190ccb7f7787ecde2bf451fa1728dc212f16302c63b2eaa563b2bd1e68e35f3f7237394ddc7728daf7dfcb5dc34bfc241246fe741c102bc781fc0a3f70ec82a168c63c2dc68154e4352446993af9d1dcf02ea36c1024711c3e1b40c91ce517f7fcae751d88158de66af3d305f67fc51735eafcfe799ee0af08935b2ce0bc5f0903097bb052b6d291dc2f9d3841bac5e2e381a79ec8ada3d6cbc33d694ffa05a67bb1ee3ec70a8f23b03d3d647ba3e47ee5ed22bef2e56c3ce6891d8c4a857e19484aafb77306a0ebff039772c5402db2011c9523d22a37ae362e00d7ad30af53bf910853fa9619a2234713e3a4b89d9ea3ec725f19a23543", 0x1000}, {0x3, 0xf, &(0x7f0000001840)='@\x00', &(0x7f0000001880)="07803a5a384a133b46f0b6af2d83949003e29918ccad3217409e23ce1370037117f140a041339b9a1955cfdb10028e0fe76ca8fdc3f6e57c9a80100a95f75d2360763d4a41c0a2a2ac69766fb53212076a531cd248f30420327ad9921a617c773dcce77a0f4798af6fce5e0eeafc77d6a0bc9f6c46bc5e58a7b6085fcd7a43f6733a144d491055e1cff7fb0cde1924d9a6d65077c7e9d88128fe76466e39e40de1168d30b5e1b6386795cfd4cf20d79189fc19ac7ae13007943587a3949fed9a1d850fb650088384b778b886c28595", 0xcf, 0xa}]}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@cgroup=r4, r2, 0x4, 0xc, 0x0, @void, @value, @void, @void, r3}, 0x20) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f0000001a80)={0x8, 'pim6reg\x00', {'rose0\x00'}, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000001ac0)) accept4$x25(r0, 0x0, &(0x7f0000001b00), 0x800) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x1c, 0x15, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2c840}, 0x20000000) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000001c40)) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000001d80)=0xa, 0x4) setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f0000001dc0)=0x6, 0x4) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000001e00)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001ec0), r4) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x64, r6, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x64}}, 0x20000890) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000002000), 0x200, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000002180)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002140)={&(0x7f0000002080)={0xb8, 0x1, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9d}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x18}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x10}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x58, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) ioctl$OCFS2_IOC_GROUP_ADD64(r7, 0x40186f03, &(0x7f00000021c0)={0x6, 0x706729a, 0xb1b8, 0x6}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000002200)="a041f3ea7bfe74c0cc73a8d221eebdbc", 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000002240)={0x0, @qipcrtr={0x2a, 0x4, 0x7ffe}, @vsock={0x28, 0x0, 0xffffd8ef, @my=0x0}, @l2={0x1f, 0x2fc6, @any, 0x400, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x81ec, 0x0, 0xfffffffffffffff9, 0x1}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002340)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r9, &(0x7f0000002400)={&(0x7f00000022c0), 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x28, r10, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4804}, 0x20004004) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000002480)={0x1, &(0x7f0000002440)=[{0x9, 0x1, 0xd7, 0x7f}]}) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000002580)={r4, r8, 0xf04, 0x89, &(0x7f00000024c0)="1b51cac1b186d8d58d9d0fc44d8ae61b50e1083f59a8c5a66c40579ddad096492603981492b666e6e5f96ea19424b228cc7569d0a6589ffe66b8013f21b09a1b6c2a7612bb34f1707d026477c410368c590fda3c3ad57202d33b6f53f622f18df583da91b8f7cf824f2c170d45da503581500bbf7fb68196519461e68b947dcbb5184022d979679c4c", 0x4, 0x6, 0x6, 0x7, 0x4, 0x2, 0x9, 'syz0\x00'}) 3.952143955s ago: executing program 3 (id=9559): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c00000074fa46d5fc867486086e8ef7e33120b3a9a3c7bd999497b2545f62201036dcdb890ae3f1e8d00000000000000000", @ANYRES16=r1, @ANYBLOB="05001000000000000000060000000800050002000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYRESDEC, @ANYRES16=r1, @ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="0a003400020202020202000014002a0075080000050002002d001001de1001090800350007000000080026006c090000"], 0x4c}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000080)=0xb1, 0x4) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e5f, @empty}}) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0), 0x4) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f0000000540)=@device_b, &(0x7f0000000580)=ANY=[@ANYBLOB="b8a9fe0043b6b014810308021100000008021100000147ff4daa0a004201a09a26066482308ccda13e000948f3fbb63abba0c89d0406e913715a1485954815641c49622857b5d5e3d0d207852e397a3f6751e31e8138f039e0a18ea01b54100e19d7aa52e7e1a4fc6a097f5f70d4f9fc2f23eac01d28bd17f75b720e0cfcffcc5c3999db279c4815ce7e5c5363180fdfc2d7d6c909775c6a413445eb112b1dc4b2a6cb34afdfe00a227fe749c3b10900000091bc7718fb0925e2e87ab094935d8e2d5c6368aecf1ad547b33e875ed8e795a1df097381b4ac5d34b2534f1a04bae13e20daf554a7bd0e3ea72b259d0d80c236240122a21b1a69ea95390e7c561d3320c193cd81f03c4c2324f6d0bc5ea9325b27ee07c8eea036e1d51dd1bdfced690918e0f3823c468a2caf651b0e50c34fb250bb63f45f79de6636a818ba80634dae8a2801af75b2301b2eea868f2feddb85d8babdb1e880732e212d281c028d71490fc229c720af9d9d8841bc1aaa105c33982c5893fff416d35904b06efad2b56f85d6db1fcf806858f303b4fea6a06a3f0d0961d25bacd20e22609cf4004f2da22e9f43e0a465dd57b00f1cad26f9ea26a464991c4ecb854363cde0bccb272a57bf1986c4afcb67996b598f7d91cbb863717000a0b8d140820e61212e40e5c5a09f045a77027a5f3f8bb5536c6297e3b03b5e6062267b7be8868eef680ed74d19911d0f82782ddea9c08e5960a69c0d5259d82fb81dc35967fcaa49080c02c7723d33e2ead76d07c968b9cfc372866aa85dbd4ae5676059761b9eb7d27c869cae4286930b0e2bde34f9837f54efab347ad090798573fd36b087a10f14eeeaf86cbf4a32d5abaf46c8470a6823f217e9ae1c9dce9c3cd3735cb5d116c0b6c8b826353eeb1b96a60066a9b6737e0d8addc53341da7dde884cc963c2eacd6865bf37b52c7ed9935099173467a011c1afd8331a84066cf766611c06c9e7c6ff0ddb8f230e6d197cbe9f7f3f93f0ca7de850e76eb774f9d3bbc76665c7932959b86700783fef5df41bea5061d138f7f7495d210be0389f6313a67c033e5b1ea01176c4ba5ddd47acea86ef4823b700f7fd28c171064ebbb6c40e4add6c2f20e2f7a422324f924c28117f837b1f9a6800000000000000"], 0x339) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xe}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='!\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000001a00), &(0x7f0000001a40)=0x4) recvmsg$kcm(r3, &(0x7f0000002d80)={&(0x7f0000000b00)=@can, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/13, 0xd}, {&(0x7f0000002ac0)=""/45, 0x2d}, {&(0x7f0000002b00)=""/104, 0x68}, {&(0x7f0000002b80)=""/162, 0xa2}, {&(0x7f0000002c40)=""/113, 0x71}], 0x6, &(0x7f0000002d40)}, 0x40000002) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x108a, &(0x7f0000002dc0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@mpls_mc={0x8848, {[{0x2, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x4}, {0x3}, {0x6, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x35e7}], @ipv4=@igmp={{0x15, 0x4, 0x1, 0x8, 0x105c, 0x67, 0x0, 0x6, 0x2, 0x0, @private=0xa010102, @remote, {[@rr={0x7, 0x1b, 0xe9, [@private=0xa010101, @empty, @broadcast, @private=0xa010102, @multicast2, @local]}, @ssrr={0x89, 0x1b, 0x21, [@loopback, @rand_addr=0x64010100, @rand_addr=0x7c1c, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x34}]}, @lsrr={0x83, 0x7, 0xbc, [@private=0xa010100]}]}}, {0x22, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, "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"}}}}}}, 0x0) recvmmsg$unix(r3, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000280)={0x77359400}) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000003c0)={r4, 0xcb}, 0x8) nanosleep(&(0x7f0000000180)={0x77359400}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="10000000080211000001080a11000000080211000000200000000000010001078284960c121824"], 0x27) 3.258935899s ago: executing program 4 (id=9568): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)}, {&(0x7f0000000640)="c37386f36d3c8a5bbffacfafd95a6a695542d696a6f9cdcca5c699544790405814124b80189c95e1f426b200ca860207507326578692f11b8fc132a155110cbe7dd09106f43aca95b152471d892c62e1dc7023d5fd3fa71aa7bced0678d4e7a75bd23d8eb99ed313fb86bd45643ac58220c1b36a6c60255f5809980b93a2013a4a4630add08f313e43dbfbc78703f7ecc380a6187092fa1abff3bf85d560", 0x9e}, {&(0x7f0000000700)="e6a8f979ae33e77c014d52462d70cf3f145e26da7dc671a28b46fe801071721f62fef866451bc835d00fbcb0b265d98591e0aaf1d98f26a6b31b0e65168299b8eee350f2d9fdcdbb6d5c2ca33d50fd22822b80799cbd1453fb432bd73d489da05382f80abe20db9332efcf7149e406f05fac1d14d5a3b7bdbbf1aad073f8c4f4a34881788825b74739847333cef4b12cce209e1660787fa5cd54f6b33334f2a0e1fb09e16562bd0090e26836957e62d75cc67cac740f9670b36364cf233671cef523402c5be0338c9e49d971a238796edf32bf3d06", 0xd5}, {&(0x7f0000000800)="5a895256187b62bd0407936078099fc86c246dac6518e3b6a360f75df7c66a60ce6840c9c205f7a5fb294733a28de5fc5281ebd5c568daf4db95db50b065c24d4e8875e868acde6b49f29d3007e47cc0acaa3293a2", 0x55}, {&(0x7f00000008c0)="17cc18616476f9460f471706350664676a06f6ca90d4eb6fd8b1b229554d093f95b290893e84c2eb60e72f1a12c23d6c617df5821ce311023441d55e4f33b837cfcf903f633dbf3a8c8bb3a58cca39fa2886f926f2906ab1fa4c8bb9604a5bd2e8faa65d5b54d95820cbd6e45b8e2652949961fb0e797eb92396b448aa5531278c78bca8ebf16c2ba3e167c8d12686dabc35a2e958fabfbc6cc4ad326a4f7a23c360480b93ecafaeeacc9f1eb35ffe56673c8658b83ed594dc3a4be2704aab790448102275203cecb994b7d863153afdb3e0", 0xd2}], 0x5}}, {{&(0x7f0000000a40)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000a80)="beac8564c3108c1131e205835aa5e2dabd1ece3d18485477835b86d198b3d3ae5b119869aac5eb601cfbbd7f3370ca8d7be0", 0x32}, {&(0x7f0000000ac0)="5728e06134257353f734113b6cfa33dda9cfeac754e8aed3b415c20a88003bb1121c805e47f4afe4518d2cf50824a1817c64095bee8c8a82ea33b1b7ff812ffc2604535fb270c07e99265f5f63261bac5876aad3528dc7fa530f870e4ac1add2ed3df4890f94294363440ffd1bfaf27ac457c940befc2b200dbb14a39c72d78b08fd82670e49d3ebc3ca9cf736daa3e0f1a75580a36ebbd15eea052b11a7d0a7b214d807f52fa8aac564a3ed7892ddabd9ce4171e3651678633ee241e45e8fe01f97b7c8e2af338dbc097098d82f31cc3542c0e91db7f902cc3091de9c17ce56614194f5ada3b22d8d3984c9", 0xec}, {&(0x7f0000000bc0)="e30d52c78481350d6c55030d040dcc92c0cdd27faa0eda3f1b56584410578ad1e5e57114414dbf6890109d01c171e6a24f29e37ab0d25fd1ebd3e046c43fcdd23f9b07", 0x43}, {&(0x7f0000000c40)="2806eeeff9e37ac0ff178864028a6cbd65a83a515385953710154f70fa61b53f", 0x20}], 0x4, &(0x7f0000000cc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x68, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x51, [@dev={0xac, 0x14, 0x14, 0x44}]}, @generic={0x7, 0x2}, @timestamp_prespec={0x44, 0x4c, 0x14, 0x3, 0x5, [{@multicast1, 0x7c3}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x100}, {@broadcast, 0x3}, {@private=0xa010101, 0x9}, {@multicast2, 0x87}, {@broadcast, 0x23}, {@remote, 0x2}, {@broadcast, 0x6}]}, @noop]}}}, @ip_retopts={{0x74, 0x0, 0x7, {[@generic={0x86, 0xa, "5f97fb3233fc6a6c"}, @noop, @ssrr={0x89, 0x23, 0x57, [@local, @loopback, @private=0xa010101, @empty, @remote, @remote, @multicast2, @empty]}, @timestamp_prespec={0x44, 0x14, 0xa1, 0x3, 0x4, [{@local}, {@broadcast, 0x3}]}, @cipso={0x86, 0x1a, 0x3, [{0x5, 0x4, "35f2"}, {0x0, 0x10, "7d5afd0b59316a9ea78ea2d6d736"}]}, @rr={0x7, 0x7, 0xb3, [@broadcast]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0x64010100, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @multicast2}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0xfc}, @timestamp={0x44, 0xc, 0xbe, 0x0, 0x7, [0x1, 0x3]}, @timestamp={0x44, 0x14, 0x7, 0x0, 0x8, [0xff, 0x6, 0x7, 0xef]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x1a0}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000e80)="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", 0xfb}], 0x1, &(0x7f0000000fc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14}}], 0x48}}, {{&(0x7f0000001040)={0x2, 0x4e26, @empty}, 0x10, &(0x7f0000001200)=[{&(0x7f0000001080)="1ee8b321a2570f5f2f715635fd892e97ed89d2bbb8be4c04909fbeafab53be1b5e59b91a9ed7afa819c1fdfa08e456920107ecd6d374ce6aba96c8113a8e92ddadd952f372c5df0332e14f50522d7f225617714d2969d12fecd25b228a608f3f45e0728d14da0a2efb55cf00ab26c46fddb33dd8448e63d6decd32b79a7f34362649dba2217d3400685b91434d9c21ecfc7176fdf630d9fce03c3b4dab1a7760aede78", 0xa3}, {0x0}, {&(0x7f0000001180)="8345e0e8060f4e77383dd966ae640457a37e6d32b041652f06c81f6581e2156f92df629cf05f0cf6eb88f5d72e652d6da94400a34ec8d8130150ab103784c915b279172d387e65c08b", 0x49}], 0x3, &(0x7f0000001240)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa00}}, @ip_retopts={{0x98, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x17, 0x6d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @loopback, @multicast2, @remote]}, @timestamp={0x44, 0x10, 0xe0, 0x0, 0x5, [0x7, 0x2, 0xe]}, @generic={0x89, 0xb, "cc2648efa8211d1f3c"}, @generic={0x83, 0x8, "c3a770de43b0"}, @timestamp_prespec={0x44, 0x1c, 0x34, 0x3, 0x7, [{@broadcast, 0x8}, {@private=0xa010101}, {@broadcast, 0x401}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0x47, [@broadcast]}, @timestamp_addr={0x44, 0x24, 0xd2, 0x1, 0x1, [{@multicast2, 0x3}, {@rand_addr=0x64010101, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x4}, {@broadcast, 0x8}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xdc}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x1e}, @broadcast}}}, @ip_ttl={{0x14}}], 0x118}}, {{&(0x7f0000001380)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001580)=[{&(0x7f00000013c0)="a2db4ec4a8e1cf26c38bf013e240e9d0acca4fb302718bb7e73c82e3f26d964e4eefb1fbcdcd81b8f1ed583cbc8c654b36442c512e60c4310daeb9d4abf609705426396038d8b5c383c4418118068d2ac3d7f89a900285713357adcf526f187087", 0x61}, {0x0}, {0x0}, {&(0x7f0000001540)="579a03f792f0554995a694b94299697440", 0x11}], 0x4}}, {{&(0x7f00000015c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, 0x0, 0x0, &(0x7f0000002900)=[@ip_retopts={{0x54, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0xcb, 0x3, 0x4, [{@rand_addr=0x64010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@remote, 0x6}, {@multicast1, 0xe22}, {@empty, 0x1}, {@multicast1, 0x4}]}, @timestamp_prespec={0x44, 0x4, 0x66, 0x3, 0x5}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x88}}], 0x6, 0x42044) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x5, 0x4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0x74}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.62194148s ago: executing program 1 (id=9574): sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D'], 0x44}}, 0x80) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="44400000100081050000cfade9492f336f950000", @ANYRES32=0x0, @ANYBLOB="14d00400000000002400128009000100626f6e64000000001400028008001f00ffffff7f0800090000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="b32365157f2b5ea8793e70db2f9bd3cb06a818e4f0b40b02db519245a77e1818f0b17349c0041bc8daf11fc9bc32a1cb9f0c45431d1371e3add35af92373fa837fa4ffc539c8682dfa0b4536fd0a587fb72c526a08f94bed908c6401f09b2f2223fb72faa2c10411f07be0aceb09862e934ad4105ee39f638e6c0ca30487bb8086c9454c9431dd49b3f62499785a5beb4046f014a492b353a1d513fe82feeb55a2", 0xa1}, {&(0x7f0000000100)="1d0f0754259dfb8f7f44fbfc7e94cdfc25fe8052743010f73353cfd331331278eb8c80cb15473b816a3b5536256a3cffcccdc78947e50e800900a6fffbd5a84b35dca72527c15abd0ff0be9c", 0x4c}, {&(0x7f0000000180)="6af7f6c9535a54691d1762270167d17534af03763197313d4d44c2fc530b40662d1e6846ee8c40e264618fef3ca942d4be8af1f3ddcb115c42", 0x39}], 0x3, 0x0, 0x0, 0x2c}, 0x10000004) 2.344210632s ago: executing program 4 (id=9578): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x4a, 0xe11, 0x0, 0x0, {0xa, 0x0, 0x300}}, 0x14}}, 0x800) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e23}, 0x6e) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNSETNOCSUM(r5, 0xc040ff0b, 0x200000000013) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000180), 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) close(r0) (async) socket(0x2b, 0x1, 0x1) (async) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x4a, 0xe11, 0x0, 0x0, {0xa, 0x0, 0x300}}, 0x14}}, 0x800) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc2a00e9bfde908990817b364e51afe9c8dab05b16a6437211f9f0570759f1cae63487ff68fffffffffffe8e3932e2b75a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba7541189070000f50c000000d8e5b1dc91c5499be2097784a94b6cc2d272ac751d8bce5db4862c1b2eab7007ceea158dbc329bab5f8450147b2b9629fdd6cdb5507d3a76dbaf6f93d161caa513f8aa41f795507856ea0015166c56ea0103220ed5a66834be086ef206a8606b04fc8462cbbe8233f381b4eefbdbdac708c1f4959cb6c008397006da8e243ec9fb19f3fab2b0f46d73a9f2d7c674cdbe4d7f76f5fbd05043e81f435fccf5063a93aa9b4c7f68670594"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async) bind$unix(r4, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e23}, 0x6e) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) ioctl$TUNSETNOCSUM(r5, 0xc040ff0b, 0x200000000013) (async) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000180), 0x2) (async) 2.248981263s ago: executing program 1 (id=9580): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x24, @long={0x3, 0x1}}, 0x14, &(0x7f0000000100)={0x0, 0x13}, 0x1, 0x0, 0x0, 0x20005014}, 0x20004840) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) recvmsg$unix(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/54, 0x36}], 0x1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x1, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000100000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f00000057c0)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x4000000) 2.164107628s ago: executing program 4 (id=9581): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r8, 0x1}], 0x1, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f00000014c0)=[{{&(0x7f0000000400)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000680)="1aaa1fca2d2c2fff2015b5ac2b5eaa047d5788bb0d75cd354c38bee07ec9f1e846ffc4ea66fa69d94d81bc97f8e9fe8b82e22b934eccdfc63c47c38112a15ac4e9d4eadf9529e9dfa5aa29010f1b9586a982bbf1a1793b21f44372e4b960ecd7d17f063190c4a9758a3266fc50f21be2cb15e32ffcda813d5b99cfdb226a188982153a5c05b872122409b86fbefdab6e6b854e44b2d2f4ab71be9fde6d28cda9322e15a67b3a4b215f383477655ba6", 0xaf}, {&(0x7f0000000840)="b7f93cdc3336bf6d596a9f133970e26562e9b3b25824039df0650b2653d488d5b4bb7a8e575db5d9bd12e78b7c278ff9bc955cdc4541f371f183e5e7dcd9ee59c34194321a0f5479c87c35062620415437a7d8ee0335321c38598367b29578f6ecfa3ada76c0e2b84f86625b3a923ba3bfa639b38f6ed52654c34c62ec5ba087f78d1e4adee6a7daf365e89788e32e9488a9c5b63cdf69d6fe14f7a5f9f78fe91399833d8db367757f924816e60081a84393aff80cdca6dacb2ed85911ed57bf94a59c9312ee45c62ee25a432256295d096deaeb5809d87d544a6c14f6b8698972e6ac0d48f6", 0xe6}, {&(0x7f00000009c0)="edf3be323e701d823b040d207aa87d8ea5e0b1430980f43353c1c98d9cbcad8bdd7000217e799b27c41c68f1dfc94d12c296473f84e6c1b1b1b3c03d171c7eda35769e872e48a6298479afe035faf9", 0x4f}, {&(0x7f0000000a40)="ac53a207e95372353f6b2339a56e3543157429a624295c6dd654e53622b3c81c6aa8dac9483f52ef239a81ca64f4ad0a72e594153a268bf3743fad2987c240e1b00230e676ced18effec3bcb6c7bc017d7ed2372ff1464e9ccd774760c1b6bf8a50fb5003ae1ad59a568a08e2937eb67795413a1aeb341c6b33cadc81c21aaf1f31b63570a6450097c2d591465bb49f8c94258ec1baafb9f056c6070025e26cb58cea43855f1583ac9b295509bff67ecc7d8df8d5369070f96edeea1578d5f098845dcc12c0e23b43f2f14be1b614805cc", 0xd1}], 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x508}}, {{&(0x7f00000010c0)=@x25, 0x80, &(0x7f0000001300)=[{&(0x7f0000001140)="6e5cbf9a31506ccad3e83d76d1fbdd4a3c5fd0ddbd7474f9c0f988736cfcf4b726ba1cdf4bcf7add6507cdefb8d4e6b3e82250e7db35965a3ef78be6b280c87e9c98392922a9c9be2673758e4af903b0fb81988b04d514923cdb39bd40fe6bf88f33053b4401a94e368baba57d4b73e9ca8f2f7ad4ff18b94c1ef191d7218fb88dcde0", 0x83}, {&(0x7f0000001200)="c51ebba1c23fd022cc3f483bc0556c878d695febf91012aed2b26a60b47422547bb2e88d947b2368c168ceb834d5973b0efe138cda82d796191c711e99c7a3e0bd0511d7f1f1381bba78f383", 0x4c}, {&(0x7f0000001280)="800a3dbdd6cb3dda979074c4b27dedb943249ec61e5e078247e7900d3f5c48c5695e24a03bb52e46460bbf336c21c0aa341d80b66aa3db5f453cbf1d47362a53af44ad912707211a0ba206ca28963cd6e7fa07e9bce470fc2f", 0x59}], 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="d0000000003f0000000100000000000589558136e4ba1cf39372274e1b38e0ffe275f2141ef30c28611c72048e2052f6d99232875c7e5d04898ce48962b60026a4c9a02769ae01e93c1e39d3e7603789edefa99b2cdd556e56b0b3c37e280808e5ec9f7d7e53cf5c9f65f1259c4863819c4526719500639ff0d34184d6f25008e672bc82cdff05c48c6a28d35486227797b17a561dcf16cc93d5306c9b0957c35f44577543e1f8b5210f2961a065f0dc653e3a670fede02dd840b7fbe1881331bd3be4bec7ba019c296f3a78"], 0xd0}}], 0x2, 0x20004041) epoll_wait(r8, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000800)={0xa0000006}) close(0x3) syz_80211_inject_frame(&(0x7f0000000200)=@broadcast, &(0x7f0000000340)=ANY=[@ANYBLOB="5809040050505050505008021100000008021100000178005a0e3269ef10d89883c73a681f906df5132399625b45678683ecd90140d60631a2e1de82aea74420925b3ecc70362815ca43667a0d49d2ccdb2c2a0199eac88a0a1894fb9fc9c539737569cd7e4a692fb61d23cc96c08a35e4d2e4d6dd00"/128], 0x80) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x5, &(0x7f0000000200)=ANY=[@ANYRES32=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x23}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r9, 0x0, 0x108, 0x0, &(0x7f0000000540)="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", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdffffff}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0x3}, {0x0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xffe0, 0x2}, {0x6}, {0x1c, 0xfff9}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x2}, @TCA_FLOW_POLICE={0x10, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24008040}, 0x24000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) sendfile(r11, r11, 0x0, 0xc) r12 = openat$cgroup_procs(r10, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) sendfile(r12, r12, 0x0, 0xfff) 1.942675046s ago: executing program 3 (id=9583): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x13, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @multicast}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000380)=0xffffffffffff8001, 0x12) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x70bd2e, 0x25dfdbfc, {0x2, 0x0, 0x49, 0xff, r7}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, @IFA_FLAGS={0x8, 0x8, 0x700}]}, 0x28}}, 0x0) 1.77576056s ago: executing program 3 (id=9586): socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0x35, 0x0, &(0x7f0000000a40)="e402004470d8d400eb00c15286dd94945ce296f162f1489768c8c3cfd6d5225fc1204ccf1bf9febd0d25aaaa49d4ea55395beec17a", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="2e000300010000", 0x7) r2 = socket$inet6(0xa, 0x802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000002c0)=ANY=[], 0xe8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x40084) (async) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x40084) socket(0x1e, 0x1, 0x0) (async) socket(0x1e, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) (async) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) socket$nl_audit(0x10, 0x3, 0x9) (async) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x3f3, 0x0, 0x0, 0x0, {0x10, 0x3fb}}, 0x420}}, 0x0) (async) sendmsg$AUDIT_ADD_RULE(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x3f3, 0x0, 0x0, 0x0, {0x10, 0x3fb}}, 0x420}}, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) listen(r5, 0x2000000) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001a0ffffff00"/71], 0xfdef) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001400010004000000fedbdf250a000000040000000800088004024780140002"], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) (async) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001400010004000000fedbdf250a000000040000000800088004024780140002"], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) 1.592498345s ago: executing program 1 (id=9588): r0 = socket$netlink(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000500000002000000070000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5, r4}, 0xc) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) socket(0x2b, 0x1, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x3c, r8, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40000000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a58000000060a010400000000000000000a0004050900010073797a31000000002c00048028000180090001006c61737400000000180002800c000240000000000000000408000140000003ff0900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 1.339019373s ago: executing program 2 (id=9589): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c0, 0x108, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x2f0, 0xffffffff, 0xffffffff, 0x2f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast1, @mcast2, [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0xffffff00], 'bond_slave_0\x00', 'team_slave_1\x00', {}, {}, 0x3a, 0x2, 0x6, 0x8}, 0x0, 0xe0, 0x108, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x8, {0xffc0000000}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3b}}}, {{@ipv6={@remote, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'syzkaller0\x00', 'bridge_slave_1\x00', {}, {}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x2c, 0x10, 0x1}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x6536d5ef40a93735}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) 1.262687491s ago: executing program 0 (id=9590): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7060000050000008500000005000000bf0900000000000035090100ffffffd09500000000000000b7020000000000007b9af8ff0000000065090000050000007baaf0ff00000000ad9900000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bfa300000000000056080000000000008500000052000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.159710249s ago: executing program 2 (id=9591): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x40, 0x107, 0x70bd27, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x5, 0x10, 0x0, 0x1, [@generic="8b"]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r0, 0x0, 0x3010) connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, 0x0, 0x800) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x4000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac14140034"], 0x2c}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.077094254s ago: executing program 2 (id=9592): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r1, 0xc0105872, &(0x7f00000001c0)={0x10001, 0x10000}) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000100) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0xfffffeff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x10003) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x840) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x14, 0x4, 0x8, 0x201}, 0x14}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="02"], 0x10}, 0x1b}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r5, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ff7d20bcc1"}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004000}, 0xf101c78643931653) 1.019944841s ago: executing program 0 (id=9593): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0x111, 0x4b4, 0x150, 0x700, 0x248, 0x278, 0x278, 0x248, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0x0, 0x0, 0xff], [], 'vlan0\x00', 'caif0\x00', {}, {}, 0x88}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x4e22]}}, @common=@unspec=@connmark={{0x30}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x5}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [0xffffffff], [], 'geneve1\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7111}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r4) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r6, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4008030) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r3, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x81}, 0x6040) close(r1) 957.913966ms ago: executing program 1 (id=9594): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f00000e050002"], 0x48}, 0x1, 0x0, 0x0, 0x48004}, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) sendto(r1, &(0x7f0000000600), 0x0, 0x20048841, &(0x7f0000000680)=@isdn={0x22, 0xbe, 0x9, 0x1, 0x3}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000390400000000fcdbdf25000003e4", @ANYRES32=0x0, @ANYBLOB="00080000c31006002800128008000100736974001c00028006000d004100000008000300000900"/48], 0x48}, 0x1, 0x0, 0x0, 0xc041}, 0x80) 803.146631ms ago: executing program 2 (id=9595): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0xc08, 0x3, 0x480, 0x350, 0x5002004a, 0xb, 0x350, 0xea13, 0x3e8, 0x3c8, 0x3c8, 0x3e8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x308, 0x350, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x0, 0x0, 0x1}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {0xfffd}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {0x0, 0x2}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {0xfffc}, {}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x52}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {0x3, 0x2}, {}, {}, {}, {0x0, 0x0, 0x9}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@unspec=@physdev={{0x68}, {'ip6gretap0\x00', {0xff}, 'syzkaller1\x00', {}, 0x19, 0x10}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x401, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x6, 0xc}, {0x3, 0x4, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0x700000000000000}}, {0x28, '\x00', 0x4}}}}, 0x4e0) 752.100637ms ago: executing program 3 (id=9596): r0 = socket$inet6(0xa, 0x802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdf41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xc3}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000d4c1096681ce91719c86e0005e6c73c2bb79740b345f3c69bca33ef60f883b5b8295dc9172c400241c9f33cb20cb06720cd997245c5169932280d1523b30a5aa818b033206b779257d80a2ed5e0a1a419811"], 0x8) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x0, 0x4, 0x100c, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', r2}, 0x94) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x11}}) 707.657754ms ago: executing program 1 (id=9597): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000fb010000000000000200000085000080280000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) readv(r2, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/121, 0x79}], 0x1) sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @mcast1, 0x9}, 0xa, &(0x7f0000000000)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b4", 0x27}, {&(0x7f0000000300)="193b73", 0x3}], 0x2}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800040000000000080012000307ff0008001100ff070000080010000000020008000f"], 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000140)={0x1f}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000000c0)={0x7b7306ca40510a6}) epoll_pwait(r8, &(0x7f0000000000)=[{}, {}], 0x2, 0x200, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000091}, 0x20000080) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000080000000000000008000000911197000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) socket$kcm(0x29, 0x7, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r10, 0x0, 0x8, &(0x7f0000000000)=0x1ff, 0x4) getsockopt$inet_opts(r10, 0x0, 0x9, &(0x7f00000001c0)=""/16, &(0x7f0000000200)=0x10) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='blkio.bfq.sectors\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x6eba, 0x0, r3, 0x8, '\x00', r9, r11, 0x1, 0x1, 0x4}, 0x50) 705.881609ms ago: executing program 2 (id=9598): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0xff00, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=[{0xff00, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb}, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r4) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000c00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000c40)={0x728, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PEERS={0x1ac, 0x8, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5cc94db2196eb8e77ee9fcbaafcf2e27e2f1def024f78e4c1bba8fa3fa510a5e"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x8, @loopback, 0x5}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}]}, {0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast2}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x4}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4573ab811a5623cf}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x101}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}]}]}, @WGDEVICE_A_PEERS={0x534, 0x8, 0x0, 0x1, [{0x218, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x8c, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x34}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}, @WGPEER_A_ALLOWEDIPS={0x174, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x6}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_FLAGS={0x8}]}, {0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2cb450f750adef6593c0bd98275403cf3fd98fcb089bf22d9ff1c354395a0839"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x2, @empty, 0x3}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x264, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1cc, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0xb}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "124c68388def1ea637a8467dd7a7f9a4b42e15ef3875a53855c2ce9471eb80fc"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc0c7}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xf4, @private2, 0x9}}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}]}, 0x728}, 0x1, 0x0, 0x0, 0x20040830}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x4c, r6, 0x1, 0x0, 0x0, {0x21}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000025c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010700000000fcdbdf256700000008000300", @ANYBLOB="f6fd990008000000290000000800c300741300000800c400"], 0x38}}, 0x40) 682.284033ms ago: executing program 0 (id=9599): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="a0010000100001000000000000000000ac1e0101000000000000000000000000fc0200000000000000000000000000000000ecdf000000030000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000640104fe00000000000000000000000000000000000000000000000000000000010000000000000000000000001000000000000000004000fcffffffffffffff0000000000000000000000000000000000000000000000000100000000000000000000800000000002002e9e000000001000000000000000020000000000000000000000020001734c000000000000004c001400686d61632873686132353629000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000480002006362632873657270656e742900"/288], 0x1a0}}, 0x0) 563.661219ms ago: executing program 4 (id=9600): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4000000010000304000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000420000002000128008000100677470001400028008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="a4571e2c1a204e8d0d169f2e2ba0a8876edfbe5364ec6dd92ac9e1baca9025537ed9c55a0b38ba63a7c0936b03d888bc435cc04248de2829e55bf81994db4dade7ed"], 0x40}, 0x1, 0xba01}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2b, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r4 = socket(0x10, 0x803, 0x8) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f00000001c0)={@rand_addr, @private}, &(0x7f00000002c0)=0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a001b0c2bbd7000fbdb8ae0fabf000000000014080001"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x24000804) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x8815}, 0x8000) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r9 = socket(0x2, 0x80805, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x7a, &(0x7f0000000340)={r11, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt(r8, 0x84, 0x82, &(0x7f00000002c0)="1af3050013000000", 0x8) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a0000012bbd7000fc0a1400a3ff02ff010017000008000400", @ANYRES32=r13, @ANYBLOB], 0x24}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYBLOB="9a87b8f0cd0e915ef4e8df09f41e288bce687cc3f1705e74bb1ad3c64d6b70f5f1972ac8ade4fd528f1bc0cb4a7e7a498ca3fc72d7dcc55f0c0eb3c8a7e145999222f8cb35a9959a641ab78a542fede9dcdaa98b7f475b", @ANYBLOB="00001000252155b21c0012000c000100626f6e640b1c5ec9e2bdde943e0601ff1f2dbee812107c3c59dbcd557843271573fd85eefc6ec64c08f0dfe591f6378ed9f1855a4d59cdc312ce64a7fe8c0cf10331707444968321abcfda84c79e2f47171722eb0306c2249062daecc218d8f3cc8d633029daf26dbe71ef6959cfdda35d7f5545b759cc34ee0d63066fa8ebb0ba42e3896cf21abc6d22c879dd"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r7, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) 554.118906ms ago: executing program 2 (id=9601): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000240)={@random="05c38c886b60", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "020008", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "a200fffffff5000000000000"}, {0x0, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x44}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r4) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$MRT_DEL_VIF(r6, 0x0, 0xcb, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe0}}, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(r8, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000040a010100000000000000000a0000010900030073797a320000000083df0a63f183422e4215036c08a6377775327d731a22565a505990290b084f38d7af564b530c79f51a3b1c74ad86292d882c"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) socket$tipc(0x1e, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) sendfile(r0, r6, 0x0, 0x20000000002) 493.940493ms ago: executing program 0 (id=9602): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x40, 0x107, 0x70bd27, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x5, 0x10, 0x0, 0x1, [@generic="8b"]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r0, 0x0, 0x3010) connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, 0x0, 0x800) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x4000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac14140034"], 0x2c}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 304.84143ms ago: executing program 0 (id=9603): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7060000050000008500000005000000bf0900000000000035090100fffffff09500000000000000b7020000000000007b9af8ff0000000065090000050000007baaf0ff00000000ad9900000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bfa300000000000056080000000000008500000052000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 148.029774ms ago: executing program 4 (id=9604): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x8, 0x0, 0x80000}}, @TCA_CT_MARK={0x8, 0x10, 0x10000004}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x30004850) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r3 = epoll_create1(0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) close(r4) socket(0x2000000000000021, 0x2, 0x2) (async) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0xa0028000}) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}}) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000000)={r2, 0xd, 0x9}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000480)={r2, @in6={{0xa, 0x4e20, 0x200, @mcast2, 0x10}}}, &(0x7f0000000540)=0x84) 96.971606ms ago: executing program 0 (id=9605): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r1, 0xc0105872, &(0x7f00000001c0)={0x10001, 0x10000}) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000100) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0xfffffeff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x10003) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x840) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x14, 0x4, 0x8, 0x201}, 0x14}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="02"], 0x10}, 0x1b}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r5, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ff7d20bcc1"}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004000}, 0xf101c78643931653) 78.749557ms ago: executing program 4 (id=9606): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff1100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001011404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8}, 0x10}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000000101040000000000000000020010002400028014000180080001"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0x37, 0x0, &(0x7f0000001080)="e460334470b8d480eb00c15286dd08d8829f5fb5e2eb3b56fddaa2b27da9d81c20bfde92a3cd98f29389530882794568195b29c77653bb", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r4) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) socket$l2tp(0x2, 0x2, 0x73) r8 = socket$l2tp(0x2, 0x2, 0x73) close(r8) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r5, 0x4}, {r7, 0x1c}], 0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xc, 0x4}, {}, {0xc, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @private=0xa010102}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20040054) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40401}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1003}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r12}, 0xc) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[], 0x0) 0s ago: executing program 1 (id=9607): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000029c0)=[{{&(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)="8a509dadce8149cb96ac3ea1ef6058bea53f13bc9d1c7f57ff1f", 0x1a}, {&(0x7f0000000140)="bb6abb9133231c9f903e611c1aded98d1eaa4ceed8c218c62a83f26f53eb1ec13246650e7c6573a0457ed9f6ec509817b74de5493a39529c39962168662c61fbf7da20999d598a4e06aae1e12ce97a94bedadf876471d3ba0e539548dbe9c3d82d43b268adf0989187e389dfd0cbe500203594406d5518def5eba57fd5ccda01111db299090eed19b31d", 0x8a}, {&(0x7f00000002c0)="8c72f68cec6b296392c6845f81ae4c67ac965f039510b4419d3be346e0f50ba87a69141ad5a1d175e27c5919c6b0263638228a8c45013b02ffb837a8a11b31fbeae1938e2c4fef087af306af325636b78e65d1872796217f6d9b09dd3f0a2d66b54f0a1feb9521de933fa4171c4f5fbf195f78c829381c1ed057c413c858a64789eb0822b48ed468ce183fa7f2", 0x8d}], 0x3, &(0x7f0000000400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0xf5, [@rand_addr=0x64010100]}, @noop, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @local}}}], 0x78}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)}, {&(0x7f0000000640)="c37386f36d3c8a5bbffacfafd95a6a695542d696a6f9cdcca5c699544790405814124b80189c95e1f426b200ca860207507326578692f11b8fc132a155110cbe7dd09106f43aca95b152471d892c62e1dc7023d5fd3fa71aa7bced0678d4e7a75bd23d8eb99ed313fb86bd45643ac58220c1b36a6c60255f5809980b93a2013a4a4630add08f313e43dbfbc78703f7ecc380a6187092fa1abff3bf85d560", 0x9e}, {&(0x7f0000000700)="e6a8f979ae33e77c014d52462d70cf3f145e26da7dc671a28b46fe801071721f62fef866451bc835d00fbcb0b265d98591e0aaf1d98f26a6b31b0e65168299b8eee350f2d9fdcdbb6d5c2ca33d50fd22822b80799cbd1453fb432bd73d489da05382f80abe20db9332efcf7149e406f05fac1d14d5a3b7bdbbf1aad073f8c4f4a34881788825b74739847333cef4b12cce209e1660787fa5cd54f6b33334f2a0e1fb09e16562bd0090e26836957e62d75cc67cac740f9670b36364cf233671cef523402c5be0338c9e49d971a238796edf32bf3d06", 0xd5}, {&(0x7f0000000800)="5a895256187b62bd0407936078099fc86c246dac6518e3b6a360f75df7c66a60ce6840c9c205f7a5fb294733a28de5fc5281ebd5c568daf4db95db50b065c24d4e8875e868acde6b49f29d3007e47cc0acaa3293a2", 0x55}, {&(0x7f00000008c0)="17cc18616476f9460f471706350664676a06f6ca90d4eb6fd8b1b229554d093f95b290893e84c2eb60e72f1a12c23d6c617df5821ce311023441d55e4f33b837cfcf903f633dbf3a8c8bb3a58cca39fa2886f926f2906ab1fa4c8bb9604a5bd2e8faa65d5b54d95820cbd6e45b8e2652949961fb0e797eb92396b448aa5531278c78bca8ebf16c2ba3e167c8d12686dabc35a2e958fabfbc6cc4ad326a4f7a23c360480b93ecafaeeacc9f1eb35ffe56673c8658b83ed594dc3a4be2704aab790448102275203cecb994b7d863153afdb3e0", 0xd2}], 0x5}}, {{&(0x7f0000000a40)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000a80)="beac8564c3108c1131e205835aa5e2dabd1ece3d18485477835b86d198b3d3ae5b119869aac5eb601cfbbd7f3370ca8d7be0", 0x32}, {&(0x7f0000000ac0)="5728e06134257353f734113b6cfa33dda9cfeac754e8aed3b415c20a88003bb1121c805e47f4afe4518d2cf50824a1817c64095bee8c8a82ea33b1b7ff812ffc2604535fb270c07e99265f5f63261bac5876aad3528dc7fa530f870e4ac1add2ed3df4890f94294363440ffd1bfaf27ac457c940befc2b200dbb14a39c72d78b08fd82670e49d3ebc3ca9cf736daa3e0f1a75580a36ebbd15eea052b11a7d0a7b214d807f52fa8aac564a3ed7892ddabd9ce4171e3651678633ee241e45e8fe01f97b7c8e2af338dbc097098d82f31cc3542c0e91db7f902cc3091de9c17ce56614194f5ada3b22d8d3984c9", 0xec}, {&(0x7f0000000bc0)="e30d52c78481350d6c55030d040dcc92c0cdd27faa0eda3f1b56584410578ad1e5e57114414dbf6890109d01c171e6a24f29e37ab0d25fd1ebd3e046c43fcdd23f9b07", 0x43}, {&(0x7f0000000c40)="2806eeeff9e37ac0ff178864028a6cbd65a83a515385953710154f70fa61b53f", 0x20}], 0x4, &(0x7f0000000cc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x68, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x51, [@dev={0xac, 0x14, 0x14, 0x44}]}, @generic={0x7, 0x2}, @timestamp_prespec={0x44, 0x4c, 0x14, 0x3, 0x5, [{@multicast1, 0x7c3}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x100}, {@broadcast, 0x3}, {@private=0xa010101, 0x9}, {@multicast2, 0x87}, {@broadcast, 0x23}, {@remote, 0x2}, {@broadcast, 0x6}]}, @noop]}}}, @ip_retopts={{0x74, 0x0, 0x7, {[@generic={0x86, 0xa, "5f97fb3233fc6a6c"}, @noop, @ssrr={0x89, 0x23, 0x57, [@local, @loopback, @private=0xa010101, @empty, @remote, @remote, @multicast2, @empty]}, @timestamp_prespec={0x44, 0x14, 0xa1, 0x3, 0x4, [{@local}, {@broadcast, 0x3}]}, @cipso={0x86, 0x1a, 0x3, [{0x5, 0x4, "35f2"}, {0x0, 0x10, "7d5afd0b59316a9ea78ea2d6d736"}]}, @rr={0x7, 0x7, 0xb3, [@broadcast]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0x64010100, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @multicast2}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0xfc}, @timestamp={0x44, 0xc, 0xbe, 0x0, 0x7, [0x1, 0x3]}, @timestamp={0x44, 0x14, 0x7, 0x0, 0x8, [0xff, 0x6, 0x7, 0xef]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x1a0}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000e80)="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", 0xfb}], 0x1, &(0x7f0000000fc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14}}], 0x48}}, {{&(0x7f0000001040)={0x2, 0x4e26, @empty}, 0x10, &(0x7f0000001200)=[{&(0x7f0000001080)="1ee8b321a2570f5f2f715635fd892e97ed89d2bbb8be4c04909fbeafab53be1b5e59b91a9ed7afa819c1fdfa08e456920107ecd6d374ce6aba96c8113a8e92ddadd952f372c5df0332e14f50522d7f225617714d2969d12fecd25b228a608f3f45e0728d14da0a2efb55cf00ab26c46fddb33dd8448e63d6decd32b79a7f34362649dba2217d3400685b91434d9c21ecfc7176fdf630d9fce03c3b4dab1a7760aede78", 0xa3}, {0x0}, {&(0x7f0000001180)="8345e0e8060f4e77383dd966ae640457a37e6d32b041652f06c81f6581e2156f92df629cf05f0cf6eb88f5d72e652d6da94400a34ec8d8130150ab103784c915b279172d387e65c08b", 0x49}], 0x3, &(0x7f0000001240)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa00}}, @ip_retopts={{0x98, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x17, 0x6d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @loopback, @multicast2, @remote]}, @timestamp={0x44, 0x10, 0xe0, 0x0, 0x5, [0x7, 0x2, 0xe]}, @generic={0x89, 0xb, "cc2648efa8211d1f3c"}, @generic={0x83, 0x8, "c3a770de43b0"}, @timestamp_prespec={0x44, 0x1c, 0x34, 0x3, 0x7, [{@broadcast, 0x8}, {@private=0xa010101}, {@broadcast, 0x401}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0x47, [@broadcast]}, @timestamp_addr={0x44, 0x24, 0xd2, 0x1, 0x1, [{@multicast2, 0x3}, {@rand_addr=0x64010101, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x4}, {@broadcast, 0x8}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xdc}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x1e}, @broadcast}}}, @ip_ttl={{0x14}}], 0x118}}, {{&(0x7f0000001380)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001580)=[{&(0x7f00000013c0)="a2db4ec4a8e1cf26c38bf013e240e9d0acca4fb302718bb7e73c82e3f26d964e4eefb1fbcdcd81b8f1ed583cbc8c654b36442c512e60c4310daeb9d4abf609705426396038d8b5c383c4418118068d2ac3d7f89a900285713357adcf526f187087", 0x61}, {0x0}, {0x0}, {&(0x7f0000001540)="579a03f792f0554995a694b94299697440", 0x11}], 0x4}}, {{&(0x7f00000015c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, 0x0, 0x0, &(0x7f0000002900)=[@ip_retopts={{0x54, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0xcb, 0x3, 0x4, [{@rand_addr=0x64010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@remote, 0x6}, {@multicast1, 0xe22}, {@empty, 0x1}, {@multicast1, 0x4}]}, @timestamp_prespec={0x44, 0x4, 0x66, 0x3, 0x5}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x88}}], 0x7, 0x42044) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x5, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0x74}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) unshare(0x22020600) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={0x1d, r1, 0x3, {0x1, 0xff}, 0xfd}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x8, 0xfff, 0x2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, r5, 0x200000000000000}, 0x38) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000200)) kernel console output (not intermixed with test programs): ory.events" dev="tmpfs" ino=2653 res=0 errno=0 [ 1062.730398][ T4631] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.750978][ T29] audit: type=1804 audit(1782894550.935:11): pid=4745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.8682" name="/newroot/517/memory.events" dev="tmpfs" ino=2653 res=1 errno=0 [ 1062.779315][ T29] audit: type=1800 audit(1782894550.935:12): pid=4745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8682" name="memory.events" dev="tmpfs" ino=2653 res=0 errno=0 [ 1062.803330][ T4631] bridge_slave_0: entered allmulticast mode [ 1062.827030][ T4631] bridge_slave_0: entered promiscuous mode [ 1062.838956][ T4631] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.847765][ T4631] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.856673][ T4631] bridge_slave_1: entered allmulticast mode [ 1062.867330][ T4631] bridge_slave_1: entered promiscuous mode [ 1063.027846][ T4752] syzkaller0: entered promiscuous mode [ 1063.033386][ T4752] syzkaller0: entered allmulticast mode [ 1063.047755][ T4631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1063.068037][ T4631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1063.366699][ T4631] team0: Port device team_slave_0 added [ 1063.383892][ T4631] team0: Port device team_slave_1 added [ 1063.463431][ T4752] tipc: Enabled bearer , priority 0 [ 1063.554459][ T4631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1063.589490][ T4631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1063.631372][ T4631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1063.649712][ T4631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1063.657652][ T4631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1063.694284][ T4631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1063.748834][ T4751] tipc: Resetting bearer [ 1063.798942][ T4775] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8691'. [ 1063.807946][ T4775] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8691'. [ 1063.830507][ T4751] tipc: Disabling bearer [ 1064.071856][ T2521] Bluetooth: hci3: command tx timeout [ 1064.229282][ T4631] hsr_slave_0: entered promiscuous mode [ 1064.240082][ T4631] hsr_slave_1: entered promiscuous mode [ 1064.247985][ T4631] debugfs: 'hsr0' already exists in 'hsr' [ 1064.254344][ T4631] Cannot create hsr debugfs directory [ 1064.792854][ T7331] bond4 (unregistering): (slave ip6gre2): Releasing backup interface [ 1064.801381][ T7331] ip6gre2 (unregistering): left promiscuous mode [ 1064.995578][ T4813] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8702'. [ 1065.004588][ T4813] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8702'. [ 1065.514566][ T7331] bond0 (unregistering): Released all slaves [ 1065.528645][ T7331] bond1 (unregistering): Released all slaves [ 1065.547588][ T7331] bond2 (unregistering): Released all slaves [ 1065.566984][ T7331] bond3 (unregistering): Released all slaves [ 1065.586003][ T7331] bond4 (unregistering): Released all slaves [ 1065.606065][ T7331] bond5 (unregistering): (slave veth11): Releasing active interface [ 1065.627324][ T7331] batadv1: entered promiscuous mode [ 1065.640155][ T7331] bond5 (unregistering): (slave batadv1): Releasing active interface [ 1065.649406][ T7331] bond5 (unregistering): Released all slaves [ 1065.668655][ T7331] bond6 (unregistering): Released all slaves [ 1065.690913][ T7331] bond7 (unregistering): (slave veth17): Releasing active interface [ 1065.701066][ T7331] bond7 (unregistering): Released all slaves [ 1065.781516][ T7331] bond8 (unregistering): (slave batadv2): Releasing active interface [ 1065.789648][ T7331] batadv2: left promiscuous mode [ 1065.794783][ T7331] batadv2: left allmulticast mode [ 1065.802259][ T7331] bond8 (unregistering): Released all slaves [ 1065.899118][ T4823] tipc: Enabling of bearer rejected, failed to enable media [ 1066.170475][ T2521] Bluetooth: hci3: command tx timeout [ 1066.586266][ T7331] tipc: Left network mode [ 1066.761675][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 1066.999542][ T199] net_ratelimit: 2 callbacks suppressed [ 1066.999592][ T199] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1067.191064][ T4869] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8712'. [ 1067.217614][ T4869] unsupported nlmsg_type 40 [ 1067.337061][ T4869] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8712'. [ 1067.441160][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1068.280828][ T2521] Bluetooth: hci3: command tx timeout [ 1068.480650][ T4898] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8716'. [ 1068.517675][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1068.568255][ T7356] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1068.679910][ T7354] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1068.881450][ T7356] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1069.076790][ T4919] netlink: 'syz.0.8720': attribute type 4 has an invalid length. [ 1069.101987][ T7356] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1069.116400][ T4919] netlink: 'syz.0.8720': attribute type 4 has an invalid length. [ 1069.150747][ T5726] lo speed is unknown, defaulting to 1000 [ 1069.162543][ T5726] syz2: Port: 1 Link DOWN [ 1069.366695][ T5726] lo speed is unknown, defaulting to 1000 [ 1069.386943][ T5726] syz2: Port: 1 Link ACTIVE [ 1069.820945][ T47] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1069.866114][ T4947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1069.897783][ T4947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1070.059832][ T4947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1070.073540][ T4947] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1070.083961][ T4947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1070.286560][ T4947] veth1_vlan: left promiscuous mode [ 1070.293277][ T4947] veth0_vlan: left promiscuous mode [ 1070.300261][ T4947] veth0_vlan: entered promiscuous mode [ 1070.308700][ T4947] veth1_vlan: entered promiscuous mode [ 1070.318730][ T4947] veth1_macvtap: left promiscuous mode [ 1070.361796][ T4947] veth0_macvtap: entered promiscuous mode [ 1070.368867][ T4947] veth1_macvtap: entered promiscuous mode [ 1070.381302][ T4947] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1070.389687][ T4947] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1070.398090][ T4947] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1070.406957][ T4947] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1070.414786][ T4947] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1070.480575][ T7359] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.487737][ T7359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1070.496994][ T7359] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.504329][ T7359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1070.537803][ T7354] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.546585][ T7354] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.616863][ T7331] hsr_slave_0: left promiscuous mode [ 1070.626595][ T7331] hsr_slave_1: left promiscuous mode [ 1070.635582][ T4964] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8727'. [ 1070.986627][ T4980] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8731'. [ 1071.046323][ T4984] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8731'. [ 1072.061717][ T5029] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20004 [ 1072.714114][ T5040] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8739'. [ 1072.738843][ T5040] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8739'. [ 1078.272055][ T7354] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.368668][ T4969] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1078.389908][ T4969] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1078.398744][ T4969] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1078.433421][ T4969] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1078.445011][ T4969] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1078.530821][ T5014] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1078.608242][ T5039] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1078.704685][ T5053] netlink: 'syz.0.8742': attribute type 25 has an invalid length. [ 1078.720791][ T5053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8742'. [ 1078.729819][ T7354] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.761664][ T7354] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1078.770342][ T7354] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1078.790942][ T9] wlan0 speed is unknown, defaulting to 1000 [ 1078.819106][ T5053] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1078.840142][ T7354] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1078.922617][ T7354] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1079.159933][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1079.390380][ T47] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1079.562411][ T47] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1079.755274][ T7359] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1080.021472][ T4631] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1080.075204][ T4631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1080.101167][ T4631] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1080.113253][ T4631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1080.131212][ T4631] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1080.159297][ T4631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1080.191114][ T4631] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1080.234038][ T4631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1080.351679][ T5096] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1080.560646][ T47] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1080.758828][ T5014] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1080.818945][ T7331] IPVS: stop unused estimator thread 0... [ 1081.039418][ T4631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1081.064638][ T7359] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1081.089198][ T4631] 8021q: adding VLAN 0 to HW filter on device team0 [ 1081.127548][ T7354] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.134731][ T7354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1081.144453][ T7354] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.151765][ T7354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1081.200976][ T4631] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1081.344151][ T5014] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1081.692779][ T5149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8752'. [ 1081.704902][ T5149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8752'. [ 1081.723329][ T7359] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1081.736303][ T5155] FAULT_INJECTION: forcing a failure. [ 1081.736303][ T5155] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.753893][ T5155] CPU: 0 UID: 0 PID: 5155 Comm: syz.0.8754 Not tainted syzkaller #0 PREEMPT(full) [ 1081.753928][ T5155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1081.753941][ T5155] Call Trace: [ 1081.753950][ T5155] [ 1081.753959][ T5155] dump_stack_lvl+0xe8/0x150 [ 1081.753990][ T5155] should_fail_ex+0x40c/0x560 [ 1081.754021][ T5155] should_failslab+0xa8/0x100 [ 1081.754046][ T5155] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1081.754075][ T5155] ? security_inode_alloc+0x39/0x310 [ 1081.754099][ T5155] ? security_inode_alloc+0x39/0x310 [ 1081.754130][ T5155] security_inode_alloc+0x39/0x310 [ 1081.754158][ T5155] inode_init_always_gfp+0x97e/0xd30 [ 1081.754192][ T5155] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1081.754332][ T5155] alloc_inode+0x82/0x1b0 [ 1081.754363][ T5155] new_inode+0x1f/0x170 [ 1081.754386][ T5155] __debugfs_create_file+0xb8/0x400 [ 1081.754417][ T5155] debugfs_create_file_full+0x3f/0x60 [ 1081.754445][ T5155] ref_tracker_dir_debugfs+0x197/0x360 [ 1081.754485][ T5155] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1081.754543][ T5155] ? __kvmalloc_node_noprof+0x35c/0x860 [ 1081.754567][ T5155] ? __raw_spin_lock_init+0x45/0x100 [ 1081.754598][ T5155] alloc_netdev_mqs+0x275/0x12b0 [ 1081.754662][ T5155] ? __pfx_ieee802154_if_setup+0x10/0x10 [ 1081.754717][ T5155] ieee802154_if_add+0xe9/0x1000 [ 1081.754741][ T5155] ? trace_kmalloc+0x2a/0xf0 [ 1081.754767][ T5155] ? __pfx_ieee802154_if_add+0x10/0x10 [ 1081.754786][ T5155] ? __pfx___mutex_lock+0x10/0x10 [ 1081.754807][ T5155] ? __asan_memset+0x22/0x50 [ 1081.754839][ T5155] ? genlmsg_put+0x137/0x2e0 [ 1081.754869][ T5155] ieee802154_add_iface_deprecated+0x43/0x70 [ 1081.754929][ T5155] ieee802154_add_iface+0x46e/0x850 [ 1081.754960][ T5155] ? __pfx_ieee802154_add_iface+0x10/0x10 [ 1081.754983][ T5155] ? __kmalloc_noprof+0x396/0x720 [ 1081.755013][ T5155] ? __nla_parse+0x40/0x60 [ 1081.755046][ T5155] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1081.755073][ T5155] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1081.755109][ T5155] genl_family_rcv_msg_doit+0x233/0x340 [ 1081.755144][ T5155] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1081.755184][ T5155] ? bpf_lsm_capable+0x9/0x20 [ 1081.755202][ T5155] ? security_capable+0x7e/0x2c0 [ 1081.755232][ T5155] genl_rcv_msg+0x614/0x7a0 [ 1081.755264][ T5155] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1081.755289][ T5155] ? __pfx_ieee802154_add_iface+0x10/0x10 [ 1081.755327][ T5155] netlink_rcv_skb+0x226/0x4a0 [ 1081.755350][ T5155] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1081.755377][ T5155] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1081.755416][ T5155] ? down_read+0x2be/0x330 [ 1081.755440][ T5155] genl_rcv+0x28/0x40 [ 1081.755465][ T5155] netlink_unicast+0x7bb/0x940 [ 1081.755497][ T5155] netlink_sendmsg+0x813/0xb40 [ 1081.755530][ T5155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1081.755558][ T5155] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1081.755588][ T5155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1081.755608][ T5155] sock_sendmsg_nosec+0x13a/0x180 [ 1081.755638][ T5155] ____sys_sendmsg+0x54e/0x850 [ 1081.755666][ T5155] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1081.755699][ T5155] ? import_iovec+0x73/0xa0 [ 1081.755725][ T5155] ___sys_sendmsg+0x2a5/0x360 [ 1081.755745][ T5155] ? __lock_acquire+0x683/0x2cf0 [ 1081.755770][ T5155] ? __pfx____sys_sendmsg+0x10/0x10 [ 1081.755832][ T5155] ? __fget_files+0x2a/0x420 [ 1081.755851][ T5155] ? __fget_files+0x3a2/0x420 [ 1081.755881][ T5155] __x64_sys_sendmsg+0x1b1/0x290 [ 1081.755905][ T5155] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1081.756026][ T5155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.756051][ T5155] do_syscall_64+0x174/0x580 [ 1081.756078][ T5155] ? clear_bhb_loop+0x40/0x90 [ 1081.756102][ T5155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.756122][ T5155] RIP: 0033:0x7fe17af9de59 [ 1081.756141][ T5155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1081.756158][ T5155] RSP: 002b:00007fe17bf27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1081.756180][ T5155] RAX: ffffffffffffffda RBX: 00007fe17b225fa0 RCX: 00007fe17af9de59 [ 1081.756194][ T5155] RDX: 0000000000040054 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1081.756208][ T5155] RBP: 00007fe17bf27090 R08: 0000000000000000 R09: 0000000000000000 [ 1081.756221][ T5155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1081.756233][ T5155] R13: 00007fe17b226038 R14: 00007fe17b225fa0 R15: 00007ffc811bc3e8 [ 1081.756267][ T5155] [ 1081.763417][ T5155] debugfs: out of free dentries, can not create file 'netdev@ffff888026a2c700' [ 1081.815470][ T5165] netlink: 'syz.4.8755': attribute type 24 has an invalid length. [ 1081.947655][ T7359] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1082.136126][ T5165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8755'. [ 1082.234485][ T5169] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8757'. [ 1082.333352][ T5169] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8757'. [ 1082.351300][ T5149] netlink: 'syz.3.8752': attribute type 15 has an invalid length. [ 1082.387671][ T5165] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1082.469817][ T7359] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1082.740938][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 1082.796144][ T5158] lo speed is unknown, defaulting to 1000 [ 1082.803551][ T5158] wlan0 speed is unknown, defaulting to 1000 [ 1082.869699][ T5180] netlink: 'syz.0.8758': attribute type 1 has an invalid length. [ 1082.877476][ T5180] netlink: 11 bytes leftover after parsing attributes in process `syz.0.8758'. [ 1083.072694][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1083.513917][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1083.561658][ T4631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1083.587139][ T5184] lo speed is unknown, defaulting to 1000 [ 1083.594708][ T5184] wlan0 speed is unknown, defaulting to 1000 [ 1083.830201][ T4631] veth0_vlan: entered promiscuous mode [ 1083.958878][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1084.011831][ T4631] veth1_vlan: entered promiscuous mode [ 1084.038192][ T4631] veth0_macvtap: entered promiscuous mode [ 1084.048483][ T4631] veth1_macvtap: entered promiscuous mode [ 1084.091970][ T4631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1084.114835][ T4631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1084.130245][ T7339] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.160082][ T7339] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.211149][ T7339] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.256779][ T7339] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.351340][ T7354] net_ratelimit: 3 callbacks suppressed [ 1084.351359][ T7354] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1084.432538][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.549710][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.625430][ T7354] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1084.680139][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1084.701460][ T7354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.720168][ T7354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.737601][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1084.759454][ T47] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1084.853710][ T5014] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1084.991795][ T4896] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1085.100398][ T7354] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1085.202088][ T7354] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1085.454376][ T7354] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1085.643839][ T7354] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1085.746788][ T4896] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1086.435478][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1086.447732][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1086.459124][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1086.467275][ T5630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1086.477297][ T5630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1087.395950][ T5293] netlink: 'syz.0.8774': attribute type 3 has an invalid length. [ 1087.413708][ T5293] netlink: 'syz.0.8774': attribute type 1 has an invalid length. [ 1087.544303][ T5293] bond6: entered promiscuous mode [ 1087.586958][ T5293] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1087.849124][ T5304] bond6: (slave bridge8): making interface the new active one [ 1087.900799][ T5304] bridge8: entered promiscuous mode [ 1087.951555][ T5304] bond6: (slave bridge8): Enslaving as an active interface with an up link [ 1088.555622][ T5263] lo speed is unknown, defaulting to 1000 [ 1088.560078][ T2521] Bluetooth: hci5: command tx timeout [ 1088.564186][ T5263] wlan0 speed is unknown, defaulting to 1000 [ 1088.755779][ T5342] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8782'. [ 1088.766042][ T5342] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8782'. [ 1089.701515][ T5370] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8786'. [ 1090.044494][ T4896] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1090.080734][ T5381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8788'. [ 1090.099140][ T4896] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.365482][ T5263] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.372748][ T5263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.380096][ T5263] bridge_slave_0: entered allmulticast mode [ 1090.402794][ T5263] bridge_slave_0: entered promiscuous mode [ 1090.413484][ T5263] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.420815][ T5263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.428159][ T5263] bridge_slave_1: entered allmulticast mode [ 1090.436088][ T5263] bridge_slave_1: entered promiscuous mode [ 1090.472573][ T5263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1090.485236][ T5263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1090.549911][ T5393] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8790'. [ 1090.559775][ T5393] netlink: 47 bytes leftover after parsing attributes in process `syz.3.8790'. [ 1090.571624][ T5263] team0: Port device team_slave_0 added [ 1090.580257][ T5393] netlink: 'syz.3.8790': attribute type 6 has an invalid length. [ 1090.588680][ T5393] netlink: 47 bytes leftover after parsing attributes in process `syz.3.8790'. [ 1090.669784][ T2521] Bluetooth: hci5: command tx timeout [ 1090.683614][ T5404] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8793'. [ 1090.692698][ T5404] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8793'. [ 1090.704832][ T4896] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1090.714614][ T4896] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.768601][ T5263] team0: Port device team_slave_1 added [ 1090.830525][ T5263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1090.855920][ T5263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.881917][ T5263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1090.922306][ T5263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1090.929782][ T5263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1091.004975][ T5263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1091.153651][ T5263] hsr_slave_0: entered promiscuous mode [ 1091.160530][ T5263] hsr_slave_1: entered promiscuous mode [ 1091.167025][ T5263] debugfs: 'hsr0' already exists in 'hsr' [ 1091.172778][ T5263] Cannot create hsr debugfs directory [ 1091.483858][ T5436] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8804'. [ 1091.745254][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1091.753294][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1092.086016][ T4896] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1092.095808][ T4896] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.575430][ T4896] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1092.585218][ T4896] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.614133][ T5437] tipc: Resetting bearer [ 1092.729700][ T2521] Bluetooth: hci5: command tx timeout [ 1092.804327][ T5467] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 1092.957625][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1092.971851][ T7339] net_ratelimit: 18 callbacks suppressed [ 1092.971868][ T7339] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1093.011440][ T5471] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 1093.402616][ T5014] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1093.547294][ T5483] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1093.603378][ T9] syz1: Port: 1 Link ACTIVE [ 1093.625120][ T7339] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1093.656867][ T5485] syzkaller0: entered promiscuous mode [ 1093.662384][ T5485] syzkaller0: entered allmulticast mode [ 1093.788412][ T4896] bridge_slave_1: left allmulticast mode [ 1093.794180][ T4896] bridge_slave_1: left promiscuous mode [ 1093.799984][ T4896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.855781][ T4896] bridge_slave_0: left allmulticast mode [ 1093.861562][ T4896] bridge_slave_0: left promiscuous mode [ 1093.867383][ T4896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.887296][ T4896] erspan0: left allmulticast mode [ 1093.892430][ T4896] erspan0: left promiscuous mode [ 1093.897578][ T4896] bridge1: port 1(erspan0) entered disabled state [ 1093.994979][ T4896] tunl0: left allmulticast mode [ 1094.583882][ T5506] netlink: 11 bytes leftover after parsing attributes in process `syz.3.8817'. [ 1094.658875][ T4896] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1094.799433][ T4896] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 1094.808862][ T4896] bridge2 (unregistering): left promiscuous mode [ 1094.816237][ T2521] Bluetooth: hci5: command tx timeout [ 1094.867031][ T4896] bond6 (unregistering): (slave bridge5): Releasing backup interface [ 1094.876149][ T4896] bridge5 (unregistering): left promiscuous mode [ 1094.882605][ T4896] bridge5 (unregistering): left allmulticast mode [ 1094.947249][ T4896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1094.959754][ T4896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1094.987753][ T4896] bond0 (unregistering): Released all slaves [ 1095.001191][ T4896] bond1 (unregistering): Released all slaves [ 1095.021047][ T4896] bond2 (unregistering): Released all slaves [ 1095.040297][ T4896] bond3 (unregistering): Released all slaves [ 1095.059502][ T4896] bond4 (unregistering): Released all slaves [ 1095.091591][ T4896] bond5 (unregistering): Released all slaves [ 1095.110768][ T4896] bond6 (unregistering): Released all slaves [ 1095.129933][ T4896] bond7 (unregistering): Released all slaves [ 1095.182782][ T5494] tipc: Enabled bearer , priority 0 [ 1095.192765][ T5477] lo speed is unknown, defaulting to 1000 [ 1095.202408][ T5477] wlan0 speed is unknown, defaulting to 1000 [ 1095.227588][ T5484] tipc: Resetting bearer [ 1095.254928][ T5484] tipc: Disabling bearer [ 1095.272834][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1095.579595][ T4896] : left promiscuous mode [ 1095.624843][ T5519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8822'. [ 1095.819469][ T4896] : left promiscuous mode [ 1095.921900][ T7339] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1096.232551][ T5526] syzkaller1: entered promiscuous mode [ 1096.240587][ T4896] tipc: Left network mode [ 1096.301132][ T5536] syzkaller1: left promiscuous mode [ 1096.335101][ T5536] syzkaller1: left allmulticast mode [ 1096.547291][ T7359] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1096.772912][ T7359] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1096.886805][ T7339] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1097.002304][ T7339] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1097.017067][ T5556] batman_adv: batadv0: Adding interface: dummy0 [ 1097.023353][ T5556] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1097.074193][ T5556] batman_adv: batadv0: Interface activated: dummy0 [ 1097.190877][ T5562] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8831'. [ 1097.245718][ T5562] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8831'. [ 1097.319652][ T7359] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1097.719188][ T5589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8840'. [ 1098.194886][ T5263] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1098.368622][ T5263] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1098.384498][ T5263] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1098.402353][ T5263] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1098.423570][ T5620] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8846'. [ 1098.434739][ T5263] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1098.477645][ T5263] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1098.488423][ T5263] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1098.505343][ T5263] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1099.578156][ T5653] bridge0: entered allmulticast mode [ 1099.808824][ T47] smbdirect: ib_dev[syz0] removed [ 1100.056072][ T5263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1100.112624][ T5263] 8021q: adding VLAN 0 to HW filter on device team0 [ 1100.220496][ T7339] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.227676][ T7339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1100.267237][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.274415][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1100.306821][ T7337] net_ratelimit: 2 callbacks suppressed [ 1100.306839][ T7337] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1100.342984][ T5680] netlink: 'syz.2.8852': attribute type 1 has an invalid length. [ 1100.403022][ T5680] netlink: 11 bytes leftover after parsing attributes in process `syz.2.8852'. [ 1100.639552][ T7354] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1100.801491][ T5691] netlink: 'syz.2.8854': attribute type 25 has an invalid length. [ 1100.809351][ T5691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8854'. [ 1100.917875][ T4896] hsr_slave_0: left promiscuous mode [ 1100.996280][ T4896] veth1_macvtap: left promiscuous mode [ 1101.001818][ T4896] veth0_macvtap: left promiscuous mode [ 1101.007416][ T4896] veth1_vlan: left promiscuous mode [ 1101.012758][ T4896] veth0_vlan: left promiscuous mode [ 1101.399292][ T4896] team0 (unregistering): Port device team_slave_1 removed [ 1101.447245][ T4896] team0 (unregistering): Port device team_slave_0 removed [ 1101.456045][ T5696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8856'. [ 1101.663460][ T5691] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1101.705800][ T5699] bond6: option updelay: invalid value (18446744073709518847) [ 1101.713416][ T5699] bond6: option updelay: allowed values 0 - 2147483647 [ 1101.722110][ T5699] bond6 (unregistering): Released all slaves [ 1101.900726][ T7339] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1102.114960][ T47] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1102.151806][ T5719] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8858'. [ 1102.662307][ T5747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8858'. [ 1102.724419][ T5719] batman_adv: batadv0: Adding interface: vlan2 [ 1102.730715][ T5719] batman_adv: batadv0: The MTU of interface vlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1102.773887][ T5719] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 1102.831181][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.838753][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.929598][ T7356] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1103.104557][ T7359] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1103.161080][ T5263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1103.179760][ T4896] IPVS: stop unused estimator thread 0... [ 1103.219701][ T7356] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1103.277585][ T5762] tipc: Enabling of bearer rejected, failed to enable media [ 1103.416232][ T5263] veth0_vlan: entered promiscuous mode [ 1103.497430][ T5263] veth1_vlan: entered promiscuous mode [ 1103.627787][ T5779] netlink: 'syz.4.8867': attribute type 25 has an invalid length. [ 1103.635839][ T5779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8867'. [ 1103.668589][ T5263] veth0_macvtap: entered promiscuous mode [ 1103.699301][ T5779] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1103.743752][ T5263] veth1_macvtap: entered promiscuous mode [ 1103.781883][ T5782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8868'. [ 1103.951844][ T5263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1103.986379][ T5263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1103.996955][ T7337] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1104.048341][ T7354] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.066751][ T7354] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.091735][ T7354] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.113064][ T5796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8871'. [ 1104.125155][ T7354] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.222379][ T7359] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1104.303303][ T5802] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8872'. [ 1104.381961][ T7337] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1104.444151][ T5802] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8872'. [ 1104.878833][ T5824] netlink: 'syz.4.8879': attribute type 25 has an invalid length. [ 1104.915403][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.922939][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.182298][ T5820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1105.226200][ T5820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1105.512485][ T1553] lo speed is unknown, defaulting to 1000 [ 1105.518263][ T1553] syz2: Port: 1 Link DOWN [ 1105.557044][ T5824] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1105.576180][ T7356] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1105.585108][ T7356] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.594089][ T7356] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1105.604924][ T7356] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.616975][ T7359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1105.624854][ T7359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1105.661597][ T7356] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1105.670625][ T7356] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.722281][ T7356] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1105.731569][ T7356] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.743617][ T5853] __nla_validate_parse: 1 callbacks suppressed [ 1105.743635][ T5853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8881'. [ 1105.768021][ T7354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1105.775887][ T7354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1105.899186][ T5860] FAULT_INJECTION: forcing a failure. [ 1105.899186][ T5860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1105.912263][ T5860] CPU: 0 UID: 0 PID: 5860 Comm: syz.0.8883 Not tainted syzkaller #0 PREEMPT(full) [ 1105.912289][ T5860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1105.912300][ T5860] Call Trace: [ 1105.912309][ T5860] [ 1105.912317][ T5860] dump_stack_lvl+0xe8/0x150 [ 1105.912350][ T5860] should_fail_ex+0x40c/0x560 [ 1105.912385][ T5860] _copy_from_user+0x2d/0xb0 [ 1105.912408][ T5860] kstrtouint_from_user+0xd6/0x180 [ 1105.912438][ T5860] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1105.912483][ T5860] proc_fail_nth_write+0x8e/0x210 [ 1105.912505][ T5860] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1105.912534][ T5860] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1105.912554][ T5860] vfs_write+0x296/0xba0 [ 1105.912587][ T5860] ? __pfx_vfs_write+0x10/0x10 [ 1105.912611][ T5860] ? __fget_files+0x2a/0x420 [ 1105.912636][ T5860] ? __fget_files+0x3a2/0x420 [ 1105.912653][ T5860] ? __fget_files+0x2a/0x420 [ 1105.912682][ T5860] ksys_write+0x150/0x270 [ 1105.912708][ T5860] ? __pfx_ksys_write+0x10/0x10 [ 1105.912740][ T5860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.912762][ T5860] do_syscall_64+0x174/0x580 [ 1105.912783][ T5860] ? trace_irq_disable+0x3b/0x140 [ 1105.912803][ T5860] ? clear_bhb_loop+0x40/0x90 [ 1105.912827][ T5860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.912847][ T5860] RIP: 0033:0x7fe17af5e68e [ 1105.912865][ T5860] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1105.912882][ T5860] RSP: 002b:00007fe17bf26fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1105.912901][ T5860] RAX: ffffffffffffffda RBX: 00007fe17bf276c0 RCX: 00007fe17af5e68e [ 1105.912915][ T5860] RDX: 0000000000000001 RSI: 00007fe17bf270a0 RDI: 0000000000000004 [ 1105.912928][ T5860] RBP: 00007fe17bf27090 R08: 0000000000000000 R09: 0000000000000000 [ 1105.912941][ T5860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1105.912952][ T5860] R13: 00007fe17b226038 R14: 00007fe17b225fa0 R15: 00007ffc811bc3e8 [ 1105.912986][ T5860] [ 1106.419751][ T5878] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8769'. [ 1106.536688][ T5885] bridge0: entered allmulticast mode [ 1106.545424][ T5885] bridge_slave_1: left allmulticast mode [ 1106.551113][ T5885] bridge_slave_1: left promiscuous mode [ 1106.556886][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.583547][ T5885] bridge_slave_0: left allmulticast mode [ 1106.589245][ T5885] bridge_slave_0: left promiscuous mode [ 1106.595020][ T5885] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.694312][ T5888] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8891'. [ 1106.703316][ T5888] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8891'. [ 1106.713839][ T5888] sctp: [Deprecated]: syz.1.8891 (pid 5888) Use of int in max_burst socket option. [ 1106.713839][ T5888] Use struct sctp_assoc_value instead [ 1106.801193][ T5894] netlink: 'syz.3.8892': attribute type 25 has an invalid length. [ 1106.809280][ T5894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8892'. [ 1106.818220][ T5894] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1107.202177][ T5913] xt_CT: No such helper "snmp_trap" [ 1107.576948][ T5935] netlink: 'syz.2.8903': attribute type 25 has an invalid length. [ 1107.584962][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8903'. [ 1107.597921][ T5938] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8901'. [ 1107.611299][ T5935] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1107.697157][ T5942] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 1107.817495][ T5942] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1107.836554][ T5942] bond1 (unregistering): Released all slaves [ 1107.851531][ T5953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8906'. [ 1107.927607][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.935102][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.016187][ T5953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1108.027509][ T5953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1108.129437][ T7337] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.139238][ T7337] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.148693][ T7337] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.158069][ T7337] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.509061][ T5940] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1108.655414][ T5966] netlink: 'syz.2.8911': attribute type 29 has an invalid length. [ 1108.663638][ T1542] IPVS: starting estimator thread 0... [ 1108.703449][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8911'. [ 1108.747120][ T5966] netlink: 'syz.2.8911': attribute type 29 has an invalid length. [ 1108.759767][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8911'. [ 1108.773205][ T5966] netlink: 'syz.2.8911': attribute type 29 has an invalid length. [ 1108.784488][ T5966] netlink: 'syz.2.8911': attribute type 29 has an invalid length. [ 1108.794611][ T5966] netlink: 'syz.2.8911': attribute type 29 has an invalid length. [ 1108.803544][ T5966] netlink: 'syz.2.8911': attribute type 29 has an invalid length. [ 1108.830083][ T5966] netlink: 'syz.2.8911': attribute type 29 has an invalid length. [ 1108.830403][ T5970] hsr0: entered promiscuous mode [ 1108.847589][ T5966] netlink: 'syz.2.8911': attribute type 29 has an invalid length. [ 1108.900597][ T5972] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1108.929433][ T5972] bond8: (slave geneve3): making interface the new active one [ 1108.940535][ T5972] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 1108.957071][ T5977] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1109.088936][ T5967] IPVS: using max 55 ests per chain, 132000 per kthread [ 1109.096017][ T5982] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1109.113469][ T5982] veth5: entered promiscuous mode [ 1109.121779][ T5982] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 1109.135223][ T5982] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1109.149961][ T7359] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1109.302415][ T7337] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1109.830566][ T6000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.838100][ T6000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.939913][ T6000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1110.058275][ T6000] veth0_macvtap: left promiscuous mode [ 1110.083517][ T7354] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1110.102044][ T7354] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.113280][ T7337] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1110.123330][ T7337] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.132986][ T7337] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1110.143061][ T7337] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.152451][ T7337] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1110.161814][ T7337] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.300647][ T6013] vcan0: entered promiscuous mode [ 1110.524459][ T6026] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1110.586520][ T6029] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1111.035081][ T6057] __nla_validate_parse: 21 callbacks suppressed [ 1111.035099][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8931'. [ 1112.363834][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1112.378776][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1112.388351][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1112.397696][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1112.423619][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1112.590914][ T6099] validate_nla: 17 callbacks suppressed [ 1112.590935][ T6099] netlink: 'syz.1.8939': attribute type 25 has an invalid length. [ 1112.638640][ T6103] netlink: 'syz.2.8940': attribute type 1 has an invalid length. [ 1112.675766][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8939'. [ 1112.732235][ T7354] smc: removing ib device syz1 [ 1112.764769][T16869] syz1: Port: 1 Link DOWN [ 1112.796901][ T7354] smbdirect: ib_dev[syz1] removed [ 1113.021488][ T6103] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1113.030187][ T6099] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1113.092877][ T6106] bond2: (slave geneve2): making interface the new active one [ 1113.105515][ T6106] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1113.161713][ T6110] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8941'. [ 1113.473852][ T6119] openvswitch: netlink: EtherType 50a is less than min 600 [ 1113.487244][ T6117] netlink: 'syz.1.8944': attribute type 12 has an invalid length. [ 1113.575928][ T6090] lo speed is unknown, defaulting to 1000 [ 1114.474020][ T2521] Bluetooth: hci1: command tx timeout [ 1114.636168][ T6149] FAULT_INJECTION: forcing a failure. [ 1114.636168][ T6149] name failslab, interval 1, probability 0, space 0, times 0 [ 1114.651831][ T6149] CPU: 0 UID: 0 PID: 6149 Comm: syz.2.8953 Not tainted syzkaller #0 PREEMPT(full) [ 1114.651860][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1114.651872][ T6149] Call Trace: [ 1114.651881][ T6149] [ 1114.651889][ T6149] dump_stack_lvl+0xe8/0x150 [ 1114.651917][ T6149] should_fail_ex+0x40c/0x560 [ 1114.651948][ T6149] should_failslab+0xa8/0x100 [ 1114.651972][ T6149] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1114.652001][ T6149] ? skb_clone+0x212/0x3a0 [ 1114.652023][ T6149] ? skb_clone+0x212/0x3a0 [ 1114.652049][ T6149] skb_clone+0x212/0x3a0 [ 1114.652073][ T6149] __netlink_deliver_tap+0x413/0x860 [ 1114.652105][ T6149] ? netlink_deliver_tap+0x2e/0x1b0 [ 1114.652129][ T6149] netlink_deliver_tap+0x19c/0x1b0 [ 1114.652149][ T6149] netlink_unicast+0x77f/0x940 [ 1114.652175][ T6149] netlink_sendmsg+0x813/0xb40 [ 1114.652205][ T6149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1114.652232][ T6149] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1114.652263][ T6149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1114.652283][ T6149] sock_sendmsg_nosec+0x13a/0x180 [ 1114.652313][ T6149] ____sys_sendmsg+0x54e/0x850 [ 1114.652339][ T6149] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1114.652370][ T6149] ? import_iovec+0x73/0xa0 [ 1114.652394][ T6149] ___sys_sendmsg+0x2a5/0x360 [ 1114.652413][ T6149] ? __lock_acquire+0x683/0x2cf0 [ 1114.652436][ T6149] ? __pfx____sys_sendmsg+0x10/0x10 [ 1114.652489][ T6149] ? __fget_files+0x2a/0x420 [ 1114.652508][ T6149] ? __fget_files+0x3a2/0x420 [ 1114.652537][ T6149] __x64_sys_sendmsg+0x1b1/0x290 [ 1114.652560][ T6149] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1114.652603][ T6149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.652625][ T6149] do_syscall_64+0x174/0x580 [ 1114.652646][ T6149] ? clear_bhb_loop+0x40/0x90 [ 1114.652669][ T6149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.652688][ T6149] RIP: 0033:0x7f7caad9de59 [ 1114.652706][ T6149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1114.652723][ T6149] RSP: 002b:00007f7ca8ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1114.652745][ T6149] RAX: ffffffffffffffda RBX: 00007f7cab025fa0 RCX: 00007f7caad9de59 [ 1114.652760][ T6149] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000003 [ 1114.652773][ T6149] RBP: 00007f7ca8ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1114.652786][ T6149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1114.652797][ T6149] R13: 00007f7cab026038 R14: 00007f7cab025fa0 R15: 00007fffb43f4aa8 [ 1114.652828][ T6149] [ 1115.020735][ T6154] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8955'. [ 1115.089290][ T6090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.096530][ T6090] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.103870][ T6090] bridge_slave_0: entered allmulticast mode [ 1115.112848][ T6090] bridge_slave_0: entered promiscuous mode [ 1115.124440][ T6090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.131693][ T6090] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.139037][ T6090] bridge_slave_1: entered allmulticast mode [ 1115.156238][ T6090] bridge_slave_1: entered promiscuous mode [ 1115.196859][ T6156] tipc: Resetting bearer [ 1115.212516][ T6161] netlink: 'syz.2.8957': attribute type 12 has an invalid length. [ 1115.242288][ T6090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1115.259071][ T6090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1115.302858][ T6090] team0: Port device team_slave_0 added [ 1115.311636][ T6090] team0: Port device team_slave_1 added [ 1115.348735][ T6090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1115.357157][ T6090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1115.395433][ T6090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1115.408149][ T6090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1115.415113][ T6090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1115.441360][ T6090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1115.486686][ T6090] hsr_slave_0: entered promiscuous mode [ 1115.504988][ T6090] hsr_slave_1: entered promiscuous mode [ 1115.511463][ T6090] debugfs: 'hsr0' already exists in 'hsr' [ 1115.517213][ T6090] Cannot create hsr debugfs directory [ 1115.706599][ T6174] netlink: 'syz.1.8961': attribute type 1 has an invalid length. [ 1115.932300][ T6188] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8965'. [ 1116.156113][ T6195] netlink: 'syz.2.8966': attribute type 1 has an invalid length. [ 1116.247528][ T6195] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1116.355196][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8968'. [ 1116.364247][ T6207] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1116.375094][ T6207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8968'. [ 1116.538780][ T6090] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1116.550262][ T6090] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.647694][ T2521] Bluetooth: hci1: command tx timeout [ 1116.659223][ T6212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1116.667615][ T6212] 8021q: adding VLAN 0 to HW filter on device team0 [ 1116.679920][ T6212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1116.762437][ T6212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1116.771970][ T6212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1116.777771][ T6228] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8973'. [ 1116.784164][ T6212] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1116.798629][ T6212] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1116.811745][ T6228] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8973'. [ 1116.814234][ T6212] veth1_vlan: left promiscuous mode [ 1116.827086][ T6212] veth0_vlan: left promiscuous mode [ 1116.847070][ T6212] veth0_vlan: entered promiscuous mode [ 1116.855193][ T6212] veth1_vlan: entered promiscuous mode [ 1116.866411][ T6212] veth1_macvtap: left promiscuous mode [ 1116.873271][ T6212] veth0_macvtap: left promiscuous mode [ 1116.880038][ T6212] veth0_macvtap: entered promiscuous mode [ 1116.886564][ T6212] veth1_macvtap: entered promiscuous mode [ 1116.896442][ T6212] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1116.904315][ T6212] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1116.912356][ T6212] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1116.920164][ T6212] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1116.971703][ T6212] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1116.983455][ T6212] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1116.999960][ T6212] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1117.013815][ T6212] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1117.024958][ T6212] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1117.045437][ T6212] bond6: left promiscuous mode [ 1117.050427][ T6212] bridge8: left promiscuous mode [ 1117.056720][ T6212] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1117.078431][ T1553] lo speed is unknown, defaulting to 1000 [ 1117.085091][ T1553] syz2: Port: 1 Link ACTIVE [ 1117.090909][ T7339] bond2: (slave ip6gretap0): link status up again after 0 ms [ 1117.141643][ T7339] bond2: (slave ip6gretap0): link status up again after 0 ms [ 1117.179562][ T7359] bond2: (slave ip6gretap0): link status up again after 0 ms [ 1117.201766][ T7359] bond2: (slave ip6gretap0): link status up again after 0 ms [ 1117.221149][ T6235] xt_hashlimit: size too large, truncated to 1048576 [ 1117.229494][ T7339] bond2: (slave ip6gretap0): link status up again after 0 ms [ 1117.250493][ T5014] bond2: (slave ip6gretap0): link status up again after 0 ms [ 1117.279981][ T5014] bond2: (slave ip6gretap0): link status up again after 0 ms [ 1117.313550][ T7354] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1117.329297][ T7339] bond2: (slave ip6gretap0): link status up again after 0 ms [ 1117.350752][ T7354] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.374663][ T7354] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1117.393509][ T5014] bond2: (slave ip6gretap0): link status up again after 0 ms [ 1117.405243][ T7354] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.430283][ T7339] bond2: (slave ip6gretap0): link status up again after 0 ms [ 1117.504091][ T6090] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1117.516361][ T6090] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.536593][ T6236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1117.544337][ T6236] batadv_slave_1: entered promiscuous mode [ 1117.553414][ T7354] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1117.579742][ T7354] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.588604][ T6204] lo speed is unknown, defaulting to 1000 [ 1117.595044][ T7354] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1117.606806][ T7354] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.609888][ T6246] netlink: 'syz.2.8975': attribute type 12 has an invalid length. [ 1117.632590][ T7356] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1117.643115][ T7356] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1117.670206][ T5726] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1117.732119][T12570] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1117.743897][ T6090] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1117.754494][ T6090] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.762347][ T6251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8979'. [ 1117.774745][ T7356] ip6_tunnel:  xmit: Local address not yet configured! [ 1117.784526][T12570] ip6_tunnel:  xmit: Local address not yet configured! [ 1117.792025][ T7356] ip6_tunnel:  xmit: Local address not yet configured! [ 1117.825869][ T6251] bond7: entered promiscuous mode [ 1117.831343][ T6251] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1118.142122][ T6259] netlink: 'syz.0.8982': attribute type 1 has an invalid length. [ 1118.187815][ T6259] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1118.196721][ T6090] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1118.207289][ T6090] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1118.215327][ T6090] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1118.237987][ T6090] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1118.247829][ T6090] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1118.265880][ T6090] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1118.288626][ T6267] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8985'. [ 1118.308060][ T6259] bond8: (slave geneve3): making interface the new active one [ 1118.318735][ T6259] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 1118.328862][ T6090] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1118.364446][ T6090] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1118.595712][ T6090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1118.622926][ T6090] 8021q: adding VLAN 0 to HW filter on device team0 [ 1118.636556][ T7339] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.643798][ T7339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1118.663638][ T7339] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.682349][ T7339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1118.690325][ T2521] Bluetooth: hci1: command tx timeout [ 1118.736246][ T6090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1118.948428][ T6291] netlink: 15 bytes leftover after parsing attributes in process `syz.1.8989'. [ 1119.180477][ T6302] netlink: 'syz.1.8992': attribute type 12 has an invalid length. [ 1119.263050][ T6090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1119.363268][ T6313] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8995'. [ 1119.621899][ T6327] netlink: 15 bytes leftover after parsing attributes in process `syz.2.9000'. [ 1119.757994][ T6333] tipc: Started in network mode [ 1119.762927][ T6333] tipc: Node identity 0280e8156e81, cluster identity 4711 [ 1119.770295][ T6333] tipc: Enabled bearer , priority 0 [ 1119.779315][ T6333] syzkaller0: entered promiscuous mode [ 1119.787617][ T6333] syzkaller0: entered allmulticast mode [ 1119.807364][ T6090] veth0_vlan: entered promiscuous mode [ 1119.815251][ T6333] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1119.847246][ T6333] tipc: Resetting bearer [ 1119.858179][ T6331] tipc: Resetting bearer [ 1119.879702][ T6331] tipc: Disabling bearer [ 1119.921097][ T6090] veth1_vlan: entered promiscuous mode [ 1119.929516][ T6335] lo speed is unknown, defaulting to 1000 [ 1120.014579][ T6090] veth0_macvtap: entered promiscuous mode [ 1120.028953][ T6090] veth1_macvtap: entered promiscuous mode [ 1120.162894][ T6341] netlink: 27 bytes leftover after parsing attributes in process `syz.1.9004'. [ 1120.254529][ T6090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1120.292471][ T6344] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.299700][ T6344] bridge0: port 2(bridge_slave_1) entered listening state [ 1120.307151][ T6344] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.314485][ T6344] bridge0: port 1(bridge_slave_0) entered listening state [ 1120.391970][ T6344] hsr0: left promiscuous mode [ 1120.428221][ T6344] batman_adv: batadv0: Interface activated: vlan2 [ 1120.451992][ T6090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1120.460879][ T6352] netlink: 'syz.1.9008': attribute type 1 has an invalid length. [ 1120.631223][ T7354] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1120.652303][ T5014] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.690077][ T5014] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.710299][ T2521] Bluetooth: hci1: command tx timeout [ 1120.719644][ T5014] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.729451][ T5014] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.751172][ T7354] ip6_tunnel:  xmit: Local address not yet configured! [ 1120.771592][ T7354] bond1: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 1120.781221][ T7354] bond1: active interface up! [ 1120.854956][ T6364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1120.863320][ T6364] 8021q: adding VLAN 0 to HW filter on device team0 [ 1120.877030][ T6364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1120.954560][ T6364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1120.968896][ T6364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1120.982727][ T6364] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1121.019107][ T6364] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1121.046397][ T6364] veth1_vlan: left promiscuous mode [ 1121.054917][ T6364] veth0_vlan: left promiscuous mode [ 1121.062529][ T6364] veth0_vlan: entered promiscuous mode [ 1121.075473][ T6364] veth1_vlan: entered promiscuous mode [ 1121.088644][ T6364] veth1_macvtap: left promiscuous mode [ 1121.095929][ T6364] veth0_macvtap: left promiscuous mode [ 1121.102933][ T6364] veth0_macvtap: entered promiscuous mode [ 1121.110586][ T6364] veth1_macvtap: entered promiscuous mode [ 1121.122922][ T6364] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1121.132254][ T6364] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1121.140615][ T6364] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1121.148987][ T6364] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1121.179567][ T7339] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.186814][ T7339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1121.209060][ T7339] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.216481][ T7339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1121.269989][ T6378] tipc: Enabled bearer , priority 0 [ 1121.289856][ T6369] syzkaller0: entered promiscuous mode [ 1121.295785][ T6369] syzkaller0: entered allmulticast mode [ 1121.307889][ T7356] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.362147][ T7356] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.386897][ T7356] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.402678][ T6369] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1121.453785][ T7356] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.507086][ T6369] tipc: Resetting bearer [ 1121.507550][ T6382] __nla_validate_parse: 4 callbacks suppressed [ 1121.507567][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9018'. [ 1121.529572][ T6365] tipc: Resetting bearer [ 1121.552603][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 1121.561929][ T6365] tipc: Disabling bearer [ 1121.604146][ T7339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1121.612080][ T7339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1121.646370][ T5014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1121.663212][ T5014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1121.670958][ T6391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9022'. [ 1121.910480][ T6400] lo speed is unknown, defaulting to 1000 [ 1121.968757][ T6406] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9028'. [ 1122.005444][ T6406] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9028'. [ 1122.026438][ T6409] netlink: 27 bytes leftover after parsing attributes in process `syz.1.9029'. [ 1122.175089][ T6413] batadv_slave_1: left promiscuous mode [ 1122.181699][ T6413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1122.233113][ T6413] bond7: left promiscuous mode [ 1122.253710][ T5014] net_ratelimit: 32 callbacks suppressed [ 1122.253730][ T5014] bond2: (slave ip6gretap0): link status up again after 0 ms [ 1122.312749][ T7354] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1122.321578][ T5014] bond2: (slave ip6gretap0): link status up again after 0 ms [ 1122.423316][ T4896] bond2: (slave ip6gretap0): link status up again after 0 ms [ 1122.438704][ T6423] netlink: 'syz.2.9035': attribute type 12 has an invalid length. [ 1122.470521][ T4896] bond2: (slave ip6gretap0): link status up again after 0 ms [ 1122.539636][ T7359] bond2: (slave ip6gretap0): link status up again after 0 ms [ 1122.590256][ T7359] bond2: (slave ip6gretap0): link status up again after 0 ms [ 1122.597872][ T7356] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1122.647099][ T5014] bond2: (slave ip6gretap0): link status up again after 0 ms [ 1122.679773][ T6429] netlink: 'syz.1.9036': attribute type 12 has an invalid length. [ 1122.691556][ T5014] bond2: (slave ip6gretap0): link status up again after 0 ms [ 1122.704934][ T6440] netlink: 276 bytes leftover after parsing attributes in process `syz.4.9038'. [ 1122.780571][ T6445] x_tables: duplicate underflow at hook 1 [ 1123.043194][ T5726] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 1123.043215][ T5726] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1123.203090][ T5726] ip6_tunnel:  xmit: Local address not yet configured! [ 1123.257375][ T6495] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9053'. [ 1123.548147][ T6520] netlink: 'syz.2.9057': attribute type 12 has an invalid length. [ 1123.574103][ T6557] Bluetooth: MGMT ver 1.23 [ 1123.643670][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9062'. [ 1123.652706][ T6564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9062'. [ 1123.662870][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9062'. [ 1123.674403][ T6564] IPVS: set_ctl: invalid protocol: 136 172.20.20.10:20003 [ 1123.987685][ T6582] FAULT_INJECTION: forcing a failure. [ 1123.987685][ T6582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1124.018072][ T6582] CPU: 1 UID: 0 PID: 6582 Comm: syz.4.9069 Not tainted syzkaller #0 PREEMPT(full) [ 1124.018100][ T6582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1124.018112][ T6582] Call Trace: [ 1124.018120][ T6582] [ 1124.018129][ T6582] dump_stack_lvl+0xe8/0x150 [ 1124.018158][ T6582] should_fail_ex+0x40c/0x560 [ 1124.018190][ T6582] _copy_from_user+0x2d/0xb0 [ 1124.018212][ T6582] ___sys_sendmsg+0x1c6/0x360 [ 1124.018234][ T6582] ? __lock_acquire+0x683/0x2cf0 [ 1124.018266][ T6582] ? __pfx____sys_sendmsg+0x10/0x10 [ 1124.018322][ T6582] ? __fget_files+0x2a/0x420 [ 1124.018340][ T6582] ? __fget_files+0x3a2/0x420 [ 1124.018369][ T6582] __x64_sys_sendmsg+0x1b1/0x290 [ 1124.018393][ T6582] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1124.018432][ T6582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.018453][ T6582] do_syscall_64+0x174/0x580 [ 1124.018472][ T6582] ? trace_irq_disable+0x3b/0x140 [ 1124.018491][ T6582] ? clear_bhb_loop+0x40/0x90 [ 1124.018515][ T6582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.018535][ T6582] RIP: 0033:0x7fd39d79de59 [ 1124.018552][ T6582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1124.018569][ T6582] RSP: 002b:00007fd39e5dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1124.018590][ T6582] RAX: ffffffffffffffda RBX: 00007fd39da25fa0 RCX: 00007fd39d79de59 [ 1124.018605][ T6582] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1124.018617][ T6582] RBP: 00007fd39e5dc090 R08: 0000000000000000 R09: 0000000000000000 [ 1124.018630][ T6582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1124.018641][ T6582] R13: 00007fd39da26038 R14: 00007fd39da25fa0 R15: 00007ffd72ddf4b8 [ 1124.018672][ T6582] [ 1124.322699][ T6592] ksmbd: Unknown IPC event: 1, ignore. [ 1124.324880][ T6590] bridge_slave_0: left allmulticast mode [ 1124.329115][ T6592] ksmbd: Unknown IPC event: 1, ignore. [ 1124.333985][ T6590] bridge_slave_0: left promiscuous mode [ 1124.334209][ T6590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.384801][ T6590] bridge_slave_1: left allmulticast mode [ 1124.391148][ T6590] bridge_slave_1: left promiscuous mode [ 1124.396944][ T6590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.410524][ T6590] bond0: (slave bond_slave_0): Releasing backup interface [ 1124.424534][ T6590] bond0: (slave bond_slave_1): Releasing backup interface [ 1124.443074][ T6590] team0: Port device team_slave_0 removed [ 1124.452501][ T6590] team0: Port device team_slave_1 removed [ 1124.458984][ T6590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1124.467812][ T6590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1124.474411][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 1124.482973][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1124.506544][ T6590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1124.514305][ T6590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1124.606596][ T6600] team0: Port device xfrm0 added [ 1124.619650][ T6591] lo speed is unknown, defaulting to 1000 [ 1124.981332][ T6615] syzkaller0: entered promiscuous mode [ 1124.987234][ T6615] syzkaller0: entered allmulticast mode [ 1125.061054][ T6615] tipc: Started in network mode [ 1125.066124][ T6615] tipc: Node identity eacae34b04dc, cluster identity 4711 [ 1125.078107][ T6615] tipc: Enabled bearer , priority 0 [ 1125.153350][ T6614] tipc: Resetting bearer [ 1125.206809][ T6614] tipc: Disabling bearer [ 1125.280304][ T6630] syzkaller0: entered promiscuous mode [ 1125.286329][ T6630] syzkaller0: entered allmulticast mode [ 1125.314950][ T6630] tipc: Enabled bearer , priority 0 [ 1125.332721][ T6630] tipc: Resetting bearer [ 1125.394098][ T6629] tipc: Resetting bearer [ 1125.416262][ T6629] tipc: Disabling bearer [ 1126.666007][ T6692] __nla_validate_parse: 5 callbacks suppressed [ 1126.666027][ T6692] netlink: 27 bytes leftover after parsing attributes in process `syz.0.9106'. [ 1127.037307][ T6718] netlink: 27 bytes leftover after parsing attributes in process `syz.3.9118'. [ 1127.333235][ T6507] net_ratelimit: 59 callbacks suppressed [ 1127.333257][ T6507] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1127.359469][ T6507] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1127.449834][ T6507] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1127.469448][ T6507] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1127.559531][ T6548] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1127.580830][ T6548] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1127.631468][ T6734] netlink: 'syz.0.9123': attribute type 25 has an invalid length. [ 1127.641384][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9123'. [ 1127.650457][ T6734] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1127.703913][ T6736] geneve1: entered promiscuous mode [ 1127.749554][ T6522] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1127.803200][ T6522] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1127.911642][ T6507] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1127.939810][ T6507] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1128.434064][ T6762] syzkaller0: refused to change device tx_queue_len [ 1128.535795][ T6764] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9135'. [ 1128.545233][ T6764] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9135'. [ 1128.577790][ T6766] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9134'. [ 1128.659339][ T6771] tipc: Enabling of bearer rejected, already enabled [ 1128.821443][ T6781] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9140'. [ 1128.842568][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9142'. [ 1128.859185][ T6784] batadv0: entered promiscuous mode [ 1128.865814][ T6784] macsec1: entered promiscuous mode [ 1128.871261][ T6784] macsec1: entered allmulticast mode [ 1128.876564][ T6784] batadv0: entered allmulticast mode [ 1128.884200][ T6784] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1128.942539][ T6784] batadv0: left allmulticast mode [ 1128.947908][ T6784] batadv0: left promiscuous mode [ 1128.997190][ T6791] netlink: 'syz.2.9145': attribute type 25 has an invalid length. [ 1129.005109][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9145'. [ 1129.014011][ T6791] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1129.301710][ T6800] team0 (unregistering): Port device xfrm0 removed [ 1129.347521][ T6807] netlink: 'syz.2.9151': attribute type 1 has an invalid length. [ 1129.469984][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1129.477758][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 1129.511465][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9154'. [ 1129.649470][ T6826] netlink: 'syz.2.9156': attribute type 25 has an invalid length. [ 1129.657699][ T6826] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1129.776468][ T6831] netlink: 'syz.4.9159': attribute type 4 has an invalid length. [ 1129.790859][ T6833] netlink: 'syz.2.9160': attribute type 1 has an invalid length. [ 1129.792020][ T6831] netlink: 'syz.4.9159': attribute type 4 has an invalid length. [ 1131.197939][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1131.213462][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1131.229825][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1131.254175][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1131.266430][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1131.390013][ T6858] netlink: 'syz.2.9168': attribute type 25 has an invalid length. [ 1131.533196][ T6858] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1131.545604][ T6863] netlink: 'syz.3.9169': attribute type 7 has an invalid length. [ 1131.880194][ T6875] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 1132.053370][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 1132.095467][ T6854] lo speed is unknown, defaulting to 1000 [ 1132.120988][ T6883] __nla_validate_parse: 7 callbacks suppressed [ 1132.121010][ T6883] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9176'. [ 1132.273114][ T6891] syzkaller0: entered promiscuous mode [ 1132.278814][ T6891] syzkaller0: entered allmulticast mode [ 1132.681025][ T6549] net_ratelimit: 48 callbacks suppressed [ 1132.681047][ T6549] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1132.716153][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1132.746082][ T6900] netlink: 'syz.2.9179': attribute type 1 has an invalid length. [ 1132.777902][ T6900] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1132.786573][ T6897] tipc: Started in network mode [ 1132.791598][ T6897] tipc: Node identity 2e6538a26559, cluster identity 4711 [ 1132.799063][ T6897] tipc: Enabled bearer , priority 0 [ 1132.823483][ T6549] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1132.899169][ T6889] tipc: Resetting bearer [ 1132.978694][ T6889] tipc: Disabling bearer [ 1133.044910][ T6907] netlink: 'syz.3.9180': attribute type 3 has an invalid length. [ 1133.283579][ T6914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9182'. [ 1133.346871][ T6927] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 1133.359802][ T6927] netlink: 172 bytes leftover after parsing attributes in process `syz.3.9186'. [ 1133.394433][ T5630] Bluetooth: hci2: command tx timeout [ 1133.414250][ T6854] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.421637][ T6854] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.429083][ T6854] bridge_slave_0: entered allmulticast mode [ 1133.437689][ T6854] bridge_slave_0: entered promiscuous mode [ 1133.459135][ T6854] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.466321][ T6854] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.473667][ T6854] bridge_slave_1: entered allmulticast mode [ 1133.481481][ T6854] bridge_slave_1: entered promiscuous mode [ 1133.538532][ T6854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1133.551869][ T6854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1133.570856][ T6933] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1133.589765][ T6854] team0: Port device team_slave_0 added [ 1133.598489][ T6854] team0: Port device team_slave_1 added [ 1133.649984][ T6854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1133.657064][ T6854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1133.682973][ T6854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1133.695776][ T6854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1133.702757][ T6854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1133.748274][ T6854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1133.760392][ T6914] batman_adv: batadv0: Interface deactivated: dummy0 [ 1133.770659][ T6914] batman_adv: batadv0: Removing interface: dummy0 [ 1133.866026][ T6854] hsr_slave_0: entered promiscuous mode [ 1133.872752][ T6854] hsr_slave_1: entered promiscuous mode [ 1133.879201][ T6854] debugfs: 'hsr0' already exists in 'hsr' [ 1133.884964][ T6854] Cannot create hsr debugfs directory [ 1134.078980][ T6528] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1134.132470][ T6528] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1134.186447][ T6528] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1134.602970][ T6854] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1134.613733][ T6854] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.729301][ T6947] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9191'. [ 1134.742497][ T6548] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1134.742611][ T6548] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1134.768578][ T6947] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9191'. [ 1134.808467][ T6854] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1134.818829][ T6854] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.853587][ T6548] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1134.869444][ T6949] tipc: Enabling of bearer rejected, already enabled [ 1134.908845][ T6949] tipc: Resetting bearer [ 1134.915650][ T6951] validate_nla: 1 callbacks suppressed [ 1134.915668][ T6951] netlink: 'syz.2.9193': attribute type 1 has an invalid length. [ 1134.968645][ T6547] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1135.009237][ T6951] gretap1: entered allmulticast mode [ 1135.022531][ T6951] bond5: (slave gretap1): making interface the new active one [ 1135.031095][ T6951] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 1135.082200][ T6959] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9196'. [ 1135.256683][ T6854] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1135.267085][ T6854] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.319208][ T6970] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9200'. [ 1135.361907][ T6970] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 1135.372481][ T6974] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9203'. [ 1135.395999][ T6970] netlink: 'syz.4.9200': attribute type 1 has an invalid length. [ 1135.405724][ T6974] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9203'. [ 1135.527887][ T5630] Bluetooth: hci2: command tx timeout [ 1135.902087][ T6989] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9209'. [ 1136.132637][ T6854] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1136.143823][ T6854] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.209274][ T6989] netlink: 'syz.1.9209': attribute type 5 has an invalid length. [ 1136.274240][ T6997] netlink: 'syz.1.9212': attribute type 25 has an invalid length. [ 1136.282741][ T6997] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1136.347309][ T6993] lo speed is unknown, defaulting to 1000 [ 1136.835109][ T7024] netlink: 'syz.1.9220': attribute type 1 has an invalid length. [ 1136.878671][ T7024] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1136.918442][ T7024] bond1: (slave geneve2): making interface the new active one [ 1136.929080][ T7024] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1137.048288][ T6854] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1137.138766][ T6854] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1137.160429][ T6854] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1137.196735][ T6854] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1137.222566][ T6854] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1137.242856][ T6854] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1137.260498][ T7038] netlink: 'syz.3.9221': attribute type 1 has an invalid length. [ 1137.260845][ T6854] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1137.295885][ T7040] netlink: 'syz.4.9224': attribute type 25 has an invalid length. [ 1137.297154][ T6854] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1137.307641][ T7040] __nla_validate_parse: 5 callbacks suppressed [ 1137.307659][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9224'. [ 1137.319734][ T7043] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9225'. [ 1137.335326][ T7043] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9225'. [ 1137.380472][ T7038] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1137.418462][ T7047] netlink: 15 bytes leftover after parsing attributes in process `syz.1.9226'. [ 1137.427906][ T7040] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1137.486933][ T7038] bond7: (slave geneve2): making interface the new active one [ 1137.499173][ T7038] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 1137.525660][ T6547] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.534800][ T6547] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.549770][ T6547] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.558651][ T6547] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.589663][ T5630] Bluetooth: hci2: command tx timeout [ 1137.675536][ T7054] GUP no longer grows the stack in syz.4.9227 (7054): 200000003000-20000000a000 (200000001000) [ 1137.721867][ T7054] CPU: 1 UID: 0 PID: 7054 Comm: syz.4.9227 Not tainted syzkaller #0 PREEMPT(full) [ 1137.721894][ T7054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1137.721906][ T7054] Call Trace: [ 1137.721913][ T7054] [ 1137.721921][ T7054] dump_stack_lvl+0xe8/0x150 [ 1137.721950][ T7054] __get_user_pages+0x238c/0x2720 [ 1137.721980][ T7054] ? __gup_longterm_locked+0xc3b/0x15c0 [ 1137.722031][ T7054] __gup_longterm_locked+0xd52/0x15c0 [ 1137.722059][ T7054] ? lock_acquire+0x106/0x350 [ 1137.722096][ T7054] gup_fast_fallback+0x1d8c/0x20e0 [ 1137.722151][ T7054] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1137.722179][ T7054] ? is_valid_gup_args+0x11f/0x200 [ 1137.722205][ T7054] ? get_user_pages_fast+0x4d/0xb0 [ 1137.722231][ T7054] __iov_iter_get_pages_alloc+0x378/0xa40 [ 1137.722263][ T7054] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1137.722291][ T7054] iov_iter_get_pages2+0x5e/0xa0 [ 1137.722314][ T7054] __se_sys_vmsplice+0x7b5/0x1660 [ 1137.722355][ T7054] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 1137.722378][ T7054] ? __pfx_futex_wait+0x10/0x10 [ 1137.722501][ T7054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.722522][ T7054] do_syscall_64+0x174/0x580 [ 1137.722543][ T7054] ? clear_bhb_loop+0x40/0x90 [ 1137.722566][ T7054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.722584][ T7054] RIP: 0033:0x7fd39d79de59 [ 1137.722602][ T7054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1137.722616][ T7054] RSP: 002b:00007fd39e5dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1137.722637][ T7054] RAX: ffffffffffffffda RBX: 00007fd39da25fa0 RCX: 00007fd39d79de59 [ 1137.722652][ T7054] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 1137.722665][ T7054] RBP: 00007fd39d833e6f R08: 0000000000000000 R09: 0000000000000000 [ 1137.722677][ T7054] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1137.722688][ T7054] R13: 00007fd39da26038 R14: 00007fd39da25fa0 R15: 00007ffd72ddf4b8 [ 1137.722721][ T7054] [ 1137.763105][ T6854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1137.848681][ T7061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9229'. [ 1137.862197][ T6854] 8021q: adding VLAN 0 to HW filter on device team0 [ 1137.994910][ T7067] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9229'. [ 1138.077871][ T6548] net_ratelimit: 25 callbacks suppressed [ 1138.077888][ T6548] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1138.093518][ T6547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.100746][ T6547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1138.133837][ T6547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.141108][ T6547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1138.205995][ T6854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1138.229636][ T6547] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1138.298480][ T6528] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1138.305134][ T7075] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9231'. [ 1138.354006][ T6547] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1138.400350][ T6549] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1138.466847][ T6525] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1138.575350][ T6525] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1138.620604][ T6548] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1138.688806][ T6549] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1138.730594][ T6525] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1138.768501][ T6854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1138.884519][ T6854] veth0_vlan: entered promiscuous mode [ 1139.025433][ T6854] veth1_vlan: entered promiscuous mode [ 1139.143104][ T6854] veth0_macvtap: entered promiscuous mode [ 1139.172940][ T6854] veth1_macvtap: entered promiscuous mode [ 1139.224625][ T7093] netlink: 'syz.4.9237': attribute type 25 has an invalid length. [ 1139.255636][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9237'. [ 1139.272965][ T6854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1139.288089][ T7093] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1139.314269][ T7092] : renamed from bond_slave_0 (while UP) [ 1139.326268][ T7092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9236'. [ 1139.334796][ T6854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1139.387641][ T6547] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.397679][ T6547] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.427568][ T6547] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.463938][ T6547] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.670792][ T5630] Bluetooth: hci2: command tx timeout [ 1139.768332][ T6528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1139.776452][ T6528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1139.806940][ T7110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9241'. [ 1139.852767][ T6548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1139.867996][ T6548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1139.982410][ T7114] lo speed is unknown, defaulting to 1000 [ 1140.268204][ T7126] netlink: 'syz.2.9247': attribute type 1 has an invalid length. [ 1140.629493][ T7132] netlink: 'syz.1.9248': attribute type 25 has an invalid length. [ 1140.984446][ T7132] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1141.107790][ T7136] Unsupported ieee802154 address type: 0 [ 1141.611496][ T7171] lo speed is unknown, defaulting to 1000 [ 1141.768437][ T7178] tipc: Started in network mode [ 1141.795239][ T7178] tipc: Node identity 62593581e7bf, cluster identity 4711 [ 1141.802536][ T7178] tipc: Enabled bearer , priority 0 [ 1141.810664][ T7178] syzkaller0: entered promiscuous mode [ 1141.816215][ T7178] syzkaller0: entered allmulticast mode [ 1141.844947][ T7178] tipc: Resetting bearer [ 1141.852515][ T7177] tipc: Resetting bearer [ 1141.873485][ T7177] tipc: Disabling bearer [ 1142.128622][ T7182] netlink: 'syz.2.9260': attribute type 12 has an invalid length. [ 1142.373622][ T7190] tipc: Enabling of bearer rejected, failed to enable media [ 1142.674972][ T7202] netlink: 'syz.2.9268': attribute type 62 has an invalid length. [ 1142.701232][ T7204] netlink: 'syz.4.9269': attribute type 1 has an invalid length. [ 1142.866235][ T7211] lo speed is unknown, defaulting to 1000 [ 1143.173552][ T6549] net_ratelimit: 58 callbacks suppressed [ 1143.173574][ T6549] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1143.240896][ T6548] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1143.289534][ T6549] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1143.441324][ T7231] __nla_validate_parse: 4 callbacks suppressed [ 1143.441344][ T7231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9274'. [ 1143.458477][ T6548] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1143.479723][ T6549] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1143.575211][ T6549] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1143.605317][ T7235] syzkaller0: entered promiscuous mode [ 1143.611549][ T7235] syzkaller0: entered allmulticast mode [ 1143.640027][ T6549] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1143.642146][ T7238] netlink: 'syz.3.9278': attribute type 29 has an invalid length. [ 1143.655831][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9278'. [ 1143.665448][ T7237] netlink: 'syz.3.9278': attribute type 29 has an invalid length. [ 1143.673671][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9278'. [ 1143.682925][ T7237] netlink: 'syz.3.9278': attribute type 29 has an invalid length. [ 1143.694065][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9278'. [ 1143.703154][ T7237] netlink: 'syz.3.9278': attribute type 29 has an invalid length. [ 1143.711115][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9278'. [ 1143.727028][ T7237] netlink: 'syz.3.9278': attribute type 29 has an invalid length. [ 1143.734890][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9278'. [ 1143.744039][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9278'. [ 1143.764903][ T6549] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1143.772524][ T6549] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1143.802586][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9278'. [ 1143.813084][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9278'. [ 1143.822753][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9278'. [ 1143.880021][ T6528] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1144.194184][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 1144.486561][ T7257] bond2: option lp_interval: invalid value (0) [ 1144.492893][ T7257] bond2: option lp_interval: allowed values 1 - 2147483647 [ 1144.591080][ T7257] bond2 (unregistering): Released all slaves [ 1144.824736][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1145.747422][ T7291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1145.775762][ T7291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1145.852166][ T7291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1145.865388][ T7291] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1145.889002][ T7291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1145.954735][ T7291] veth1_vlan: left promiscuous mode [ 1145.963163][ T7291] veth0_vlan: left promiscuous mode [ 1145.972921][ T7291] veth0_vlan: entered promiscuous mode [ 1145.982415][ T7291] veth1_vlan: entered promiscuous mode [ 1146.006372][ T7291] veth1_macvtap: left promiscuous mode [ 1146.014538][ T7291] veth0_macvtap: entered promiscuous mode [ 1146.022175][ T7291] veth1_macvtap: entered promiscuous mode [ 1146.036308][ T7291] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1146.047898][ T7291] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1146.057629][ T7291] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1146.067160][ T7291] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1146.083913][ T6546] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.091143][ T6546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1146.124808][ T6546] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.132070][ T6546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1146.394211][ T7301] syzkaller0: entered promiscuous mode [ 1146.407244][ T7301] syzkaller0: entered allmulticast mode [ 1146.426980][ T7301] dummy0: entered allmulticast mode [ 1147.351334][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 1147.719904][ T7344] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1147.752765][ T7344] veth5: left promiscuous mode [ 1147.786290][ T7344] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1147.819858][T12570] hid (null): unknown global tag 0xb4 [ 1147.834252][T12570] hid (null): unknown global tag 0xd [ 1147.846169][T12570] hid-generic 0005:0001:0040.0002: unexpected long global item [ 1147.856153][T12570] hid-generic 0005:0001:0040.0002: probe with driver hid-generic failed with error -22 [ 1147.989876][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1148.104058][ T7370] validate_nla: 23 callbacks suppressed [ 1148.104078][ T7370] netlink: 'syz.4.9316': attribute type 21 has an invalid length. [ 1148.181483][ T7376] netlink: 'syz.0.9321': attribute type 25 has an invalid length. [ 1148.191281][ T7376] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1148.250805][ T6528] net_ratelimit: 45 callbacks suppressed [ 1148.250825][ T6528] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1148.280647][ T6528] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1148.369478][ T6546] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1148.387012][ T7386] netlink: 'syz.0.9322': attribute type 1 has an invalid length. [ 1148.395112][ T6546] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1148.465065][ T7388] __nla_validate_parse: 31 callbacks suppressed [ 1148.465102][ T7388] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9325'. [ 1148.484794][ T7388] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9325'. [ 1148.539544][ T6522] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1148.590682][ T6546] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1148.705663][ T6528] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1148.718164][ T6548] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1148.733115][ T6528] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1148.769789][ T7407] netlink: 'syz.0.9332': attribute type 25 has an invalid length. [ 1148.778560][ T7407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9332'. [ 1148.787633][ T7407] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1148.923851][ T6522] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1149.038690][ T7422] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9337'. [ 1149.047706][ T7422] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9337'. [ 1149.267940][ T7436] netlink: 'syz.2.9345': attribute type 25 has an invalid length. [ 1149.279978][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9345'. [ 1149.326159][ T6525] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1149.333894][ T7436] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1149.508067][ T7443] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9346'. [ 1149.646569][ T7445] gretap2: entered promiscuous mode [ 1149.683913][ T7455] bridge0: port 1(batadv1) entered blocking state [ 1149.703056][ T7455] bridge0: port 1(batadv1) entered disabled state [ 1149.709780][ T7455] batadv1: entered allmulticast mode [ 1149.716923][ T7455] batadv1: entered promiscuous mode [ 1149.862610][ T7463] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9353'. [ 1149.883124][ T7463] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9353'. [ 1150.030365][ T7468] netlink: 'syz.2.9357': attribute type 25 has an invalid length. [ 1150.038313][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9357'. [ 1150.047187][ T7468] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1150.190124][ T6525] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1150.201402][ T6525] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1150.293042][ T7482] xt_hashlimit: size too large, truncated to 1048576 [ 1150.546612][ T7493] bond0: entered promiscuous mode [ 1150.551988][ T7493] bond_slave_0: entered promiscuous mode [ 1150.558807][ T7493] bond_slave_1: entered promiscuous mode [ 1150.569142][ T7493] bond0: left promiscuous mode [ 1150.579034][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1150.581372][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1150.610876][ T7493] bond_slave_0: left promiscuous mode [ 1150.617630][ T7493] bond_slave_1: left promiscuous mode [ 1150.807267][ T7504] netlink: 'syz.4.9367': attribute type 12 has an invalid length. [ 1151.391507][ T7528] netlink: 'syz.3.9376': attribute type 1 has an invalid length. [ 1151.664570][ T7533] bridge_slave_0: left allmulticast mode [ 1151.670273][ T7533] bridge_slave_0: left promiscuous mode [ 1151.709955][ T7533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.779542][ T7533] bridge_slave_1: left allmulticast mode [ 1151.785241][ T7533] bridge_slave_1: left promiscuous mode [ 1151.816304][ T7541] netlink: 'syz.3.9379': attribute type 9 has an invalid length. [ 1151.834506][ T7533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.861405][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1151.888629][ T7533] bond0: (slave bond_slave_0): Releasing backup interface [ 1151.939450][ T7533] bond0: (slave bond_slave_1): Releasing backup interface [ 1151.958561][ T7533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1151.966109][ T7533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1152.006407][ T7543] lo speed is unknown, defaulting to 1000 [ 1152.757694][ T7557] netlink: 'syz.3.9387': attribute type 1 has an invalid length. [ 1153.402542][ T6549] net_ratelimit: 54 callbacks suppressed [ 1153.402565][ T6549] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1153.466531][ T6549] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1153.519799][ T6548] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1153.580243][ T6546] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1153.636907][ T6546] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1153.697782][ T6548] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1153.773408][ T6522] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1153.798034][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1153.841121][ T6522] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1153.955406][ T6549] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1154.020489][ T6546] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1157.355840][ T7597] netlink: 'syz.2.9398': attribute type 2 has an invalid length. [ 1157.518451][ T7612] Cannot find set identified by id 0 to match [ 1157.806992][ T7628] netlink: 'syz.0.9408': attribute type 6 has an invalid length. [ 1158.324680][ T7643] netlink: 'syz.4.9411': attribute type 11 has an invalid length. [ 1158.361509][ T7643] __nla_validate_parse: 9 callbacks suppressed [ 1158.361531][ T7643] netlink: 4320 bytes leftover after parsing attributes in process `syz.4.9411'. [ 1158.413714][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9411'. [ 1158.459478][ T6548] net_ratelimit: 39 callbacks suppressed [ 1158.459498][ T6548] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1158.499787][ T6525] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1158.551956][ T6528] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1158.621266][ T7659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9415'. [ 1158.660616][ T6546] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1158.736952][ T7669] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1158.758364][ T7672] netlink: 'syz.2.9420': attribute type 10 has an invalid length. [ 1158.767667][ T7672] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9420'. [ 1158.793172][ T7672] bond0: entered promiscuous mode [ 1158.798303][ T7672] : entered promiscuous mode [ 1158.803782][ T7672] bond_slave_1: entered promiscuous mode [ 1158.839228][ T7672] bridge0: port 3(bond0) entered blocking state [ 1158.859729][ T7672] bridge0: port 3(bond0) entered disabled state [ 1158.873027][ T7672] bond0: entered allmulticast mode [ 1158.879815][ T7672] : entered allmulticast mode [ 1158.887759][ T7672] bond_slave_1: entered allmulticast mode [ 1158.900099][ T7672] bridge0: port 3(bond0) entered blocking state [ 1158.906519][ T7672] bridge0: port 3(bond0) entered listening state [ 1158.923096][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9423'. [ 1158.939812][ T6528] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1158.957572][ T7681] netlink: 220 bytes leftover after parsing attributes in process `syz.4.9424'. [ 1158.993971][ T6546] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1159.116859][ T6546] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1159.216668][ T6549] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1159.227814][ T6522] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1159.753141][ T7726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1159.805701][ T7732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9434'. [ 1159.827378][ T7726] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1159.838759][ T7726] bridge0: port 1(batadv1) entered blocking state [ 1159.845324][ T7726] bridge0: port 1(batadv1) entered forwarding state [ 1159.852189][ T7726] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1159.862875][ T7732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1159.905825][ T7732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1159.929209][ T7732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1159.940621][ T7732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1159.958826][ T7738] netlink: 87 bytes leftover after parsing attributes in process `syz.4.9436'. [ 1159.999337][ T6548] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1160.055313][ T7727] lo speed is unknown, defaulting to 1000 [ 1160.345170][ T6528] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x69 [ 1160.399392][ T7750] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1160.686235][ T7771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9447'. [ 1160.713268][ T7773] netlink: 87 bytes leftover after parsing attributes in process `syz.0.9448'. [ 1160.737586][ T7771] team1: entered promiscuous mode [ 1160.743842][ T7771] team1: entered allmulticast mode [ 1160.749397][ T7771] 8021q: adding VLAN 0 to HW filter on device team1 [ 1160.897361][ T7774] team2: entered promiscuous mode [ 1160.924833][ T7774] team2: entered allmulticast mode [ 1160.945110][ T7774] 8021q: adding VLAN 0 to HW filter on device team2 [ 1160.960677][ T7783] netlink: 'syz.4.9452': attribute type 1 has an invalid length. [ 1161.044938][ T7783] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1161.163954][ T7797] gtp0: entered allmulticast mode [ 1161.442351][ T7798] bond8 (unregistering): Released all slaves [ 1162.634348][ T7843] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1162.726291][ T7852] netlink: 'syz.2.9475': attribute type 6 has an invalid length. [ 1162.746440][ T7852] netlink: 'syz.2.9475': attribute type 7 has an invalid length. [ 1162.757293][ T7852] netlink: 'syz.2.9475': attribute type 8 has an invalid length. [ 1162.767650][ T7852] netlink: 'syz.2.9475': attribute type 15 has an invalid length. [ 1163.244058][ T7868] lo speed is unknown, defaulting to 1000 [ 1163.380250][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1163.506320][ T7875] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1163.514843][ T7875] __nla_validate_parse: 14 callbacks suppressed [ 1163.514861][ T7875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9485'. [ 1163.649863][ T6548] net_ratelimit: 52 callbacks suppressed [ 1163.649885][ T6548] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1163.753317][ T7904] gretap2: left promiscuous mode [ 1163.762167][ T6548] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1163.770519][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1163.821121][ T6525] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1163.830074][ T6549] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1163.861259][ T6525] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1163.950026][ T7908] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1164.043864][ T6549] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1164.115616][ T6525] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1164.137560][ T7928] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9500'. [ 1164.158571][ T7928] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9500'. [ 1164.182676][ T7935] netlink: 'syz.0.9497': attribute type 1 has an invalid length. [ 1164.282113][ T7924] netlink: 'syz.2.9498': attribute type 1 has an invalid length. [ 1164.306375][ T7935] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1164.354419][ T7925] bond1: (slave geneve2): making interface the new active one [ 1164.363383][ T7925] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1164.372093][ T7919] netlink: 'syz.0.9497': attribute type 4 has an invalid length. [ 1164.394735][ T7937] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9501'. [ 1164.396234][ T7941] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9501'. [ 1164.524996][ T7938] bond6: (slave gretap3): making interface the new active one [ 1164.571638][ T7937] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9501'. [ 1164.581151][ T7938] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 1164.604405][ T7953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9503'. [ 1164.744543][ T7958] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9505'. [ 1164.784694][ T7961] netlink: 'syz.0.9506': attribute type 1 has an invalid length. [ 1164.792463][ T7961] netlink: 248 bytes leftover after parsing attributes in process `syz.0.9506'. [ 1164.884073][ T7968] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1164.894148][ T6522] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1164.901601][ T6522] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1164.963027][ T7970] lo speed is unknown, defaulting to 1000 [ 1164.991236][ T6528] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1165.176032][ T7970] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9509'. [ 1165.205268][ T7974] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1165.241423][ T7976] syzkaller0: entered promiscuous mode [ 1165.247174][ T7976] syzkaller0: entered allmulticast mode [ 1165.313702][ T7976] tipc: Enabled bearer , priority 0 [ 1165.337443][ T7975] tipc: Resetting bearer [ 1165.384313][ T7975] tipc: Disabling bearer [ 1165.853913][ T8004] netlink: 'syz.4.9518': attribute type 1 has an invalid length. [ 1166.069717][ T8011] xt_l2tp: v2 doesn't support IP mode [ 1166.523311][ T8011] lo speed is unknown, defaulting to 1000 [ 1171.359516][ T6528] net_ratelimit: 18 callbacks suppressed [ 1171.359534][ T6528] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1171.397056][ T6528] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1171.565225][ T8063] __nla_validate_parse: 8 callbacks suppressed [ 1171.565259][ T8063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9531'. [ 1171.669761][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1171.733065][ T8071] IPVS: set_ctl: invalid protocol: 43 100.1.1.5:20001 [ 1171.987786][ T8077] netlink: 'syz.4.9533': attribute type 1 has an invalid length. [ 1172.062466][ T8061] bridge0: port 3(bond0) entered disabled state [ 1172.069908][ T8061] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.078653][ T8061] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.627333][ T8061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1172.682013][ T8061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1172.950534][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 1173.390103][ T8061] batman_adv: batadv0: Interface deactivated: vlan2 [ 1173.610089][ T8061] gretap1: left allmulticast mode [ 1173.736307][ T6528] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.770621][ T6528] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1173.788046][ T6522] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.799946][ T6522] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.810086][ T6522] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.911552][ T6522] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1174.049740][ T8086] bond3: option arp_all_targets: invalid value (3) [ 1174.070352][ T8086] bond3 (unregistering): Released all slaves [ 1174.104504][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9541'. [ 1174.236202][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1174.433787][ T8087] bond3: option arp_all_targets: invalid value (3) [ 1174.816700][ T8087] bond3 (unregistering): Released all slaves [ 1175.079544][ T8113] netlink: 11 bytes leftover after parsing attributes in process `syz.0.9544'. [ 1175.100630][ T6518] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1175.259579][ T6518] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1175.361626][ T8129] syzkaller0: entered promiscuous mode [ 1175.367149][ T8129] syzkaller0: entered allmulticast mode [ 1175.465238][ T8135] bridge0: port 3(bond0) entered blocking state [ 1175.471756][ T8135] bridge0: port 3(bond0) entered listening state [ 1175.478809][ T8135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1175.505007][ T8135] 8021q: adding VLAN 0 to HW filter on device team0 [ 1175.516812][ T8135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1175.549157][ T8135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1175.557866][ T8135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1175.567262][ T8135] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1175.577617][ T8135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1175.591090][ T8135] veth1_vlan: left promiscuous mode [ 1175.634132][ T8135] veth0_vlan: left promiscuous mode [ 1175.642145][ T8135] veth0_vlan: entered promiscuous mode [ 1175.649976][ T8135] veth1_vlan: entered promiscuous mode [ 1175.661441][ T8135] veth1_macvtap: left promiscuous mode [ 1175.668775][ T8135] veth0_macvtap: left promiscuous mode [ 1175.675632][ T8135] veth0_macvtap: entered promiscuous mode [ 1175.682812][ T8135] veth1_macvtap: entered promiscuous mode [ 1175.695506][ T8135] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1175.703843][ T8135] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1175.733931][ T8135] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1175.742440][ T8135] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1175.753743][ T8135] batman_adv: batadv0: Interface activated: vlan2 [ 1175.761155][ T8135] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1175.774081][ T8135] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1175.780115][ T6546] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1175.783064][ T8135] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1175.798642][ T8135] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1175.808725][ T8135] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1175.821804][ T8135] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1175.829899][ T6544] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1175.849137][ T6546] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1175.893835][ T8140] tipc: Enabled bearer , priority 0 [ 1175.900219][ T6548] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1175.925029][ T6528] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.932334][ T6528] bridge0: port 1(bridge_slave_0) entered listening state [ 1175.943531][ T6528] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.950757][ T6528] bridge0: port 2(bridge_slave_1) entered listening state [ 1176.007660][ T6547] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.020592][ T6547] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.030372][ T8152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9556'. [ 1176.088003][ T8128] tipc: Resetting bearer [ 1176.154129][ T8128] tipc: Disabling bearer [ 1176.192126][ T6547] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.261753][ T6547] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.273639][ T6518] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1176.302899][ T6518] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1176.317308][ T8164] lo speed is unknown, defaulting to 1000 [ 1176.324072][ T6518] ip6_tunnel:  xmit: Local address not yet configured! [ 1176.330563][ T1540] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1176.332279][ T6518] ip6_tunnel:  xmit: Local address not yet configured! [ 1176.379822][ T6546] net_ratelimit: 7 callbacks suppressed [ 1176.379843][ T6546] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1176.394353][ T1540] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1176.399308][ T1555] ip6_tunnel:  xmit: Local address not yet configured! [ 1176.402209][ T6528] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1176.415073][ T8170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1176.439645][ T6528] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1176.475657][ T8171] syzkaller0: entered promiscuous mode [ 1176.481174][ T8171] syzkaller0: entered allmulticast mode [ 1176.485456][ T8170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1176.499038][ T6518] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1176.607509][ T6546] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1176.612026][ T6547] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1176.622403][ T6547] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1176.725338][ T6546] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1176.775980][ T1527] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1176.847720][ T1555] ip6_tunnel:  xmit: Local address not yet configured! [ 1176.859766][ T6544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1176.880179][ T6544] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1176.964293][ T8194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1177.077695][T16876] ip6_tunnel:  xmit: Local address not yet configured! [ 1177.085515][T16876] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1177.269020][ T8202] netlink: 'syz.0.9570': attribute type 3 has an invalid length. [ 1177.274006][T16876] ip6_tunnel:  xmit: Local address not yet configured! [ 1177.285333][ T1555] ip6_tunnel:  xmit: Local address not yet configured! [ 1177.320463][ T42] ip6_tunnel:  xmit: Local address not yet configured! [ 1177.328095][ T42] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1177.570145][ T1527] ip6_tunnel:  xmit: Local address not yet configured! [ 1177.579600][ T1527] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1177.659155][ T8216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9575'. [ 1177.761936][ T8220] xt_hashlimit: size too large, truncated to 1048576 [ 1178.163523][ T8233] syzkaller0: entered promiscuous mode [ 1178.169133][ T8233] syzkaller0: entered allmulticast mode [ 1178.374209][ T8246] batadv_slave_1: entered promiscuous mode [ 1178.398597][ T8245] batadv_slave_1: left promiscuous mode [ 1178.415298][ T8249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1178.467651][ T8251] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9585'. [ 1178.480797][ T8251] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9585'. [ 1178.489823][ T8251] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9585'. [ 1178.497073][ T8253] Bluetooth: MGMT ver 1.23 [ 1178.571057][ T8257] bond0: left allmulticast mode [ 1178.575965][ T8257] : left allmulticast mode [ 1178.580691][ T8257] bond_slave_1: left allmulticast mode [ 1178.587424][ T8257] bond0: left promiscuous mode [ 1178.592292][ T8257] : left promiscuous mode [ 1178.596954][ T8257] bond_slave_1: left promiscuous mode [ 1178.602738][ T8257] bridge0: port 3(bond0) entered disabled state [ 1178.612971][ T8257] bridge_slave_0: left allmulticast mode [ 1178.618650][ T8257] bridge_slave_0: left promiscuous mode [ 1178.624357][ T8257] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.633513][ T8257] bridge_slave_1: left allmulticast mode [ 1178.679846][ T8257] bridge_slave_1: left promiscuous mode [ 1178.685982][ T8257] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.701352][ T8257] bond0: (slave 45): Releasing backup interface [ 1178.742441][ T8257] bond0: (slave bond_slave_1): Releasing backup interface [ 1178.775339][ T8257] team0: Port device team_slave_0 removed [ 1178.802456][ T8257] team0: Port device team_slave_1 removed [ 1178.816904][ T8257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1178.833177][ T8257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1178.844916][ T8257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1178.853489][ T8257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1179.163095][ T8269] netlink: 'syz.2.9591': attribute type 1 has an invalid length. [ 1179.171931][ T8269] netlink: 11 bytes leftover after parsing attributes in process `syz.2.9591'. [ 1179.273090][ T8272] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1179.430038][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9594'. [ 1179.646546][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9598'. [ 1179.695935][ T8285] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9599'. [ 1179.861226][ T8291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9601'. [ 1179.873707][ T8295] netlink: 'syz.0.9602': attribute type 1 has an invalid length. [ 1179.893245][ T8295] netlink: 11 bytes leftover after parsing attributes in process `syz.0.9602'. [ 1180.306351][ T5630] block nbd1: Receive control failed (result -1) [ 1180.317235][ T5630] [ 1180.319596][ T5630] ====================================================== [ 1180.326619][ T5630] WARNING: possible circular locking dependency detected [ 1180.333650][ T5630] syzkaller #0 Not tainted [ 1180.338230][ T5630] ------------------------------------------------------ [ 1180.345252][ T5630] kworker/u9:3/5630 is trying to acquire lock: [ 1180.351400][ T5630] ffff888056920fe0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 1180.360839][ T5630] [ 1180.360839][ T5630] but task is already holding lock: [ 1180.368198][ T5630] ffff88806755fc68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 1180.377230][ T5630] [ 1180.377230][ T5630] which lock already depends on the new lock. [ 1180.377230][ T5630] [ 1180.387729][ T5630] [ 1180.387729][ T5630] the existing dependency chain (in reverse order) is: [ 1180.396726][ T5630] [ 1180.396726][ T5630] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1180.404455][ T5630] __mutex_lock+0x19d/0x1550 [ 1180.409565][ T5630] nbd_queue_rq+0x373/0x1150 [ 1180.414878][ T5630] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1180.421055][ T5630] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1180.427968][ T5630] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1180.434475][ T5630] blk_mq_run_work_fn+0x16c/0x300 [ 1180.440011][ T5630] process_scheduled_works+0xa8e/0x14e0 [ 1180.446253][ T5630] worker_thread+0xa47/0xfb0 [ 1180.451360][ T5630] kthread+0x388/0x470 [ 1180.455942][ T5630] ret_from_fork+0x514/0xb70 [ 1180.461070][ T5630] ret_from_fork_asm+0x1a/0x30 [ 1180.466345][ T5630] [ 1180.466345][ T5630] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1180.473631][ T5630] __mutex_lock+0x19d/0x1550 [ 1180.478731][ T5630] nbd_queue_rq+0xc1/0x1150 [ 1180.483741][ T5630] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1180.489800][ T5630] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1180.496637][ T5630] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1180.503345][ T5630] blk_mq_run_work_fn+0x16c/0x300 [ 1180.508889][ T5630] process_scheduled_works+0xa8e/0x14e0 [ 1180.515075][ T5630] worker_thread+0xa47/0xfb0 [ 1180.520178][ T5630] kthread+0x388/0x470 [ 1180.524755][ T5630] ret_from_fork+0x514/0xb70 [ 1180.529862][ T5630] ret_from_fork_asm+0x1a/0x30 [ 1180.535230][ T5630] [ 1180.535230][ T5630] -> #4 (set->srcu){.+.+}-{0:0}: [ 1180.542439][ T5630] __synchronize_srcu+0xc9/0x2f0 [ 1180.547908][ T5630] elevator_switch+0x1e8/0x7b0 [ 1180.553294][ T5630] elevator_change+0x2fa/0x480 [ 1180.558577][ T5630] elevator_set_default+0x375/0x440 [ 1180.564305][ T5630] blk_register_queue+0x3f3/0x4e0 [ 1180.569970][ T5630] __add_disk+0x6cb/0xe30 [ 1180.574808][ T5630] add_disk_fwnode+0xfb/0x4b0 [ 1180.579996][ T5630] nbd_dev_add+0x733/0xb60 [ 1180.584923][ T5630] nbd_init+0x15f/0x1e0 [ 1180.589790][ T5630] do_one_initcall+0x250/0x870 [ 1180.595371][ T5630] do_initcall_level+0x10a/0x1a0 [ 1180.600926][ T5630] do_initcalls+0x59/0xa0 [ 1180.605874][ T5630] kernel_init_freeable+0x29d/0x3e0 [ 1180.611586][ T5630] kernel_init+0x1d/0x1d0 [ 1180.616427][ T5630] ret_from_fork+0x514/0xb70 [ 1180.621532][ T5630] ret_from_fork_asm+0x1a/0x30 [ 1180.626815][ T5630] [ 1180.626815][ T5630] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1180.634797][ T5630] __mutex_lock+0x19d/0x1550 [ 1180.639897][ T5630] elevator_change+0x1af/0x480 [ 1180.645175][ T5630] elevator_set_none+0xb5/0x140 [ 1180.650541][ T5630] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1180.656864][ T5630] nbd_start_device+0x189/0xb30 [ 1180.662227][ T5630] nbd_genl_connect+0x1597/0x1c10 [ 1180.667764][ T5630] genl_family_rcv_msg_doit+0x233/0x340 [ 1180.673828][ T5630] genl_rcv_msg+0x614/0x7a0 [ 1180.678853][ T5630] netlink_rcv_skb+0x226/0x4a0 [ 1180.684162][ T5630] genl_rcv+0x28/0x40 [ 1180.688658][ T5630] netlink_unicast+0x7bb/0x940 [ 1180.693937][ T5630] netlink_sendmsg+0x813/0xb40 [ 1180.699208][ T5630] sock_sendmsg_nosec+0x13a/0x180 [ 1180.704746][ T5630] ____sys_sendmsg+0x54e/0x850 [ 1180.710020][ T5630] ___sys_sendmsg+0x2a5/0x360 [ 1180.715209][ T5630] __x64_sys_sendmsg+0x1b1/0x290 [ 1180.720653][ T5630] do_syscall_64+0x174/0x580 [ 1180.725750][ T5630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.732241][ T5630] [ 1180.732241][ T5630] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1180.740849][ T5630] blk_alloc_queue+0x544/0x690 [ 1180.746169][ T5630] __blk_mq_alloc_disk+0x194/0x390 [ 1180.751822][ T5630] nbd_dev_add+0x494/0xb60 [ 1180.756753][ T5630] nbd_init+0x15f/0x1e0 [ 1180.761426][ T5630] do_one_initcall+0x250/0x870 [ 1180.766710][ T5630] do_initcall_level+0x10a/0x1a0 [ 1180.772254][ T5630] do_initcalls+0x59/0xa0 [ 1180.777129][ T5630] kernel_init_freeable+0x29d/0x3e0 [ 1180.782870][ T5630] kernel_init+0x1d/0x1d0 [ 1180.787707][ T5630] ret_from_fork+0x514/0xb70 [ 1180.792808][ T5630] ret_from_fork_asm+0x1a/0x30 [ 1180.798101][ T5630] [ 1180.798101][ T5630] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1180.805302][ T5630] fs_reclaim_acquire+0x71/0x100 [ 1180.810751][ T5630] __kmalloc_noprof+0xbc/0x720 [ 1180.816050][ T5630] tls_sw_sendmsg+0x599/0x2860 [ 1180.821419][ T5630] sock_sendmsg_nosec+0x90/0x180 [ 1180.826878][ T5630] sock_sendmsg+0x1ca/0x2d0 [ 1180.831900][ T5630] splice_to_socket+0xb5e/0x12a0 [ 1180.837350][ T5630] direct_splice_actor+0x101/0x160 [ 1180.843057][ T5630] splice_direct_to_actor+0x57b/0xcb0 [ 1180.848938][ T5630] do_splice_direct+0x195/0x290 [ 1180.854306][ T5630] do_sendfile+0x52e/0x7c0 [ 1180.859327][ T5630] __se_sys_sendfile64+0x144/0x1a0 [ 1180.864959][ T5630] do_syscall_64+0x174/0x580 [ 1180.870056][ T5630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.876482][ T5630] [ 1180.876482][ T5630] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 1180.884555][ T5630] __lock_acquire+0x1520/0x2cf0 [ 1180.889918][ T5630] lock_acquire+0x106/0x350 [ 1180.894957][ T5630] lock_sock_nested+0x41/0x100 [ 1180.900235][ T5630] inet_shutdown+0x6a/0x390 [ 1180.905257][ T5630] nbd_mark_nsock_dead+0x2cb/0x550 [ 1180.910882][ T5630] recv_work+0x1cee/0x1e10 [ 1180.915805][ T5630] process_scheduled_works+0xa8e/0x14e0 [ 1180.921865][ T5630] worker_thread+0xa47/0xfb0 [ 1180.927001][ T5630] kthread+0x388/0x470 [ 1180.931579][ T5630] ret_from_fork+0x514/0xb70 [ 1180.936678][ T5630] ret_from_fork_asm+0x1a/0x30 [ 1180.941959][ T5630] [ 1180.941959][ T5630] other info that might help us debug this: [ 1180.941959][ T5630] [ 1180.952174][ T5630] Chain exists of: [ 1180.952174][ T5630] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 1180.952174][ T5630] [ 1180.965210][ T5630] Possible unsafe locking scenario: [ 1180.965210][ T5630] [ 1180.972647][ T5630] CPU0 CPU1 [ 1180.978043][ T5630] ---- ---- [ 1180.983477][ T5630] lock(&nsock->tx_lock); [ 1180.987977][ T5630] lock(&cmd->lock); [ 1180.994559][ T5630] lock(&nsock->tx_lock); [ 1181.001566][ T5630] lock(sk_lock-AF_INET6-NBD); [ 1181.006507][ T5630] [ 1181.006507][ T5630] *** DEADLOCK *** [ 1181.006507][ T5630] [ 1181.014638][ T5630] 3 locks held by kworker/u9:3/5630: [ 1181.019903][ T5630] #0: ffff888027b57940 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1181.031301][ T5630] #1: ffffc900047cfc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1181.043046][ T5630] #2: ffff88806755fc68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 1181.052444][ T5630] [ 1181.052444][ T5630] stack backtrace: [ 1181.058320][ T5630] CPU: 0 UID: 0 PID: 5630 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 1181.058337][ T5630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1181.058348][ T5630] Workqueue: nbd1-recv recv_work [ 1181.058369][ T5630] Call Trace: [ 1181.058375][ T5630] [ 1181.058382][ T5630] dump_stack_lvl+0xe8/0x150 [ 1181.058402][ T5630] print_circular_bug+0x2e1/0x300 [ 1181.058422][ T5630] check_noncircular+0x12e/0x150 [ 1181.058443][ T5630] __lock_acquire+0x1520/0x2cf0 [ 1181.058461][ T5630] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 1181.058489][ T5630] ? preempt_schedule_notrace+0x57/0x90 [ 1181.058511][ T5630] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 1181.058531][ T5630] ? __pfx_inet_shutdown+0x10/0x10 [ 1181.058555][ T5630] ? inet_shutdown+0x6a/0x390 [ 1181.058574][ T5630] lock_acquire+0x106/0x350 [ 1181.058589][ T5630] ? inet_shutdown+0x6a/0x390 [ 1181.058614][ T5630] lock_sock_nested+0x41/0x100 [ 1181.058634][ T5630] ? inet_shutdown+0x6a/0x390 [ 1181.058655][ T5630] inet_shutdown+0x6a/0x390 [ 1181.058677][ T5630] nbd_mark_nsock_dead+0x2cb/0x550 [ 1181.058696][ T5630] recv_work+0x1cee/0x1e10 [ 1181.058718][ T5630] ? lockdep_unlock+0x5d/0xd0 [ 1181.058730][ T5630] ? __lock_acquire+0x13e8/0x2cf0 [ 1181.058748][ T5630] ? __pfx_recv_work+0x10/0x10 [ 1181.058767][ T5630] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1181.058788][ T5630] ? process_scheduled_works+0xa20/0x14e0 [ 1181.058812][ T5630] ? rcu_is_watching+0x15/0xb0 [ 1181.058830][ T5630] ? process_scheduled_works+0xa20/0x14e0 [ 1181.058849][ T5630] process_scheduled_works+0xa8e/0x14e0 [ 1181.058878][ T5630] ? __pfx_process_scheduled_works+0x10/0x10 [ 1181.058900][ T5630] ? assign_work+0x3cf/0x5d0 [ 1181.058921][ T5630] worker_thread+0xa47/0xfb0 [ 1181.058950][ T5630] kthread+0x388/0x470 [ 1181.058965][ T5630] ? __pfx_worker_thread+0x10/0x10 [ 1181.058985][ T5630] ? __pfx_kthread+0x10/0x10 [ 1181.059001][ T5630] ret_from_fork+0x514/0xb70 [ 1181.059019][ T5630] ? __pfx_ret_from_fork+0x10/0x10 [ 1181.059034][ T5630] ? __switch_to+0xc89/0x1420 [ 1181.059057][ T5630] ? __pfx_kthread+0x10/0x10 [ 1181.059072][ T5630] ret_from_fork_asm+0x1a/0x30 [ 1181.059095][ T5630] [ 1181.433689][ T6528] net_ratelimit: 55 callbacks suppressed [ 1181.433727][ T6528] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1181.448944][ T6528] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1181.551312][ T6547] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1181.579968][ T6547] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1181.669891][ T6546] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1181.689472][ T6546] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1181.780378][ T6547] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1181.799674][ T6547] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1181.889818][ T6544] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1181.909460][ C1] ip6_tnl_xmit_ctl: 10 callbacks suppressed [ 1181.909480][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1181.924771][ T6544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1184.629866][ T2521] Bluetooth: hci3: command 0x0406 tx timeout [ 1186.389913][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1186.479774][ T6546] net_ratelimit: 79 callbacks suppressed [ 1186.479799][ T6546] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1186.510006][ T6547] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1186.609669][ T6546] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1186.629612][ T6546] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1186.719508][ T6547] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1186.739495][ T6547] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1186.829521][ T6518] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1186.849658][ T6518] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1186.939481][ T6544] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1186.959509][ T6518] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1189.590911][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 1189.598733][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!